Update CHANGELOG.md (#17538 )

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Archive old changelog entries (#17537 )
2026-09-27 09:03:57 +02:00 · 2026-09-27 00:05:34 +00:00 · 2026-09-27 00:05:09 +00:00 · 2026-09-26 20:11:56 +00:00 · 2026-09-26 22:11:31 +02:00 · 2026-09-26 19:02:25 +00:00
27 changed files with 616 additions and 839 deletions
@@ -1,3 +1,149 @@
+## 2026-09-26
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Manyfold: make /opt/manyfold_data writable for the manyfold user [@sergstepanenko](https://github.com/sergstepanenko) ([#17534](https://github.com/community-scripts/ProxmoxVE/pull/17534))
+    - steamcmd: update itself before installing Satisfactory [@MickLesk](https://github.com/MickLesk) ([#17526](https://github.com/community-scripts/ProxmoxVE/pull/17526))
+    - AudioMuse-AI: build noavx2 environment on Python 3.11 [@MickLesk](https://github.com/MickLesk) ([#17528](https://github.com/community-scripts/ProxmoxVE/pull/17528))
+    - LobeHub: pin lobehub/ui at 5.49 while LobeHub's stable release needs it [@MickLesk](https://github.com/MickLesk) ([#17531](https://github.com/community-scripts/ProxmoxVE/pull/17531))
+    - Keep Trilium updates on the server releases [@MickLesk](https://github.com/MickLesk) ([#17525](https://github.com/community-scripts/ProxmoxVE/pull/17525))
+    - NginxProxyManager: generate admin config and repair certbot's venv on update [@MickLesk](https://github.com/MickLesk) ([#17523](https://github.com/community-scripts/ProxmoxVE/pull/17523))
+    - Komodo: add KOMODO_HOST | fix broken spinner [@MickLesk](https://github.com/MickLesk) ([#17481](https://github.com/community-scripts/ProxmoxVE/pull/17481))
+    - romm: run rq cron and a scans worker for RomM 5.3 [@davidbb](https://github.com/davidbb) ([#17502](https://github.com/community-scripts/ProxmoxVE/pull/17502))
+
+  - #### 💥 Breaking Changes
+
+    - Semaphore: fix BoltDB migration by pinning 2.18.30 [@MickLesk](https://github.com/MickLesk) ([#17439](https://github.com/community-scripts/ProxmoxVE/pull/17439))
+
+### 💾 Core
+
+  - Keep a dash-led bridge comment out of whiptail's options [@MickLesk](https://github.com/MickLesk) ([core#74](https://github.com/community-scripts/core/pull/74))
+
+## 2026-09-25
+
+### 🆕 New Scripts
+
+  - RustFS ([#17499](https://github.com/community-scripts/ProxmoxVE/pull/17499))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Ignis: take the Obsidian version from release tag [@MickLesk](https://github.com/MickLesk) ([#17503](https://github.com/community-scripts/ProxmoxVE/pull/17503))
+
+  - #### 🔧 Refactor
+
+    - Refactor: Umbrel OS VM [@MickLesk](https://github.com/MickLesk) ([#17505](https://github.com/community-scripts/ProxmoxVE/pull/17505))
+    - Docker-LXC: remove Portainer installation from install [@MickLesk](https://github.com/MickLesk) ([#17493](https://github.com/community-scripts/ProxmoxVE/pull/17493))
+
+### 💾 Core
+
+  - Incus: make prompts visible for end-user [@MickLesk](https://github.com/MickLesk) ([core#73](https://github.com/community-scripts/core/pull/73))
+- incus: do not let an install script block on an invisible prompt [@MickLesk](https://github.com/MickLesk) ([core#71](https://github.com/community-scripts/core/pull/71))
+- tel: report progress from installs only, not updates [@MickLesk](https://github.com/MickLesk) ([core#72](https://github.com/community-scripts/core/pull/72))
+
+## 2026-09-24
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Declare the RomM filesystem structure required since 5.3.0 [@MickLesk](https://github.com/MickLesk) ([#17480](https://github.com/community-scripts/ProxmoxVE/pull/17480))
+    - general: use apt_update_safe instead of aborting on a failed apt update [@MickLesk](https://github.com/MickLesk) ([#17462](https://github.com/community-scripts/ProxmoxVE/pull/17462))
+
+  - #### 🔧 Refactor
+
+    - Journiv: Serve Node Frontend and add HTTP Auth .env [@MickLesk](https://github.com/MickLesk) ([#17479](https://github.com/community-scripts/ProxmoxVE/pull/17479))
+
+### 💾 Core
+
+  - core: accept an off-subnet gateway for /31 and /32 [@MickLesk](https://github.com/MickLesk) ([core#70](https://github.com/community-scripts/core/pull/70))
+
+## 2026-09-23
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - fix(signoz): install the histogramQuantile ClickHouse function [@maksimtech](https://github.com/maksimtech) ([#17386](https://github.com/community-scripts/ProxmoxVE/pull/17386))
+    - omniroute: bump to 4 GB for the npm install [@MickLesk](https://github.com/MickLesk) ([#17461](https://github.com/community-scripts/ProxmoxVE/pull/17461))
+    - Run Borg-UI with a single gunicorn worker [@MickLesk](https://github.com/MickLesk) ([#17445](https://github.com/community-scripts/ProxmoxVE/pull/17445))
+    - immich: keep geodata linked and the build deps present on update [@MickLesk](https://github.com/MickLesk) ([#17438](https://github.com/community-scripts/ProxmoxVE/pull/17438))
+
+  - #### 🔧 Refactor
+
+    - Refactor: Scanopy [@MickLesk](https://github.com/MickLesk) ([#16797](https://github.com/community-scripts/ProxmoxVE/pull/16797))
+
+### 💾 Core
+
+  - stop a partial find from aborting the caller under pipefail [@MickLesk](https://github.com/MickLesk) ([core#68](https://github.com/community-scripts/core/pull/68))
+- core: give RHEL-family containers an ostype PVE accepts [@MickLesk](https://github.com/MickLesk) ([core#67](https://github.com/community-scripts/core/pull/67))
+- core: do not abort on a failed apt update [@MickLesk](https://github.com/MickLesk) ([core#66](https://github.com/community-scripts/core/pull/66))
+- VM's: report a finished VM as done, not aborted [@MickLesk](https://github.com/MickLesk) ([core#65](https://github.com/community-scripts/core/pull/65))
+- VM-Core: decide console autologin from the image, not USE_CLOUD_INIT [@MickLesk](https://github.com/MickLesk) ([core#63](https://github.com/community-scripts/core/pull/63))
+- VM-Core: report failed image steps and restore tty1 autologin without cloud-init [@MickLesk](https://github.com/MickLesk) ([core#62](https://github.com/community-scripts/core/pull/62))
+- tools: raise pnpm/yarn fetch timeout and lower network concurrency [@MickLesk](https://github.com/MickLesk) ([core#59](https://github.com/community-scripts/core/pull/59))
+- VM-Core: stop discarding cloud-init error messages [@MickLesk](https://github.com/MickLesk) ([core#60](https://github.com/community-scripts/core/pull/60))
+
+## 2026-09-22
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - fix(invoiceshelf): re-link storage during update [@owenvoke](https://github.com/owenvoke) ([#17431](https://github.com/community-scripts/ProxmoxVE/pull/17431))
+    - fix(alpine-it-tools): write the version file after a successful update [@Houtek](https://github.com/Houtek) ([#17421](https://github.com/community-scripts/ProxmoxVE/pull/17421))
+    - Umami: Align pnpm with engines.pnpm on update [@ReneNulschDE](https://github.com/ReneNulschDE) ([#17404](https://github.com/community-scripts/ProxmoxVE/pull/17404))
+
+  - #### 🔧 Refactor
+
+    - several scripts: let uv see the project before syncing it | refactor some scripts that use uv [@MickLesk](https://github.com/MickLesk) ([#17436](https://github.com/community-scripts/ProxmoxVE/pull/17436))
+
+### 💾 Core
+
+  - setup_uv: honour a project's required-version pin [@MickLesk](https://github.com/MickLesk) ([core#58](https://github.com/community-scripts/core/pull/58))
+- fix(motd): repair legacy 00_lxc-details.sh header and dead color placeholders [@BadFlo](https://github.com/BadFlo) ([core#53](https://github.com/community-scripts/core/pull/53))
+- meilisearch: take the raw binary, not the .deb [@MickLesk](https://github.com/MickLesk) ([core#57](https://github.com/community-scripts/core/pull/57))
+
+### 📚 Documentation
+
+  - github: Stop generating header filenames with a newline in them [@MickLesk](https://github.com/MickLesk) ([#17435](https://github.com/community-scripts/ProxmoxVE/pull/17435))
+
+### ❔ Uncategorized
+
+  - chore(ct): sync cloudflare-ddns defaults with PocketBase [@github-actions[bot]](https://github.com/github-actions[bot]) ([#17446](https://github.com/community-scripts/ProxmoxVE/pull/17446))
+
+## 2026-09-21
+
+### 🆕 New Scripts
+
+  - AudioMuse-AI ([#17415](https://github.com/community-scripts/ProxmoxVE/pull/17415))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - fix(portabase): meet the default admin password rules [@maksimtech](https://github.com/maksimtech) ([#17384](https://github.com/community-scripts/ProxmoxVE/pull/17384))
+    - truenas-vm: strip the G before the storage allocation [@MickLesk](https://github.com/MickLesk) ([#17407](https://github.com/community-scripts/ProxmoxVE/pull/17407))
+    - Librenms - Fix local snmpd community string setup [@dopch](https://github.com/dopch) ([#17363](https://github.com/community-scripts/ProxmoxVE/pull/17363))
+    - fix(iventoy): preserve release data and migrate legacy service launchers [@Msprg](https://github.com/Msprg) ([#17161](https://github.com/community-scripts/ProxmoxVE/pull/17161))
+    - xyops: bump Node.js from 22 to 24 [@github-actions[bot]](https://github.com/github-actions[bot]) ([#17398](https://github.com/community-scripts/ProxmoxVE/pull/17398))
+
+### 💾 Core
+
+  - Generate app headers [@github-actions[bot]](https://github.com/github-actions[bot]) ([core#56](https://github.com/community-scripts/core/pull/56))
+- github-api: take the release the maintainer marked as latest [@MickLesk](https://github.com/MickLesk) ([core#55](https://github.com/community-scripts/core/pull/55))
+- general: prune old Rust toolchains [@MickLesk](https://github.com/MickLesk) ([core#52](https://github.com/community-scripts/core/pull/52))
+- Ask when the preselected storage cannot hold the content [@MickLesk](https://github.com/MickLesk) ([core#51](https://github.com/community-scripts/core/pull/51))
+
+## 2026-09-20
+
+### 🆕 New Scripts
+
+  - Your-Spotify ([#17376](https://github.com/community-scripts/ProxmoxVE/pull/17376))
+
 ## 2026-09-19

 ### 🆕 New Scripts
@@ -107,6 +107,9 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit



+
+
+



@@ -120,7 +123,7 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit


 <details>
-<summary><h4>September (19 entries)</h4></summary>
+<summary><h4>September (26 entries)</h4></summary>

 [View September 2026 Changelog](.github/changelogs/2026/09.md)

@@ -546,17 +549,52 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit

 </details>

-## 2026-09-25
+## 2026-09-27
+
+## 2026-09-26

 ### 🚀 Updated Scripts

+  - #### 🐞 Bug Fixes
+
+    - Manyfold: make /opt/manyfold_data writable for the manyfold user [@sergstepanenko](https://github.com/sergstepanenko) ([#17534](https://github.com/community-scripts/ProxmoxVE/pull/17534))
+    - steamcmd: update itself before installing Satisfactory [@MickLesk](https://github.com/MickLesk) ([#17526](https://github.com/community-scripts/ProxmoxVE/pull/17526))
+    - AudioMuse-AI: build noavx2 environment on Python 3.11 [@MickLesk](https://github.com/MickLesk) ([#17528](https://github.com/community-scripts/ProxmoxVE/pull/17528))
+    - LobeHub: pin lobehub/ui at 5.49 while LobeHub's stable release needs it [@MickLesk](https://github.com/MickLesk) ([#17531](https://github.com/community-scripts/ProxmoxVE/pull/17531))
+    - Keep Trilium updates on the server releases [@MickLesk](https://github.com/MickLesk) ([#17525](https://github.com/community-scripts/ProxmoxVE/pull/17525))
+    - NginxProxyManager: generate admin config and repair certbot's venv on update [@MickLesk](https://github.com/MickLesk) ([#17523](https://github.com/community-scripts/ProxmoxVE/pull/17523))
+    - Komodo: add KOMODO_HOST | fix broken spinner [@MickLesk](https://github.com/MickLesk) ([#17481](https://github.com/community-scripts/ProxmoxVE/pull/17481))
+    - romm: run rq cron and a scans worker for RomM 5.3 [@davidbb](https://github.com/davidbb) ([#17502](https://github.com/community-scripts/ProxmoxVE/pull/17502))
+
+  - #### 💥 Breaking Changes
+
+    - Semaphore: fix BoltDB migration by pinning 2.18.30 [@MickLesk](https://github.com/MickLesk) ([#17439](https://github.com/community-scripts/ProxmoxVE/pull/17439))
+
+### 💾 Core
+
+  - Keep a dash-led bridge comment out of whiptail's options [@MickLesk](https://github.com/MickLesk) ([core#74](https://github.com/community-scripts/core/pull/74))
+
+## 2026-09-25
+
+### 🆕 New Scripts
+
+  - RustFS ([#17499](https://github.com/community-scripts/ProxmoxVE/pull/17499))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Ignis: take the Obsidian version from release tag [@MickLesk](https://github.com/MickLesk) ([#17503](https://github.com/community-scripts/ProxmoxVE/pull/17503))
+
  - #### 🔧 Refactor

+    - Refactor: Umbrel OS VM [@MickLesk](https://github.com/MickLesk) ([#17505](https://github.com/community-scripts/ProxmoxVE/pull/17505))
    - Docker-LXC: remove Portainer installation from install [@MickLesk](https://github.com/MickLesk) ([#17493](https://github.com/community-scripts/ProxmoxVE/pull/17493))

 ### 💾 Core

-  - incus: do not let an install script block on an invisible prompt [@MickLesk](https://github.com/MickLesk) ([core#71](https://github.com/community-scripts/core/pull/71))
+  - Incus: make prompts visible for end-user [@MickLesk](https://github.com/MickLesk) ([core#73](https://github.com/community-scripts/core/pull/73))
+- incus: do not let an install script block on an invisible prompt [@MickLesk](https://github.com/MickLesk) ([core#71](https://github.com/community-scripts/core/pull/71))
 - tel: report progress from installs only, not updates [@MickLesk](https://github.com/MickLesk) ([core#72](https://github.com/community-scripts/core/pull/72))

 ## 2026-09-24
@@ -1178,139 +1216,4 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
  - #### 🔧 Refactor

    - Refactor: Calibre-Web database creation [@MickLesk](https://github.com/MickLesk) ([#16842](https://github.com/community-scripts/ProxmoxVE/pull/16842))
-    - mastodon: read .ruby-version dynamically instead of hardcoding 4.0.5 [@MickLesk](https://github.com/MickLesk) ([#16829](https://github.com/community-scripts/ProxmoxVE/pull/16829))
-
-## 2026-08-27
-
-### 🆕 New Scripts
-
-  - Seanime ([#16777](https://github.com/community-scripts/ProxmoxVE/pull/16777))
- Yopass ([#16778](https://github.com/community-scripts/ProxmoxVE/pull/16778))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - excalidash: Add a sed to switch to the correct DB Provider [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#16814](https://github.com/community-scripts/ProxmoxVE/pull/16814))
-    - fix(stirling-pdf): remove broken ExecStop using %n [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#16813](https://github.com/community-scripts/ProxmoxVE/pull/16813))
-
-### 🧰 Tools
-
-  - #### 🐞 Bug Fixes
-
-    - Fix: Incorporate the new update functions to prevent a empty grep on … [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#16809](https://github.com/community-scripts/ProxmoxVE/pull/16809))
-
-## 2026-08-26
-
-### 🆕 New Scripts
-
-  - CentOS ([#16772](https://github.com/community-scripts/ProxmoxVE/pull/16772))
- AlmaLinux ([#16771](https://github.com/community-scripts/ProxmoxVE/pull/16771))
- Fedora ([#16770](https://github.com/community-scripts/ProxmoxVE/pull/16770))
- Devuan ([#16773](https://github.com/community-scripts/ProxmoxVE/pull/16773))
- OpenEuler ([#16774](https://github.com/community-scripts/ProxmoxVE/pull/16774))
- Gentoo ([#16775](https://github.com/community-scripts/ProxmoxVE/pull/16775))
- openSUSE ([#16776](https://github.com/community-scripts/ProxmoxVE/pull/16776))
- Directus ([#16779](https://github.com/community-scripts/ProxmoxVE/pull/16779))
- HAProxy ([#16760](https://github.com/community-scripts/ProxmoxVE/pull/16760))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - [Fix]: LimeSurvey - enable Apache mod_rewrite [@jonathan8devs](https://github.com/jonathan8devs) ([#16767](https://github.com/community-scripts/ProxmoxVE/pull/16767))
-    - endurain: migrate legacy FRONTEND_DIR path on update [@MickLesk](https://github.com/MickLesk) ([#16794](https://github.com/community-scripts/ProxmoxVE/pull/16794))
-
-### 💾 Core
-
-  - #### 🐞 Bug Fixes
-
-    - tools.func: recognize bare XZ-compressed tarballs in fetch_and_deploy* [@MickLesk](https://github.com/MickLesk) ([#16796](https://github.com/community-scripts/ProxmoxVE/pull/16796))
-    - tools.func: fix mongodb version comparison, guard apt purge against removing dependents [@MickLesk](https://github.com/MickLesk) ([#16795](https://github.com/community-scripts/ProxmoxVE/pull/16795))
-
-### 📂 Github
-
-  - github: teach the PocketBase bot every field [@MickLesk](https://github.com/MickLesk) ([#16781](https://github.com/community-scripts/ProxmoxVE/pull/16781))
-
-## 2026-08-25
-
-### 🆕 New Scripts
-
-  - Budget-Board ([#16714](https://github.com/community-scripts/ProxmoxVE/pull/16714))
- Maintainerr ([#16716](https://github.com/community-scripts/ProxmoxVE/pull/16716))
- pyLoad ([#16717](https://github.com/community-scripts/ProxmoxVE/pull/16717))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - fix(apache-tika): handle upstream's switch from jar to zip distribution [@Munza2020](https://github.com/Munza2020) ([#16726](https://github.com/community-scripts/ProxmoxVE/pull/16726))
-    - Fix Firecrawl install: add ccache dependency for koffi native build [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#16746](https://github.com/community-scripts/ProxmoxVE/pull/16746))
-    - excalidash: Fix broken Update [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#16747](https://github.com/community-scripts/ProxmoxVE/pull/16747))
-
-  - #### 💥 Breaking Changes
-
-    - Migrate the (remaining) Top 25 scripts to the new core engine [@MickLesk](https://github.com/MickLesk) ([#16749](https://github.com/community-scripts/ProxmoxVE/pull/16749))
-
-## 2026-08-24
-
-### 🆕 New Scripts
-
-  - ArchLinux ([#16715](https://github.com/community-scripts/ProxmoxVE/pull/16715))
- AirTrail ([#16713](https://github.com/community-scripts/ProxmoxVE/pull/16713))
- RockyLinux ([#16718](https://github.com/community-scripts/ProxmoxVE/pull/16718))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - Add setup_mongodb back in Omada [@lucacome](https://github.com/lucacome) ([#16736](https://github.com/community-scripts/ProxmoxVE/pull/16736))
-    - fireshare: source fireshare.env during update [@MickLesk](https://github.com/MickLesk) ([#16706](https://github.com/community-scripts/ProxmoxVE/pull/16706))
-    - netbox: serve on plain HTTP too, port 80 forced HTTPS redirect broke reverse proxies [@MickLesk](https://github.com/MickLesk) ([#16707](https://github.com/community-scripts/ProxmoxVE/pull/16707))
-    - FileFlows: Fix Download URL [@MickLesk](https://github.com/MickLesk) ([#16708](https://github.com/community-scripts/ProxmoxVE/pull/16708))
-    - Gitea: fix git-over-SSH auth, group-writable home dir tripped sshd StrictModes [@MickLesk](https://github.com/MickLesk) ([#16710](https://github.com/community-scripts/ProxmoxVE/pull/16710))
-
-### 🧰 Tools
-
-  - #### 🐞 Bug Fixes
-
-    - post-pve/pbs-install: fix component_exists_in_sources matching substrings of hyphenated tokens [@MickLesk](https://github.com/MickLesk) ([#16709](https://github.com/community-scripts/ProxmoxVE/pull/16709))
-
-## 2026-08-23
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - Set default ProxmoxVE raw URL in PVE-UPS & fix var_cpu sorting  [@MickLesk](https://github.com/MickLesk) ([#16689](https://github.com/community-scripts/ProxmoxVE/pull/16689))
-
-## 2026-08-22
-
-### 🆕 New Scripts
-
-  - pve-ups ([#16670](https://github.com/community-scripts/ProxmoxVE/pull/16670))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - docuseal: use DocuSeal's patched PDFium build to fix service start [@MickLesk](https://github.com/MickLesk) ([#16673](https://github.com/community-scripts/ProxmoxVE/pull/16673))
-
-  - #### ✨ New Features
-
-    - update authentik to 2026.8.0 [@thieneret](https://github.com/thieneret) ([#16674](https://github.com/community-scripts/ProxmoxVE/pull/16674))
-
-## 2026-08-21
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - wallos: fix: migrations [@CrazyWolf13](https://github.com/CrazyWolf13) ([#16666](https://github.com/community-scripts/ProxmoxVE/pull/16666))
-    - barassistant: fix: compatibility with v6 [@CrazyWolf13](https://github.com/CrazyWolf13) ([#16665](https://github.com/community-scripts/ProxmoxVE/pull/16665))
-    - Immichframe: remove settings.yaml UUID placeholder [@MickLesk](https://github.com/MickLesk) ([#16660](https://github.com/community-scripts/ProxmoxVE/pull/16660))
-    - openziti-controller: redirect stdin from /dev/null to skip postinst's interactive bootstrap prompt [@MickLesk](https://github.com/MickLesk) ([#16650](https://github.com/community-scripts/ProxmoxVE/pull/16650))
-    - bookorbit: bump default RAM to prevent tsc OOM segfault during nest build [@MickLesk](https://github.com/MickLesk) ([#16649](https://github.com/community-scripts/ProxmoxVE/pull/16649))
-    - immich: split jpegli into its own build step, resolve library revisions dynamically [@MickLesk](https://github.com/MickLesk) ([#16656](https://github.com/community-scripts/ProxmoxVE/pull/16656))
-    - tdarr: make unzip non-interactive to prevent hang [@MickLesk](https://github.com/MickLesk) ([#16648](https://github.com/community-scripts/ProxmoxVE/pull/16648))
-    - immich: fix jpegli patch path after upstream base-images split jpegli from libjxl [@MickLesk](https://github.com/MickLesk) ([#16647](https://github.com/community-scripts/ProxmoxVE/pull/16647))
+    - mastodon: read .ruby-version dynamically instead of hardcoding 4.0.5 [@MickLesk](https://github.com/MickLesk) ([#16829](https://github.com/community-scripts/ProxmoxVE/pull/16829))
@@ -13,7 +13,7 @@ var_cpu="${var_cpu:-2}"
 var_ram="${var_ram:-1024}"
 var_disk="${var_disk:-8}"
 var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
+var_version="${var_version:-12}"
 var_arm64="${var_arm64:-yes}"
 var_unprivileged="${var_unprivileged:-1}"

@@ -31,61 +31,24 @@ function update_script() {
    exit
  fi

-  NODE_VERSION="22" setup_nodejs
-  setup_uv
+  NODE_VERSION="22" NODE_MODULE="@postlight/parser@latest,single-file-cli@latest" setup_nodejs
+  PYTHON_VERSION="3.13" setup_uv

-  ensure_dependencies chromium ripgrep tesseract-ocr tesseract-ocr-eng imagemagick ffmpeg unzip wget
+  ensure_dependencies chromium

  msg_info "Stopping Service"
  systemctl stop archivebox
  msg_ok "Stopped Service"

-  # Earlier installs used python3.11, which caps ArchiveBox at 0.7.4.
-  if [[ ! -x /opt/archivebox/venv/bin/archivebox ]]; then
-    msg_info "Moving ArchiveBox to its own Python 3.13 environment"
-    # The distro interpreter first: a uv-managed one lands where the service user cannot exec it.
-    local py="/usr/bin/python3.13"
-    if [[ ! -x "$py" ]]; then
-      ensure_dependencies python3.13 || true
-    fi
-    if [[ ! -x "$py" ]]; then
-      $STD uv python install --install-dir /opt/archivebox/python 3.13
-      py="$(UV_PYTHON_INSTALL_DIR=/opt/archivebox/python uv python find 3.13)"
-    fi
-    $STD uv venv --python "$py" /opt/archivebox/venv
-    # Keep whatever port this container already answers on, or a reverse proxy in front
-    # of it would silently stop resolving.
-    local port
-    port="$(awk -F: '/^ExecStart=/ {print $NF}' /etc/systemd/system/archivebox.service 2>/dev/null)"
-    [[ "$port" =~ ^[0-9]+$ ]] || port=5797
-    cat <<EOF >/etc/systemd/system/archivebox.service
-[Unit]
-Description=ArchiveBox Server
-After=network.target
-
-[Service]
-User=archivebox
-WorkingDirectory=/opt/archivebox/data
-ExecStart=/opt/archivebox/venv/bin/archivebox server 0.0.0.0:${port}
-Restart=always
-
-[Install]
-WantedBy=multi-user.target
-EOF
-    systemctl daemon-reload
-    msg_ok "Moved ArchiveBox to its own Python 3.13 environment (port ${port})"
-  fi
+  msg_info "Upgrading Playwright"
+  $STD uv pip install playwright --system --break-system-packages
+  $STD playwright install-deps chromium
+  msg_ok "Upgraded Playwright"

  msg_info "Updating ArchiveBox"
-  $STD uv pip install --python /opt/archivebox/venv/bin/python --upgrade archivebox
-  chown -R archivebox:archivebox /opt/archivebox
-  # Without this a shell still reaches the old 0.7.4 entry point against a 0.9 collection.
-  ln -sf /opt/archivebox/venv/bin/archivebox /usr/local/bin/archivebox
  cd /opt/archivebox/data
-  $STD sudo -u archivebox /opt/archivebox/venv/bin/archivebox init
-  # npm refuses the git dependency behind @postlight/parser, so treat extractors as optional.
-  $STD sudo -u archivebox /opt/archivebox/venv/bin/archivebox install ||
-    msg_warn "Some extractors stayed unavailable - ArchiveBox runs without them"
+  $STD uv pip install --system --break-system-packages --upgrade --no-reinstall archivebox
+  sudo -u archivebox archivebox init
  msg_ok "Updated ArchiveBox"

  msg_info "Starting Service"
@@ -102,4 +65,4 @@ description
 msg_ok "Completed successfully!\n"
 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
 echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}:5797/admin/${CL}"
+echo -e "${GATEWAY}${BGN}http://${IP}:8000/admin/login${CL}"
@@ -41,6 +41,7 @@ function update_script() {

    AUDIOMUSE_BACKEND="$(cat /opt/audiomuse-ai_data/.backend 2>/dev/null || echo cpu)"
    REQ_COMMON="common.txt"
+    PY_VERSION="3.12"
    case "$AUDIOMUSE_BACKEND" in
    gpu)
      REQ_ACCEL="gpu.txt"
@@ -49,6 +50,7 @@ function update_script() {
    cpu-noavx2)
      REQ_COMMON="common-noavx2.txt"
      REQ_ACCEL="cpu-noavx2.txt"
+      PY_VERSION="3.11"
      ;;
    *)
      REQ_ACCEL="cpu.txt"
@@ -57,7 +59,7 @@ function update_script() {

    msg_info "Updating Python Environment (${AUDIOMUSE_BACKEND})"
    cd /opt/audiomuse-ai
-    $STD uv venv --seed --python 3.12 /opt/audiomuse-ai/.venv
+    $STD uv venv --seed --python "$PY_VERSION" /opt/audiomuse-ai/.venv
    $STD uv pip install --python /opt/audiomuse-ai/.venv \
      -r "/opt/audiomuse-ai/requirements/${REQ_COMMON}" \
      -r "/opt/audiomuse-ai/requirements/${REQ_ACCEL}"
@@ -0,0 +1,6 @@
+    ____             __  ___________
+   / __ \__  _______/ /_/ ____/ ___/
+  / /_/ / / / / ___/ __/ /_   \__ \ 
+ / _, _/ /_/ (__  ) /_/ __/  ___/ / 
+/_/ |_|\__,_/____/\__/_/    /____/  
+                                    
@@ -49,9 +49,14 @@ function update_script() {
    msg_ok "Built Ignis"

    msg_info "Checking Obsidian Web Assets"
-    OBSIDIAN_VERSION=$(grep -oP 'OBSIDIAN_VERSION=\K[0-9.]+' /opt/ignis/apps/ignis-server/Dockerfile | head -n1)
-    [[ -z "$OBSIDIAN_VERSION" ]] && OBSIDIAN_VERSION="$(cat /opt/ignis_data/obsidian.version 2>/dev/null)"
-    if [[ -n "$OBSIDIAN_VERSION" && "$OBSIDIAN_VERSION" != "$(cat /opt/ignis_data/obsidian.version 2>/dev/null)" ]]; then
+    # From the release tag (0.8.13+obsidian.1.13.7): upstream renamed the Dockerfile variable.
+    OBSIDIAN_VERSION=""
+    [[ "${IGNIS_BUILD:-}" == *obsidian.* ]] && OBSIDIAN_VERSION="${IGNIS_BUILD##*obsidian.}"
+    if [[ ! "$OBSIDIAN_VERSION" =~ ^[0-9]+(\.[0-9]+)+$ ]]; then
+      OBSIDIAN_VERSION="$(grep -ohP '(OBSIDIAN_VERSION|IGNIS_OBSIDIAN_PIN)=\K[0-9.]+' /opt/ignis/apps/ignis-server/Dockerfile 2>/dev/null | head -n1 || true)"
+    fi
+    [[ "$OBSIDIAN_VERSION" =~ ^[0-9]+(\.[0-9]+)+$ ]] || msg_warn "Could not determine the paired Obsidian version - keeping the installed assets"
+    if [[ "$OBSIDIAN_VERSION" =~ ^[0-9]+(\.[0-9]+)+$ && "$OBSIDIAN_VERSION" != "$(cat /opt/ignis_data/obsidian.version 2>/dev/null)" ]]; then
      rm -rf /opt/ignis_data/obsidian-app
      mkdir -p /opt/ignis_data/obsidian-app
      curl -fsSL -o /tmp/obsidian.asar.gz "https://github.com/obsidianmd/obsidian-releases/releases/download/v${OBSIDIAN_VERSION}/obsidian-${OBSIDIAN_VERSION}.asar.gz"
@@ -36,7 +36,7 @@ function update_script() {

  msg_warn "⚠️  ${APP} has been migrated to an addon script."
  echo ""
-  msg_info "This is a one-time migration. After this, you can update ${APP} anytime with:"
+  msg_custom "ℹ️" "${YW}" "This is a one-time migration. After this, you can update ${APP} anytime with:"
  echo -e "${TAB}${TAB}${GN}update_komodo${CL}  or  ${GN}bash <(curl -fsSL ${ADDON_SCRIPT})${CL}"
  echo ""
  read -r -p "${TAB}Migrate update function now? [y/N]: " CONFIRM
@@ -46,6 +46,9 @@ function update_script() {
    msg_info "Building Application"
    cd /opt/lobehub
    export NODE_OPTIONS="--max-old-space-size=8192"
+    if grep -qE '"@lobehub/ui": "\^5\.4[0-9]\.' package.json; then
+      sed -i "/^overrides:/a\  '@lobehub/ui': ~5.49.1" pnpm-workspace.yaml
+    fi
    $STD pnpm install
    $STD pnpm run build:docker
    unset NODE_OPTIONS
@@ -118,10 +118,18 @@ EOF
      $STD "$CERTBOT_PYTHON" -m ensurepip --upgrade
    fi
    $STD "$CERTBOT_PYTHON" -m pip install --upgrade pip setuptools wheel
+    find /opt/certbot/lib/python3*/site-packages -maxdepth 1 -name '*.dist-info' -type d ! -exec test -e '{}/RECORD' ';' -exec rm -rf '{}' + 2>/dev/null || true
    $STD "$CERTBOT_PYTHON" -m pip install --upgrade certbot certbot-dns-cloudflare
    msg_ok "Updated Certbot"
  fi

+  if [[ -f /etc/nginx/conf.d/production.conf.template && ! -f /etc/nginx/conf.d/production.conf ]]; then
+    msg_info "Restoring Admin Interface"
+    sed 's/{{NPM_ADMIN_PORT}}/81/g' /etc/nginx/conf.d/production.conf.template >/etc/nginx/conf.d/production.conf
+    systemctl restart openresty
+    msg_ok "Restored Admin Interface"
+  fi
+
  if check_for_gh_release "nginxproxymanager" "NginxProxyManager/nginx-proxy-manager"; then
    msg_info "Stopping Services"
    systemctl stop openresty
@@ -159,6 +167,10 @@ EOF
    cp /opt/nginxproxymanager/docker/rootfs/etc/logrotate.d/nginx-proxy-manager /etc/logrotate.d/nginx-proxy-manager
    ln -sf /etc/nginx/nginx.conf /etc/nginx/conf/nginx.conf
    rm -f /etc/nginx/conf.d/dev.conf
+    if [[ -f /etc/nginx/conf.d/production.conf.template ]]; then
+      ADMIN_PORT=$(grep -oP '^\s*listen\s+\K[0-9]+(?=\s+default)' /etc/nginx/conf.d/production.conf 2>/dev/null | head -n1 || true)
+      sed "s/{{NPM_ADMIN_PORT}}/${ADMIN_PORT:-81}/g" /etc/nginx/conf.d/production.conf.template >/etc/nginx/conf.d/production.conf
+    fi

    mkdir -p /tmp/nginx/body \
      /run/nginx \
@@ -40,9 +40,25 @@ function update_script() {

  NODE_VERSION="24" setup_nodejs

+  # RomM 5.3.0 replaced rq-scheduler with `rq cron` and moved scans to their own queue
+  if grep -q rqscheduler /etc/systemd/system/romm-scheduler.service 2>/dev/null; then
+    msg_info "Migrating RQ services"
+    sed -i -e '/RQ_REDIS_/d' \
+      -e 's|^ExecStart=.*|ExecStart=/opt/romm/.venv/bin/rq cron --path /opt/romm/backend --url redis://127.0.0.1:6379/0 tasks.cron_config|' \
+      /etc/systemd/system/romm-scheduler.service
+    sed -i 's|bin/rq worker --path|bin/rq worker --with-scheduler --path|' /etc/systemd/system/romm-worker.service
+    sed -e 's|^Description=.*|Description=RomM RQ Scan Worker|' \
+      -e 's|^ExecStart=.*|ExecStart=/opt/romm/.venv/bin/rq worker --with-scheduler --path /opt/romm/backend --url redis://127.0.0.1:6379/0 scans|' \
+      /etc/systemd/system/romm-worker.service >/etc/systemd/system/romm-scan-worker.service
+    systemctl daemon-reload
+    systemctl enable -q --now romm-scan-worker
+    systemctl restart romm-worker romm-scheduler
+    msg_ok "Migrated RQ services"
+  fi
+
  if check_for_gh_release "romm" "rommapp/romm"; then
    msg_info "Stopping Services"
-    systemctl stop romm-backend romm-worker romm-scheduler romm-watcher
+    systemctl stop romm-backend romm-worker romm-scan-worker romm-scheduler romm-watcher
    msg_ok "Stopped Services"

    create_backup /opt/romm/.env
@@ -231,14 +247,14 @@ DROPEOF
    fi

    msg_info "Starting Services"
-    systemctl start romm-backend romm-worker romm-scheduler romm-watcher
+    systemctl start romm-backend romm-worker romm-scan-worker romm-scheduler romm-watcher
    msg_ok "Started Services"
    msg_ok "Updated successfully"
  fi

  if check_for_gh_release "EmulatorJS" "EmulatorJS/EmulatorJS" "v4.2.3"; then
    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "EmulatorJS" "EmulatorJS/EmulatorJS" "prebuild" "v4.2.3" "/opt/romm/frontend/dist/assets/emulatorjs" "4.2.3.7z"
-    systemctl restart romm-backend romm-worker romm-scheduler romm-watcher
+    systemctl restart romm-backend romm-worker romm-scan-worker romm-scheduler romm-watcher
    msg_ok "Updated EmulatorJS successfully"
  fi
  exit
@@ -0,0 +1,59 @@
+#!/usr/bin/env bash
+_CS_DEFAULT_URL="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main"
+_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
+source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/rustfs/rustfs
+
+APP="RustFS"
+var_tags="${var_tags:-storage;s3}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-2048}"
+var_disk="${var_disk:-20}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_arm64="${var_arm64:-yes}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -f /etc/default/rustfs ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  if check_for_gh_release "rustfs" "rustfs/rustfs"; then
+    msg_info "Stopping Service"
+    systemctl stop rustfs
+    msg_ok "Stopped Service"
+
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "rustfs" "rustfs/rustfs" "prebuild" "latest" "/opt/rustfs" "rustfs-linux-$(arch_resolve x86_64 aarch64)-gnu-*.zip"
+    chmod +x /opt/rustfs/rustfs
+
+    msg_info "Starting Service"
+    systemctl start rustfs
+    msg_ok "Started Service"
+    msg_ok "Updated successfully!"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW}Console:${CL}"
+echo -e "${GATEWAY}${BGN}http://${IP}:9001${CL}"
+echo -e "${INFO}${YW}S3 API on port 9000 - keys are in /etc/default/rustfs${CL}"
@@ -39,6 +39,7 @@ function update_script() {
  create_backup /home/steam/.config/Epic/FactoryGame/Saved

  msg_info "Updating Satisfactory"
+  $STD runuser -u steam -- /opt/steamcmd/steamcmd.sh +login anonymous +quit || true
  if $STD runuser -u steam -- /opt/steamcmd/steamcmd.sh \
    +force_install_dir /opt/satisfactory/server \
    +login anonymous \
@@ -32,42 +32,68 @@ function update_script() {
    exit
  fi

-  if check_for_gh_release "semaphore" "semaphoreui/semaphore"; then
-    if [[ -f /opt/semaphore/semaphore_db.bolt ]]; then
-      msg_warn "WARNING: Due to bugs with BoltDB database, update script will move your application"
-      msg_warn "to use SQLite database instead. Make sure you have a backup of your data!"
-      echo ""
-      read -r -p "${TAB3}Do you want to continue? (y/N): " CONFIRM
-      if [[ ! "$CONFIRM" =~ ^[Yy]$ ]]; then
-        exit 0
-      else
-        msg_info "Moving from BoltDB to SQLite"
-        sed -i \
-          -e 's|"bolt": {|"sqlite": {|' \
-          -e 's|/semaphore_db.bolt"|/database.sqlite"|' \
-          -e '/semaphore_db.bolt/d' \
-          -e '/"dialect"/d' \
-          -e '/^  },$/a\  "dialect": "sqlite",' \
-          /opt/semaphore/config.json
-        msg_ok "Moved from BoltDB to SQLite"
-      fi
+  # Outside the release check on purpose: a container left behind by the old
+  # order already carries the newest version, so the check would skip it.
+  local migrated=0
+  if [[ -f /opt/semaphore/semaphore_db.bolt ]]; then
+    msg_warn "WARNING: Due to bugs with BoltDB database, update script will move your application"
+    msg_warn "to use SQLite database instead. Make sure you have a backup of your data!"
+    echo ""
+    read -r -p "${TAB3}Do you want to continue? (y/N): " CONFIRM
+    if [[ ! "$CONFIRM" =~ ^[Yy]$ ]]; then
+      exit 0
    fi

    msg_info "Stopping Service"
    systemctl stop semaphore
    msg_ok "Stopped Service"

-    fetch_and_deploy_gh_release "semaphore" "semaphoreui/semaphore" "binary" "latest" "/opt/semaphore" "semaphore_*_linux_$(arch_resolve).deb"
+    msg_info "Moving from BoltDB to SQLite"
+    sed -i \
+      -e 's|"bolt": {|"sqlite": {|' \
+      -e 's|/semaphore_db.bolt"|/database.sqlite"|' \
+      -e '/semaphore_db.bolt/d' \
+      -e '/"dialect"/d' \
+      -e '/^  },$/a\  "dialect": "sqlite",' \
+      /opt/semaphore/config.json
+    msg_ok "Moved from BoltDB to SQLite"

-    if [[ -f /opt/semaphore/semaphore_db.bolt ]]; then
-      $STD semaphore migrate --from-boltdb /opt/semaphore/semaphore_db.bolt --config /opt/semaphore/config.json
-      rm -f /opt/semaphore/semaphore_db.bolt
+    # 2.19 dropped BoltDB along with the migration flag, so this has to run on
+    # the last release that still has it.
+    fetch_and_deploy_gh_release "semaphore" "semaphoreui/semaphore" "binary" "v2.18.30" "/opt/semaphore" "semaphore_*_linux_$(arch_resolve).deb"
+
+    msg_info "Migrating BoltDB to SQLite"
+    if [[ -f /opt/semaphore/database.sqlite ]]; then
+      mkdir -p /opt/semaphore/sqlite.bak
+      mv /opt/semaphore/database.sqlite* /opt/semaphore/sqlite.bak/
    fi
+    sed '/"dialect": "sqlite",/a\  "apps": {"ansible": {}, "terraform": {}, "tofu": {}, "terragrunt": {}, "bash": {}, "powershell": {}, "python": {}, "pulumi": {}},' \
+      /opt/semaphore/config.json >/opt/semaphore/migrate.json
+    if ! $STD semaphore migrate --from-boltdb /opt/semaphore/semaphore_db.bolt --config /opt/semaphore/migrate.json; then
+      msg_error "Migration failed - semaphore_db.bolt was kept, run the update again to retry"
+      exit 1
+    fi
+    rm -f /opt/semaphore/migrate.json
+    mv /opt/semaphore/semaphore_db.bolt /opt/semaphore/semaphore_db.bolt.bak
+    msg_ok "Migrated BoltDB to SQLite"
+    migrated=1
+  fi
+
+  if check_for_gh_release "semaphore" "semaphoreui/semaphore"; then
+    msg_info "Stopping Service"
+    systemctl stop semaphore
+    msg_ok "Stopped Service"
+
+    fetch_and_deploy_gh_release "semaphore" "semaphoreui/semaphore" "binary" "latest" "/opt/semaphore" "semaphore_*_linux_$(arch_resolve).deb"

    msg_info "Starting Service"
    systemctl start semaphore
    msg_ok "Started Service"
    msg_ok "Updated successfully!"
+  elif ((migrated)); then
+    msg_info "Starting Service"
+    systemctl start semaphore
+    msg_ok "Started Service"
  fi
  exit
 }
@@ -30,7 +30,7 @@ function update_script() {
    msg_error "No ${APP} Installation Found!"
    exit
  fi
-  if check_for_gh_release "Trilium" "TriliumNext/Trilium"; then
+  if check_for_gh_release "Trilium" "TriliumNext/Trilium" "" "" "v"; then
    if [[ -d /opt/trilium/db ]]; then
      DB_PATH="/opt/trilium/db"
      DB_RESTORE_PATH="/opt/trilium/db"
@@ -53,7 +53,7 @@ function update_script() {
    rm -rf /opt/trilium
    msg_ok "Backed up Database"

-    fetch_and_deploy_gh_release "Trilium" "TriliumNext/Trilium" "prebuild" "latest" "/opt/trilium" "TriliumNotes-Server-*linux-$(arch_resolve "x64" "arm64").tar.xz"
+    fetch_and_deploy_gh_release "Trilium" "TriliumNext/Trilium" "prebuild" "latest" "/opt/trilium" "TriliumNotes-Server-*linux-$(arch_resolve "x64" "arm64").tar.xz" "v"

    msg_info "Restoring Database"
    mkdir -p "$(dirname "${DB_RESTORE_PATH}")"
@@ -14,56 +14,62 @@ network_check
 update_os

 msg_info "Installing Dependencies"
-# ArchiveBox resolves these through its env provider, so it never has to reach for apt itself.
 $STD apt-get install -y \
  git \
+  expect \
+  libssl-dev \
+  libldap2-dev \
+  libsasl2-dev \
  procps \
  dnsutils \
-  chromium \
  ripgrep \
-  tesseract-ocr \
-  tesseract-ocr-eng \
-  imagemagick \
-  ffmpeg \
-  unzip \
-  wget \
-  python3.13
+  chromium
 msg_ok "Installed Dependencies"

-# No NODE_MODULE: 0.9 pulls single-file and readability itself, and postlight-parser is gone.
-NODE_VERSION="22" setup_nodejs
-setup_uv
+msg_info "Installing Python Dependencies"
+$STD apt-get install -y \
+  python3-ldap \
+  python3-msgpack \
+  python3-regex
+msg_ok "Installed Python Dependencies"
+
+NODE_VERSION="22" NODE_MODULE="@postlight/parser@latest,single-file-cli@latest" setup_nodejs
+PYTHON_VERSION="3.13" setup_uv
+
+msg_info "Installing Playwright"
+$STD uv pip install playwright --system --break-system-packages
+$STD playwright install-deps chromium
+msg_ok "Installed Playwright"

 msg_info "Installing ArchiveBox"
-mkdir -p /opt/archivebox/data
+mkdir -p /opt/archivebox/{data,.npm,.cache,.local}
 $STD adduser --system --shell /bin/bash --gecos 'Archive Box User' --group --disabled-password --home /home/archivebox archivebox
-# The distro interpreter: a uv-managed one lands where the service user cannot execute it.
-$STD uv venv --python /usr/bin/python3.13 /opt/archivebox/venv
-$STD uv pip install --python /opt/archivebox/venv/bin/python archivebox
-ln -sf /opt/archivebox/venv/bin/archivebox /usr/local/bin/archivebox
-chown -R archivebox:archivebox /opt/archivebox
-msg_ok "Installed ArchiveBox"
-
-msg_info "Initializing ArchiveBox"
+chown -R archivebox:archivebox /opt/archivebox/{data,.npm,.cache,.local}
+chmod -R 755 /opt/archivebox/data
+$STD uv pip install archivebox --system --break-system-packages
 cd /opt/archivebox/data
-$STD sudo -u archivebox /opt/archivebox/venv/bin/archivebox init
-$STD sudo -u archivebox env \
-  DJANGO_SUPERUSER_USERNAME=archivebox \
-  DJANGO_SUPERUSER_EMAIL=archivebox@archivebox.local \
-  DJANGO_SUPERUSER_PASSWORD=community-scripts.org \
-  /opt/archivebox/venv/bin/archivebox manage createsuperuser --noinput
-# Without a pinned canonical URL the admin greets every visitor with a red banner.
-$STD sudo -u archivebox /opt/archivebox/venv/bin/archivebox config --set "BASE_URL=http://$(get_ip):5797"
-msg_ok "Initialized ArchiveBox"
+expect <<EOF
+set timeout -1
+log_user 0

-msg_info "Installing Extractors"
-# One unreachable extractor must not sink the install: @postlight/parser pulls a git
-# dependency that npm refuses, and readability covers the same job.
-if $STD sudo -u archivebox /opt/archivebox/venv/bin/archivebox install; then
-  msg_ok "Installed Extractors"
-else
-  msg_warn "Some extractors stayed unavailable - ArchiveBox runs without them"
-fi
+spawn sudo -u archivebox playwright install chromium
+spawn sudo -u archivebox archivebox setup
+
+expect "Username"
+send "\r"
+
+expect "Email address"
+send "\r"
+
+expect "Password"
+send "community-scripts.org\r"
+
+expect "Password (again)"
+send "community-scripts.org\r"
+
+expect eof
+EOF
+msg_ok "Installed ArchiveBox"

 msg_info "Creating Service"
 cat <<EOF >/etc/systemd/system/archivebox.service
@@ -74,7 +80,7 @@ After=network.target
 [Service]
 User=archivebox
 WorkingDirectory=/opt/archivebox/data
-ExecStart=/opt/archivebox/venv/bin/archivebox server 0.0.0.0:5797
+ExecStart=/usr/local/bin/archivebox server 0.0.0.0:8000
 Restart=always

 [Install]
@@ -42,6 +42,7 @@ if [[ "$var_backend" == "auto" ]]; then
 fi

 REQ_COMMON="common.txt"
+PY_VERSION="3.12"
 case "$var_backend" in
 gpu)
  REQ_ACCEL="gpu.txt"
@@ -53,6 +54,7 @@ cpu)
 cpu-noavx2)
  REQ_COMMON="common-noavx2.txt"
  REQ_ACCEL="cpu-noavx2.txt"
+  PY_VERSION="3.11"
  ;;
 *)
  msg_error "Unknown var_backend '${var_backend}' (expected auto, gpu, cpu or cpu-noavx2)"
@@ -62,7 +64,7 @@ esac

 msg_info "Setting up Python Environment (${var_backend}, Patience)"
 cd /opt/audiomuse-ai
-$STD uv venv --seed --python 3.12 /opt/audiomuse-ai/.venv
+$STD uv venv --seed --python "$PY_VERSION" /opt/audiomuse-ai/.venv
 $STD uv pip install --python /opt/audiomuse-ai/.venv \
  -r "/opt/audiomuse-ai/requirements/${REQ_COMMON}" \
  -r "/opt/audiomuse-ai/requirements/${REQ_ACCEL}"
@@ -32,8 +32,16 @@ msg_ok "Built Ignis"

 msg_info "Downloading Obsidian Web Assets"
 mkdir -p /opt/ignis_data/{obsidian-app,vaults,data}
-OBSIDIAN_VERSION=$(grep -oP 'OBSIDIAN_VERSION=\K[0-9.]+' /opt/ignis/apps/ignis-server/Dockerfile | head -n1)
-[[ -z "$OBSIDIAN_VERSION" ]] && OBSIDIAN_VERSION="1.12.7"
+# From the release tag (0.8.13+obsidian.1.13.7): upstream renamed the Dockerfile variable.
+OBSIDIAN_VERSION=""
+[[ "${IGNIS_BUILD:-}" == *obsidian.* ]] && OBSIDIAN_VERSION="${IGNIS_BUILD##*obsidian.}"
+if [[ ! "$OBSIDIAN_VERSION" =~ ^[0-9]+(\.[0-9]+)+$ ]]; then
+  OBSIDIAN_VERSION="$(grep -ohP '(OBSIDIAN_VERSION|IGNIS_OBSIDIAN_PIN)=\K[0-9.]+' /opt/ignis/apps/ignis-server/Dockerfile 2>/dev/null | head -n1 || true)"
+fi
+if [[ ! "$OBSIDIAN_VERSION" =~ ^[0-9]+(\.[0-9]+)+$ ]]; then
+  msg_error "Could not determine which Obsidian version this Ignis build pairs with"
+  exit 1
+fi
 curl -fsSL -o /tmp/obsidian.asar.gz "https://github.com/obsidianmd/obsidian-releases/releases/download/v${OBSIDIAN_VERSION}/obsidian-${OBSIDIAN_VERSION}.asar.gz"
 gunzip -f /tmp/obsidian.asar.gz
 $STD asar extract /tmp/obsidian.asar /opt/ignis_data/obsidian-app
@@ -41,6 +41,9 @@ export DATABASE_DRIVER="node"
 export KEY_VAULTS_SECRET="$(openssl rand -base64 32)"
 export AUTH_SECRET="$(openssl rand -base64 32)"
 export APP_URL="http://localhost:3210"
+if grep -qE '"@lobehub/ui": "\^5\.4[0-9]\.' package.json; then
+  sed -i "/^overrides:/a\  '@lobehub/ui': ~5.49.1" pnpm-workspace.yaml
+fi
 $STD pnpm install
 $STD pnpm run build:docker
 msg_ok "Built Application"
@@ -80,7 +80,7 @@ $STD mkdir -p /opt/manyfold_data
 msg_ok "Configured Manyfold"

 msg_info "Installing Manyfold"
-chown -R manyfold:manyfold {/home/manyfold,/opt/manyfold}
+chown -R manyfold:manyfold {/home/manyfold,/opt/manyfold,/opt/manyfold_data}
 chmod +x /opt/manyfold/user_setup.sh

 $STD sudo -u manyfold bash /opt/manyfold/user_setup.sh
@@ -96,6 +96,9 @@ cp /opt/nginxproxymanager/docker/rootfs/etc/letsencrypt.ini /etc/letsencrypt.ini
 cp /opt/nginxproxymanager/docker/rootfs/etc/logrotate.d/nginx-proxy-manager /etc/logrotate.d/nginx-proxy-manager
 ln -sf /etc/nginx/nginx.conf /etc/nginx/conf/nginx.conf
 rm -f /etc/nginx/conf.d/dev.conf
+if [[ -f /etc/nginx/conf.d/production.conf.template ]]; then
+  sed 's/{{NPM_ADMIN_PORT}}/81/g' /etc/nginx/conf.d/production.conf.template >/etc/nginx/conf.d/production.conf
+fi

 mkdir -p /tmp/nginx/body \
  /run/nginx \
@@ -381,7 +381,26 @@ Type=simple
 WorkingDirectory=/opt/romm/backend
 EnvironmentFile=/opt/romm/.env
 Environment="PYTHONPATH=/opt/romm/backend"
-ExecStart=/opt/romm/.venv/bin/rq worker --path /opt/romm/backend --url redis://127.0.0.1:6379/0 high default low
+ExecStart=/opt/romm/.venv/bin/rq worker --with-scheduler --path /opt/romm/backend --url redis://127.0.0.1:6379/0 high default low
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+EOF
+
+cat <<EOF >/etc/systemd/system/romm-scan-worker.service
+[Unit]
+Description=RomM RQ Scan Worker
+After=network.target mariadb.service redis-server.service romm-backend.service
+Requires=mariadb.service redis-server.service
+
+[Service]
+Type=simple
+WorkingDirectory=/opt/romm/backend
+EnvironmentFile=/opt/romm/.env
+Environment="PYTHONPATH=/opt/romm/backend"
+ExecStart=/opt/romm/.venv/bin/rq worker --with-scheduler --path /opt/romm/backend --url redis://127.0.0.1:6379/0 scans
 Restart=on-failure
 RestartSec=5

@@ -400,9 +419,7 @@ Type=simple
 WorkingDirectory=/opt/romm/backend
 EnvironmentFile=/opt/romm/.env
 Environment="PYTHONPATH=/opt/romm/backend"
-Environment="RQ_REDIS_HOST=127.0.0.1"
-Environment="RQ_REDIS_PORT=6379"
-ExecStart=/opt/romm/.venv/bin/rqscheduler --path /opt/romm/backend
+ExecStart=/opt/romm/.venv/bin/rq cron --path /opt/romm/backend --url redis://127.0.0.1:6379/0 tasks.cron_config
 Restart=on-failure
 RestartSec=5

@@ -429,7 +446,7 @@ RestartSec=5
 WantedBy=multi-user.target
 EOF

-systemctl enable -q --now romm-backend romm-worker romm-scheduler romm-watcher
+systemctl enable -q --now romm-backend romm-worker romm-scan-worker romm-scheduler romm-watcher
 msg_ok "Created Services"

 motd_ssh
@@ -0,0 +1,61 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/rustfs/rustfs
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+mkdir -p /opt/rustfs_data/{data,logs}
+fetch_and_deploy_gh_release "rustfs" "rustfs/rustfs" "prebuild" "latest" "/opt/rustfs" "rustfs-linux-$(arch_resolve x86_64 aarch64)-gnu-*.zip"
+chmod +x /opt/rustfs/rustfs
+
+msg_info "Configuring RustFS"
+RUSTFS_ACCESS_KEY=$(openssl rand -hex 8)
+RUSTFS_SECRET_KEY=$(openssl rand -base64 24 | tr -dc 'a-zA-Z0-9' | head -c 32)
+cat <<EOF >/etc/default/rustfs
+RUSTFS_ACCESS_KEY=${RUSTFS_ACCESS_KEY}
+RUSTFS_SECRET_KEY=${RUSTFS_SECRET_KEY}
+RUSTFS_VOLUMES=/opt/rustfs_data/data
+RUSTFS_ADDRESS=:9000
+RUSTFS_CONSOLE_ADDRESS=:9001
+RUSTFS_CONSOLE_ENABLE=true
+RUSTFS_OBS_LOGGER_LEVEL=error
+RUSTFS_OBS_LOG_DIRECTORY=/opt/rustfs_data/logs/
+EOF
+chmod 600 /etc/default/rustfs
+msg_ok "Configured RustFS"
+
+msg_info "Creating Service"
+cat <<EOF >/etc/systemd/system/rustfs.service
+[Unit]
+Description=RustFS Object Storage
+Wants=network-online.target
+After=network-online.target
+
+[Service]
+Type=simple
+User=root
+WorkingDirectory=/opt/rustfs_data
+EnvironmentFile=/etc/default/rustfs
+ExecStart=/opt/rustfs/rustfs
+Restart=on-failure
+RestartSec=5
+LimitNOFILE=65536
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now rustfs
+msg_ok "Created Service"
+
+motd_ssh
+customize
+cleanup_lxc
@@ -35,6 +35,7 @@ fetch_and_deploy_from_url \
 chown -R steam:steam /opt/steamcmd

 msg_info "Installing Satisfactory Dedicated Server"
+$STD runuser -u steam -- /opt/steamcmd/steamcmd.sh +login anonymous +quit || true
 $STD runuser -u steam -- /opt/steamcmd/steamcmd.sh \
  +force_install_dir /opt/satisfactory/server \
  +login anonymous \
@@ -13,7 +13,7 @@ setting_up_container
 network_check
 update_os

-fetch_and_deploy_gh_release "Trilium" "TriliumNext/Trilium" "prebuild" "latest" "/opt/trilium" "TriliumNotes-Server-*linux-$(arch_resolve "x64" "arm64").tar.xz"
+fetch_and_deploy_gh_release "Trilium" "TriliumNext/Trilium" "prebuild" "latest" "/opt/trilium" "TriliumNotes-Server-*linux-$(arch_resolve "x64" "arm64").tar.xz" "v"

 msg_info "Creating Service"
 cat <<EOF >/etc/systemd/system/trilium.service
@@ -199,6 +199,7 @@ function install() {
  sed -i "s/^KOMODO_INIT_ADMIN_PASSWORD=changeme/KOMODO_INIT_ADMIN_PASSWORD=${ADMIN_PASSWORD}/" "$COMPOSE_ENV"
  sed -i "s/^KOMODO_WEBHOOK_SECRET=.*/KOMODO_WEBHOOK_SECRET=${WEBHOOK_SECRET}/" "$COMPOSE_ENV"
  sed -i "s/^KOMODO_JWT_SECRET=.*/KOMODO_JWT_SECRET=${JWT_SECRET}/" "$COMPOSE_ENV"
+  sed -i "s|^KOMODO_HOST=.*|KOMODO_HOST=http://${LOCAL_IP}:${DEFAULT_PORT}|" "$COMPOSE_ENV"
  msg_ok "Configured environment"

  msg_info "Starting ${APP}"
@@ -214,14 +215,23 @@ function install() {
  } >>~/komodo.creds

  echo ""
-  msg_ok "${APP} is reachable at: ${BL}http://${LOCAL_IP}:${DEFAULT_PORT}${CL}"
+  msg_info "Waiting for ${APP} to answer"
+  for _ in $(seq 1 60); do
+    curl -fsS --max-time 3 "http://127.0.0.1:${DEFAULT_PORT}" >/dev/null 2>&1 && break
+    sleep 3
+  done
+  if curl -fsS --max-time 3 "http://127.0.0.1:${DEFAULT_PORT}" >/dev/null 2>&1; then
+    msg_ok "${APP} is reachable at: ${BL}http://${LOCAL_IP}:${DEFAULT_PORT}${CL}"
+  else
+    msg_error "${APP} did not come up - check: docker logs komodo-core-1"
+  fi
  echo ""
  echo -e "  Komodo Credentials"
  echo -e "  =================="
  echo -e "  User    : admin"
  echo -e "  Password: ${ADMIN_PASSWORD}"
  echo ""
-  msg_info "Credentials saved to ~/komodo.creds"
+  msg_ok "Credentials saved to ~/komodo.creds"
 }

 # ==============================================================================
@@ -0,0 +1,6 @@
+   __  __          __              __   ____  _____
+  / / / /___ ___  / /_  ________  / /  / __ \/ ___/
+ / / / / __ `__ \/ __ \/ ___/ _ \/ /  / / / /\__ \ 
+/ /_/ / / / / / / /_/ / /  /  __/ /  / /_/ /___/ / 
+\____/_/ /_/ /_/_.___/_/   \___/_/   \____//____/  
+                                                   
@@ -1,280 +1,43 @@
-#!/usr/bin/env bash
+#!/usr/bin/env bash

 # Copyright (c) 2021-2026 community-scripts ORG
 # Author: MickLesk (CanbiZ)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE

-source /dev/stdin <<<$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/api.func)
+COMMUNITY_SCRIPTS_URL="${COMMUNITY_SCRIPTS_URL:-https://raw.githubusercontent.com/community-scripts/ProxmoxVED/main}"
+source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/pve/vm-core.func")
+load_functions

-function header_info {
-  clear
-  cat <<"EOF"
-   __  __          __              __   ____  _____    _    ____  ___
-  / / / /___ ___  / /_  ________  / /  / __ \/ ___/   | |  / /  |/  /
- / / / / __ `__ \/ __ \/ ___/ _ \/ /  / / / /\__ \    | | / / /|_/ / 
-/ /_/ / / / / / / /_/ / /  /  __/ /  / /_/ /___/ /    | |/ / /  / /  
-\____/_/ /_/ /_/_.___/_/   \___/_/   \____//____/     |___/_/  /_/   
-                                                                     
-EOF
-}
-header_info
-echo -e "\n Loading..."
 GEN_MAC=02:$(openssl rand -hex 5 | awk '{print toupper($0)}' | sed 's/\(..\)/\1:/g; s/.$//')
 RANDOM_UUID="$(cat /proc/sys/kernel/random/uuid)"
 METHOD=""
+APP="Umbrel OS"
+APP_TYPE="vm"
 NSAPP="umbrel-os-vm"
 var_os="umbrel-os"
 var_version="n.d."

-YW=$(echo "\033[33m")
-BL=$(echo "\033[36m")
 HA=$(echo "\033[1;34m")
-RD=$(echo "\033[01;31m")
-BGN=$(echo "\033[4;92m")
-GN=$(echo "\033[1;92m")
-DGN=$(echo "\033[32m")
-CL=$(echo "\033[m")
-
-BOLD=$(echo "\033[1m")
-BFR="\\r\\033[K"
-HOLD=" "
-TAB="  "
-
-CM="${TAB}✔️${TAB}${CL}"
-CROSS="${TAB}✖️${TAB}${CL}"
-INFO="${TAB}💡${TAB}${CL}"
-OS="${TAB}🖥️${TAB}${CL}"
-CONTAINERTYPE="${TAB}📦${TAB}${CL}"
-DISKSIZE="${TAB}💾${TAB}${CL}"
-CPUCORE="${TAB}🧠${TAB}${CL}"
-RAMSIZE="${TAB}🛠️${TAB}${CL}"
-CONTAINERID="${TAB}🆔${TAB}${CL}"
-HOSTNAME="${TAB}🏠${TAB}${CL}"
-BRIDGE="${TAB}🌉${TAB}${CL}"
-GATEWAY="${TAB}🌐${TAB}${CL}"
-DEFAULT="${TAB}⚙️${TAB}${CL}"
-MACADDRESS="${TAB}🔗${TAB}${CL}"
-VLANTAG="${TAB}🏷️${TAB}${CL}"
-CREATING="${TAB}🚀${TAB}${CL}"
-ADVANCED="${TAB}🧩${TAB}${CL}"

 THIN="discard=on,ssd=1,"
+
+header_info
+echo -e "\n Loading..."
 set -e
 trap 'error_handler $LINENO "$BASH_COMMAND"' ERR
 trap cleanup EXIT
 trap 'post_update_to_api "failed" "130"' SIGINT
 trap 'post_update_to_api "failed" "143"' SIGTERM
 trap 'post_update_to_api "failed" "129"; exit 129' SIGHUP
-function error_handler() {
-  local exit_code="$?"
-  local line_number="$1"
-  local command="$2"
-  local error_message="${RD}[ERROR]${CL} in line ${RD}$line_number${CL}: exit code ${RD}$exit_code${CL}: while executing command ${YW}$command${CL}"
-  post_update_to_api "failed" "${exit_code}"
-  echo -e "\n$error_message\n"
-  cleanup_vmid
-}

-function get_valid_nextid() {
-  local try_id
-  try_id=$(pvesh get /cluster/nextid)
-  while true; do
-    if [ -f "/etc/pve/qemu-server/${try_id}.conf" ] || [ -f "/etc/pve/lxc/${try_id}.conf" ]; then
-      try_id=$((try_id + 1))
-      continue
-    fi
-    if lvs --noheadings -o lv_name | grep -qE "(^|[-_])${try_id}($|[-_])"; then
-      try_id=$((try_id + 1))
-      continue
-    fi
-    break
-  done
-  echo "$try_id"
-}
-
-function cleanup_vmid() {
-  if qm status $VMID &>/dev/null; then
-    qm stop $VMID &>/dev/null
-    qm destroy $VMID &>/dev/null
-  fi
-}
-
-function cleanup() {
-  local exit_code=$?
-  popd >/dev/null
-  if [[ "${POST_TO_API_DONE:-}" == "true" && "${POST_UPDATE_DONE:-}" != "true" ]]; then
-    if [[ $exit_code -eq 0 ]]; then
-      post_update_to_api "done" "none"
-    else
-      post_update_to_api "failed" "$exit_code"
-    fi
-  fi
-  rm -rf $TEMP_DIR
-}
+vm_require_arch amd64

 TEMP_DIR=$(mktemp -d)
 pushd $TEMP_DIR >/dev/null
-if whiptail --backtitle "Proxmox VE Helper Scripts" --title "Umbrel OS VM" --yesno "This will create a New Umbrel OS VM. Proceed?" 10 58; then
-  :
-else
-  header_info && echo -e "${CROSS}${RD}User exited script${CL}\n" && exit
-fi
-
-function msg_info() {
-  local msg="$1"
-  echo -ne "${TAB}${YW}${HOLD}${msg}${HOLD}"
-}
-
-function msg_ok() {
-  local msg="$1"
-  echo -e "${BFR}${CM}${GN}${msg}${CL}"
-}
-
-function msg_error() {
-  local msg="$1"
-  echo -e "${BFR}${CROSS}${RD}${msg}${CL}"
-}
-
-function check_root() {
-  if [[ "$(id -u)" -ne 0 || $(ps -o comm= -p $PPID) == "sudo" ]]; then
-    clear
-    msg_error "Please run this script as root."
-    echo -e "\nExiting..."
-    sleep 2
-    exit
-  fi
-}
-
-# This function checks the version of Proxmox Virtual Environment (PVE) and exits if the version is not supported.
-# Supported: Proxmox VE 8.0.x – 8.9.x, 9.0 and 9.2
-pve_check() {
-  local PVE_VER
-  PVE_VER="$(pveversion | awk -F'/' '{print $2}' | awk -F'-' '{print $1}')"
-
-  # Check for Proxmox VE 8.x: allow 8.0–8.9
-  if [[ "$PVE_VER" =~ ^8\.([0-9]+) ]]; then
-    local MINOR="${BASH_REMATCH[1]}"
-    if ((MINOR < 0 || MINOR > 9)); then
-      msg_error "This version of Proxmox VE is not supported."
-      msg_error "Supported: Proxmox VE version 8.0 – 8.9"
-      exit 105
-    fi
-    return 0
-  fi
-
-  # Check for Proxmox VE 9.x: allow 9.0 and 9.2
-  if [[ "$PVE_VER" =~ ^9\.([0-9]+) ]]; then
-    local MINOR="${BASH_REMATCH[1]}"
-    if ((MINOR < 0 || MINOR > 2)); then
-      msg_error "This version of Proxmox VE is not supported."
-      msg_error "Supported: Proxmox VE version 9.0 – 9.2"
-      exit 105
-    fi
-    return 0
-  fi
-
-  # All other unsupported versions
-  msg_error "This version of Proxmox VE is not supported."
-  msg_error "Supported versions: Proxmox VE 8.0 – 8.x or 9.0 – 9.2"
-  exit 105
-}
-
-function arch_check() {
-  if [ "$(dpkg --print-architecture)" != "amd64" ]; then
-    echo -e "\n ${INFO}${YWB}This script will not work with PiMox! \n"
-    echo -e "\n ${YWB}Visit https://github.com/asylumexp/Proxmox for ARM64 support. \n"
-    echo -e "Exiting..."
-    sleep 2
-    exit
-  fi
-}
-
-function ssh_check() {
-  if command -v pveversion >/dev/null 2>&1; then
-    if [ -n "${SSH_CLIENT:+x}" ]; then
-      if whiptail --backtitle "Proxmox VE Helper Scripts" --defaultno --title "SSH DETECTED" --yesno "It's suggested to use the Proxmox shell instead of SSH, since SSH can create issues while gathering variables. Would you like to proceed with using SSH?" 10 62; then
-        echo "you've been warned"
-      else
-        clear
-        exit
-      fi
-    fi
-  fi
-}
-
-function exit-script() {
-  clear
-  echo -e "\n${CROSS}${RD}User exited script${CL}\n"
-  exit
-}
-
-# Ensure pv is installed or abort with instructions
-function ensure_pv() {
-  if ! command -v pv &>/dev/null; then
-    msg_info "Installing required package: pv"
-    if ! apt-get update -qq &>/dev/null || ! apt-get install -y pv &>/dev/null; then
-      msg_error "Failed to install pv automatically."
-      echo -e "\nPlease run manually on the Proxmox host:\n  apt install pv\n"
-      exit 237
-    fi
-    msg_ok "Installed pv"
-  fi
-}
-
-# Download an .xz file and validate it
-# Args: $1=url $2=cache_file
-function download_and_validate_xz() {
-  local url="$1"
-  local file="$2"
-
-  # If file exists, check validity
-  if [[ -s "$file" ]]; then
-    if xz -t "$file" &>/dev/null; then
-      msg_ok "Using cached image $(basename "$file")"
-      return 0
-    else
-      msg_error "Cached file $(basename "$file") is corrupted. Deleting and retrying download..."
-      rm -f "$file"
-    fi
-  fi
-
-  # Download fresh file
-  msg_info "Downloading image: $(basename "$file")"
-  if ! curl -fSL -o "$file" "$url"; then
-    msg_error "Download failed: $url"
-    rm -f "$file"
-    exit 115
-  fi
-
-  # Validate again
-  if ! xz -t "$file" &>/dev/null; then
-    msg_error "Downloaded file $(basename "$file") is corrupted. Please try again later."
-    rm -f "$file"
-    exit 115
-  fi
-  msg_ok "Downloaded and validated $(basename "$file")"
-}
-
-# Extract .xz with pv
-# Args: $1=cache_file $2=target_img
-function extract_xz_with_pv() {
-  set -o pipefail
-  local file="$1"
-  local target="$2"
-
-  msg_info "Decompressing $(basename "$file") to $target"
-  if ! xz -dc "$file" | pv -N "Extracting" >"$target"; then
-    msg_error "Failed to extract $file"
-    rm -f "$target"
-    exit 115
-  fi
-  msg_ok "Decompressed to $target"
-}

 function default_settings() {
+  vm_apply_machine_type "q35"
  VMID=$(get_valid_nextid)
-  MACHINE=" -machine q35"
-  FORMAT=""
  DISK_SIZE="32G"
  HN="umbrelos"
  CPU_TYPE=""
@@ -286,223 +49,27 @@ function default_settings() {
  MTU=""
  START_VM="yes"
  METHOD="default"
-  echo -e "${CONTAINERID}${BOLD}${DGN}Virtual Machine ID: ${BGN}${VMID}${CL}"
-  echo -e "${CONTAINERTYPE}${BOLD}${DGN}Machine Type: ${BGN}q35${CL}"
-  echo -e "${DISKSIZE}${BOLD}${DGN}Disk Size: ${BGN}${DISK_SIZE}${CL}"
-  echo -e "${HOSTNAME}${BOLD}${DGN}Hostname: ${BGN}${HN}${CL}"
-  echo -e "${OS}${BOLD}${DGN}CPU Model: ${BGN}KVM64${CL}"
-  echo -e "${CPUCORE}${BOLD}${DGN}CPU Cores: ${BGN}${CORE_COUNT}${CL}"
-  echo -e "${RAMSIZE}${BOLD}${DGN}RAM Size: ${BGN}${RAM_SIZE}${CL}"
-  echo -e "${BRIDGE}${BOLD}${DGN}Bridge: ${BGN}${BRG}${CL}"
-  echo -e "${MACADDRESS}${BOLD}${DGN}MAC Address: ${BGN}${MAC}${CL}"
-  echo -e "${VLANTAG}${BOLD}${DGN}VLAN: ${BGN}Default${CL}"
-  echo -e "${DEFAULT}${BOLD}${DGN}Interface MTU Size: ${BGN}Default${CL}"
-  echo -e "${GATEWAY}${BOLD}${DGN}Start VM when completed: ${BGN}yes${CL}"
-  echo -e "${CREATING}${BOLD}${DGN}Creating a Umbrel OS VM using the above default settings${CL}"
+  vm_echo_default_settings
 }

 function advanced_settings() {
  METHOD="advanced"
-  [ -z "${VMID:-}" ] && VMID=$(get_valid_nextid)
-  while true; do
-    if VMID=$(whiptail --backtitle "Proxmox VE Helper Scripts" --inputbox "Set Virtual Machine ID" 8 58 $VMID --title "VIRTUAL MACHINE ID" --cancel-button Exit-Script 3>&1 1>&2 2>&3); then
-      if [ -z "$VMID" ]; then
-        VMID=$(get_valid_nextid)
-      fi
-      if pct status "$VMID" &>/dev/null || qm status "$VMID" &>/dev/null; then
-        echo -e "${CROSS}${RD} ID $VMID is already in use${CL}"
-        sleep 2
-        continue
-      fi
-      echo -e "${CONTAINERID}${BOLD}${DGN}Virtual Machine ID: ${BGN}$VMID${CL}"
-      break
-    else
-      exit-script
-    fi
-  done
+  vm_prompt_vmid "${VMID:-$(get_valid_nextid)}"
+  vm_prompt_machine_type "q35"
+  vm_prompt_disk_size "32G"
+  vm_prompt_disk_cache "none"
+  vm_prompt_hostname "umbrelos"
+  vm_prompt_cpu_model "kvm64"
+  vm_prompt_cpu_cores "2"
+  vm_prompt_ram "4096"
+  vm_prompt_bridge "vmbr0"
+  vm_prompt_mac "$GEN_MAC"
+  vm_prompt_vlan
+  vm_prompt_mtu
+  vm_prompt_verbose "no"
+  vm_prompt_start_vm "yes"

-  if MACH=$(whiptail --backtitle "Proxmox VE Helper Scripts" --title "MACHINE TYPE" --radiolist --cancel-button Exit-Script "Choose Machine Type" 10 58 2 \
-    "q35" "Modern (PCIe, UEFI, default)" ON \
-    "i440fx" "Legacy (older compatibility)" OFF \
-    3>&1 1>&2 2>&3); then
-    if [ "$MACH" = "q35" ]; then
-      echo -e "${CONTAINERTYPE}${BOLD}${DGN}Machine Type: ${BGN}q35${CL}"
-      FORMAT=""
-      MACHINE=" -machine q35"
-    else
-      echo -e "${CONTAINERTYPE}${BOLD}${DGN}Machine Type: ${BGN}i440fx${CL}"
-      FORMAT=",efitype=4m"
-      MACHINE=""
-    fi
-  else
-    exit-script
-  fi
-
-  if DISK_SIZE=$(whiptail --backtitle "Proxmox VE Helper Scripts" --inputbox "Set Disk Size in GiB (e.g., 10, 20)" 8 58 "$DISK_SIZE" --title "DISK SIZE" --cancel-button Exit-Script 3>&1 1>&2 2>&3); then
-    DISK_SIZE=$(echo "$DISK_SIZE" | tr -d ' ')
-    if [[ "$DISK_SIZE" =~ ^[0-9]+$ ]]; then
-      DISK_SIZE="${DISK_SIZE}G"
-      echo -e "${DISKSIZE}${BOLD}${DGN}Disk Size: ${BGN}$DISK_SIZE${CL}"
-    elif [[ "$DISK_SIZE" =~ ^[0-9]+G$ ]]; then
-      echo -e "${DISKSIZE}${BOLD}${DGN}Disk Size: ${BGN}$DISK_SIZE${CL}"
-    else
-      echo -e "${DISKSIZE}${BOLD}${RD}Invalid Disk Size. Please use a number (e.g., 10 or 10G).${CL}"
-      exit-script
-    fi
-  else
-    exit-script
-  fi
-
-  if DISK_CACHE=$(whiptail --backtitle "Proxmox VE Helper Scripts" --title "DISK CACHE" --radiolist "Choose" --cancel-button Exit-Script 10 58 2 \
-    "0" "None (Default)" ON \
-    "1" "Write Through" OFF \
-    3>&1 1>&2 2>&3); then
-    if [ $DISK_CACHE = "1" ]; then
-      echo -e "${DISKSIZE}${BOLD}${DGN}Disk Cache: ${BGN}Write Through${CL}"
-      DISK_CACHE="cache=writethrough,"
-    else
-      echo -e "${DISKSIZE}${BOLD}${DGN}Disk Cache: ${BGN}None${CL}"
-      DISK_CACHE=""
-    fi
-  else
-    exit-script
-  fi
-
-  if VM_NAME=$(whiptail --backtitle "Proxmox VE Helper Scripts" --inputbox "Set Hostname" 8 58 umbrelos --title "HOSTNAME" --cancel-button Exit-Script 3>&1 1>&2 2>&3); then
-    if [ -z $VM_NAME ]; then
-      HN="umbrelos"
-      echo -e "${HOSTNAME}${BOLD}${DGN}Hostname: ${BGN}$HN${CL}"
-    else
-      HN=$(echo "${VM_NAME,,}" | tr -cs 'a-z0-9-' '-' | sed 's/^-//;s/-$//')
-      if [ "$HN" != "${VM_NAME,,}" ]; then
-        whiptail --backtitle "Proxmox VE Helper Scripts" --title "HOSTNAME ADJUSTED" --msgbox "Invalid characters detected. Hostname has been adjusted to:\n\n  $HN" 10 58
-      fi
-      echo -e "${HOSTNAME}${BOLD}${DGN}Hostname: ${BGN}$HN${CL}"
-    fi
-  else
-    exit-script
-  fi
-
-  if CPU_TYPE1=$(whiptail --backtitle "Proxmox VE Helper Scripts" --title "CPU MODEL" --radiolist "Choose CPU Model" --cancel-button Exit-Script 10 58 2 \
-    "KVM64" "Default – safe for migration/compatibility" ON \
-    "Host" "Use host CPU features (faster, no migration)" OFF \
-    3>&1 1>&2 2>&3); then
-    case "$CPU_TYPE1" in
-    "Host")
-      echo -e "${OS}${BOLD}${DGN}CPU Model: ${BGN}Host${CL}"
-      CPU_TYPE=" -cpu host"
-      ;;
-    *)
-      echo -e "${OS}${BOLD}${DGN}CPU Model: ${BGN}KVM64${CL}"
-      CPU_TYPE=""
-      ;;
-    esac
-  else
-    exit-script
-  fi
-
-  while true; do
-    if CORE_COUNT=$(whiptail --backtitle "Proxmox VE Helper Scripts" --inputbox "Allocate CPU Cores" 8 58 2 --title "CORE COUNT" --cancel-button Exit-Script 3>&1 1>&2 2>&3); then
-      if [ -z "$CORE_COUNT" ]; then CORE_COUNT="2"; fi
-      if [[ "$CORE_COUNT" =~ ^[1-9][0-9]*$ ]]; then
-        echo -e "${CPUCORE}${BOLD}${DGN}CPU Cores: ${BGN}$CORE_COUNT${CL}"
-        break
-      fi
-      whiptail --backtitle "Proxmox VE Helper Scripts" --title "INVALID INPUT" --msgbox "CPU Cores must be a positive integer (e.g., 2)." 8 58
-    else
-      exit-script
-    fi
-  done
-
-  while true; do
-    if RAM_SIZE=$(whiptail --backtitle "Proxmox VE Helper Scripts" --inputbox "Allocate RAM in MiB" 8 58 2048 --title "RAM" --cancel-button Exit-Script 3>&1 1>&2 2>&3); then
-      if [ -z "$RAM_SIZE" ]; then RAM_SIZE="2048"; fi
-      if [[ "$RAM_SIZE" =~ ^[1-9][0-9]*$ ]]; then
-        echo -e "${RAMSIZE}${BOLD}${DGN}RAM Size: ${BGN}$RAM_SIZE${CL}"
-        break
-      fi
-      whiptail --backtitle "Proxmox VE Helper Scripts" --title "INVALID INPUT" --msgbox "RAM Size must be a positive integer in MiB (e.g., 2048)." 8 58
-    else
-      exit-script
-    fi
-  done
-
-  if BRG=$(whiptail --backtitle "Proxmox VE Helper Scripts" --inputbox "Set a Bridge" 8 58 vmbr0 --title "BRIDGE" --cancel-button Exit-Script 3>&1 1>&2 2>&3); then
-    if [ -z $BRG ]; then
-      BRG="vmbr0"
-      echo -e "${BRIDGE}${BOLD}${DGN}Bridge: ${BGN}$BRG${CL}"
-    else
-      echo -e "${BRIDGE}${BOLD}${DGN}Bridge: ${BGN}$BRG${CL}"
-    fi
-  else
-    exit-script
-  fi
-
-  while true; do
-    if MAC1=$(whiptail --backtitle "Proxmox VE Helper Scripts" --inputbox "Set a MAC Address" 8 58 $GEN_MAC --title "MAC ADDRESS" --cancel-button Exit-Script 3>&1 1>&2 2>&3); then
-      if [ -z "$MAC1" ]; then
-        MAC="$GEN_MAC"
-        echo -e "${MACADDRESS}${BOLD}${DGN}MAC Address: ${BGN}$MAC${CL}"
-        break
-      fi
-      if [[ "$MAC1" =~ ^([0-9A-Fa-f]{2}:){5}[0-9A-Fa-f]{2}$ ]]; then
-        MAC="$MAC1"
-        echo -e "${MACADDRESS}${BOLD}${DGN}MAC Address: ${BGN}$MAC1${CL}"
-        break
-      fi
-      whiptail --backtitle "Proxmox VE Helper Scripts" --title "INVALID INPUT" --msgbox "Invalid MAC address format. Use XX:XX:XX:XX:XX:XX (e.g., AA:BB:CC:DD:EE:FF)." 8 58
-    else
-      exit-script
-    fi
-  done
-
-  while true; do
-    if VLAN1=$(whiptail --backtitle "Proxmox VE Helper Scripts" --inputbox "Set a Vlan(leave blank for default)" 8 58 --title "VLAN" --cancel-button Exit-Script 3>&1 1>&2 2>&3); then
-      if [ -z "$VLAN1" ]; then
-        VLAN1="Default"
-        VLAN=""
-        echo -e "${VLANTAG}${BOLD}${DGN}VLAN: ${BGN}$VLAN1${CL}"
-        break
-      fi
-      if [[ "$VLAN1" =~ ^[0-9]+$ ]] && [ "$VLAN1" -ge 1 ] && [ "$VLAN1" -le 4094 ]; then
-        VLAN=",tag=$VLAN1"
-        echo -e "${VLANTAG}${BOLD}${DGN}VLAN: ${BGN}$VLAN1${CL}"
-        break
-      fi
-      whiptail --backtitle "Proxmox VE Helper Scripts" --title "INVALID INPUT" --msgbox "VLAN must be a number between 1 and 4094, or leave blank for default." 8 58
-    else
-      exit-script
-    fi
-  done
-
-  while true; do
-    if MTU1=$(whiptail --backtitle "Proxmox VE Helper Scripts" --inputbox "Set Interface MTU Size (leave blank for default)" 8 58 --title "MTU SIZE" --cancel-button Exit-Script 3>&1 1>&2 2>&3); then
-      if [ -z "$MTU1" ]; then
-        MTU1="Default"
-        MTU=""
-        echo -e "${DEFAULT}${BOLD}${DGN}Interface MTU Size: ${BGN}$MTU1${CL}"
-        break
-      fi
-      if [[ "$MTU1" =~ ^[0-9]+$ ]] && [ "$MTU1" -ge 576 ] && [ "$MTU1" -le 65520 ]; then
-        MTU=",mtu=$MTU1"
-        echo -e "${DEFAULT}${BOLD}${DGN}Interface MTU Size: ${BGN}$MTU1${CL}"
-        break
-      fi
-      whiptail --backtitle "Proxmox VE Helper Scripts" --title "INVALID INPUT" --msgbox "MTU Size must be a number between 576 and 65520, or leave blank for default." 8 58
-    else
-      exit-script
-    fi
-  done
-
-  if (whiptail --backtitle "Proxmox VE Helper Scripts" --title "START VIRTUAL MACHINE" --yesno "Start VM when completed?" 10 58); then
-    echo -e "${GATEWAY}${BOLD}${DGN}Start VM when completed: ${BGN}yes${CL}"
-    START_VM="yes"
-  else
-    echo -e "${GATEWAY}${BOLD}${DGN}Start VM when completed: ${BGN}no${CL}"
-    START_VM="no"
-  fi
-
-  if (whiptail --backtitle "Proxmox VE Helper Scripts" --title "ADVANCED SETTINGS COMPLETE" --yesno "Ready to create a Umbrel OS VM?" --no-button Do-Over 10 58); then
+  if vm_confirm_advanced_settings "Ready to create a Umbrel OS VM?"; then
    echo -e "${CREATING}${BOLD}${DGN}Creating a Umbrel OS VM using the above advanced settings${CL}"
  else
    header_info
@@ -511,128 +78,79 @@ function advanced_settings() {
  fi
 }

-function start_script() {
-  if (whiptail --backtitle "Proxmox VE Helper Scripts" --title "SETTINGS" --yesno "Use Default Settings?" --no-button Advanced 10 58); then
-    header_info
-    echo -e "${DEFAULT}${BOLD}${BL}Using Default Settings${CL}"
-    default_settings
-  else
-    header_info
-    echo -e "${ADVANCED}${BOLD}${RD}Using Advanced Settings${CL}"
-    advanced_settings
-  fi
-}

-check_root
-arch_check
-pve_check
-ssh_check
-ensure_pv
-start_script
+vm_preflight
+vm_start_script "Use Default Settings?\n\nDefaults:\n• 2 CPU Cores\n• 4 GB RAM\n• 32 GB Disk" 13 58
 post_to_api_vm

-msg_info "Validating Storage"
-STORAGE_MENU=()
-while read -r tag type free; do
-  ITEM="Type: $type Free: $free"
-  STORAGE_MENU+=("$tag" "$ITEM" "OFF")
-done < <(pvesm status -content images | awk 'NR>1 {printf "%s %s %s\n", $1, $2, $6}')
+vm_select_storage "$HN"

-if [ ${#STORAGE_MENU[@]} -eq 0 ]; then
-  msg_error "Unable to detect a valid storage location."
-  exit 119
-elif [ $((${#STORAGE_MENU[@]} / 3)) -eq 1 ]; then
-  STORAGE=${STORAGE_MENU[0]}
-else
-  while [ -z "${STORAGE:+x}" ]; do
-    STORAGE=$(whiptail --backtitle "Proxmox VE Helper Scripts" --title "Storage Pools" --radiolist \
-      "Which storage pool would you like to use for ${HN}?\nTo make a selection, use the Spacebar.\n" \
-      16 70 6 \
-      "${STORAGE_MENU[@]}" 3>&1 1>&2 2>&3)
-  done
-fi
-msg_ok "Using ${CL}${BL}$STORAGE${CL} ${GN}for Storage Location."

-msg_ok "Virtual Machine ID is ${CL}${BL}$VMID${CL}."
+msg_info "Retrieving the URL for the Umbrel OS installer ISO"
+UMBREL_RELEASE="$(curl -fsSL --max-time 20 https://api.umbrel.com/latest-release 2>/dev/null |
+  sed -n 's/.*"version"[[:space:]]*:[[:space:]]*"\([^"]*\)".*/\1/p')"
+[[ -z "$UMBREL_RELEASE" ]] && UMBREL_RELEASE="latest"
+var_version="$UMBREL_RELEASE"

-URL="https://download.umbrel.com/release/latest/umbrelos-amd64.img.xz"
-CACHE_DIR="/var/lib/vz/template/cache"
-CACHE_FILE="$CACHE_DIR/$(basename "$URL")"
-FILE_IMG="/var/lib/vz/template/tmp/${CACHE_FILE##*/%.xz}"
+URL="https://download.umbrel.com/release/${UMBREL_RELEASE}/umbrelos-amd64-usb-installer.iso"
+# The upstream file name is the same for every release, so the version goes into
+# the cached name -- otherwise the cache serves 1.7.4 to someone asking for 2.0.
+ISO_NAME="umbrelos-${UMBREL_RELEASE}-amd64-usb-installer.iso"
+CACHE_DIR="/var/lib/vz/template/iso"
+CACHE_FILE="${CACHE_DIR}/${ISO_NAME}"
+mkdir -p "$CACHE_DIR"
+msg_ok "${CL}${BL}${URL}${CL}"

-mkdir -p "$CACHE_DIR" "$(dirname "$FILE_IMG")"
+# download.umbrel.com answers 307 for any name at all, so a redirect proves
+# nothing about the file existing. Size is what separates an ISO from a 404 page.
+msg_info "Downloading the Umbrel OS installer ISO (approximately 1.8 GB)"
+vm_fetch_image "$URL" "$CACHE_FILE" --cache --min-bytes $((1024 * 1024 * 1024)) || exit 115

-download_and_validate_xz "$URL" "$CACHE_FILE"
-
-qm create $VMID${MACHINE} -bios ovmf -agent 1 -tablet 0 -localtime 1 ${CPU_TYPE} \
+msg_info "Creating a Umbrel OS VM"
+# Umbrel requires EFI: the installer ISO has no legacy boot path. Its own
+# console runs on tty1, so this VM is driven through noVNC, not the serial line.
+qm create "$VMID"${MACHINE} -bios ovmf -agent enabled=1 -tablet 0 -localtime 1 ${CPU_TYPE} \
  -cores "$CORE_COUNT" -memory "$RAM_SIZE" -name "$HN" -tags community-script \
-  -net0 "virtio,bridge=$BRG,macaddr=$MAC$VLAN$MTU" -onboot 1 -ostype l26 -scsihw virtio-scsi-pci >/dev/null
-
-extract_xz_with_pv "$CACHE_FILE" "$FILE_IMG"
-
-if qm disk import --help >/dev/null 2>&1; then
-  IMPORT_CMD=(qm disk import)
-else
-  IMPORT_CMD=(qm importdisk)
-fi
-IMPORT_OUT="$("${IMPORT_CMD[@]}" "$VMID" "$FILE_IMG" "$STORAGE" --format raw 2>&1 || true)"
-DISK_REF="$(printf '%s\n' "$IMPORT_OUT" | sed -n "s/.*imported disk '\([^']\+\)'.*/\1/p" | tr -d "\r\"'")"
-[[ -z "$DISK_REF" ]] && DISK_REF="$(pvesm list "$STORAGE" | awk -v id="$VMID" '$5 ~ ("vm-"id"-disk-") {print $1":"$5}' | sort | tail -n1)"
-
-qm set $VMID \
-  --efidisk0 ${STORAGE}:0,efitype=4m \
-  --scsi0 ${DISK_REF},ssd=1,discard=on \
-  --boot order=scsi0 \
-  --serial0 socket >/dev/null
-qm set $VMID --agent enabled=1 >/dev/null
-qm resize $VMID scsi0 ${DISK_SIZE} >/dev/null
-
-DESCRIPTION=$(
-  cat <<EOF
-<div align='center'>
-  <a href='https://community-scripts.org' target='_blank' rel='noopener noreferrer'>
-    <img src='https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/images/logo-81x112.png' alt='Logo' style='width:81px;height:112px;'/>
-  </a>
-
-  <h2 style='font-size: 24px; margin: 20px 0;'>Umbrel OS VM</h2>
-
-  <p style='margin: 16px 0;'>
-    <a href='https://ko-fi.com/community_scripts' target='_blank' rel='noopener noreferrer'>
-      <img src='https://img.shields.io/badge/&#x2615;-Buy us a coffee-blue' alt='spend Coffee' />
-    </a>
-  </p>
-
-  <span style='margin: 0 10px;'>
-    <i class="fa fa-github fa-fw" style="color: #f5f5f5;"></i>
-    <a href='https://github.com/community-scripts/ProxmoxVE' target='_blank' rel='noopener noreferrer' style='text-decoration: none; color: #00617f;'>GitHub</a>
-  </span>
-  <span style='margin: 0 10px;'>
-    <i class="fa fa-comments fa-fw" style="color: #f5f5f5;"></i>
-    <a href='https://github.com/community-scripts/ProxmoxVE/discussions' target='_blank' rel='noopener noreferrer' style='text-decoration: none; color: #00617f;'>Discussions</a>
-  </span>
-  <span style='margin: 0 10px;'>
-    <i class="fa fa-exclamation-circle fa-fw" style="color: #f5f5f5;"></i>
-    <a href='https://github.com/community-scripts/ProxmoxVE/issues' target='_blank' rel='noopener noreferrer' style='text-decoration: none; color: #00617f;'>Issues</a>
-  </span>
-</div>
-EOF
-)
-qm set $VMID -description "$DESCRIPTION" >/dev/null
-
-if whiptail --backtitle "Proxmox VE Helper Scripts" --title "Image Cache" \
-  --yesno "Keep downloaded Umbrel OS image for future VMs?\n\nFile: $CACHE_FILE" 10 70; then
-  msg_ok "Keeping cached image"
-else
-  rm -f "$CACHE_FILE"
-  msg_ok "Deleted cached image"
-fi
-rm -f "$FILE_IMG"
+  -net0 "virtio,bridge=$BRG,macaddr=$MAC$VLAN$MTU" -onboot 1 -ostype l26 -scsihw virtio-scsi-pci \
+  -efidisk0 "${STORAGE}:1,efitype=4m,pre-enrolled-keys=0" \
+  -scsi0 "${STORAGE}:${DISK_SIZE%G},${DISK_CACHE:-}${THIN%,}" \
+  -cdrom "local:iso/${ISO_NAME}" -boot order='scsi0;ide2' >/dev/null

+set_description
 msg_ok "Created a Umbrel OS VM ${CL}${BL}(${HN})"
+
+if [[ "${VM_UNATTENDED:-0}" == "1" ]]; then
+  KEEP_IMAGE="${VM_KEEP_IMAGE:-yes}"
+elif vm_dialog yesno "Image Cache" \
+  "Keep downloaded Umbrel OS installer ISO for future VMs?\n\nFile: $CACHE_FILE" 10 70; then
+  KEEP_IMAGE="yes"
+else
+  KEEP_IMAGE="no"
+fi
+
+if [[ "$KEEP_IMAGE" == "yes" ]]; then
+  msg_ok "Keeping cached ISO"
+else
+  msg_warn "The ISO is still attached to the VM, so it is removed after the install"
+  KEEP_IMAGE="no"
+fi
+
 if [ "$START_VM" == "yes" ]; then
  msg_info "Starting Umbrel OS VM"
-  qm start $VMID
+  $STD qm start $VMID
  msg_ok "Started Umbrel OS VM"
 fi
 post_update_to_api "done" "none"
+
+echo -e "\n${INFO}${BOLD}${YW}Next Steps:${CL}"
+echo -e "${TAB}1. Open the VM console in Proxmox (noVNC)"
+echo -e "${TAB}2. The installer asks which storage device to install umbrelOS on."
+echo -e "${TAB}   Pick the ${BL}sda${CL} entry -- ${BL}sr0${CL} is the installer ISO itself"
+echo -e "${TAB}3. Confirm, wait for it to finish, then press a key to power off"
+echo -e "${TAB}4. Detach the ISO (${BL}qm set ${VMID} --ide2 none${CL}) and start the VM"
+echo -e "${TAB}5. umbrelOS is then reachable at ${BL}http://umbrel.local${CL}"
+if [[ "$KEEP_IMAGE" == "no" ]]; then
+  echo -e "${TAB}   Delete ${BL}${CACHE_FILE}${CL} once the ISO is detached"
+fi
+
 msg_ok "Completed successfully!\n"
Author	SHA1	Message	Date
community-scripts-pr-app[bot]andgithub-actions[bot]	e2effe6510	Update CHANGELOG.md (#17538 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-27 00:05:34 +00:00
community-scripts-pr-app[bot]andgithub-actions[bot]	712f7fe565	Archive old changelog entries (#17537 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-27 00:05:09 +00:00
community-scripts-pr-app[bot]andgithub-actions[bot]	41ad683454	Update CHANGELOG.md (#17536 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-26 20:11:56 +00:00
sergstepanenko	44a22d77d3	Manyfold: chown /opt/manyfold_data to the manyfold user (#17534 )	2026-09-26 22:11:31 +02:00
community-scripts-pr-app[bot]andgithub-actions[bot]	ebe02e9c93	Update CHANGELOG.md (#17533 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-26 19:02:25 +00:00
community-scripts-pr-app[bot]andgithub-actions[bot]	11e409f499	Update CHANGELOG.md (#17532 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-26 19:02:09 +00:00
CanbiZ (MickLesk)	42442ca968	Let steamcmd update itself before installing Satisfactory (#17526 ) On the run in which steamcmd replaces itself, the app_update that follows fails with 'Missing configuration', and the same command succeeds once it runs again. A login-only run first takes that self-update out of the install and update.	2026-09-26 21:01:56 +02:00
CanbiZ (MickLesk)	0e28ea7fe1	Build the AudioMuse-AI noavx2 environment on Python 3.11 (#17528 ) The noavx2 requirements pin numpy 1.23.5 and onnx 1.14.1, neither of which ships a cp312 wheel, so on 3.12 uv built them from source: numpy fails without distutils and onnx without cmake. Every noavx2 pin has a 3.11 wheel.	2026-09-26 21:01:46 +02:00
CanbiZ (MickLesk)	9db16c2073	Hold @lobehub/ui at 5.49 while LobeHub's stable release needs it (#17531 ) @lobehub/ui 5.50.0 dropped NeuralNetworkLoading, and LobeHub 2.2.18 still imports it through a ^5.47.0 range with lockfile: false, so every fresh build now fails. Upstream moved off it on main; the pin only applies while package.json still asks for a 5.4x range, so it stops on its own with the next stable release.	2026-09-26 21:01:28 +02:00
community-scripts-pr-app[bot]andgithub-actions[bot]	8a3d372171	Update CHANGELOG.md (#17530 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-26 18:55:44 +00:00
community-scripts-pr-app[bot]andgithub-actions[bot]	306eb3a54d	Update CHANGELOG.md (#17529 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-26 18:55:15 +00:00
CanbiZ (MickLesk)	5127c85ca7	Keep Trilium updates on the server releases (#17525 ) The repo also publishes web-clipper-v* releases, and whenever upstream marked one of those as latest the update offered to replace the server with the browser extension. A v prefix makes core pick the newest stable server release itself instead of trusting that marking.	2026-09-26 20:54:46 +02:00
community-scripts-pr-app[bot]andgithub-actions[bot]	4bca45dfc1	Update CHANGELOG.md (#17527 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-26 18:51:39 +00:00
CanbiZ (MickLesk)	83a4addccd	Generate the NPM admin config and repair certbot's venv on update (#17523 ) 2.16.0 ships production.conf only as a template that its s6 prepare step renders, so installs outside Docker never listened on 81; render it on install, on update while keeping a custom admin port, and on update for containers already stuck on 2.16.0. Certbot's upgrade died on a dist-info without RECORD, which pip's own --ignore-installed hint does not clear, so drop such records before upgrading.	2026-09-26 20:51:17 +02:00
community-scripts-pr-app[bot]andgithub-actions[bot]	968cf0c155	Update CHANGELOG.md (#17524 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-26 18:49:30 +00:00
CanbiZ (MickLesk)	dce092a0a4	Komodo: add KOMODO_HOST \| fix broken spinner (#17481 ) * Check Komodo actually started and point KOMODO_HOST at the container * Stop Komodo hanging on an unclosed message block	2026-09-26 20:49:03 +02:00
community-scripts-pr-app[bot]andgithub-actions[bot]	4bdb61cdf4	Update CHANGELOG.md (#17522 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-26 18:37:51 +00:00
David BarreraandClaude Opus 5.5	9489724d86	romm: run rq cron and a scans worker for RomM 5.3 (#17502 ) RomM 5.3.0 dropped rq-scheduler (rommapp/romm@4e5921727), so romm-scheduler.service fails with 203/EXEC on a missing .venv/bin/rqscheduler. The same release moved scans to their own "scans" queue (rommapp/romm@3593d2398), which the LXC worker never listened on, so scans queued but never ran. Match upstream's docker init: the scheduler service runs `rq cron tasks.cron_config`, both workers run with --with-scheduler so delayed jobs (watcher rescans) are released, and a new romm-scan-worker.service consumes the scans queue. The update script migrates existing units when romm-scheduler.service still references rqscheduler. It runs before the release check, so installs already on 5.3.x get repaired too. Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>	2026-09-26 20:37:22 +02:00
community-scripts-pr-app[bot]andgithub-actions[bot]	76a09f5ad9	Update CHANGELOG.md (#17521 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-26 17:08:54 +00:00
CanbiZ (MickLesk)andpavlojs	91bccdacd3	Semaphore: fix BoltDB migration by pinning 2.18.30 (#17439 ) * Fix Semaphore BoltDB migration * Update ct/semaphore.sh Co-authored-by: pavlojs <63199635+pavlojs@users.noreply.github.com> --------- Co-authored-by: pavlojs <63199635+pavlojs@users.noreply.github.com>	2026-09-26 19:08:26 +02:00
community-scripts-pr-app[bot]andgithub-actions[bot]	9e39761415	Update CHANGELOG.md (#17513 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-25 19:27:29 +00:00
community-scripts-pr-app[bot]andGitHub Actions	d439341c7a	Update .app files (#17509 ) Co-authored-by: GitHub Actions <github-actions[bot]@users.noreply.github.com>	2026-09-25 21:26:18 +02:00
community-scripts-pr-app[bot]andgithub-actions[bot]	432d56b887	Update CHANGELOG.md (#17511 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-25 19:09:49 +00:00
community-scripts-pr-app[bot]andgithub-actions[bot]	ab02d929c3	Update CHANGELOG.md (#17510 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-25 19:09:29 +00:00
community-scripts-pr-app[bot]andgithub-actions[bot]	8f0bcf9fe9	Update CHANGELOG.md (#17508 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-25 19:09:18 +00:00
CanbiZ (MickLesk)	89671ce007	Take the Obsidian version from the Ignis release tag (#17503 ) Upstream renamed OBSIDIAN_VERSION in its Dockerfile to IGNIS_OBSIDIAN_PIN, so the grep matched nothing - and under pipefail the assignment itself aborts, which is why the fallback on the next line never ran. The tag already carries the pairing (0.8.13+obsidian.1.13.7), so read it there and keep both Dockerfile keys as a fallback.	2026-09-25 21:09:05 +02:00
CanbiZ (MickLesk)	28aa1bdbee	Refactor: Umbrel OS VM (#17505 ) Refactor Umbrel OS VM script to improve structure and readability. Update function calls and variable handling for better maintainability.	2026-09-25 21:08:49 +02:00
community-scripts-pr-app[bot]andgithub-actions[bot]	0993068f56	Update CHANGELOG.md (#17504 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2026-09-25 16:25:09 +00:00
push-app-to-main[bot]andCanbiZ	c7a9a32693	RustFS (#17499 ) * Add rustfs (ct) * update * Aktualisieren von rustfs-install.sh * Uncomment var_arm64 variable assignment --------- Co-authored-by: push-app-to-main[bot] <203845782+push-app-to-main[bot]@users.noreply.github.com> Co-authored-by: CanbiZ (MickLesk) <47820557+MickLesk@users.noreply.github.com>	2026-09-25 18:24:39 +02:00