Update CHANGELOG.md (#17976)

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

CHANGELOG.md

@@ -562,6 +562,41 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
 </details>
 
+## 2026-10-17
+
+### 🆕 New Scripts
+
+  - ProxCenter ([#17961](https://github.com/community-scripts/ProxmoxVE/pull/17961))
+- Listenarr ([#17963](https://github.com/community-scripts/ProxmoxVE/pull/17963))
+- Youtarr ([#17962](https://github.com/community-scripts/ProxmoxVE/pull/17962))
+- Norish ([#17964](https://github.com/community-scripts/ProxmoxVE/pull/17964))
+
+### 🚀 Updated Scripts
+
+  - #### 🔧 Refactor
+
+    - Sonarr: stay on the newest v4 (pin) [@MickLesk](https://github.com/MickLesk) ([#17958](https://github.com/community-scripts/ProxmoxVE/pull/17958))
+
+## 2026-10-16
+
+### 🆕 New Scripts
+
+  - Downtify ([#17959](https://github.com/community-scripts/ProxmoxVE/pull/17959))
+- openGym ([#17960](https://github.com/community-scripts/ProxmoxVE/pull/17960))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Pelican Panel: pass the URL to p:environment:setup [@MickLesk](https://github.com/MickLesk) ([#17948](https://github.com/community-scripts/ProxmoxVE/pull/17948))
+    - OneDev: use the onedev.server unit of 16.9 [@MickLesk](https://github.com/MickLesk) ([#17949](https://github.com/community-scripts/ProxmoxVE/pull/17949))
+    - ReadMeABook: start the scheduler with the service [@MickLesk](https://github.com/MickLesk) ([#17950](https://github.com/community-scripts/ProxmoxVE/pull/17950))
+
+### 💾 Core
+
+  - Clean up after installs and updates again [@MickLesk](https://github.com/MickLesk) ([core#147](https://github.com/community-scripts/core/pull/147))
+- Fix apt_conffile_report exiting 1 when uutils comm sees locale-sorted input [@BadFlo](https://github.com/BadFlo) ([core#146](https://github.com/community-scripts/core/pull/146))
+
 ## 2026-10-15
 
 ### 🚀 Updated Scripts

ct/downtify.sh

@@ -0,0 +1,69 @@
+#!/usr/bin/env bash
+_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
+source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/henriquesebastiao/downtify
+
+APP="Downtify"
+var_tags="${var_tags:-music;downloader}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-1024}"
+var_disk="${var_disk:-8}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_arm64="${var_arm64:-yes}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -d /opt/downtify ]]; then
+    msg_error "No Downtify Installation Found!"
+    exit
+  fi
+
+  if check_for_gh_release "downtify" "henriquesebastiao/downtify"; then
+    msg_info "Stopping Downtify"
+    systemctl stop downtify
+    msg_ok "Stopped Downtify"
+
+    PYTHON_VERSION="3.14" setup_uv
+    NODE_VERSION="26" setup_nodejs
+    fetch_and_deploy_gh_release "deno" "denoland/deno" "prebuild" "latest" "/usr/local/bin" "deno-$(arch_resolve "x86_64" "aarch64")-unknown-linux-gnu.zip"
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "downtify" "henriquesebastiao/downtify" "tarball"
+
+    msg_info "Building Downtify"
+    cd /opt/downtify/frontend
+    $STD npm ci
+    $STD npm run build
+    rm -rf /opt/downtify/frontend/node_modules
+    cd /opt/downtify
+    $STD uv sync --frozen --no-dev --python 3.14
+    msg_ok "Built Downtify"
+
+    msg_info "Starting Downtify"
+    systemctl start downtify
+    msg_ok "Started Downtify"
+    msg_ok "Updated successfully!"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW}Access it using the following URL:${CL}"
+echo -e "${GATEWAY}${BGN}http://${IP}:8000${CL}"
+echo -e "${INFO}${YW}Sign in as admin / downtify and change the password right away${CL}"

ct/listenarr.sh

@@ -0,0 +1,56 @@
+#!/usr/bin/env bash
+_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
+source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/Listenarrs/Listenarr
+
+APP="Listenarr"
+var_tags="${var_tags:-arr;audiobook}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-2048}"
+var_disk="${var_disk:-8}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_arm64="${var_arm64:-no}" # upstream publishes a linux-x64 build only
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -d /opt/listenarr ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  if GH_INCLUDE_PRERELEASE=1 check_for_gh_release "listenarr" "Listenarrs/Listenarr"; then
+    msg_info "Stopping Listenarr"
+    systemctl stop listenarr
+    msg_ok "Stopped Listenarr"
+
+    GH_INCLUDE_PRERELEASE=1 CLEAN_INSTALL=1 fetch_and_deploy_gh_release "listenarr" "Listenarrs/Listenarr" "prebuild" "latest" "/opt/listenarr" "listenarr-*-linux-x64.zip"
+
+    msg_info "Starting Listenarr"
+    systemctl start listenarr
+    msg_ok "Started Listenarr"
+    msg_ok "Updated successfully!"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW}Access it using the following URL:${CL}"
+echo -e "${GATEWAY}${BGN}http://${IP}:4545${CL}"

ct/norish.sh

@@ -0,0 +1,68 @@
+#!/usr/bin/env bash
+_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
+source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/norish-recipes/norish
+
+APP="Norish"
+var_tags="${var_tags:-recipes;meal-planning}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-6144}"
+var_disk="${var_disk:-12}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_arm64="${var_arm64:-yes}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -d /opt/norish ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  if check_for_gh_release "norish" "norish-recipes/norish"; then
+    msg_info "Stopping Norish"
+    systemctl stop norish obscura
+    msg_ok "Stopped Norish"
+
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "norish" "norish-recipes/norish" "tarball"
+    NODE_VERSION="22" NODE_MODULE="pnpm@$(jq -r '.packageManager | split("@")[1]' /opt/norish/package.json)" setup_nodejs
+    PYTHON_VERSION="3.14" setup_uv
+    fetch_and_deploy_gh_release "obscura" "h4ckf0r0day/obscura" "prebuild" "v$(sed -n 's/^OBSCURA_VERSION=//p' /opt/norish/docker/obscura/pin.env)" "/opt/obscura" "obscura-$(arch_resolve "x86_64" "aarch64")-linux-stealth.tar.gz"
+    fetch_and_deploy_gh_release "yt-dlp" "yt-dlp/yt-dlp" "singlefile" "latest" "/usr/local/bin" "$(arch_resolve "yt-dlp_linux" "yt-dlp_linux_aarch64")"
+
+    msg_info "Building Norish"
+    cd /opt/norish
+    $STD pnpm install --frozen-lockfile --filter "@norish/web..." --filter norish
+    $STD uv sync --project /opt/norish/apps/parser-api --locked
+    NODE_ENV=production SKIP_ENV_VALIDATION=1 NEXT_TELEMETRY_DISABLED=1 $STD pnpm turbo run build --filter "@norish/web"
+    rm -rf /opt/norish/apps/web/.next/cache /opt/norish/apps/web/.next/standalone
+    msg_ok "Built Norish"
+
+    msg_info "Starting Norish"
+    systemctl start obscura norish
+    msg_ok "Started Norish"
+    msg_ok "Updated successfully!"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW}Access it using the following URL:${CL}"
+echo -e "${GATEWAY}${BGN}http://${IP}:3000${CL}"

ct/onedev.sh

@@ -25,7 +25,10 @@ function update_script() {
   check_container_storage
   check_container_resources
 
-  if [[ ! -f /etc/systemd/system/onedev.service ]]; then
+  # Installs from before 16.9.0 keep their onedev.service; newer ones get onedev.server.service
+  SERVICE="onedev.server"
+  [[ -f /etc/systemd/system/onedev.service ]] && SERVICE="onedev"
+  if [[ ! -f "/etc/systemd/system/${SERVICE}.service" ]]; then
     msg_error "No ${APP} Installation Found!"
     exit
   fi
@@ -34,7 +37,7 @@ function update_script() {
     JAVA_VERSION="21" setup_java
 
     msg_info "Stopping Service"
-    systemctl stop onedev
+    systemctl stop "$SERVICE"
     msg_ok "Stopped Service"
 
     msg_info "Updating OneDev"
@@ -48,7 +51,7 @@ function update_script() {
     msg_ok "Updated OneDev"
 
     msg_info "Starting Service"
-    systemctl start onedev
+    systemctl start "$SERVICE"
     msg_ok "Started Service"
     msg_ok "Updated successfully!"
     exit

ct/opengym.sh

@@ -0,0 +1,68 @@
+#!/usr/bin/env bash
+_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
+source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/DuarteSantos8/openGym
+
+APP="openGym"
+var_tags="${var_tags:-health;fitness}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-2048}"
+var_disk="${var_disk:-4}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_arm64="${var_arm64:-yes}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -d /opt/opengym ]]; then
+    msg_error "No openGym Installation Found!"
+    exit
+  fi
+
+  if check_for_gh_release "opengym" "DuarteSantos8/openGym" "" "" "v"; then
+    msg_info "Stopping openGym"
+    systemctl stop nginx opengym
+    msg_ok "Stopped openGym"
+
+    NODE_VERSION="22" setup_nodejs
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "opengym" "DuarteSantos8/openGym" "tarball" "latest" "/opt/opengym" "" "v"
+
+    msg_info "Building openGym"
+    cd /opt/opengym/api
+    $STD npm ci --omit=dev --omit=optional
+    cd /opt/opengym/frontend
+    $STD npm ci --ignore-scripts
+    $STD npm run build
+    rm -rf /opt/opengym/frontend/node_modules ~/.npm
+    msg_ok "Built openGym"
+
+    msg_info "Starting openGym"
+    systemctl start opengym nginx
+    msg_ok "Started openGym"
+    msg_ok "Updated successfully!"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW}Access it using the following URL:${CL}"
+echo -e "${GATEWAY}${BGN}http://${IP}${CL}"
+echo -e "${INFO}${YW}Sign-in is by password over plain HTTP. Create your profile right away: the first one becomes the admin.${CL}"
+echo -e "${INFO}${YW}For passkeys, serve it over HTTPS on a hostname through a reverse proxy, then set RP_ID and ORIGIN in /opt/opengym_data/.env and run systemctl restart opengym. Changing RP_ID later invalidates existing passkeys.${CL}"

ct/pelican-panel.sh

@@ -66,7 +66,8 @@ function update_script() {
     cp -a /opt/backup/storage/app/public /opt/pelican-panel/storage/app/
 
     $STD composer install --no-dev --optimize-autoloader --no-interaction
-    $STD php artisan p:environment:setup
+    PANEL_URL="$(sed -n 's/^APP_URL=//p' /opt/pelican-panel/.env | tr -d "\"'")"
+    $STD php artisan p:environment:setup --url="$PANEL_URL"
     $STD php artisan view:clear
     $STD php artisan config:clear
     $STD php artisan filament:optimize

ct/proxcenter.sh

@@ -0,0 +1,71 @@
+#!/usr/bin/env bash
+_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
+source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/adminsyspro/proxcenter-ui
+
+APP="ProxCenter"
+var_tags="${var_tags:-proxmox;management}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-6144}"
+var_disk="${var_disk:-10}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_arm64="${var_arm64:-yes}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -d /opt/proxcenter ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  if check_for_gh_release "proxcenter" "adminsyspro/proxcenter-ui"; then
+    msg_info "Stopping ProxCenter"
+    systemctl stop proxcenter
+    msg_ok "Stopped ProxCenter"
+
+    NODE_VERSION="26" setup_nodejs
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "proxcenter" "adminsyspro/proxcenter-ui" "tarball"
+
+    msg_info "Building ProxCenter"
+    cd /opt/proxcenter/frontend
+    $STD npm ci --legacy-peer-deps --ignore-scripts
+    $STD npm run build:icons
+    $STD npx prisma generate
+    NODE_OPTIONS="--max-old-space-size=4608" $STD npm run build
+    msg_ok "Built ProxCenter"
+
+    msg_info "Migrating Database"
+    set -a && source /opt/proxcenter_data/.env && set +a
+    $STD npx prisma migrate deploy
+    $STD npx prisma db seed
+    msg_ok "Migrated Database"
+
+    msg_info "Starting ProxCenter"
+    systemctl start proxcenter
+    msg_ok "Started ProxCenter"
+    msg_ok "Updated successfully!"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW}Access it using the following URL:${CL}"
+echo -e "${GATEWAY}${BGN}http://${IP}:3000${CL}"

ct/readmeabook.sh

@@ -31,6 +31,28 @@ function update_script() {
     exit
   fi
 
+  if ! grep -q '^ExecStartPost=-/usr/local/bin/readmeabook-init$' /etc/systemd/system/readmeabook.service; then
+    msg_info "Starting the scheduler with the service"
+    cat <<'EOF' >/usr/local/bin/readmeabook-init
+#!/usr/bin/env bash
+# Upstream's image calls /api/init after every start: it creates the scheduled jobs and starts the scheduler
+url="http://127.0.0.1:${PORT:-3030}"
+for _ in $(seq 1 60); do curl -sf -o /dev/null "$url/api/health" && break; sleep 1; done
+for _ in $(seq 1 30); do [[ "$(redis-cli ping 2>/dev/null)" == PONG ]] && break; sleep 1; done
+for attempt in 1 2 3 4 5; do
+  curl -sf -o /dev/null "$url/api/init" && exit 0
+  sleep "$attempt"
+done
+echo "ReadMeABook did not answer /api/init, scheduled jobs will not run" >&2
+exit 1
+EOF
+    chmod +x /usr/local/bin/readmeabook-init
+    sed -i '/^ExecStart=/a ExecStartPost=-/usr/local/bin/readmeabook-init\nTimeoutStartSec=180' /etc/systemd/system/readmeabook.service
+    systemctl daemon-reload
+    systemctl restart readmeabook
+    msg_ok "Started the scheduler with the service"
+  fi
+
   if check_for_gh_release "readmeabook" "kikootwo/ReadMeABook"; then
     msg_info "Stopping Service"
     systemctl stop readmeabook

ct/sonarr.sh

@@ -31,12 +31,13 @@ function update_script() {
     exit
   fi
 
-  if check_for_gh_release "Sonarr" "Sonarr/Sonarr"; then
+  # v5 reworks a lot; stay on the newest v4 until it is tested
+  if check_for_gh_release "Sonarr" "Sonarr/Sonarr" "" "" "v4."; then
     msg_info "Stopping Service"
     systemctl stop sonarr
     msg_ok "Stopped Service"
 
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "Sonarr" "Sonarr/Sonarr" "prebuild" "latest" "/opt/Sonarr" "Sonarr.main.*.linux-$(arch_resolve "x64" "arm64").tar.gz"
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "Sonarr" "Sonarr/Sonarr" "prebuild" "latest" "/opt/Sonarr" "Sonarr.main.*.linux-$(arch_resolve "x64" "arm64").tar.gz" "v4."
 
     msg_info "Starting Service"
     systemctl start sonarr

ct/youtarr.sh

@@ -0,0 +1,74 @@
+#!/usr/bin/env bash
+_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
+source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/DialmasterOrg/Youtarr
+
+APP="Youtarr"
+var_tags="${var_tags:-media;youtube;downloader}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-2048}"
+var_disk="${var_disk:-20}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_arm64="${var_arm64:-yes}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -d /opt/youtarr ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  msg_info "Updating yt-dlp"
+  $STD yt-dlp -U
+  msg_ok "Updated yt-dlp"
+
+  if check_for_gh_release "youtarr" "DialmasterOrg/Youtarr"; then
+    msg_info "Stopping Youtarr"
+    systemctl stop youtarr
+    msg_ok "Stopped Youtarr"
+
+    NODE_VERSION="24" setup_nodejs
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "youtarr" "DialmasterOrg/Youtarr" "tarball"
+
+    msg_info "Building Youtarr"
+    cd /opt/youtarr/client
+    $STD npm ci --ignore-scripts
+    $STD npm run build
+    rm -rf /opt/youtarr/client/node_modules
+    cd /opt/youtarr
+    $STD npm ci --omit=dev --ignore-scripts
+    mv /opt/youtarr/config/config.example.json /opt/youtarr/server/
+    rm -rf /opt/youtarr/config
+    ln -sfn /opt/youtarr_data/config /opt/youtarr/config
+    msg_ok "Built Youtarr"
+
+    msg_info "Starting Youtarr"
+    systemctl start youtarr
+    msg_ok "Started Youtarr"
+    msg_ok "Updated successfully!"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW}Access it using the following URL:${CL}"
+echo -e "${GATEWAY}${BGN}http://${IP}:3011${CL}"
+echo -e "${INFO}${YW}First login asks for the setup token in /opt/youtarr_data/config/setup-token${CL}"

install/downtify-install.sh

@@ -0,0 +1,66 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/henriquesebastiao/downtify
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+setup_ffmpeg
+PYTHON_VERSION="3.14" setup_uv
+NODE_VERSION="26" setup_nodejs
+# yt-dlp solves YouTube's JavaScript challenges with Deno
+fetch_and_deploy_gh_release "deno" "denoland/deno" "prebuild" "latest" "/usr/local/bin" "deno-$(arch_resolve "x86_64" "aarch64")-unknown-linux-gnu.zip"
+fetch_and_deploy_gh_release "downtify" "henriquesebastiao/downtify" "tarball"
+
+msg_info "Building Downtify"
+cd /opt/downtify/frontend
+$STD npm ci
+$STD npm run build
+rm -rf /opt/downtify/frontend/node_modules
+cd /opt/downtify
+# pyproject.toml sets [tool.uv] upgrade = true, so --locked fails whenever PyPI has anything newer than uv.lock
+$STD uv sync --frozen --no-dev --python 3.14
+msg_ok "Built Downtify"
+
+msg_info "Configuring Downtify"
+mkdir -p /opt/downtify_data/{data,downloads}
+cat <<EOF >/opt/downtify_data/.env
+DATABASE_DIR=/opt/downtify_data/data
+DOWNLOAD_DIR=/opt/downtify_data/downloads
+EOF
+msg_ok "Configured Downtify"
+
+msg_info "Creating Downtify Service"
+cat <<EOF >/etc/systemd/system/downtify.service
+[Unit]
+Description=Downtify
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=simple
+User=root
+WorkingDirectory=/opt/downtify
+EnvironmentFile=/opt/downtify_data/.env
+Environment=WEB_GUI_LOCATION=/opt/downtify/frontend/dist
+ExecStart=/opt/downtify/.venv/bin/python /opt/downtify/main.py web
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now downtify
+msg_ok "Created Downtify Service"
+
+motd_ssh
+customize
+cleanup_lxc

install/listenarr-install.sh

@@ -0,0 +1,50 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/Listenarrs/Listenarr
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt install -y libicu-dev
+msg_ok "Installed Dependencies"
+
+GH_INCLUDE_PRERELEASE=1 fetch_and_deploy_gh_release "listenarr" "Listenarrs/Listenarr" "prebuild" "latest" "/opt/listenarr" "listenarr-*-linux-x64.zip"
+
+msg_info "Configuring Listenarr"
+mkdir -p /opt/listenarr_data
+ln -s /opt/listenarr/wwwroot /opt/listenarr_data/wwwroot
+msg_ok "Configured Listenarr"
+
+msg_info "Creating Service"
+cat <<EOF >/etc/systemd/system/listenarr.service
+[Unit]
+Description=Listenarr
+After=network.target
+
+[Service]
+Type=simple
+User=root
+WorkingDirectory=/opt/listenarr
+Environment=LISTENARR_CONTENT_ROOT=/opt/listenarr_data
+ExecStart=/opt/listenarr/Listenarr.Api
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now listenarr
+msg_ok "Created Service"
+
+motd_ssh
+customize
+cleanup_lxc

install/norish-install.sh

@@ -0,0 +1,92 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/norish-recipes/norish
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt install -y redis-server
+msg_ok "Installed Dependencies"
+
+PG_VERSION="17" setup_postgresql
+PG_DB_NAME="norish" PG_DB_USER="norish" setup_postgresql_db
+PYTHON_VERSION="3.14" setup_uv
+
+fetch_and_deploy_gh_release "norish" "norish-recipes/norish" "tarball"
+NODE_VERSION="22" NODE_MODULE="pnpm@$(jq -r '.packageManager | split("@")[1]' /opt/norish/package.json)" setup_nodejs
+fetch_and_deploy_gh_release "obscura" "h4ckf0r0day/obscura" "prebuild" "v$(sed -n 's/^OBSCURA_VERSION=//p' /opt/norish/docker/obscura/pin.env)" "/opt/obscura" "obscura-$(arch_resolve "x86_64" "aarch64")-linux-stealth.tar.gz"
+fetch_and_deploy_gh_release "yt-dlp" "yt-dlp/yt-dlp" "singlefile" "latest" "/usr/local/bin" "$(arch_resolve "yt-dlp_linux" "yt-dlp_linux_aarch64")"
+
+msg_info "Building Norish"
+cd /opt/norish
+$STD pnpm install --frozen-lockfile --filter "@norish/web..." --filter norish
+$STD uv sync --project /opt/norish/apps/parser-api --locked
+NODE_ENV=production SKIP_ENV_VALIDATION=1 NEXT_TELEMETRY_DISABLED=1 $STD pnpm turbo run build --filter "@norish/web"
+rm -rf /opt/norish/apps/web/.next/cache /opt/norish/apps/web/.next/standalone
+msg_ok "Built Norish"
+
+msg_info "Configuring Norish"
+mkdir -p /opt/norish_data/uploads
+cat <<EOF >/opt/norish_data/.env
+NODE_ENV=production
+NEXT_TELEMETRY_DISABLED=1
+AUTH_URL=http://${LOCAL_IP}:3000
+DATABASE_URL=postgresql://norish:${PG_DB_PASS}@localhost:5432/norish
+MASTER_KEY=$(openssl rand -base64 32)
+REDIS_URL=redis://127.0.0.1:6379
+OBSCURA_ENDPOINT=ws://127.0.0.1:9222
+UPLOADS_DIR=/opt/norish_data/uploads
+YT_DLP_BIN_DIR=/usr/local/bin
+EOF
+chmod 600 /opt/norish_data/.env
+msg_ok "Configured Norish"
+
+msg_info "Creating Services"
+cat <<EOF >/etc/systemd/system/obscura.service
+[Unit]
+Description=Obscura headless browser for Norish URL imports
+After=network.target
+
+[Service]
+Type=simple
+ExecStart=/opt/obscura/obscura serve --host 127.0.0.1 --port 9222 --stealth
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+EOF
+cat <<EOF >/etc/systemd/system/norish.service
+[Unit]
+Description=Norish
+After=network.target postgresql.service redis-server.service obscura.service
+Requires=postgresql.service redis-server.service
+Wants=obscura.service
+
+[Service]
+Type=simple
+User=root
+WorkingDirectory=/opt/norish
+EnvironmentFile=/opt/norish_data/.env
+ExecStart=/usr/bin/node /opt/norish/dist-server/index.mjs
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now obscura norish
+msg_ok "Created Services"
+
+motd_ssh
+customize
+cleanup_lxc

install/onedev-install.sh

@@ -28,7 +28,7 @@ curl -fsSL "https://code.onedev.io/onedev/server/~sites/public/onedev-latest.tar
 tar -xzf onedev-latest.tar.gz
 mv /opt/onedev-latest /opt/onedev
 $STD /opt/onedev/bin/server.sh install
-systemctl start onedev
+systemctl start onedev.server
 rm -rf /opt/onedev-latest.tar.gz
 echo "${RELEASE}" >~/.onedev
 msg_ok "Installed OneDev"

install/opengym-install.sh

@@ -0,0 +1,158 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/DuarteSantos8/openGym
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt install -y nginx
+msg_ok "Installed Dependencies"
+
+NODE_VERSION="22" setup_nodejs
+fetch_and_deploy_gh_release "opengym" "DuarteSantos8/openGym" "tarball" "latest" "/opt/opengym" "" "v"
+
+msg_info "Building openGym"
+cd /opt/opengym/api
+$STD npm ci --omit=dev --omit=optional
+cd /opt/opengym/frontend
+# Like upstream's web/Dockerfile: skips sharp's libvips download, which only draws the mobile app icons
+$STD npm ci --ignore-scripts
+$STD npm run build
+rm -rf /opt/opengym/frontend/node_modules ~/.npm
+msg_ok "Built openGym"
+
+msg_info "Configuring openGym"
+mkdir -p /opt/opengym_data
+cat <<EOF >/opt/opengym_data/.env
+PORT=3000
+DATA_DIR=/opt/opengym_data
+RP_NAME=openGym
+# Passkeys need HTTPS on a hostname. Behind a reverse proxy set both to the address in the browser,
+# e.g. RP_ID=gym.example.com and ORIGIN=https://gym.example.com, then: systemctl restart opengym
+RP_ID=${LOCAL_IP}
+ORIGIN=http://${LOCAL_IP}
+PASSWORD_LOGIN=1
+FIRST_USER_ADMIN=1
+EOF
+chmod 600 /opt/opengym_data/.env
+msg_ok "Configured openGym"
+
+msg_info "Creating openGym Service"
+cat <<EOF >/etc/systemd/system/opengym.service
+[Unit]
+Description=openGym API
+After=network.target
+
+[Service]
+Type=simple
+User=root
+WorkingDirectory=/opt/opengym/api
+EnvironmentFile=/opt/opengym_data/.env
+Environment=NODE_ENV=production
+ExecStart=/usr/bin/node server.js
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now opengym
+msg_ok "Created openGym Service"
+
+msg_info "Configuring Nginx"
+cat <<'EOF' >/etc/nginx/sites-available/opengym
+server {
+    listen 80 default_server;
+    server_name _;
+    root /opt/opengym/frontend/dist;
+    index index.html;
+    absolute_redirect off;
+
+    add_header X-Frame-Options "DENY" always;
+    add_header X-Content-Type-Options "nosniff" always;
+    add_header Referrer-Policy "same-origin" always;
+    add_header Content-Security-Policy "frame-ancestors 'none'" always;
+
+    location ^~ /api/ {
+        client_max_body_size 5m;
+        proxy_pass http://127.0.0.1:3000;
+        proxy_http_version 1.1;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $remote_addr;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_set_header CF-Connecting-IP "";
+        proxy_read_timeout 300s;
+        proxy_send_timeout 300s;
+    }
+
+    location ^~ /api/media/ {
+        client_max_body_size 48m;
+        proxy_request_buffering off;
+        proxy_buffering off;
+        proxy_pass http://127.0.0.1:3000;
+        proxy_http_version 1.1;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $remote_addr;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_set_header CF-Connecting-IP "";
+        proxy_read_timeout 300s;
+        proxy_send_timeout 300s;
+    }
+
+    location / {
+        try_files $uri $uri/ @root;
+    }
+
+    location @root {
+        return 302 /$is_args$args;
+    }
+
+    location ~* \.(js|css|json|html)$ {
+        add_header Cache-Control "no-cache, must-revalidate";
+        add_header X-Frame-Options "DENY" always;
+        add_header X-Content-Type-Options "nosniff" always;
+        add_header Referrer-Policy "same-origin" always;
+        add_header Content-Security-Policy "frame-ancestors 'none'" always;
+    }
+
+    location ^~ /exercise-media/ {
+        alias /opt/opengym/catalogue/media/;
+        add_header Cache-Control "public, max-age=2592000, immutable";
+        add_header Cross-Origin-Resource-Policy "same-origin" always;
+        add_header X-Frame-Options "DENY" always;
+        add_header X-Content-Type-Options "nosniff" always;
+        add_header Referrer-Policy "same-origin" always;
+        add_header Content-Security-Policy "frame-ancestors 'none'" always;
+    }
+
+    location ~* \.(png|jpg|jpeg|gif|ico|svg|woff|woff2|webp|avif|mp4)$ {
+        add_header Cache-Control "public, max-age=2592000, immutable";
+        add_header X-Frame-Options "DENY" always;
+        add_header X-Content-Type-Options "nosniff" always;
+        add_header Referrer-Policy "same-origin" always;
+        add_header Content-Security-Policy "frame-ancestors 'none'" always;
+    }
+
+    gzip on;
+    gzip_types text/plain text/css application/json application/javascript image/svg+xml;
+    gzip_vary on;
+    gzip_min_length 1024;
+}
+EOF
+nginx_enable_site "opengym"
+msg_ok "Configured Nginx"
+
+motd_ssh
+customize
+cleanup_lxc

install/pelican-panel-install.sh

@@ -26,8 +26,7 @@ fetch_and_deploy_gh_release "pelican-panel" "pelican-dev/panel" "prebuild" "late
 msg_info "Installing Pelican Panel"
 cd /opt/pelican-panel
 $STD composer install --no-dev --optimize-autoloader --no-interaction
-$STD php artisan p:environment:setup
-sed -i "s|^APP_URL=.*|APP_URL=http://${LOCAL_IP}|" /opt/pelican-panel/.env
+$STD php artisan p:environment:setup --url="http://${LOCAL_IP}"
 echo "yes" | $STD php artisan p:environment:database --driver mariadb --host localhost --port 3306 --database "$MARIADB_DB_NAME" --username "$MARIADB_DB_USER" --password "$MARIADB_DB_PASS"
 $STD php artisan p:environment:queue-service --no-interaction
 echo "* * * * * php /opt/pelican-panel/artisan schedule:run >> /dev/null 2>&1" | crontab -u www-data -

install/proxcenter-install.sh

@@ -0,0 +1,73 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/adminsyspro/proxcenter-ui
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+NODE_VERSION="26" setup_nodejs
+PG_VERSION="16" setup_postgresql
+PG_DB_NAME="proxcenter" PG_DB_USER="proxcenter" setup_postgresql_db
+
+fetch_and_deploy_gh_release "proxcenter" "adminsyspro/proxcenter-ui" "tarball"
+
+msg_info "Building ProxCenter"
+cd /opt/proxcenter/frontend
+$STD npm ci --legacy-peer-deps --ignore-scripts
+$STD npm run build:icons
+$STD npx prisma generate
+NODE_OPTIONS="--max-old-space-size=4608" $STD npm run build
+msg_ok "Built ProxCenter"
+
+msg_info "Configuring ProxCenter"
+mkdir -p /opt/proxcenter_data
+cat <<EOF >/opt/proxcenter_data/.env
+NODE_ENV=production
+DATABASE_URL=postgresql://${PG_DB_USER}:${PG_DB_PASS}@localhost:5432/${PG_DB_NAME}?schema=public
+APP_SECRET=$(openssl rand -base64 32)
+NEXTAUTH_SECRET=$(openssl rand -base64 32)
+NEXTAUTH_URL=http://${LOCAL_IP}:3000
+APP_URL=http://${LOCAL_IP}:3000
+PROXCENTER_INSTANCE_ID=proxcenter
+EOF
+chmod 600 /opt/proxcenter_data/.env
+msg_ok "Configured ProxCenter"
+
+msg_info "Migrating Database"
+set -a && source /opt/proxcenter_data/.env && set +a
+$STD npx prisma migrate deploy
+$STD npx prisma db seed
+msg_ok "Migrated Database"
+
+msg_info "Creating Service"
+cat <<EOF >/etc/systemd/system/proxcenter.service
+[Unit]
+Description=ProxCenter
+After=network.target postgresql.service
+
+[Service]
+Type=simple
+User=root
+WorkingDirectory=/opt/proxcenter/frontend
+EnvironmentFile=/opt/proxcenter_data/.env
+ExecStart=/usr/bin/node start.js
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now proxcenter
+msg_ok "Created Service"
+
+motd_ssh
+customize
+cleanup_lxc

install/readmeabook-install.sh

@@ -63,6 +63,20 @@ fi
 msg_ok "Built ReadMeABook"
 
 msg_info "Creating Service"
+cat <<'EOF' >/usr/local/bin/readmeabook-init
+#!/usr/bin/env bash
+# Upstream's image calls /api/init after every start: it creates the scheduled jobs and starts the scheduler
+url="http://127.0.0.1:${PORT:-3030}"
+for _ in $(seq 1 60); do curl -sf -o /dev/null "$url/api/health" && break; sleep 1; done
+for _ in $(seq 1 30); do [[ "$(redis-cli ping 2>/dev/null)" == PONG ]] && break; sleep 1; done
+for attempt in 1 2 3 4 5; do
+  curl -sf -o /dev/null "$url/api/init" && exit 0
+  sleep "$attempt"
+done
+echo "ReadMeABook did not answer /api/init, scheduled jobs will not run" >&2
+exit 1
+EOF
+chmod +x /usr/local/bin/readmeabook-init
 cat <<EOF >/etc/systemd/system/readmeabook.service
 [Unit]
 Description=ReadMeABook
@@ -75,6 +89,8 @@ User=root
 WorkingDirectory=/opt/readmeabook
 EnvironmentFile=/opt/readmeabook/.env
 ExecStart=${START_CMD}
+ExecStartPost=-/usr/local/bin/readmeabook-init
+TimeoutStartSec=180
 Restart=on-failure
 RestartSec=10
 

install/sonarr-install.sh

@@ -17,7 +17,7 @@ msg_info "Installing Dependencies"
 $STD apt install -y sqlite3 libicu-dev
 msg_ok "Installed Dependencies"
 
-fetch_and_deploy_gh_release "Sonarr" "Sonarr/Sonarr" "prebuild" "latest" "/opt/Sonarr" "Sonarr.main.*.linux-$(arch_resolve "x64" "arm64").tar.gz"
+fetch_and_deploy_gh_release "Sonarr" "Sonarr/Sonarr" "prebuild" "latest" "/opt/Sonarr" "Sonarr.main.*.linux-$(arch_resolve "x64" "arm64").tar.gz" "v4."
 mkdir -p /var/lib/sonarr/
 chmod 775 /var/lib/sonarr/
 

install/youtarr-install.sh

@@ -0,0 +1,85 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/DialmasterOrg/Youtarr
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt install -y \
+  atomicparsley \
+  python3
+msg_ok "Installed Dependencies"
+
+setup_ffmpeg
+setup_mariadb
+MARIADB_DB_NAME="youtarr" MARIADB_DB_USER="youtarr" setup_mariadb_db
+NODE_VERSION="24" setup_nodejs
+setup_uv
+
+msg_info "Installing Apprise"
+UV_TOOL_BIN_DIR=/usr/local/bin $STD uv tool install apprise
+msg_ok "Installed Apprise"
+
+fetch_and_deploy_gh_release "deno" "denoland/deno" "prebuild" "latest" "/usr/local/bin" "deno-$(arch_resolve "x86_64" "aarch64")-unknown-linux-gnu.zip"
+fetch_and_deploy_gh_release "yt-dlp" "yt-dlp/yt-dlp" "singlefile" "latest" "/usr/local/bin" "yt-dlp_$(arch_resolve "linux" "linux_aarch64")"
+fetch_and_deploy_gh_release "youtarr" "DialmasterOrg/Youtarr" "tarball"
+
+msg_info "Building Youtarr"
+cd /opt/youtarr/client
+$STD npm ci --ignore-scripts
+$STD npm run build
+rm -rf /opt/youtarr/client/node_modules
+cd /opt/youtarr
+$STD npm ci --omit=dev --ignore-scripts
+msg_ok "Built Youtarr"
+
+msg_info "Configuring Youtarr"
+mkdir -p /opt/youtarr_data/config /opt/youtarr_data/videos
+mv /opt/youtarr/config/config.example.json /opt/youtarr/server/
+rm -rf /opt/youtarr/config
+ln -sfn /opt/youtarr_data/config /opt/youtarr/config
+cat <<EOF >/opt/youtarr_data/.env
+PORT=3011
+DB_HOST=127.0.0.1
+DB_PORT=3306
+DB_NAME=youtarr
+DB_USER=youtarr
+DB_PASSWORD=${MARIADB_DB_PASS}
+DATA_PATH=/opt/youtarr_data/videos
+EOF
+chmod 600 /opt/youtarr_data/.env
+msg_ok "Configured Youtarr"
+
+msg_info "Creating Service"
+cat <<EOF >/etc/systemd/system/youtarr.service
+[Unit]
+Description=Youtarr
+After=network.target mariadb.service
+
+[Service]
+Type=simple
+User=root
+WorkingDirectory=/opt/youtarr
+EnvironmentFile=/opt/youtarr_data/.env
+ExecStart=/usr/bin/node server/server.js
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now youtarr
+msg_ok "Created Service"
+
+motd_ssh
+customize
+cleanup_lxc