Wanderer: bring back the wanderer-pb wrapper

The path refactor in #16487 deleted the wrapper instead of pointing it
at the new layout, while the documented way to create the first
superuser is still wanderer-pb superuser upsert. Calling pocketbase
directly without --dir would quietly start an empty database. Install
the wrapper again, and write it on every update so containers set up
since then get it too.

ct/wanderer.sh

@@ -100,7 +100,6 @@ EOF
       -e "s|^MEILI_DB_PATH=.*|MEILI_DB_PATH=/opt/wanderer_data/meili_data|" \
       /opt/wanderer/.env
     sed -i "s|^db_path =.*|db_path = \"/opt/wanderer_data/meili_data\"|" /etc/meilisearch.toml
-    rm -f /usr/local/bin/wanderer-pb
 
     cat <<EOF >/etc/systemd/system/wanderer-pocketbase.service
 [Unit]
@@ -155,6 +154,16 @@ EOF
     msg_ok "Added POCKETBASE_PROXY_SECRET"
   fi
 
+  cat <<'EOF' >/usr/local/bin/wanderer-pb
+#!/usr/bin/env bash
+set -a
+source /opt/wanderer/.env
+set +a
+cd /opt/wanderer/db
+exec ./pocketbase "$@" --dir="$PB_DB_LOCATION"
+EOF
+  chmod +x /usr/local/bin/wanderer-pb
+
   if [[ -f /opt/wanderer_data/plugins/plugin.json ]]; then
     msg_info "Reinstalling wanderer plugins, one directory each"
     find /opt/wanderer_data/plugins -maxdepth 1 -type f -delete

install/wanderer-install.sh

@@ -54,6 +54,16 @@ PB_DB_LOCATION=/opt/wanderer_data/pb_data
 MEILI_DB_PATH=/opt/wanderer_data/meili_data
 EOF
 
+cat <<'EOF' >/usr/local/bin/wanderer-pb
+#!/usr/bin/env bash
+set -a
+source /opt/wanderer/.env
+set +a
+cd /opt/wanderer/db
+exec ./pocketbase "$@" --dir="$PB_DB_LOCATION"
+EOF
+chmod +x /usr/local/bin/wanderer-pb
+
 cat <<EOF >/etc/systemd/system/wanderer-pocketbase.service
 [Unit]
 Description=wanderer PocketBase

tools/addon/immich-public-proxy.sh

@@ -33,9 +33,7 @@ APP_TYPE="addon"
 INSTALL_PATH="/opt/immich-proxy"
 CONFIG_PATH="/opt/immich-proxy/app"
 SERVICE_PATH="/etc/systemd/system/immich-proxy.service"
-UPLOAD_SERVICE_PATH="/etc/systemd/system/immich-proxy-upload.service"
 DEFAULT_PORT=3000
-UPLOAD_PORT=3001
 
 # Initialize all core functions (colors, formatting, icons, $STD mode)
 load_functions
@@ -46,8 +44,8 @@ require_debian_like
 # ==============================================================================
 function uninstall() {
   msg_info "Uninstalling ${APP}"
-  systemctl disable --now immich-proxy.service immich-proxy-upload.service &>/dev/null || true
-  rm -f "$SERVICE_PATH" "$UPLOAD_SERVICE_PATH"
+  systemctl disable --now immich-proxy.service &>/dev/null || true
+  rm -f "$SERVICE_PATH"
   rm -rf "$INSTALL_PATH"
   rm -f "/usr/local/bin/update_immich-public-proxy"
   rm -f "$HOME/.immichpublicproxy"
@@ -60,33 +58,32 @@ function uninstall() {
 function update() {
   if check_for_gh_release "Immich Public Proxy" "alangrainger/immich-public-proxy"; then
     msg_info "Stopping service"
-    systemctl stop immich-proxy.service immich-proxy-upload.service &>/dev/null || true
+    systemctl stop immich-proxy.service &>/dev/null || true
     msg_ok "Stopped service"
 
     BACKUP_DIR="/opt/immich-public-proxy_backup"
     create_backup "$CONFIG_PATH"/.env "$CONFIG_PATH"/config.json
-    if [[ -f "$UPLOAD_SERVICE_PATH" ]]; then
-      create_backup "$INSTALL_PATH"/upload-app/config.json
-    fi
 
     NODE_VERSION="24" setup_nodejs
     CLEAN_INSTALL=1 fetch_and_deploy_gh_release "Immich Public Proxy" "alangrainger/immich-public-proxy" "tarball" "latest" "$INSTALL_PATH"
 
     restore_backup
-    build_app
+
+    msg_info "Installing dependencies"
+    cd "$CONFIG_PATH"
+    $STD npm ci
+    msg_ok "Installed dependencies"
+
+    msg_info "Building ${APP}"
+    $STD npm run build
+    msg_ok "Built ${APP}"
 
     msg_info "Updating service"
     create_service
-    if [[ -f "$UPLOAD_SERVICE_PATH" ]]; then
-      create_upload_service
-    fi
     msg_ok "Updated service"
 
     msg_info "Starting service"
     systemctl start immich-proxy
-    if [[ -f "$UPLOAD_SERVICE_PATH" ]]; then
-      systemctl start immich-proxy-upload
-    fi
     msg_ok "Started service"
     msg_ok "Updated successfully"
     exit
@@ -114,55 +111,6 @@ EOF
   systemctl daemon-reload
 }
 
-# The workspace root builds shared, app and upload-app together
-function build_app() {
-  msg_info "Installing dependencies"
-  cd "$INSTALL_PATH"
-  $STD npm ci
-  msg_ok "Installed dependencies"
-
-  msg_info "Building ${APP}"
-  $STD npm run build
-  msg_ok "Built ${APP}"
-}
-
-# env sets the port after EnvironmentFile, so an IPP_PORT in .env cannot clash with IPP
-function create_upload_service() {
-  cat <<EOF >"$UPLOAD_SERVICE_PATH"
-[Unit]
-Description=Immich Public Proxy visitor uploads
-After=network.target
-
-[Service]
-Type=simple
-User=root
-WorkingDirectory=${INSTALL_PATH}/upload-app
-EnvironmentFile=${CONFIG_PATH}/.env
-ExecStart=/usr/bin/env IPP_PORT=${UPLOAD_PORT} /usr/bin/node ${INSTALL_PATH}/upload-app/dist/index.js
-Restart=always
-RestartSec=10
-
-[Install]
-WantedBy=multi-user.target
-EOF
-  systemctl daemon-reload
-}
-
-function enable_uploads() {
-  if [[ ! -d "$INSTALL_PATH"/upload-app ]]; then
-    msg_error "Visitor uploads need ${APP} 4.0 or newer. Update first."
-    exit 1
-  fi
-  if [[ ! -f "$INSTALL_PATH"/upload-app/dist/index.js ]]; then
-    build_app
-  fi
-  msg_info "Enabling visitor uploads"
-  create_upload_service
-  systemctl enable -q --now immich-proxy-upload
-  msg_ok "Enabled visitor uploads on port ${UPLOAD_PORT}"
-  msg_warn "Route /upload/* on your reverse proxy to http://${LOCAL_IP}:${UPLOAD_PORT} and turn on 'Allow public user to upload' for the share in Immich"
-}
-
 # ==============================================================================
 # INSTALL
 # ==============================================================================
@@ -172,7 +120,15 @@ function install() {
   # Force fresh download by removing version cache
   rm -f "$HOME/.immichpublicproxy"
   fetch_and_deploy_gh_release "Immich Public Proxy" "alangrainger/immich-public-proxy" "tarball" "latest" "$INSTALL_PATH"
-  build_app
+
+  msg_info "Installing dependencies"
+  cd "$CONFIG_PATH"
+  $STD npm ci
+  msg_ok "Installed dependencies"
+
+  msg_info "Building ${APP}"
+  $STD npm run build
+  msg_ok "Built ${APP}"
 
   MAX_ATTEMPTS=3
   attempt=0
@@ -220,12 +176,6 @@ EOF
   systemctl enable -q --now immich-proxy
   msg_ok "Created and started service"
 
-  prompt="${var_ipp_uploads:-}"
-  [[ -n "$prompt" ]] || read -r -p "${TAB3}Enable visitor uploads (second service on port ${UPLOAD_PORT})? <y/N> " prompt
-  if [[ "${prompt,,}" =~ ^(y|yes|true)$ ]]; then
-    enable_uploads
-  fi
-
   # Create update script (simple wrapper that calls this addon with type=update)
   msg_info "Creating update script"
   cat <<'UPDATEEOF' >/usr/local/bin/update_immich-public-proxy
@@ -280,15 +230,6 @@ if [[ -d "$INSTALL_PATH" && -f "$SERVICE_PATH" ]]; then
     exit 0
   fi
 
-  if [[ ! -f "$UPLOAD_SERVICE_PATH" ]]; then
-    echo -n "${TAB}Enable visitor uploads (second service on port ${UPLOAD_PORT})? (y/N): "
-    read -r upload_prompt
-    if [[ "${upload_prompt,,}" =~ ^(y|yes)$ ]]; then
-      enable_uploads
-      exit 0
-    fi
-  fi
-
   msg_warn "No action selected. Exiting."
   exit 0
 fi