fix(technitiumdns): always install .NET 10 if not already present

Previously the update script only upgraded .NET when aspnetcore-runtime-8.0 or 9.0 was detected via is_package_installed. Containers where detection failed would silently skip the upgrade block, leaving Technitium v15 (requires .NET 10) starting against .NET 8/9 and immediately failing. Changed condition to: install .NET 10 unless it is already installed. Old 8.0/9.0 packages are removed with || true to avoid errors on clean installs. Fixes #14045
2026-04-30 14:05:59 +00:00 · 2026-04-27 08:51:58 +02:00
29 changed files with 136 additions and 1220 deletions
@@ -113,8 +113,7 @@ jobs:
            const http = require('http');
            const url = require('url');
-            function request(fullUrl, opts, redirectsLeft) {
+            function request(fullUrl, opts) {
              if (redirectsLeft === undefined) redirectsLeft = 5;
              return new Promise(function(resolve, reject) {
                const u = url.parse(fullUrl);
                const isHttps = u.protocol === 'https:';
@@ -129,19 +128,6 @@ jobs:
                if (body) options.headers['Content-Length'] = Buffer.byteLength(body);
                const lib = isHttps ? https : http;
                const req = lib.request(options, function(res) {
                  // Follow redirects (301/302/307/308)
                  if ([301, 302, 307, 308].indexOf(res.statusCode) !== -1 && res.headers.location && redirectsLeft > 0) {
                    res.resume();
                    const nextUrl = url.resolve(fullUrl, res.headers.location);
                    // For 301/302, browsers historically downgrade to GET; preserve method for 307/308.
                    const nextOpts = Object.assign({}, opts);
                    if (res.statusCode === 301 || res.statusCode === 302) {
                      nextOpts.method = 'GET';
                      delete nextOpts.body;
                    }
                    resolve(request(nextUrl, nextOpts, redirectsLeft - 1));
                    return;
                  }
                  let data = '';
                  res.on('data', function(chunk) { data += chunk; });
                  res.on('end', function() {
@@ -7,7 +7,7 @@ on:
 permissions:
  issues: write
  pull-requests: write
-  contents: write
+  contents: read
 jobs:
  pocketbase-bot:
@@ -95,149 +95,6 @@ jobs:
              return request('https://api.github.com' + path, { method: method || 'GET', headers, body: bodyStr });
            }
            function encodeContentPath(filePath) {
              return filePath.split('/').map(encodeURIComponent).join('/');
            }
            function decodeGitHubContent(content) {
              return Buffer.from((content || '').replace(/\n/g, ''), 'base64').toString('utf8');
            }
            function sanitizeBranchPart(value) {
              return (value || '')
                .toLowerCase()
                .replace(/[^a-z0-9._/-]+/g, '-')
                .replace(/\/+/g, '/')
                .replace(/^-+|-+$/g, '');
            }
            function applyCtDefaultChanges(scriptText, varChanges) {
              let nextText = scriptText;
              const updatedVars = [];
              const unchangedVars = [];
              for (const [varName, rawValue] of Object.entries(varChanges)) {
                const newValue = String(rawValue);
                const pattern = new RegExp('(^\\s*' + varName + '="\\$\\{' + varName + ':-)([^"}]*)(\\}"\\s*$)', 'm');
                const match = nextText.match(pattern);
                if (!match) continue;
                if (match[2] === newValue) {
                  unchangedVars.push(varName);
                  continue;
                }
                nextText = nextText.replace(pattern, '$1' + newValue + '$3');
                updatedVars.push(varName);
              }
              return { nextText, updatedVars, unchangedVars };
            }
            async function ensureBranch(defaultBranch, branchName) {
              const branchRefRes = await ghRequest('/repos/' + owner + '/' + repo + '/git/ref/heads/' + encodeURIComponent(branchName));
              if (branchRefRes.ok) return;
              const defaultRefRes = await ghRequest('/repos/' + owner + '/' + repo + '/git/ref/heads/' + encodeURIComponent(defaultBranch));
              if (!defaultRefRes.ok) {
                throw new Error('Could not read default branch ref: ' + defaultRefRes.body);
              }
              const defaultRef = JSON.parse(defaultRefRes.body);
              const createBranchRes = await ghRequest('/repos/' + owner + '/' + repo + '/git/refs', 'POST', {
                ref: 'refs/heads/' + branchName,
                sha: defaultRef.object.sha
              });
              if (!createBranchRes.ok) {
                throw new Error('Could not create branch: ' + createBranchRes.body);
              }
            }
            async function upsertCtDefaultsPr(slugValue, varChanges) {
              const wantedEntries = Object.entries(varChanges || {}).filter(function ([, v]) {
                return v !== undefined && v !== null && String(v) !== '';
              });
              if (wantedEntries.length === 0) {
                return { status: 'skipped', reason: 'No mapped CT defaults changed.' };
              }
              const repoRes = await ghRequest('/repos/' + owner + '/' + repo);
              if (!repoRes.ok) {
                throw new Error('Could not read repository metadata: ' + repoRes.body);
              }
              const repoInfo = JSON.parse(repoRes.body);
              const defaultBranch = repoInfo.default_branch;
              const ctPath = 'ct/' + slugValue + '.sh';
              const encodedCtPath = encodeContentPath(ctPath);
              const defaultFileRes = await ghRequest('/repos/' + owner + '/' + repo + '/contents/' + encodedCtPath + '?ref=' + encodeURIComponent(defaultBranch));
              if (defaultFileRes.statusCode === 404) {
                return { status: 'skipped', reason: 'No matching CT file found at `' + ctPath + '`.' };
              }
              if (!defaultFileRes.ok) {
                throw new Error('Could not read CT file from default branch: ' + defaultFileRes.body);
              }
              const branchName = 'pocketbase-sync/' + sanitizeBranchPart(slugValue || 'unknown');
              await ensureBranch(defaultBranch, branchName);
              const branchFileRes = await ghRequest('/repos/' + owner + '/' + repo + '/contents/' + encodedCtPath + '?ref=' + encodeURIComponent(branchName));
              if (!branchFileRes.ok) {
                throw new Error('Could not read CT file from sync branch: ' + branchFileRes.body);
              }
              const branchFile = JSON.parse(branchFileRes.body);
              const currentBranchText = decodeGitHubContent(branchFile.content);
              const updateResult = applyCtDefaultChanges(currentBranchText, Object.fromEntries(wantedEntries));
              if (updateResult.updatedVars.length === 0) {
                return { status: 'skipped', reason: 'CT defaults already up to date.', unchangedVars: updateResult.unchangedVars };
              }
              const commitMessage = 'chore(ct): sync ' + slugValue + ' defaults from PocketBase';
              const putRes = await ghRequest('/repos/' + owner + '/' + repo + '/contents/' + encodedCtPath, 'PUT', {
                message: commitMessage,
                content: Buffer.from(updateResult.nextText, 'utf8').toString('base64'),
                sha: branchFile.sha,
                branch: branchName
              });
              if (!putRes.ok) {
                throw new Error('Could not update CT file: ' + putRes.body);
              }
              const openPrRes = await ghRequest(
                '/repos/' + owner + '/' + repo + '/pulls?state=open&head=' + encodeURIComponent(owner + ':' + branchName) + '&base=' + encodeURIComponent(defaultBranch)
              );
              if (!openPrRes.ok) {
                throw new Error('Could not query existing PRs: ' + openPrRes.body);
              }
              const openPrs = JSON.parse(openPrRes.body);
              if (openPrs.length > 0) {
                return { status: 'updated', prUrl: openPrs[0].html_url, updatedVars: updateResult.updatedVars };
              }
              const prTitle = 'chore(ct): sync ' + slugValue + ' defaults with PocketBase';
              const prBody =
                '## Summary\n' +
                '- Sync default CT variables for `' + slugValue + '` after `/pocketbase` update.\n' +
                '- Updated vars: `' + updateResult.updatedVars.join('`, `') + '`.\n\n' +
                '## Source\n' +
                '- Triggered by @' + actor + ' via PocketBase bot.\n';
              const createPrRes = await ghRequest('/repos/' + owner + '/' + repo + '/pulls', 'POST', {
                title: prTitle,
                body: prBody,
                head: branchName,
                base: defaultBranch
              });
              if (!createPrRes.ok) {
                throw new Error('Could not create PR: ' + createPrRes.body);
              }
              const pr = JSON.parse(createPrRes.body);
              return { status: 'created', prUrl: pr.html_url, updatedVars: updateResult.updatedVars };
            }
            function formatCtSyncResult(syncResult) {
              if (!syncResult) return '';
              if (syncResult.status === 'created') return '\n\n**CT sync PR:** ' + syncResult.prUrl;
              if (syncResult.status === 'updated') return '\n\n**CT sync PR updated:** ' + syncResult.prUrl;
              if (syncResult.status === 'skipped') return '\n\n**CT sync skipped:** ' + syncResult.reason;
              return '';
            }
            async function addReaction(content) {
              try {
                await ghRequest(
@@ -653,7 +510,6 @@ jobs:
              const RESOURCE_KEYS = { cpu: 'number', ram: 'number', hdd: 'number', os: 'string', version: 'string' };
              const METHOD_KEYS   = { config_path: 'string', script: 'string' };
              const ALL_METHOD_KEYS = Object.assign({}, RESOURCE_KEYS, METHOD_KEYS);
              const RESOURCE_TO_CT_VAR = { cpu: 'var_cpu', ram: 'var_ram', hdd: 'var_disk', os: 'var_os', version: 'var_version' };
              function applyMethodChanges(method, parsed) {
                if (!method.resources) method.resources = {};
@@ -694,7 +550,6 @@ jobs:
                if (addMatch) {
                  // ── METHOD ADD ───────────────────────────────────────────────
                  const newType = addMatch[1];
                  const parsed = addMatch[2] ? parseKVPairs(addMatch[2]) : {};
                  if (methodsArr.some(function (im) { return (im.type || '').toLowerCase() === newType.toLowerCase(); })) {
                    await addReaction('-1');
                    await postComment('❌ **PocketBase Bot**: Install method `' + newType + '` already exists for `' + slug + '`.\n\nUse `/pocketbase ' + slug + ' method list` to see all methods.');
@@ -702,6 +557,7 @@ jobs:
                  }
                  const newMethod = { type: newType, resources: { cpu: 1, ram: 512, hdd: 4, os: 'debian', version: '13' } };
                  if (addMatch[2]) {
                    const parsed = parseKVPairs(addMatch[2]);
                    const unknown = Object.keys(parsed).filter(function (k) { return !ALL_METHOD_KEYS[k]; });
                    if (unknown.length > 0) {
                      await addReaction('-1');
@@ -713,21 +569,10 @@ jobs:
                  methodsArr.push(newMethod);
                  await patchMethods(methodsArr);
                  await revalidate(slug);
                  const addCtChanges = {};
                  for (const [k, v] of Object.entries(parsed)) {
                    if (RESOURCE_TO_CT_VAR[k]) addCtChanges[RESOURCE_TO_CT_VAR[k]] = v;
                  }
                  let addCtSync = null;
                  try {
                    addCtSync = await upsertCtDefaultsPr(slug, addCtChanges);
                  } catch (e) {
                    addCtSync = { status: 'skipped', reason: 'CT sync failed: ' + e.message };
                  }
                  await addReaction('+1');
                  await postComment(
                    '✅ **PocketBase Bot**: Added install method **`' + newType + '`** to **`' + slug + '`**\n\n' +
                    formatMethodsList([newMethod]) + '\n\n' +
                    formatCtSyncResult(addCtSync) + '\n\n' +
                    '*Executed by @' + actor + '*'
                  );
@@ -795,16 +640,6 @@ jobs:
                  applyMethodChanges(methodsArr[idx], parsed);
                  await patchMethods(methodsArr);
                  await revalidate(slug);
                  const editCtChanges = {};
                  for (const [k, v] of Object.entries(parsed)) {
                    if (RESOURCE_TO_CT_VAR[k]) editCtChanges[RESOURCE_TO_CT_VAR[k]] = v;
                  }
                  let editCtSync = null;
                  try {
                    editCtSync = await upsertCtDefaultsPr(slug, editCtChanges);
                  } catch (e) {
                    editCtSync = { status: 'skipped', reason: 'CT sync failed: ' + e.message };
                  }
                  const changesLines = Object.entries(parsed)
                    .map(function ([k, v]) {
@@ -815,7 +650,6 @@ jobs:
                  await postComment(
                    '✅ **PocketBase Bot**: Updated install method **`' + methodsArr[idx].type + '`** for **`' + slug + '`**\n\n' +
                    '**Changes applied:**\n' + changesLines + '\n\n' +
                    formatCtSyncResult(editCtSync) + '\n\n' +
                    '*Executed by @' + actor + '*'
                  );
                }
@@ -878,11 +712,9 @@ jobs:
                project_url:      'string',
                github:           'string',
                config_path:      'string',
                tags:             'string',
                port:             'number',
                default_user:     'nullable_string',
                default_passwd:   'nullable_string',
                unprivileged:     'number',
                updateable:       'boolean',
                privileged:       'boolean',
                has_arm:          'boolean',
@@ -949,17 +781,6 @@ jobs:
                process.exit(1);
              }
              await revalidate(slug);
              const FIELD_TO_CT_VAR = { tags: 'var_tags', unprivileged: 'var_unprivileged' };
              const fieldCtChanges = {};
              for (const [k, v] of Object.entries(payload)) {
                if (FIELD_TO_CT_VAR[k]) fieldCtChanges[FIELD_TO_CT_VAR[k]] = v;
              }
              let fieldCtSync = null;
              try {
                fieldCtSync = await upsertCtDefaultsPr(slug, fieldCtChanges);
              } catch (e) {
                fieldCtSync = { status: 'skipped', reason: 'CT sync failed: ' + e.message };
              }
              await addReaction('+1');
              const changesLines = Object.entries(payload)
                .map(function ([k, v]) { return '- `' + k + '` → `' + JSON.stringify(v) + '`'; })
@@ -967,7 +788,6 @@ jobs:
              await postComment(
                '✅ **PocketBase Bot**: Updated **`' + slug + '`** successfully!\n\n' +
                '**Changes applied:**\n' + changesLines + '\n\n' +
                formatCtSyncResult(fieldCtSync) + '\n\n' +
                '*Executed by @' + actor + '*'
              );
            }
@@ -448,85 +448,6 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 </details>
 ## 2026-04-30
 ### 🆕 New Scripts
  - Nagios ([#14126](https://github.com/community-scripts/ProxmoxVE/pull/14126))
 - Neko ([#14121](https://github.com/community-scripts/ProxmoxVE/pull/14121))
 ### 💾 Core
  - #### 🔧 Refactor
    - tools.func: Manage minor versions for MongoDB 8.x [@tremor021](https://github.com/tremor021) ([#14131](https://github.com/community-scripts/ProxmoxVE/pull/14131))
 ## 2026-04-29
 ### 🚀 Updated Scripts
  - #### 🐞 Bug Fixes
    - GrayLog: MongoDB update to 8.2.x [@tremor021](https://github.com/tremor021) ([#14114](https://github.com/community-scripts/ProxmoxVE/pull/14114))
    - Graylog: Better information in the log file [@tremor021](https://github.com/tremor021) ([#14110](https://github.com/community-scripts/ProxmoxVE/pull/14110))
  - #### 🔧 Refactor
    - Refactor: checkMK [@MickLesk](https://github.com/MickLesk) ([#14105](https://github.com/community-scripts/ProxmoxVE/pull/14105))
    - PatchMon: Unpin release [@tremor021](https://github.com/tremor021) ([#14097](https://github.com/community-scripts/ProxmoxVE/pull/14097))
 ### 💾 Core
  - #### 🔧 Refactor
    - core: add guidance when storage lacks rootdir support [@MickLesk](https://github.com/MickLesk) ([#14108](https://github.com/community-scripts/ProxmoxVE/pull/14108))
 ## 2026-04-28
 ### 🆕 New Scripts
  - StoryBook ([#14081](https://github.com/community-scripts/ProxmoxVE/pull/14081))
 - CoreDNS ([#14082](https://github.com/community-scripts/ProxmoxVE/pull/14082))
 ### 🚀 Updated Scripts
  - Fix Dawarich Install/Update [@Jerry1098](https://github.com/Jerry1098) ([#14078](https://github.com/community-scripts/ProxmoxVE/pull/14078))
  - #### ✨ New Features
    - PatchMon Version 2.0.2 Script update [@9technologygroup](https://github.com/9technologygroup) ([#14095](https://github.com/community-scripts/ProxmoxVE/pull/14095))
 ## 2026-04-27
 ### 🚀 Updated Scripts
  - Add pamUsername column to userOrgs table [@JVKeller](https://github.com/JVKeller) ([#14075](https://github.com/community-scripts/ProxmoxVE/pull/14075))
  - #### 🐞 Bug Fixes
    - Dawarich: run db:migrate before assets:precompile [@MickLesk](https://github.com/MickLesk) ([#14051](https://github.com/community-scripts/ProxmoxVE/pull/14051))
    - TechnitiumDNS: always install .NET 10 if not already present [@MickLesk](https://github.com/MickLesk) ([#14049](https://github.com/community-scripts/ProxmoxVE/pull/14049))
  - #### 💥 Breaking Changes
    - PatchMon: v2.0.0 migration [@vhsdream](https://github.com/vhsdream) ([#14015](https://github.com/community-scripts/ProxmoxVE/pull/14015))
 ### 💾 Core
  - #### 🔧 Refactor
    - Update build.func - fixed spelling mistake [@m1ckywill](https://github.com/m1ckywill) ([#14047](https://github.com/community-scripts/ProxmoxVE/pull/14047))
 ### 🧰 Tools
  - #### 🐞 Bug Fixes
    - update-lxcs/apps: avoid pct exec on containers mid-shutdown [@MickLesk](https://github.com/MickLesk) ([#14050](https://github.com/community-scripts/ProxmoxVE/pull/14050))
  - #### ✨ New Features
    - Add patchmon-agent report execution in update script [@heinemannj](https://github.com/heinemannj) ([#14054](https://github.com/community-scripts/ProxmoxVE/pull/14054))
 ## 2026-04-26
 ### 🆕 New Scripts
@@ -23,25 +23,26 @@ function update_script() {
  header_info
  check_container_storage
  check_container_resources
-  if ! command -v omd &>/dev/null; then
+  if [[ ! -f /opt/checkmk_version.txt ]]; then
    msg_error "No ${APP} Installation Found!"
    exit
  fi
-  RELEASE=$(curl_with_retry "https://api.github.com/repos/checkmk/checkmk/tags" "-" | grep "name" | awk '{print substr($2, 3, length($2)-4) }' | tr ' ' '\n' | grep -Ev 'rc|b' | sort -V | tail -n 1)
+  RELEASE=$(curl -fsSL https://api.github.com/repos/checkmk/checkmk/tags | grep "name" | awk '{print substr($2, 3, length($2)-4) }' | tr ' ' '\n' | grep -Ev 'rc|b' | sort -V | tail -n 1)
  RELEASE="${RELEASE%%+*}"
-  msg_info "Updating checkmk"
+  msg_info "Updating ${APP} to v${RELEASE}"
  $STD omd stop monitoring
  $STD omd cp monitoring monitoringbackup
-  curl_with_retry "https://download.checkmk.com/checkmk/${RELEASE}/check-mk-community-${RELEASE}_0.$(get_os_info codename)_amd64.deb" "/opt/checkmk.deb"
+  curl -fsSL "https://download.checkmk.com/checkmk/${RELEASE}/check-mk-raw-${RELEASE}_0.$(get_os_info codename)_amd64.deb" -o "/opt/checkmk.deb"
-  $STD apt install -y /opt/checkmk.deb
+  $STD apt-get install -y /opt/checkmk.deb
  $STD omd --force -V ${RELEASE}.cre update --conflict=install monitoring
  $STD omd start monitoring
  $STD omd -f rm monitoringbackup
  $STD omd cleanup
  rm -rf /opt/checkmk.deb
-  msg_ok "Updated checkmk"
+  msg_ok "Updated ${APP}"
  msg_ok "Updated successfully!"
  exit
 }
@@ -1,56 +0,0 @@
 #!/usr/bin/env bash
 source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
 # Copyright (c) 2021-2026 community-scripts ORG
 # Author: MickLesk (CanbiZ)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
 # Source: https://github.com/coredns/coredns
 APP="CoreDNS"
 var_tags="${var_tags:-dns;network}"
 var_cpu="${var_cpu:-1}"
 var_ram="${var_ram:-256}"
 var_disk="${var_disk:-1}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
 var_unprivileged="${var_unprivileged:-1}"
 header_info "$APP"
 variables
 color
 catch_errors
 function update_script() {
  header_info
  check_container_storage
  check_container_resources
  if [[ ! -f /usr/local/bin/coredns ]]; then
    msg_error "No ${APP} Installation Found!"
    exit
  fi
  if check_for_gh_release "coredns" "coredns/coredns"; then
    msg_info "Stopping Service"
    systemctl stop coredns
    msg_ok "Stopped Service"
    fetch_and_deploy_gh_release "coredns" "coredns/coredns" "prebuild" "latest" "/usr/local/bin" \
      "coredns_*_linux_$(dpkg --print-architecture).tgz"
    chmod +x /usr/local/bin/coredns
    msg_info "Starting Service"
    systemctl start coredns
    msg_ok "Started Service"
    msg_ok "Updated successfully!"
  fi
  exit
 }
 start
 build_container
 description
 msg_ok "Completed Successfully!\n"
 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
 echo -e "${INFO}${YW} CoreDNS is listening on port 53 (DNS)${CL}"
 echo -e "${TAB}${GATEWAY}${BGN}dns://${IP}${CL}"
@@ -53,18 +53,6 @@ function update_script() {
    export PATH="/root/.rbenv/shims:/root/.rbenv/bin:$PATH"
    eval "$(/root/.rbenv/bin/rbenv init - bash)"
    if ! grep -q "OTP_ENCRYPTION_PRIMARY_KEY" /opt/dawarich/.env; then
      echo "OTP_ENCRYPTION_PRIMARY_KEY=$(openssl rand -hex 64)" >>/opt/dawarich/.env
    fi
    if ! grep -q "OTP_ENCRYPTION_DETERMINISTIC_KEY" /opt/dawarich/.env; then
      echo "OTP_ENCRYPTION_DETERMINISTIC_KEY=$(openssl rand -hex 64)" >>/opt/dawarich/.env
    fi
    if ! grep -q "OTP_ENCRYPTION_KEY_DERIVATION_SALT" /opt/dawarich/.env; then
      echo "OTP_ENCRYPTION_KEY_DERIVATION_SALT=$(openssl rand -hex 64)" >>/opt/dawarich/.env
    fi
    set -a && source /opt/dawarich/.env && set +a
    $STD bundle config set --local deployment 'true'
@@ -79,8 +67,8 @@ function update_script() {
      $STD npm install
    fi
    $STD bundle exec rails db:migrate
    $STD bundle exec rake assets:precompile
    $STD bundle exec rails db:migrate
    $STD bundle exec rake data:migrate
    msg_ok "Ran Migrations"
@@ -37,7 +37,7 @@ function update_script() {
  CURRENT_VERSION=$(apt list --installed 2>/dev/null | grep graylog-server | grep -oP '\d+\.\d+\.\d+')
  if dpkg --compare-versions "$CURRENT_VERSION" lt "6.3"; then
-    MONGO_VERSION="8.2" setup_mongodb
+    MONGO_VERSION="8.0" setup_mongodb
    msg_info "Updating Graylog"
    $STD apt update
@@ -1,6 +0,0 @@
   ______                ____  _   _______
  / ____/___  ________  / __ \/ | / / ___/
 / /   / __ \/ ___/ _ \/ / / /  |/ /\__ \ 
 / /___/ /_/ / /  /  __/ /_/ / /|  /___/ / 
 \____/\____/_/   \___/_____/_/ |_//____/  
@@ -1,6 +0,0 @@
    _   __            _           
   / | / /___ _____ _(_)___  _____
  /  |/ / __ `/ __ `/ / __ \/ ___/
 / /|  / /_/ / /_/ / / /_/ (__  ) 
 /_/ |_/\__,_/\__, /_/\____/____/  
            /____/                
@@ -1,6 +0,0 @@
    _   __     __       
   / | / /__  / /______ 
  /  |/ / _ \/ //_/ __ \
 / /|  /  __/ ,< / /_/ /
 /_/ |_/\___/_/|_|\____/ 
@@ -1,6 +0,0 @@
   _____ __                   __                __  
  / ___// /_____  _______  __/ /_  ____  ____  / /__
  \__ \/ __/ __ \/ ___/ / / / __ \/ __ \/ __ \/ //_/
 ___/ / /_/ /_/ / /  / /_/ / /_/ / /_/ / /_/ / ,<   
 /____/\__/\____/_/   \__, /_.___/\____/\____/_/|_|  
                    /____/                          
@@ -1,90 +0,0 @@
 #!/usr/bin/env bash
 source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
 # Copyright (c) 2021-2026 community-scripts ORG
 # Author: CanbiZ (MickLesk)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
 # Source: https://github.com/NagiosEnterprises/nagioscore
 APP="Nagios"
 var_tags="${var_tags:-monitoring;alerts;infrastructure}"
 var_cpu="${var_cpu:-2}"
 var_ram="${var_ram:-2048}"
 var_disk="${var_disk:-20}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
 var_unprivileged="${var_unprivileged:-1}"
 header_info "$APP"
 variables
 color
 catch_errors
 function update_script() {
  header_info
  check_container_storage
  check_container_resources
  if [[ ! -f /usr/local/nagios/etc/nagios.cfg ]]; then
    msg_error "No ${APP} Installation Found!"
    exit
  fi
  msg_info "Backing up Configuration"
  cp -a /usr/local/nagios/etc /opt/nagios-etc-backup
  msg_ok "Backed up Configuration"
  if check_for_gh_release "nagios" "NagiosEnterprises/nagioscore"; then
    msg_info "Stopping Nagios"
    systemctl stop nagios
    msg_ok "Stopped Nagios"
    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "nagios" "NagiosEnterprises/nagioscore" "tarball"
    msg_info "Building Nagios Core"
    cd /opt/nagios
    $STD ./configure --with-httpd-conf=/etc/apache2/sites-enabled
    $STD make all
    $STD make install-groups-users
    usermod -a -G nagios www-data
    $STD make install
    $STD make install-daemoninit
    $STD make install-commandmode
    $STD make install-webconf
    $STD a2enmod rewrite
    $STD a2enmod cgi
    msg_ok "Built Nagios Core"
    msg_info "Starting Nagios"
    systemctl restart apache2
    systemctl start nagios
    msg_ok "Started Nagios"
  fi
  if check_for_gh_release "nagios-plugins" "nagios-plugins/nagios-plugins"; then
    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "nagios-plugins" "nagios-plugins/nagios-plugins" "tarball"
    msg_info "Building Nagios Plugins"
    cd /opt/nagios-plugins
    $STD ./tools/setup
    $STD ./configure
    $STD make
    $STD make install
    msg_ok "Built Nagios Plugins"
  fi
  msg_info "Restoring Configuration"
  rm -rf /usr/local/nagios/etc
  cp -a /opt/nagios-etc-backup /usr/local/nagios/etc
  rm -rf /opt/nagios-etc-backup
  msg_ok "Restored Configuration"
  msg_ok "Updated successfully!"
  exit
 }
 start
 build_container
 description
 msg_ok "Completed Successfully!\n"
 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
 echo -e "${INFO}${YW} Access it using the following URL:${CL}"
 echo -e "${TAB}${GATEWAY}${BGN}http://${IP}/nagios${CL}"
@@ -1,78 +0,0 @@
 #!/usr/bin/env bash
 source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
 # Copyright (c) 2021-2026 community-scripts ORG
 # Author: CanbiZ (MickLesk)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
 # Source: https://neko.m1k1o.net/
 APP="Neko"
 var_tags="${var_tags:-virtual-browser;webrtc;streaming}"
 var_cpu="${var_cpu:-4}"
 var_ram="${var_ram:-4096}"
 var_disk="${var_disk:-12}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-12}"
 var_unprivileged="${var_unprivileged:-1}"
 var_gpu="${var_gpu:-yes}"
 header_info "$APP"
 variables
 color
 catch_errors
 function update_script() {
  header_info
  check_container_storage
  check_container_resources
  if [[ ! -d /opt/neko ]]; then
    msg_error "No ${APP} Installation Found!"
    exit
  fi
  if check_for_gh_release "neko" "m1k1o/neko"; then
    msg_info "Stopping Service"
    systemctl stop neko
    msg_ok "Stopped Service"
    msg_info "Backing up Data"
    cp /etc/neko/neko.yaml /opt/neko.yaml.bak
    msg_ok "Backed up Data"
    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "neko" "m1k1o/neko" "tarball"
    msg_info "Building Client"
    cd /opt/neko/client
    $STD npm install
    $STD npm run build
    cp -r /opt/neko/client/dist/* /var/www/
    msg_ok "Built Client"
    msg_info "Building Server"
    cd /opt/neko/server
    $STD ./build
    cp /opt/neko/server/bin/neko /usr/bin/neko
    cp -r /opt/neko/server/bin/plugins/* /etc/neko/plugins/ 2>/dev/null || true
    msg_ok "Built Server"
    msg_info "Restoring Data"
    cp /opt/neko.yaml.bak /etc/neko/neko.yaml
    rm -f /opt/neko.yaml.bak
    msg_ok "Restored Data"
    msg_info "Starting Service"
    systemctl start neko
    msg_ok "Started Service"
    msg_ok "Updated successfully!"
  fi
  exit
 }
 start
 build_container
 description
 msg_ok "Completed Successfully!\n"
 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
 echo -e "${INFO}${YW} Access it using the following URL:${CL}"
 echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:8080${CL}"
@@ -76,7 +76,6 @@ function update_script() {
    if [[ -f "$DB" ]]; then
      sqlite3 "$DB" "ALTER TABLE 'orgs' ADD COLUMN 'settingsLogRetentionDaysConnection' integer DEFAULT 0 NOT NULL;" 2>/dev/null || true
      sqlite3 "$DB" "ALTER TABLE 'clientSitesAssociationsCache' ADD COLUMN 'isJitMode' integer DEFAULT 0 NOT NULL;" 2>/dev/null || true
      sqlite3 "$DB" "ALTER TABLE 'userOrgs' ADD COLUMN 'pamUsername' text;" 2>/dev/null || true
      # Create new role-mapping tables and migrate data before drizzle-kit
      # drops the roleId columns from userOrgs and userInvites.
@@ -3,7 +3,7 @@ source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxV
 # Copyright (c) 2021-2026 community-scripts ORG
 # Author: vhsdream
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/PatchMon/PatchMon
+# Source: https://github.com/PatcMmon/PatchMon
 APP="PatchMon"
 var_tags="${var_tags:-monitoring}"
@@ -29,75 +29,63 @@ function update_script() {
    exit
  fi
-  if check_for_gh_release "PatchMon" "PatchMon/PatchMon"; then
+  if ! grep -q "PORT=3001" /opt/patchmon/backend/.env; then
    msg_warn "⚠️ The next PatchMon update will include breaking changes (port changes)."
    msg_warn "See details here: https://github.com/community-scripts/ProxmoxVE/pull/11888"
    msg_warn "Press Enter to continue with the update, or Ctrl+C to abort..."
    read -r
  fi
  RELEASE="v1.4.2"
  NODE_VERSION="24" setup_nodejs
  if check_for_gh_release "PatchMon" "PatchMon/PatchMon" "${RELEASE}"; then
    msg_info "Stopping Service"
    systemctl stop patchmon-server
    msg_ok "Stopped Service"
-    if [[ -d /opt/patchmon/backend ]]; then
+    msg_info "Creating Backup"
-      msg_info "Legacy install detected - creating full backup, please wait..."
+    cp /opt/patchmon/backend/.env /opt/backend.env
-      $STD tar czf ~/patchmon_legacy.tar.gz /opt/patchmon
+    cp /opt/patchmon/frontend/.env /opt/frontend.env
-      cp /opt/patchmon/backend/.env /opt/legacy.env
+    msg_ok "Backup Created"
-      msg_ok "Full backup saved in /root"
+
-      msg_info "Starting migration to PatchMon v2.x.x"
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "PatchMon" "PatchMon/PatchMon" "tarball" "${RELEASE}" "/opt/patchmon"
-      systemctl disable -q --now nginx
+
-      $STD npm cache clean --force
+    msg_info "Updating PatchMon"
-      $STD apt autoremove --purge -y {nginx,nodejs}
+    VERSION=$(get_latest_github_release "PatchMon/PatchMon")
-      if [[ -f /etc/apt/sources.list.d/nodesource.sources ]]; then
+    SERVER_PORT="$(sed -n '/SERVER_PORT/s/[^=]*=//p' /opt/backend.env)"
-        cp /etc/apt/sources.list.d/nodesource.sources /etc/apt/sources.list.d/nodesource.sources.bak
+    sed -i 's/PORT=3399/PORT=3001/' /opt/backend.env
-        rm -f /etc/apt/sources.list.d/nodesource.sources
+    sed -i -e "s/VERSION=.*/VERSION=$VERSION/" \
-      elif [[ -f /etc/apt/sources.list.d/nodesource.list ]]; then
+      -e '/^VITE_API_URL/d' /opt/frontend.env
-        cp /etc/apt/sources.list.d/nodesource.list /etc/apt/sources.list.d/nodesource.list.bak
+    export NODE_ENV=production
-        rm -f /etc/apt/sources.list.d/nodesource.list
+    cd /opt/patchmon
-      fi
+    $STD npm install --no-audit --no-fund --no-save --ignore-scripts
-      rm -rf /opt/patchmon
+    cd /opt/patchmon/frontend
-      mkdir -p /opt/patchmon/agents
+    mv /opt/frontend.env /opt/patchmon/frontend/.env
-      cp /opt/legacy.env /opt/patchmon/.env
+    $STD npm install --no-audit --no-fund --no-save --ignore-scripts --include=dev
-      sed -i -e 's/^PORT=.*/PORT=3000/' \
+    $STD npm run build
-        -e 's/^NODE_/APP_/' \
+    cd /opt/patchmon/backend
-        -e '/^SERVER_*/d' \
+    mv /opt/backend.env /opt/patchmon/backend/.env
-        -e '/^# API*/,+2d' /opt/patchmon/.env
+    $STD npm run db:generate
-      {
+    $STD npx prisma migrate deploy
-        echo ""
+    cp /opt/patchmon/docker/nginx.conf.template /etc/nginx/sites-available/patchmon.conf
-        echo "SESSION_SECRET=$(openssl rand -hex 64)"
+    sed -i -e 's|proxy_pass .*|proxy_pass http://127.0.0.1:3001;|' \
-        echo "AI_ENCRYPTION_KEY=$(openssl rand -hex 64)"
+      -e '\|try_files |i\        root /opt/patchmon/frontend/dist;' \
-        echo "AGENT_BINARIES_DIR=/opt/patchmon/agents"
+      -e 's|alias.*|alias /opt/patchmon/frontend/dist/assets;|' \
-      } >>/opt/patchmon/.env
+      -e '\|expires 1y|i\        root /opt/patchmon/frontend/dist;' /etc/nginx/sites-available/patchmon.conf
-      sed -i -e '\|Directory|s|/backend||' \
+    if [[ -n "$SERVER_PORT" ]] && [[ "$SERVER_PORT" != "443" ]]; then
-        -e 's|^ExecStart=.*|ExecStart=/opt/patchmon/patchmon-server|' \
+      sed -i "s/listen [[:digit:]].*/listen ${SERVER_PORT};/" /etc/nginx/sites-available/patchmon.conf
        -e 's|^Environment=NODE_.*|EnvironmentFile=/opt/patchmon/.env|' \
        /etc/systemd/system/patchmon-server.service
      systemctl daemon-reload
      rm /opt/legacy.env
      msg_ok "Migration complete!"
    fi
-
+    ln -sf /etc/nginx/sites-available/patchmon.conf /etc/nginx/sites-enabled/
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "PatchMon" "PatchMon/PatchMon" "singlefile" "latest" "/opt/patchmon" "patchmon-server-linux-amd64"
+    rm -f /etc/nginx/sites-enabled/default
-    mv /opt/patchmon/PatchMon /opt/patchmon/patchmon-server
+    $STD nginx -t
-
+    systemctl restart nginx
-    msg_info "Fetching PatchMon agent binaries"
+    msg_ok "Updated PatchMon"
    RELEASE=$(get_latest_github_release "PatchMon/PatchMon")
    [[ ! -d /opt/patchmon/agents ]] && mkdir -p /opt/patchmon/agents
    FILE_URL="https://github.com/PatchMon/PatchMon/releases/download/v${RELEASE}/patchmon-agent-"
    AGENT_NAME=(
      "linux-amd64"
      "linux-arm64"
      "linux-arm"
      "linux-386"
      "freebsd-amd64"
      "freebsd-arm64"
      "freebsd-arm"
      "freebsd-386"
      "windows-amd64.exe"
      "windows-arm64.exe"
    )
    for arch in "${AGENT_NAME[@]}"; do
      curl_with_retry "${FILE_URL}${arch}" "/opt/patchmon/agents/patchmon-agent-${arch}"
      [[ "${arch}" != *.exe ]] && chmod 755 "/opt/patchmon/agents/patchmon-agent-${arch}"
    done
    msg_ok "Fetched PatchMon agent binaries"
    msg_info "Starting Service"
    if grep -q '/usr/bin/node' /etc/systemd/system/patchmon-server.service; then
      sed -i 's|ExecStart=.*|ExecStart=/usr/bin/npm run start|' /etc/systemd/system/patchmon-server.service
      systemctl daemon-reload
    fi
    systemctl start patchmon-server
    msg_ok "Started Service"
    msg_ok "Updated successfully!"
@@ -1,54 +0,0 @@
 #!/usr/bin/env bash
 source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
 # Copyright (c) 2021-2026 community-scripts ORG
 # Author: MickLesk (CanbiZ)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
 # Source: https://github.com/storybookjs/storybook
 APP="Storybook"
 var_tags="${var_tags:-dev-tools;frontend;ui}"
 var_cpu="${var_cpu:-2}"
 var_ram="${var_ram:-2048}"
 var_disk="${var_disk:-8}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
 var_unprivileged="${var_unprivileged:-1}"
 header_info "$APP"
 variables
 color
 catch_errors
 function update_script() {
  header_info
  check_container_storage
  check_container_resources
  if [[ ! -f /opt/storybook/.projectpath ]]; then
    msg_error "No ${APP} Installation Found!"
    exit
  fi
  PROJECT_PATH=$(cat /opt/storybook/.projectpath)
  if [[ ! -d "$PROJECT_PATH" ]]; then
    msg_error "Project directory not found: $PROJECT_PATH"
    exit
  fi
  msg_info "Updating Storybook"
  cd "$PROJECT_PATH"
  $STD npx storybook@latest upgrade --yes
  msg_ok "Updated Storybook"
  exit
 }
 start
 build_container
 description
 msg_ok "Completed Successfully!\n"
 echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
 echo -e "${INFO}${YW} Access it using the following URL:${CL}"
 echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:6006${CL}"
@@ -14,10 +14,10 @@ network_check
 update_os
 msg_info "Install Checkmk"
-RELEASE=$(curl_with_retry "https://api.github.com/repos/checkmk/checkmk/tags" "-" | grep "name" | awk '{print substr($2, 3, length($2)-4) }' | tr ' ' '\n' | grep -Ev 'rc|b' | sort -V | tail -n 1)
+RELEASE=$(curl -fsSL https://api.github.com/repos/checkmk/checkmk/tags | grep "name" | awk '{print substr($2, 3, length($2)-4) }' | tr ' ' '\n' | grep -Ev 'rc|b' | sort -V | tail -n 1)
 RELEASE="${RELEASE%%+*}"
-curl_with_retry "https://download.checkmk.com/checkmk/${RELEASE}/check-mk-community-${RELEASE}_0.$(get_os_info codename)_amd64.deb" "/opt/checkmk.deb"
+curl -fsSL "https://download.checkmk.com/checkmk/${RELEASE}/check-mk-raw-${RELEASE}_0.$(get_os_info codename)_amd64.deb" -o "/opt/checkmk.deb"
-$STD apt install -y /opt/checkmk.deb
+$STD apt-get install -y /opt/checkmk.deb
 rm -rf /opt/checkmk.deb
 echo "${RELEASE}" >"/opt/checkmk_version.txt"
 msg_ok "Installed Checkmk"
@@ -29,12 +29,14 @@ MKPASSWORD=$(openssl rand -base64 18 | tr -d '/+=' | cut -c1-16)
 echo -e "$MKPASSWORD\n$MKPASSWORD" | su - "$SITE_NAME" -c "cmk-passwd cmkadmin --stdin"
 $STD omd start "$SITE_NAME"
 {
  echo "Application-Credentials"
  echo "Username: cmkadmin"
  echo "Password: $MKPASSWORD"
  echo "Site: $SITE_NAME"
 } >>~/checkmk.creds
 msg_ok "Created Service"
 cleanup_lxc
@@ -1,55 +0,0 @@
 #!/usr/bin/env bash
 # Copyright (c) 2021-2026 community-scripts ORG
 # Author: MickLesk (CanbiZ)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
 # Source: https://github.com/coredns/coredns
 source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
 color
 verb_ip6
 catch_errors
 setting_up_container
 network_check
 update_os
 fetch_and_deploy_gh_release "coredns" "coredns/coredns" "prebuild" "latest" "/usr/local/bin" \
  "coredns_*_linux_$(dpkg --print-architecture).tgz"
 chmod +x /usr/local/bin/coredns
 msg_info "Configuring CoreDNS"
 mkdir -p /etc/coredns
 cat <<EOF >/etc/coredns/Corefile
 . {
    forward . 1.1.1.1 1.0.0.1
    cache 30
    log
    errors
    health :8080
    ready :8181
 }
 EOF
 msg_ok "Configured CoreDNS"
 msg_info "Creating Service"
 cat <<EOF >/etc/systemd/system/coredns.service
 [Unit]
 Description=CoreDNS DNS Server
 After=network.target
 [Service]
 Type=simple
 ExecStart=/usr/local/bin/coredns -conf /etc/coredns/Corefile
 Restart=on-failure
 RestartSec=5
 LimitNOFILE=1048576
 [Install]
 WantedBy=multi-user.target
 EOF
 systemctl enable -q --now coredns
 msg_ok "Created Service"
 motd_ssh
 customize
 cleanup_lxc
@@ -46,16 +46,10 @@ msg_ok "Set up Directories"
 msg_info "Configuring Environment"
 SECRET_KEY_BASE=$(openssl rand -hex 64)
 OTP_ENCRYPTION_PRIMARY_KEY=$(openssl rand -hex 64)
 OTP_ENCRYPTION_DETERMINISTIC_KEY=$(openssl rand -hex 64)
 OTP_ENCRYPTION_KEY_DERIVATION_SALT=$(openssl rand -hex 64)
 RELEASE=$(get_latest_github_release "Freika/dawarich")
 cat <<EOF >/opt/dawarich/.env
 RAILS_ENV=production
 SECRET_KEY_BASE=${SECRET_KEY_BASE}
 OTP_ENCRYPTION_PRIMARY_KEY=${OTP_ENCRYPTION_PRIMARY_KEY}
 OTP_ENCRYPTION_DETERMINISTIC_KEY=${OTP_ENCRYPTION_DETERMINISTIC_KEY}
 OTP_ENCRYPTION_KEY_DERIVATION_SALT=${OTP_ENCRYPTION_KEY_DERIVATION_SALT}
 DATABASE_HOST=localhost
 DATABASE_USERNAME=${PG_DB_USER}
 DATABASE_PASSWORD=${PG_DB_PASS}
@@ -13,7 +13,7 @@ setting_up_container
 network_check
 update_os
-MONGO_VERSION="8.2" setup_mongodb
+MONGO_VERSION="8.0" setup_mongodb
 msg_info "Setup Graylog Data Node"
 PASSWORD_SECRET=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | head -c16)
@@ -38,8 +38,6 @@ sed -i "s/password_secret =/password_secret = $PASSWORD_SECRET/g" /etc/graylog/s
 sed -i "s/root_password_sha2 =/root_password_sha2 = $ROOT_PASSWORD/g" /etc/graylog/server/server.conf
 sed -i 's/#http_bind_address = 127.0.0.1.*/http_bind_address = 0.0.0.0:9000/g' /etc/graylog/server/server.conf
 systemctl enable -q --now graylog-server
 sleep 5
 sed -i "s/0\.0\.0\.0:9000/$LOCAL_IP:9000/g" /var/log/graylog-server/server.log
 msg_ok "Setup ${APPLICATION}"
 motd_ssh
@@ -1,78 +0,0 @@
 #!/usr/bin/env bash
 # Copyright (c) 2021-2026 community-scripts ORG
 # Author: CanbiZ (MickLesk)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
 # Source: https://github.com/NagiosEnterprises/nagioscore
 source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
 color
 verb_ip6
 catch_errors
 setting_up_container
 network_check
 update_os
 msg_info "Installing Dependencies"
 $STD apt install -y \
  autoconf \
  automake \
  build-essential \
  bc \
  dc \
  gawk \
  gettext \
  gperf \
  libgd-dev \
  libmcrypt-dev \
  libnet-snmp-perl \
  libssl-dev \
  snmp \
  apache2 \
  apache2-utils
 msg_ok "Installed Dependencies"
 PHP_APACHE="YES" setup_php
 fetch_and_deploy_gh_release "nagios" "NagiosEnterprises/nagioscore" "tarball"
 msg_info "Building Nagios Core"
 cd /opt/nagios
 $STD ./configure --with-httpd-conf=/etc/apache2/sites-enabled
 $STD make all
 $STD make install-groups-users
 usermod -a -G nagios www-data
 $STD make install
 $STD make install-daemoninit
 $STD make install-commandmode
 $STD make install-config
 $STD make install-webconf
 $STD a2enmod rewrite
 $STD a2enmod cgi
 msg_ok "Built Nagios Core"
 fetch_and_deploy_gh_release "nagios-plugins" "nagios-plugins/nagios-plugins" "tarball"
 msg_info "Building Nagios Plugins"
 cd /opt/nagios-plugins
 $STD ./tools/setup
 $STD ./configure
 $STD make
 $STD make install
 msg_ok "Built Nagios Plugins"
 msg_info "Configuring Web Authentication"
 $STD htpasswd -bc /usr/local/nagios/etc/htpasswd.users nagiosadmin nagiosadmin
 chown root:www-data /usr/local/nagios/etc/htpasswd.users
 chmod 640 /usr/local/nagios/etc/htpasswd.users
 msg_ok "Configured Web Authentication"
 msg_info "Starting Services"
 systemctl enable -q apache2
 systemctl restart apache2
 systemctl enable -q --now nagios
 msg_ok "Started Services"
 motd_ssh
 customize
 cleanup_lxc
@@ -1,255 +0,0 @@
 #!/usr/bin/env bash
 # Copyright (c) 2021-2026 community-scripts ORG
 # Author: CanbiZ (MickLesk)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
 # Source: https://neko.m1k1o.net/
 source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
 color
 verb_ip6
 catch_errors
 setting_up_container
 network_check
 update_os
 msg_info "Installing Dependencies"
 $STD apt install -y \
  supervisor \
  pulseaudio \
  dbus-x11 \
  xserver-xorg-video-dummy \
  xdotool \
  xclip \
  libgtk-3-0 \
  gstreamer1.0-plugins-base \
  gstreamer1.0-plugins-good \
  gstreamer1.0-plugins-bad \
  gstreamer1.0-plugins-ugly \
  gstreamer1.0-pulseaudio \
  openbox \
  firefox-esr \
  fonts-noto-color-emoji \
  fonts-wqy-zenhei
 msg_ok "Installed Dependencies"
 systemctl disable -q --now supervisor
 msg_info "Installing Build Dependencies"
 $STD apt install -y \
  build-essential \
  pkg-config \
  libx11-dev \
  libxrandr-dev \
  libxtst-dev \
  libgtk-3-dev \
  libxcvt-dev \
  libgstreamer1.0-dev \
  libgstreamer-plugins-base1.0-dev
 msg_ok "Installed Build Dependencies"
 NODE_VERSION="22" setup_nodejs
 setup_go
 fetch_and_deploy_gh_release "neko" "m1k1o/neko" "tarball"
 msg_info "Building Client"
 cd /opt/neko/client
 $STD npm install
 $STD npm run build
 mkdir -p /var/www
 cp -r /opt/neko/client/dist/* /var/www/
 msg_ok "Built Client"
 msg_info "Building Server"
 cd /opt/neko/server
 $STD ./build
 cp /opt/neko/server/bin/neko /usr/bin/neko
 mkdir -p /etc/neko/plugins
 cp -r /opt/neko/server/bin/plugins/* /etc/neko/plugins/ 2>/dev/null || true
 msg_ok "Built Server"
 msg_info "Setting up Runtime"
 useradd -m -s /bin/bash neko
 usermod -aG audio,video neko
 mkdir -p /etc/neko/supervisord /var/www /var/log/neko /tmp/.X11-unix /tmp/runtime-neko /home/neko/.config/pulse /home/neko/.local/share/xorg
 chmod 1777 /tmp/.X11-unix
 chmod 1777 /var/log/neko
 chmod 0700 /tmp/runtime-neko
 chown neko /tmp/.X11-unix /var/log/neko /tmp/runtime-neko
 chown -R neko:neko /home/neko
 cp /opt/neko/runtime/xorg.conf /etc/neko/xorg.conf
 # Remove the dummy_touchscreen InputDevice section (requires custom "neko" Xorg driver not available bare-metal)
 sed -i '/Section "InputDevice"/{N;/dummy_touchscreen/{:l;N;/EndSection/!bl;d}}' /etc/neko/xorg.conf
 sed -i '/dummy_touchscreen/d' /etc/neko/xorg.conf
 sed -i 's/InputDevice  "dummy_mouse"/InputDevice  "dummy_mouse" "CorePointer"/' /etc/neko/xorg.conf
 cp /opt/neko/runtime/default.pa /etc/pulse/default.pa
 cat <<EOF >/etc/neko/supervisord.conf
 [supervisord]
 nodaemon=true
 user=root
 pidfile=/var/run/supervisord.pid
 logfile=/dev/null
 logfile_maxbytes=0
 loglevel=debug
 [include]
 files=/etc/neko/supervisord/*.conf
 [program:x-server]
 environment=HOME="/home/neko",USER="neko"
 command=/usr/bin/X :99.0 -config /etc/neko/xorg.conf -noreset -nolisten tcp
 autorestart=true
 priority=300
 user=neko
 stdout_logfile=/var/log/neko/xorg.log
 stdout_logfile_maxbytes=100MB
 stdout_logfile_backups=10
 redirect_stderr=true
 [program:pulseaudio]
 environment=HOME="/home/neko",USER="neko",DISPLAY=":99.0"
 command=/usr/bin/pulseaudio --log-level=error --disallow-module-loading --disallow-exit --exit-idle-time=-1
 autorestart=true
 priority=300
 user=neko
 stdout_logfile=/var/log/neko/pulseaudio.log
 stdout_logfile_maxbytes=100MB
 stdout_logfile_backups=10
 redirect_stderr=true
 [program:neko]
 environment=HOME="/home/neko",USER="neko",DISPLAY=":99.0"
 command=/usr/bin/neko serve --server.static "/var/www"
 stopsignal=INT
 stopwaitsecs=3
 autorestart=true
 priority=800
 user=neko
 stdout_logfile=/var/log/neko/neko.log
 stdout_logfile_maxbytes=100MB
 stdout_logfile_backups=10
 redirect_stderr=true
 [unix_http_server]
 file=/var/run/supervisor.sock
 chmod=0770
 chown=root:neko
 [supervisorctl]
 serverurl=unix:///var/run/supervisor.sock
 [rpcinterface:supervisor]
 supervisor.rpcinterface_factory = supervisor.rpcinterface:make_main_rpcinterface
 EOF
 cat <<EOF >/etc/neko/supervisord/firefox.conf
 [program:firefox]
 environment=HOME="/home/neko",USER="neko",DISPLAY=":99.0"
 command=/usr/bin/firefox-esr --no-remote --display=:99.0 -width 1280 -height 720
 stopsignal=INT
 autorestart=true
 priority=800
 user=neko
 stdout_logfile=/var/log/neko/firefox.log
 stdout_logfile_maxbytes=100MB
 stdout_logfile_backups=10
 redirect_stderr=true
 [program:openbox]
 environment=HOME="/home/neko",USER="neko",DISPLAY=":99.0"
 command=/usr/bin/openbox --config-file /etc/neko/openbox.xml
 autorestart=true
 priority=300
 user=neko
 stdout_logfile=/var/log/neko/openbox.log
 stdout_logfile_maxbytes=100MB
 stdout_logfile_backups=10
 redirect_stderr=true
 EOF
 cat <<'EOF' >/etc/neko/openbox.xml
 <?xml version="1.0" encoding="UTF-8"?>
 <openbox_config xmlns="http://openbox.org/3.4/rc" xmlns:xi="http://www.w3.org/2001/XInclude">
 <applications>
    <application class="firefox" name="Navigator" role="browser">
      <decor>no</decor>
      <maximized>true</maximized>
      <focus>yes</focus>
      <layer>normal</layer>
    </application>
 </applications>
 <focus>
  <focusNew>yes</focusNew>
  <followMouse>no</followMouse>
  <focusLast>yes</focusLast>
  <underMouse>no</underMouse>
  <focusDelay>200</focusDelay>
  <raiseOnFocus>no</raiseOnFocus>
 </focus>
 <placement>
  <policy>Smart</policy>
  <center>yes</center>
 </placement>
 <desktops>
  <number>1</number>
  <firstdesk>1</firstdesk>
  <popupTime>0</popupTime>
 </desktops>
 </openbox_config>
 EOF
 cat <<EOF >/etc/neko/neko.yaml
 server:
  bind: "0.0.0.0:8080"
  static: "/var/www"
 session:
  cookie:
    enabled: false
 webrtc:
  icelite: true
  nat1to1:
    - "${LOCAL_IP}"
  epr: "59000-59100"
 desktop:
  input:
    enabled: false
 member:
  provider: "multiuser"
  multiuser:
    admin_password: "admin"
    user_password: "neko"
 EOF
 msg_ok "Set up Runtime"
 msg_info "Creating Service"
 cat <<EOF >/etc/systemd/system/neko.service
 [Unit]
 Description=Neko Virtual Browser
 After=network.target
 [Service]
 Type=simple
 User=root
 Environment=USER=neko
 Environment=DISPLAY=:99.0
 Environment=PULSE_SERVER=unix:/tmp/pulseaudio.socket
 Environment=XDG_RUNTIME_DIR=/tmp/runtime-neko
 Environment=NEKO_PLUGINS_ENABLED=true
 Environment=NEKO_PLUGINS_DIR=/etc/neko/plugins/
 Environment=NEKO_CONFIG=/etc/neko/neko.yaml
 ExecStart=/usr/bin/supervisord -c /etc/neko/supervisord.conf -n
 Restart=on-failure
 RestartSec=5
 [Install]
 WantedBy=multi-user.target
 EOF
 systemctl enable -q --now neko
 msg_ok "Created Service"
 motd_ssh
 customize
 cleanup_lxc
@@ -14,91 +14,74 @@ network_check
 update_os
 msg_info "Installing Dependencies"
-$STD apt install -y redis-server
+$STD apt install -y \
  build-essential \
  nginx \
  redis-server
 msg_ok "Installed Dependencies"
 NODE_VERSION="24" setup_nodejs
 PG_VERSION="17" setup_postgresql
 PG_DB_NAME="patchmon_db" PG_DB_USER="patchmon_usr" setup_postgresql_db
-RELEASE="v2.0.2"
+fetch_and_deploy_gh_release "PatchMon" "PatchMon/PatchMon" "tarball" "v1.4.2" "/opt/patchmon"
 fetch_and_deploy_gh_release "PatchMon" "PatchMon/PatchMon" "singlefile" "latest" "/opt/patchmon" "patchmon-server-linux-amd64"
 mv /opt/patchmon/PatchMon /opt/patchmon/patchmon-server
 msg_info "Configuring PatchMon"
-cat <<EOF >/opt/patchmon/.env
+VERSION=$(get_latest_github_release "PatchMon/PatchMon")
-DATABASE_URL="postgresql://$PG_DB_USER:$PG_DB_PASS@localhost:5432/$PG_DB_NAME"
+export NODE_ENV=production
-JWT_SECRET="$(openssl rand -hex 64)"
+cd /opt/patchmon
-SESSION_SECRET="$(openssl rand -hex 64)"
+$STD npm install --no-audit --no-fund --no-save --ignore-scripts
 AI_ENCRYPTION_KEY="$(openssl rand -hex 64)"
 CORS_ORIGIN=http://${LOCAL_IP}:3000
 PORT=3000
 APP_ENV=production
-# Redis
+cd /opt/patchmon/frontend
-REDIS_HOST=localhost
+cat <<EOF >./.env
-REDIS_PORT=6379
+VITE_APP_NAME=PatchMon
-
+VITE_APP_VERSION=${VERSION}
 ## OIDC / SSO (when OIDC_ENABLED=true, issuer/client/secret/redirect required)
 # OIDC_ENABLED=false
 # OIDC_ISSUER_URL=
 # OIDC_CLIENT_ID=
 # OIDC_CLIENT_SECRET=
 # OIDC_REDIRECT_URI=
 # OIDC_SCOPES=openid email profile groups
 # OIDC_AUTO_CREATE_USERS=false
 # OIDC_DEFAULT_ROLE=user
 # OIDC_DISABLE_LOCAL_AUTH=false
 # OIDC_BUTTON_TEXT=Login with SSO
 # OIDC_SESSION_TTL=600
 # OIDC_POST_LOGOUT_URI=
 # OIDC_SYNC_ROLES=false
 # OIDC_ADMIN_GROUP=
 # OIDC_SUPERADMIN_GROUP=
 # OIDC_HOST_MANAGER_GROUP=
 # OIDC_READONLY_GROUP=
 # OIDC_USER_GROUP=
 # OIDC_ENFORCE_HTTPS=true
 AGENT_BINARIES_DIR=/opt/patchmon/agents
 EOF
 $STD npm install --no-audit --no-fund --no-save --ignore-scripts --include=dev
 $STD npm run build
 JWT_SECRET="$(openssl rand -hex 64)"
 mv /opt/patchmon/backend/env.example /opt/patchmon/backend/.env
 sed -i -e "s|DATABASE_URL=.*|DATABASE_URL=\"postgresql://$PG_DB_USER:$PG_DB_PASS@localhost:5432/$PG_DB_NAME\"|" \
  -e "/JWT_SECRET/s/[=$].*/=$JWT_SECRET/" \
  -e "\|CORS_ORIGIN|s|localhost|$LOCAL_IP|" \
  -e "/PORT=3001/aSERVER_PROTOCOL=http \\
  SERVER_HOST=$LOCAL_IP \\
  SERVER_PORT=3000" \
  -e '/_ENV=production/aTRUST_PROXY=1' \
  -e '/REDIS_USER=.*/,+1d' /opt/patchmon/backend/.env
 cd /opt/patchmon/backend
 $STD npm run db:generate
 $STD npx prisma migrate deploy
 msg_ok "Configured PatchMon"
-msg_info "Fetching PatchMon agent binaries"
+msg_info "Configuring Nginx"
-RELEASE=$(get_latest_github_release "PatchMon/PatchMon")
+cp /opt/patchmon/docker/nginx.conf.template /etc/nginx/sites-available/patchmon.conf
-mkdir -p /opt/patchmon/agents
+sed -i -e 's|proxy_pass .*|proxy_pass http://127.0.0.1:3001;|' \
-FILE_URL="https://github.com/PatchMon/PatchMon/releases/download/v${RELEASE}/patchmon-agent-"
+  -e '\|try_files |i\        root /opt/patchmon/frontend/dist;' \
-AGENT_NAME=(
+  -e 's|alias.*|alias /opt/patchmon/frontend/dist/assets;|' \
-  "linux-amd64"
+  -e '\|expires 1y|i\        root /opt/patchmon/frontend/dist;' /etc/nginx/sites-available/patchmon.conf
-  "linux-arm64"
+ln -sf /etc/nginx/sites-available/patchmon.conf /etc/nginx/sites-enabled/
-  "linux-arm"
+rm -f /etc/nginx/sites-enabled/default
-  "linux-386"
+$STD nginx -t
-  "freebsd-amd64"
+systemctl restart nginx
-  "freebsd-arm64"
+msg_ok "Configured Nginx"
  "freebsd-arm"
  "freebsd-386"
  "windows-amd64.exe"
  "windows-arm64.exe"
 )
 for arch in "${AGENT_NAME[@]}"; do
  curl_with_retry "${FILE_URL}${arch}" "/opt/patchmon/agents/patchmon-agent-${arch}"
  [[ "${arch}" != *.exe ]] && chmod 755 "/opt/patchmon/agents/patchmon-agent-${arch}"
 done
 msg_ok "Fetched PatchMon agent binaries"
 msg_info "Creating service"
 cat <<EOF >/etc/systemd/system/patchmon-server.service
 [Unit]
-Description=PatchMon Server
+Description=PatchMon Service
 After=network.target postgresql.service
 [Service]
 Type=simple
-WorkingDirectory=/opt/patchmon
+WorkingDirectory=/opt/patchmon/backend
-ExecStart=/opt/patchmon/patchmon-server
+ExecStart=/usr/bin/npm run start
 Restart=always
 RestartSec=10
 Environment=NODE_ENV=production
 Environment=PATH=/usr/bin:/usr/local/bin
 EnvironmentFile=/opt/patchmon/.env
 NoNewPrivileges=true
 PrivateTmp=true
 ProtectSystem=strict
@@ -1,55 +0,0 @@
 #!/usr/bin/env bash
 # Copyright (c) 2021-2026 community-scripts ORG
 # Author: MickLesk (CanbiZ)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
 # Source: https://github.com/storybookjs/storybook
 source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
 color
 verb_ip6
 catch_errors
 setting_up_container
 network_check
 update_os
 NODE_VERSION="24" NODE_MODULE="pnpm" setup_nodejs
 msg_info "Preparing Storybook"
 mkdir -p /opt/storybook
 cd /opt/storybook
 msg_ok "Important: Interactive configuration will start now."
 npx -y storybook@latest init --yes --no-dev
 PROJECT_PATH=$(find /opt/storybook -maxdepth 2 -name ".storybook" -type d 2>/dev/null | head -n1 | xargs dirname)
 if [[ -z "$PROJECT_PATH" ]]; then
  PROJECT_PATH="/opt/storybook"
 fi
 cd "$PROJECT_PATH"
 echo "$PROJECT_PATH" >/opt/storybook/.projectpath
 msg_info "Creating Service"
 cat <<EOF >/etc/systemd/system/storybook.service
 [Unit]
 Description=Storybook Dev Server
 After=network.target
 [Service]
 Type=simple
 User=root
 WorkingDirectory=${PROJECT_PATH}
 ExecStart=/usr/bin/npx storybook dev --host 0.0.0.0 --port 6006 --no-open
 Restart=on-failure
 RestartSec=5
 [Install]
 WantedBy=multi-user.target
 EOF
 systemctl enable -q --now storybook
 msg_ok "Created Service"
 motd_ssh
 customize
 cleanup_lxc
@@ -5456,14 +5456,14 @@ create_lxc_container() {
    local _has_fallback_option=false
    if [[ "$do_retry" == "yes" ]] && has_previous_os_version_template; then
      _has_fallback_option=true
-      echo "  [1] Run host upgrade now (recommended). WARNING: this runs apt upgrade and updates all Packages on your host!"
+      echo "  [1] Run host upgrade now (recommended). WARNING: this runs apt upgrade and updates all Packeages on your host!"
      echo "  [2] Use an older ${PCT_OSTYPE} template instead (may not work with all scripts)"
      echo "  [3] Ignore"
      echo "  [4] Cancel"
      echo
      read -rp "Select option [1/2/3/4]: " _ans </dev/tty
    else
-      echo "  [1] Run host upgrade now (recommended). WARNING: this runs apt upgrade and updates all Packages on your host!"
+      echo "  [1] Run host upgrade now (recommended). WARNING: this runs apt upgrade and updates all Packeages on your host!"
      echo "  [2] Ignore"
      echo "  [3] Cancel"
      echo
@@ -5678,10 +5678,6 @@ create_lxc_container() {
  if ! pvesm status -content rootdir 2>/dev/null | awk 'NR>1{print $1}' | grep -qx "$CONTAINER_STORAGE"; then
    msg_error "Storage '$CONTAINER_STORAGE' ($STORAGE_TYPE) does not support 'rootdir' content."
    msg_custom "💡" "${YW}" "Enable 'Disk image' (rootdir) for storage '${CONTAINER_STORAGE}' in:"
    msg_custom "   " "${YW}" "Datacenter → Storage → ${CONTAINER_STORAGE} → Edit → Content"
    msg_custom "📖" "${YW}" "See: https://pve.proxmox.com/wiki/Storage"
    msg_custom "🔗" "${YW}" "Help: https://github.com/community-scripts/ProxmoxVE/discussions"
    exit 213
  fi
  msg_ok "Storage '$CONTAINER_STORAGE' ($STORAGE_TYPE) validated"
@@ -5964,14 +5964,14 @@ function setup_mariadb_db() {
 }
 # ------------------------------------------------------------------------------
-# Installs or updates MongoDB to specified version.
+# Installs or updates MongoDB to specified major version.
 #
 # Description:
 #   - Preserves data across installations
 #   - Adds official MongoDB repo
 #
 # Variables:
-#   MONGO_VERSION  - MongoDB version to install (e.g. 7.0, 8.2)
+#   MONGO_VERSION  - MongoDB major version to install (e.g. 7.0, 8.0)
 # ------------------------------------------------------------------------------
 function setup_mongodb() {
@@ -6044,11 +6044,8 @@ function setup_mongodb() {
  }
  # Setup repository
  # MongoDB 8.x versions beyond 8.0 reuse the server-8.0.asc PGP key
  local MONGO_KEY_VERSION="${MONGO_VERSION}"
  [[ "${MONGO_VERSION}" == 8.[1-9]* ]] && MONGO_KEY_VERSION="8.0"
  manage_tool_repository "mongodb" "$MONGO_VERSION" "$MONGO_BASE_URL" \
-    "https://www.mongodb.org/static/pgp/server-${MONGO_KEY_VERSION}.asc" || {
+    "https://www.mongodb.org/static/pgp/server-${MONGO_VERSION}.asc" || {
    msg_error "Failed to setup MongoDB repository"
    return 100
  }
@@ -405,6 +405,11 @@ for container in $CHOICE; do
  esac
  exit_code=$?
  if [ "$template" == "false" ] && [ "$status" == "status: stopped" ]; then
    echo -e "${BL}[Info]${GN} Shutting down${BL} $container ${CL} \n"
    pct shutdown $container &
  fi
  #5) if build resources are different than run resources, then:
  if [ "$UPDATE_BUILD_RESOURCES" -eq "1" ]; then
    pct set "$container" --cores "$run_cpu" --memory "$run_ram"
@@ -416,11 +421,6 @@ for container in $CHOICE; do
    containers_needing_reboot+=("$container ($container_hostname)")
  fi
  if [ "$template" == "false" ] && [ "$status" == "status: stopped" ]; then
    echo -e "${BL}[Info]${GN} Shutting down${BL} $container ${CL} \n"
    pct shutdown $container &>/dev/null &
  fi
  if [ $exit_code -eq 0 ]; then
    msg_ok "Updated container $container"
  elif [ $exit_code -eq 75 ]; then
@@ -66,20 +66,10 @@ for container in $(pct list | awk '{if(NR>1) print $1}'); do
      pct start "$container"
      sleep 5
      update_container "$container" || echo " [Error] Update failed for $container"
      # check if patchmon agent is present in container and run a report if found
      if pct exec "$container" -- [ -e "/usr/local/bin/patchmon-agent" ]; then
        echo -e "${BL}[Info]${GN} patchmon-agent found in ${BL} $container ${CL}, triggering report. \n"
        pct exec "$container" -- "/usr/local/bin/patchmon-agent" "report"
      fi
      echo -e "[Info] Shutting down $container"
      pct shutdown "$container" --timeout 60 &
    elif [ "$status" == "status: running" ]; then
      update_container "$container" || echo " [Error] Update failed for $container"
      # check if patchmon agent is present in container and run a report if found
      if pct exec "$container" -- [ -e "/usr/local/bin/patchmon-agent" ]; then
        echo -e "${BL}[Info]${GN} patchmon-agent found in ${BL} $container ${CL}, triggering report. \n"
        pct exec "$container" -- "/usr/local/bin/patchmon-agent" "report"
      fi
    fi
  fi
 done
@@ -110,17 +110,15 @@ for container in $(pct list | awk '{if(NR>1) print $1}'); do
    elif [ "$status" == "status: running" ]; then
      update_container $container
    fi
-    if [ "$status" == "status: running" ]; then
+    if pct exec "$container" -- [ -e "/var/run/reboot-required" ]; then
-      if pct exec "$container" -- [ -e "/var/run/reboot-required" ]; then
+      # Get the container's hostname and add it to the list
-        # Get the container's hostname and add it to the list
+      container_hostname=$(pct exec "$container" hostname)
-        container_hostname=$(pct exec "$container" hostname)
+      containers_needing_reboot+=("$container ($container_hostname)")
-        containers_needing_reboot+=("$container ($container_hostname)")
+    fi
-      fi
+    # check if patchmon agent is present in container and run a report if found
-      # check if patchmon agent is present in container and run a report if found
+    if pct exec "$container" -- [ -e "/usr/local/bin/patchmon-agent" ]; then
-      if pct exec "$container" -- [ -e "/usr/local/bin/patchmon-agent" ]; then
+      echo -e "${BL}[Info]${GN} patchmon-agent found in ${BL} $container ${CL}, triggering report. \n"
-        echo -e "${BL}[Info]${GN} patchmon-agent found in ${BL} $container ${CL}, triggering report. \n"
+      pct exec "$container" -- "/usr/local/bin/patchmon-agent" "report"
        pct exec "$container" -- "/usr/local/bin/patchmon-agent" "report"
      fi
    fi
  fi
 done