cleanup(tools.func): remove 22 unused functions (~546 lines dead code)

Removed functions with 0 external callers:
- get_default_php_version, get_default_python_version, get_default_nodejs_version
- is_apt_locked, wait_for_apt
- start_timer, end_timer (was also buggy - silent)
- verify_gpg_fingerprint
- hold_package_version, unhold_package_version
- get_parallel_jobs
- enable_and_start_service, is_service_enabled, is_service_running
- should_upgrade
- verify_package_source, is_lts_version
- download_with_progress
- curl_api_with_retry
- get_cached_version (write-only cache - never read)
- setup_local_ip_helper
- get_latest_gitlab_release

.github/changelogs/2026/07.md

@@ -1,94 +1,3 @@
-## 2026-07-11
-
-### 🆕 New Scripts
-
-  - LocalAGI ([#15687](https://github.com/community-scripts/ProxmoxVE/pull/15687))
-
-### 🚀 Updated Scripts
-
-  - fix(adventurelog): allow pnpm build scripts so install/update doesn't abort [@TowyTowy](https://github.com/TowyTowy) ([#15681](https://github.com/community-scripts/ProxmoxVE/pull/15681))
-
-  - #### 🐞 Bug Fixes
-
-    - fix(fileflows): install .NET 10 ASP.NET Core Runtime to match current release [@TowyTowy](https://github.com/TowyTowy) ([#15702](https://github.com/community-scripts/ProxmoxVE/pull/15702))
-    - Fix spacing on VLAN Input Box in haos-vm.sh [@pumrum](https://github.com/pumrum) ([#15696](https://github.com/community-scripts/ProxmoxVE/pull/15696))
-
-### 💾 Core
-
-  - #### ✨ New Features
-
-    - [tools.func]: Add function to handle deployment via GitLab release tags [@tremor021](https://github.com/tremor021) ([#15641](https://github.com/community-scripts/ProxmoxVE/pull/15641))
-
-## 2026-07-10
-
-### 🆕 New Scripts
-
-  - Squid ([#15605](https://github.com/community-scripts/ProxmoxVE/pull/15605))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - Adapt to new artifact filename format for pocket id [@wollew](https://github.com/wollew) ([#15689](https://github.com/community-scripts/ProxmoxVE/pull/15689))
-    - Fireshare: Fix for install and upgrade to v1.7.3 [@tremor021](https://github.com/tremor021) ([#15673](https://github.com/community-scripts/ProxmoxVE/pull/15673))
-    - Endurain: Fix update procedure [@tremor021](https://github.com/tremor021) ([#15674](https://github.com/community-scripts/ProxmoxVE/pull/15674))
-
-## 2026-07-09
-
-### 🚀 Updated Scripts
-
-  - fix(pihole): repair Unbound DNS-over-TLS (DoT) forwarding config [@TowyTowy](https://github.com/TowyTowy) ([#15654](https://github.com/community-scripts/ProxmoxVE/pull/15654))
-
-## 2026-07-08
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - Opencloud: Bump version to 7.2.1 [@vhsdream](https://github.com/vhsdream) ([#15655](https://github.com/community-scripts/ProxmoxVE/pull/15655))
-    - BabyBuddy: Harden update script [@MickLesk](https://github.com/MickLesk) ([#15642](https://github.com/community-scripts/ProxmoxVE/pull/15642))
-
-## 2026-07-07
-
-### 🆕 New Scripts
-
-  - Forgejo-Runner ([#15046](https://github.com/community-scripts/ProxmoxVE/pull/15046))
-
-## 2026-07-06
-
-### 🚀 Updated Scripts
-
-  - Fix alignment in various ct end messages [@tremor021](https://github.com/tremor021) ([#15632](https://github.com/community-scripts/ProxmoxVE/pull/15632))
-- Immich: Update libvips to 8.18.4 [@vhsdream](https://github.com/vhsdream) ([#15619](https://github.com/community-scripts/ProxmoxVE/pull/15619))
-
-  - #### 🐞 Bug Fixes
-
-    - Wizarr: Build JS and CSS static assets [@vhsdream](https://github.com/vhsdream) ([#15634](https://github.com/community-scripts/ProxmoxVE/pull/15634))
-    - RustDesk Server: Update URL format in rustdeskserver.sh [@tremor021](https://github.com/tremor021) ([#15626](https://github.com/community-scripts/ProxmoxVE/pull/15626))
-    - attempt to port docker-vm to support arm64 [@asylumexp](https://github.com/asylumexp) ([#15611](https://github.com/community-scripts/ProxmoxVE/pull/15611))
-    - fix(plane): don't clobber global app var, breaking /usr/bin/update [@asylumexp](https://github.com/asylumexp) ([#15612](https://github.com/community-scripts/ProxmoxVE/pull/15612))
-
-  - #### 🔧 Refactor
-
-    - cliproxyapi: point setup message at /management.html [@austinpilz](https://github.com/austinpilz) ([#15628](https://github.com/community-scripts/ProxmoxVE/pull/15628))
-
-### 🗑️ Deleted Scripts
-
-  - Remove: FlowiseAI [@MickLesk](https://github.com/MickLesk) ([#15624](https://github.com/community-scripts/ProxmoxVE/pull/15624))
-
-## 2026-07-05
-
-### 🆕 New Scripts
-
-  - excalidash ([#15604](https://github.com/community-scripts/ProxmoxVE/pull/15604))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - fix: homarr: cli [@CrazyWolf13](https://github.com/CrazyWolf13) ([#15603](https://github.com/community-scripts/ProxmoxVE/pull/15603))
-    - immich: vacuum smart_search/face_search before VectorChord bump [@irishpadres](https://github.com/irishpadres) ([#15607](https://github.com/community-scripts/ProxmoxVE/pull/15607))
-
 ## 2026-07-04
 
 ### 🚀 Updated Scripts

CHANGELOG.md

@@ -74,9 +74,6 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
 
 
-
-
-
 
 
 
@@ -90,7 +87,7 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
 
 <details>
-<summary><h4>July (11 entries)</h4></summary>
+<summary><h4>July (4 entries)</h4></summary>
 
 [View July 2026 Changelog](.github/changelogs/2026/07.md)
 
@@ -502,43 +499,6 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
 </details>
 
-## 2026-07-12
-
-## 2026-07-11
-
-### 🆕 New Scripts
-
-  - LocalAGI ([#15687](https://github.com/community-scripts/ProxmoxVE/pull/15687))
-
-### 🚀 Updated Scripts
-
-  - fix(adventurelog): allow pnpm build scripts so install/update doesn't abort [@TowyTowy](https://github.com/TowyTowy) ([#15681](https://github.com/community-scripts/ProxmoxVE/pull/15681))
-
-  - #### 🐞 Bug Fixes
-
-    - fix(fileflows): install .NET 10 ASP.NET Core Runtime to match current release [@TowyTowy](https://github.com/TowyTowy) ([#15702](https://github.com/community-scripts/ProxmoxVE/pull/15702))
-    - Fix spacing on VLAN Input Box in haos-vm.sh [@pumrum](https://github.com/pumrum) ([#15696](https://github.com/community-scripts/ProxmoxVE/pull/15696))
-
-### 💾 Core
-
-  - #### ✨ New Features
-
-    - [tools.func]: Add function to handle deployment via GitLab release tags [@tremor021](https://github.com/tremor021) ([#15641](https://github.com/community-scripts/ProxmoxVE/pull/15641))
-
-## 2026-07-10
-
-### 🆕 New Scripts
-
-  - Squid ([#15605](https://github.com/community-scripts/ProxmoxVE/pull/15605))
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - Adapt to new artifact filename format for pocket id [@wollew](https://github.com/wollew) ([#15689](https://github.com/community-scripts/ProxmoxVE/pull/15689))
-    - Fireshare: Fix for install and upgrade to v1.7.3 [@tremor021](https://github.com/tremor021) ([#15673](https://github.com/community-scripts/ProxmoxVE/pull/15673))
-    - Endurain: Fix update procedure [@tremor021](https://github.com/tremor021) ([#15674](https://github.com/community-scripts/ProxmoxVE/pull/15674))
-
 ## 2026-07-09
 
 ### 🚀 Updated Scripts
@@ -1109,4 +1069,135 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
   - #### ✨ New Features
 
-    - [core] Implement backup and restore functions [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#15067](https://github.com/community-scripts/ProxmoxVE/pull/15067))
+    - [core] Implement backup and restore functions [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#15067](https://github.com/community-scripts/ProxmoxVE/pull/15067))
+
+## 2026-06-11
+
+### 🆕 New Scripts
+
+  - Clickhouse ([#15045](https://github.com/community-scripts/ProxmoxVE/pull/15045))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Manyfold: add new dependency [@MickLesk](https://github.com/MickLesk) ([#15040](https://github.com/community-scripts/ProxmoxVE/pull/15040))
+    - OpenArchiver: switch Rebuild Function [@MickLesk](https://github.com/MickLesk) ([#15042](https://github.com/community-scripts/ProxmoxVE/pull/15042))
+    - CLIProxyAPI: Save management password to creds file [@tremor021](https://github.com/tremor021) ([#15051](https://github.com/community-scripts/ProxmoxVE/pull/15051))
+    - Jotty: Fix wrong path test in config restore [@vhsdream](https://github.com/vhsdream) ([#15038](https://github.com/community-scripts/ProxmoxVE/pull/15038))
+    - Fix for cross-seed after node upgrade [@TorinFrancis](https://github.com/TorinFrancis) ([#15025](https://github.com/community-scripts/ProxmoxVE/pull/15025))
+
+  - #### 🔧 Refactor
+
+    - Alpine-Nextcloud: Upgrade PHP and dependencies in installation script [@MickLesk](https://github.com/MickLesk) ([#15039](https://github.com/community-scripts/ProxmoxVE/pull/15039))
+    - [arm64] porting stage 1: set script arm64 statuses to yes [@asylumexp](https://github.com/asylumexp) ([#15052](https://github.com/community-scripts/ProxmoxVE/pull/15052))
+
+### 💾 Core
+
+  - #### ✨ New Features
+
+    - misc scripts: add support for arm64 [@asylumexp](https://github.com/asylumexp) ([#12639](https://github.com/community-scripts/ProxmoxVE/pull/12639))
+
+  - #### 🔧 Refactor
+
+    - [arm64] remove logic for custom debian arm64 template [@asylumexp](https://github.com/asylumexp) ([#15050](https://github.com/community-scripts/ProxmoxVE/pull/15050))
+
+### 📚 Documentation
+
+  - (github): Revise script request template [@MickLesk](https://github.com/MickLesk) ([#15058](https://github.com/community-scripts/ProxmoxVE/pull/15058))
+
+## 2026-06-10
+
+### 🆕 New Scripts
+
+  - Baserow ([#14968](https://github.com/community-scripts/ProxmoxVE/pull/14968))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Koillection: Fix update procedure [@tremor021](https://github.com/tremor021) ([#15033](https://github.com/community-scripts/ProxmoxVE/pull/15033))
+
+## 2026-06-09
+
+### 🆕 New Scripts
+
+  - paperclip ([#14990](https://github.com/community-scripts/ProxmoxVE/pull/14990))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - endurain: Install pytz package during backend setup [@MickLesk](https://github.com/MickLesk) ([#15014](https://github.com/community-scripts/ProxmoxVE/pull/15014))
+
+  - #### 🔧 Refactor
+
+    - Refactor: Proxmox Backup Server - use deb822 [@MickLesk](https://github.com/MickLesk) ([#15013](https://github.com/community-scripts/ProxmoxVE/pull/15013))
+
+## 2026-06-08
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - security: Fix HTTP to HTTPS for all package and repository downloads [@MickLesk](https://github.com/MickLesk) ([#15009](https://github.com/community-scripts/ProxmoxVE/pull/15009))
+    - homelable: preserve MCP server config across updates [@ferr079](https://github.com/ferr079) ([#14996](https://github.com/community-scripts/ProxmoxVE/pull/14996))
+    - changedetection: migrate Python install to uv venv [@ferr079](https://github.com/ferr079) ([#14995](https://github.com/community-scripts/ProxmoxVE/pull/14995))
+
+  - #### 🔧 Refactor
+
+    - Update Flowwiseai to node 24 [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#14999](https://github.com/community-scripts/ProxmoxVE/pull/14999))
+
+### 🧰 Tools
+
+  - #### 🐞 Bug Fixes
+
+    - security: Fix MITM RCE vulnerability in microcode scripts (CVE) [@MickLesk](https://github.com/MickLesk) ([#15007](https://github.com/community-scripts/ProxmoxVE/pull/15007))
+
+## 2026-06-07
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Immich: use actual installed PostgreSQL version for vchord package [@MickLesk](https://github.com/MickLesk) ([#14989](https://github.com/community-scripts/ProxmoxVE/pull/14989))
+
+  - #### 🔧 Refactor
+
+    - Navidrome: remove genereic filebrowser addon setup [@MickLesk](https://github.com/MickLesk) ([#14991](https://github.com/community-scripts/ProxmoxVE/pull/14991))
+
+## 2026-06-06
+
+### 🆕 New Scripts
+
+  - Spliit ([#14966](https://github.com/community-scripts/ProxmoxVE/pull/14966))
+- Tolgee ([#14965](https://github.com/community-scripts/ProxmoxVE/pull/14965))
+- XYOps ([#14967](https://github.com/community-scripts/ProxmoxVE/pull/14967))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Photoprism: Allow env variables with spaces [@Badintral](https://github.com/Badintral) ([#14969](https://github.com/community-scripts/ProxmoxVE/pull/14969))
+
+## 2026-06-05
+
+### 🆕 New Scripts
+
+  - MatterJS-Server ([#14951](https://github.com/community-scripts/ProxmoxVE/pull/14951))
+- CyberChef ([#14952](https://github.com/community-scripts/ProxmoxVE/pull/14952))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Jackett: Create missing .env file [@tremor021](https://github.com/tremor021) ([#14959](https://github.com/community-scripts/ProxmoxVE/pull/14959))
+    - OpenThread-BR: use systemd instead of init.d [@tomfrenzel](https://github.com/tomfrenzel) ([#14942](https://github.com/community-scripts/ProxmoxVE/pull/14942))
+
+  - #### ✨ New Features
+
+    - AMD IGPU support [@Learath](https://github.com/Learath) ([#14944](https://github.com/community-scripts/ProxmoxVE/pull/14944))
+
+  - #### 💥 Breaking Changes
+
+    - update authentik to 2026.5.2 [@thieneret](https://github.com/thieneret) ([#14846](https://github.com/community-scripts/ProxmoxVE/pull/14846))

ct/adventurelog.sh

@@ -60,7 +60,6 @@ function update_script() {
     $STD .venv/bin/python -m manage migrate
 
     cd /opt/adventurelog/frontend
-    grep -q "^dangerouslyAllowAllBuilds:" ./pnpm-workspace.yaml 2>/dev/null || echo "dangerouslyAllowAllBuilds: true" >>./pnpm-workspace.yaml
     $STD pnpm i
     $STD pnpm build
     msg_ok "Updated AdventureLog"

ct/endurain.sh

@@ -34,22 +34,31 @@ function update_script() {
     systemctl stop endurain
     msg_ok "Stopped Service"
 
-    create_backup /opt/endurain/.env /opt/endurain/frontend/dist/env.js
+    msg_info "Creating Backup"
+    cp /opt/endurain/.env /opt/endurain.env
+    cp /opt/endurain/frontend/dist/env.js /opt/endurain.env.js
+    msg_ok "Created Backup"
+
     CLEAN_INSTALL=1 fetch_and_deploy_codeberg_release "endurain" "endurain-project/endurain" "tarball" "latest" "/opt/endurain"
 
     msg_info "Preparing Update"
     cd /opt/endurain
-    rm -rf /opt/endurain/{docs,example.env,screenshot_01.png} /opt/endurain/docker* /opt/endurain/*.yml
+    rm -rf \
+      /opt/endurain/{docs,example.env,screenshot_01.png} \
+      /opt/endurain/docker* \
+      /opt/endurain/*.yml
+    cp /opt/endurain.env /opt/endurain/.env
+    rm /opt/endurain.env
     msg_ok "Prepared Update"
 
     msg_info "Updating Frontend"
     cd /opt/endurain/frontend
     $STD npm ci
     $STD npm run build
+    cp /opt/endurain.env.js /opt/endurain/frontend/dist/env.js
+    rm /opt/endurain.env.js
     msg_ok "Updated Frontend"
 
-    restore_backup
-
     msg_info "Updating Backend"
     cd /opt/endurain/backend
     UV_VERSION=$(grep -Po 'required-version\s*=\s*"\K[^"]+' pyproject.toml 2>/dev/null || echo "0.11.18")

ct/fileflows.sh

@@ -43,28 +43,6 @@ function update_script() {
     tar -czf "$backup_filename" -C /opt/fileflows Data
     msg_ok "Backup Created"
 
-    # FileFlows tracks the latest release, whose .NET target can move (e.g. 8 -> 10);
-    # ensure the current ASP.NET Core Runtime so an existing install doesn't fail to
-    # start after updating to a newer .NET major version.
-    msg_info "Ensuring ASP.NET Core Runtime"
-    if [[ "$(arch_resolve)" == "arm64" ]]; then
-      if [[ ! -x /usr/lib/dotnet10/dotnet ]]; then
-        curl -fsSL https://dot.net/v1/dotnet-install.sh -o /tmp/dotnet-install.sh
-        $STD bash /tmp/dotnet-install.sh --channel 10.0 --runtime aspnetcore --install-dir /usr/lib/dotnet10
-        ln -sf /usr/lib/dotnet10/dotnet /usr/bin/dotnet
-        rm -f /tmp/dotnet-install.sh
-      fi
-    elif ! is_package_installed "aspnetcore-runtime-10.0"; then
-      $STD apt remove -y aspnetcore-runtime-8.0 aspnetcore-runtime-9.0 2>/dev/null || true
-      setup_deb822_repo \
-        "microsoft" \
-        "https://packages.microsoft.com/keys/microsoft-2025.asc" \
-        "https://packages.microsoft.com/debian/13/prod/" \
-        "trixie"
-      $STD apt install -y aspnetcore-runtime-10.0
-    fi
-    msg_ok "Ensured ASP.NET Core Runtime"
-
     fetch_and_deploy_from_url "https://fileflows.com/downloads/zip" "/opt/fileflows"
 
     msg_info "Starting Service"

ct/fireshare.sh

@@ -35,22 +35,12 @@ function update_script() {
     systemctl stop fireshare
     msg_ok "Stopped Service"
 
-    create_backup /opt/fireshare/fireshare.env
+    mv /opt/fireshare/fireshare.env /opt
     CLEAN_INSTALL=1 fetch_and_deploy_gh_release "fireshare" "ShaneIsrael/fireshare" "tarball"
-    restore_backup
+    mv /opt/fireshare.env /opt/fireshare
     rm -f /usr/local/bin/fireshare
 
-    if ! grep -q "__FIRESHARE_PORT__" /etc/nginx/nginx.conf; then
+    msg_info "Updating Fireshare"
-      cp /opt/fireshare/app/nginx/prod.conf /etc/nginx/nginx.conf
-      sed -i 's|root /processed/|root /opt/fireshare-processed/|g' /etc/nginx/nginx.conf
-      sed -i 's/^user[[:space:]]\+nginx;/user  root;/' /etc/nginx/nginx.conf
-      sed -i 's|root[[:space:]]\+/app/build;|root /opt/fireshare/app/client/build;|' /etc/nginx/nginx.conf
-      sed -i 's/__FIRESHARE_PORT__/80/g' /etc/nginx/nginx.conf
-      cp /opt/fireshare/app/nginx/error.html /etc/nginx/
-      cp /opt/fireshare/app/nginx/api_unavailable.html /etc/nginx/
-    fi
-    msg_info "Configuring Fireshare"
-
     cd /opt/fireshare
     $STD uv venv --clear
     $STD .venv/bin/python -m ensurepip --upgrade
@@ -63,10 +53,13 @@ function update_script() {
     export VIDEO_DIRECTORY=/opt/fireshare-videos
     export PROCESSED_DIRECTORY=/opt/fireshare-processed
     $STD uv run flask db upgrade
+
+    msg_info "Building Fireshare Client"
     cd /opt/fireshare/app/client
     $STD npm install
     $STD npm run build
-    msg_ok "Configured Fireshare"
+    msg_ok "Built Fireshare Client"
+    msg_ok "Updated Fireshare"
 
     msg_info "Starting Service"
     systemctl start fireshare

ct/headers/localagi

@@ -1,6 +0,0 @@
-    __                     _____   __________
-   / /   ____  _________ _/ /   | / ____/  _/
-  / /   / __ \/ ___/ __ `/ / /| |/ / __ / /  
- / /___/ /_/ / /__/ /_/ / / ___ / /_/ // /   
-/_____/\____/\___/\__,_/_/_/  |_\____/___/   
-                                             

ct/headers/squid

@@ -1,6 +0,0 @@
-   _____             _     __
-  / ___/____ ___  __(_)___/ /
-  \__ \/ __ `/ / / / / __  / 
- ___/ / /_/ / /_/ / / /_/ /  
-/____/\__, /\__,_/_/\__,_/   
-        /_/                  

ct/localagi.sh

@@ -1,67 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: BillyOutlast
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/mudler/LocalAGI
-
-APP="LocalAGI"
-var_tags="${var_tags:-ai}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-4096}"
-var_disk="${var_disk:-20}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_arm64="${var_arm64:-no}"
-var_unprivileged="${var_unprivileged:-1}"
-var_gpu="${var_gpu:-no}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -d /opt/localagi ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "localagi" "mudler/LocalAGI"; then
-    msg_info "Stopping Service"
-    systemctl stop localagi
-    msg_ok "Stopped Service"
-
-    create_backup /opt/localagi/.env
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "localagi" "mudler/LocalAGI" "tarball" "latest" "/opt/localagi"
-    restore_backup
-
-    msg_info "Building LocalAGI"
-    cd /opt/localagi/webui/react-ui
-    $STD bun install
-    $STD bun run build
-    cd /opt/localagi
-    $STD go build -o /usr/local/bin/localagi
-    msg_ok "Updated LocalAGI successfully"
-
-    msg_info "Starting Service"
-    systemctl start localagi
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-    exit
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}:3000${CL}"

ct/pocketid.sh

@@ -71,7 +71,7 @@ function update_script() {
       cp /opt/pocket-id/.env /opt/env
     fi
 
-    fetch_and_deploy_gh_release "pocket-id" "pocket-id/pocket-id" "singlefile" "latest" "/opt/pocket-id/" "pocket-id_linux_$(arch_resolve)"
+    fetch_and_deploy_gh_release "pocket-id" "pocket-id/pocket-id" "singlefile" "latest" "/opt/pocket-id/" "pocket-id-linux-$(arch_resolve)"
     mv /opt/env /opt/pocket-id/.env
 
     msg_info "Starting Service"

ct/squid.sh

@@ -1,53 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: 007hacky007
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://www.squid-cache.org/
-
-APP="Squid"
-var_tags="${var_tags:-proxy}"
-var_cpu="${var_cpu:-1}"
-var_ram="${var_ram:-512}"
-var_disk="${var_disk:-4}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_arm64="${var_arm64:-yes}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-  if [[ ! -f /etc/squid/squid.conf ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-  msg_info "Updating Squid"
-  $STD apt update
-  $STD apt upgrade -y
-  msg_ok "Updated Squid"
-
-  msg_info "Validating Squid Configuration"
-  $STD squid -k parse
-  msg_ok "Validated Squid Configuration"
-
-  msg_info "Restarting Squid"
-  systemctl restart squid
-  msg_ok "Restarted Squid"
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Proxy endpoint:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}${IP}:3128${CL}"

install/adventurelog-install.sh

@@ -72,7 +72,6 @@ BODY_SIZE_LIMIT=Infinity
 ORIGIN='http://$LOCAL_IP:3000'
 EOF
 cd /opt/adventurelog/frontend
-grep -q "^dangerouslyAllowAllBuilds:" ./pnpm-workspace.yaml 2>/dev/null || echo "dangerouslyAllowAllBuilds: true" >>./pnpm-workspace.yaml
 $STD pnpm i
 $STD pnpm build
 msg_ok "Installed AdventureLog"

install/fileflows-install.sh

@@ -26,8 +26,8 @@ msg_info "Installing ASP.NET Core Runtime"
 if [[ "$(arch_resolve)" == "arm64" ]]; then
   # packages.microsoft.com only ships amd64 debs for Debian; use dotnet-install on arm64
   curl -fsSL https://dot.net/v1/dotnet-install.sh -o /tmp/dotnet-install.sh
-  $STD bash /tmp/dotnet-install.sh --channel 10.0 --runtime aspnetcore --install-dir /usr/lib/dotnet10
+  $STD bash /tmp/dotnet-install.sh --channel 8.0 --runtime aspnetcore --install-dir /usr/lib/dotnet8
-  ln -sf /usr/lib/dotnet10/dotnet /usr/bin/dotnet
+  ln -sf /usr/lib/dotnet8/dotnet /usr/bin/dotnet
   rm -f /tmp/dotnet-install.sh
 else
   setup_deb822_repo \
@@ -35,7 +35,7 @@ else
     "https://packages.microsoft.com/keys/microsoft-2025.asc" \
     "https://packages.microsoft.com/debian/13/prod/" \
     "trixie"
-  $STD apt install -y aspnetcore-runtime-10.0
+  $STD apt install -y aspnetcore-runtime-8.0
 fi
 msg_ok "Installed ASP.NET Core Runtime"
 

install/fireshare-install.sh

@@ -141,9 +141,6 @@ cp /opt/fireshare/app/nginx/prod.conf /etc/nginx/nginx.conf
 sed -i 's|root /processed/|root /opt/fireshare-processed/|g' /etc/nginx/nginx.conf
 sed -i 's/^user[[:space:]]\+nginx;/user  root;/' /etc/nginx/nginx.conf
 sed -i 's|root[[:space:]]\+/app/build;|root /opt/fireshare/app/client/build;|' /etc/nginx/nginx.conf
-sed -i 's/__FIRESHARE_PORT__/80/g' /etc/nginx/nginx.conf
-cp /opt/fireshare/app/nginx/error.html /etc/nginx/
-cp /opt/fireshare/app/nginx/api_unavailable.html /etc/nginx/
 systemctl start nginx
 
 cat <<EOF >~/fireshare.creds

install/localagi-install.sh

@@ -1,75 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: BillyOutlast
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/mudler/LocalAGI
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-APP="LocalAGI"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y build-essential
-msg_ok "Installed Dependencies"
-
-NODE_VERSION="24" setup_nodejs
-setup_go
-
-msg_info "Installing Bun"
-export BUN_INSTALL="/root/.bun"
-curl -fsSL https://bun.sh/install | $STD bash
-ln -sf /root/.bun/bin/bun /usr/local/bin/bun
-ln -sf /root/.bun/bin/bunx /usr/local/bin/bunx
-msg_ok "Installed Bun"
-
-fetch_and_deploy_gh_release "localagi" "mudler/LocalAGI" "tarball" "latest" "/opt/localagi"
-
-msg_info "Configuring LocalAGI"
-mkdir -p /opt/localagi/pool
-cat <<'EOF' >/opt/localagi/.env
-LOCALAGI_MODEL=gemma-3-4b-it-qat
-LOCALAGI_MULTIMODAL_MODEL=moondream2-20250414
-LOCALAGI_IMAGE_MODEL=sd-1.5-ggml
-LOCALAGI_LLM_API_URL=http://127.0.0.1:11434/v1
-LOCALAGI_STATE_DIR=/opt/localagi/pool
-EOF
-msg_ok "Configured LocalAGI"
-
-msg_info "Setting up LocalAGI"
-cd /opt/localagi/webui/react-ui
-$STD bun install
-$STD bun run build
-cd /opt/localagi
-$STD go build -o /usr/local/bin/localagi
-msg_ok "Set up LocalAGI"
-
-msg_info "Creating LocalAGI systemd service"
-cat <<EOF >/etc/systemd/system/localagi.service
-[Unit]
-Description=LocalAGI
-After=network.target
-
-[Service]
-User=root
-Type=simple
-EnvironmentFile=/opt/localagi/.env
-
-WorkingDirectory=/opt/localagi
-ExecStart=/usr/local/bin/localagi
-Restart=on-failure
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now localagi
-msg_ok "Created LocalAGI systemd service"
-
-motd_ssh
-customize
-cleanup_lxc

install/pocketid-install.sh

@@ -14,7 +14,7 @@ network_check
 update_os
 
 read -r -p "${TAB3}What public URL do you want to use (e.g. pocketid.mydomain.com)? " public_url
-fetch_and_deploy_gh_release "pocket-id" "pocket-id/pocket-id" "singlefile" "latest" "/opt/pocket-id/" "pocket-id_linux_$(arch_resolve)"
+fetch_and_deploy_gh_release "pocket-id" "pocket-id/pocket-id" "singlefile" "latest" "/opt/pocket-id/" "pocket-id-linux-$(arch_resolve)"
 
 msg_info "Configuring Pocket ID"
 ENCRYPTION_KEY=$(openssl rand -base64 32)

install/squid-install.sh

@@ -1,88 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: 007hacky007
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://www.squid-cache.org/
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Configuring Squid"
-mkdir -p /etc/squid
-cat <<EOF >/etc/squid/squid.conf
-acl localnet src 0.0.0.1-0.255.255.255
-acl localnet src 10.0.0.0/8
-acl localnet src 100.64.0.0/10
-acl localnet src 169.254.0.0/16
-acl localnet src 172.16.0.0/12
-acl localnet src 192.168.0.0/16
-acl localnet src fc00::/7
-acl localnet src fe80::/10
-
-acl SSL_ports port 443
-acl Safe_ports port 80
-acl Safe_ports port 21
-acl Safe_ports port 443
-acl Safe_ports port 70
-acl Safe_ports port 210
-acl Safe_ports port 1025-65535
-acl Safe_ports port 280
-acl Safe_ports port 488
-acl Safe_ports port 591
-acl Safe_ports port 777
-acl CONNECT method CONNECT
-
-http_access deny !Safe_ports
-http_access deny CONNECT !SSL_ports
-http_access allow localhost manager
-http_access deny manager
-
-auth_param basic program /usr/lib/squid/basic_ncsa_auth /etc/squid/passwords
-auth_param basic realm proxy
-acl authenticated proxy_auth REQUIRED
-http_access allow authenticated
-http_access deny all
-
-http_port 3128
-
-coredump_dir /var/spool/squid
-
-refresh_pattern ^ftp:        1440    20%    10080
-refresh_pattern ^gopher:     1440    0%     1440
-refresh_pattern -i (/cgi-bin/|\\?) 0  0%     0
-refresh_pattern .            0       20%    4320
-
-# Privacy / hardening
-httpd_suppress_version_string on
-visible_hostname $(hostname)
-forwarded_for delete
-request_header_access X-Forwarded-For deny all
-EOF
-msg_ok "Configured Squid"
-
-msg_info "Installing Dependencies"
-$STD apt install -y \
-  squid \
-  apache2-utils
-msg_ok "Installed Dependencies"
-
-msg_info "Configuring Squid Authentication"
-touch /etc/squid/passwords
-chown proxy:proxy /etc/squid/passwords
-chmod 640 /etc/squid/passwords
-$STD squid -k parse
-msg_ok "Configured Squid Authentication"
-
-msg_info "Starting Service"
-systemctl enable -q --now squid
-msg_ok "Started Service"
-
-motd_ssh
-customize
-cleanup_lxc

misc/tools.func

@@ -125,67 +125,6 @@ curl_with_retry() {
   fi
 }
 
-# ------------------------------------------------------------------------------
-# Robust curl wrapper for API calls (returns HTTP code + body)
-#
-# Usage:
-#   response=$(curl_api_with_retry "https://api.github.com/repos/owner/repo/releases/latest")
-#   http_code=$(curl_api_with_retry "https://api.github.com/..." "/tmp/body.json")
-#
-# Parameters:
-#   $1 - URL to call
-#   $2 - (optional) Output file for body (default: stdout)
-#   $3 - (optional) Additional curl options as string
-#
-# Returns: HTTP status code, body in file or stdout
-# ------------------------------------------------------------------------------
-curl_api_with_retry() {
-  local url="$1"
-  local body_file="${2:-}"
-  local extra_opts="${3:-}"
-  local retries="${CURL_RETRIES:-3}"
-  local timeout="${CURL_TIMEOUT:-60}"
-  local connect_timeout="${CURL_CONNECT_TO:-10}"
-
-  local attempt=1
-  local http_code=""
-
-  while [[ $attempt -le $retries ]]; do
-    debug_log "curl API attempt $attempt/$retries: $url"
-
-    local curl_cmd="curl -fsSL --connect-timeout $connect_timeout --max-time $timeout -w '%{http_code}'"
-    [[ -n "$extra_opts" ]] && curl_cmd="$curl_cmd $extra_opts"
-
-    if [[ -n "$body_file" ]]; then
-      http_code=$($curl_cmd -o "$body_file" "$url" 2>/dev/null) || true
-    else
-      # Capture body and http_code separately
-      local tmp_body="/tmp/curl_api_body_$$"
-      http_code=$($curl_cmd -o "$tmp_body" "$url" 2>/dev/null) || true
-      if [[ -f "$tmp_body" ]]; then
-        cat "$tmp_body"
-        rm -f "$tmp_body"
-      fi
-    fi
-
-    # Success on 2xx codes
-    if [[ "$http_code" =~ ^2[0-9]{2}$ ]]; then
-      debug_log "curl API successful: $url (HTTP $http_code)"
-      echo "$http_code"
-      return 0
-    fi
-
-    debug_log "curl API attempt $attempt failed (HTTP $http_code, timeout=${timeout}s), waiting ${attempt}s..."
-    sleep "$attempt"
-    # Double --max-time on each retry so slow connections can finish
-    timeout=$((timeout * 2))
-    ((attempt++))
-  done
-
-  debug_log "curl API FAILED after $retries attempts: $url"
-  echo "$http_code"
-  return 7
-}
 
 # ------------------------------------------------------------------------------
 # Download and install GPG key with retry logic and validation
@@ -317,15 +256,6 @@ cache_installed_version() {
   echo "$version" >"/var/cache/app-versions/${app}_version.txt"
 }
 
-get_cached_version() {
-  local app="$1"
-  mkdir -p /var/cache/app-versions
-  if [[ -f "/var/cache/app-versions/${app}_version.txt" ]]; then
-    cat "/var/cache/app-versions/${app}_version.txt"
-    return 0
-  fi
-  return 1
-}
 
 # ------------------------------------------------------------------------------
 # Clean up ALL keyring locations for a tool (unified helper)
@@ -1642,14 +1572,6 @@ codeberg_api_call() {
   return 22
 }
 
-should_upgrade() {
-  local current="$1"
-  local target="$2"
-
-  [[ -z "$current" ]] && return 0
-  version_gt "$target" "$current" && return 0
-  return 1
-}
 
 # ------------------------------------------------------------------------------
 # Get OS information (cached for performance)
@@ -1802,200 +1724,6 @@ get_fallback_suite() {
   return 0
 }
 
-# ------------------------------------------------------------------------------
-# Verify package source and version
-# ------------------------------------------------------------------------------
-verify_package_source() {
-  local package="$1"
-  local expected_version="$2"
-
-  if apt-cache policy "$package" 2>/dev/null | grep -q "$expected_version"; then
-    return 0
-  fi
-  return 1
-}
-
-# ------------------------------------------------------------------------------
-# Check if running on LTS version
-# ------------------------------------------------------------------------------
-is_lts_version() {
-  local os_id=$(get_os_info id)
-  local codename=$(get_os_info codename)
-
-  if [[ "$os_id" == "ubuntu" ]]; then
-    case "$codename" in
-    focal | jammy | noble) return 0 ;; # 20.04, 22.04, 24.04
-    *) return 1 ;;
-    esac
-  elif [[ "$os_id" == "debian" ]]; then
-    # Debian releases are all "stable"
-    case "$codename" in
-    bullseye | bookworm | trixie) return 0 ;;
-    *) return 1 ;;
-    esac
-  fi
-
-  return 1
-}
-
-# ------------------------------------------------------------------------------
-# Get optimal number of parallel jobs (cached)
-# Features:
-#   - CPU count detection
-#   - Memory-based limiting (1.5GB per job for safety)
-#   - Current load awareness
-#   - Container/VM detection for conservative limits
-# ------------------------------------------------------------------------------
-get_parallel_jobs() {
-  if [[ -z "${_PARALLEL_JOBS:-}" ]]; then
-    local cpu_count
-    cpu_count=$(nproc 2>/dev/null || grep -c ^processor /proc/cpuinfo 2>/dev/null || echo 1)
-
-    local mem_mb
-    mem_mb=$(free -m 2>/dev/null | awk '/^Mem:/{print $2}' || echo 1024)
-
-    # Assume 1.5GB per compilation job for safety margin
-    local max_by_mem=$((mem_mb / 1536))
-    ((max_by_mem < 1)) && max_by_mem=1
-
-    # Check current system load - reduce jobs if already loaded
-    local load_1m
-    load_1m=$(awk '{print int($1)}' /proc/loadavg 2>/dev/null || echo 0)
-    local available_cpus=$((cpu_count - load_1m))
-    ((available_cpus < 1)) && available_cpus=1
-
-    # Take minimum of: available CPUs, memory-limited, and total CPUs
-    local max_jobs=$cpu_count
-    ((max_by_mem < max_jobs)) && max_jobs=$max_by_mem
-    ((available_cpus < max_jobs)) && max_jobs=$available_cpus
-
-    # Container detection - be more conservative in containers
-    if [[ -f /.dockerenv ]] || grep -q 'lxc\|docker\|container' /proc/1/cgroup 2>/dev/null; then
-      # Reduce by 25% in containers to leave headroom
-      max_jobs=$((max_jobs * 3 / 4))
-      ((max_jobs < 1)) && max_jobs=1
-    fi
-
-    # Final bounds check
-    ((max_jobs < 1)) && max_jobs=1
-    ((max_jobs > cpu_count)) && max_jobs=$cpu_count
-
-    export _PARALLEL_JOBS=$max_jobs
-    debug_log "Parallel jobs: $_PARALLEL_JOBS (CPUs: $cpu_count, mem-limit: $max_by_mem, load: $load_1m)"
-  fi
-  echo "$_PARALLEL_JOBS"
-}
-
-# ------------------------------------------------------------------------------
-# Get default PHP version for OS
-# Updated for latest distro releases
-# ------------------------------------------------------------------------------
-get_default_php_version() {
-  local os_id
-  os_id=$(get_os_info id)
-  local os_version
-  os_version=$(get_os_version_major)
-
-  case "$os_id" in
-  debian)
-    case "$os_version" in
-    14) echo "8.4" ;; # Debian 14 (Forky) - future
-    13) echo "8.3" ;; # Debian 13 (Trixie)
-    12) echo "8.2" ;; # Debian 12 (Bookworm)
-    11) echo "7.4" ;; # Debian 11 (Bullseye)
-    *) echo "8.3" ;;  # Default to latest stable
-    esac
-    ;;
-  ubuntu)
-    case "$os_version" in
-    26) echo "8.4" ;; # Ubuntu 26.04 - future
-    24) echo "8.3" ;; # Ubuntu 24.04 LTS (Noble)
-    22) echo "8.1" ;; # Ubuntu 22.04 LTS (Jammy)
-    20) echo "7.4" ;; # Ubuntu 20.04 LTS (Focal)
-    *) echo "8.3" ;;  # Default to latest stable
-    esac
-    ;;
-  *)
-    echo "8.3"
-    ;;
-  esac
-}
-
-# ------------------------------------------------------------------------------
-# Get default Python version for OS
-# Updated for latest distro releases
-# ------------------------------------------------------------------------------
-get_default_python_version() {
-  local os_id
-  os_id=$(get_os_info id)
-  local os_version
-  os_version=$(get_os_version_major)
-
-  case "$os_id" in
-  debian)
-    case "$os_version" in
-    14) echo "3.13" ;; # Debian 14 (Forky) - future
-    13) echo "3.12" ;; # Debian 13 (Trixie)
-    12) echo "3.11" ;; # Debian 12 (Bookworm)
-    11) echo "3.9" ;;  # Debian 11 (Bullseye)
-    *) echo "3.12" ;;  # Default to latest stable
-    esac
-    ;;
-  ubuntu)
-    case "$os_version" in
-    26) echo "3.13" ;; # Ubuntu 26.04 - future
-    24) echo "3.12" ;; # Ubuntu 24.04 LTS
-    22) echo "3.10" ;; # Ubuntu 22.04 LTS
-    20) echo "3.8" ;;  # Ubuntu 20.04 LTS
-    *) echo "3.12" ;;  # Default to latest stable
-    esac
-    ;;
-  *)
-    echo "3.12"
-    ;;
-  esac
-}
-
-# ------------------------------------------------------------------------------
-# Get default Node.js LTS version
-# ------------------------------------------------------------------------------
-get_default_nodejs_version() {
-  # Current LTS as of January 2026 (Node.js 24 LTS)
-  echo "24"
-}
-
-# ------------------------------------------------------------------------------
-# Check if package manager is locked
-# ------------------------------------------------------------------------------
-is_apt_locked() {
-  if fuser /var/lib/dpkg/lock-frontend &>/dev/null ||
-    fuser /var/lib/apt/lists/lock &>/dev/null ||
-    fuser /var/cache/apt/archives/lock &>/dev/null; then
-    return 0
-  fi
-  return 1
-}
-
-# ------------------------------------------------------------------------------
-# Wait for apt to be available
-# ------------------------------------------------------------------------------
-wait_for_apt() {
-  local max_wait="${1:-300}" # 5 minutes default
-  local waited=0
-
-  while is_apt_locked; do
-    if [[ $waited -ge $max_wait ]]; then
-      msg_error "Timeout waiting for apt to be available"
-      msg_error "Hint: Another process (apt, dpkg, unattended-upgrades) may hold a lock. Check: ps aux | grep -E 'apt|dpkg'"
-      return 100
-    fi
-
-    sleep 5
-    waited=$((waited + 5))
-  done
-
-  return 0
-}
 
 # ------------------------------------------------------------------------------
 # Cleanup old repository files (migration helper)
@@ -2198,22 +1926,6 @@ setup_deb822_repo() {
   fi
 }
 
-# ------------------------------------------------------------------------------
-# Package version hold/unhold helpers
-# ------------------------------------------------------------------------------
-hold_package_version() {
-  local package="$1"
-  $STD apt-mark hold "$package" || {
-    msg_warn "Failed to hold package version: ${package}"
-  }
-}
-
-unhold_package_version() {
-  local package="$1"
-  $STD apt-mark unhold "$package" || {
-    msg_warn "Failed to unhold package version: ${package}"
-  }
-}
 
 # ------------------------------------------------------------------------------
 # Safe service restart with verification
@@ -2259,41 +1971,6 @@ safe_service_restart() {
   return 150
 }
 
-# ------------------------------------------------------------------------------
-# Enable and start service (with error handling)
-# ------------------------------------------------------------------------------
-enable_and_start_service() {
-  local service="$1"
-
-  if ! systemctl enable "$service" &>/dev/null; then
-    msg_error "Failed to enable service: $service"
-    return 150
-  fi
-
-  if ! systemctl start "$service" &>/dev/null; then
-    msg_error "Failed to start $service"
-    systemctl status "$service" --no-pager
-    return 150
-  fi
-
-  return 0
-}
-
-# ------------------------------------------------------------------------------
-# Check if service is enabled
-# ------------------------------------------------------------------------------
-is_service_enabled() {
-  local service="$1"
-  systemctl is-enabled --quiet "$service" 2>/dev/null
-}
-
-# ------------------------------------------------------------------------------
-# Check if service is running
-# ------------------------------------------------------------------------------
-is_service_running() {
-  local service="$1"
-  systemctl is-active --quiet "$service" 2>/dev/null
-}
 
 # ------------------------------------------------------------------------------
 # Extract version from JSON (GitHub releases)
@@ -2439,42 +2116,6 @@ get_latest_codeberg_release() {
   echo "$version"
 }
 
-# ------------------------------------------------------------------------------
-# Debug logging - using main debug_log function (line 40)
-# Supports both TOOLS_DEBUG and DEBUG environment variables
-# ------------------------------------------------------------------------------
-
-# ------------------------------------------------------------------------------
-# Performance timing helper
-# ------------------------------------------------------------------------------
-start_timer() {
-  echo $(date +%s)
-}
-
-end_timer() {
-  local start_time="$1"
-  local label="${2:-Operation}"
-  local end_time=$(date +%s)
-  local duration=$((end_time - start_time))
-}
-
-# ------------------------------------------------------------------------------
-# GPG key fingerprint verification
-# ------------------------------------------------------------------------------
-verify_gpg_fingerprint() {
-  local key_file="$1"
-  local expected_fingerprint="$2"
-
-  local actual_fingerprint
-  actual_fingerprint=$(gpg --show-keys --with-fingerprint --with-colons "$key_file" 2>&1 | grep -m1 '^fpr:' | cut -d: -f10)
-
-  if [[ "$actual_fingerprint" == "$expected_fingerprint" ]]; then
-    return 0
-  fi
-
-  msg_error "GPG fingerprint mismatch! Expected: $expected_fingerprint, Got: $actual_fingerprint"
-  return 65
-}
 
 # ------------------------------------------------------------------------------
 # Fetches and deploys a GitHub tag-based source tarball.
@@ -2559,199 +2200,6 @@ fetch_and_deploy_gh_tag() {
   return 0
 }
 
-# ------------------------------------------------------------------------------
-# Get the latest GitLab repository tag matching a glob pattern.
-#
-# Description:
-#   - Queries the GitLab repository tags API (up to 100 tags per page)
-#   - Filters tag names against a shell glob pattern (e.g. "web-v*" or "mobile-v*")
-#   - Always excludes pre-release tags (those containing alpha, beta, or rc)
-#   - Sorts matching tags with `sort -V` and returns the highest one
-#   - Supports GITLAB_TOKEN for private/rate-limited projects
-#
-# Usage:
-#     get_latest_gl_tag "owner/repo" "web-v*"
-#     get_latest_gl_tag "owner/repo" "mobile-v*"
-#     get_latest_gl_tag "owner/repo"          # returns newest tag (no filter)
-#
-# Arguments:
-#   $1 - GitLab repo path (namespace/project, e.g. "mygroup/myapp")
-#   $2 - Optional glob pattern to filter tag names (e.g. "web-v*")
-#
-# Returns:
-#   Latest matching tag name on stdout, or non-zero on failure
-# ------------------------------------------------------------------------------
-get_latest_gl_tag() {
-  local repo="$1"
-  local pattern="${2:-}"
-
-  local repo_encoded
-  repo_encoded=$(printf '%s' "$repo" | sed 's|/|%2F|g')
-
-  local api_base="https://gitlab.com/api/v4/projects/${repo_encoded}/repository/tags"
-  local api_timeout="--connect-timeout 10 --max-time 60"
-
-  local header=()
-  [[ -n "${GITLAB_TOKEN:-}" ]] && header=(-H "PRIVATE-TOKEN: $GITLAB_TOKEN")
-
-  # If a pattern is given, pass it as a regex search to reduce server-side results.
-  # GitLab ?search= supports anchored regex; convert leading glob prefix to regex anchor.
-  local search_param=""
-  if [[ -n "$pattern" ]]; then
-    # Strip trailing wildcard for the search hint (server-side prefix filter).
-    local prefix="${pattern%%\**}"
-    [[ -n "$prefix" ]] && search_param="?search=^${prefix}&per_page=100" || search_param="?per_page=100"
-  else
-    search_param="?per_page=100"
-  fi
-
-  local temp_file
-  temp_file=$(mktemp) || return 1
-
-  local http_code
-  http_code=$(curl $api_timeout -sSL -w "%{http_code}" -o "$temp_file" \
-    "${header[@]}" "${api_base}${search_param}" 2>/dev/null) || true
-
-  if [[ "$http_code" != "200" ]]; then
-    rm -f "$temp_file"
-    msg_error "GitLab tags API returned HTTP $http_code for $repo"
-    return 22
-  fi
-
-  local tag=""
-  if [[ -n "$pattern" ]]; then
-    # Client-side glob filter + pre-release exclusion, then version-sort to pick the highest match.
-    tag=$(jq -r '.[].name' "$temp_file" 2>/dev/null | while IFS= read -r t; do
-      case "$t" in
-      *alpha* | *beta* | *rc*) continue ;;
-      $pattern) echo "$t" ;;
-      esac
-    done | sort -V | tail -n1)
-  else
-    # No pattern: skip pre-release tags, take the first remaining (newest) one.
-    tag=$(jq -r '.[].name' "$temp_file" 2>/dev/null |
-      grep -Eiv '(alpha|beta|rc)' |
-      head -n1)
-  fi
-
-  rm -f "$temp_file"
-
-  if [[ -z "$tag" ]]; then
-    msg_error "No tags matching '${pattern:-*}' found for ${repo}"
-    return 250
-  fi
-
-  echo "$tag"
-}
-
-# ------------------------------------------------------------------------------
-# Fetches and deploys a GitLab tag-based source tarball.
-#
-# Description:
-#   - Resolves the latest tag matching the given glob pattern via get_latest_gl_tag
-#     (or uses the exact tag if one is provided instead of "latest")
-#   - Downloads the GitLab source tarball for that tag
-#   - Extracts it to the target directory
-#   - Writes the resolved tag to ~/.<app> for update-checking
-#
-# Usage:
-#     fetch_and_deploy_gl_tag "myapp" "mygroup/myrepo" "web-v*"
-#     fetch_and_deploy_gl_tag "myapp" "mygroup/myrepo" "mobile-v*" "/opt/myapp"
-#     fetch_and_deploy_gl_tag "myapp" "mygroup/myrepo" "v*"          # any v-tag
-#     fetch_and_deploy_gl_tag "myapp" "mygroup/myrepo" "web-v3.0*"   # narrow version range
-#
-# Arguments:
-#   $1 - App name (used for version file ~/.<app> and lowercase tarball name)
-#   $2 - GitLab repo path (namespace/project, e.g. "mygroup/myapp")
-#   $3 - Tag pattern: glob (e.g. "web-v*") or exact tag (e.g. "web-v3.0.0").
-#        Use "latest" to fetch the single newest tag with no pattern filter.
-#   $4 - Target directory (default: /opt/$app)
-#
-# Notes:
-#   - Supports CLEAN_INSTALL=1 to wipe target before extracting
-#   - Supports GITLAB_TOKEN for private/rate-limited projects
-#   - For repos that only publish tags, not formal GitLab Releases
-#     (use fetch_and_deploy_gl_release for proper Releases with assets)
-# ------------------------------------------------------------------------------
-fetch_and_deploy_gl_tag() {
-  local app="$1"
-  local repo="$2"
-  local tag_pattern="${3:-latest}"
-  local target="${4:-/opt/$app}"
-
-  local app_lc=""
-  app_lc="$(echo "${app,,}" | tr -d ' ')"
-  local version_file="$HOME/.${app_lc}"
-
-  local api_timeout="--connect-timeout 10 --max-time 60"
-  local download_timeout="--connect-timeout 15 --max-time 900"
-
-  local header=()
-  [[ -n "${GITLAB_TOKEN:-}" ]] && header=(-H "PRIVATE-TOKEN: $GITLAB_TOKEN")
-
-  # Resolve the tag: if caller passed a glob/latest, query the API.
-  # If caller passed an exact tag (no wildcards), use it directly.
-  local resolved_tag="$tag_pattern"
-  if [[ "$tag_pattern" == "latest" || "$tag_pattern" == *"*"* || "$tag_pattern" == *"?"* ]]; then
-    local glob_arg=""
-    [[ "$tag_pattern" != "latest" ]] && glob_arg="$tag_pattern"
-    resolved_tag=$(get_latest_gl_tag "$repo" "$glob_arg") || {
-      msg_error "Failed to determine latest tag matching '${tag_pattern}' for ${repo}"
-      return 250
-    }
-  fi
-
-  local current_version=""
-  [[ -f "$version_file" ]] && current_version=$(<"$version_file")
-
-  if [[ "$current_version" == "$resolved_tag" ]]; then
-    msg_ok "$app is already up-to-date ($resolved_tag)"
-    return 0
-  fi
-
-  local repo_encoded
-  repo_encoded=$(printf '%s' "$repo" | sed 's|/|%2F|g')
-
-  # GitLab source tarball URL (no release needed, works for any tag).
-  local version_safe="${resolved_tag//\//-}"
-  local tarball_url="https://gitlab.com/${repo}/-/archive/${resolved_tag}/${app_lc}-${version_safe}.tar.gz"
-
-  local tmpdir
-  tmpdir=$(mktemp -d) || return 1
-  local filename="${app_lc}-${version_safe}.tar.gz"
-
-  msg_info "Fetching GitLab tag: ${app} (${resolved_tag})"
-
-  curl $download_timeout -fsSL "${header[@]}" -o "$tmpdir/$filename" "$tarball_url" || {
-    msg_error "Download failed: $tarball_url"
-    rm -rf "$tmpdir"
-    return 7
-  }
-
-  mkdir -p "$target"
-  if [[ "${CLEAN_INSTALL:-0}" == "1" ]]; then
-    rm -rf "${target:?}/"*
-  fi
-
-  tar --no-same-owner -xzf "$tmpdir/$filename" -C "$tmpdir" || {
-    msg_error "Failed to extract tarball"
-    rm -rf "$tmpdir"
-    return 251
-  }
-
-  local unpack_dir
-  unpack_dir=$(find "$tmpdir" -mindepth 1 -maxdepth 1 -type d | head -n1)
-
-  shopt -s dotglob nullglob
-  cp -r "$unpack_dir"/* "$target/"
-  shopt -u dotglob nullglob
-
-  rm -rf "$tmpdir"
-  echo "$resolved_tag" >"$version_file"
-  msg_ok "Deployed ${app} ${resolved_tag} to ${target}"
-  return 0
-}
-
 # ------------------------------------------------------------------------------
 # Checks for new GitHub tag (for repos without releases).
 #
@@ -3194,38 +2642,6 @@ create_self_signed_cert() {
   chmod 644 "$CERT_CRT"
 }
 
-# ------------------------------------------------------------------------------
-# Downloads file with optional progress indicator using pv.
-#
-# Arguments:
-#   $1 - URL
-#   $2 - Destination path
-# ------------------------------------------------------------------------------
-
-download_with_progress() {
-  local url="$1"
-  local output="$2"
-  if [ -n "$SPINNER_PID" ] && ps -p "$SPINNER_PID" >/dev/null; then kill "$SPINNER_PID" >/dev/null; fi
-
-  ensure_dependencies pv
-  set -o pipefail
-
-  # Content-Length aus HTTP-Header holen
-  local content_length
-  content_length=$(curl -fsSLI "$url" | awk '/Content-Length/ {print $2}' | tr -d '\r' || true)
-
-  if [[ -z "$content_length" ]]; then
-    if ! curl -fL# -o "$output" "$url"; then
-      msg_error "Download failed: $url"
-      return 7
-    fi
-  else
-    if ! curl -fsSL "$url" | pv -s "$content_length" >"$output"; then
-      msg_error "Download failed: $url"
-      return 7
-    fi
-  fi
-}
 
 # ------------------------------------------------------------------------------
 # Ensures /usr/local/bin is permanently in system PATH.
@@ -6525,117 +5941,6 @@ setup_java() {
   msg_ok "Setup Temurin JDK $JAVA_VERSION"
 }
 
-# ------------------------------------------------------------------------------
-# Installs a local IP updater script using networkd-dispatcher.
-#
-# Description:
-#   - Stores current IP in /run/local-ip.env
-#   - Automatically runs on network changes
-# ------------------------------------------------------------------------------
-
-setup_local_ip_helper() {
-  local BASE_DIR="/usr/local/community-scripts/ip-management"
-  local SCRIPT_PATH="$BASE_DIR/update_local_ip.sh"
-  local IP_FILE="/run/local-ip.env"
-  local DISPATCHER_SCRIPT="/etc/networkd-dispatcher/routable.d/10-update-local-ip.sh"
-
-  # Check if already set up
-  if [[ -f "$SCRIPT_PATH" && -f "$DISPATCHER_SCRIPT" ]]; then
-    msg_info "Update Local IP Helper"
-    cache_installed_version "local-ip-helper" "1.0"
-    msg_ok "Update Local IP Helper"
-  else
-    msg_info "Setup Local IP Helper"
-  fi
-
-  mkdir -p "$BASE_DIR"
-
-  # Install networkd-dispatcher if not present
-  if ! dpkg -s networkd-dispatcher >/dev/null 2>&1; then
-    ensure_dependencies networkd-dispatcher || {
-      msg_error "Failed to install networkd-dispatcher"
-      return 100
-    }
-  fi
-
-  # Write update_local_ip.sh
-  cat <<'EOF' >"$SCRIPT_PATH"
-#!/bin/bash
-set -euo pipefail
-
-IP_FILE="/run/local-ip.env"
-mkdir -p "$(dirname "$IP_FILE")"
-
-get_current_ip() {
-    local ip
-
-    # Try IPv4 targets first
-    local ipv4_targets=("8.8.8.8" "1.1.1.1" "192.168.1.1" "10.0.0.1" "172.16.0.1" "default")
-    for target in "${ipv4_targets[@]}"; do
-        if [[ "$target" == "default" ]]; then
-            ip=$(ip route get 1 2>/dev/null | awk '{for(i=1;i<=NF;i++) if ($i=="src") print $(i+1)}')
-        else
-            ip=$(ip route get "$target" 2>/dev/null | awk '{for(i=1;i<=NF;i++) if ($i=="src") print $(i+1)}')
-        fi
-        if [[ -n "$ip" ]]; then
-            echo "$ip"
-            return 0
-        fi
-    done
-
-    # IPv6 fallback: Try direct interface lookup for eth0
-    ip=$(ip -6 addr show eth0 scope global 2>/dev/null | awk '/inet6 / {print $2}' | cut -d/ -f1 | head -n1)
-    if [[ -n "$ip" && "$ip" =~ : ]]; then
-        echo "$ip"
-        return 0
-    fi
-
-    # IPv6 fallback: Use routing table with IPv6 targets (Google DNS, Cloudflare DNS)
-    local ipv6_targets=("2001:4860:4860::8888" "2606:4700:4700::1111")
-    for target in "${ipv6_targets[@]}"; do
-        ip=$(ip -6 route get "$target" 2>/dev/null | awk '{for(i=1;i<=NF;i++) if ($i=="src") print $(i+1)}')
-        if [[ -n "$ip" && "$ip" =~ : ]]; then
-            echo "$ip"
-            return 0
-        fi
-    done
-
-    return 1
-}
-
-current_ip="$(get_current_ip)"
-
-if [[ -z "$current_ip" ]]; then
-    echo "[ERROR] Could not detect local IP" >&2
-    exit 123
-fi
-
-if [[ -f "$IP_FILE" ]]; then
-    source "$IP_FILE"
-    [[ "$LOCAL_IP" == "$current_ip" ]] && exit 0
-fi
-
-echo "LOCAL_IP=$current_ip" > "$IP_FILE"
-echo "[INFO] LOCAL_IP updated to $current_ip"
-EOF
-
-  chmod +x "$SCRIPT_PATH"
-
-  # Install dispatcher hook
-  mkdir -p "$(dirname "$DISPATCHER_SCRIPT")"
-  cat <<EOF >"$DISPATCHER_SCRIPT"
-#!/bin/bash
-$SCRIPT_PATH
-EOF
-
-  chmod +x "$DISPATCHER_SCRIPT"
-  systemctl enable -q --now networkd-dispatcher.service || {
-    msg_warn "Failed to enable networkd-dispatcher service"
-  }
-
-  cache_installed_version "local-ip-helper" "1.0"
-  msg_ok "Setup Local IP Helper"
-}
 
 # ------------------------------------------------------------------------------
 # Installs or updates MariaDB.
@@ -9399,50 +8704,6 @@ EOF
   return 0
 }
 
-# ------------------------------------------------------------------------------
-# Get latest GitLab release version.
-# Usage: get_latest_gitlab_release "owner/repo" [strip_v]
-# ------------------------------------------------------------------------------
-get_latest_gitlab_release() {
-  local repo="$1"
-  local strip_v="${2:-true}"
-
-  local repo_encoded
-  repo_encoded=$(printf '%s' "$repo" | sed 's|/|%2F|g')
-
-  local header=()
-  [[ -n "${GITLAB_TOKEN:-}" ]] && header=(-H "PRIVATE-TOKEN: $GITLAB_TOKEN")
-
-  local temp_file
-  temp_file=$(mktemp)
-
-  local http_code
-  http_code=$(curl --connect-timeout 10 --max-time 30 -sSL \
-    -w "%{http_code}" -o "$temp_file" \
-    "${header[@]}" \
-    "https://gitlab.com/api/v4/projects/$repo_encoded/releases?per_page=1&order_by=released_at&sort=desc" 2>/dev/null) || true
-
-  if [[ "$http_code" != "200" ]]; then
-    rm -f "$temp_file"
-    msg_warn "GitLab API call failed for ${repo} (HTTP ${http_code})"
-    return 22
-  fi
-
-  local version
-  version=$(jq -r '.[0].tag_name // empty' "$temp_file")
-  rm -f "$temp_file"
-
-  if [[ -z "$version" ]]; then
-    msg_error "Could not determine latest version for ${repo}"
-    return 250
-  fi
-
-  if [[ "$strip_v" == "true" ]]; then
-    [[ "$version" =~ ^v[0-9] ]] && version="${version:1}"
-  fi
-
-  echo "$version"
-}
 
 # ------------------------------------------------------------------------------
 # Checks for new GitLab release (latest tag).

vm/haos-vm.sh

@@ -475,7 +475,7 @@ function advanced_settings() {
   done
 
   while true; do
-    if VLAN1=$(whiptail --backtitle "Proxmox VE Helper Scripts" --inputbox "Set a Vlan (leave blank for default)" 8 58 --title "VLAN" --cancel-button Exit-Script 3>&1 1>&2 2>&3); then
+    if VLAN1=$(whiptail --backtitle "Proxmox VE Helper Scripts" --inputbox "Set a Vlan(leave blank for default)" 8 58 --title "VLAN" --cancel-button Exit-Script 3>&1 1>&2 2>&3); then
       if [ -z "$VLAN1" ]; then
         VLAN1="Default"
         VLAN=""