arm64: move tools.func changes from VE to VED

Adguard, Bazarr, Homeassistant, jellyfin, pihole, rdtclient, vaultwarden are working
kima-hub is unported
bentopdf is untested
lubelogger is broken

.github/workflows/stale_pr_close.yml

@@ -9,7 +9,7 @@ on:
 
 jobs:
   stale-prs:
-    runs-on: ubuntu-latest
+    runs-on: self-hosted
     permissions:
       pull-requests: write
       issues: write

.gitignore

@@ -13,3 +13,4 @@ vm/debian-13-vm.sh
 vm/vm-manager.sh
 vm/vm-manager.sh
 vm/debian-13-vm.sh
+.DS_Store

ct/arm.sh

@@ -0,0 +1,73 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVED/main/misc/build.func)
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVED/raw/main/LICENSE
+# Source: https://github.com/automatic-ripping-machine/automatic-ripping-machine
+
+APP="ARM"
+var_tags="${var_tags:-media;ripping;automation}"
+var_cpu="${var_cpu:-4}"
+var_ram="${var_ram:-4096}"
+var_disk="${var_disk:-16}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_unprivileged="${var_unprivileged:-0}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -d /opt/arm ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  if check_for_gh_release "arm" "automatic-ripping-machine/automatic-ripping-machine"; then
+    msg_info "Stopping Service"
+    systemctl stop armui
+    msg_ok "Stopped Service"
+
+    msg_info "Backing up Data"
+    cp /opt/arm/arm.yaml /opt/arm_yaml.bak
+    msg_ok "Backed up Data"
+
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "arm" "automatic-ripping-machine/automatic-ripping-machine" "tarball"
+
+    msg_info "Rebuilding Python Environment"
+    cd /opt/arm
+    $STD uv venv /opt/arm/venv
+    $STD uv pip install --python /opt/arm/venv/bin/python \
+      -r <(curl -fsSL https://raw.githubusercontent.com/automatic-ripping-machine/arm-dependencies/main/requirements.txt) \
+      -r requirements.txt
+    msg_ok "Rebuilt Python Environment"
+
+    msg_info "Restoring Data"
+    cp /opt/arm_yaml.bak /opt/arm/arm.yaml
+    chmod +x /opt/arm/scripts/thickclient/*.sh 2>/dev/null || true
+    rm -f /opt/arm_yaml.bak
+    msg_ok "Restored Data"
+
+    msg_info "Starting Service"
+    systemctl start armui
+    msg_ok "Started Service"
+    msg_ok "Updated successfully!"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:8080${CL}"

ct/booklore.sh

@@ -1,113 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVED/main/misc/build.func)
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/booklore-app/BookLore
-
-APP="BookLore"
-var_tags="${var_tags:-books;library}"
-var_cpu="${var_cpu:-3}"
-var_ram="${var_ram:-3072}"
-var_disk="${var_disk:-7}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -d /opt/booklore ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "booklore" "booklore-app/BookLore"; then
-    JAVA_VERSION="25" setup_java
-    NODE_VERSION="22" setup_nodejs
-    setup_mariadb
-    setup_yq
-
-    msg_info "Stopping Service"
-    systemctl stop booklore
-    msg_ok "Stopped Service"
-
-    if grep -qE "^BOOKLORE_(DATA_PATH|BOOKDROP_PATH|BOOKS_PATH|PORT)=" /opt/booklore_storage/.env 2>/dev/null; then
-      msg_info "Migrating old environment variables"
-      sed -i 's/^BOOKLORE_DATA_PATH=/APP_PATH_CONFIG=/g' /opt/booklore_storage/.env
-      sed -i 's/^BOOKLORE_BOOKDROP_PATH=/APP_BOOKDROP_FOLDER=/g' /opt/booklore_storage/.env
-      sed -i '/^BOOKLORE_BOOKS_PATH=/d' /opt/booklore_storage/.env
-      sed -i '/^BOOKLORE_PORT=/d' /opt/booklore_storage/.env
-      msg_ok "Migrated old environment variables"
-    fi
-
-    msg_info "Backing up old installation"
-    mv /opt/booklore /opt/booklore_bak
-    msg_ok "Backed up old installation"
-
-    fetch_and_deploy_gh_release "booklore" "booklore-app/BookLore" "tarball"
-
-    msg_info "Building Frontend"
-    cd /opt/booklore/booklore-ui
-    $STD npm install --force
-    $STD npm run build --configuration=production
-    msg_ok "Built Frontend"
-
-    msg_info "Embedding Frontend into Backend"
-    mkdir -p /opt/booklore/booklore-api/src/main/resources/static
-    cp -r /opt/booklore/booklore-ui/dist/booklore/browser/* /opt/booklore/booklore-api/src/main/resources/static/
-    msg_ok "Embedded Frontend into Backend"
-
-    msg_info "Building Backend"
-    cd /opt/booklore/booklore-api
-    APP_VERSION=$(get_latest_github_release "booklore-app/BookLore")
-    yq eval ".app.version = \"${APP_VERSION}\"" -i src/main/resources/application.yaml
-    $STD ./gradlew clean build -x test --no-daemon
-    mkdir -p /opt/booklore/dist
-    JAR_PATH=$(find /opt/booklore/booklore-api/build/libs -maxdepth 1 -type f -name "booklore-api-*.jar" ! -name "*plain*" | head -n1)
-    if [[ -z "$JAR_PATH" ]]; then
-      msg_error "Backend JAR not found"
-      exit
-    fi
-    cp "$JAR_PATH" /opt/booklore/dist/app.jar
-    msg_ok "Built Backend"
-
-    if systemctl is-active --quiet nginx 2>/dev/null; then
-      msg_info "Removing Nginx (no longer needed)"
-      systemctl disable --now nginx
-      $STD apt-get purge -y nginx nginx-common
-      msg_ok "Removed Nginx"
-    fi
-
-    if ! grep -q "^SERVER_PORT=" /opt/booklore_storage/.env 2>/dev/null; then
-      echo "SERVER_PORT=6060" >>/opt/booklore_storage/.env
-    fi
-
-    sed -i 's|ExecStart=/usr/bin/java -jar|ExecStart=/usr/bin/java -XX:+UseG1GC -XX:+UseStringDeduplication -XX:+UseCompactObjectHeaders -jar|' /etc/systemd/system/booklore.service
-    systemctl daemon-reload
-
-    msg_info "Starting Service"
-    systemctl start booklore
-    rm -rf /opt/booklore_bak
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:6060${CL}"

ct/caddymanager.sh

@@ -29,10 +29,40 @@ function update_script() {
     exit
   fi
 
-  msg_info "Updating Debian LXC"
-  $STD apt update
-  $STD apt upgrade -y
-  msg_ok "Updated Debian LXC"
+  if check_for_gh_release "caddymanager" "caddymanager/caddymanager"; then
+    msg_info "Stopping Service"
+    systemctl stop caddymanager-backend
+    systemctl stop caddymanager-frontend
+    msg_ok "Stopped Service"
+
+    msg_info "Backing up configuration"
+    cp /opt/caddymanager/caddymanager.env /opt/
+    cp /opt/caddymanager/caddymanager.sqlite /opt/
+    cp /opt/caddymanager/frontend/Caddyfile /opt/
+    msg_ok "Backed up configuration"
+
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "caddymanager" "caddymanager/caddymanager" "tarball"
+
+    msg_info "Installing CaddyManager"
+    cd /opt/caddymanager/backend
+    $STD npm install
+    cd /opt/caddymanager/frontend
+    $STD npm install
+    $STD npm run build
+    msg_ok "Installed CaddyManager"
+
+    msg_info "Restoring configuration"
+    mv /opt/caddymanager.env /opt/caddymanager/
+    mv /opt/caddymanager.sqlite /opt/caddymanager/
+    mv -f /opt/Caddyfile /opt/caddymanager/frontend/
+    msg_ok "Restored configuration"
+
+    msg_info "Starting Service"
+    systemctl start caddymanager-backend
+    systemctl start caddymanager-frontend
+    msg_ok "Started Service"
+    msg_ok "Updated successfully!"
+  fi
   cleanup_lxc
   exit
 }

ct/ddclient.sh

@@ -1,46 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVED/main/misc/build.func)
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: mitchscobell
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://ddclient.net/
-
-APP="ddclient"
-var_tags="${var_tags:-network}"
-var_cpu="${var_cpu:-1}"
-var_ram="${var_ram:-512}"
-var_disk="${var_disk:-2}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-  if [[ ! -f /etc/ddclient.conf ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  msg_info "Updating ddclient"
-  $STD apt update
-  $STD apt install --only-upgrade -y ddclient
-  $STD systemctl restart ddclient
-  msg_ok "Updated ddclient"
-  msg_ok "Updated successfully!"
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"

ct/frigate.sh

@@ -1,43 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVED/main/misc/build.func)
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Authors: MickLesk (CanbiZ) | Co-Author: remz1337
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://frigate.video/
-
-APP="Frigate"
-var_tags="${var_tags:-nvr}"
-var_cpu="${var_cpu:-4}"
-var_ram="${var_ram:-4096}"
-var_disk="${var_disk:-20}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-12}"
-var_unprivileged="${var_unprivileged:-0}"
-var_gpu="${var_gpu:-yes}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-  if [[ ! -f /etc/systemd/system/frigate.service ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-  msg_error "To update Frigate, create a new container and transfer your configuration."
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:5000${CL}"

ct/github-runner.sh

@@ -0,0 +1,69 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVED/main/misc/build.func)
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVED/raw/main/LICENSE
+# Source: https://github.com/actions/runner
+
+APP="GitHub-Runner"
+var_tags="${var_tags:-ci}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-2048}"
+var_disk="${var_disk:-8}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_unprivileged="${var_unprivileged:-1}"
+var_nesting="${var_nesting:-1}"
+var_keyctl="${var_keyctl:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -f /opt/actions-runner/run.sh ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit 1
+  fi
+
+  if check_for_gh_release "actions-runner" "actions/runner"; then
+    msg_info "Stopping Service"
+    systemctl stop actions-runner
+    msg_ok "Stopped Service"
+
+    msg_info "Backing up runner configuration"
+    BACKUP_DIR="/opt/actions-runner.backup"
+    mkdir -p "$BACKUP_DIR"
+    [[ -f /opt/actions-runner/.runner ]] && cp -a /opt/actions-runner/.runner "$BACKUP_DIR/"
+    [[ -f /opt/actions-runner/.credentials ]] && cp -a /opt/actions-runner/.credentials "$BACKUP_DIR/"
+    msg_ok "Backed up configuration"
+
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "actions-runner" "actions/runner" "prebuild" "latest" "/opt/actions-runner" "actions-runner-linux-x64-*.tar.gz"
+
+    msg_info "Restoring runner configuration"
+    [[ -f "$BACKUP_DIR/.runner" ]] && cp -a "$BACKUP_DIR/.runner" /opt/actions-runner/
+    [[ -f "$BACKUP_DIR/.credentials" ]] && cp -a "$BACKUP_DIR/.credentials" /opt/actions-runner/
+    rm -rf "$BACKUP_DIR"
+    msg_ok "Restored configuration"
+
+    msg_info "Starting Service"
+    systemctl start actions-runner
+    msg_ok "Started Service"
+    msg_ok "Updated successfully!"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} After first boot, run config.sh with your token and start the service.${CL}"

ct/headers/localagi

@@ -0,0 +1,6 @@
+    __                    __   ___   __________
+   / /   ____  ________ _/ /  /   | / ____/  _/
+  / /   / __ \/ ___/ __ `/ /  / /| |/ / __ / /
+ / /___/ /_/ / /__/ /_/ / /  / ___ / /_/ // /
+/_____/\____/\___/\__,_/_/  /_/  |_\____/___/
+

ct/headers/netbird

@@ -1,6 +0,0 @@
-    _   __     __  ____  _          __
-   / | / /__  / /_/ __ )(_)________/ /
-  /  |/ / _ \/ __/ __  / / ___/ __  / 
- / /|  /  __/ /_/ /_/ / / /  / /_/ /  
-/_/ |_/\___/\__/_____/_/_/   \__,_/   
-                                      

ct/headers/papra

@@ -1,6 +0,0 @@
-    ____                        
-   / __ \____ _____  _________ _
-  / /_/ / __ `/ __ \/ ___/ __ `/
- / ____/ /_/ / /_/ / /  / /_/ / 
-/_/    \__,_/ .___/_/   \__,_/  
-           /_/                  

ct/immich.sh

@@ -1,408 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVED/main/misc/build.func)
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: vhsdream
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://immich.app
-
-APP="immich"
-var_tags="${var_tags:-photos}"
-var_disk="${var_disk:-20}"
-var_cpu="${var_cpu:-4}"
-var_ram="${var_ram:-6144}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-var_gpu="${var_gpu:-yes}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-  if [[ ! -d /opt/immich ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-  if [[ -f /etc/apt/sources.list.d/immich.list ]]; then
-    msg_error "Wrong Debian version detected!"
-    msg_error "You must upgrade your LXC to Debian Trixie before updating."
-    msg_error "Please visit https://github.com/community-scripts/ProxmoxVE/discussions/7726 for details."
-    echo "${TAB3}  If you have upgraded your LXC to Trixie and you still see this message, please open an Issue in the Community-Scripts repo."
-    exit
-  fi
-
-  setup_uv
-  PNPM_VERSION="$(curl -fsSL "https://raw.githubusercontent.com/immich-app/immich/refs/heads/main/package.json" | jq -r '.packageManager | split("@")[1]')"
-  NODE_VERSION="24" NODE_MODULE="pnpm@${PNPM_VERSION}" setup_nodejs
-
-  if [[ ! -f /etc/apt/preferences.d/preferences ]]; then
-    msg_info "Adding Debian Testing repo"
-    sed -i 's/ trixie-updates/ trixie-updates testing/g' /etc/apt/sources.list.d/debian.sources
-    cat <<EOF >/etc/apt/preferences.d/preferences
-Package: *
-Pin: release a=unstable
-Pin-Priority: 450
-
-Package: *
-Pin:release a=testing
-Pin-Priority: 450
-EOF
-    if [[ -f /etc/apt/preferences.d/immich ]]; then
-      rm /etc/apt/preferences.d/immich
-    fi
-    $STD apt update
-    msg_ok "Added Debian Testing repo"
-  fi
-
-  if ! dpkg -l "libmimalloc3" | grep -q '3.1' || ! dpkg -l "libde265-dev" | grep -q '1.0.16'; then
-    msg_info "Installing/upgrading Testing repo packages"
-    $STD apt install -t testing libmimalloc3 libde265-dev -y
-    msg_ok "Installed/upgraded Testing repo packages"
-  fi
-
-  if [[ ! -f /etc/apt/sources.list.d/mise.list ]]; then
-    msg_info "Installing Mise"
-    curl -fSs https://mise.jdx.dev/gpg-key.pub | tee /etc/apt/keyrings/mise-archive-keyring.pub 1>/dev/null
-    echo "deb [signed-by=/etc/apt/keyrings/mise-archive-keyring.pub arch=amd64] https://mise.jdx.dev/deb stable main" >/etc/apt/sources.list.d/mise.list
-    $STD apt update
-    $STD apt install -y mise
-    msg_ok "Installed Mise"
-  fi
-
-  STAGING_DIR=/opt/staging
-  BASE_DIR=${STAGING_DIR}/base-images
-  SOURCE_DIR=${STAGING_DIR}/image-source
-  cd /tmp
-  if [[ -f ~/.intel_version ]]; then
-    curl -fsSLO https://raw.githubusercontent.com/immich-app/base-images/refs/heads/main/server/Dockerfile
-    readarray -t INTEL_URLS < <(
-      sed -n "/intel-[igc|opencl]/p" ./Dockerfile | awk '{print $2}'
-      sed -n "/libigdgmm12/p" ./Dockerfile | awk '{print $3}'
-    )
-    INTEL_RELEASE="$(grep "intel-opencl-icd_" ./Dockerfile | awk -F '_' '{print $2}')"
-    if [[ "$INTEL_RELEASE" != "$(cat ~/.intel_version)" ]]; then
-      msg_info "Updating Intel iGPU dependencies"
-      for url in "${INTEL_URLS[@]}"; do
-        curl -fsSLO "$url"
-      done
-      $STD apt-mark unhold libigdgmm12
-      $STD apt install -y ./libigdgmm12*.deb
-      rm ./libigdgmm12*.deb
-      $STD apt install -y ./*.deb
-      rm ./*.deb
-      $STD apt-mark hold libigdgmm12
-      dpkg-query -W -f='${Version}\n' intel-opencl-icd >~/.intel_version
-      msg_ok "Intel iGPU dependencies updated"
-    fi
-    rm ./Dockerfile
-  fi
-  if [[ -f ~/.immich_library_revisions ]]; then
-    libraries=("libjxl" "libheif" "libraw" "imagemagick" "libvips")
-    cd "$BASE_DIR"
-    msg_info "Checking for updates to custom image-processing libraries"
-    $STD git pull
-    for library in "${libraries[@]}"; do
-      compile_"$library"
-    done
-    msg_ok "Image-processing libraries up to date"
-  fi
-
-  RELEASE="v2.5.2"
-  if check_for_gh_tag "immich" "immich-app/immich" "${RELEASE}"; then
-    msg_info "Stopping Services"
-    systemctl stop immich-web
-    systemctl stop immich-ml
-    msg_ok "Stopped Services"
-    VCHORD_RELEASE="0.5.3"
-    if [[ ! -f ~/.vchord_version ]] || [[ "$VCHORD_RELEASE" != "$(cat ~/.vchord_version)" ]]; then
-      msg_info "Upgrading VectorChord"
-      curl -fsSL "https://github.com/tensorchord/vectorchord/releases/download/${VCHORD_RELEASE}/postgresql-16-vchord_${VCHORD_RELEASE}-1_amd64.deb" -o vchord.deb
-      $STD apt install -y ./vchord.deb
-      systemctl restart postgresql
-      $STD sudo -u postgres psql -d immich -c "ALTER EXTENSION vector UPDATE;"
-      $STD sudo -u postgres psql -d immich -c "ALTER EXTENSION vchord UPDATE;"
-      $STD sudo -u postgres psql -d immich -c "REINDEX INDEX face_index;"
-      $STD sudo -u postgres psql -d immich -c "REINDEX INDEX clip_index;"
-      echo "$VCHORD_RELEASE" >~/.vchord_version
-      rm ./vchord.deb
-      msg_ok "Upgraded VectorChord to v${VCHORD_RELEASE}"
-    fi
-    if ! dpkg -l | grep -q ccache; then
-      $STD apt install -yqq ccache
-    fi
-
-    INSTALL_DIR="/opt/${APP}"
-    UPLOAD_DIR="$(sed -n '/^IMMICH_MEDIA_LOCATION/s/[^=]*=//p' /opt/immich/.env)"
-    SRC_DIR="${INSTALL_DIR}/source"
-    APP_DIR="${INSTALL_DIR}/app"
-    PLUGIN_DIR="${APP_DIR}/corePlugin"
-    ML_DIR="${APP_DIR}/machine-learning"
-    GEO_DIR="${INSTALL_DIR}/geodata"
-
-    cp "$ML_DIR"/ml_start.sh "$INSTALL_DIR"
-    if grep -qs "set -a" "$APP_DIR"/bin/start.sh; then
-      cp "$APP_DIR"/bin/start.sh "$INSTALL_DIR"
-    else
-      cat <<EOF >"$INSTALL_DIR"/start.sh
-#!/usr/bin/env bash
-
-set -a
-. ${INSTALL_DIR}/.env
-set +a
-
-/usr/bin/node ${APP_DIR}/dist/main.js "\$@"
-EOF
-      chmod +x "$INSTALL_DIR"/start.sh
-    fi
-
-    (
-      shopt -s dotglob
-      rm -rf "${APP_DIR:?}"/*
-    )
-
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "immich" "immich-app/immich" "tag" "${RELEASE}" "$SRC_DIR"
-
-    msg_info "Updating Immich web and microservices"
-    cd "$SRC_DIR"/server
-    export COREPACK_ENABLE_DOWNLOAD_PROMPT=0
-    export CI=1
-    corepack enable
-
-    # server build
-    export SHARP_IGNORE_GLOBAL_LIBVIPS=true
-    $STD pnpm --filter immich --frozen-lockfile build
-    unset SHARP_IGNORE_GLOBAL_LIBVIPS
-    export SHARP_FORCE_GLOBAL_LIBVIPS=true
-    $STD pnpm --filter immich --frozen-lockfile --prod --no-optional deploy "$APP_DIR"
-    cp "$APP_DIR"/package.json "$APP_DIR"/bin
-    sed -i 's|^start|./start|' "$APP_DIR"/bin/immich-admin
-
-    # openapi & web build
-    cd "$SRC_DIR"
-    echo "packageImportMethod: hardlink" >>./pnpm-workspace.yaml
-    $STD pnpm --filter @immich/sdk --filter immich-web --frozen-lockfile --force install
-    unset SHARP_FORCE_GLOBAL_LIBVIPS
-    export SHARP_IGNORE_GLOBAL_LIBVIPS=true
-    $STD pnpm --filter @immich/sdk --filter immich-web build
-    cp -a web/build "$APP_DIR"/www
-    cp LICENSE "$APP_DIR"
-
-    # cli build
-    $STD pnpm --filter @immich/sdk --filter @immich/cli --frozen-lockfile install
-    $STD pnpm --filter @immich/sdk --filter @immich/cli build
-    $STD pnpm --filter @immich/cli --prod --no-optional deploy "$APP_DIR"/cli
-    cd "$APP_DIR"
-    mv "$INSTALL_DIR"/start.sh "$APP_DIR"/bin
-
-    # plugins
-    cd "$SRC_DIR"
-    $STD mise trust --ignore ./mise.toml
-    $STD mise trust ./plugins/mise.toml
-    cd plugins
-    $STD mise install
-    $STD mise run build
-    mkdir -p "$PLUGIN_DIR"
-    cp -r ./dist "$PLUGIN_DIR"/dist
-    cp ./manifest.json "$PLUGIN_DIR"
-    msg_ok "Updated Immich server, web, cli and plugins"
-
-    cd "$SRC_DIR"/machine-learning
-    mkdir -p "$ML_DIR" && chown -R immich:immich "$ML_DIR"
-    chown immich:immich ./uv.lock
-    export VIRTUAL_ENV="${ML_DIR}"/ml-venv
-    if [[ -f ~/.openvino ]]; then
-      msg_info "Updating HW-accelerated machine-learning"
-      # Remove old venv if Python version changed (3.12 -> 3.13)
-      if [[ -d "${VIRTUAL_ENV}" ]] && ! "${VIRTUAL_ENV}/bin/python3" --version 2>/dev/null | grep -q "3.13"; then
-        rm -rf "${VIRTUAL_ENV}"
-      fi
-      $STD sudo --preserve-env=VIRTUAL_ENV -nu immich uv sync --extra openvino --no-dev --active --link-mode copy -n -p python3.13 --managed-python
-      patchelf --clear-execstack "${VIRTUAL_ENV}/lib/python3.13/site-packages/onnxruntime/capi/onnxruntime_pybind11_state.cpython-313-x86_64-linux-gnu.so"
-      # Add workaround for onnxruntime-openvino 1.23.x crash if not present
-      if ! grep -q "MACHINE_LEARNING_OPENVINO_NUM_THREADS" "$INSTALL_DIR/.env" 2>/dev/null; then
-        sed -i '/MACHINE_LEARNING_CACHE_FOLDER/a ## - For OpenVINO only - workaround for onnxruntime-openvino 1.23.x crash\n## - See: https://github.com/immich-app/immich/pull/11240\nMACHINE_LEARNING_OPENVINO_NUM_THREADS=$(nproc)' "$INSTALL_DIR/.env"
-      fi
-      msg_ok "Updated HW-accelerated machine-learning"
-    else
-      msg_info "Updating machine-learning"
-      $STD sudo --preserve-env=VIRTUAL_ENV -nu immich uv sync --extra cpu --no-dev --active --link-mode copy -n -p python3.11 --managed-python
-      msg_ok "Updated machine-learning"
-    fi
-    cd "$SRC_DIR"
-    cp -a machine-learning/{ann,immich_ml} "$ML_DIR"
-    mv "$INSTALL_DIR"/ml_start.sh "$ML_DIR"
-    if [[ -f ~/.openvino ]]; then
-      sed -i "/intra_op/s/int = 0/int = os.cpu_count() or 0/" "$ML_DIR"/immich_ml/config.py
-    fi
-    ln -sf "$APP_DIR"/resources "$INSTALL_DIR"
-    cd "$APP_DIR"
-    grep -rl /usr/src | xargs -n1 sed -i "s|\/usr/src|$INSTALL_DIR|g"
-    grep -rlE "'/build'" | xargs -n1 sed -i "s|'/build'|'$APP_DIR'|g"
-    sed -i "s@\"/cache\"@\"$INSTALL_DIR/cache\"@g" "$ML_DIR"/immich_ml/config.py
-    ln -s "${UPLOAD_DIR:-/opt/immich/upload}" "$APP_DIR"/upload
-    ln -s "${UPLOAD_DIR:-/opt/immich/upload}" "$ML_DIR"/upload
-    ln -s "$GEO_DIR" "$APP_DIR"
-
-    chown -R immich:immich "$INSTALL_DIR"
-    systemctl restart immich-ml immich-web
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-function compile_libjxl() {
-  SOURCE=${SOURCE_DIR}/libjxl
-  JPEGLI_LIBJPEG_LIBRARY_SOVERSION="62"
-  JPEGLI_LIBJPEG_LIBRARY_VERSION="62.3.0"
-  : "${LIBJXL_REVISION:=$(jq -cr '.revision' "$BASE_DIR"/server/sources/libjxl.json)}"
-  if [[ "$LIBJXL_REVISION" != "$(grep 'libjxl' ~/.immich_library_revisions | awk '{print $2}')" ]]; then
-    msg_info "Recompiling libjxl"
-    if [[ -d "$SOURCE" ]]; then rm -rf "$SOURCE"; fi
-    $STD git clone https://github.com/libjxl/libjxl.git "$SOURCE"
-    cd "$SOURCE"
-    $STD git reset --hard "$LIBJXL_REVISION"
-    $STD git submodule update --init --recursive --depth 1 --recommend-shallow
-    $STD git apply "$BASE_DIR"/server/sources/libjxl-patches/jpegli-empty-dht-marker.patch
-    $STD git apply "$BASE_DIR"/server/sources/libjxl-patches/jpegli-icc-warning.patch
-    mkdir build
-    cd build
-    $STD cmake \
-      -DCMAKE_BUILD_TYPE=Release \
-      -DBUILD_TESTING=OFF \
-      -DJPEGXL_ENABLE_DOXYGEN=OFF \
-      -DJPEGXL_ENABLE_MANPAGES=OFF \
-      -DJPEGXL_ENABLE_PLUGIN_GIMP210=OFF \
-      -DJPEGXL_ENABLE_BENCHMARK=OFF \
-      -DJPEGXL_ENABLE_EXAMPLES=OFF \
-      -DJPEGXL_FORCE_SYSTEM_BROTLI=ON \
-      -DJPEGXL_FORCE_SYSTEM_HWY=ON \
-      -DJPEGXL_ENABLE_JPEGLI=ON \
-      -DJPEGXL_ENABLE_JPEGLI_LIBJPEG=ON \
-      -DJPEGXL_INSTALL_JPEGLI_LIBJPEG=ON \
-      -DJPEGXL_ENABLE_PLUGINS=ON \
-      -DJPEGLI_LIBJPEG_LIBRARY_SOVERSION="$JPEGLI_LIBJPEG_LIBRARY_SOVERSION" \
-      -DJPEGLI_LIBJPEG_LIBRARY_VERSION="$JPEGLI_LIBJPEG_LIBRARY_VERSION" \
-      -DLIBJPEG_TURBO_VERSION_NUMBER=2001005 \
-      ..
-    $STD cmake --build . -- -j"$(nproc)"
-    $STD cmake --install .
-    ldconfig /usr/local/lib
-    $STD make clean
-    cd "$STAGING_DIR"
-    rm -rf "$SOURCE"/{build,third_party}
-    sed -i "s/libjxl: .*$/libjxl: $LIBJXL_REVISION/" ~/.immich_library_revisions
-    msg_ok "Recompiled libjxl"
-  fi
-}
-
-function compile_libheif() {
-  SOURCE=${SOURCE_DIR}/libheif
-  if ! dpkg -l | grep -q libaom; then
-    $STD apt install -y libaom-dev
-    local update="required"
-  fi
-  : "${LIBHEIF_REVISION:=$(jq -cr '.revision' "$BASE_DIR"/server/sources/libheif.json)}"
-  if [[ "${update:-}" ]] || [[ "$LIBHEIF_REVISION" != "$(grep 'libheif' ~/.immich_library_revisions | awk '{print $2}')" ]]; then
-    msg_info "Recompiling libheif"
-    if [[ -d "$SOURCE" ]]; then rm -rf "$SOURCE"; fi
-    $STD git clone https://github.com/strukturag/libheif.git "$SOURCE"
-    cd "$SOURCE"
-    $STD git reset --hard "$LIBHEIF_REVISION"
-    mkdir build
-    cd build
-    $STD cmake --preset=release-noplugins \
-      -DWITH_DAV1D=ON \
-      -DENABLE_PARALLEL_TILE_DECODING=ON \
-      -DWITH_LIBSHARPYUV=ON \
-      -DWITH_LIBDE265=ON \
-      -DWITH_AOM_DECODER=OFF \
-      -DWITH_AOM_ENCODER=ON \
-      -DWITH_X265=OFF \
-      -DWITH_EXAMPLES=OFF \
-      ..
-    $STD make install -j "$(nproc)"
-    ldconfig /usr/local/lib
-    $STD make clean
-    cd "$STAGING_DIR"
-    rm -rf "$SOURCE"/build
-    sed -i "s/libheif: .*$/libheif: $LIBHEIF_REVISION/" ~/.immich_library_revisions
-    msg_ok "Recompiled libheif"
-  fi
-}
-
-function compile_libraw() {
-  SOURCE=${SOURCE_DIR}/libraw
-  : "${LIBRAW_REVISION:=$(jq -cr '.revision' "$BASE_DIR"/server/sources/libraw.json)}"
-  if [[ "$LIBRAW_REVISION" != "$(grep 'libraw' ~/.immich_library_revisions | awk '{print $2}')" ]]; then
-    msg_info "Recompiling libraw"
-    if [[ -d "$SOURCE" ]]; then rm -rf "$SOURCE"; fi
-    $STD git clone https://github.com/libraw/libraw.git "$SOURCE"
-    cd "$SOURCE"
-    $STD git reset --hard "$LIBRAW_REVISION"
-    $STD autoreconf --install
-    $STD ./configure --disable-examples
-    $STD make -j"$(nproc)"
-    $STD make install
-    ldconfig /usr/local/lib
-    $STD make clean
-    cd "$STAGING_DIR"
-    sed -i "s/libraw: .*$/libraw: $LIBRAW_REVISION/" ~/.immich_library_revisions
-    msg_ok "Recompiled libraw"
-  fi
-}
-
-function compile_imagemagick() {
-  SOURCE=$SOURCE_DIR/imagemagick
-  : "${IMAGEMAGICK_REVISION:=$(jq -cr '.revision' "$BASE_DIR"/server/sources/imagemagick.json)}"
-  if [[ "$IMAGEMAGICK_REVISION" != "$(grep 'imagemagick' ~/.immich_library_revisions | awk '{print $2}')" ]] ||
-    ! grep -q 'DMAGICK_LIBRAW' /usr/local/lib/ImageMagick-7*/config-Q16HDRI/configure.xml; then
-    msg_info "Recompiling ImageMagick"
-    if [[ -d "$SOURCE" ]]; then rm -rf "$SOURCE"; fi
-    $STD git clone https://github.com/ImageMagick/ImageMagick.git "$SOURCE"
-    cd "$SOURCE"
-    $STD git reset --hard "$IMAGEMAGICK_REVISION"
-    $STD ./configure --with-modules CPPFLAGS="-DMAGICK_LIBRAW_VERSION_TAIL=202502"
-    $STD make -j"$(nproc)"
-    $STD make install
-    ldconfig /usr/local/lib
-    $STD make clean
-    cd "$STAGING_DIR"
-    sed -i "s/imagemagick: .*$/imagemagick: $IMAGEMAGICK_REVISION/" ~/.immich_library_revisions
-    msg_ok "Recompiled ImageMagick"
-  fi
-}
-
-function compile_libvips() {
-  SOURCE=$SOURCE_DIR/libvips
-  : "${LIBVIPS_REVISION:=$(jq -cr '.revision' "$BASE_DIR"/server/sources/libvips.json)}"
-  if [[ "$LIBVIPS_REVISION" != "$(grep 'libvips' ~/.immich_library_revisions | awk '{print $2}')" ]]; then
-    msg_info "Recompiling libvips"
-    if [[ -d "$SOURCE" ]]; then rm -rf "$SOURCE"; fi
-    $STD git clone https://github.com/libvips/libvips.git "$SOURCE"
-    cd "$SOURCE"
-    $STD git reset --hard "$LIBVIPS_REVISION"
-    $STD meson setup build --buildtype=release --libdir=lib -Dintrospection=disabled -Dtiff=disabled
-    cd build
-    $STD ninja install
-    ldconfig /usr/local/lib
-    cd "$STAGING_DIR"
-    rm -rf "$SOURCE"/build
-    sed -i "s/libvips: .*$/libvips: $LIBVIPS_REVISION/" ~/.immich_library_revisions
-    msg_ok "Recompiled libvips"
-  fi
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:2283${CL}"

ct/localagi.sh

@@ -0,0 +1,71 @@
+#!/usr/bin/env bash
+source <(curl -sSL https://raw.githubusercontent.com/community-scripts/ProxmoxVED/main/misc/build.func)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: BillyOutlast
+# License: MIT | https://github.com/community-scripts/ProxmoxVED/raw/main/LICENSE
+# Source: https://github.com/mudler/LocalAGI
+
+APP="LocalAGI"
+var_tags="${var_tags:-ai}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-4096}"
+var_disk="${var_disk:-20}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_unprivileged="${var_unprivileged:-1}"
+var_gpu="${var_gpu:-no}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if check_for_gh_release "localagi" "mudler/LocalAGI"; then
+    msg_info "Stopping Service"
+    systemctl stop localagi
+    msg_ok "Stopped Service"
+
+    if [[ -f /opt/localagi/.env ]]; then
+      msg_info "Backing up existing LocalAGI configuration"
+      cp /opt/localagi/.env /opt/localagi.env
+      msg_ok "Backed up LocalAGI configuration"
+    fi
+
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "localagi" "mudler/LocalAGI" "tarball" "latest" "/opt/localagi"
+
+    if [[ -f /opt/localagi.env ]]; then
+      msg_info "Restoring LocalAGI configuration"
+      cp /opt/localagi.env /opt/localagi/.env
+      msg_ok "Restored LocalAGI configuration"
+    fi
+
+    msg_info "Building LocalAGI"
+    cd /opt/localagi/webui/react-ui
+    $STD bun install
+    $STD bun run build
+    cd /opt/localagi
+    $STD go build -o /usr/local/bin/localagi
+    msg_ok "Updated LocalAGI successfully"
+
+    msg_info "Starting Service"
+    systemctl start localagi
+    msg_ok "Started Service"
+    msg_ok "Updated successfully!"
+    exit
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:3000${CL}"

ct/navidrome.sh

@@ -0,0 +1,53 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVED/arm64-dev-build/misc/build.func)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/navidrome/navidrome
+
+APP="Navidrome"
+var_tags="${var_tags:-music}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-1024}"
+var_disk="${var_disk:-4}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+  if [[ ! -d /var/lib/navidrome ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  if check_for_gh_release "navidrome" "navidrome/navidrome"; then
+    msg_info "Stopping Services"
+    systemctl stop navidrome
+    msg_ok "Services Stopped"
+
+    fetch_and_deploy_gh_release "navidrome" "navidrome/navidrome" "binary"
+
+    msg_info "Starting Services"
+    systemctl start navidrome
+    msg_ok "Started Services"
+    msg_ok "Updated successfully!"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:4533${CL}"

ct/netbird.sh

@@ -1,49 +0,0 @@
-#!/usr/bin/env bash
-
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVED/main/misc/build.func)
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: TechHutTV
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://netbird.io/
-
-APP="NetBird"
-var_tags="${var_tags:-network;vpn}"
-var_cpu="${var_cpu:-1}"
-var_ram="${var_ram:-512}"
-var_disk="${var_disk:-4}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-var_tun="${var_tun:-yes}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -f /etc/netbird/config.json ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  msg_info "Updating Netbird"
-  $STD apt update
-  $STD apt upgrade -y
-  msg_ok "Updated successfully!"
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access NetBird by entering the container and running:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}netbird up${CL}"

ct/oxicloud.sh

@@ -0,0 +1,64 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVED/main/misc/build.func)
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: vhsdream
+# License: MIT | https://github.com/community-scripts/ProxmoxVED/raw/main/LICENSE
+# Source: https://github.com/DioCrafts/OxiCloud
+
+APP="OxiCloud"
+var_tags="${var_tags:-files;documents}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-3072}"
+var_disk="${var_disk:-20}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -d /opt/oxicloud ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  if check_for_gh_release "OxiCloud" "DioCrafts/OxiCloud"; then
+    msg_info "Stopping OxiCloud"
+    $STD systemctl stop oxicloud
+    msg_ok "Stopped OxiCloud"
+
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "OxiCloud" "DioCrafts/OxiCloud" "tarball" "latest" "/opt/oxicloud"
+    TOOLCHAIN="$(sed -n '2s/[^:]*://p' /opt/oxicloud/Dockerfile | awk -F- '{print $1}')"
+    RUST_TOOLCHAIN=$TOOLCHAIN setup_rust
+
+    msg_info "Updating OxiCloud"
+    cd /opt/oxicloud
+    export DATABASE_URL="postgres://${PG_DB_USER}:${PG_DB_PASS}@localhost/${PG_DB_NAME}"
+    $STD cargo build --release
+    mv target/release/oxicloud /usr/bin/oxicloud && chmod +x /usr/bin/oxicloud
+    msg_ok "Updated OxiCloud"
+
+    msg_info "Starting OxiCloud"
+    $STD systemctl start oxicloud
+    msg_ok "Started OxiCloud"
+    msg_ok "Updated successfully!"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:8086${CL}"

ct/papra.sh

@@ -1,63 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVED/main/misc/build.func)
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVED/raw/main/LICENSE
-# Source: https://github.com/papra-hq/papra
-
-APP="Papra"
-var_tags="${var_tags:-document-management}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-2048}"
-var_disk="${var_disk:-10}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-  if [[ ! -d /opt/papra ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-  RELEASE=$(curl -fsSL https://api.github.com/repos/papra-hq/papra/releases | grep -oP '"tag_name":\s*"\K@papra/app@[^"]+' | head -n1)
-  if [[ "${RELEASE}" != "$(cat /opt/${APP}_version.txt 2>/dev/null)" ]] || [[ ! -f /opt/${APP}_version.txt ]]; then
-    msg_info "Stopping Service"
-    systemctl stop papra
-    msg_ok "Stopped Service"
-
-    msg_info "Updating ${APP} to ${RELEASE}"
-    cd /opt/papra
-    fetch_and_deploy_gh_release "papra" "papra-hq/papra" "tarball" "${RELEASE}" "/opt/papra"
-    $STD pnpm install --frozen-lockfile
-    $STD pnpm --filter "@papra/app-client..." run build
-    $STD pnpm --filter "@papra/app-server..." run build
-    echo "${RELEASE}" >/opt/${APP}_version.txt
-    msg_ok "Updated ${APP} to ${RELEASE}"
-
-    msg_info "Starting Service"
-    systemctl start papra
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  else
-    msg_ok "No update required. ${APP} is already at ${RELEASE}"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:1221${CL}"

ct/rdtclient.sh

@@ -0,0 +1,87 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVED/arm64-dev-build/misc/build.func)
+# Copyright (c) 2021-2026 tteck
+# Author: tteck (tteckster)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/rogerfar/rdt-client
+
+APP="RDTClient"
+var_tags="${var_tags:-torrent}"
+var_cpu="${var_cpu:-1}"
+var_ram="${var_ram:-1024}"
+var_disk="${var_disk:-4}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+  if [[ ! -d /opt/rdtc/ ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+  if check_for_gh_release "rdt-client" "rogerfar/rdt-client"; then
+    msg_info "Stopping Service"
+    systemctl stop rdtc
+    msg_ok "Stopped Service"
+
+    msg_info "Creating backup"
+    mkdir -p /opt/rdtc-backup
+    cp -R /opt/rdtc/appsettings.json /opt/rdtc-backup/
+    msg_ok "Backup created"
+
+    fetch_and_deploy_gh_release "rdt-client" "rogerfar/rdt-client" "prebuild" "latest" "/opt/rdtc" "RealDebridClient.zip"
+    cp -R /opt/rdtc-backup/appsettings.json /opt/rdtc/
+    if dpkg-query -W aspnetcore-runtime-9.0 >/dev/null 2>&1; then
+      $STD apt remove --purge -y aspnetcore-runtime-9.0
+      ensure_dependencies aspnetcore-runtime-10.0
+    fi
+    rm -rf /opt/rdtc-backup
+
+    msg_info "Starting Service"
+    systemctl start rdtc
+    msg_ok "Started Service"
+    msg_ok "Updated successfully!"
+  fi
+  exit
+}
+
+function update_script_arm64() {
+  header_info
+  check_container_storage
+  check_container_resources
+  if [[ ! -d /opt/rdtc/ ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+  if check_for_gh_release "rdt-client" "rogerfar/rdt-client"; then
+    msg_info "Stopping Service"
+    systemctl stop rdtc
+    msg_ok "Stopped Service"
+
+    msg_info "Updating .NET Runtime"
+    rm -rf /usr/share/dotnet /usr/bin/dotnet
+    $STD apt-get install -y libc6 libgcc-s1 libgssapi-krb5-2 liblttng-ust1 libssl3 libstdc++6 zlib1g libicu76
+    curl -fsSL -o /tmp/dotnet.tar.gz "https://builds.dotnet.microsoft.com/dotnet/Sdk/10.0.103/dotnet-sdk-10.0.103-linux-arm64.tar.gz"
+    tar -zxf /tmp/dotnet.tar.gz -C /usr/share/dotnet
+    ln -sf /usr/share/dotnet/dotnet /usr/bin/dotnet
+    rm -f /tmp/dotnet.tar.gz
+    msg_ok "Updated .NET Runtime"
+  fi
+}
+
+start
+build_container
+description
+
+msg_ok "Completed successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:6500${CL}"

ct/seaweedfs.sh

@@ -1,55 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVED/main/misc/build.func)
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVED/raw/main/LICENSE
-# Source: https://github.com/seaweedfs/seaweedfs
-
-APP="SeaweedFS"
-var_tags="${var_tags:-storage;s3;filesystem}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-2048}"
-var_disk="${var_disk:-16}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -f /opt/seaweedfs/weed ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "seaweedfs" "seaweedfs/seaweedfs"; then
-    msg_info "Stopping Service"
-    systemctl stop seaweedfs
-    msg_ok "Stopped Service"
-
-    fetch_and_deploy_gh_release "seaweedfs" "seaweedfs/seaweedfs" "prebuild" "latest" "/opt/seaweedfs" "linux_amd64.tar.gz"
-
-    msg_info "Starting Service"
-    systemctl start seaweedfs
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed Successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:9333${CL}"

frontend/public/json/arm.json

@@ -0,0 +1,42 @@
+{
+    "name": "ARM",
+    "slug": "arm",
+    "categories": [13],
+    "date_created": "2026-03-06",
+    "type": "ct",
+    "updateable": true,
+    "privileged": true,
+    "interface_port": 8080,
+    "documentation": "https://github.com/automatic-ripping-machine/automatic-ripping-machine/wiki",
+    "website": "https://github.com/automatic-ripping-machine/automatic-ripping-machine",
+    "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/arm.webp",
+    "config_path": "/opt/arm/arm.yaml",
+    "description": "Automatic Ripping Machine (ARM) automatically detects and rips Blu-rays, DVDs, and CDs. It identifies disc type, retrieves metadata, and handles transcoding with MakeMKV and HandBrake.",
+    "install_methods": [
+        {
+            "type": "default",
+            "script": "ct/arm.sh",
+            "resources": {
+                "cpu": 4,
+                "ram": 4096,
+                "hdd": 16,
+                "os": "Debian",
+                "version": "12"
+            }
+        }
+    ],
+    "default_credentials": {
+        "username": "admin",
+        "password": "password"
+    },
+    "notes": [
+        {
+            "text": "Optical drive passthrough to the LXC container is required. Configure device mappings in the Proxmox container settings.",
+            "type": "warning"
+        },
+        {
+            "text": "Navigate to http://IP:8080/setup on first launch to complete initial setup. Default credentials: admin / password.",
+            "type": "info"
+        }
+    ]
+}

frontend/public/json/cronmaster.json

@@ -1,35 +0,0 @@
-{
-    "name": "CronMaster",
-    "slug": "cronmaster",
-    "categories": [
-        1
-    ],
-    "date_created": "2026-02-17",
-    "type": "pve",
-    "updateable": true,
-    "privileged": false,
-    "interface_port": 3000,
-    "documentation": "https://github.com/fccview/cronmaster",
-    "website": "https://github.com/fccview/cronmaster",
-    "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/cr-nmaster.webp",
-    "config_path": "/opt/cronmaster/.env",
-    "description": "Self-hosted cron job scheduler with web UI, live logs, auth and prebuilt binaries provided upstream.",
-    "install_methods": [
-        {
-            "type": "default",
-            "script": "tools/addon/cronmaster.sh",
-            "resources": {
-                "cpu": null,
-                "ram": null,
-                "hdd": null,
-                "os": null,
-                "version": null
-            }
-        }
-    ],
-    "default_credentials": {
-        "username": null,
-        "password": null
-    },
-    "notes": []
-}

frontend/public/json/ddclient.json

@@ -1,44 +0,0 @@
-{
-  "name": "ddclient",
-  "slug": "ddclient",
-  "categories": [
-    4
-  ],
-  "date_created": "2026-01-31",
-  "type": "ct",
-  "updateable": true,
-  "privileged": false,
-  "interface_port": null,
-  "documentation": "https://ddclient.net/",
-  "website": "https://ddclient.net/",
-  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/ddclient.webp",
-  "config_path": "/etc/ddclient.conf",
-  "description": "ddclient is a Perl client used to update dynamic DNS entries for accounts on a wide range of dynamic DNS service providers. It supports multiple protocols and providers, allowing automatic IP address updates for your domain names.",
-  "install_methods": [
-    {
-      "type": "default",
-      "script": "ct/ddclient.sh",
-      "resources": {
-        "cpu": 1,
-        "ram": 512,
-        "hdd": 2,
-        "os": "debian",
-        "version": "13"
-      }
-    }
-  ],
-  "default_credentials": {
-    "username": null,
-    "password": null
-  },
-  "notes": [
-    {
-      "type": "info",
-      "text": "After installation, edit `/etc/ddclient.conf` with your dynamic DNS provider credentials"
-    },
-    {
-      "type": "info",
-      "text": "Sample configuration is created for Namecheap but can be modified for other providers"
-    }
-  ]
-}

frontend/public/json/frigate.json

@@ -1,35 +0,0 @@
-{
-    "name": "Frigate",
-    "slug": "frigate",
-    "categories": [
-        15
-    ],
-    "date_created": "2025-07-02",
-    "type": "ct",
-    "updateable": true,
-    "privileged": false,
-    "config_path": "/config/config.yml",
-    "interface_port": 5000,
-    "documentation": "https://docs.frigate.video/",
-    "website": "https://frigate.video/",
-    "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/frigate-light.webp",
-    "description": "Frigate is an open-source NVR built around real-time AI object detection for IP cameras.",
-    "install_methods": [
-        {
-            "type": "default",
-            "script": "ct/frigate.sh",
-            "resources": {
-                "cpu": 4,
-                "ram": 4096,
-                "hdd": 20,
-                "os": "Debian",
-                "version": "12"
-            }
-        }
-    ],
-    "default_credentials": {
-        "username": null,
-        "password": null
-    },
-    "notes": []
-}

frontend/public/json/github-runner.json

@@ -0,0 +1,48 @@
+{
+  "name": "GitHub Runner",
+  "slug": "github-runner",
+  "categories": [
+    20
+  ],
+  "date_created": "2026-03-04",
+  "type": "ct",
+  "updateable": true,
+  "privileged": false,
+  "interface_port": null,
+  "documentation": "https://docs.github.com/en/actions/hosting-your-own-runners/managing-self-hosted-runners",
+  "config_path": "/opt/actions-runner",
+  "website": "https://github.com/actions/runner",
+  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/github.webp",
+  "description": "GitHub Actions self-hosted runner executes workflows for your repository or organization, enabling CI/CD, builds, and deployments.",
+  "install_methods": [
+    {
+      "type": "default",
+      "script": "ct/github-runner.sh",
+      "resources": {
+        "cpu": 2,
+        "ram": 2048,
+        "hdd": 8,
+        "os": "Debian",
+        "version": "12"
+      }
+    }
+  ],
+  "default_credentials": {
+    "username": null,
+    "password": null
+  },
+  "notes": [
+    {
+      "text": "Get your token: repo Settings → Actions → Runners → New self-hosted runner → copy the token.",
+      "type": "info"
+    },
+    {
+      "text": "Then run: cd /opt/actions-runner && sudo -u runner ./config.sh --url https://github.com/your-username/your-repo --token <YOUR_TOKEN>",
+      "type": "info"
+    },
+    {
+      "text": "Start the runner: systemctl start actions-runner",
+      "type": "info"
+    }
+  ]
+}

frontend/public/json/localagi.json

@@ -0,0 +1,52 @@
+{
+  "name": "LocalAGI",
+  "slug": "localagi",
+  "categories": [
+    20
+  ],
+  "date_created": "2026-03-03",
+  "type": "ct",
+  "updateable": true,
+  "privileged": false,
+  "interface_port": 3000,
+  "documentation": "https://github.com/mudler/LocalAGI#installation-options",
+  "website": "https://github.com/mudler/LocalAGI",
+  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/localagi.webp",
+  "config_path": "/opt/localagi/.env",
+  "description": "LocalAGI is a self-hostable AI agent platform with a web UI, OpenAI-compatible APIs, and local-first model orchestration.",
+  "install_methods": [
+    {
+      "type": "default",
+      "script": "ct/localagi.sh",
+      "resources": {
+        "cpu": 2,
+        "ram": 4096,
+        "hdd": 20,
+        "os": "Debian",
+        "version": "13"
+      }
+    }
+  ],
+  "default_credentials": {
+    "username": null,
+    "password": null
+  },
+  "notes": [
+    {
+      "text": "This script builds LocalAGI from source (Go + Bun) and runs it as a systemd service.",
+      "type": "info"
+    },
+    {
+      "text": "This Proxmox script runs LocalAGI in external-backend mode and does not provision local ROCm/NVIDIA runtimes.",
+      "type": "info"
+    },
+    {
+      "text": "By default, LocalAGI is configured to call an OpenAI-compatible backend at `http://127.0.0.1:11434/v1` (Ollama-compatible) via `LOCALAGI_LLM_API_URL`.",
+      "type": "info"
+    },
+    {
+      "text": "To use an external Ollama host, edit `/opt/localagi/.env` and set `LOCALAGI_LLM_API_URL=http://<ollama-host>:11434/v1`, then restart LocalAGI with `systemctl restart localagi`.",
+      "type": "info"
+    }
+  ]
+}

frontend/public/json/netbird.json

@@ -1,50 +0,0 @@
-{
-  "name": "NetBird",
-  "slug": "netbird",
-  "categories": [4],
-  "date_created": "2025-12-02",
-  "type": "ct",
-  "updateable": true,
-  "privileged": false,
-  "interface_port": null,
-  "documentation": "https://docs.netbird.io/",
-  "website": "https://netbird.io/",
-  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/netbird.webp",
-  "config_path": "/etc/netbird/config.json",
-  "description": "NetBird is an open source VPN management platform that creates secure peer-to-peer networks using WireGuard. It enables secure connectivity between devices anywhere in the world without complex firewall configurations or port forwarding. NetBird offers features like zero-configuration networking, SSO integration, access control policies, and a centralized management dashboard. It's designed to be simple to deploy and manage, making it ideal for connecting remote teams, securing IoT devices, or building secure infrastructure networks.",
-  "install_methods": [
-    {
-      "type": "default",
-      "script": "ct/netbird.sh",
-      "resources": {
-        "cpu": 1,
-        "ram": 512,
-        "hdd": 4,
-        "os": "debian",
-        "version": "13"
-      }
-    }
-  ],
-  "default_credentials": {
-    "username": null,
-    "password": null
-  },
-  "notes": [
-    {
-      "text": "The NetBird client (agent) allows a peer to join a pre-existing NetBird deployment. If a NetBird deployment is not yet available, there are both managed and self-hosted options available.",
-      "type": "info"
-    },
-    {
-      "text": "After installation, enter the container and run `netbird` to view the commands.",
-      "type": "info"
-    },
-    {
-      "text": "Use a Setup Key from your NetBird dashboard or SSO login to authenticate during setup or in the container.",
-      "type": "info"
-    },
-    {
-      "text": "Check connection status with `netbird status`.",
-      "type": "info"
-    }
-  ]
-}

frontend/public/json/oxicloud.json

@@ -0,0 +1,36 @@
+{
+  "name": "OxiCloud",
+  "slug": "oxicloud",
+  "categories": [
+    11,
+    12
+  ],
+  "date_created": "2026-03-11",
+  "type": "ct",
+  "updateable": true,
+  "privileged": false,
+  "interface_port": 8086,
+  "documentation": "https://github.com/DioCrafts/OxiCloud/tree/main/doc",
+  "website": "https://github.com/DioCrafts/OxiCloud",
+  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/oxicloud.webp",
+  "config_path": "/etc/oxicloud/.env",
+  "description": "Ultra-fast, secure & lightweight self-hosted cloud storage — your files, photos, calendars & contacts, all in one place. Built in Rust.",
+  "install_methods": [
+    {
+      "type": "default",
+      "script": "ct/oxicloud.sh",
+      "resources": {
+        "cpu": 2,
+        "ram": 3072,
+        "hdd": 20,
+        "os": "Debian",
+        "version": "13"
+      }
+    }
+  ],
+  "default_credentials": {
+    "username": null,
+    "password": null
+  },
+  "notes": []
+}

frontend/public/json/papra.json

@@ -1,56 +0,0 @@
-{
-    "name": "Papra",
-    "slug": "papra",
-    "categories": [
-        12
-    ],
-    "date_created": "2025-12-30",
-    "type": "ct",
-    "updateable": true,
-    "privileged": false,
-    "interface_port": 1221,
-    "documentation": "https://github.com/CorentinTh/papra",
-    "website": "https://github.com/CorentinTh/papra",
-    "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/papra.webp",
-    "config_path": "/opt/papra/.env",
-    "description": "Papra is a modern, self-hosted document management system with full-text search, OCR support, and automatic document processing. Built with Node.js and featuring a clean web interface for organizing and managing your documents.",
-    "install_methods": [
-        {
-            "type": "default",
-            "script": "ct/papra.sh",
-            "resources": {
-                "cpu": 2,
-                "ram": 2048,
-                "hdd": 10,
-                "os": "debian",
-                "version": "13"
-            }
-        }
-    ],
-    "default_credentials": {
-        "username": null,
-        "password": null
-    },
-    "notes": [
-        {
-            "text": "First visit will prompt you to create an account",
-            "type": "info"
-        },
-        {
-            "text": "Tesseract OCR is pre-installed for all languages",
-            "type": "info"
-        },
-        {
-            "text": "Documents are stored in /opt/papra/app-data/documents",
-            "type": "info"
-        },
-        {
-            "text": "Ingestion folder available at /opt/papra/ingestion for automatic document import",
-            "type": "info"
-        },
-        {
-            "text": "Email functionality runs in dry-run mode by default",
-            "type": "warning"
-        }
-    ]
-}

frontend/public/json/seaweedfs.json

@@ -1,48 +0,0 @@
-{
-    "name": "SeaweedFS",
-    "slug": "seaweedfs",
-    "categories": [
-        11
-    ],
-    "date_created": "2026-02-22",
-    "type": "ct",
-    "updateable": true,
-    "privileged": false,
-    "interface_port": 9333,
-    "documentation": "https://github.com/seaweedfs/seaweedfs/wiki",
-    "website": "https://seaweedfs.com/",
-    "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/seaweedfs.webp",
-    "config_path": "",
-    "description": "SeaweedFS is a fast distributed storage system for blobs, objects, files, and data lakes, with O(1) disk seek, S3 API, FUSE mount, WebDAV, and cloud tiering support.",
-    "install_methods": [
-        {
-            "type": "default",
-            "script": "ct/seaweedfs.sh",
-            "resources": {
-                "cpu": 2,
-                "ram": 2048,
-                "hdd": 16,
-                "os": "Debian",
-                "version": "13"
-            }
-        }
-    ],
-    "default_credentials": {
-        "username": null,
-        "password": null
-    },
-    "notes": [
-        {
-            "text": "Master UI available at port 9333, Filer UI at port 8888, S3 API at port 8333.",
-            "type": "info"
-        },
-        {
-            "text": "Data is stored in /opt/seaweedfs-data.",
-            "type": "info"
-        },
-        {
-            "text": "FUSE mounting requires fuse3 (pre-installed).",
-            "type": "info"
-        }
-    ]
-}

install/arm-install.sh

@@ -0,0 +1,116 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVED/raw/main/LICENSE
+# Source: https://github.com/automatic-ripping-machine/automatic-ripping-machine
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt install -y \
+  abcde \
+  at \
+  build-essential \
+  cdparanoia \
+  default-jre-headless \
+  eject \
+  ffmpeg \
+  flac \
+  glyrc \
+  handbrake-cli \
+  imagemagick \
+  libavcodec-dev \
+  libavcodec-extra \
+  libcurl4-openssl-dev \
+  libdiscid-dev \
+  libexpat1-dev \
+  libffi-dev \
+  libgl1-mesa-dev \
+  libssl-dev \
+  lsdvd \
+  pkg-config \
+  qtbase5-dev \
+  zlib1g-dev
+msg_ok "Installed Dependencies"
+
+PYTHON_VERSION="3.12" setup_uv
+
+msg_info "Building MakeMKV (Patience)"
+MAKEMKV_VER=$(curl -sL https://www.makemkv.com/download/ | grep -oP 'makemkv-bin-\K[0-9]+\.[0-9]+\.[0-9]+' | head -1)
+cd /tmp
+$STD curl -fsSL -o makemkv-oss.tar.gz "https://www.makemkv.com/download/makemkv-oss-${MAKEMKV_VER}.tar.gz"
+$STD curl -fsSL -o makemkv-bin.tar.gz "https://www.makemkv.com/download/makemkv-bin-${MAKEMKV_VER}.tar.gz"
+tar xf makemkv-oss.tar.gz
+tar xf makemkv-bin.tar.gz
+cd "makemkv-oss-${MAKEMKV_VER}"
+$STD ./configure
+$STD make -j"$(nproc)"
+$STD make install
+cd "/tmp/makemkv-bin-${MAKEMKV_VER}"
+mkdir -p tmp
+echo "accepted" >tmp/eula_accepted
+$STD make install
+ldconfig
+cd /
+rm -rf /tmp/makemkv-*
+msg_ok "Built MakeMKV ${MAKEMKV_VER}"
+
+fetch_and_deploy_gh_release "arm" "automatic-ripping-machine/automatic-ripping-machine" "tarball"
+
+msg_info "Setting up Python Environment"
+cd /opt/arm
+$STD uv venv /opt/arm/venv
+$STD uv pip install --python /opt/arm/venv/bin/python \
+  -r <(curl -fsSL https://raw.githubusercontent.com/automatic-ripping-machine/arm-dependencies/main/requirements.txt) \
+  -r requirements.txt
+msg_ok "Set up Python Environment"
+
+msg_info "Configuring Application"
+cp /opt/arm/setup/arm.yaml /opt/arm/arm.yaml
+cp /opt/arm/setup/.abcde.conf /etc/.abcde.conf
+mkdir -p /etc/arm/config
+ln -sf /opt/arm/arm.yaml /etc/arm/config/arm.yaml
+ln -sf /etc/.abcde.conf /etc/arm/config/abcde.conf
+
+mkdir -p /home/arm/{logs/progress,media/{transcode,completed,raw},db}
+
+for i in $(seq 0 4); do
+  mkdir -p "/mnt/dev/sr${i}"
+  grep -qF "/dev/sr${i}" /etc/fstab || echo "/dev/sr${i}  /mnt/dev/sr${i}  udf,iso9660  defaults,users,utf8,ro,noauto  0  0" >>/etc/fstab
+done
+
+chmod +x /opt/arm/scripts/thickclient/*.sh 2>/dev/null || true
+cp /opt/arm/setup/51-automatic-ripping-machine-venv.rules /etc/udev/rules.d/
+sed -i "s|/bin/su -l.*-s /bin/bash.*|/opt/arm/scripts/thickclient/arm_venv_wrapper.sh %k\"|" /etc/udev/rules.d/51-automatic-ripping-machine-venv.rules 2>/dev/null || true
+msg_ok "Configured Application"
+
+msg_info "Creating Service"
+cat <<EOF >/etc/systemd/system/armui.service
+[Unit]
+Description=ARM Web UI Service
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=simple
+WorkingDirectory=/opt/arm
+ExecStart=/opt/arm/venv/bin/python3 /opt/arm/arm/runui.py
+Restart=always
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now atd armui
+msg_ok "Created Service"
+
+motd_ssh
+customize
+cleanup_lxc

install/arm/rdtclient-install.sh

@@ -0,0 +1,16 @@
+#!/usr/bin/env bash
+
+install_dotnet_runtime() {
+  msg_info "Installing Dependencies"
+  $STD apt-get install -y unzip
+  msg_ok "Installed Dependencies"
+
+  msg_info "Installing ASP.NET Core Runtime"
+  $STD apt-get install -y libc6 libgcc-s1 libgssapi-krb5-2 liblttng-ust1 libssl3 libstdc++6 zlib1g libicu76
+  curl -fsSL -o /tmp/dotnet.tar.gz "https://builds.dotnet.microsoft.com/dotnet/Sdk/10.0.103/dotnet-sdk-10.0.103-linux-arm64.tar.gz"
+  mkdir -p /usr/share/dotnet
+  tar -zxf /tmp/dotnet.tar.gz -C /usr/share/dotnet
+  ln -sf /usr/share/dotnet/dotnet /usr/bin/dotnet
+  rm -f /tmp/dotnet.tar.gz
+  msg_ok "Installed ASP.NET Core Runtime"
+}

install/booklore-install.sh

@@ -1,88 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/booklore-app/BookLore
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-JAVA_VERSION="25" setup_java
-NODE_VERSION="22" setup_nodejs
-setup_mariadb
-setup_yq
-MARIADB_DB_NAME="booklore_db" MARIADB_DB_USER="booklore_user" MARIADB_DB_EXTRA_GRANTS="GRANT SELECT ON \`mysql\`.\`time_zone_name\`" setup_mariadb_db
-fetch_and_deploy_gh_release "booklore" "booklore-app/BookLore" "tarball"
-
-msg_info "Building Frontend"
-cd /opt/booklore/booklore-ui
-$STD npm ci
-$STD npm run build --configuration=production
-msg_ok "Built Frontend"
-
-msg_info "Embedding Frontend into Backend"
-mkdir -p /opt/booklore/booklore-api/src/main/resources/static
-cp -r /opt/booklore/booklore-ui/dist/booklore/browser/* /opt/booklore/booklore-api/src/main/resources/static/
-msg_ok "Embedded Frontend into Backend"
-
-msg_info "Creating Environment"
-mkdir -p /opt/booklore_storage/{data,books,bookdrop}
-cat <<EOF >/opt/booklore_storage/.env
-# Database Configuration
-DATABASE_URL=jdbc:mariadb://localhost:3306/${MARIADB_DB_NAME}
-DATABASE_USERNAME=${MARIADB_DB_USER}
-DATABASE_PASSWORD=${MARIADB_DB_PASS}
-
-# App Configuration (Spring Boot mapping from app.* properties)
-APP_PATH_CONFIG=/opt/booklore_storage/data
-APP_BOOKDROP_FOLDER=/opt/booklore_storage/bookdrop
-SERVER_PORT=6060
-EOF
-msg_ok "Created Environment"
-
-msg_info "Building Backend"
-cd /opt/booklore/booklore-api
-APP_VERSION=$(get_latest_github_release "booklore-app/BookLore")
-yq eval ".app.version = \"${APP_VERSION}\"" -i src/main/resources/application.yaml
-$STD ./gradlew clean build -x test --no-daemon
-mkdir -p /opt/booklore/dist
-JAR_PATH=$(find /opt/booklore/booklore-api/build/libs -maxdepth 1 -type f -name "booklore-api-*.jar" ! -name "*plain*" | head -n1)
-if [[ -z "$JAR_PATH" ]]; then
-  msg_error "Backend JAR not found"
-  exit 1
-fi
-cp "$JAR_PATH" /opt/booklore/dist/app.jar
-msg_ok "Built Backend"
-
-msg_info "Creating Service"
-cat <<EOF >/etc/systemd/system/booklore.service
-[Unit]
-Description=BookLore Java Service
-After=network.target mariadb.service
-
-[Service]
-Type=simple
-User=root
-WorkingDirectory=/opt/booklore/dist
-ExecStart=/usr/bin/java -XX:+UseG1GC -XX:+UseStringDeduplication -XX:+UseCompactObjectHeaders -jar /opt/booklore/dist/app.jar
-EnvironmentFile=/opt/booklore_storage/.env
-SuccessExitStatus=143
-TimeoutStopSec=10
-Restart=on-failure
-RestartSec=5
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now booklore
-msg_ok "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc

install/caddymanager-install.sh

@@ -32,6 +32,7 @@ $STD npm run build
 
 cat <<EOF >/opt/caddymanager/caddymanager.env
 PORT=3000
+APP_NAME=Caddy Manager
 DB_ENGINE=sqlite
 SQLITE_DB_PATH=/opt/caddymanager/caddymanager.sqlite
 CORS_ORIGIN=${LOCAL_IP}:80

install/ddclient-install.sh

@@ -1,37 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 mitchscobell
-# Author: mitchscobell
-# License: MIT | https://github.com/community-scripts/ProxmoxVED/raw/main/LICENSE
-# Source: https://ddclient.net/
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing ddclient"
-DEBIAN_FRONTEND=noninteractive $STD apt -o Dpkg::Options::="--force-confdef" -o Dpkg::Options::="--force-confold" install -y ddclient
-msg_ok "Installed ddclient"
-
-msg_info "Creating ddclient service"
-cat << EOF >/etc/ddclient.conf
-protocol=namecheap
-use=web, web=dynamicdns.park-your-domain.com/getip
-protocol=namecheap
-use=web, web=dynamicdns.park-your-domain.com/getip
-server=dynamicdns.park-your-domain.com
-login=yourdomain.com
-password='your-ddns-password'
-@,www
-EOF
-chmod 600 /etc/ddclient.conf
-systemctl enable -q --now ddclient
-msg_ok "Created ddclient service"
-
-motd_ssh
-customize
-cleanup_lxc

install/frigate-install.sh

@@ -1,401 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Authors: MickLesk (CanbiZ)
-# Co-Authors: remz1337
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://frigate.video/ | Github: https://github.com/blakeblackshear/frigate
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-source /etc/os-release
-if [[ "$VERSION_ID" != "12" ]]; then
-  msg_error "Frigate requires Debian 12 (Bookworm) due to Python 3.11 dependencies"
-  exit 1
-fi
-
-msg_info "Converting APT sources to DEB822 format"
-if [ -f /etc/apt/sources.list ]; then
-  cat >/etc/apt/sources.list.d/debian.sources <<'EOF'
-Types: deb
-URIs: http://deb.debian.org/debian
-Suites: bookworm
-Components: main contrib
-Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
-
-Types: deb
-URIs: http://deb.debian.org/debian
-Suites: bookworm-updates
-Components: main contrib
-Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
-
-Types: deb
-URIs: http://security.debian.org
-Suites: bookworm-security
-Components: main contrib
-Signed-By: /usr/share/keyrings/debian-archive-keyring.gpg
-EOF
-  mv /etc/apt/sources.list /etc/apt/sources.list.bak
-  $STD apt update
-fi
-msg_ok "Converted APT sources"
-
-msg_info "Installing Dependencies"
-$STD apt install -y \
-  xz-utils \
-  python3 \
-  python3-dev \
-  python3-pip \
-  gcc \
-  pkg-config \
-  libhdf5-dev \
-  build-essential \
-  automake \
-  libtool \
-  ccache \
-  libusb-1.0-0-dev \
-  apt-transport-https \
-  cmake \
-  git \
-  libgtk-3-dev \
-  libavcodec-dev \
-  libavformat-dev \
-  libswscale-dev \
-  libv4l-dev \
-  libxvidcore-dev \
-  libx264-dev \
-  libjpeg-dev \
-  libpng-dev \
-  libtiff-dev \
-  gfortran \
-  openexr \
-  libssl-dev \
-  libtbbmalloc2 \
-  libtbb-dev \
-  libdc1394-dev \
-  libopenexr-dev \
-  libgstreamer-plugins-base1.0-dev \
-  libgstreamer1.0-dev \
-  tclsh \
-  libopenblas-dev \
-  liblapack-dev \
-  libgomp1 \
-  make \
-  moreutils
-msg_ok "Installed Dependencies"
-
-setup_hwaccel
-
-export TARGETARCH="amd64"
-export CCACHE_DIR=/root/.ccache
-export CCACHE_MAXSIZE=2G
-export APT_KEY_DONT_WARN_ON_DANGEROUS_USAGE=DontWarn
-export PIP_BREAK_SYSTEM_PACKAGES=1
-export NVIDIA_VISIBLE_DEVICES=all
-export NVIDIA_DRIVER_CAPABILITIES="compute,video,utility"
-export TOKENIZERS_PARALLELISM=true
-export TRANSFORMERS_NO_ADVISORY_WARNINGS=1
-export OPENCV_FFMPEG_LOGLEVEL=8
-export PYTHONWARNINGS="ignore:::numpy.core.getlimits"
-export HAILORT_LOGGER_PATH=NONE
-export TF_CPP_MIN_LOG_LEVEL=3
-export TF_CPP_MIN_VLOG_LEVEL=3
-export TF_ENABLE_ONEDNN_OPTS=0
-export AUTOGRAPH_VERBOSITY=0
-export GLOG_minloglevel=3
-export GLOG_logtostderr=0
-
-fetch_and_deploy_gh_release "frigate" "blakeblackshear/frigate" "tarball" "v0.17.0" "/opt/frigate"
-
-msg_info "Building Nginx"
-$STD bash /opt/frigate/docker/main/build_nginx.sh
-sed -e '/s6-notifyoncheck/ s/^#*/#/' -i /opt/frigate/docker/main/rootfs/etc/s6-overlay/s6-rc.d/nginx/run
-ln -sf /usr/local/nginx/sbin/nginx /usr/local/bin/nginx
-msg_ok "Built Nginx"
-
-msg_info "Building SQLite Extensions"
-$STD bash /opt/frigate/docker/main/build_sqlite_vec.sh
-msg_ok "Built SQLite Extensions"
-
-fetch_and_deploy_gh_release "go2rtc" "AlexxIT/go2rtc" "singlefile" "latest" "/usr/local/go2rtc/bin" "go2rtc_linux_amd64"
-
-msg_info "Installing Tempio"
-sed -i 's|/rootfs/usr/local|/usr/local|g' /opt/frigate/docker/main/install_tempio.sh
-$STD bash /opt/frigate/docker/main/install_tempio.sh
-ln -sf /usr/local/tempio/bin/tempio /usr/local/bin/tempio
-msg_ok "Installed Tempio"
-
-msg_info "Building libUSB"
-fetch_and_deploy_gh_release "libusb" "libusb/libusb" "tarball" "v1.0.26" "/opt/libusb"
-cd /opt/libusb
-$STD ./bootstrap.sh
-$STD ./configure CC='ccache gcc' CCX='ccache g++' --disable-udev --enable-shared
-$STD make -j "$(nproc)"
-cd /opt/libusb/libusb
-mkdir -p /usr/local/lib /usr/local/include/libusb-1.0 /usr/local/lib/pkgconfig
-$STD bash ../libtool --mode=install /usr/bin/install -c libusb-1.0.la /usr/local/lib
-install -c -m 644 libusb.h /usr/local/include/libusb-1.0
-cd /opt/libusb/
-install -c -m 644 libusb-1.0.pc /usr/local/lib/pkgconfig
-ldconfig
-msg_ok "Built libUSB"
-
-msg_info "Bootstrapping pip"
-wget -q https://bootstrap.pypa.io/get-pip.py -O /tmp/get-pip.py
-sed -i 's/args.append("setuptools")/args.append("setuptools==77.0.3")/' /tmp/get-pip.py
-$STD python3 /tmp/get-pip.py "pip"
-rm -f /tmp/get-pip.py
-msg_ok "Bootstrapped pip"
-
-msg_info "Installing Python Dependencies"
-$STD pip3 install -r /opt/frigate/docker/main/requirements.txt
-msg_ok "Installed Python Dependencies"
-
-msg_info "Building Python Wheels (Patience)"
-mkdir -p /wheels
-$STD bash /opt/frigate/docker/main/build_pysqlite3.sh
-for i in {1..3}; do
-  $STD pip3 wheel --wheel-dir=/wheels -r /opt/frigate/docker/main/requirements-wheels.txt --default-timeout=300 --retries=3 && break
-  [[ $i -lt 3 ]] && sleep 10
-done
-msg_ok "Built Python Wheels"
-
-NODE_VERSION="20" setup_nodejs
-
-msg_info "Downloading Inference Models"
-mkdir -p /models /openvino-model
-wget -q -O /edgetpu_model.tflite https://github.com/google-coral/test_data/raw/release-frogfish/ssdlite_mobiledet_coco_qat_postprocess_edgetpu.tflite
-wget -q -O /models/cpu_model.tflite https://github.com/google-coral/test_data/raw/release-frogfish/ssdlite_mobiledet_coco_qat_postprocess.tflite
-cp /opt/frigate/labelmap.txt /labelmap.txt
-msg_ok "Downloaded Inference Models"
-
-msg_info "Downloading Audio Model"
-wget -q -O /tmp/yamnet.tar.gz https://www.kaggle.com/api/v1/models/google/yamnet/tfLite/classification-tflite/1/download
-$STD tar xzf /tmp/yamnet.tar.gz -C /
-mv /1.tflite /cpu_audio_model.tflite
-cp /opt/frigate/audio-labelmap.txt /audio-labelmap.txt
-rm -f /tmp/yamnet.tar.gz
-msg_ok "Downloaded Audio Model"
-
-msg_info "Installing HailoRT Runtime"
-$STD bash /opt/frigate/docker/main/install_hailort.sh
-cp -a /opt/frigate/docker/main/rootfs/. /
-sed -i '/^.*unset DEBIAN_FRONTEND.*$/d' /opt/frigate/docker/main/install_deps.sh
-echo "libedgetpu1-max libedgetpu/accepted-eula boolean true" | debconf-set-selections
-echo "libedgetpu1-max libedgetpu/install-confirm-max boolean true" | debconf-set-selections
-# Allow Frigate's Intel media packages to overwrite files from system GPU driver packages
-echo 'force-overwrite' >/etc/dpkg/dpkg.cfg.d/force-overwrite
-$STD bash /opt/frigate/docker/main/install_deps.sh
-rm -f /etc/dpkg/dpkg.cfg.d/force-overwrite
-$STD pip3 install -U /wheels/*.whl
-ldconfig
-msg_ok "Installed HailoRT Runtime"
-
-msg_info "Installing MemryX Runtime"
-$STD bash /opt/frigate/docker/main/install_memryx.sh
-msg_ok "Installed MemryX Runtime"
-
-msg_info "Installing OpenVino"
-$STD pip3 install -r /opt/frigate/docker/main/requirements-ov.txt
-msg_ok "Installed OpenVino"
-
-msg_info "Building OpenVino Model"
-cd /models
-wget -q http://download.tensorflow.org/models/object_detection/ssdlite_mobilenet_v2_coco_2018_05_09.tar.gz
-$STD tar -zxf ssdlite_mobilenet_v2_coco_2018_05_09.tar.gz --no-same-owner
-if $STD python3 /opt/frigate/docker/main/build_ov_model.py; then
-  cp /models/ssdlite_mobilenet_v2.xml /openvino-model/
-  cp /models/ssdlite_mobilenet_v2.bin /openvino-model/
-  wget -q https://github.com/openvinotoolkit/open_model_zoo/raw/master/data/dataset_classes/coco_91cl_bkgr.txt -O /openvino-model/coco_91cl_bkgr.txt
-  sed -i 's/truck/car/g' /openvino-model/coco_91cl_bkgr.txt
-  msg_ok "Built OpenVino Model"
-else
-  msg_warn "OpenVino build failed (CPU may not support required instructions). Frigate will use CPU model."
-fi
-
-msg_info "Building Frigate Application (Patience)"
-cd /opt/frigate
-$STD pip3 install -r /opt/frigate/docker/main/requirements-dev.txt
-$STD bash /opt/frigate/.devcontainer/initialize.sh
-$STD make version
-cd /opt/frigate/web
-$STD npm install
-$STD npm run build
-mv /opt/frigate/web/dist/BASE_PATH/monacoeditorwork/* /opt/frigate/web/dist/assets/
-rm -rf /opt/frigate/web/dist/BASE_PATH
-cp -r /opt/frigate/web/dist/* /opt/frigate/web/
-sed -i '/^s6-svc -O \.$/s/^/#/' /opt/frigate/docker/main/rootfs/etc/s6-overlay/s6-rc.d/frigate/run
-msg_ok "Built Frigate Application"
-
-msg_info "Configuring Frigate"
-mkdir -p /config /media/frigate
-cp -r /opt/frigate/config/. /config
-
-curl -fsSL "https://github.com/intel-iot-devkit/sample-videos/raw/master/person-bicycle-car-detection.mp4" -o "/media/frigate/person-bicycle-car-detection.mp4"
-
-echo "tmpfs   /tmp/cache      tmpfs   defaults        0       0" >>/etc/fstab
-
-cat <<EOF >/etc/frigate.env
-DEFAULT_FFMPEG_VERSION="7.0"
-INCLUDED_FFMPEG_VERSIONS="7.0:5.0"
-NVIDIA_VISIBLE_DEVICES=all
-NVIDIA_DRIVER_CAPABILITIES="compute,video,utility"
-TOKENIZERS_PARALLELISM=true
-TRANSFORMERS_NO_ADVISORY_WARNINGS=1
-OPENCV_FFMPEG_LOGLEVEL=8
-PYTHONWARNINGS="ignore:::numpy.core.getlimits"
-HAILORT_LOGGER_PATH=NONE
-TF_CPP_MIN_LOG_LEVEL=3
-TF_CPP_MIN_VLOG_LEVEL=3
-TF_ENABLE_ONEDNN_OPTS=0
-AUTOGRAPH_VERBOSITY=0
-GLOG_minloglevel=3
-GLOG_logtostderr=0
-EOF
-
-cat <<EOF >/config/config.yml
-mqtt:
-  enabled: false
-cameras:
-  test:
-    ffmpeg:
-      inputs:
-        - path: /media/frigate/person-bicycle-car-detection.mp4
-          input_args: -re -stream_loop -1 -fflags +genpts
-          roles:
-            - detect
-    detect:
-      height: 1080
-      width: 1920
-      fps: 5
-auth:
-  enabled: false
-detect:
-  enabled: false
-EOF
-
-if grep -q -o -m1 -E 'avx[^ ]*|sse4_2' /proc/cpuinfo; then
-  cat <<EOF >>/config/config.yml
-ffmpeg:
-  hwaccel_args: auto
-detectors:
-  detector01:
-    type: openvino
-    device: AUTO
-model:
-  width: 300
-  height: 300
-  input_tensor: nhwc
-  input_pixel_format: bgr
-  path: /openvino-model/ssdlite_mobilenet_v2.xml
-  labelmap_path: /openvino-model/coco_91cl_bkgr.txt
-EOF
-else
-  cat <<EOF >>/config/config.yml
-ffmpeg:
-  hwaccel_args: auto
-model:
-  path: /cpu_model.tflite
-EOF
-fi
-msg_ok "Configured Frigate"
-
-msg_info "Creating Services"
-cat <<EOF >/etc/systemd/system/create_directories.service
-[Unit]
-Description=Create necessary directories for Frigate logs
-Before=frigate.service go2rtc.service nginx.service
-
-[Service]
-Type=oneshot
-ExecStart=/bin/bash -c '/bin/mkdir -p /dev/shm/logs/{frigate,go2rtc,nginx} && /bin/touch /dev/shm/logs/{frigate/current,go2rtc/current,nginx/current} && /bin/chmod -R 777 /dev/shm/logs'
-
-[Install]
-WantedBy=multi-user.target
-EOF
-
-cat <<EOF >/etc/systemd/system/go2rtc.service
-[Unit]
-Description=go2rtc streaming service
-After=network.target create_directories.service
-StartLimitIntervalSec=0
-
-[Service]
-Type=simple
-Restart=always
-RestartSec=1
-User=root
-EnvironmentFile=/etc/frigate.env
-ExecStartPre=+rm -f /dev/shm/logs/go2rtc/current
-ExecStart=/bin/bash -c "bash /opt/frigate/docker/main/rootfs/etc/s6-overlay/s6-rc.d/go2rtc/run 2> >(/usr/bin/ts '%%Y-%%m-%%d %%H:%%M:%%.S ' >&2) | /usr/bin/ts '%%Y-%%m-%%d %%H:%%M:%%.S '"
-StandardOutput=file:/dev/shm/logs/go2rtc/current
-StandardError=file:/dev/shm/logs/go2rtc/current
-
-[Install]
-WantedBy=multi-user.target
-EOF
-
-cat <<EOF >/etc/systemd/system/frigate.service
-[Unit]
-Description=Frigate NVR service
-After=go2rtc.service create_directories.service
-StartLimitIntervalSec=0
-
-[Service]
-Type=simple
-Restart=always
-RestartSec=1
-User=root
-EnvironmentFile=/etc/frigate.env
-ExecStartPre=+rm -f /dev/shm/logs/frigate/current
-ExecStart=/bin/bash -c "bash /opt/frigate/docker/main/rootfs/etc/s6-overlay/s6-rc.d/frigate/run 2> >(/usr/bin/ts '%%Y-%%m-%%d %%H:%%M:%%.S ' >&2) | /usr/bin/ts '%%Y-%%m-%%d %%H:%%M:%%.S '"
-StandardOutput=file:/dev/shm/logs/frigate/current
-StandardError=file:/dev/shm/logs/frigate/current
-
-[Install]
-WantedBy=multi-user.target
-EOF
-
-cat <<EOF >/etc/systemd/system/nginx.service
-[Unit]
-Description=Nginx reverse proxy for Frigate
-After=frigate.service create_directories.service
-StartLimitIntervalSec=0
-
-[Service]
-Type=simple
-Restart=always
-RestartSec=1
-User=root
-ExecStartPre=+rm -f /dev/shm/logs/nginx/current
-ExecStart=/bin/bash -c "bash /opt/frigate/docker/main/rootfs/etc/s6-overlay/s6-rc.d/nginx/run 2> >(/usr/bin/ts '%%Y-%%m-%%d %%H:%%M:%%.S ' >&2) | /usr/bin/ts '%%Y-%%m-%%d %%H:%%M:%%.S '"
-StandardOutput=file:/dev/shm/logs/nginx/current
-StandardError=file:/dev/shm/logs/nginx/current
-
-[Install]
-WantedBy=multi-user.target
-EOF
-
-systemctl daemon-reload
-systemctl enable -q --now create_directories
-sleep 2
-systemctl enable -q --now go2rtc
-sleep 2
-systemctl enable -q --now frigate
-sleep 2
-systemctl enable -q --now nginx
-msg_ok "Created Services"
-
-msg_info "Cleaning Up"
-rm -rf /opt/libusb /wheels /models/*.tar.gz
-msg_ok "Cleaned Up"
-
-motd_ssh
-customize
-cleanup_lxc

install/github-runner-install.sh

@@ -0,0 +1,54 @@
+#!/usr/bin/env bash
+# Copyright (c) 2021-2026 community-scripts ORG
+# License: MIT | https://github.com/community-scripts/ProxmoxVED/raw/main/LICENSE
+# Source: https://docs.github.com/en/actions/hosting-your-own-runners
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+
+
+NODE_VERSION="22" setup_nodejs
+
+msg_info "Creating runner user (no sudo)"
+if ! getent passwd runner >/dev/null 2>&1; then
+  useradd -m -s /bin/bash runner
+fi
+msg_ok "Runner user ready"
+
+fetch_and_deploy_gh_release "actions-runner" "actions/runner" "prebuild" "latest" "/opt/actions-runner" "actions-runner-linux-x64-*.tar.gz"
+
+msg_info "Setting ownership for runner user"
+chown -R runner:runner /opt/actions-runner
+msg_ok "Ownership set"
+
+msg_info "Creating Service"
+cat <<EOF >/etc/systemd/system/actions-runner.service
+[Unit]
+Description=GitHub Actions self-hosted runner
+Documentation=https://docs.github.com/en/actions/hosting-your-own-runners
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=simple
+User=runner
+WorkingDirectory=/opt/actions-runner
+ExecStart=/opt/actions-runner/run.sh
+Restart=on-failure
+RestartSec=10
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q actions-runner
+msg_ok "Created Service"
+
+motd_ssh
+customize
+cleanup_lxc

install/immich-install.sh

@@ -1,488 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: vhsdream
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://immich.app
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-echo ""
-echo ""
-echo -e "🤖 ${BL}Immich Machine Learning Options${CL}"
-echo "─────────────────────────────────────────"
-echo "Please choose your machine-learning type:"
-echo ""
-echo " 1) CPU only (default)"
-echo " 2) Intel OpenVINO (requires GPU passthrough)"
-echo ""
-
-read -r -p "${TAB3}Select machine-learning type [1]: " ML_TYPE
-ML_TYPE="${ML_TYPE:-1}"
-if [[ "$ML_TYPE" == "2" ]]; then
-  msg_info "Installing OpenVINO dependencies"
-  touch ~/.openvino
-  $STD apt install -y --no-install-recommends patchelf
-  tmp_dir=$(mktemp -d)
-  $STD pushd "$tmp_dir"
-  curl -fsSLO https://raw.githubusercontent.com/immich-app/base-images/refs/heads/main/server/Dockerfile
-  readarray -t INTEL_URLS < <(
-    sed -n "/intel-[igc|opencl]/p" ./Dockerfile | awk '{print $2}'
-    sed -n "/libigdgmm12/p" ./Dockerfile | awk '{print $3}'
-  )
-  for url in "${INTEL_URLS[@]}"; do
-    curl -fsSLO "$url"
-  done
-  $STD apt install -y ./libigdgmm12*.deb
-  rm ./libigdgmm12*.deb
-  $STD apt install -y ./*.deb
-  $STD apt-mark hold libigdgmm12
-  $STD popd
-  rm -rf "$tmp_dir"
-  dpkg-query -W -f='${Version}\n' intel-opencl-icd >~/.intel_version
-  msg_ok "Installed OpenVINO dependencies"
-fi
-
-setup_uv
-
-msg_info "Installing dependencies"
-$STD apt install --no-install-recommends -y \
-  git \
-  redis \
-  autoconf \
-  build-essential \
-  python3-dev \
-  automake \
-  cmake \
-  jq \
-  libtool \
-  libltdl-dev \
-  libgdk-pixbuf-2.0-dev \
-  libbrotli-dev \
-  libexif-dev \
-  libexpat1-dev \
-  libglib2.0-dev \
-  libgsf-1-dev \
-  libjpeg62-turbo-dev \
-  libspng-dev \
-  liblcms2-dev \
-  libopenexr-dev \
-  libgif-dev \
-  librsvg2-dev \
-  libexpat1 \
-  libgcc-s1 \
-  libgomp1 \
-  liblqr-1-0 \
-  libltdl7 \
-  libopenjp2-7 \
-  meson \
-  ninja-build \
-  pkg-config \
-  mesa-utils \
-  mesa-va-drivers \
-  mesa-vulkan-drivers \
-  ocl-icd-libopencl1 \
-  tini \
-  zlib1g \
-  libio-compress-brotli-perl \
-  libwebp7 \
-  libwebpdemux2 \
-  libwebpmux3 \
-  libhwy1t64 \
-  libdav1d-dev \
-  libhwy-dev \
-  libwebp-dev \
-  libaom-dev \
-  ccache
-
-setup_deb822_repo \
-  "jellyfin" \
-  "https://repo.jellyfin.org/jellyfin_team.gpg.key" \
-  "https://repo.jellyfin.org/debian" \
-  "$(get_os_info codename)"
-$STD apt install -y jellyfin-ffmpeg7
-ln -sf /usr/lib/jellyfin-ffmpeg/ffmpeg /usr/bin/ffmpeg
-ln -sf /usr/lib/jellyfin-ffmpeg/ffprobe /usr/bin/ffprobe
-
-# Set permissions for /dev/dri (only in privileged containers and if /dev/dri exists)
-if [[ "$CTTYPE" == "0" && -d /dev/dri ]]; then
-  chgrp video /dev/dri 2>/dev/null || true
-  chmod 755 /dev/dri 2>/dev/null || true
-  chmod 660 /dev/dri/* 2>/dev/null || true
-  $STD adduser "$(id -u -n)" video 2>/dev/null || true
-  $STD adduser "$(id -u -n)" render 2>/dev/null || true
-fi
-msg_ok "Dependencies Installed"
-
-msg_info "Installing Mise"
-curl -fSs https://mise.jdx.dev/gpg-key.pub | tee /etc/apt/keyrings/mise-archive-keyring.pub 1>/dev/null
-echo "deb [signed-by=/etc/apt/keyrings/mise-archive-keyring.pub arch=amd64] https://mise.jdx.dev/deb stable main" >/etc/apt/sources.list.d/mise.list
-$STD apt update
-$STD apt install -y mise
-msg_ok "Installed Mise"
-
-msg_info "Configuring Debian Testing Repo"
-sed -i 's/ trixie-updates/ trixie-updates testing/g' /etc/apt/sources.list.d/debian.sources
-cat <<EOF >/etc/apt/preferences.d/preferences
-Package: *
-Pin: release a=unstable
-Pin-Priority: 450
-
-Package: *
-Pin:release a=testing
-Pin-Priority: 450
-EOF
-$STD apt update
-msg_ok "Configured Debian Testing repo"
-msg_info "Installing packages from Debian Testing repo"
-$STD apt install -t testing --no-install-recommends -yqq libmimalloc3 libde265-dev
-msg_ok "Installed packages from Debian Testing repo"
-
-PNPM_VERSION="$(curl -fsSL "https://raw.githubusercontent.com/immich-app/immich/refs/heads/main/package.json" | jq -r '.packageManager | split("@")[1]')"
-NODE_VERSION="24" NODE_MODULE="pnpm@${PNPM_VERSION}" setup_nodejs
-PG_VERSION="16" PG_MODULES="pgvector" setup_postgresql
-
-VCHORD_RELEASE="0.5.3"
-msg_info "Installing Vectorchord v${VCHORD_RELEASE}"
-curl -fsSL "https://github.com/tensorchord/VectorChord/releases/download/${VCHORD_RELEASE}/postgresql-16-vchord_${VCHORD_RELEASE}-1_amd64.deb" -o vchord.deb
-$STD apt install -y ./vchord.deb
-rm vchord.deb
-echo "$VCHORD_RELEASE" >~/.vchord_version
-msg_ok "Installed Vectorchord v${VCHORD_RELEASE}"
-
-sed -i -e "/^#shared_preload/s/^#//;/^shared_preload/s/''/'vchord.so'/" /etc/postgresql/16/main/postgresql.conf
-systemctl restart postgresql.service
-PG_DB_NAME="immich" PG_DB_USER="immich" PG_DB_GRANT_SUPERUSER="true" PG_DB_SKIP_ALTER_ROLE="true" setup_postgresql_db
-
-msg_info "Compiling Custom Photo-processing Library (extreme patience)"
-LD_LIBRARY_PATH=/usr/local/lib
-export LD_RUN_PATH=/usr/local/lib
-STAGING_DIR=/opt/staging
-BASE_REPO="https://github.com/immich-app/base-images"
-BASE_DIR=${STAGING_DIR}/base-images
-SOURCE_DIR=${STAGING_DIR}/image-source
-$STD git clone -b main "$BASE_REPO" "$BASE_DIR"
-mkdir -p "$SOURCE_DIR"
-
-msg_info "(1/5) Compiling libjxl"
-cd "$STAGING_DIR"
-SOURCE=${SOURCE_DIR}/libjxl
-JPEGLI_LIBJPEG_LIBRARY_SOVERSION="62"
-JPEGLI_LIBJPEG_LIBRARY_VERSION="62.3.0"
-: "${LIBJXL_REVISION:=$(jq -cr '.revision' $BASE_DIR/server/sources/libjxl.json)}"
-$STD git clone https://github.com/libjxl/libjxl.git "$SOURCE"
-cd "$SOURCE"
-$STD git reset --hard "$LIBJXL_REVISION"
-$STD git submodule update --init --recursive --depth 1 --recommend-shallow
-$STD git apply "$BASE_DIR"/server/sources/libjxl-patches/jpegli-empty-dht-marker.patch
-$STD git apply "$BASE_DIR"/server/sources/libjxl-patches/jpegli-icc-warning.patch
-mkdir build
-cd build
-$STD cmake \
-  -DCMAKE_BUILD_TYPE=Release \
-  -DBUILD_TESTING=OFF \
-  -DJPEGXL_ENABLE_DOXYGEN=OFF \
-  -DJPEGXL_ENABLE_MANPAGES=OFF \
-  -DJPEGXL_ENABLE_PLUGIN_GIMP210=OFF \
-  -DJPEGXL_ENABLE_BENCHMARK=OFF \
-  -DJPEGXL_ENABLE_EXAMPLES=OFF \
-  -DJPEGXL_FORCE_SYSTEM_BROTLI=ON \
-  -DJPEGXL_FORCE_SYSTEM_HWY=ON \
-  -DJPEGXL_ENABLE_JPEGLI=ON \
-  -DJPEGXL_ENABLE_JPEGLI_LIBJPEG=ON \
-  -DJPEGXL_INSTALL_JPEGLI_LIBJPEG=ON \
-  -DJPEGXL_ENABLE_PLUGINS=ON \
-  -DJPEGLI_LIBJPEG_LIBRARY_SOVERSION="$JPEGLI_LIBJPEG_LIBRARY_SOVERSION" \
-  -DJPEGLI_LIBJPEG_LIBRARY_VERSION="$JPEGLI_LIBJPEG_LIBRARY_VERSION" \
-  -DLIBJPEG_TURBO_VERSION_NUMBER=2001005 \
-  ..
-$STD cmake --build . -- -j"$(nproc)"
-$STD cmake --install .
-ldconfig /usr/local/lib
-$STD make clean
-cd "$STAGING_DIR"
-rm -rf "$SOURCE"/{build,third_party}
-msg_ok "(1/5) Compiled libjxl"
-
-msg_info "(2/5) Compiling libheif"
-SOURCE=${SOURCE_DIR}/libheif
-: "${LIBHEIF_REVISION:=$(jq -cr '.revision' $BASE_DIR/server/sources/libheif.json)}"
-$STD git clone https://github.com/strukturag/libheif.git "$SOURCE"
-cd "$SOURCE"
-$STD git reset --hard "$LIBHEIF_REVISION"
-mkdir build
-cd build
-$STD cmake --preset=release-noplugins \
-  -DWITH_DAV1D=ON \
-  -DENABLE_PARALLEL_TILE_DECODING=ON \
-  -DWITH_LIBSHARPYUV=ON \
-  -DWITH_LIBDE265=ON \
-  -DWITH_AOM_DECODER=OFF \
-  -DWITH_AOM_ENCODER=ON \
-  -DWITH_X265=OFF \
-  -DWITH_EXAMPLES=OFF \
-  ..
-$STD make install -j "$(nproc)"
-ldconfig /usr/local/lib
-$STD make clean
-cd "$STAGING_DIR"
-rm -rf "$SOURCE"/build
-msg_ok "(2/5) Compiled libheif"
-
-msg_info "(3/5) Compiling libraw"
-SOURCE=${SOURCE_DIR}/libraw
-: "${LIBRAW_REVISION:=$(jq -cr '.revision' $BASE_DIR/server/sources/libraw.json)}"
-$STD git clone https://github.com/libraw/libraw.git "$SOURCE"
-cd "$SOURCE"
-$STD git reset --hard "$LIBRAW_REVISION"
-$STD autoreconf --install
-$STD ./configure --disable-examples
-$STD make -j"$(nproc)"
-$STD make install
-ldconfig /usr/local/lib
-$STD make clean
-cd "$STAGING_DIR"
-msg_ok "(3/5) Compiled libraw"
-
-msg_info "(4/5) Compiling imagemagick"
-SOURCE=$SOURCE_DIR/imagemagick
-: "${IMAGEMAGICK_REVISION:=$(jq -cr '.revision' $BASE_DIR/server/sources/imagemagick.json)}"
-$STD git clone https://github.com/ImageMagick/ImageMagick.git "$SOURCE"
-cd "$SOURCE"
-$STD git reset --hard "$IMAGEMAGICK_REVISION"
-$STD ./configure --with-modules CPPFLAGS="-DMAGICK_LIBRAW_VERSION_TAIL=202502"
-$STD make -j"$(nproc)"
-$STD make install
-ldconfig /usr/local/lib
-$STD make clean
-cd "$STAGING_DIR"
-msg_ok "(4/5) Compiled imagemagick"
-
-msg_info "(5/5) Compiling libvips"
-SOURCE=$SOURCE_DIR/libvips
-: "${LIBVIPS_REVISION:=$(jq -cr '.revision' $BASE_DIR/server/sources/libvips.json)}"
-$STD git clone https://github.com/libvips/libvips.git "$SOURCE"
-cd "$SOURCE"
-$STD git reset --hard "$LIBVIPS_REVISION"
-$STD meson setup build --buildtype=release --libdir=lib -Dintrospection=disabled -Dtiff=disabled
-cd build
-$STD ninja install
-ldconfig /usr/local/lib
-cd "$STAGING_DIR"
-rm -rf "$SOURCE"/build
-msg_ok "(5/5) Compiled libvips"
-{
-  echo "imagemagick: $IMAGEMAGICK_REVISION"
-  echo "libheif: $LIBHEIF_REVISION"
-  echo "libjxl: $LIBJXL_REVISION"
-  echo "libraw: $LIBRAW_REVISION"
-  echo "libvips: $LIBVIPS_REVISION"
-} >~/.immich_library_revisions
-msg_ok "Custom Photo-processing Libraries Compiled Successfully"
-
-INSTALL_DIR="/opt/${APPLICATION}"
-UPLOAD_DIR="${INSTALL_DIR}/upload"
-SRC_DIR="${INSTALL_DIR}/source"
-APP_DIR="${INSTALL_DIR}/app"
-PLUGIN_DIR="${APP_DIR}/corePlugin"
-ML_DIR="${APP_DIR}/machine-learning"
-GEO_DIR="${INSTALL_DIR}/geodata"
-mkdir -p "$INSTALL_DIR"
-mkdir -p {"${APP_DIR}","${UPLOAD_DIR}","${GEO_DIR}","${INSTALL_DIR}"/cache}
-
-fetch_and_deploy_gh_release "immich" "immich-app/immich" "tag" "v2.5.2" "$SRC_DIR"
-
-msg_info "Installing Immich (patience)"
-
-cd "$SRC_DIR"/server
-export COREPACK_ENABLE_DOWNLOAD_PROMPT=0
-export CI=1
-corepack enable
-
-# server build
-export SHARP_IGNORE_GLOBAL_LIBVIPS=true
-$STD pnpm --filter immich --frozen-lockfile build
-unset SHARP_IGNORE_GLOBAL_LIBVIPS
-export SHARP_FORCE_GLOBAL_LIBVIPS=true
-$STD pnpm --filter immich --frozen-lockfile --prod --no-optional deploy "$APP_DIR"
-cp "$APP_DIR"/package.json "$APP_DIR"/bin
-sed -i 's|^start|./start|' "$APP_DIR"/bin/immich-admin
-
-# openapi & web build
-cd "$SRC_DIR"
-echo "packageImportMethod: hardlink" >>./pnpm-workspace.yaml
-$STD pnpm --filter @immich/sdk --filter immich-web --frozen-lockfile --force install
-unset SHARP_FORCE_GLOBAL_LIBVIPS
-export SHARP_IGNORE_GLOBAL_LIBVIPS=true
-$STD pnpm --filter @immich/sdk --filter immich-web build
-cp -a web/build "$APP_DIR"/www
-cp LICENSE "$APP_DIR"
-
-# cli build
-$STD pnpm --filter @immich/sdk --filter @immich/cli --frozen-lockfile install
-$STD pnpm --filter @immich/sdk --filter @immich/cli build
-$STD pnpm --filter @immich/cli --prod --no-optional deploy "$APP_DIR"/cli
-
-# plugins
-cd "$SRC_DIR"
-$STD mise trust --ignore ./mise.toml
-$STD mise trust ./plugins/mise.toml
-cd plugins
-$STD mise install
-$STD mise run build
-mkdir -p "$PLUGIN_DIR"
-cp -r ./dist "$PLUGIN_DIR"/dist
-cp ./manifest.json "$PLUGIN_DIR"
-msg_ok "Installed Immich Server, Web and Plugin Components"
-
-cd "$SRC_DIR"/machine-learning
-$STD useradd -U -s /usr/sbin/nologin -r -M -d "$INSTALL_DIR" immich
-mkdir -p "$ML_DIR" && chown -R immich:immich "$INSTALL_DIR"
-export VIRTUAL_ENV="${ML_DIR}/ml-venv"
-if [[ -f ~/.openvino ]]; then
-  msg_info "Installing HW-accelerated machine-learning"
-  $STD sudo --preserve-env=VIRTUAL_ENV -nu immich uv sync --extra openvino --no-dev --active --link-mode copy -n -p python3.13 --managed-python
-  patchelf --clear-execstack "${VIRTUAL_ENV}/lib/python3.13/site-packages/onnxruntime/capi/onnxruntime_pybind11_state.cpython-313-x86_64-linux-gnu.so"
-  msg_ok "Installed HW-accelerated machine-learning"
-else
-  msg_info "Installing machine-learning"
-  $STD sudo --preserve-env=VIRTUAL_ENV -nu immich uv sync --extra cpu --no-dev --active --link-mode copy -n -p python3.11 --managed-python
-  msg_ok "Installed machine-learning"
-fi
-cd "$SRC_DIR"
-cp -a machine-learning/{ann,immich_ml} "$ML_DIR"
-if [[ -f ~/.openvino ]]; then
-  sed -i "/intra_op/s/int = 0/int = os.cpu_count() or 0/" "$ML_DIR"/immich_ml/config.py
-fi
-ln -sf "$APP_DIR"/resources "$INSTALL_DIR"
-
-cd "$APP_DIR"
-grep -rl /usr/src | xargs -n1 sed -i "s|\/usr/src|$INSTALL_DIR|g"
-grep -rlE "'/build'" | xargs -n1 sed -i "s|'/build'|'$APP_DIR'|g"
-sed -i "s@\"/cache\"@\"$INSTALL_DIR/cache\"@g" "$ML_DIR"/immich_ml/config.py
-ln -s "$UPLOAD_DIR" "$APP_DIR"/upload
-ln -s "$UPLOAD_DIR" "$ML_DIR"/upload
-
-msg_info "Installing GeoNames data"
-cd "$GEO_DIR"
-curl -fsSLZ -O "https://download.geonames.org/export/dump/admin1CodesASCII.txt" \
-  -O "https://download.geonames.org/export/dump/admin2Codes.txt" \
-  -O "https://download.geonames.org/export/dump/cities500.zip" \
-  -O "https://raw.githubusercontent.com/nvkelso/natural-earth-vector/v5.1.2/geojson/ne_10m_admin_0_countries.geojson"
-unzip -q cities500.zip
-date --iso-8601=seconds | tr -d "\n" >geodata-date.txt
-rm cities500.zip
-cd "$INSTALL_DIR"
-ln -s "$GEO_DIR" "$APP_DIR"
-msg_ok "Installed GeoNames data"
-
-mkdir -p /var/log/immich
-touch /var/log/immich/{web.log,ml.log}
-msg_ok "Installed Immich"
-
-msg_info "Modifying user, creating env file, scripts & services"
-usermod -aG video,render immich
-
-cat <<EOF >"${INSTALL_DIR}"/.env
-TZ=$(cat /etc/timezone)
-IMMICH_VERSION=release
-NODE_ENV=production
-IMMICH_ALLOW_SETUP=true
-
-DB_HOSTNAME=127.0.0.1
-DB_USERNAME=${PG_DB_USER}
-DB_PASSWORD=${PG_DB_PASS}
-DB_DATABASE_NAME=${PG_DB_NAME}
-DB_VECTOR_EXTENSION=vectorchord
-
-REDIS_HOSTNAME=127.0.0.1
-IMMICH_MACHINE_LEARNING_URL=http://127.0.0.1:3003
-MACHINE_LEARNING_CACHE_FOLDER=${INSTALL_DIR}/cache
-## - For OpenVINO only - workaround for onnxruntime-openvino 1.23.x crash
-## - See: https://github.com/immich-app/immich/pull/11240
-MACHINE_LEARNING_OPENVINO_NUM_THREADS=$(nproc)
-## - Uncomment below to increase inference speed while reducing accuracy
-# MACHINE_LEARNING_OPENVINO_PRECISION=FP16
-
-IMMICH_MEDIA_LOCATION=${UPLOAD_DIR}
-EOF
-cat <<EOF >"${ML_DIR}"/ml_start.sh
-#!/usr/bin/env bash
-
-cd ${ML_DIR}
-. ${VIRTUAL_ENV}/bin/activate
-
-set -a
-. ${INSTALL_DIR}/.env
-set +a
-
-python3 -m immich_ml
-EOF
-cat <<EOF >"$APP_DIR"/bin/start.sh
-#!/usr/bin/env bash
-
-set -a
-. ${INSTALL_DIR}/.env
-set +a
-
-/usr/bin/node ${APP_DIR}/dist/main.js "\$@"
-EOF
-chmod +x "$ML_DIR"/ml_start.sh "$APP_DIR"/bin/start.sh
-cat <<EOF >/etc/systemd/system/"${APPLICATION}"-web.service
-[Unit]
-Description=${APPLICATION} Web Service
-After=network.target
-Requires=redis-server.service
-Requires=postgresql.service
-Requires=immich-ml.service
-
-[Service]
-Type=simple
-User=immich
-Group=immich
-UMask=0077
-WorkingDirectory=${APP_DIR}
-EnvironmentFile=${INSTALL_DIR}/.env
-ExecStart=/usr/bin/node ${APP_DIR}/dist/main
-Restart=on-failure
-SyslogIdentifier=immich-web
-StandardOutput=append:/var/log/immich/web.log
-StandardError=append:/var/log/immich/web.log
-
-[Install]
-WantedBy=multi-user.target
-EOF
-cat <<EOF >/etc/systemd/system/"${APPLICATION}"-ml.service
-[Unit]
-Description=${APPLICATION} Machine-Learning
-After=network.target
-
-[Service]
-Type=simple
-UMask=0077
-User=immich
-Group=immich
-WorkingDirectory=${APP_DIR}
-EnvironmentFile=${INSTALL_DIR}/.env
-ExecStart=${ML_DIR}/ml_start.sh
-Restart=on-failure
-SyslogIdentifier=immich-machine-learning
-StandardOutput=append:/var/log/immich/ml.log
-StandardError=append:/var/log/immich/ml.log
-
-[Install]
-WantedBy=multi-user.target
-EOF
-chown -R immich:immich "$INSTALL_DIR" /var/log/immich
-systemctl enable -q --now "$APPLICATION"-ml.service "$APPLICATION"-web.service
-msg_ok "Modified user, created env file, scripts and services"
-
-motd_ssh
-customize
-cleanup_lxc

install/localagi-install.sh

@@ -0,0 +1,75 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: BillyOutlast
+# License: MIT | https://github.com/community-scripts/ProxmoxVED/raw/main/LICENSE
+# Source: https://github.com/mudler/LocalAGI
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+APP="LocalAGI"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt install -y build-essential
+msg_ok "Installed Dependencies"
+
+NODE_VERSION="24" setup_nodejs
+setup_go
+
+msg_info "Installing Bun"
+export BUN_INSTALL="/root/.bun"
+curl -fsSL https://bun.sh/install | $STD bash
+ln -sf /root/.bun/bin/bun /usr/local/bin/bun
+ln -sf /root/.bun/bin/bunx /usr/local/bin/bunx
+msg_ok "Installed Bun"
+
+fetch_and_deploy_gh_release "localagi" "mudler/LocalAGI" "tarball" "latest" "/opt/localagi"
+
+msg_info "Configuring LocalAGI"
+mkdir -p /opt/localagi/pool
+cat <<'EOF' >/opt/localagi/.env
+LOCALAGI_MODEL=gemma-3-4b-it-qat
+LOCALAGI_MULTIMODAL_MODEL=moondream2-20250414
+LOCALAGI_IMAGE_MODEL=sd-1.5-ggml
+LOCALAGI_LLM_API_URL=http://127.0.0.1:11434/v1
+LOCALAGI_STATE_DIR=/opt/localagi/pool
+EOF
+msg_ok "Configured LocalAGI"
+
+msg_info "Setting up LocalAGI"
+cd /opt/localagi/webui/react-ui
+$STD bun install
+$STD bun run build
+cd /opt/localagi
+$STD go build -o /usr/local/bin/localagi
+msg_ok "Set up LocalAGI"
+
+msg_info "Creating LocalAGI systemd service"
+cat <<EOF >/etc/systemd/system/localagi.service
+[Unit]
+Description=LocalAGI
+After=network.target
+
+[Service]
+User=root
+Type=simple
+EnvironmentFile=/opt/localagi/.env
+
+WorkingDirectory=/opt/localagi
+ExecStart=/usr/local/bin/localagi
+Restart=on-failure
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now localagi
+msg_ok "Created LocalAGI systemd service"
+
+motd_ssh
+customize
+cleanup_lxc

install/navidrome-install.sh

@@ -0,0 +1,33 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/navidrome/navidrome
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies (Patience)"
+$STD apt install -y ffmpeg
+msg_ok "Installed Dependencies"
+
+fetch_and_deploy_gh_release "navidrome" "navidrome/navidrome" "binary"
+
+msg_info "Starting Navidrome"
+systemctl enable -q --now navidrome
+msg_ok "Started Navidrome"
+
+read -p "${TAB3}Do you want to install filebrowser addon? (y/n) " -n 1 -r
+if [[ $REPLY =~ ^[Yy]$ ]]; then
+  bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/tools/addon/filebrowser.sh)"
+fi
+
+motd_ssh
+customize
+cleanup_lxc

install/netbird-install.sh

@@ -1,183 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: TechHutTV
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://netbird.io/
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Setting up NetBird Repository"
-setup_deb822_repo \
-	"netbird" \
-	"https://pkgs.netbird.io/debian/public.key" \
-	"https://pkgs.netbird.io/debian" \
-	"stable"
-msg_ok "Set up NetBird Repository"
-
-msg_info "Installing NetBird"
-$STD apt install -y netbird
-msg_ok "Installed NetBird"
-
-msg_info "Enabling NetBird Service"
-$STD systemctl enable -q --now netbird
-msg_ok "Enabled NetBird Service"
-
-echo ""
-echo ""
-echo -e "${BL}NetBird Deployment Type${CL}"
-echo "─────────────────────────────────────────"
-echo "Are you using NetBird Managed or Self-Hosted?"
-echo ""
-echo " 1) NetBird Managed (default) - Use NetBird's managed service"
-echo " 2) Self-Hosted - Use your own NetBird management server"
-echo ""
-
-read -r -p "${TAB3}Select deployment type [1]: " DEPLOYMENT_TYPE
-DEPLOYMENT_TYPE="${DEPLOYMENT_TYPE:-1}"
-
-NETBIRD_MGMT_URL=""
-case "$DEPLOYMENT_TYPE" in
-  1)
-    msg_ok "Using NetBird Managed service"
-    ;;
-  2)
-    echo ""
-    echo -e "${BL}Self-Hosted Configuration${CL}"
-    echo "─────────────────────────────────────────"
-    echo "Enter your NetBird management server URL."
-    echo "Example: https://management.example.com"
-    echo ""
-    read -r -p "Management URL: " NETBIRD_MGMT_URL
-
-    if [[ -z "$NETBIRD_MGMT_URL" ]]; then
-      msg_warn "No management URL provided. Run 'netbird up --management-url <url>' to connect."
-    else
-      NETBIRD_MGMT_URL="${NETBIRD_MGMT_URL%/}"
-      msg_ok "Management URL configured: ${NETBIRD_MGMT_URL}"
-    fi
-    ;;
-  *)
-    msg_warn "Invalid selection. Using NetBird Managed service."
-    ;;
-esac
-
-echo ""
-echo ""
-echo -e "${BL}NetBird Connection Setup${CL}"
-echo "─────────────────────────────────────────"
-echo "Choose how to connect to your NetBird network:"
-echo ""
-if [[ "$DEPLOYMENT_TYPE" == "1" ]]; then
-  echo " 1) Setup Key (default) - Use a pre-generated setup key"
-  echo " 2) SSO Login - Authenticate via browser with your identity provider"
-  echo " 3) Skip - Configure later with 'netbird up'"
-else
-  echo " 1) Setup Key (default) - Use a pre-generated setup key"
-  echo " 2) Skip - Configure later with 'netbird up'"
-fi
-echo ""
-
-read -r -p "Select authentication method [1]: " AUTH_METHOD
-AUTH_METHOD="${AUTH_METHOD:-1}"
-
-if [[ "$DEPLOYMENT_TYPE" == "1" ]]; then
-  case "$AUTH_METHOD" in
-    1)
-      echo ""
-      echo "Enter your NetBird setup key from the NetBird dashboard."
-      echo ""
-      read -r -p "Setup key: " NETBIRD_SETUP_KEY
-      echo ""
-
-      if [[ -z "$NETBIRD_SETUP_KEY" ]]; then
-        msg_warn "No setup key provided. Run 'netbird up -k <key>' to connect."
-      else
-        msg_info "Connecting to NetBird with setup key"
-        if $STD netbird up -k "$NETBIRD_SETUP_KEY"; then
-          msg_ok "Connected to NetBird"
-        else
-          msg_warn "Connection failed. Run 'netbird up -k <key>' to retry."
-        fi
-      fi
-      ;;
-    2)
-      echo ""
-      echo -e "${BL}SSO Authentication${CL}"
-      echo "─────────────────────────────────────────"
-      echo "A login URL will appear below."
-      echo "Copy the URL and open it in your browser to authenticate."
-      echo ""
-
-      msg_info "Starting SSO login"
-      netbird login 2>&1 || true
-      echo ""
-
-      msg_info "Connecting to NetBird"
-      if $STD netbird up; then
-        msg_ok "Connected to NetBird"
-      else
-        msg_warn "Connection failed. Run 'netbird up' to retry."
-      fi
-      ;;
-    3)
-      msg_ok "Skipped. Run 'netbird up' to connect."
-      ;;
-    *)
-      msg_warn "Invalid selection. Run 'netbird up' to connect."
-      ;;
-  esac
-else
-  case "$AUTH_METHOD" in
-    1)
-      echo ""
-      echo "Enter your NetBird setup key from the NetBird dashboard."
-      echo ""
-      read -r -p "Setup key: " NETBIRD_SETUP_KEY
-      echo ""
-
-      if [[ -z "$NETBIRD_SETUP_KEY" ]]; then
-        if [[ -z "$NETBIRD_MGMT_URL" ]]; then
-          msg_warn "No setup key provided. Run 'netbird up -k <key> --management-url <url>' to connect."
-        else
-          msg_warn "No setup key provided. Run 'netbird up -k <key> --management-url $NETBIRD_MGMT_URL' to connect."
-        fi
-      else
-        if [[ -z "$NETBIRD_MGMT_URL" ]]; then
-          msg_error "Management URL is required for self-hosted deployments. Please configure it first."
-        else
-          msg_info "Connecting to NetBird with setup key"
-          if $STD netbird up -k "$NETBIRD_SETUP_KEY" --management-url "$NETBIRD_MGMT_URL"; then
-            msg_ok "Connected to NetBird"
-          else
-            msg_warn "Connection failed. Run 'netbird up -k <key> --management-url $NETBIRD_MGMT_URL' to retry."
-          fi
-        fi
-      fi
-      ;;
-    2)
-      if [[ -z "$NETBIRD_MGMT_URL" ]]; then
-        msg_ok "Skipped. Run 'netbird up --management-url <url>' to connect."
-      else
-        msg_ok "Skipped. Run 'netbird up --management-url $NETBIRD_MGMT_URL' to connect."
-      fi
-      ;;
-    *)
-      if [[ -z "$NETBIRD_MGMT_URL" ]]; then
-        msg_warn "Invalid selection. Run 'netbird up --management-url <url>' to connect."
-      else
-        msg_warn "Invalid selection. Run 'netbird up --management-url $NETBIRD_MGMT_URL' to connect."
-      fi
-      ;;
-  esac
-fi
-
-motd_ssh
-customize
-cleanup_lxc

install/oxicloud-install.sh

@@ -0,0 +1,71 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: vhsdream
+# License: MIT | https://github.com/community-scripts/ProxmoxVED/raw/main/LICENSE
+# Source: https://github.com/DioCrafts/OxiCloud
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt install -y \
+  build-essential
+msg_ok "Installed Dependencies"
+
+PG_VERSION="17" setup_postgresql
+PG_DB_NAME="oxicloud" PG_DB_USER="oxicloud" setup_postgresql_db
+fetch_and_deploy_gh_release "OxiCloud" "DioCrafts/OxiCloud" "tarball" "latest" "/opt/oxicloud"
+TOOLCHAIN="$(sed -n '2s/[^:]*://p' /opt/oxicloud/Dockerfile | awk -F- '{print $1}')"
+RUST_TOOLCHAIN=$TOOLCHAIN setup_rust
+
+msg_info "Building OxiCloud"
+cd /opt/oxicloud
+export DATABASE_URL="postgres://${PG_DB_USER}:${PG_DB_PASS}@localhost/${PG_DB_NAME}"
+$STD cargo build --release
+mv target/release/oxicloud /usr/bin/oxicloud && chmod +x /usr/bin/oxicloud
+msg_ok "Built OxiCloud"
+
+msg_info "Configuring OxiCloud"
+mkdir -p {/mnt/oxicloud,/etc/oxicloud}
+sed -e 's|_STORAGE_PATH=.*|_STORAGE_PATH=/mnt/oxicloud|' \
+  -e 's|_SERVER_HOST=.*|_SERVER_HOST=0.0.0.0|' \
+  -e "s|^#OXICLOUD_BASE_URL=.*|OXICLOUD_BASE_URL=${LOCAL_IP}:8086|" \
+  -e "s|_STRING=.*|_STRING=${DATABASE_URL}|" \
+  -e "s|DATABASE_URL=.*|DATABASE_URL=${DATABASE_URL}|" \
+  -e "s|^#OXICLOUD_JWT_SECRET=.*|OXICLOUD_JWT_SECRET=$(openssl rand -hex 32)|" \
+  -e 's|^#OXICLOUD_ENABLE|OXICLOUD_ENABLE|g' \
+  /opt/oxicloud/example.env >/etc/oxicloud/.env
+chmod 600 /etc/oxicloud/.env
+msg_ok "Configured OxiCloud"
+
+msg_info "Creating OxiCloud Service"
+cat <<EOF >/etc/systemd/system/oxicloud.service
+[Unit]
+Description=OxiCloud Service
+After=network.target
+
+[Service]
+Type=simple
+User=root
+EnvironmentFile=/etc/oxicloud/.env
+ExecStart=/usr/bin/oxicloud
+Restart=always
+RestartSec=5
+StandardOutput=journal
+StandardError=journal
+
+[Install]
+WantedBy=multi-user.target
+EOF
+$STD systemctl enable -q --now oxicloud
+msg_ok "Created OxiCloud Service"
+
+motd_ssh
+customize
+cleanup_lxc

install/papra-install.sh

@@ -1,79 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVED/raw/main/LICENSE
-# Source: https://github.com/papra-hq/papra
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt-get install -y \
-  build-essential \
-  tesseract-ocr \
-  tesseract-ocr-all
-msg_ok "Installed Dependencies"
-
-RELEASE=$(curl -fsSL https://api.github.com/repos/papra-hq/papra/releases | grep -oP '"tag_name":\s*"\K@papra/app@[^"]+' | head -n1)
-fetch_and_deploy_gh_release "papra" "papra-hq/papra" "tarball" "${RELEASE}" "/opt/papra"
-
-pnpm_version=$(grep -oP '"packageManager":\s*"pnpm@\K[^"]+' /opt/papra/package.json)
-NODE_VERSION="24" NODE_MODULE="pnpm@$pnpm_version" setup_nodejs
-
-msg_info "Installing Papra (Patience)"
-cd /opt/papra
-$STD pnpm install --frozen-lockfile
-$STD pnpm --filter "@papra/app-client..." run build
-$STD pnpm --filter "@papra/app-server..." run build
-ln -sf /opt/papra/apps/papra-client/dist /opt/papra/apps/papra-server/public
-msg_ok "Installed Papra"
-
-msg_info "Configuring Papra"
-mkdir -p /opt/papra_data/{db,documents,ingestion}
-[[ ! -f /opt/papra_data/.secret ]] && openssl rand -hex 32 >/opt/papra_data/.secret
-cat <<EOF >/opt/papra/apps/papra-server/.env
-NODE_ENV=production
-SERVER_SERVE_PUBLIC_DIR=true
-PORT=1221
-DATABASE_URL=file:/opt/papra_data/db/db.sqlite
-DOCUMENT_STORAGE_FILESYSTEM_ROOT=/opt/papra_data/documents
-PAPRA_CONFIG_DIR=/opt/papra_data
-AUTH_SECRET=$(cat /opt/papra_data/.secret)
-BETTER_AUTH_SECRET=$(cat /opt/papra_data/.secret)
-BETTER_AUTH_TELEMETRY=0
-CLIENT_BASE_URL=http://${LOCAL_IP}:1221
-SERVER_BASE_URL=http://${LOCAL_IP}:1221
-EMAILS_DRY_RUN=true
-INGESTION_FOLDER_IS_ENABLED=true
-INGESTION_FOLDER_ROOT_PATH=/opt/papra_data/ingestion
-EOF
-msg_ok "Configured Papra"
-
-msg_info "Creating Service"
-cat <<EOF >/etc/systemd/system/papra.service
-[Unit]
-Description=Papra Document Management
-After=network.target
-
-[Service]
-Type=simple
-WorkingDirectory=/opt/papra/apps/papra-server
-EnvironmentFile=/opt/papra/apps/papra-server/.env
-ExecStartPre=/usr/bin/pnpm run migrate:up
-ExecStart=/usr/bin/node dist/index.js
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now papra
-msg_ok "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc

install/postiz-install.sh

@@ -45,6 +45,7 @@ MAIN_URL=http://${LOCAL_IP}
 FRONTEND_URL=http://${LOCAL_IP}
 NEXT_PUBLIC_BACKEND_URL=http://${LOCAL_IP}/api
 BACKEND_INTERNAL_URL=http://localhost:3000
+NOT_SECURED=true
 TEMPORAL_ADDRESS=localhost:7233
 IS_GENERAL=true
 STORAGE_PROVIDER=local
@@ -159,6 +160,9 @@ server {
 
   client_max_body_size 100M;
 
+  gzip on;
+  gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript;
+
   location /api/ {
     proxy_pass http://127.0.0.1:3000/;
     proxy_http_version 1.1;
@@ -168,14 +172,21 @@ server {
     proxy_set_header X-Real-IP \$remote_addr;
     proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
     proxy_set_header X-Forwarded-Proto \$scheme;
+    proxy_set_header Reload \$http_reload;
+    proxy_set_header Onboarding \$http_onboarding;
+    proxy_set_header Activate \$http_activate;
+    proxy_set_header Auth \$http_auth;
+    proxy_set_header Showorg \$http_showorg;
+    proxy_set_header Impersonate \$http_impersonate;
+    proxy_set_header Accept-Language \$http_accept_language;
   }
 
-  location /uploads {
-    alias /opt/postiz/uploads;
+  location /uploads/ {
+    alias /opt/postiz/uploads/;
   }
 
   location / {
-    proxy_pass http://127.0.0.1:4200;
+    proxy_pass http://127.0.0.1:4200/;
     proxy_http_version 1.1;
     proxy_set_header Upgrade \$http_upgrade;
     proxy_set_header Connection "upgrade";
@@ -183,13 +194,22 @@ server {
     proxy_set_header X-Real-IP \$remote_addr;
     proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
     proxy_set_header X-Forwarded-Proto \$scheme;
+    proxy_set_header Reload \$http_reload;
+    proxy_set_header Onboarding \$http_onboarding;
+    proxy_set_header Activate \$http_activate;
+    proxy_set_header Auth \$http_auth;
+    proxy_set_header Showorg \$http_showorg;
+    proxy_set_header Impersonate \$http_impersonate;
+    proxy_set_header Accept-Language \$http_accept_language;
+    proxy_set_header i18next \$http_i18next;
   }
 }
 EOF
 ln -sf /etc/nginx/sites-available/postiz /etc/nginx/sites-enabled/postiz
 rm -f /etc/nginx/sites-enabled/default
 $STD nginx -t
-$STD systemctl enable --now nginx
+systemctl enable -q nginx
+systemctl reload -q nginx
 msg_ok "Configured Nginx"
 
 motd_ssh

install/rdtclient-install.sh

@@ -0,0 +1,59 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 tteck
+# Author: tteck (tteckster)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/rogerfar/rdt-client
+
+if ! declare -F install_dotnet_runtime >/dev/null; then
+  install_dotnet_runtime() {
+    msg_info "Installing Dependencies"
+    setup_deb822_repo \
+      "microsoft" \
+      "https://packages.microsoft.com/keys/microsoft-2025.asc" \
+      "https://packages.microsoft.com/debian/13/prod/" \
+      "trixie"
+    $STD apt-get install -y aspnetcore-runtime-10.0 unzip
+    msg_ok "Installed Dependencies"
+  }
+fi
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+install_dotnet_runtime
+
+fetch_and_deploy_gh_release "rdt-client" "rogerfar/rdt-client" "prebuild" "latest" "/opt/rdtc" "RealDebridClient.zip"
+
+msg_info "Setting up rdtclient"
+cd /opt/rdtc
+mkdir -p data/{db,downloads}
+sed -i 's#/data/db/#/opt/rdtc&#g' /opt/rdtc/appsettings.json
+msg_ok "Configured rdtclient"
+
+msg_info "Creating Service"
+cat <<EOF >/etc/systemd/system/rdtc.service
+[Unit]
+Description=RdtClient Service
+
+[Service]
+WorkingDirectory=/opt/rdtc
+ExecStart=/usr/bin/dotnet RdtClient.Web.dll
+SyslogIdentifier=RdtClient
+User=root
+
+[Install]
+WantedBy=multi-user.target
+EOF
+
+systemctl enable -q --now rdtc
+msg_ok "Created Service"
+
+motd_ssh
+customize
+cleanup_lxc

install/seaweedfs-install.sh

@@ -1,51 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVED/raw/main/LICENSE
-# Source: https://github.com/seaweedfs/seaweedfs
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y \
-  fuse3
-msg_ok "Installed Dependencies"
-
-fetch_and_deploy_gh_release "seaweedfs" "seaweedfs/seaweedfs" "prebuild" "latest" "/opt/seaweedfs" "linux_amd64.tar.gz"
-
-msg_info "Setting up SeaweedFS"
-mkdir -p /opt/seaweedfs-data
-ln -sf /opt/seaweedfs/weed /usr/local/bin/weed
-msg_ok "Set up SeaweedFS"
-
-msg_info "Creating Service"
-cat <<EOF >/etc/systemd/system/seaweedfs.service
-[Unit]
-Description=SeaweedFS Server
-After=network.target
-
-[Service]
-Type=simple
-User=root
-WorkingDirectory=/opt/seaweedfs
-ExecStart=/opt/seaweedfs/weed server -dir=/opt/seaweedfs-data -master.port=9333 -volume.port=8080 -filer -s3
-Restart=on-failure
-RestartSec=5
-LimitNOFILE=65536
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now seaweedfs
-msg_ok "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc

install/simplelogin-install.sh

@@ -42,7 +42,16 @@ msg_info "Installing SimpleLogin (Patience)"
 cd /opt/simplelogin
 $STD uv venv
 $STD uv pip install setuptools hatchling editables
-$STD uv sync --locked --no-dev --no-build-isolation
+$STD uv sync --locked --no-dev --no-build-isolation --no-install-package newrelic
+
+VENV_SITE=$(/opt/simplelogin/.venv/bin/python -c "import site; print(site.getsitepackages()[0])")
+mkdir -p "${VENV_SITE}/newrelic"
+cat <<'STUB' >"${VENV_SITE}/newrelic/__init__.py"
+STUB
+cat <<'STUB' >"${VENV_SITE}/newrelic/agent.py"
+def record_custom_event(*a, **kw): pass
+def initialize(*a, **kw): pass
+STUB
 
 if [[ -f /opt/simplelogin/static/package.json ]]; then
   cd /opt/simplelogin/static

install/yamtrack-install.sh

@@ -53,6 +53,7 @@ msg_info "Configuring Nginx"
 rm -f /etc/nginx/sites-enabled/default /etc/nginx/sites-available/default
 cp /opt/yamtrack/nginx.conf /etc/nginx/nginx.conf
 sed -i 's|user abc;|user www-data;|' /etc/nginx/nginx.conf
+sed -i 's|pid /tmp/nginx.pid;|pid /run/nginx.pid;|' /etc/nginx/nginx.conf
 sed -i 's|/yamtrack/staticfiles/|/opt/yamtrack/src/staticfiles/|' /etc/nginx/nginx.conf
 sed -i 's|error_log /dev/stderr|error_log /var/log/nginx/error.log|' /etc/nginx/nginx.conf
 sed -i 's|access_log /dev/stdout|access_log /var/log/nginx/access.log|' /etc/nginx/nginx.conf

misc/alpine-install.func

@@ -1,22 +1,54 @@
 # Copyright (c) 2021-2026 community-scripts ORG
 # Author: tteck (tteckster)
 # Co-Author: MickLesk
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# License: MIT | https://github.com/community-scripts/ProxmoxVED/raw/arm64-dev-build/LICENSE
 
 if ! command -v curl >/dev/null 2>&1; then
   apk update && apk add curl >/dev/null 2>&1
 fi
-COMMUNITY_SCRIPTS_URL="${COMMUNITY_SCRIPTS_URL:-https://git.community-scripts.org/community-scripts/ProxmoxVED/raw/branch/main}"
-source <(curl -fsSL "$COMMUNITY_SCRIPTS_URL/misc/core.func")
-source <(curl -fsSL "$COMMUNITY_SCRIPTS_URL/misc/error_handler.func")
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVED/arm64-dev-build/misc/core.func)
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVED/arm64-dev-build/misc/error_handler.func)
 load_functions
 catch_errors
 
+# Persist diagnostics setting inside container (exported from build.func)
+# so addon scripts running later can find the user's choice
+if [[ ! -f /usr/local/community-scripts/diagnostics ]]; then
+  mkdir -p /usr/local/community-scripts
+  echo "DIAGNOSTICS=${DIAGNOSTICS:-no}" >/usr/local/community-scripts/diagnostics
+fi
+
+# Get LXC IP address (must be called INSIDE container, after network is up)
+get_lxc_ip
+
+# ------------------------------------------------------------------------------
+# post_progress_to_api()
+#
+# - Lightweight progress ping from inside the container
+# - Updates the existing telemetry record status
+# - Arguments:
+#   * $1: status (optional, default: "configuring")
+# - Signals that the installation is actively progressing (not stuck)
+# - Fire-and-forget: never blocks or fails the script
+# - Only executes if DIAGNOSTICS=yes and RANDOM_UUID is set
+# ------------------------------------------------------------------------------
+post_progress_to_api() {
+  command -v curl &>/dev/null || return 0
+  [[ "${DIAGNOSTICS:-no}" == "no" ]] && return 0
+  [[ -z "${RANDOM_UUID:-}" ]] && return 0
+
+  local progress_status="${1:-configuring}"
+
+  curl -fsS -m 5 -X POST "https://telemetry.community-scripts.org/telemetry" \
+    -H "Content-Type: application/json" \
+    -d "{\"random_id\":\"${RANDOM_UUID}\",\"execution_id\":\"${EXECUTION_ID:-${RANDOM_UUID}}\",\"type\":\"lxc\",\"nsapp\":\"${app:-unknown}\",\"status\":\"${progress_status}\"}" &>/dev/null || true
+}
+
 # This function enables IPv6 if it's not disabled and sets verbose mode
 verb_ip6() {
   set_std_mode # Set STD mode based on VERBOSE
 
-  if [ "$IPV6_METHOD" == "disable" ]; then
+  if [ "${IPV6_METHOD:-}" = "disable" ]; then
     msg_info "Disabling IPv6 (this may affect some services)"
     $STD sysctl -w net.ipv6.conf.all.disable_ipv6=1
     $STD sysctl -w net.ipv6.conf.default.disable_ipv6=1
@@ -32,43 +64,6 @@ EOF
   fi
 }
 
-set -Eeuo pipefail
-trap 'error_handler $? $LINENO "$BASH_COMMAND"' ERR
-trap on_exit EXIT
-trap on_interrupt INT
-trap on_terminate TERM
-
-error_handler() {
-  local exit_code="$1"
-  local line_number="$2"
-  local command="$3"
-
-  # Exitcode 0 = kein Fehler → ignorieren
-  if [[ "$exit_code" -eq 0 ]]; then
-    return 0
-  fi
-
-  printf "\e[?25h"
-  echo -e "\n${RD}[ERROR]${CL} in line ${RD}$line_number${CL}: exit code ${RD}$exit_code${CL}: while executing command ${YW}$command${CL}\n"
-  exit "$exit_code"
-}
-
-on_exit() {
-  local exit_code="$?"
-  [[ -n "${lockfile:-}" && -e "$lockfile" ]] && rm -f "$lockfile"
-  exit "$exit_code"
-}
-
-on_interrupt() {
-  echo -e "\n${RD}Interrupted by user (SIGINT)${CL}"
-  exit 130
-}
-
-on_terminate() {
-  echo -e "\n${RD}Terminated by signal (SIGTERM)${CL}"
-  exit 143
-}
-
 # This function sets up the Container OS by generating the locale, setting the timezone, and checking the network connection
 setting_up_container() {
   msg_info "Setting up Container OS"
@@ -84,10 +79,11 @@ setting_up_container() {
   if [ "$(ip addr show | grep 'inet ' | grep -v '127.0.0.1' | awk '{print $2}' | cut -d'/' -f1)" = "" ]; then
     echo 1>&2 -e "\n${CROSS}${RD} No Network After $RETRY_NUM Tries${CL}"
     echo -e "${NETWORK}Check Network Settings"
-    exit 1
+    exit 121
   fi
   msg_ok "Set up Container OS"
   msg_ok "Network Connected: ${BL}$(ip addr show | grep 'inet ' | awk '{print $2}' | cut -d'/' -f1 | tail -n1)${CL}"
+  post_progress_to_api
 }
 
 # This function checks the network connection by pinging a known IP address and prompts the user to continue if the internet is not connected
@@ -103,7 +99,7 @@ network_check() {
       echo -e "${INFO}${RD}Expect Issues Without Internet${CL}"
     else
       echo -e "${NETWORK}Check Network Settings"
-      exit 1
+      exit 122
     fi
   fi
   RESOLVEDIP=$(getent hosts github.com | awk '{ print $1 }')
@@ -120,38 +116,43 @@ network_check() {
 update_os() {
   msg_info "Updating Container OS"
   $STD apk -U upgrade
-  source <(curl -fsSL "$COMMUNITY_SCRIPTS_URL/misc/alpine-tools.func")
+  local tools_content
+  tools_content=$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVED/arm64-dev-build/misc/tools.func) || {
+    msg_error "Failed to download tools.func"
+    exit 115
+  }
+  source /dev/stdin <<<"$tools_content"
+  if ! declare -f fetch_and_deploy_gh_release >/dev/null 2>&1; then
+    msg_error "tools.func loaded but incomplete — missing expected functions"
+    exit 115
+  fi
   msg_ok "Updated Container OS"
+  post_progress_to_api
 }
 
 # This function modifies the message of the day (motd) and SSH settings
 motd_ssh() {
   echo "export TERM='xterm-256color'" >>/root/.bashrc
-  IP=$(ip -4 addr show eth0 | awk '/inet / {print $2}' | cut -d/ -f1 | head -n 1)
-
-  if [ -f "/etc/os-release" ]; then
-    OS_NAME=$(grep ^NAME /etc/os-release | cut -d= -f2 | tr -d '"')
-    OS_VERSION=$(grep ^VERSION_ID /etc/os-release | cut -d= -f2 | tr -d '"')
-  else
-    OS_NAME="Alpine Linux"
-    OS_VERSION="Unknown"
-  fi
 
   PROFILE_FILE="/etc/profile.d/00_lxc-details.sh"
   echo "echo -e \"\"" >"$PROFILE_FILE"
-  echo -e "echo -e \"${BOLD}${YW}${APPLICATION} LXC Container - DEV Repository${CL}\"" >>"$PROFILE_FILE"
-  echo -e "echo -e \"${RD}WARNING: This is a DEVELOPMENT version (ProxmoxVED). Do NOT use in production!${CL}\"" >>"$PROFILE_FILE"
-  echo -e "echo -e \"${YW} OS: ${GN}${OS_NAME} - Version: ${OS_VERSION}${CL}\"" >>"$PROFILE_FILE"
-  echo -e "echo -e \"${YW} Hostname: ${GN}\$(hostname)${CL}\"" >>"$PROFILE_FILE"
-  echo -e "echo -e \"${YW} IP Address: ${GN}${IP}${CL}\"" >>"$PROFILE_FILE"
-  echo -e "echo -e \"${YW} Repository: ${GN}https://github.com/community-scripts/ProxmoxVED${CL}\"" >>"$PROFILE_FILE"
+  echo -e "echo -e \"${BOLD}${APPLICATION} LXC Container${CL}"\" >>"$PROFILE_FILE"
+  echo -e "echo -e \"${TAB}${GATEWAY}${YW} Provided by: ${GN}community-scripts ORG ${YW}| GitHub: ${GN}https://github.com/community-scripts/ProxmoxVED${CL}\"" >>"$PROFILE_FILE"
   echo "echo \"\"" >>"$PROFILE_FILE"
+  echo -e "echo -e \"${TAB}${OS}${YW} OS: ${GN}\$(grep ^NAME /etc/os-release | cut -d= -f2 | tr -d '\"') - Version: \$(grep ^VERSION_ID /etc/os-release | cut -d= -f2 | tr -d '\"')${CL}\"" >>"$PROFILE_FILE"
+  echo -e "echo -e \"${TAB}${HOSTNAME}${YW} Hostname: ${GN}\$(hostname)${CL}\"" >>"$PROFILE_FILE"
+  echo -e "echo -e \"${TAB}${INFO}${YW} IP Address: ${GN}\$(ip -4 addr show eth0 | awk '/inet / {print \$2}' | cut -d/ -f1 | head -n 1)${CL}\"" >>"$PROFILE_FILE"
 
+  # Configure SSH if enabled
   if [[ "${SSH_ROOT}" == "yes" ]]; then
+    # Enable sshd service
     $STD rc-update add sshd
+    # Allow root login via SSH
     sed -i "s/#PermitRootLogin prohibit-password/PermitRootLogin yes/g" /etc/ssh/sshd_config
+    # Start the sshd service
     $STD /etc/init.d/sshd start
   fi
+  post_progress_to_api
 }
 
 # Validate Timezone for some LXC's
@@ -186,6 +187,7 @@ EOF
     msg_ok "Customized Container"
   fi
 
-  echo "bash -c \"\$(curl -fsSL https://github.com/community-scripts/ProxmoxVED/raw/main/ct/${app}.sh)\"" >/usr/bin/update
+  echo "bash -c \"\$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVED/arm64-dev-build/ct/${app}.sh)\"" >/usr/bin/update
   chmod +x /usr/bin/update
+  post_progress_to_api
 }

misc/alpine-tools.func

@@ -1,21 +1,7 @@
 #!/bin/ash
 # shellcheck shell=ash
 
-# Erwartet vorhandene msg_* und optional $STD aus deinem Framework.
-
-# Fallbacks, wenn core.func nicht geladen wurde (Alpine/ash-safe)
-if ! command -v msg_info >/dev/null 2>&1; then
-  msg_info() { echo "[INFO] $*"; }
-fi
-if ! command -v msg_ok >/dev/null 2>&1; then
-  msg_ok() { echo "[OK] $*"; }
-fi
-if ! command -v msg_warn >/dev/null 2>&1; then
-  msg_warn() { echo "[WARN] $*"; }
-fi
-if ! command -v msg_error >/dev/null 2>&1; then
-  msg_error() { echo "[ERROR] $*" >&2; }
-fi
+# Expects existing msg_* functions and optional $STD from the framework.
 
 # ------------------------------
 # helpers
@@ -23,145 +9,6 @@ fi
 lower() { printf '%s' "$1" | tr '[:upper:]' '[:lower:]'; }
 has() { command -v "$1" >/dev/null 2>&1; }
 
-# tools.func compatibility helpers (Alpine-safe)
-cache_installed_version() {
-  local app="$1" version="$2"
-  mkdir -p /var/cache/app-versions
-  echo "$version" >"/var/cache/app-versions/${app}_version.txt"
-}
-
-get_cached_version() {
-  local app="$1"
-  mkdir -p /var/cache/app-versions
-  if [ -f "/var/cache/app-versions/${app}_version.txt" ]; then
-    cat "/var/cache/app-versions/${app}_version.txt"
-    return 0
-  fi
-  return 0
-}
-
-version_gt() {
-  # returns 0 if $1 > $2
-  # BusyBox-safe version compare
-  awk -v a="$1" -v b="$2" '
-  function splitver(v, arr) { n=split(v, arr, /\./); return n }
-  BEGIN {
-    na=splitver(a, A); nb=splitver(b, B);
-    n=(na>nb?na:nb);
-    for (i=1;i<=n;i++) {
-      va=(A[i]==""?0:A[i]); vb=(B[i]==""?0:B[i]);
-      if (va+0 > vb+0) exit 0;
-      if (va+0 < vb+0) exit 1;
-    }
-    exit 1;
-  }'
-}
-
-get_system_arch() {
-  local arch
-  arch=$(uname -m 2>/dev/null || echo "")
-  [ "$arch" = "x86_64" ] && arch="amd64"
-  [ "$arch" = "aarch64" ] && arch="arm64"
-  echo "$arch"
-}
-
-create_temp_dir() {
-  mktemp -d
-}
-
-get_os_info() {
-  local field="${1:-all}"
-  [ -z "${_OS_ID:-}" ] && _OS_ID=$(awk -F= '/^ID=/{gsub(/"/,"",$2); print $2}' /etc/os-release 2>/dev/null)
-  [ -z "${_OS_CODENAME:-}" ] && _OS_CODENAME=$(awk -F= '/^VERSION_CODENAME=/{gsub(/"/,"",$2); print $2}' /etc/os-release 2>/dev/null)
-  [ -z "${_OS_VERSION:-}" ] && _OS_VERSION=$(awk -F= '/^VERSION_ID=/{gsub(/"/,"",$2); print $2}' /etc/os-release 2>/dev/null)
-  case "$field" in
-  id) echo "$_OS_ID" ;;
-  codename) echo "$_OS_CODENAME" ;;
-  version | version_id) echo "$_OS_VERSION" ;;
-  all) echo "ID=$_OS_ID CODENAME=$_OS_CODENAME VERSION=$_OS_VERSION" ;;
-  *) echo "$_OS_ID" ;;
-  esac
-}
-
-is_alpine() { [ "$(get_os_info id)" = "alpine" ]; }
-
-get_os_version_major() {
-  local v
-  v=$(get_os_info version)
-  echo "${v%%.*}"
-}
-
-ensure_dependencies() {
-  need_tool "$@"
-}
-
-download_file() {
-  local url="$1" output="$2" max_retries="${3:-3}" show_progress="${4:-false}"
-  local i=1 curl_opts="-fsSL"
-  [ "$show_progress" = "true" ] && curl_opts="-fL#"
-  while [ $i -le "$max_retries" ]; do
-    if curl $curl_opts -o "$output" "$url"; then
-      return 0
-    fi
-    i=$((i + 1))
-    [ $i -le "$max_retries" ] && sleep 2
-  done
-  msg_error "Failed to download: $url"
-  return 1
-}
-
-github_api_call() {
-  local url="$1" output_file="${2:-/dev/stdout}"
-  local max_retries=3 retry_delay=2 attempt=1
-  local header=""
-  [ -n "${GITHUB_TOKEN:-}" ] && header="-H Authorization:Bearer\ ${GITHUB_TOKEN}"
-  while [ $attempt -le $max_retries ]; do
-    http_code=$(curl -fsSL -w "%{http_code}" -o "$output_file" \
-      -H "Accept: application/vnd.github+json" \
-      -H "X-GitHub-Api-Version: 2022-11-28" \
-      $header "$url" 2>/dev/null || echo 000)
-    case "$http_code" in
-    200) return 0 ;;
-    403) [ $attempt -lt $max_retries ] && sleep "$retry_delay" || {
-      msg_error "GitHub API rate limit exceeded"
-      return 1
-    } ;;
-    404)
-      msg_error "GitHub API endpoint not found: $url"
-      return 1
-      ;;
-    *) [ $attempt -lt $max_retries ] && sleep "$retry_delay" || {
-      msg_error "GitHub API call failed with HTTP $http_code"
-      return 1
-    } ;;
-    esac
-    retry_delay=$((retry_delay * 2))
-    attempt=$((attempt + 1))
-  done
-  return 1
-}
-
-extract_version_from_json() {
-  local json="$1" field="${2:-tag_name}" strip_v="${3:-true}" version
-  need_tool jq || return 1
-  version=$(printf '%s' "$json" | jq -r ".${field} // empty")
-  [ -z "$version" ] && return 1
-  [ "$strip_v" = "true" ] && printf '%s' "${version#v}" || printf '%s' "$version"
-}
-
-get_latest_github_release() {
-  local repo="$1" strip_v="${2:-true}" tmp
-  tmp=$(mktemp) || return 1
-  github_api_call "https://api.github.com/repos/${repo}/releases/latest" "$tmp" || {
-    rm -f "$tmp"
-    return 1
-  }
-  extract_version_from_json "$(cat "$tmp")" "tag_name" "$strip_v"
-  rc=$?
-  rm -f "$tmp"
-  return $rc
-}
-
 need_tool() {
   # usage: need_tool curl jq unzip ...
   # setup missing tools via apk
@@ -187,26 +34,28 @@ net_resolves() {
 }
 
 ensure_usr_local_bin_persist() {
+  # Login shells: /etc/profile.d/
   local PROFILE_FILE="/etc/profile.d/10-localbin.sh"
   if [ ! -f "$PROFILE_FILE" ]; then
     echo 'case ":$PATH:" in *:/usr/local/bin:*) ;; *) export PATH="/usr/local/bin:$PATH";; esac' >"$PROFILE_FILE"
     chmod +x "$PROFILE_FILE"
   fi
+
+  # Non-login shells (pct enter): /root/.profile and /root/.bashrc
+  for rc_file in /root/.profile /root/.bashrc; do
+    if [ -f "$rc_file" ] && ! grep -q '/usr/local/bin' "$rc_file"; then
+      echo 'export PATH="/usr/local/bin:$PATH"' >>"$rc_file"
+    fi
+  done
 }
 
 download_with_progress() {
   # $1 url, $2 dest
-  local url="$1" out="$2" content_length
+  local url="$1" out="$2" cl
   need_tool curl pv || return 1
-
-  content_length=$(
-    curl -fsSLI "$url" 2>/dev/null |
-      awk '(tolower($1) ~ /^content-length:/) && ($2 + 0 > 0) {print $2+0}' |
-      tail -1 | tr -cd '[:digit:]' || true
-  )
-
-  if [ -n "$content_length" ]; then
-    curl -fsSL "$url" | pv -s "$content_length" >"$out" || {
+  cl=$(curl -fsSLI "$url" 2>/dev/null | awk 'tolower($0) ~ /^content-length:/ {print $2}' | tr -d '\r')
+  if [ -n "$cl" ]; then
+    curl -fsSL "$url" | pv -s "$cl" >"$out" || {
       msg_error "Download failed: $url"
       return 1
     }
@@ -237,12 +86,7 @@ check_for_gh_release() {
   }
   need_tool curl jq || return 1
 
-  github_api_call "https://api.github.com/repos/${source}/releases/latest" "/tmp/${app_lc}-release.json" || {
-    msg_error "Unable to fetch latest tag for $app"
-    return 1
-  }
-  tag=$(cat "/tmp/${app_lc}-release.json" | jq -r '.tag_name // empty')
-  rm -f "/tmp/${app_lc}-release.json"
+  tag=$(curl -fsSL "https://api.github.com/repos/${source}/releases/latest" | jq -r '.tag_name // empty')
   [ -z "$tag" ] && {
     msg_error "Unable to fetch latest tag for $app"
     return 1
@@ -276,14 +120,14 @@ check_for_gh_release() {
 }
 
 # ------------------------------
-# GitHub: get Release  & deployen (Alpine)
+# GitHub: get Release  & deploy (Alpine)
 # modes: tarball | prebuild | singlefile
 # ------------------------------
-fetch_and_deploy_gh_release() {
+fetch_and_deploy_gh() {
   # $1 app, $2 repo, [$3 mode], [$4 version], [$5 target], [$6 asset_pattern
   local app="$1" repo="$2" mode="${3:-tarball}" version="${4:-latest}" target="${5:-/opt/$1}" pattern="${6:-}"
   local app_lc
-  app_lc=$(lower "$app" | tr -d ' ')
+  app_lc="$(lower "$app" | tr -d ' ')"
   local vfile="$HOME/.${app_lc}"
   local json url filename tmpd unpack
 
@@ -294,27 +138,26 @@ fetch_and_deploy_gh_release() {
   need_tool curl jq tar || return 1
   [ "$mode" = "prebuild" ] || [ "$mode" = "singlefile" ] && need_tool unzip >/dev/null 2>&1 || true
 
-  tmpd=$(mktemp -d) || return 1
+  tmpd="$(mktemp -d)" || return 1
   mkdir -p "$target"
 
-  # Release JSON (with token/rate-limit handling)
+  # Release JSON
   if [ "$version" = "latest" ]; then
-    github_api_call "https://api.github.com/repos/$repo/releases/latest" "$tmpd/release.json" || {
+    json="$(curl -fsSL "https://api.github.com/repos/$repo/releases/latest")" || {
       msg_error "GitHub API failed"
       rm -rf "$tmpd"
       return 1
     }
   else
-    github_api_call "https://api.github.com/repos/$repo/releases/tags/$version" "$tmpd/release.json" || {
+    json="$(curl -fsSL "https://api.github.com/repos/$repo/releases/tags/$version")" || {
       msg_error "GitHub API failed"
       rm -rf "$tmpd"
       return 1
     }
   fi
-  json=$(cat "$tmpd/release.json")
 
   # correct Version
-  version=$(printf '%s' "$json" | jq -r '.tag_name // empty')
+  version="$(printf '%s' "$json" | jq -r '.tag_name // empty')"
   version="${version#v}"
 
   [ -z "$version" ] && {
@@ -323,15 +166,9 @@ fetch_and_deploy_gh_release() {
     return 1
   }
 
-  get_url() {
-    printf '%s' "$json" | jq -r '.assets[].browser_download_url' |
-      awk -v p="$pattern" 'BEGIN{IGNORECASE=1} $0 ~ p {print; exit}' |
-      tr -d '[:cntrl:]'
-  }
-
   case "$mode" in
   tarball | source)
-    url=$(printf '%s' "$json" | jq -r '.tarball_url // empty')
+    url="$(printf '%s' "$json" | jq -r '.tarball_url // empty')"
     [ -z "$url" ] && url="https://github.com/$repo/archive/refs/tags/v$version.tar.gz"
     filename="${app_lc}-${version}.tar.gz"
     download_with_progress "$url" "$tmpd/$filename" || {
@@ -343,8 +180,7 @@ fetch_and_deploy_gh_release() {
       rm -rf "$tmpd"
       return 1
     }
-    unpack=$(find "$tmpd" -mindepth 1 -maxdepth 1 -type d | head -n1)
-    [ "${CLEAN_INSTALL:-0}" = "1" ] && rm -rf "${target:?}/"*
+    unpack="$(find "$tmpd" -mindepth 1 -maxdepth 1 -type d | head -n1)"
     # copy content of unpack to target
     (cd "$unpack" && tar -cf - .) | (cd "$target" && tar -xf -) || {
       msg_error "copy failed"
@@ -352,41 +188,16 @@ fetch_and_deploy_gh_release() {
       return 1
     }
     ;;
-  binary)
-    [ -n "$pattern" ] || pattern="*.apk"
-    url=$(get_url)
-    [ -z "$url" ] && {
-      msg_error "binary asset not found for pattern: $pattern"
-      rm -rf "$tmpd"
-      return 1
-    }
-    filename="${url##*/}"
-    download_with_progress "$url" "$tmpd/$filename" || {
-      rm -rf "$tmpd"
-      return 1
-    }
-    case "$filename" in
-    *.apk)
-      apk add --no-cache --allow-untrusted "$tmpd/$filename" >/dev/null 2>&1 || {
-        msg_error "apk install failed: $filename"
-        rm -rf "$tmpd"
-        return 1
-      }
-      ;;
-    *)
-      msg_error "Unsupported binary asset on Alpine: $filename"
-      rm -rf "$tmpd"
-      return 1
-      ;;
-    esac
-    ;;
   prebuild)
     [ -n "$pattern" ] || {
       msg_error "prebuild requires asset pattern"
       rm -rf "$tmpd"
       return 1
     }
-    url=$(get_url)
+    url="$(printf '%s' "$json" | jq -r '.assets[].browser_download_url' | awk -v p="$pattern" '
+        BEGIN{IGNORECASE=1}
+        $0 ~ p {print; exit}
+      ')"
     [ -z "$url" ] && {
       msg_error "asset not found for pattern: $pattern"
       rm -rf "$tmpd"
@@ -417,10 +228,9 @@ fetch_and_deploy_gh_release() {
       return 1
       ;;
     esac
-    [ "${CLEAN_INSTALL:-0}" = "1" ] && rm -rf "${target:?}/"*
     # top-level folder strippen
     if [ "$(find "$tmpd/unp" -mindepth 1 -maxdepth 1 -type d | wc -l)" -eq 1 ] && [ -z "$(find "$tmpd/unp" -mindepth 1 -maxdepth 1 -type f | head -n1)" ]; then
-      unpack=$(find "$tmpd/unp" -mindepth 1 -maxdepth 1 -type d)
+      unpack="$(find "$tmpd/unp" -mindepth 1 -maxdepth 1 -type d)"
       (cd "$unpack" && tar -cf - .) | (cd "$target" && tar -xf -) || {
         msg_error "copy failed"
         rm -rf "$tmpd"
@@ -440,20 +250,21 @@ fetch_and_deploy_gh_release() {
       rm -rf "$tmpd"
       return 1
     }
-    url=$(get_url)
+    url="$(printf '%s' "$json" | jq -r '.assets[].browser_download_url' | awk -v p="$pattern" '
+        BEGIN{IGNORECASE=1}
+        $0 ~ p {print; exit}
+      ')"
     [ -z "$url" ] && {
       msg_error "asset not found for pattern: $pattern"
       rm -rf "$tmpd"
       return 1
     }
     filename="${url##*/}"
-    local target_file="$app"
-    [ "${USE_ORIGINAL_FILENAME:-false}" = "true" ] && target_file="$filename"
-    download_with_progress "$url" "$target/$target_file" || {
+    download_with_progress "$url" "$target/$app" || {
       rm -rf "$tmpd"
       return 1
     }
-    chmod +x "$target/$target_file"
+    chmod +x "$target/$app"
     ;;
   *)
     msg_error "Unknown mode: $mode"
@@ -468,11 +279,6 @@ fetch_and_deploy_gh_release() {
   msg_ok "Deployed $app ($version) → $target"
 }
 
-# tools.func compatibility alias
-fetch_and_deploy_gh() {
-  fetch_and_deploy_gh_release "$@"
-}
-
 # ------------------------------
 # yq (mikefarah) – Alpine
 # ------------------------------

misc/api.func

@@ -1,6 +1,6 @@
 # Copyright (c) 2021-2026 community-scripts ORG
 # Author: michelroegl-brunner | MickLesk
-# License: MIT | https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/LICENSE
+# License: MIT | https://raw.githubusercontent.com/community-scripts/ProxmoxVED/arm64-dev-build/LICENSE
 
 # ==============================================================================
 # API.FUNC - TELEMETRY & DIAGNOSTICS API
@@ -12,7 +12,6 @@
 # Features:
 #   - Container/VM creation statistics
 #   - Installation success/failure tracking
-#   - Pre-flight abort tracking ("aborted" status)
 #   - Error code mapping and reporting
 #   - Privacy-respecting anonymous telemetry
 #
@@ -97,7 +96,7 @@ detect_repo_source() {
   "")
     # No URL detected — use hardcoded fallback
     # This value must match the repo: ProxmoxVE for production, ProxmoxVED for dev
-    REPO_SOURCE="ProxmoxVED"
+    REPO_SOURCE="ProxmoxVE"
     ;;
   *)
     # Fork or unknown repo
@@ -125,6 +124,7 @@ detect_repo_source
 #   * Generic/Shell errors (1-3, 10, 124-132, 134, 137, 139, 141, 143-146)
 #   * curl/wget errors (4-8, 16, 18, 22-28, 30, 32-36, 39, 44-48, 51-52, 55-57, 59, 61, 63, 75, 78-79, 92, 95)
 #   * Package manager errors (APT, DPKG: 100-102, 255)
+#   * Script Validation & Setup (103-123)
 #   * BSD sysexits (64-78)
 #   * Systemd/Service errors (150-154)
 #   * Python/pip/uv errors (160-162)
@@ -132,7 +132,9 @@ detect_repo_source
 #   * MySQL/MariaDB errors (180-183)
 #   * MongoDB errors (190-193)
 #   * Proxmox custom codes (200-231)
+#   * Tools & Addon Scripts (232-238)
 #   * Node.js/npm errors (239, 243, 245-249)
+#   * Application Install/Update errors (250-254)
 # - Returns description string for given exit code
 # ------------------------------------------------------------------------------
 explain_exit_code() {
@@ -190,7 +192,7 @@ explain_exit_code() {
   101) echo "APT: Configuration error (bad sources.list, malformed config)" ;;
   102) echo "APT: Lock held by another process (dpkg/apt still running)" ;;
 
-  # --- Validation / Preflight (103-108) ---
+  # --- Script Validation & Setup (103-123) ---
   103) echo "Validation: Shell is not Bash" ;;
   104) echo "Validation: Not running as root (or invoked via sudo)" ;;
   105) echo "Validation: Proxmox VE version not supported" ;;
@@ -199,6 +201,19 @@ explain_exit_code() {
   108) echo "Validation: Kernel key limits exceeded" ;;
   109) echo "Proxmox: No available container ID after max attempts" ;;
   110) echo "Proxmox: Failed to apply default.vars" ;;
+  111) echo "Proxmox: App defaults file not available" ;;
+  112) echo "Proxmox: Invalid install menu option" ;;
+  113) echo "LXC: Under-provisioned — user aborted update" ;;
+  114) echo "LXC: Storage too low — user aborted update" ;;
+  115) echo "Download: install.func download failed or incomplete" ;;
+  116) echo "Proxmox: Default bridge vmbr0 not found" ;;
+  117) echo "LXC: Container did not reach running state" ;;
+  118) echo "LXC: No IP assigned to container after timeout" ;;
+  119) echo "Proxmox: No valid storage for rootdir content" ;;
+  120) echo "Proxmox: No valid storage for vztmpl content" ;;
+  121) echo "LXC: Container network not ready (no IP after retries)" ;;
+  122) echo "LXC: No internet connectivity — user declined to continue" ;;
+  123) echo "LXC: Local IP detection failed" ;;
 
   # --- BSD sysexits.h (64-78) ---
   64) echo "Usage error (wrong arguments)" ;;
@@ -287,8 +302,18 @@ explain_exit_code() {
   223) echo "Proxmox: Template not available after download" ;;
   224) echo "Proxmox: PBS storage is for backups only" ;;
   225) echo "Proxmox: No template available for OS/Version" ;;
+  226) echo "Proxmox: VM disk import or post-creation setup failed" ;;
   231) echo "Proxmox: LXC stack upgrade failed" ;;
 
+  # --- Tools & Addon Scripts (232-238) ---
+  232) echo "Tools: Wrong execution environment (run on PVE host, not inside LXC)" ;;
+  233) echo "Tools: Application not installed (update prerequisite missing)" ;;
+  234) echo "Tools: No LXC containers found or available" ;;
+  235) echo "Tools: Backup or restore operation failed" ;;
+  236) echo "Tools: Required hardware not detected" ;;
+  237) echo "Tools: Dependency package installation failed" ;;
+  238) echo "Tools: OS or distribution not supported for this addon" ;;
+
   # --- Node.js / npm / pnpm / yarn (239-249) ---
   239) echo "npm/Node.js: Unexpected runtime error or dependency failure" ;;
   243) echo "Node.js: Out of memory (JavaScript heap out of memory)" ;;
@@ -298,6 +323,13 @@ explain_exit_code() {
   248) echo "Node.js: Invalid C++ addon / N-API failure" ;;
   249) echo "npm/pnpm/yarn: Unknown fatal error" ;;
 
+  # --- Application Install/Update Errors (250-254) ---
+  250) echo "App: Download failed or version not determined" ;;
+  251) echo "App: File extraction failed (corrupt or incomplete archive)" ;;
+  252) echo "App: Required file or resource not found" ;;
+  253) echo "App: Data migration required — update aborted" ;;
+  254) echo "App: User declined prompt or input timed out" ;;
+
   # --- DPKG ---
   255) echo "DPKG: Fatal internal error" ;;
 
@@ -314,17 +346,20 @@ explain_exit_code() {
 # - Handles backslashes, quotes, newlines, tabs, and carriage returns
 # ------------------------------------------------------------------------------
 json_escape() {
-  local s="$1"
-  # Strip ANSI escape sequences (color codes etc.)
-  s=$(printf '%s' "$s" | sed 's/\x1b\[[0-9;]*[a-zA-Z]//g')
-  s=${s//\\/\\\\}
-  s=${s//"/\\"/}
-  s=${s//$'\n'/\\n}
-  s=${s//$'\r'/}
-  s=${s//$'\t'/\\t}
-  # Remove any remaining control characters (0x00-0x1F except those already handled)
-  s=$(printf '%s' "$s" | tr -d '\000-\010\013\014\016-\037')
-  printf '%s' "$s"
+  # Escape a string for safe JSON embedding using awk (handles any input size).
+  # Pipeline: strip ANSI → remove control chars → escape \ " TAB → join lines with \n
+  printf '%s' "$1" \
+    | sed 's/\x1b\[[0-9;]*[a-zA-Z]//g' \
+    | tr -d '\000-\010\013\014\016-\037\177\r' \
+    | awk '
+        BEGIN { ORS = "" }
+        {
+          gsub(/\\/, "\\\\")   # backslash → \\
+          gsub(/"/, "\\\"")    # double quote → \"
+          gsub(/\t/, "\\t")   # tab → \t
+          if (NR > 1) printf "\\n"
+          printf "%s", $0
+        }'
 }
 
 # ------------------------------------------------------------------------------
@@ -360,6 +395,11 @@ get_error_text() {
     logfile="$BUILD_LOG"
   fi
 
+  # Try SILENT_LOGFILE as last resort (captures $STD command output)
+  if [[ -z "$logfile" || ! -s "$logfile" ]] && [[ -n "${SILENT_LOGFILE:-}" && -s "${SILENT_LOGFILE}" ]]; then
+    logfile="$SILENT_LOGFILE"
+  fi
+
   if [[ -n "$logfile" && -s "$logfile" ]]; then
     tail -n 20 "$logfile" 2>/dev/null | sed 's/\r$//' | sed 's/\x1b\[[0-9;]*[a-zA-Z]//g'
   fi
@@ -405,6 +445,13 @@ get_full_log() {
     fi
   fi
 
+  # Fall back to SILENT_LOGFILE (captures $STD command output)
+  if [[ -z "$logfile" || ! -s "$logfile" ]]; then
+    if [[ -n "${SILENT_LOGFILE:-}" && -s "${SILENT_LOGFILE}" ]]; then
+      logfile="$SILENT_LOGFILE"
+    fi
+  fi
+
   if [[ -n "$logfile" && -s "$logfile" ]]; then
     # Strip ANSI codes, carriage returns, and anonymize IP addresses (GDPR)
     sed 's/\r$//' "$logfile" 2>/dev/null |
@@ -642,18 +689,23 @@ EOF
   [[ "${DEV_MODE:-}" == "true" ]] && echo "[DEBUG] Sending to: $TELEMETRY_URL" >&2
   [[ "${DEV_MODE:-}" == "true" ]] && echo "[DEBUG] Payload: $JSON_PAYLOAD" >&2
 
-  # Fire-and-forget: never block, never fail
-  local http_code
-  if [[ "${DEV_MODE:-}" == "true" ]]; then
-    http_code=$(curl -sS -w "%{http_code}" -m "${TELEMETRY_TIMEOUT}" -X POST "${TELEMETRY_URL}" \
-      -H "Content-Type: application/json" \
-      -d "$JSON_PAYLOAD" -o /dev/stderr 2>&1) || true
-    echo "[DEBUG] HTTP response code: $http_code" >&2
-  else
-    curl -fsS -m "${TELEMETRY_TIMEOUT}" -X POST "${TELEMETRY_URL}" \
-      -H "Content-Type: application/json" \
-      -d "$JSON_PAYLOAD" &>/dev/null || true
-  fi
+  # Send initial "installing" record with retry.
+  # This record MUST exist for all subsequent updates to succeed.
+  local http_code="" attempt
+  for attempt in 1 2 3; do
+    if [[ "${DEV_MODE:-}" == "true" ]]; then
+      http_code=$(curl -sS -w "%{http_code}" -m "${TELEMETRY_TIMEOUT}" -X POST "${TELEMETRY_URL}" \
+        -H "Content-Type: application/json" \
+        -d "$JSON_PAYLOAD" -o /dev/stderr 2>&1) || http_code="000"
+      echo "[DEBUG] post_to_api attempt $attempt HTTP=$http_code" >&2
+    else
+      http_code=$(curl -sS -w "%{http_code}" -m "${TELEMETRY_TIMEOUT}" -X POST "${TELEMETRY_URL}" \
+        -H "Content-Type: application/json" \
+        -d "$JSON_PAYLOAD" -o /dev/null 2>/dev/null) || http_code="000"
+    fi
+    [[ "$http_code" =~ ^2[0-9]{2}$ ]] && break
+    [[ "$attempt" -lt 3 ]] && sleep 1
+  done
 
   POST_TO_API_DONE=true
 }
@@ -744,10 +796,15 @@ post_to_api_vm() {
 EOF
   )
 
-  # Fire-and-forget: never block, never fail
-  curl -fsS -m "${TELEMETRY_TIMEOUT}" -X POST "${TELEMETRY_URL}" \
-    -H "Content-Type: application/json" \
-    -d "$JSON_PAYLOAD" &>/dev/null || true
+  # Send initial "installing" record with retry (must succeed for updates to work)
+  local http_code="" attempt
+  for attempt in 1 2 3; do
+    http_code=$(curl -sS -w "%{http_code}" -m "${TELEMETRY_TIMEOUT}" -X POST "${TELEMETRY_URL}" \
+      -H "Content-Type: application/json" \
+      -d "$JSON_PAYLOAD" -o /dev/null 2>/dev/null) || http_code="000"
+    [[ "$http_code" =~ ^2[0-9]{2}$ ]] && break
+    [[ "$attempt" -lt 3 ]] && sleep 1
+  done
 
   POST_TO_API_DONE=true
 }
@@ -779,76 +836,6 @@ post_progress_to_api() {
     -d "{\"random_id\":\"${RANDOM_UUID}\",\"execution_id\":\"${EXECUTION_ID:-${RANDOM_UUID}}\",\"type\":\"${telemetry_type}\",\"nsapp\":\"${app_name}\",\"status\":\"${progress_status}\"}" &>/dev/null || true
 }
 
-# ------------------------------------------------------------------------------
-# post_preflight_to_api()
-#
-# - Reports preflight failure to telemetry with "aborted" status
-# - Uses PREFLIGHT_FAILURES array from build.func for error details
-# - Sends error_category "preflight" for analytics grouping
-# - Fire-and-forget: never blocks or fails script execution
-# ------------------------------------------------------------------------------
-post_preflight_to_api() {
-  # Silent fail - telemetry should never break scripts
-  command -v curl &>/dev/null || return 0
-  [[ "${DIAGNOSTICS:-no}" == "no" ]] && return 0
-  [[ -z "${RANDOM_UUID:-}" ]] && return 0
-
-  # Set type for telemetry
-  TELEMETRY_TYPE="lxc"
-
-  local pve_version=""
-  if command -v pveversion &>/dev/null; then
-    pve_version=$(pveversion 2>/dev/null | awk -F'[/ ]' '{print $2}') || true
-  fi
-
-  # Build error summary from preflight failures
-  local error_summary=""
-  for failure in "${PREFLIGHT_FAILURES[@]}"; do
-    local code="${failure%%|*}"
-    local msg="${failure#*|}"
-    if [[ -n "$error_summary" ]]; then
-      error_summary="${error_summary}\n"
-    fi
-    error_summary="${error_summary}[${code}] ${msg}"
-  done
-  error_summary=$(json_escape "$error_summary")
-
-  local exit_code="${PREFLIGHT_EXIT_CODE:-1}"
-  local short_error
-  short_error=$(json_escape "$(explain_exit_code "$exit_code")")
-  local error_category="preflight"
-
-  local JSON_PAYLOAD
-  JSON_PAYLOAD=$(
-    cat <<EOF
-{
-    "random_id": "${RANDOM_UUID}",
-    "execution_id": "${EXECUTION_ID:-${RANDOM_UUID}}",
-    "type": "lxc",
-    "nsapp": "${NSAPP:-unknown}",
-    "status": "aborted",
-    "ct_type": ${CT_TYPE:-1},
-    "disk_size": ${DISK_SIZE:-0},
-    "core_count": ${CORE_COUNT:-0},
-    "ram_size": ${RAM_SIZE:-0},
-    "os_type": "${var_os:-}",
-    "os_version": "${var_version:-}",
-    "pve_version": "${pve_version}",
-    "method": "${METHOD:-default}",
-    "exit_code": ${exit_code},
-    "error": "${error_summary}",
-    "error_category": "${error_category}",
-    "repo_source": "${REPO_SOURCE}"
-}
-EOF
-  )
-
-  # Fire-and-forget with short timeout
-  curl -fsS -m "${TELEMETRY_TIMEOUT}" -X POST "${TELEMETRY_URL}" \
-    -H "Content-Type: application/json" \
-    -d "$JSON_PAYLOAD" &>/dev/null || true
-}
-
 # ------------------------------------------------------------------------------
 # post_update_to_api()
 #
@@ -896,7 +883,7 @@ post_update_to_api() {
   # Get RAM info (if detected)
   local ram_speed="${RAM_SPEED:-}"
 
-  # Map status to telemetry values: installing, success, failed, aborted, unknown
+  # Map status to telemetry values: installing, success, failed, unknown
   case "$status" in
   done | success)
     pb_status="success"
@@ -907,17 +894,14 @@ post_update_to_api() {
   failed)
     pb_status="failed"
     ;;
-  aborted)
-    pb_status="aborted"
-    ;;
   *)
     pb_status="unknown"
     ;;
   esac
 
-  # For failed/aborted/unknown status, resolve exit code and error description
-  local short_error=""
-  if [[ "$pb_status" == "failed" ]] || [[ "$pb_status" == "aborted" ]] || [[ "$pb_status" == "unknown" ]]; then
+  # For failed/unknown status, resolve exit code and error description
+  local short_error="" medium_error=""
+  if [[ "$pb_status" == "failed" ]] || [[ "$pb_status" == "unknown" ]]; then
     if [[ "$raw_exit_code" =~ ^[0-9]+$ ]]; then
       exit_code="$raw_exit_code"
     else
@@ -936,6 +920,18 @@ post_update_to_api() {
     short_error=$(json_escape "$(explain_exit_code "$exit_code")")
     error_category=$(categorize_error "$exit_code")
     [[ -z "$error" ]] && error="Unknown error"
+
+    # Build medium error for attempt 2: explanation + last 100 log lines (≤16KB)
+    # This is the critical middle ground between full 120KB log and generic-only description
+    local medium_log=""
+    medium_log=$(get_full_log 16384) || true # 16KB max
+    if [[ -z "$medium_log" ]]; then
+      medium_log=$(get_error_text) || true
+    fi
+    local medium_full
+    medium_full=$(build_error_string "$exit_code" "$medium_log")
+    medium_error=$(json_escape "$medium_full")
+    [[ -z "$medium_error" ]] && medium_error="$short_error"
   fi
 
   # Calculate duration if timer was started
@@ -952,6 +948,11 @@ post_update_to_api() {
 
   local http_code=""
 
+  # Strip 'G' suffix from disk size (VMs set DISK_SIZE=32G)
+  local DISK_SIZE_API="${DISK_SIZE:-0}"
+  DISK_SIZE_API="${DISK_SIZE_API%G}"
+  [[ ! "$DISK_SIZE_API" =~ ^[0-9]+$ ]] && DISK_SIZE_API=0
+
   # ── Attempt 1: Full payload with complete error text (includes full log) ──
   local JSON_PAYLOAD
   JSON_PAYLOAD=$(
@@ -963,7 +964,7 @@ post_update_to_api() {
     "nsapp": "${NSAPP:-unknown}",
     "status": "${pb_status}",
     "ct_type": ${CT_TYPE:-1},
-    "disk_size": ${DISK_SIZE:-0},
+    "disk_size": ${DISK_SIZE_API},
     "core_count": ${CORE_COUNT:-0},
     "ram_size": ${RAM_SIZE:-0},
     "os_type": "${var_os:-}",
@@ -994,7 +995,7 @@ EOF
     return 0
   fi
 
-  # ── Attempt 2: Short error text (no full log) ──
+  # ── Attempt 2: Medium error text (truncated log ≤16KB instead of full 120KB) ──
   sleep 1
   local RETRY_PAYLOAD
   RETRY_PAYLOAD=$(
@@ -1006,7 +1007,7 @@ EOF
     "nsapp": "${NSAPP:-unknown}",
     "status": "${pb_status}",
     "ct_type": ${CT_TYPE:-1},
-    "disk_size": ${DISK_SIZE:-0},
+    "disk_size": ${DISK_SIZE_API},
     "core_count": ${CORE_COUNT:-0},
     "ram_size": ${RAM_SIZE:-0},
     "os_type": "${var_os:-}",
@@ -1014,7 +1015,7 @@ EOF
     "pve_version": "${pve_version}",
     "method": "${METHOD:-default}",
     "exit_code": ${exit_code},
-    "error": "${short_error}",
+    "error": "${medium_error}",
     "error_category": "${error_category}",
     "install_duration": ${duration},
     "cpu_vendor": "${cpu_vendor}",
@@ -1037,7 +1038,7 @@ EOF
     return 0
   fi
 
-  # ── Attempt 3: Minimal payload (bare minimum to set status) ──
+  # ── Attempt 3: Minimal payload with medium error (bare minimum to set status) ──
   sleep 2
   local MINIMAL_PAYLOAD
   MINIMAL_PAYLOAD=$(
@@ -1049,7 +1050,7 @@ EOF
     "nsapp": "${NSAPP:-unknown}",
     "status": "${pb_status}",
     "exit_code": ${exit_code},
-    "error": "${short_error}",
+    "error": "${medium_error}",
     "error_category": "${error_category}",
     "install_duration": ${duration}
 }
@@ -1066,7 +1067,7 @@ EOF
   fi
 
   # All 3 attempts failed — do NOT set POST_UPDATE_DONE=true.
-  # This allows the EXIT trap (api_exit_script) to retry with 3 fresh attempts.
+  # This allows the EXIT trap (on_exit in error_handler.func) to retry.
   # No infinite loop risk: EXIT trap fires exactly once.
 }
 
@@ -1078,7 +1079,7 @@ EOF
 # categorize_error()
 #
 # - Maps exit codes to error categories for better analytics
-# - Categories: network, storage, dependency, permission, timeout, config, resource, preflight, unknown
+# - Categories: network, storage, dependency, permission, timeout, config, resource, unknown
 # - Used to group errors in dashboard
 # ------------------------------------------------------------------------------
 categorize_error() {
@@ -1102,9 +1103,6 @@ categorize_error() {
   # Permission errors
   126 | 152) echo "permission" ;;
 
-  # Validation / Preflight errors
-  103 | 104 | 105 | 106 | 107 | 108) echo "preflight" ;;
-
   # Configuration errors (Proxmox config, invalid args)
   128 | 203 | 204 | 205 | 206 | 207 | 208) echo "config" ;;
 
@@ -1405,16 +1403,13 @@ post_update_to_api_extended() {
   failed)
     pb_status="failed"
     ;;
-  aborted)
-    pb_status="aborted"
-    ;;
   *)
     pb_status="unknown"
     ;;
   esac
 
-  # For failed/aborted/unknown status, resolve exit code and error description
-  if [[ "$pb_status" == "failed" ]] || [[ "$pb_status" == "aborted" ]] || [[ "$pb_status" == "unknown" ]]; then
+  # For failed/unknown status, resolve exit code and error description
+  if [[ "$pb_status" == "failed" ]] || [[ "$pb_status" == "unknown" ]]; then
     if [[ "$raw_exit_code" =~ ^[0-9]+$ ]]; then
       exit_code="$raw_exit_code"
     else

misc/cloud-init.func

@@ -1,7 +1,7 @@
 #!/usr/bin/env bash
 # Copyright (c) 2021-2026 community-scripts ORG
 # Author: community-scripts ORG
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/branch/main/LICENSE
+# License: MIT | https://github.com/community-scripts/ProxmoxVED/raw/arm64-dev-build/LICENSE
 # Revision: 1
 
 # ==============================================================================
@@ -17,7 +17,7 @@
 #   - Cloud-Init status monitoring and waiting
 #
 # Usage:
-#   source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/cloud-init.func)
+#   source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVED/arm64-dev-build/misc/cloud-init.func)
 #   setup_cloud_init "$VMID" "$STORAGE" "$HN" "yes"
 #
 # Compatible with: Debian, Ubuntu, and all Cloud-Init enabled distributions

misc/core.func

@@ -1,6 +1,6 @@
 #!/usr/bin/env bash
 # Copyright (c) 2021-2026 community-scripts ORG
-# License: MIT | https://git.community-scripts.org/community-scripts/ProxmoxVED/raw/branch/main/LICENSE
+# License: MIT | https://raw.githubusercontent.com/community-scripts/ProxmoxVED/arm64-dev-build/LICENSE
 
 # ==============================================================================
 # CORE FUNCTIONS - LXC CONTAINER UTILITIES
@@ -276,7 +276,7 @@ shell_check() {
     msg_error "Your default shell is currently not set to Bash. To use these scripts, please switch to the Bash shell."
     echo -e "\nExiting..."
     sleep 2
-    exit
+    exit 103
   fi
 }
 
@@ -293,7 +293,7 @@ root_check() {
     msg_error "Please run this script as root."
     echo -e "\nExiting..."
     sleep 2
-    exit
+    exit 104
   fi
 }
 
@@ -314,7 +314,7 @@ pve_check() {
     if ((MINOR < 0 || MINOR > 9)); then
       msg_error "This version of Proxmox VE is not supported."
       msg_error "Supported: Proxmox VE version 8.0 – 8.9"
-      exit 1
+      exit 105
     fi
     return 0
   fi
@@ -325,7 +325,7 @@ pve_check() {
     if ((MINOR < 0 || MINOR > 1)); then
       msg_error "This version of Proxmox VE is not yet supported."
       msg_error "Supported: Proxmox VE version 9.0 – 9.1"
-      exit 1
+      exit 105
     fi
     return 0
   fi
@@ -333,7 +333,7 @@ pve_check() {
   # All other unsupported versions
   msg_error "This version of Proxmox VE is not supported."
   msg_error "Supported versions: Proxmox VE 8.0 – 8.9 or 9.0 – 9.1"
-  exit 1
+  exit 105
 }
 
 # ------------------------------------------------------------------------------
@@ -344,12 +344,12 @@ pve_check() {
 # - Provides link to ARM64-compatible scripts
 # ------------------------------------------------------------------------------
 arch_check() {
-  if [ "$(dpkg --print-architecture)" != "amd64" ]; then
-    echo -e "\n ${INFO}${YWB}This script will not work with PiMox! \n"
-    echo -e "\n ${YWB}Visit https://github.com/asylumexp/Proxmox for ARM64 support. \n"
-    echo -e "Exiting..."
+  local arch
+  arch="$(dpkg --print-architecture)"
+  if [[ "$arch" != "amd64" && "$arch" != "arm64" ]]; then
+    msg_error "This script requires amd64 or arm64 (detected: $arch)."
     sleep 2
-    exit
+    exit 106
   fi
 }
 
@@ -399,7 +399,6 @@ ssh_check() {
 #   even after INSTALL_LOG is exported for the container)
 # - INSTALL_LOG: Container operations (application installation)
 # - BUILD_LOG: Host operations (container creation)
-																
 # - Fallback to BUILD_LOG if neither is set
 # ------------------------------------------------------------------------------
 get_active_logfile() {
@@ -490,9 +489,9 @@ log_section() {
 #
 # - Executes command with output redirected to active log file
 # - On error: displays last 20 lines of log and exits with original exit code
-																		  
-																			 
 # - Temporarily disables error trap to capture exit code correctly
+# - Saves and restores previous error handling state (so callers that
+#   intentionally disabled error handling aren't silently re-enabled)
 # - Sources explain_exit_code() for detailed error messages
 # ------------------------------------------------------------------------------
 silent() {
@@ -510,19 +509,30 @@ silent() {
     return 0
   fi
 
+  # Save current error handling state before disabling
+  # This prevents re-enabling error handling when the caller intentionally
+  # disabled it (e.g. build_container recovery section)
+  local _restore_errexit=false
+  [[ "$-" == *e* ]] && _restore_errexit=true
+
   set +Eeuo pipefail
   trap - ERR
 
   "$@" >>"$logfile" 2>&1
   local rc=$?
 
-  set -Eeuo pipefail
-  trap 'error_handler' ERR
-  
+  # Restore error handling ONLY if it was active before this call
+  if $_restore_errexit; then
+    set -Eeuo pipefail
+    trap 'error_handler' ERR
+  fi
+
   if [[ $rc -ne 0 ]]; then
     # Source explain_exit_code if needed
     if ! declare -f explain_exit_code >/dev/null 2>&1; then
-      source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/error_handler.func)
+      if ! source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVED/arm64-dev-build/misc/error_handler.func); then
+        explain_exit_code() { echo "unknown (error_handler.func download failed)"; }
+      fi
     fi
 
     local explanation
@@ -543,6 +553,53 @@ silent() {
   fi
 }
 
+# ------------------------------------------------------------------------------
+# apt_update_safe()
+#
+# - Runs apt-get update with graceful error handling
+# - On failure: shows warning with common causes instead of aborting
+# - Logs full output to active log file
+# - Returns 0 even on failure so the caller can continue
+# - Typical cause: enterprise repos returning 401 Unauthorized
+#
+# Usage:
+#   apt_update_safe       # Warn on failure, continue without aborting
+# ------------------------------------------------------------------------------
+apt_update_safe() {
+  local logfile
+  logfile="$(get_active_logfile)"
+
+  local _restore_errexit=false
+  [[ "$-" == *e* ]] && _restore_errexit=true
+
+  set +Eeuo pipefail
+  trap - ERR
+
+  apt-get update >>"$logfile" 2>&1
+  local rc=$?
+
+  if $_restore_errexit; then
+    set -Eeuo pipefail
+    trap 'error_handler' ERR
+  fi
+
+  if [[ $rc -ne 0 ]]; then
+    msg_warn "apt-get update exited with code ${rc} — some repositories may have failed."
+
+    # Check log for common 401/403 enterprise repo issues
+    if grep -qiE '401\s*Unauthorized|403\s*Forbidden|enterprise\.proxmox\.com' "$logfile" 2>/dev/null; then
+      echo -e "${TAB}${INFO} ${YWB}Hint: Proxmox enterprise repository returned an auth error.${CL}"
+      echo -e "${TAB}       If you don't have a subscription, you can disable the enterprise"
+      echo -e "${TAB}       repo and use the no-subscription repo instead."
+    fi
+
+    echo -e "${TAB}${INFO} ${YWB}Continuing despite partial update failure — packages may still be installable.${CL}"
+    echo ""
+  fi
+
+  return 0
+}
+
 # ------------------------------------------------------------------------------
 # spinner()
 #
@@ -599,6 +656,7 @@ stop_spinner() {
 
   unset SPINNER_PID SPINNER_MSG
   stty sane 2>/dev/null || true
+  stty -tostop 2>/dev/null || true
 }
 
 # ==============================================================================
@@ -776,8 +834,8 @@ fatal() {
 # ------------------------------------------------------------------------------
 exit_script() {
   clear
-  echo -e "\n${CROSS}${RD}User exited script${CL}\n"
-  exit
+  msg_error "User exited script"
+  exit 0
 }
 
 # ------------------------------------------------------------------------------
@@ -791,13 +849,16 @@ exit_script() {
 get_header() {
   local app_name=$(echo "${APP,,}" | tr -d ' ')
   local app_type=${APP_TYPE:-ct} # Default to 'ct' if not set
-  local header_url="https://git.community-scripts.org/community-scripts/ProxmoxVED/raw/branch/main/${app_type}/headers/${app_name}"
+  local header_dir="${app_type}"
+  [[ "$app_type" == "addon" ]] && header_dir="tools"
+  local header_url="https://raw.githubusercontent.com/community-scripts/ProxmoxVED/arm64-dev-build/${header_dir}/headers/${app_name}"
   local local_header_path="/usr/local/community-scripts/headers/${app_type}/${app_name}"
 
   mkdir -p "$(dirname "$local_header_path")"
 
   if [ ! -s "$local_header_path" ]; then
     if ! curl -fsSL "$header_url" -o "$local_header_path"; then
+      msg_warn "Failed to download header: $header_url"
       return 1
     fi
   fi
@@ -838,10 +899,10 @@ header_info() {
 ensure_tput() {
   if ! command -v tput >/dev/null 2>&1; then
     if grep -qi 'alpine' /etc/os-release; then
-      apk add --no-cache ncurses >/dev/null 2>&1
+      apk add --no-cache ncurses >/dev/null 2>&1 || msg_warn "Failed to install ncurses (tput may be unavailable)"
     elif command -v apt-get >/dev/null 2>&1; then
       apt-get update -qq >/dev/null
-      apt-get install -y -qq ncurses-bin >/dev/null 2>&1
+      apt-get install -y -qq ncurses-bin >/dev/null 2>&1 || msg_warn "Failed to install ncurses-bin (tput may be unavailable)"
     fi
   fi
 }
@@ -872,18 +933,13 @@ is_alpine() {
 #
 # - Determines if script should run in verbose mode
 # - Checks VERBOSE and var_verbose variables
-# - Also returns true if not running in TTY (pipe/redirect scenario)
 # - Used by msg_info() to decide between spinner and static output
+# - Note: Non-TTY (pipe) scenarios are handled separately in msg_info()
+#   to allow spinner output to pass through pipes (e.g. lxc-attach | tee)
 # ------------------------------------------------------------------------------
 is_verbose_mode() {
   local verbose="${VERBOSE:-${var_verbose:-no}}"
-  local tty_status
-  if [[ -t 2 ]]; then
-    tty_status="interactive"
-  else
-    tty_status="not-a-tty"
-  fi
-  [[ "$verbose" != "no" || ! -t 2 ]]
+  [[ "$verbose" != "no" ]]
 }
 
 # ------------------------------------------------------------------------------
@@ -1301,6 +1357,7 @@ prompt_select() {
 
   # Validate options
   if [[ $num_options -eq 0 ]]; then
+    msg_warn "prompt_select called with no options"
     echo "" >&2
     return 1
   fi
@@ -1514,6 +1571,7 @@ cleanup_lxc() {
     post_progress_to_api
   fi
 }
+
 # ------------------------------------------------------------------------------
 # check_or_create_swap()
 #
@@ -1542,22 +1600,30 @@ check_or_create_swap() {
   local swap_size_mb
   swap_size_mb=$(prompt_input "Enter swap size in MB (e.g., 2048 for 2GB):" "2048" 60)
   if ! [[ "$swap_size_mb" =~ ^[0-9]+$ ]]; then
-    msg_error "Invalid size input. Aborting."
+    msg_error "Invalid swap size: '${swap_size_mb}' (must be a number in MB)"
     return 1
   fi
 
   local swap_file="/swapfile"
 
   msg_info "Creating ${swap_size_mb}MB swap file at $swap_file"
-  if dd if=/dev/zero of="$swap_file" bs=1M count="$swap_size_mb" status=progress &&
-    chmod 600 "$swap_file" &&
-    mkswap "$swap_file" &&
-    swapon "$swap_file"; then
-    msg_ok "Swap file created and activated successfully"
-  else
-    msg_error "Failed to create or activate swap"
+  if ! dd if=/dev/zero of="$swap_file" bs=1M count="$swap_size_mb" status=progress; then
+    msg_error "Failed to allocate swap file (dd failed)"
     return 1
   fi
+  if ! chmod 600 "$swap_file"; then
+    msg_error "Failed to set permissions on $swap_file"
+    return 1
+  fi
+  if ! mkswap "$swap_file"; then
+    msg_error "Failed to format swap file (mkswap failed)"
+    return 1
+  fi
+  if ! swapon "$swap_file"; then
+    msg_error "Failed to activate swap (swapon failed)"
+    return 1
+  fi
+  msg_ok "Swap file created and activated successfully"
 }
 
 # ------------------------------------------------------------------------------
@@ -1639,7 +1705,7 @@ function get_lxc_ip() {
 
     LOCAL_IP="$(get_current_ip || true)"
     if [[ -z "$LOCAL_IP" ]]; then
-      msg_error "Could not determine LOCAL_IP"
+      msg_error "Could not determine LOCAL_IP (checked: eth0, hostname -I, ip route, IPv6 targets)"
       return 1
     fi
   fi
@@ -1651,17 +1717,4 @@ function get_lxc_ip() {
 # SIGNAL TRAPS
 # ==============================================================================
 
-# ------------------------------------------------------------------------------
-# on_hup_keepalive()
-#
-# - SIGHUP (terminal hangup) trap handler
-# - Keeps long-running scripts alive if terminal/SSH session disconnects
-# - Stops spinner safely and writes warning to active log
-# ------------------------------------------------------------------------------
-on_hup_keepalive() {
-  stop_spinner
-  log_msg "[WARN] Received SIGHUP (terminal hangup). Continuing execution in background."
-}
-
-trap 'on_hup_keepalive' HUP
 trap 'stop_spinner' EXIT INT TERM

misc/error_handler.func

@@ -4,7 +4,7 @@
 # ------------------------------------------------------------------------------
 # Copyright (c) 2021-2026 community-scripts ORG
 # Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# License: MIT | https://github.com/community-scripts/ProxmoxVED/raw/arm64-dev-build/LICENSE
 # ------------------------------------------------------------------------------
 #
 # Provides comprehensive error handling and signal management for all scripts.
@@ -94,6 +94,29 @@ if ! declare -f explain_exit_code &>/dev/null; then
     100) echo "APT: Package manager error (broken packages / dependency problems)" ;;
     101) echo "APT: Configuration error (bad sources.list, malformed config)" ;;
     102) echo "APT: Lock held by another process (dpkg/apt still running)" ;;
+
+    # --- Script Validation & Setup (103-123) ---
+    103) echo "Validation: Shell is not Bash" ;;
+    104) echo "Validation: Not running as root (or invoked via sudo)" ;;
+    105) echo "Validation: Proxmox VE version not supported" ;;
+    106) echo "Validation: Architecture not supported (ARM / PiMox)" ;;
+    107) echo "Validation: Kernel key parameters unreadable" ;;
+    108) echo "Validation: Kernel key limits exceeded" ;;
+    109) echo "Proxmox: No available container ID after max attempts" ;;
+    110) echo "Proxmox: Failed to apply default.vars" ;;
+    111) echo "Proxmox: App defaults file not available" ;;
+    112) echo "Proxmox: Invalid install menu option" ;;
+    113) echo "LXC: Under-provisioned — user aborted update" ;;
+    114) echo "LXC: Storage too low — user aborted update" ;;
+    115) echo "Download: install.func download failed or incomplete" ;;
+    116) echo "Proxmox: Default bridge vmbr0 not found" ;;
+    117) echo "LXC: Container did not reach running state" ;;
+    118) echo "LXC: No IP assigned to container after timeout" ;;
+    119) echo "Proxmox: No valid storage for rootdir content" ;;
+    120) echo "Proxmox: No valid storage for vztmpl content" ;;
+    121) echo "LXC: Container network not ready (no IP after retries)" ;;
+    122) echo "LXC: No internet connectivity — user declined to continue" ;;
+    123) echo "LXC: Local IP detection failed" ;;
     124) echo "Command timed out (timeout command)" ;;
     125) echo "Command failed to start (Docker daemon or execution error)" ;;
     126) echo "Command invoked cannot execute (permission problem?)" ;;
@@ -155,6 +178,16 @@ if ! declare -f explain_exit_code &>/dev/null; then
     224) echo "Proxmox: PBS storage is for backups only" ;;
     225) echo "Proxmox: No template available for OS/Version" ;;
     231) echo "Proxmox: LXC stack upgrade failed" ;;
+
+    # --- Tools & Addon Scripts (232-238) ---
+    232) echo "Tools: Wrong execution environment (run on PVE host, not inside LXC)" ;;
+    233) echo "Tools: Application not installed (update prerequisite missing)" ;;
+    234) echo "Tools: No LXC containers found or available" ;;
+    235) echo "Tools: Backup or restore operation failed" ;;
+    236) echo "Tools: Required hardware not detected" ;;
+    237) echo "Tools: Dependency package installation failed" ;;
+    238) echo "Tools: OS or distribution not supported for this addon" ;;
+
     239) echo "npm/Node.js: Unexpected runtime error or dependency failure" ;;
     243) echo "Node.js: Out of memory (JavaScript heap out of memory)" ;;
     245) echo "Node.js: Invalid command-line option" ;;
@@ -162,6 +195,14 @@ if ! declare -f explain_exit_code &>/dev/null; then
     247) echo "Node.js: Fatal internal error" ;;
     248) echo "Node.js: Invalid C++ addon / N-API failure" ;;
     249) echo "npm/pnpm/yarn: Unknown fatal error" ;;
+
+    # --- Application Install/Update Errors (250-254) ---
+    250) echo "App: Download failed or version not determined" ;;
+    251) echo "App: File extraction failed (corrupt or incomplete archive)" ;;
+    252) echo "App: Required file or resource not found" ;;
+    253) echo "App: Data migration required — update aborted" ;;
+    254) echo "App: User declined prompt or input timed out" ;;
+
     255) echo "DPKG: Fatal internal error" ;;
     *) echo "Unknown error" ;;
     esac
@@ -199,11 +240,16 @@ error_handler() {
     return 0
   fi
 
+  # Stop spinner and restore cursor FIRST — before any output
+  # This prevents spinner text overlapping with error messages
+  if declare -f stop_spinner >/dev/null 2>&1; then
+    stop_spinner 2>/dev/null || true
+  fi
+  printf "\e[?25h"
+
   local explanation
   explanation="$(explain_exit_code "$exit_code")"
 
-  printf "\e[?25h"
-
   # ALWAYS report failure to API immediately - don't wait for container checks
   # This ensures we capture failures that occur before/after container exists
   if declare -f post_update_to_api &>/dev/null; then
@@ -281,6 +327,8 @@ error_handler() {
         echo -en "${YW}Remove broken container ${CTID}? (Y/n) [auto-remove in 60s]: ${CL}"
       fi
 
+      # Read user response
+      local response=""
       if read -t 60 -r response; then
         if [[ -z "$response" || "$response" =~ ^[Yy]$ ]]; then
           echo ""
@@ -359,9 +407,65 @@ _send_abort_telemetry() {
   command -v curl &>/dev/null || return 0
   [[ "${DIAGNOSTICS:-no}" == "no" ]] && return 0
   [[ -z "${RANDOM_UUID:-}" ]] && return 0
-  curl -fsS -m 5 -X POST "${TELEMETRY_URL:-https://telemetry.community-scripts.org/telemetry}" \
-    -H "Content-Type: application/json" \
-    -d "{\"random_id\":\"${RANDOM_UUID}\",\"execution_id\":\"${EXECUTION_ID:-${RANDOM_UUID}}\",\"type\":\"${TELEMETRY_TYPE:-lxc}\",\"nsapp\":\"${NSAPP:-${app:-unknown}}\",\"status\":\"failed\",\"exit_code\":${exit_code}}" &>/dev/null || true
+
+  # Collect last 200 log lines for error diagnosis (best-effort)
+  # Container context has no get_full_log(), so we gather as much as possible
+  local error_text=""
+  local logfile=""
+  if [[ -n "${INSTALL_LOG:-}" && -s "${INSTALL_LOG}" ]]; then
+    logfile="${INSTALL_LOG}"
+  elif [[ -n "${SILENT_LOGFILE:-}" && -s "${SILENT_LOGFILE}" ]]; then
+    logfile="${SILENT_LOGFILE}"
+  fi
+
+  if [[ -n "$logfile" ]]; then
+    error_text=$(tail -n 200 "$logfile" 2>/dev/null | sed 's/\x1b\[[0-9;]*[a-zA-Z]//g; s/\\/\\\\/g; s/"/\\"/g; s/\r//g' | tr '\n' '|' | sed 's/|$//' | head -c 16384 | tr -d '\000-\010\013\014\016-\037\177') || true
+  fi
+
+  # Prepend exit code explanation header (like build_error_string does on host)
+  local explanation=""
+  if declare -f explain_exit_code &>/dev/null; then
+    explanation=$(explain_exit_code "$exit_code" 2>/dev/null) || true
+  fi
+  if [[ -n "$explanation" && -n "$error_text" ]]; then
+    error_text="exit_code=${exit_code} | ${explanation}|---|${error_text}"
+  elif [[ -n "$explanation" && -z "$error_text" ]]; then
+    error_text="exit_code=${exit_code} | ${explanation}"
+  fi
+
+  # Calculate duration if start time is available
+  local duration=""
+  if [[ -n "${DIAGNOSTICS_START_TIME:-}" ]]; then
+    duration=$(($(date +%s) - DIAGNOSTICS_START_TIME))
+  fi
+
+  # Categorize error if function is available (may not be in minimal container context)
+  local error_category=""
+  if declare -f categorize_error &>/dev/null; then
+    error_category=$(categorize_error "$exit_code" 2>/dev/null) || true
+  fi
+
+  # Build JSON payload with error context
+  local payload
+  payload="{\"random_id\":\"${RANDOM_UUID}\",\"execution_id\":\"${EXECUTION_ID:-${RANDOM_UUID}}\",\"type\":\"${TELEMETRY_TYPE:-lxc}\",\"nsapp\":\"${NSAPP:-${app:-unknown}}\",\"status\":\"failed\",\"exit_code\":${exit_code}"
+  [[ -n "$error_text" ]] && payload="${payload},\"error\":\"${error_text}\""
+  [[ -n "$error_category" ]] && payload="${payload},\"error_category\":\"${error_category}\""
+  [[ -n "$duration" ]] && payload="${payload},\"duration\":${duration}"
+  payload="${payload}}"
+
+  local api_url="${TELEMETRY_URL:-https://telemetry.community-scripts.org/telemetry}"
+
+  # 2 attempts (retry once on failure) — original had no retry
+  local attempt
+  for attempt in 1 2; do
+    if curl -fsS -m 5 -X POST "$api_url" \
+      -H "Content-Type: application/json" \
+      -d "$payload" &>/dev/null; then
+      return 0
+    fi
+    [[ $attempt -eq 1 ]] && sleep 1
+  done
+  return 0
 }
 
 # ------------------------------------------------------------------------------
@@ -437,6 +541,12 @@ on_exit() {
 # - Exits with code 130 (128 + SIGINT=2)
 # ------------------------------------------------------------------------------
 on_interrupt() {
+  # Stop spinner and restore cursor before any output
+  if declare -f stop_spinner >/dev/null 2>&1; then
+    stop_spinner 2>/dev/null || true
+  fi
+  printf "\e[?25h" 2>/dev/null || true
+
   _send_abort_telemetry "130"
   _stop_container_if_installing
   if declare -f msg_error >/dev/null 2>&1; then
@@ -456,6 +566,12 @@ on_interrupt() {
 # - Exits with code 143 (128 + SIGTERM=15)
 # ------------------------------------------------------------------------------
 on_terminate() {
+  # Stop spinner and restore cursor before any output
+  if declare -f stop_spinner >/dev/null 2>&1; then
+    stop_spinner 2>/dev/null || true
+  fi
+  printf "\e[?25h" 2>/dev/null || true
+
   _send_abort_telemetry "143"
   _stop_container_if_installing
   if declare -f msg_error >/dev/null 2>&1; then
@@ -478,6 +594,11 @@ on_terminate() {
 # - Exits with code 129 (128 + SIGHUP=1)
 # ------------------------------------------------------------------------------
 on_hangup() {
+  # Stop spinner (no cursor restore needed — terminal is already gone)
+  if declare -f stop_spinner >/dev/null 2>&1; then
+    stop_spinner 2>/dev/null || true
+  fi
+
   _send_abort_telemetry "129"
   _stop_container_if_installing
   exit 129

misc/tools.func

@@ -934,7 +934,11 @@ upgrade_package() {
 # ------------------------------------------------------------------------------
 # Repository availability check with caching
 # ------------------------------------------------------------------------------
-declare -A _REPO_CACHE 2>/dev/null || true
+# Note: Must use -gA (global) because tools.func is sourced inside update_os()
+# function scope. Plain 'declare -A' would create a local variable that gets
+# destroyed when update_os() returns, causing "unbound variable" errors later
+# when setup_postgresql/verify_repo_available tries to access the cache key.
+declare -gA _REPO_CACHE 2>/dev/null || declare -A _REPO_CACHE 2>/dev/null || true
 
 verify_repo_available() {
   local repo_url="$1"
@@ -1732,6 +1736,13 @@ setup_deb822_repo() {
       rm -f "$tmp_gpg"
       return 1
     }
+  else
+    # Already binary — copy directly
+    cp -f "$tmp_gpg" "/etc/apt/keyrings/${name}.gpg" || {
+      msg_error "Failed to install GPG key for ${name}"
+      rm -f "$tmp_gpg"
+      return 1
+    }
   fi
   rm -f "$tmp_gpg"
   chmod 644 "/etc/apt/keyrings/${name}.gpg"
@@ -2724,10 +2735,13 @@ function fetch_and_deploy_codeberg_release() {
     # Fall back to architecture heuristic
     if [[ -z "$url_match" ]]; then
       for u in $assets; do
-        if [[ "$u" =~ ($arch|amd64|x86_64|aarch64|arm64).*\.deb$ ]]; then
-          url_match="$u"
-          break
+        if [[ "${arch,,}" =~ ^(amd64|x86_64)$ ]]; then
+          [[ "$u" =~ (amd64|x86_64).*\.deb$ ]] || continue
+        elif [[ "${arch,,}" =~ ^(arm64|aarch64)$ ]]; then
+          [[ "$u" =~ (arm64|aarch64).*\.deb$ ]] || continue
         fi
+        url_match="$u"
+        break
       done
     fi
 
@@ -3024,7 +3038,11 @@ _gh_scan_older_releases() {
         done)
       fi
       if [[ "$has_match" != "true" ]]; then
-        has_match=$(echo "$releases_list" | jq -r ".[$i].assets[].browser_download_url" | grep -qE "($arch|amd64|x86_64|aarch64|arm64).*\.deb$" && echo true)
+        if [[ "${arch,,}" =~ ^(amd64|x86_64)$ ]]; then
+          has_match=$(echo "$releases_list" | jq -r ".[$i].assets[].browser_download_url" | grep -qE '(amd64|x86_64).*\.deb$' && echo true)
+        elif [[ "${arch,,}" =~ ^(arm64|aarch64)$ ]]; then
+          has_match=$(echo "$releases_list" | jq -r ".[$i].assets[].browser_download_url" | grep -qE '(arm64|aarch64).*\.deb$' && echo true)
+        fi
       fi
       if [[ "$has_match" != "true" ]]; then
         has_match=$(echo "$releases_list" | jq -r ".[$i].assets[].browser_download_url" | grep -qE '\.deb$' && echo true)
@@ -3222,10 +3240,13 @@ function fetch_and_deploy_gh_release() {
     # If no match via explicit pattern, fall back to architecture heuristic
     if [[ -z "$url_match" ]]; then
       for u in $assets; do
-        if [[ "$u" =~ ($arch|amd64|x86_64|aarch64|arm64).*\.deb$ ]]; then
-          url_match="$u"
-          break
+        if [[ "${arch,,}" =~ ^(amd64|x86_64)$ ]]; then
+          [[ "$u" =~ (amd64|x86_64).*\.deb$ ]] || continue
+        elif [[ "${arch,,}" =~ ^(arm64|aarch64)$ ]]; then
+          [[ "$u" =~ (arm64|aarch64).*\.deb$ ]] || continue
         fi
+        url_match="$u"
+        break
       done
     fi
 
@@ -3256,10 +3277,13 @@ function fetch_and_deploy_gh_release() {
         fi
         if [[ -z "$url_match" ]]; then
           for u in $assets; do
-            if [[ "$u" =~ ($arch|amd64|x86_64|aarch64|arm64).*\.deb$ ]]; then
-              url_match="$u"
-              break
+            if [[ "${arch,,}" =~ ^(amd64|x86_64)$ ]]; then
+              [[ "$u" =~ (amd64|x86_64).*\.deb$ ]] || continue
+            elif [[ "${arch,,}" =~ ^(arm64|aarch64)$ ]]; then
+              [[ "$u" =~ (arm64|aarch64).*\.deb$ ]] || continue
             fi
+            url_match="$u"
+            break
           done
         fi
         if [[ -z "$url_match" ]]; then
@@ -5142,7 +5166,7 @@ current_ip="$(get_current_ip)"
 
 if [[ -z "$current_ip" ]]; then
     echo "[ERROR] Could not detect local IP" >&2
-    exit 1
+    exit 123
 fi
 
 if [[ -f "$IP_FILE" ]]; then
@@ -5643,20 +5667,20 @@ function setup_mongodb() {
 #   - Handles Debian Trixie libaio1t64 transition
 #
 # Variables:
-#   USE_MYSQL_REPO - Set to "true" to use official MySQL repository
-#                    (default: false, uses distro packages)
+#   USE_MYSQL_REPO - Use official MySQL repository (default: true)
+#                    Set to "false" to use distro packages instead
 #   MYSQL_VERSION  - MySQL version to install when using official repo
 #                    (e.g. 8.0, 8.4) (default: 8.0)
 #
 # Examples:
-#   setup_mysql                              # Uses distro package (recommended)
-#   USE_MYSQL_REPO=true setup_mysql          # Uses official MySQL repo
-#   USE_MYSQL_REPO=true MYSQL_VERSION="8.4" setup_mysql  # Specific version
+#   setup_mysql                              # Uses official MySQL repo, 8.0
+#   MYSQL_VERSION="8.4" setup_mysql          # Specific version from MySQL repo
+#   USE_MYSQL_REPO=false setup_mysql         # Uses distro package instead
 # ------------------------------------------------------------------------------
 
 function setup_mysql() {
   local MYSQL_VERSION="${MYSQL_VERSION:-8.0}"
-  local USE_MYSQL_REPO="${USE_MYSQL_REPO:-false}"
+  local USE_MYSQL_REPO="${USE_MYSQL_REPO:-true}"
   local DISTRO_ID DISTRO_CODENAME
   DISTRO_ID=$(awk -F= '/^ID=/{print $2}' /etc/os-release | tr -d '"')
   DISTRO_CODENAME=$(awk -F= '/^VERSION_CODENAME=/{print $2}' /etc/os-release)
@@ -6357,21 +6381,21 @@ EOF
 #   - Restores dumped data post-upgrade
 #
 # Variables:
-#   USE_PGDG_REPO  - Set to "true" to use official PGDG repository
-#                    (default: false, uses distro packages)
+#   USE_PGDG_REPO  - Use official PGDG repository (default: true)
+#                    Set to "false" to use distro packages instead
 #   PG_VERSION    - Major PostgreSQL version (e.g. 15, 16) (default: 16)
 #   PG_MODULES    - Comma-separated list of modules (e.g. "postgis,contrib")
 #
 # Examples:
-#   setup_postgresql                              # Uses distro package (recommended)
-#   USE_PGDG_REPO=true setup_postgresql           # Uses official PGDG repo
-#   USE_PGDG_REPO=true PG_VERSION="17" setup_postgresql  # Specific version from PGDG
+#   setup_postgresql                              # Uses PGDG repo, PG 16
+#   PG_VERSION="17" setup_postgresql               # Specific version from PGDG
+#   USE_PGDG_REPO=false setup_postgresql           # Uses distro package instead
 # ------------------------------------------------------------------------------
 
 function setup_postgresql() {
   local PG_VERSION="${PG_VERSION:-16}"
   local PG_MODULES="${PG_MODULES:-}"
-  local USE_PGDG_REPO="${USE_PGDG_REPO:-false}"
+  local USE_PGDG_REPO="${USE_PGDG_REPO:-true}"
   local DISTRO_ID DISTRO_CODENAME
   DISTRO_ID=$(awk -F= '/^ID=/{print $2}' /etc/os-release | tr -d '"')
   DISTRO_CODENAME=$(awk -F= '/^VERSION_CODENAME=/{print $2}' /etc/os-release)
@@ -6489,14 +6513,13 @@ function setup_postgresql() {
   local SUITE
   case "$DISTRO_CODENAME" in
   trixie | forky | sid)
-
     if verify_repo_available "https://apt.postgresql.org/pub/repos/apt" "trixie-pgdg"; then
       SUITE="trixie-pgdg"
-
     else
-      SUITE="bookworm-pgdg"
+      msg_warn "PGDG repo not available for ${DISTRO_CODENAME}, falling back to distro packages"
+      USE_PGDG_REPO=false setup_postgresql
+      return $?
     fi
-
     ;;
   *)
     SUITE=$(get_fallback_suite "$DISTRO_ID" "$DISTRO_CODENAME" "https://apt.postgresql.org/pub/repos/apt")
@@ -7989,7 +8012,7 @@ EOF
 # ------------------------------------------------------------------------------
 function fetch_and_deploy_from_url() {
   local url="$1"
-  local directory="$2"
+  local directory="${2:-}"
 
   if [[ -z "$url" ]]; then
     msg_error "URL parameter is required"

misc/vm-core.func

@@ -1,5 +1,5 @@
 # Copyright (c) 2021-2026 community-scripts ORG
-# License: MIT | https://git.community-scripts.org/community-scripts/ProxmoxVED/raw/branch/main/LICENSE
+# License: MIT | https://raw.githubusercontent.com/community-scripts/ProxmoxVED/arm64-dev-build/LICENSE
 
 set -euo pipefail
 SPINNER_PID=""
@@ -35,7 +35,7 @@ load_functions() {
 get_header() {
   local app_name=$(echo "${APP,,}" | tr ' ' '-')
   local app_type=${APP_TYPE:-vm}
-  local header_url="https://git.community-scripts.org/community-scripts/ProxmoxVED/raw/branch/main/${app_type}/headers/${app_name}"
+  local header_url="https://raw.githubusercontent.com/community-scripts/ProxmoxVED/arm64-dev-build/${app_type}/headers/${app_name}"
   local local_header_path="/usr/local/community-scripts/headers/${app_type}/${app_name}"
 
   mkdir -p "$(dirname "$local_header_path")"
@@ -190,7 +190,7 @@ silent() {
   if [[ $rc -ne 0 ]]; then
     # Source explain_exit_code if needed
     if ! declare -f explain_exit_code >/dev/null 2>&1; then
-      source <(curl -fsSL "$COMMUNITY_SCRIPTS_URL/misc/error_handler.func") 2>/dev/null || true
+      source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVED/arm64-dev-build/misc/error_handler.func) 2>/dev/null || true
     fi
 
     local explanation=""
@@ -244,7 +244,7 @@ curl_handler() {
 
   if [[ -z "$url" ]]; then
     msg_error "no valid url or option entered for curl_handler"
-    exit 1
+    exit 64
   fi
 
   $STD msg_info "Fetching: $url"
@@ -273,7 +273,7 @@ curl_handler() {
         rm -f /tmp/curl_error.log
       fi
       __curl_err_handler "$exit_code" "$url" "$curl_stderr"
-      exit 1 # hard exit if exit_code is not 0
+      exit "$exit_code"
     fi
 
     $STD printf "\r\033[K${INFO}${YW}Retry $attempt/$max_retries in ${delay}s...${CL}" >&2
@@ -316,7 +316,7 @@ __curl_err_handler() {
   esac
 
   [[ -n "$curl_msg" ]] && printf "%s\n" "$curl_msg" >&2
-  exit 1
+  exit "$exit_code"
 }
 
 # ------------------------------------------------------------------------------
@@ -331,7 +331,7 @@ shell_check() {
     msg_error "Your default shell is currently not set to Bash. To use these scripts, please switch to the Bash shell."
     echo -e "\nExiting..."
     sleep 2
-    exit
+    exit 103
   fi
 }
 
@@ -352,11 +352,11 @@ clear_line() {
 #
 # - Determines if script should run in verbose mode
 # - Checks VERBOSE and var_verbose variables
-# - Also returns true if not running in TTY (pipe/redirect scenario)
+# - Note: Non-TTY (pipe) scenarios are handled separately in msg_info()
 # ------------------------------------------------------------------------------
 is_verbose_mode() {
   local verbose="${VERBOSE:-${var_verbose:-no}}"
-  [[ "$verbose" != "no" || ! -t 2 ]]
+  [[ "$verbose" != "no" ]]
 }
 
 ### dev spinner ###
@@ -552,7 +552,7 @@ check_root() {
     msg_error "Please run this script as root."
     echo -e "\nExiting..."
     sleep 2
-    exit
+    exit 104
   fi
 }
 
@@ -562,7 +562,7 @@ pve_check() {
     echo -e "Requires Proxmox Virtual Environment Version 8.1 - 8.4 or 9.0 - 9.1."
     echo -e "Exiting..."
     sleep 2
-    exit
+    exit 105
   fi
 }
 
@@ -572,21 +572,21 @@ arch_check() {
     echo -e "\n ${YWB}Visit https://github.com/asylumexp/Proxmox for ARM64 support. \n"
     echo -e "Exiting..."
     sleep 2
-    exit
+    exit 106
   fi
 }
 
 exit_script() {
   clear
   echo -e "\n${CROSS}${RD}User exited script${CL}\n"
-  exit
+  exit 0
 }
 
 check_hostname_conflict() {
   local hostname="$1"
   if qm list | awk '{print $2}' | grep -qx "$hostname"; then
     msg_error "Hostname $hostname already in use by another VM."
-    exit 1
+    exit 206
   fi
 }
 
@@ -595,7 +595,7 @@ set_description() {
     cat <<EOF
 <div align='center'>
   <a href='https://Helper-Scripts.com' target='_blank' rel='noopener noreferrer'>
-    <img src='https://raw.githubusercontent.com/community-scripts/ProxmoxVED/main/misc/images/logo-81x112.png' alt='Logo' style='width:81px;height:112px;'/>
+    <img src='https://raw.githubusercontent.com/community-scripts/ProxmoxVED/arm64-dev-build/misc/images/logo-81x112.png' alt='Logo' style='width:81px;height:112px;'/>
   </a>
 
   <h2 style='font-size: 24px; margin: 20px 0;'>${NSAPP} VM</h2>