Set NODE_VERSION and NODE_MODULE before setup

CHANGELOG.md

@@ -581,39 +581,6 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
 </details>
 
-## 2026-11-09
-
-### 🚀 Updated Scripts
-
-  - #### 🐞 Bug Fixes
-
-    - zipline: Update RAM to 3GB [@github-actions[bot]](https://github.com/github-actions[bot]) ([#18569](https://github.com/community-scripts/ProxmoxVE/pull/18569))
-    - OpenObserve: record installed version, drop killall ExecStop [@BadFlo](https://github.com/BadFlo) ([#18566](https://github.com/community-scripts/ProxmoxVE/pull/18566))
-    - OpenObserve: extract release tarball with --no-same-owner [@BadFlo](https://github.com/BadFlo) ([#18564](https://github.com/community-scripts/ProxmoxVE/pull/18564))
-    - Immich: download before stopping, and clear maintenance mode after an interrupted update [@angusmaul](https://github.com/angusmaul) ([#18553](https://github.com/community-scripts/ProxmoxVE/pull/18553))
-    - cinephage: bump Node.js from 24 to 26 [@github-actions[bot]](https://github.com/github-actions[bot]) ([#18374](https://github.com/community-scripts/ProxmoxVE/pull/18374))
-    - kan: bump Node.js from 20 to 24 [@github-actions[bot]](https://github.com/github-actions[bot]) ([#18549](https://github.com/community-scripts/ProxmoxVE/pull/18549))
-    - myip: bump Node.js from 24 to 26 [@github-actions[bot]](https://github.com/github-actions[bot]) ([#18550](https://github.com/community-scripts/ProxmoxVE/pull/18550))
-
-  - #### 🔧 Refactor
-
-    - yuvomi: install from the attested release asset [@ulsklyc](https://github.com/ulsklyc) ([#18554](https://github.com/community-scripts/ProxmoxVE/pull/18554))
-
-### 🗑️ Deleted Scripts
-
-  - coolify: delete old ct / its an addon [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#18562](https://github.com/community-scripts/ProxmoxVE/pull/18562))
-
-### 💾 Core
-
-  - core: detect GPUs by their PCI class, not by text anywhere in the line [@MickLesk](https://github.com/MickLesk) ([core#221](https://github.com/community-scripts/core/pull/221))
-- core: load an app's own settings from its .vars file [@MickLesk](https://github.com/MickLesk) ([core#216](https://github.com/community-scripts/core/pull/216))
-
-### 🧰 Tools
-
-  - #### 🐞 Bug Fixes
-
-    - IP-Tag: filter guest-agent IPs by CIDR before limiting to 3 [@mazelado](https://github.com/mazelado) ([#18537](https://github.com/community-scripts/ProxmoxVE/pull/18537))
-
 ## 2026-11-08
 
 ### 🆕 New Scripts

ct/cinephage.sh

@@ -36,7 +36,7 @@ function update_script() {
     systemctl stop cinephage
     msg_ok "Stopped Cinephage"
 
-    NODE_VERSION="26" setup_nodejs
+    NODE_VERSION="24" setup_nodejs
     CLEAN_INSTALL=1 fetch_and_deploy_gh_release "cinephage" "MoldyTaint/Cinephage" "tarball"
 
     msg_info "Building Cinephage"

ct/coolify.sh

@@ -0,0 +1,73 @@
+#!/usr/bin/env bash
+_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
+source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://coolify.io/
+
+APP="Coolify"
+var_tags="${var_tags:-docker;paas}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-4096}"
+var_disk="${var_disk:-30}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_arm64="${var_arm64:-yes}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+ADDON_SCRIPT="https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/tools/addon/coolify.sh"
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -d /data/coolify ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  msg_warn "⚠️  ${APP} has been migrated to an addon script."
+  echo ""
+  echo -e "${INFO}${YW}This is a one-time migration. After this, you can update ${APP} anytime with:${CL}"
+  echo -e "${TAB}${TAB}${GN}update_coolify${CL}  or  ${GN}bash <(curl -fsSL ${ADDON_SCRIPT})${CL}"
+  echo ""
+  read -r -p "${TAB}Migrate update function now? [y/N]: " CONFIRM
+  if [[ ! "${CONFIRM,,}" =~ ^(y|yes)$ ]]; then
+    msg_warn "Migration skipped. The old update will continue to work for now."
+    msg_info "Updating ${APP} (legacy)"
+    $STD bash <(curl -fsSL https://cdn.coollabs.io/coolify/install.sh)
+    msg_ok "Updated ${APP}"
+    exit
+  fi
+
+  msg_info "Migrating update function"
+  TMP_UPDATE=$(mktemp)
+  cat <<'MIGRATION_EOF' >"$TMP_UPDATE"
+bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/tools/addon/coolify.sh)"
+MIGRATION_EOF
+  mv "$TMP_UPDATE" /usr/bin/update
+  chmod +x /usr/bin/update
+
+  ln -sf /usr/bin/update /usr/bin/update_coolify 2>/dev/null || true
+  msg_ok "Migration complete"
+
+  echo -e "${INFO}${YW}Running addon update${CL}"
+  type=update bash <(curl -fsSL "${ADDON_SCRIPT}")
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW}Access it using the following URL:${CL}"
+echo -e "${GATEWAY}${BGN}http://${IP}:8000${CL}"

ct/cross-seed.sh

@@ -26,7 +26,7 @@ function update_script() {
   check_container_storage
   check_container_resources
 
-  NODE_VERSION="26" setup_nodejs
+  NODE_VERSION="24" setup_nodejs
   ensure_dependencies build-essential
 
   if command -v cross-seed &>/dev/null; then

ct/homeassistant.sh

@@ -70,7 +70,32 @@ function update_script() {
     exit
   fi
   if [ "$UPD" == "4" ]; then
-    bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/tools/addon/filebrowser.sh)"
+    msg_info "Installing FileBrowser"
+    RELEASE=$(curl -fsSL https://api.github.com/repos/filebrowser/filebrowser/releases/latest | grep -o '"tag_name": ".*"' | sed 's/"//g' | sed 's/tag_name: //g')
+    $STD curl -fsSL https://github.com/filebrowser/filebrowser/releases/download/v2.23.0/linux-$(arch_resolve)-filebrowser.tar.gz | tar -xzv -C /usr/local/bin
+    $STD filebrowser config init -a '0.0.0.0'
+    $STD filebrowser config set -a '0.0.0.0'
+    $STD filebrowser users add admin community-scripts.org --perm.admin
+    msg_ok "Installed FileBrowser"
+
+    msg_info "Creating Service"
+    service_path="/etc/systemd/system/filebrowser.service"
+    echo "[Unit]
+Description=Filebrowser
+After=network-online.target
+[Service]
+User=root
+WorkingDirectory=/root/
+ExecStart=/usr/local/bin/filebrowser -r /
+[Install]
+WantedBy=default.target" >$service_path
+
+    $STD systemctl enable --now filebrowser
+    msg_ok "Created Service"
+
+    msg_ok "Completed successfully!\n"
+    echo -e "FileBrowser should be reachable by going to the following URL.
+         ${BL}http://$LOCAL_IP:8080${CL}   admin|community-scripts.org\n"
     exit
   fi
 }

ct/immich.sh

@@ -131,18 +131,7 @@ EOF
 
   if check_for_gh_release "Immich" "immich-app/immich" "${RELEASE}" "each release is tested individually before the version is updated. Please do not open issues for this"; then
     msg_warn "The update takes 5-15 minutes, do not interrupt it"
-    PREV_IMMICH="${CS_PREVIOUS_VERSION:-$(cat ~/.immich)}"
-    INSTALL_DIR="/opt/${APP}"
-    UPLOAD_DIR="$(sed -n '/^IMMICH_MEDIA_LOCATION/s/[^=]*=//p' /opt/immich/.env)"
-    SRC_DIR="${INSTALL_DIR}/source"
-    APP_DIR="${INSTALL_DIR}/app"
-    PLUGIN_DIR="${APP_DIR}/plugins/immich-plugin-core"
-    ML_DIR="${APP_DIR}/machine-learning"
-    GEO_DIR="${INSTALL_DIR}/geodata"
-
-    setup_uv
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "Immich" "immich-app/immich" "tarball" "${RELEASE}" "$SRC_DIR"
-
+    PREV_IMMICH="$(cat ~/.immich)"
     # An interrupted update leaves app/ empty, so there may be no immich-admin to call.
     if [[ "$PREV_IMMICH" > "2.5.1" && -x /opt/immich/app/bin/immich-admin ]]; then
       msg_info "Enabling Maintenance Mode"
@@ -152,7 +141,6 @@ EOF
       $STD cd -
       msg_ok "Enabled Maintenance Mode"
     fi
-    [[ -x /opt/immich/app/bin/immich-admin ]] || export MAINT_MODE=1
     msg_info "Stopping Services"
     systemctl stop immich-web
     systemctl stop immich-ml
@@ -176,6 +164,14 @@ EOF
     fi
     ensure_dependencies ccache gcc-13 g++-13
 
+    INSTALL_DIR="/opt/${APP}"
+    UPLOAD_DIR="$(sed -n '/^IMMICH_MEDIA_LOCATION/s/[^=]*=//p' /opt/immich/.env)"
+    SRC_DIR="${INSTALL_DIR}/source"
+    APP_DIR="${INSTALL_DIR}/app"
+    PLUGIN_DIR="${APP_DIR}/plugins/immich-plugin-core"
+    ML_DIR="${APP_DIR}/machine-learning"
+    GEO_DIR="${INSTALL_DIR}/geodata"
+
     [[ -f "$ML_DIR"/ml_start.sh ]] && cp "$ML_DIR"/ml_start.sh "$INSTALL_DIR"
     if grep -qs "set -a" "$APP_DIR"/bin/start.sh && grep -qs "warnings" "$APP_DIR"/bin/start.sh; then
       cp "$APP_DIR"/bin/start.sh "$INSTALL_DIR"
@@ -197,6 +193,8 @@ EOF
       rm -rf "${APP_DIR:?}"/*
     )
 
+    setup_uv
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "Immich" "immich-app/immich" "tarball" "${RELEASE}" "$SRC_DIR"
     PNPM_VERSION="$(jq -r '.packageManager | split("@")[1] | split("+")[0]' ${SRC_DIR}/package.json)"
     export COREPACK_ENABLE_DOWNLOAD_PROMPT=0
     export CI=1

ct/myip.sh

@@ -9,7 +9,7 @@ source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_
 APP="MyIP"
 var_tags="${var_tags:-network}"
 var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-2048}"
+var_ram="${var_ram:-1024}"
 var_disk="${var_disk:-4}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"
@@ -30,7 +30,7 @@ function update_script() {
     exit
   fi
 
-  NODE_VERSION="26" setup_nodejs
+  NODE_VERSION="24" setup_nodejs
 
   if check_for_gh_release "myip" "jason5ng32/MyIP"; then
     msg_info "Stopping Services"

ct/openobserve.sh

@@ -32,14 +32,9 @@ function update_script() {
 
   if check_for_gh_release "openobserve" "openobserve/openobserve"; then
     msg_info "Updating OpenObserve"
-    if grep -q "^ExecStop=killall" /etc/systemd/system/openobserve.service; then
-      sed -i "/^ExecStop=killall/d" /etc/systemd/system/openobserve.service
-      systemctl daemon-reload
-    fi
     systemctl stop openobserve
     RELEASE=$(get_latest_github_release "openobserve/openobserve")
-    tar zxf <(curl -fsSL https://downloads.openobserve.ai/releases/openobserve/v$RELEASE/openobserve-v$RELEASE-linux-$(arch_resolve).tar.gz) -C /opt/openobserve --no-same-owner
-    echo "${RELEASE}" >~/.openobserve
+    tar zxf <(curl -fsSL https://downloads.openobserve.ai/releases/openobserve/v$RELEASE/openobserve-v$RELEASE-linux-$(arch_resolve).tar.gz) -C /opt/openobserve
     systemctl start openobserve
     msg_ok "Updated OpenObserve"
     msg_ok "Updated successfully!"

ct/podman-homeassistant.sh

@@ -66,7 +66,33 @@ function update_script() {
     exit
   fi
   if [ "$UPD" == "3" ]; then
-    bash -c "$(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/tools/addon/filebrowser.sh)"
+    msg_info "Installing FileBrowser"
+    $STD curl -fsSL https://raw.githubusercontent.com/filebrowser/get/master/get.sh | bash
+    $STD filebrowser config init -a '0.0.0.0'
+    $STD filebrowser config set -a '0.0.0.0'
+    $STD filebrowser users add admin community-scripts.org --perm.admin
+    msg_ok "Installed FileBrowser"
+
+    msg_info "Creating Service"
+    cat <<EOF >/etc/systemd/system/filebrowser.service
+[Unit]
+Description=Filebrowser
+After=network-online.target
+
+[Service]
+User=root
+WorkingDirectory=/root/
+ExecStart=/usr/local/bin/filebrowser -r /
+
+[Install]
+WantedBy=default.target
+EOF
+    systemctl enable -q --now filebrowser
+    msg_ok "Created Service"
+
+    msg_ok "Completed successfully!\n"
+    echo -e "FileBrowser should be reachable by going to the following URL.
+         ${BL}http://$LOCAL_IP:8080${CL}   admin|community-scripts.org\n"
     exit
   fi
   if [ "$UPD" == "4" ]; then

ct/yuvomi.sh

@@ -38,7 +38,7 @@ function update_script() {
 
     create_backup /opt/yuvomi/data /opt/yuvomi/.env
 
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "yuvomi" "ulsklyc/yuvomi" "prebuild" "latest" "/opt/yuvomi" "yuvomi-*-dist.tar.gz"
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "yuvomi" "ulsklyc/yuvomi" "tarball"
     NODE_VERSION="24" setup_nodejs
 
     msg_info "Installing Node.js Dependencies"

ct/zipline.sh

@@ -9,7 +9,7 @@ source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_
 APP="Zipline"
 var_tags="${var_tags:-file;sharing}"
 var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-3072}"
+var_ram="${var_ram:-2048}"
 var_disk="${var_disk:-5}"
 var_os="${var_os:-debian}"
 var_version="${var_version:-13}"

install/archivebox-install.sh

@@ -48,7 +48,6 @@ chown -R archivebox:archivebox /opt/archivebox/{data,.npm,.cache,.local}
 chmod -R 755 /opt/archivebox/data
 $STD uv pip install archivebox --system --break-system-packages
 cd /opt/archivebox/data
-ADMIN_PASS=$(random_password 20)
 expect <<EOF
 set timeout -1
 log_user 0
@@ -63,18 +62,13 @@ expect "Email address"
 send "\r"
 
 expect "Password"
-send "${ADMIN_PASS}\r"
+send "community-scripts.org\r"
 
 expect "Password (again)"
-send "${ADMIN_PASS}\r"
+send "community-scripts.org\r"
 
 expect eof
 EOF
-{
-  echo "ArchiveBox Credentials"
-  echo "Username: archivebox"
-  echo "Password: ${ADMIN_PASS}"
-} >~/archivebox.creds
 msg_ok "Installed ArchiveBox"
 
 msg_info "Creating Service"

install/authelia-install.sh

@@ -63,19 +63,12 @@ else
 fi
 echo "$AUTHELIA_URL" >/etc/authelia/.authelia_url
 
-AUTHELIA_PASS=$(random_password 20)
-AUTHELIA_HASH=$(authelia crypto hash generate argon2 --password "$AUTHELIA_PASS" | awk '/Digest:/{print $2}')
-{
-  echo "Authelia Credentials"
-  echo "Username: authelia"
-  echo "Password: ${AUTHELIA_PASS}"
-} >~/authelia.creds
 cat <<EOF >/etc/authelia/users.yml
 users:
   authelia:
     disabled: false
     displayname: "Authelia Admin"
-    password: "${AUTHELIA_HASH}"
+    password: "\$argon2id\$v=19\$m=65536,t=3,p=4\$ZBopMzXrzhHXPEZxRDVT2w\$SxWm96DwhOsZyn34DLocwQEIb4kCDsk632PuiMdZnig"
     groups: []
 EOF
 cat <<EOF >/etc/authelia/configuration.yml

install/cinephage-install.sh

@@ -24,7 +24,7 @@ $STD apt install -y \
 msg_ok "Installed Dependencies"
 
 setup_ffmpeg
-NODE_VERSION="26" setup_nodejs
+NODE_VERSION="24" setup_nodejs
 fetch_and_deploy_gh_release "cinephage" "MoldyTaint/Cinephage" "tarball"
 
 msg_info "Building Cinephage"

install/cross-seed-install.sh

@@ -17,7 +17,7 @@ msg_info "Installing Dependencies"
 $STD apt install -y build-essential
 msg_ok "Installed Dependencies"
 
-NODE_VERSION="26" setup_nodejs
+NODE_VERSION="24" setup_nodejs
 
 msg_info "Setup Cross-Seed"
 $STD npm install cross-seed@latest -g

install/firefly-install.sh

@@ -26,7 +26,6 @@ chown -R www-data:www-data /opt/firefly
 chmod -R 775 /opt/firefly/storage
 cd /opt/firefly
 cp .env.example .env
-sed -i -e "s|^APP_KEY=.*|APP_KEY=$(random_password 32)|" -e "s|^STATIC_CRON_TOKEN=.*|STATIC_CRON_TOKEN=$(random_password 32)|" /opt/firefly/.env
 sed -i "s/DB_HOST=.*/DB_HOST=localhost/" /opt/firefly/.env
 sed -i "s/DB_PASSWORD=.*/DB_PASSWORD=$MARIADB_DB_PASS/" /opt/firefly/.env
 $STD composer install --no-dev --no-plugins --no-interaction

install/homelable-install.sh

@@ -33,13 +33,7 @@ msg_ok "Set up Python Backend"
 msg_info "Configuring Homelable"
 mkdir -p /opt/homelable/data
 SECRET_KEY=$(openssl rand -hex 32)
-HOMELABLE_PASS=$(random_password 20)
-BCRYPT_HASH=$(/opt/homelable/backend/.venv/bin/python -c "import bcrypt,sys; print(bcrypt.hashpw(sys.argv[1].encode(), bcrypt.gensalt()).decode())" "$HOMELABLE_PASS")
-{
-  echo "Homelable Credentials"
-  echo "Username: admin"
-  echo "Password: ${HOMELABLE_PASS}"
-} >~/homelable.creds
+BCRYPT_HASH=$(/opt/homelable/backend/.venv/bin/python -c "import bcrypt; print(bcrypt.hashpw(b'admin', bcrypt.gensalt()).decode())")
 cat <<EOF >/opt/homelable/backend/.env
 SECRET_KEY=${SECRET_KEY}
 SQLITE_PATH=/opt/homelable/data/homelab.db

install/keycloak-install.sh

@@ -21,7 +21,6 @@ PG_DB_NAME="keycloak" PG_DB_USER="keycloak" setup_postgresql_db
 fetch_and_deploy_gh_release "keycloak_app" "keycloak/keycloak" "prebuild" "latest" "/opt/keycloak" "keycloak-*.tar.gz"
 
 msg_info "Creating Service"
-ADMIN_PASS=$(random_password 20)
 cat <<EOF >/etc/systemd/system/keycloak.service
 [Unit]
 Description=Keycloak Service
@@ -41,7 +40,7 @@ Environment="KC_DB_USERNAME=keycloak"
 Environment="KC_DB_PASSWORD=$PG_DB_PASS"
 Environment="KC_HTTP_ENABLED=true"
 Environment="KC_BOOTSTRAP_ADMIN_USERNAME=tmpadm"
-Environment="KC_BOOTSTRAP_ADMIN_PASSWORD=${ADMIN_PASS}"
+Environment="KC_BOOTSTRAP_ADMIN_PASSWORD=admin123"
 # Comment following line and uncomment the next 2 if working behind a reverse proxy
 Environment="KC_HOSTNAME_STRICT=false"
 #Environment="KC_HOSTNAME=keycloak.example.com"
@@ -49,13 +48,6 @@ Environment="KC_HOSTNAME_STRICT=false"
 [Install]
 WantedBy=multi-user.target
 EOF
-chmod 600 /etc/systemd/system/keycloak.service
-{
-  echo "Keycloak Credentials"
-  echo "Temporary admin, replace it with a permanent one"
-  echo "Username: tmpadm"
-  echo "Password: ${ADMIN_PASS}"
-} >~/keycloak.creds
 systemctl enable -q --now keycloak
 msg_ok "Created Service"
 

install/kimai-install.sh

@@ -40,7 +40,6 @@ cp .env.dist .env
 sed -i "/^DATABASE_URL=.*/c\DATABASE_URL=mysql://kimai:$MARIADB_DB_PASS@127.0.0.1:3306/kimai_db?charset=utf8mb4&serverVersion=mariadb-$MYSQL_VERSION" /opt/kimai/.env
 sed -i "s|^APP_SECRET=.*|APP_SECRET=$APP_SECRET|" /opt/kimai/.env
 $STD bin/console kimai:install -n
-ADMIN_PASS=$(random_password 20)
 $STD expect <<EOF
 set timeout -1
 log_user 0
@@ -48,16 +47,10 @@ log_user 0
 spawn bin/console kimai:user:create admin admin@community-scripts.org ROLE_SUPER_ADMIN
 
 expect "Please enter the password:"
-send "${ADMIN_PASS}\r"
+send "community-scripts.org\r"
 
 expect eof
 EOF
-{
-  echo "Kimai Credentials"
-  echo "Username: admin"
-  echo "Email: admin@community-scripts.org"
-  echo "Password: ${ADMIN_PASS}"
-} >~/kimai.creds
 $STD composer update --no-interaction
 cat <<EOF >/opt/kimai/config/packages/local.yaml
 kimai:

install/monica-install.sh

@@ -33,13 +33,7 @@ $STD yarn config set ignore-engines true
 $STD yarn install
 $STD yarn run production
 $STD php artisan key:generate
-ADMIN_PASS=$(random_password 20)
-$STD php artisan setup:production --email=admin@community-scripts.org --password="${ADMIN_PASS}" --force
-{
-  echo "Monica Credentials"
-  echo "Email: admin@community-scripts.org"
-  echo "Password: ${ADMIN_PASS}"
-} >~/monica.creds
+$STD php artisan setup:production --email=admin@community-scripts.org --password=community-scripts.org --force
 chown -R www-data:www-data /opt/monica
 chmod -R 775 /opt/monica/storage
 echo "* * * * * root php /opt/monica/artisan schedule:run >> /dev/null 2>&1" >>/etc/crontab

install/myip-install.sh

@@ -13,7 +13,7 @@ setting_up_container
 network_check
 update_os
 
-NODE_VERSION="26" setup_nodejs
+NODE_VERSION="24" setup_nodejs
 fetch_and_deploy_gh_release "myip" "jason5ng32/MyIP" "tarball"
 
 msg_info "Configuring MyIP"

install/nagios-install.sh

@@ -63,13 +63,7 @@ setcap cap_net_raw+p /bin/ping
 msg_ok "Built Nagios Plugins"
 
 msg_info "Configuring Web Authentication"
-NAGIOS_PASS=$(random_password 20)
-$STD htpasswd -bc /usr/local/nagios/etc/htpasswd.users nagiosadmin "$NAGIOS_PASS"
-{
-  echo "Nagios Credentials"
-  echo "Username: nagiosadmin"
-  echo "Password: ${NAGIOS_PASS}"
-} >~/nagios.creds
+$STD htpasswd -bc /usr/local/nagios/etc/htpasswd.users nagiosadmin nagiosadmin
 chown root:www-data /usr/local/nagios/etc/htpasswd.users
 chmod 640 /usr/local/nagios/etc/htpasswd.users
 msg_ok "Configured Web Authentication"

install/neko-install.sh

@@ -201,13 +201,6 @@ cat <<'EOF' >/etc/neko/openbox.xml
 </openbox_config>
 EOF
 
-NEKO_ADMIN_PASS=$(random_password 20)
-NEKO_USER_PASS=$(random_password 20)
-{
-  echo "Neko Credentials"
-  echo "Admin password: ${NEKO_ADMIN_PASS}"
-  echo "User password: ${NEKO_USER_PASS}"
-} >~/neko.creds
 cat <<EOF >/etc/neko/neko.yaml
 server:
   bind: "0.0.0.0:8080"
@@ -226,8 +219,8 @@ desktop:
 member:
   provider: "multiuser"
   multiuser:
-    admin_password: "${NEKO_ADMIN_PASS}"
-    user_password: "${NEKO_USER_PASS}"
+    admin_password: "admin"
+    user_password: "neko"
 EOF
 msg_ok "Set up Runtime"
 

install/nodebb-install.sh

@@ -31,7 +31,6 @@ NODEBB_USER="nodebb"
 NODEBB_PWD="$(random_password 13)"
 MONGO_CONNECTION_STRING="mongodb://${NODEBB_USER}:${NODEBB_PWD}@localhost:27017/nodebb"
 NODEBB_SECRET=$(uuidgen)
-NODEBB_ADMIN_PASS="$(random_password 20)"
 cat <<EOF >~/nodebb.creds
 NodeBB-Credentials
 Mongo Database User: $MONGO_ADMIN_USER
@@ -39,8 +38,6 @@ Mongo Database Password: $MONGO_ADMIN_PWD
 NodeBB User: $NODEBB_USER
 NodeBB Password: $NODEBB_PWD
 NodeBB Secret: $NODEBB_SECRET
-NodeBB Admin User: community-scripts
-NodeBB Admin Password: $NODEBB_ADMIN_PASS
 EOF
 
 $STD mongosh <<EOF
@@ -100,10 +97,10 @@ expect "Administrator email address" {
     send "admin@community-scripts.org\r"
 }
 expect "Password" {
-    send "$NODEBB_ADMIN_PASS\r"
+    send "community-scripts\r"
 }
 expect "Confirm Password" {
-    send "$NODEBB_ADMIN_PASS\r"
+    send "community-scripts\r"
 }
 expect eof
 EOF

install/npmplus-install.sh

@@ -57,17 +57,11 @@ done
 ACME_EMAIL_INPUT="${var_npmplus_acme_email:-}"
 [[ -n "$ACME_EMAIL_INPUT" ]] || read -r -p "${TAB3}Enter your ACME Email (optional, press ENTER to skip): " ACME_EMAIL_INPUT || true
 
-ADMIN_PASS=$(random_password 20)
 yq -i "
   .services.npmplus.environment |=
     (map(select(. != \"TZ=*\" and . != \"ACME_EMAIL=*\" and . != \"INITIAL_ADMIN_EMAIL=*\" and . != \"INITIAL_ADMIN_PASSWORD=*\")) +
-    [\"TZ=$TZ_INPUT\", \"ACME_EMAIL=$ACME_EMAIL_INPUT\", \"INITIAL_ADMIN_EMAIL=admin@local.com\", \"INITIAL_ADMIN_PASSWORD=${ADMIN_PASS}\"])
+    [\"TZ=$TZ_INPUT\", \"ACME_EMAIL=$ACME_EMAIL_INPUT\", \"INITIAL_ADMIN_EMAIL=admin@local.com\", \"INITIAL_ADMIN_PASSWORD=community-scripts.org\"])
 " /opt/compose.yaml
-{
-  echo "NPMplus Credentials"
-  echo "Email: admin@local.com"
-  echo "Password: ${ADMIN_PASS}"
-} >~/npmplus.creds
 
 msg_info "Building and Starting NPMplus (Patience)"
 $STD docker compose up -d

install/octoprint-install.sh

@@ -30,13 +30,7 @@ rm -rf /usr/lib/python3.*/EXTERNALLY-MANAGED
 msg_ok "Setup Python3"
 
 msg_info "Creating user octoprint"
-OCTOPRINT_PASS=$(random_password 20)
-useradd -m -s /bin/bash -p "$(openssl passwd -6 "$OCTOPRINT_PASS")" octoprint
-{
-  echo "OctoPrint Linux user Credentials"
-  echo "Username: octoprint"
-  echo "Password: ${OCTOPRINT_PASS}"
-} >~/octoprint.creds
+useradd -m -s /bin/bash -p $(openssl passwd -1 octoprint) octoprint
 usermod -aG sudo,tty,dialout octoprint
 chown -R octoprint:octoprint /opt
 echo "octoprint ALL=NOPASSWD: $(command -v systemctl) restart octoprint, $(command -v reboot), $(command -v poweroff)" >/etc/sudoers.d/octoprint

install/openobserve-install.sh

@@ -16,7 +16,7 @@ update_os
 msg_info "Installing OpenObserve"
 mkdir -p /opt/openobserve/data
 RELEASE=$(get_latest_github_release "openobserve/openobserve")
-tar zxf <(curl -fsSL https://downloads.openobserve.ai/releases/openobserve/v$RELEASE/openobserve-v$RELEASE-linux-$(arch_resolve).tar.gz) -C /opt/openobserve --no-same-owner
+tar zxf <(curl -fsSL https://downloads.openobserve.ai/releases/openobserve/v$RELEASE/openobserve-v$RELEASE-linux-$(arch_resolve).tar.gz) -C /opt/openobserve
 ROOT_PASS="$(random_password 9)Aa1!"
 
 cat <<EOF >/opt/openobserve/data/.env
@@ -25,7 +25,7 @@ ZO_ROOT_USER_PASSWORD = "${ROOT_PASS}"
 ZO_DATA_DIR = "/opt/openobserve/data"
 ZO_HTTP_PORT = "5080"
 EOF
-echo "${RELEASE}" >~/.openobserve
+echo "${RELEASE}" >>~/.openobserve
 msg_ok "Installed OpenObserve"
 
 msg_info "Creating Service"
@@ -38,6 +38,7 @@ After=network.target
 Type=simple
 EnvironmentFile=/opt/openobserve/data/.env
 ExecStart=/opt/openobserve/openobserve
+ExecStop=killall -QUIT openobserve
 Restart=on-failure
 
 [Install]

install/paymenter-install.sh

@@ -43,13 +43,7 @@ $STD php artisan migrate --force --seed
 msg_ok "Set up database"
 
 msg_info "Creating Admin User"
-PAYMENTER_PASS=$(random_password 20)
-$STD php artisan app:user:create paymenter admin admin@paymenter.org "$PAYMENTER_PASS" 1 -q
-{
-  echo "Paymenter Credentials"
-  echo "Email: admin@paymenter.org"
-  echo "Password: ${PAYMENTER_PASS}"
-} >~/paymenter.creds
+$STD php artisan app:user:create paymenter admin admin@paymenter.org paymenter 1 -q
 msg_ok "Created Admin User"
 
 msg_info "Configuring Nginx"

install/photoprism-install.sh

@@ -46,16 +46,10 @@ tar -xzf /tmp/libheif.tar.gz -C /usr/local
 ldconfig
 echo "${LIBHEIF_URL}" >~/.photoprism_libheif
 chmod -R 755 /opt/photoprism/photos/originals
-ADMIN_PASS=$(random_password 20)
-{
-  echo "PhotoPrism Credentials"
-  echo "Username: admin"
-  echo "Password: ${ADMIN_PASS}"
-} >~/photoprism.creds
 cat <<EOF >/opt/photoprism/config/.env
 # Authentication
 PHOTOPRISM_ADMIN_USER='admin'
-PHOTOPRISM_ADMIN_PASSWORD='${ADMIN_PASS}'
+PHOTOPRISM_ADMIN_PASSWORD='changeme'
 PHOTOPRISM_AUTH_MODE='password'
 PHOTOPRISM_PUBLIC='false'
 
@@ -118,7 +112,7 @@ StoragePath: "/opt/photoprism/storage"
 OriginalsPath: "/opt/photoprism/photos/originals"
 ImportPath: "/media"
 AdminUser: "admin"
-AdminPassword: "${ADMIN_PASS}"
+AdminPassword: "changeme"
 AuthMode: "password"
 DatabaseDriver: "sqlite"
 HttpHost: "0.0.0.0"

install/qbittorrent-install.sh

@@ -18,20 +18,12 @@ fetch_and_deploy_gh_release "qbittorrent" "userdocs/qbittorrent-nox-static" "sin
 msg_info "Setup qBittorrent-nox"
 mv /opt/qbittorrent/qbittorrent /opt/qbittorrent/qbittorrent-nox
 mkdir -p ~/.config/qBittorrent/
-QB_PASS=$(random_password 20)
-QB_SALT=$(random_password 16)
-QB_HASH="$(printf '%s' "$QB_SALT" | base64 -w0):$(openssl kdf -keylen 64 -kdfopt digest:SHA512 -kdfopt pass:"$QB_PASS" -kdfopt salt:"$QB_SALT" -kdfopt iter:100000 -binary PBKDF2 | base64 -w0)"
-{
-  echo "qBittorrent Credentials"
-  echo "Username: admin"
-  echo "Password: ${QB_PASS}"
-} >~/qbittorrent.creds
 cat <<EOF >~/.config/qBittorrent/qBittorrent.conf
 [LegalNotice]
 Accepted=true
 
 [Preferences]
-WebUI\Password_PBKDF2="@ByteArray(${QB_HASH})"
+WebUI\Password_PBKDF2="@ByteArray(amjeuVrF3xRbgzqWQmes5A==:XK3/Ra9jUmqUc4RwzCtrhrkQIcYczBl90DJw2rT8DFVTss4nxpoRhvyxhCf87ahVE3SzD8K9lyPdpyUCfmVsUg==)"
 WebUI\Port=8090
 WebUI\UseUPnP=false
 WebUI\Username=admin

install/rabbitmq-install.sh

@@ -43,15 +43,9 @@ $STD rabbitmqctl enable_feature_flag all
 msg_ok "Enabled RabbitMQ Management Plugin"
 
 msg_info "Creating User"
-RABBITMQ_PASS=$(random_password 20)
-$STD rabbitmqctl add_user proxmox "$RABBITMQ_PASS"
+$STD rabbitmqctl add_user proxmox proxmox
 $STD rabbitmqctl set_user_tags proxmox administrator
 $STD rabbitmqctl set_permissions -p / proxmox ".*" ".*" ".*"
-{
-  echo "RabbitMQ Credentials"
-  echo "Username: proxmox"
-  echo "Password: ${RABBITMQ_PASS}"
-} >~/rabbitmq.creds
 msg_ok "Created User"
 
 motd_ssh

install/signoz-install.sh

@@ -151,7 +151,7 @@ INVITE_EMAIL_TEMPLATE=/opt/signoz/templates/invitation_email_template.html
 SIGNOZ_SQLSTORE_SQLITE_PATH=/var/lib/signoz/signoz.db
 SIGNOZ_WEB_ENABLED=true
 SIGNOZ_WEB_DIRECTORY=/opt/signoz/web
-SIGNOZ_JWT_SECRET=$(openssl rand -hex 32)
+SIGNOZ_JWT_SECRET=secret
 SIGNOZ_ALERTMANAGER_PROVIDER=signoz
 SIGNOZ_TELEMETRYSTORE_PROVIDER=clickhouse
 SIGNOZ_TELEMETRYSTORE_CLICKHOUSE_DSN=tcp://localhost:9000?password=

install/snapotter-install.sh

@@ -78,12 +78,6 @@ msg_info "Configuring SnapOtter"
 mkdir -p /opt/snapotter_data/files
 mkdir -p /tmp/snapotter-workspace
 
-SNAPOTTER_PASS=$(random_password 20)
-{
-  echo "SnapOtter Credentials"
-  echo "Username: admin"
-  echo "Password: ${SNAPOTTER_PASS}"
-} >~/snapotter.creds
 cat <<EOF >/opt/snapotter_data/.env
 PORT=1349
 NODE_ENV=production
@@ -98,7 +92,7 @@ FEATURE_MANIFEST_PATH=/opt/snapotter/docker/feature-manifest.json
 U2NET_HOME=/opt/snapotter_data/ai/models/rembg
 AUTH_ENABLED=true
 DEFAULT_USERNAME=admin
-DEFAULT_PASSWORD=${SNAPOTTER_PASS}
+DEFAULT_PASSWORD=admin
 LOG_LEVEL=info
 TRUST_PROXY=true
 FILE_MAX_AGE_HOURS=72

install/stirling-pdf-install.sh

@@ -116,6 +116,10 @@ if [[ "$login_mode" == "true" ]]; then
 # activate Login
 DISABLE_ADDITIONAL_FEATURES=false
 SECURITY_ENABLELOGIN=true
+
+# login credentials
+SECURITY_INITIALLOGIN_USERNAME=admin
+SECURITY_INITIALLOGIN_PASSWORD=stirling
 EOF
 fi
 msg_ok "Created Environment Variables"

install/yuvomi-install.sh

@@ -23,7 +23,7 @@ msg_ok "Installed Dependencies"
 
 NODE_VERSION="24" setup_nodejs
 
-fetch_and_deploy_gh_release "yuvomi" "ulsklyc/yuvomi" "prebuild" "latest" "/opt/yuvomi" "yuvomi-*-dist.tar.gz"
+fetch_and_deploy_gh_release "yuvomi" "ulsklyc/yuvomi" "tarball"
 
 msg_info "Installing Node.js Dependencies"
 cd /opt/yuvomi

tools/addon/coder-code-server.sh

@@ -85,16 +85,12 @@ function install() {
   mkdir -p "${HOME}/.config/code-server/"
 
   if [ "$preexisting_config" = false ]; then
-    CS_PASS=$(random_password 20)
     cat <<EOF >"$config_path"
 bind-addr: 0.0.0.0:8680
-auth: password
-password: ${CS_PASS}
+auth: none
+password: 
 cert: false
 EOF
-    chmod 600 "$config_path"
-    echo -e "Coder Code Server\nPassword: ${CS_PASS}" >~/coder-code-server.creds
-    chmod 600 ~/coder-code-server.creds
   fi
   systemctl enable -q --now code-server@"$USER"
   systemctl restart code-server@"$USER"
@@ -115,7 +111,7 @@ EOF
   msg_ok "Created update script (/usr/local/bin/update_coder-code-server)"
 
   echo -e "${APP} should be reachable by going to the following URL.
-         ${BL}http://${IP}:8680${CL} (password in ~/coder-code-server.creds)\n"
+         ${BL}http://${IP}:8680${CL} \n"
 }
 
 # ==============================================================================

tools/addon/copyparty.sh

@@ -151,9 +151,9 @@ function install() {
   else
     read -rp "${TAB}Set admin username [admin]: " admin_user
     admin_user=${admin_user:-admin}
-    read -rsp "${TAB}Set admin password [random]: " admin_pass
+    read -rsp "${TAB}Set admin password [community-scripts.org]: " admin_pass
     echo ""
-    admin_pass=${admin_pass:-$(random_password 20)}
+    admin_pass=${admin_pass:-community-scripts.org}
     msg_ok "Configured with admin user: ${admin_user}"
   fi
 
@@ -291,10 +291,8 @@ UPDATEEOF
   msg_ok "Storage: ${BL}${DATA_PATH}${CL}"
   msg_ok "Config: ${BL}${CONF_PATH}${CL}"
   if [[ -n "$admin_user" ]]; then
-    echo -e "Copyparty\nUsername: ${admin_user}\nPassword: ${admin_pass}" >~/copyparty.creds
-    chmod 600 ~/copyparty.creds
     echo ""
-    msg_ok "Login: ${GN}${admin_user}${CL} (password in ~/copyparty.creds)"
+    msg_ok "Login: ${GN}${admin_user}${CL} / ${GN}${admin_pass}${CL}"
   fi
 }
 

tools/addon/filebrowser-quantum.sh

@@ -189,8 +189,6 @@ chown root:root /usr/local/community-scripts
 chmod 755 /usr/local/community-scripts
 msg_ok "Directory prepared"
 
-ADMIN_PASS=$(random_password 20)
-msg_warn "FileBrowser runs as root and shows the whole filesystem. Without authentication, anyone who reaches port ${PORT} can read and change every file."
 echo -n "${TAB}Use No Authentication? (y/N): "
 read -r noauth_prompt
 
@@ -236,12 +234,9 @@ server:
           - neverWatchPath: "/lost+found"
 auth:
   adminUsername: admin
-  adminPassword: ${ADMIN_PASS}
+  adminPassword: community-scripts.org
 EOF
-  chmod 600 "$CONFIG_PATH"
-  echo -e "FileBrowser Quantum\nUsername: admin\nPassword: ${ADMIN_PASS}" >~/filebrowser-quantum.creds
-  chmod 600 ~/filebrowser-quantum.creds
-  msg_ok "Configured admin (credentials saved in ~/filebrowser-quantum.creds)"
+  msg_ok "Configured with default admin (admin / community-scripts.org)"
 fi
 
 msg_info "Creating service"
@@ -281,13 +276,4 @@ EOF
 fi
 
 msg_ok "Service created successfully"
-
-# auth.adminPassword resets the password on every start, so it stays only until the admin exists
-if grep -q '^\s*adminPassword:' "$CONFIG_PATH"; then
-  for _ in {1..30}; do
-    [[ "$(curl -s -o /dev/null -w '%{http_code}' "http://127.0.0.1:${PORT}/health")" == "200" ]] && break
-    sleep 1
-  done
-  sed -i '/^\s*adminPassword:/d' "$CONFIG_PATH"
-fi
 msg_ok "${APP} is reachable at: ${BL}http://${IP}:${PORT}${CL}"

tools/addon/filebrowser.sh

@@ -122,11 +122,9 @@ if [[ "${install_prompt,,}" =~ ^(y|yes)$ ]]; then
   chmod 755 /usr/local/community-scripts
   touch "$DB_PATH"
   chown root:root "$DB_PATH"
-  chmod 600 "$DB_PATH"
+  chmod 644 "$DB_PATH"
   msg_ok "Directory created successfully"
 
-  ADMIN_PASS=$(random_password 20)
-  msg_warn "FileBrowser runs as root and shows the whole filesystem. Without authentication, anyone who reaches port ${PORT} can read and change every file."
   read -r -p "Would you like to use No Authentication? (y/N): " auth_prompt
   if [[ "${auth_prompt,,}" =~ ^(y|yes)$ ]]; then
     msg_info "Configuring No Authentication"
@@ -135,18 +133,16 @@ if [[ "${install_prompt,,}" =~ ^(y|yes)$ ]]; then
     $STD filebrowser config set -a '0.0.0.0' -p "$PORT" -d "$DB_PATH"
     $STD filebrowser config set --auth.method=noauth --database "$DB_PATH"
     if ! filebrowser users update 1 --perm.admin --database "$DB_PATH" &>/dev/null; then
-      $STD filebrowser users add admin "$ADMIN_PASS" --perm.admin --database "$DB_PATH"
+      $STD filebrowser users add admin community-scripts.org --perm.admin --database "$DB_PATH"
     fi
     msg_ok "No Authentication configured"
   else
-    msg_info "Setting up authentication"
+    msg_info "Setting up default authentication"
     cd /usr/local/community-scripts
     $STD filebrowser config init -a '0.0.0.0' -p "$PORT" -d "$DB_PATH"
     $STD filebrowser config set -a '0.0.0.0' -p "$PORT" -d "$DB_PATH"
-    $STD filebrowser users add admin "$ADMIN_PASS" --perm.admin --database "$DB_PATH"
-    echo -e "FileBrowser\nUsername: admin\nPassword: ${ADMIN_PASS}" >~/filebrowser.creds
-    chmod 600 ~/filebrowser.creds
-    msg_ok "Authentication configured (credentials saved in ~/filebrowser.creds)"
+    $STD filebrowser users add admin community-scripts.org --perm.admin --database "$DB_PATH"
+    msg_ok "Default authentication configured (admin:community-scripts.org)"
   fi
 
   msg_info "Creating service"
@@ -160,6 +156,7 @@ After=network-online.target
 User=root
 WorkingDirectory=/usr/local/community-scripts
 ExecStartPre=/bin/touch /usr/local/community-scripts/filebrowser.db
+ExecStartPre=/usr/local/bin/filebrowser config set -a "0.0.0.0" -p ${PORT} -d /usr/local/community-scripts/filebrowser.db
 ExecStart=/usr/local/bin/filebrowser -r / -d /usr/local/community-scripts/filebrowser.db -p ${PORT}
 Restart=always
 

tools/addon/webmin.sh

@@ -30,7 +30,6 @@ catch_errors
 
 # Initialize all core functions (colors, formatting, icons, STD mode)
 load_functions
-confirm_not_pve_host
 require_debian_like
 
 header_info
@@ -50,13 +49,9 @@ msg_ok "Installed Prerequisites"
 
 msg_info "Installing ${APP}"
 fetch_and_deploy_gh_release "webmin" "webmin/webmin" "binary" "latest" "/opt/webmin" "webmin_*_all.deb"
-WEBMIN_PASS=$(random_password 20)
-/usr/share/webmin/changepass.pl /etc/webmin root "$WEBMIN_PASS" &>/dev/null
-echo -e "Webmin\nUsername: root\nPassword: ${WEBMIN_PASS}" >~/webmin.creds
-chmod 600 ~/webmin.creds
+/usr/share/webmin/changepass.pl /etc/webmin root root &>/dev/null
 msg_ok "Installed ${APP}"
 
 get_lxc_ip
 echo -e "Successfully Installed!! ${APP} should be reachable by going to ${BL}https://${LOCAL_IP}:10000${CL}"
-echo -e "Login: root, password in ~/webmin.creds"
 

tools/pve/add-iptag.sh

@@ -588,17 +588,11 @@ get_vm_ips() {
     fi
     if [[ "$agent_enabled" == "1" ]] && command -v qm >/dev/null 2>&1; then
         debug_log "vm $vmid: querying guest agent"
-        local qm_ips=$(timeout 5 qm guest cmd "$vmid" network-get-interfaces 2>/dev/null | grep -oE '([0-9]{1,3}\.){3}[0-9]{1,3}' | grep -v "127.0.0.1")
-        local qm_kept=0
+        local qm_ips=$(timeout 5 qm guest cmd "$vmid" network-get-interfaces 2>/dev/null | grep -oE '([0-9]{1,3}\.){3}[0-9]{1,3}' | grep -v "127.0.0.1" | head -3)
         for qm_ip in $qm_ips; do
             if [[ "$qm_ip" =~ ^([0-9]{1,3}\.){3}[0-9]{1,3}$ ]]; then
-                if ip_in_cidrs "$qm_ip" "${CIDR_LIST[*]}"; then
-                    debug_log "vm $vmid: found IP $qm_ip via qm guest cmd"
-                    ips+="$qm_ip "
-                    ((++qm_kept >= 3)) && break
-                else
-                    debug_log "vm $vmid: skipping IP $qm_ip via qm guest cmd (outside CIDR_LIST)"
-                fi
+                debug_log "vm $vmid: found IP $qm_ip via qm guest cmd"
+                ips+="$qm_ip "
             fi
         done
     else