arm64 unknown

CHANGELOG.md

@@ -573,27 +573,12 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
 ## 2026-11-07
 
-### 🆕 New Scripts
-
-  - EspoCRM ([#18519](https://github.com/community-scripts/ProxmoxVE/pull/18519))
-
 ### 🚀 Updated Scripts
 
-  - #### 🐞 Bug Fixes
-
-    - RomM: emit player isolation headers from the serving location [@adotagarwal](https://github.com/adotagarwal) ([#18511](https://github.com/community-scripts/ProxmoxVE/pull/18511))
-
   - #### 💥 Breaking Changes
 
     - fix: gotenberg: update to v9 [@CrazyWolf13](https://github.com/CrazyWolf13) ([#18491](https://github.com/community-scripts/ProxmoxVE/pull/18491))
 
-### 💾 Core
-
-  - nvidia: close the hardware acceleration step when no GPU is usable | pin the whole NVIDIA userspace to the host's driver version [@MickLesk](https://github.com/MickLesk) ([core#215](https://github.com/community-scripts/core/pull/215))
-- fix: stage release downloads on disk, not in /tmp [@rcourtman](https://github.com/rcourtman) ([core#218](https://github.com/community-scripts/core/pull/218))
-- Minor fixes: restart php-fpm during sigpipe, Install jq for forge commands  [@MickLesk](https://github.com/MickLesk) ([core#213](https://github.com/community-scripts/core/pull/213))
-- incus: name the project restriction that refuses an Incus launch [@MickLesk](https://github.com/MickLesk) ([core#214](https://github.com/community-scripts/core/pull/214))
-
 ## 2026-11-06
 
 ### 🚀 Updated Scripts

ct/espocrm.sh

@@ -1,74 +0,0 @@
-#!/usr/bin/env bash
-_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
-source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: Masked-Kunsiquat
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://www.espocrm.com/ | Github: https://github.com/espocrm/espocrm
-
-APP="EspoCRM"
-var_tags="${var_tags:-crm;business}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-2048}"
-var_disk="${var_disk:-8}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_arm64="${var_arm64:-yes}"
-var_unprivileged="${var_unprivileged:-1}"
-
-export var_admin_user="${var_admin_user:-}"
-export var_admin_pass="${var_admin_pass:-}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -d /opt/espocrm ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "espo-crm" "espocrm/espocrm"; then
-    msg_info "Stopping Services"
-    systemctl stop nginx cron php8.4-fpm
-    msg_ok "Stopped Services"
-
-    CLEAN_INSTALL=1 CLEAN_INSTALL_KEEP="data custom client/custom" fetch_and_deploy_gh_release "espo-crm" "espocrm/espocrm" "prebuild" "latest" "/opt/espocrm" "EspoCRM-*.zip"
-
-    msg_info "Migrating EspoCRM"
-    cd /opt/espocrm
-    $STD php bin/command clear-cache
-    if ! $STD php bin/command migrate; then
-      chown -R www-data:www-data /opt/espocrm
-      systemctl start php8.4-fpm
-      systemctl start cron nginx
-      msg_error "Migration failed; customizations may be incompatible. Check /opt/espocrm/data/logs, then run update again."
-      exit 1
-    fi
-    chown -R www-data:www-data /opt/espocrm
-    msg_ok "Migrated EspoCRM"
-
-    msg_info "Starting Services"
-    systemctl start php8.4-fpm
-    systemctl start cron nginx
-    msg_ok "Started Services"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW}Access it using the following URL:${CL}"
-echo -e "${GATEWAY}${BGN}http://${IP}${CL}"

ct/pixelfed.sh

@@ -0,0 +1,79 @@
+#!/usr/bin/env bash
+_cs_boot="${COMMUNITY_SCRIPTS_CORE_DIR:-$(dirname "${BASH_SOURCE[0]}")/../../core}/core/build.func"
+source "$_cs_boot" 2>/dev/null || source <(curl -fsSL "${COMMUNITY_SCRIPTS_CORE_URL:-https://raw.githubusercontent.com/community-scripts/core/main}/core/build.func")
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://pixelfed.org/
+
+APP="Pixelfed"
+var_tags="${var_tags:-fediverse;social}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-2048}"
+var_disk="${var_disk:-10}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+# var_arm64="${var_arm64:-no}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -d /opt/pixelfed ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  if check_for_gh_release "pixelfed" "pixelfed/pixelfed"; then
+    msg_info "Stopping Services"
+    systemctl stop pixelfed-horizon pixelfed-scheduler.timer
+    msg_ok "Services stopped"
+
+    create_backup /opt/pixelfed/.env \
+      /opt/pixelfed/storage
+
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "pixelfed" "pixelfed/pixelfed" "tarball" "latest" "/opt/pixelfed"
+
+    restore_backup
+
+    msg_info "Updating Pixelfed"
+    cd /opt/pixelfed
+    chmod -R 755 /opt/pixelfed
+    chmod -R 775 /opt/pixelfed/storage /opt/pixelfed/bootstrap/cache
+    export COMPOSER_ALLOW_SUPERUSER=1
+    $STD composer install --no-dev --no-ansi --no-interaction --optimize-autoloader
+    chown -R pixelfed:pixelfed /opt/pixelfed
+    $STD sudo -u pixelfed php artisan storage:link
+    $STD sudo -u pixelfed php artisan migrate --force
+    $STD sudo -u pixelfed php artisan route:cache
+    $STD sudo -u pixelfed php artisan view:cache
+    $STD sudo -u pixelfed php artisan config:cache
+    $STD sudo -u pixelfed php artisan horizon:publish
+    msg_ok "Updated Pixelfed"
+
+    msg_info "Starting Services"
+    systemctl start pixelfed-horizon pixelfed-scheduler.timer
+    msg_ok "Services started"
+    msg_ok "Updated successfully!"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW}Access it using the following URL:${CL}"
+echo -e "${GATEWAY}${BGN}http://${IP}${CL}"
+echo -e "${INFO}${YW} Create an admin account with:${CL}"
+echo -e "${TAB}cd /opt/pixelfed && sudo -u pixelfed php artisan user:create"

ct/romm.sh

@@ -107,9 +107,8 @@ function update_script() {
     ln -sfn "$ROMM_BASE"/resources /opt/romm/frontend/dist/assets/romm/resources
     ln -sfn "$ROMM_BASE"/assets /opt/romm/frontend/dist/assets/romm/assets
     if [[ -f /etc/angie/http.d/romm.conf ]]; then
-      if ! grep -q "js_content decode.decodeBase64" /etc/angie/http.d/romm.conf ||
-        ! grep -q "coep_header" /etc/angie/http.d/romm.conf; then
-        msg_info "Updating Angie config (decode/cache locations, player isolation headers)"
+      if ! grep -q "js_content decode.decodeBase64" /etc/angie/http.d/romm.conf; then
+        msg_info "Adding missing /decode and /cache locations to Angie config"
         dpkg -l angie-module-njs &>/dev/null || $STD apt install -y angie-module-njs
         grep -q "ngx_http_js_module.so" /etc/angie/angie.conf || sed -i '1i load_module modules/ngx_http_js_module.so;' /etc/angie/angie.conf
         mkdir -p /etc/angie/js "${ROMM_BASE}/cache"
@@ -148,20 +147,6 @@ map \$http_upgrade \$connection_upgrade {
     '' close;
 }
 
-# COEP/COOP for the EmulatorJS and js-dos players (SharedArrayBuffer needs a
-# crossOriginIsolated document). Matched on \$request_uri because try_files
-# rewrites \$uri to /index.html before add_header runs, so a per-location
-# add_header on the player route never fires. Mirrors upstream RomM's
-# docker/nginx/templates/default.conf.template.
-map \$request_uri \$coep_header {
-    default        "";
-    ~^/rom/.*/(ejs|jsdos)(\?|\$) "require-corp";
-}
-map \$request_uri \$coop_header {
-    default        "";
-    ~^/rom/.*/(ejs|jsdos)(\?|\$) "same-origin";
-}
-
 server {
     listen 80;
     server_name _;
@@ -170,9 +155,6 @@ server {
 
     location / {
         try_files \$uri \$uri/ /index.html;
-        add_header Cache-Control "no-cache";
-        add_header Cross-Origin-Embedder-Policy \$coep_header;
-        add_header Cross-Origin-Opener-Policy \$coop_header;
     }
 
     location /assets {
@@ -182,6 +164,12 @@ server {
         add_header Cache-Control "public, immutable";
     }
 
+    location ~ ^/rom/.*/ejs\$ {
+        add_header Cross-Origin-Embedder-Policy "require-corp";
+        add_header Cross-Origin-Opener-Policy "same-origin";
+        try_files \$uri /index.html;
+    }
+
     location /api {
         proxy_pass http://romm_backend;
         proxy_buffering off;
@@ -221,7 +209,7 @@ server {
     }
 }
 EOF
-        msg_ok "Updated Angie config"
+        msg_ok "Added /decode and /cache locations"
       else
         sed -i -e "s|alias .*/library/;|alias ${ROMM_BASE}/library/;|" \
           -e "s|alias .*/cache/;|alias ${ROMM_BASE}/cache/;|" /etc/angie/http.d/romm.conf

install/espocrm-install.sh

@@ -1,146 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: Masked-Kunsiquat
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://www.espocrm.com/ | Github: https://github.com/espocrm/espocrm
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-if [[ -z "${var_admin_user:-}" ]]; then
-  var_admin_user=$(prompt_input "EspoCRM admin username (a-z, 0-9, @ . _ -):" "admin" 60)
-fi
-var_admin_user="${var_admin_user:-admin}"
-var_admin_user="${var_admin_user,,}"
-if [[ ! "$var_admin_user" =~ ^[a-z0-9@._-]+$ ]]; then
-  msg_warn "EspoCRM usernames take only a-z, 0-9 and @ . _ -; using admin"
-  var_admin_user="admin"
-fi
-if [[ -z "${var_admin_pass:-}" ]]; then
-  var_admin_pass=$(random_password 16)
-fi
-
-msg_info "Installing Dependencies"
-$STD apt install -y nginx
-msg_ok "Installed Dependencies"
-
-setup_mariadb
-MARIADB_DB_NAME="espocrm" MARIADB_DB_USER="espocrm" setup_mariadb_db
-PHP_VERSION="8.4" PHP_FPM="YES" PHP_MODULE="ldap" setup_php
-fetch_and_deploy_gh_release "espo-crm" "espocrm/espocrm" "prebuild" "latest" "/opt/espocrm" "EspoCRM-*.zip"
-
-msg_info "Configuring EspoCRM"
-cd /opt/espocrm
-$STD php bin/command config:populate
-$STD php bin/command config:set defaultPermissions.user www-data
-$STD php bin/command config:set defaultPermissions.group www-data
-$STD php bin/command config:set database.platform Mysql
-$STD php bin/command config:set database.host localhost
-$STD php bin/command config:set database.dbname "$MARIADB_DB_NAME"
-$STD php bin/command config:set database.user "$MARIADB_DB_USER"
-$STD php bin/command config:set database.password "$MARIADB_DB_PASS"
-$STD php bin/command rebuild
-$STD php bin/command create-admin-user "$var_admin_user"
-printf '%s\n' "$var_admin_pass" | $STD php bin/command set-password "$var_admin_user"
-$STD php bin/command config:set siteUrl "http://${LOCAL_IP}"
-$STD php bin/command populate-scheduled-jobs
-$STD php bin/command config:set jobRunInParallel true --type=bool
-$STD php bin/command app-check
-$STD php bin/command config:set isInstalled true --type=bool
-chown -R www-data:www-data /opt/espocrm
-msg_ok "Configured EspoCRM"
-
-msg_info "Creating Nginx Site"
-PHP_SOCK=$(get_php_fpm_socket)
-cat <<EOF >/etc/nginx/sites-available/espocrm
-server {
-    listen 80 default_server;
-    listen [::]:80 default_server;
-    server_name _;
-
-    charset utf-8;
-    index index.html index.php;
-
-    client_max_body_size 128M;
-    keepalive_timeout 300;
-    server_tokens off;
-    fastcgi_send_timeout 300;
-    fastcgi_read_timeout 300;
-
-    gzip on;
-    gzip_types text/plain text/css text/javascript application/javascript application/json;
-    gzip_min_length 1000;
-
-    root /opt/espocrm/public;
-
-    location /client {
-        root /opt/espocrm;
-        autoindex off;
-
-        location ~* ^.+\.(js|css|png|jpg|svg|svgz|jpeg|gif|ico|tpl)\$ {
-            access_log off;
-            expires max;
-        }
-    }
-
-    location = /favicon.ico { access_log off; log_not_found off; }
-    location = /robots.txt { access_log off; log_not_found off; }
-
-    location ~ \.php\$ {
-        fastcgi_pass unix:${PHP_SOCK};
-        include fastcgi_params;
-        fastcgi_index index.php;
-        fastcgi_param SCRIPT_FILENAME \$document_root\$fastcgi_script_name;
-        fastcgi_param QUERY_STRING \$query_string;
-    }
-
-    location /api/v1/ {
-        if (!-e \$request_filename) {
-            rewrite ^/api/v1/(.*)\$ /api/v1/index.php last;
-        }
-    }
-
-    location /portal/ {
-        try_files \$uri \$uri/ /portal/index.php?\$query_string;
-    }
-
-    location /api/v1/portal-access {
-        if (!-e \$request_filename) {
-            rewrite ^/api/v1/(.*)\$ /api/v1/portal-access/index.php last;
-        }
-    }
-
-    location ~ /(\.htaccess|web\.config|\.git) {
-        deny all;
-    }
-}
-EOF
-msg_ok "Created Nginx Site"
-nginx_enable_site "espocrm"
-
-msg_info "Setting up Cron"
-cat <<EOF >/etc/cron.d/espocrm
-* * * * * www-data cd /opt/espocrm && php -f cron.php >/dev/null 2>&1
-EOF
-systemctl enable -q --now cron
-msg_ok "Set up Cron"
-
-msg_info "Saving Credentials"
-cat <<EOF >>~/espocrm.creds
-
-EspoCRM Admin
-Username: ${var_admin_user}
-Password: ${var_admin_pass}
-EOF
-chmod 600 ~/espocrm.creds
-msg_ok "Saved Credentials"
-
-motd_ssh
-customize
-cleanup_lxc

install/pixelfed-install.sh

@@ -0,0 +1,236 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://pixelfed.org/
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt install -y \
+  nginx \
+  redis-server \
+  ffmpeg \
+  jpegoptim \
+  optipng \
+  pngquant \
+  gifsicle \
+  libvips42
+msg_ok "Installed Dependencies"
+
+msg_info "Creating Pixelfed User"
+useradd -rU -s /bin/bash pixelfed
+usermod -aG redis pixelfed
+msg_ok "Created Pixelfed User"
+
+
+PG_VERSION="17" setup_postgresql
+PG_DB_NAME="pixelfed" PG_DB_USER="pixelfed" setup_postgresql_db
+PHP_VERSION="8.4" PHP_FPM="YES" PHP_MODULE="bcmath,ctype,curl,exif,gd,imagick,intl,mbstring,pgsql,redis,xml,zip" PHP_UPLOAD_MAX_FILESIZE="500M" PHP_POST_MAX_SIZE="500M" PHP_MAX_EXECUTION_TIME="600" setup_php
+setup_composer
+
+msg_info "Configuring Redis"
+REDIS_PASS=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | head -c13)
+sed -i "s/^# requirepass foobared/requirepass $REDIS_PASS/" /etc/redis/redis.conf
+sed -i "s/^requirepass .*/requirepass $REDIS_PASS/" /etc/redis/redis.conf
+systemctl restart redis-server
+msg_ok "Configured Redis"
+
+msg_info "Configuring PHP-FPM Pool"
+cp /etc/php/8.4/fpm/pool.d/www.conf /etc/php/8.4/fpm/pool.d/pixelfed.conf
+sed -i 's/\[www\]/[pixelfed]/' /etc/php/8.4/fpm/pool.d/pixelfed.conf
+sed -i 's/^user = www-data/user = pixelfed/' /etc/php/8.4/fpm/pool.d/pixelfed.conf
+sed -i 's/^group = www-data/group = pixelfed/' /etc/php/8.4/fpm/pool.d/pixelfed.conf
+sed -i 's|^listen = .*|listen = /run/php/php8.4-fpm-pixelfed.sock|' /etc/php/8.4/fpm/pool.d/pixelfed.conf
+sed -i 's/^listen.owner = .*/listen.owner = www-data/' /etc/php/8.4/fpm/pool.d/pixelfed.conf
+sed -i 's/^listen.group = .*/listen.group = www-data/' /etc/php/8.4/fpm/pool.d/pixelfed.conf
+systemctl restart php8.4-fpm
+msg_ok "Configured PHP-FPM Pool"
+
+fetch_and_deploy_gh_release "pixelfed" "pixelfed/pixelfed" "tarball" "latest" "/opt/pixelfed"
+
+msg_info "Installing Pixelfed (Patience)"
+cd /opt/pixelfed
+cat <<EOF >/opt/pixelfed/.env
+APP_NAME="Pixelfed"
+APP_ENV="production"
+APP_KEY=
+APP_DEBUG="false"
+APP_URL=http://${LOCAL_IP}
+APP_DOMAIN=${LOCAL_IP}
+ADMIN_DOMAIN=${LOCAL_IP}
+SESSION_DOMAIN=${LOCAL_IP}
+TRUST_PROXIES="*"
+FORCE_HTTPS_URLS="false"
+
+OPEN_REGISTRATION="false"
+ENFORCE_EMAIL_VERIFICATION="false"
+PF_MAX_USERS="1000"
+OAUTH_ENABLED="true"
+ENABLE_CONFIG_CACHE="true"
+INSTANCE_DISCOVER_PUBLIC="true"
+
+PF_OPTIMIZE_IMAGES="true"
+IMAGE_QUALITY="80"
+MAX_PHOTO_SIZE="15000"
+MAX_CAPTION_LENGTH="500"
+MAX_ALBUM_LENGTH="4"
+
+DB_CONNECTION="pgsql"
+DB_HOST="127.0.0.1"
+DB_PORT="5432"
+DB_DATABASE="${PG_DB_NAME}"
+DB_USERNAME="${PG_DB_USER}"
+DB_PASSWORD="${PG_DB_PASS}"
+
+REDIS_CLIENT="predis"
+REDIS_SCHEME="tcp"
+REDIS_HOST="127.0.0.1"
+REDIS_PASSWORD="${REDIS_PASS}"
+REDIS_PORT="6379"
+
+SESSION_DRIVER="database"
+CACHE_DRIVER="redis"
+QUEUE_DRIVER="redis"
+BROADCAST_DRIVER="log"
+LOG_CHANNEL="stack"
+HORIZON_PREFIX="horizon-"
+
+ACTIVITY_PUB="true"
+AP_REMOTE_FOLLOW="true"
+AP_INBOX="true"
+AP_OUTBOX="true"
+AP_SHAREDINBOX="true"
+
+EXP_EMC="true"
+
+MAIL_DRIVER="log"
+MAIL_HOST="smtp.mailtrap.io"
+MAIL_PORT="2525"
+MAIL_USERNAME="null"
+MAIL_PASSWORD="null"
+MAIL_ENCRYPTION="null"
+MAIL_FROM_ADDRESS="pixelfed@example.com"
+MAIL_FROM_NAME="Pixelfed"
+
+PF_ENABLE_CLOUD="false"
+FILESYSTEM_CLOUD="s3"
+SESSION_SECURE_COOKIE="false"
+HTTPS="false"
+EOF
+chmod -R 755 /opt/pixelfed
+chmod -R 775 /opt/pixelfed/storage /opt/pixelfed/bootstrap/cache
+export COMPOSER_ALLOW_SUPERUSER=1
+$STD composer install --no-dev --no-ansi --no-interaction --optimize-autoloader
+$STD php artisan key:generate --force
+$STD php artisan storage:link
+$STD php artisan migrate --force
+$STD php artisan import:cities
+$STD php artisan passport:keys
+$STD php artisan route:cache
+$STD php artisan view:cache
+$STD php artisan config:cache
+$STD php artisan instance:actor
+$STD php artisan horizon:install
+chown -R pixelfed:pixelfed /opt/pixelfed
+msg_ok "Installed Pixelfed"
+
+msg_info "Configuring Nginx"
+cat <<'EOF' >/etc/nginx/sites-available/pixelfed
+server {
+    listen 80;
+    server_name _;
+    root /opt/pixelfed/public;
+    index index.php;
+
+    charset utf-8;
+    client_max_body_size 100M;
+
+    add_header X-Frame-Options "SAMEORIGIN";
+    add_header X-XSS-Protection "1; mode=block";
+    add_header X-Content-Type-Options "nosniff";
+
+    location / {
+        try_files $uri $uri/ /index.php?$query_string;
+    }
+
+    location = /favicon.ico { access_log off; log_not_found off; }
+    location = /robots.txt  { access_log off; log_not_found off; }
+
+    error_page 404 /index.php;
+
+    location ~ \.php$ {
+        fastcgi_split_path_info ^(.+\.php)(/.+)$;
+        fastcgi_pass unix:/run/php/php8.4-fpm-pixelfed.sock;
+        fastcgi_index index.php;
+        include fastcgi_params;
+        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
+    }
+
+    location ~ /\.(?!well-known).* {
+        deny all;
+    }
+}
+EOF
+ln -sf /etc/nginx/sites-available/pixelfed /etc/nginx/sites-enabled/pixelfed
+rm -f /etc/nginx/sites-enabled/default
+$STD nginx -t
+systemctl reload nginx
+msg_ok "Configured Nginx"
+
+msg_info "Creating Services"
+cat <<'EOF' >/etc/systemd/system/pixelfed-horizon.service
+[Unit]
+Description=Pixelfed Horizon Queue Worker
+After=network.target redis-server.service postgresql.service
+Requires=redis-server.service
+
+[Service]
+Type=simple
+User=pixelfed
+WorkingDirectory=/opt/pixelfed
+ExecStart=/usr/bin/php /opt/pixelfed/artisan horizon
+Restart=always
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+EOF
+
+cat <<'EOF' >/etc/systemd/system/pixelfed-scheduler.service
+[Unit]
+Description=Pixelfed Task Scheduler
+After=network.target
+
+[Service]
+Type=oneshot
+User=pixelfed
+WorkingDirectory=/opt/pixelfed
+ExecStart=/usr/bin/php /opt/pixelfed/artisan schedule:run
+EOF
+
+cat <<'EOF' >/etc/systemd/system/pixelfed-scheduler.timer
+[Unit]
+Description=Run Pixelfed Scheduler every minute
+
+[Timer]
+OnCalendar=*-*-* *:*:00
+Persistent=true
+
+[Install]
+WantedBy=timers.target
+EOF
+systemctl enable -q --now pixelfed-horizon pixelfed-scheduler.timer
+msg_ok "Created Services"
+
+
+motd_ssh
+customize
+cleanup_lxc

install/romm-install.sh

@@ -257,33 +257,15 @@ map $http_upgrade $connection_upgrade {
     '' close;
 }
 
-# COEP/COOP for the EmulatorJS and js-dos players (SharedArrayBuffer needs a
-# crossOriginIsolated document). Matched on $request_uri because try_files
-# rewrites $uri to /index.html before add_header runs, so a per-location
-# add_header on the player route never fires. Mirrors upstream RomM's
-# docker/nginx/templates/default.conf.template.
-map $request_uri $coep_header {
-    default        "";
-    ~^/rom/.*/(ejs|jsdos)(\?|$) "require-corp";
-}
-map $request_uri $coop_header {
-    default        "";
-    ~^/rom/.*/(ejs|jsdos)(\?|$) "same-origin";
-}
-
 server {
     listen 80;
     server_name _;
     root /opt/romm/frontend/dist;
     client_max_body_size 0;
 
-    # Frontend SPA - also emits the player isolation headers: the player URLs
-    # fall through try_files to /index.html, which this location serves
+    # Frontend SPA
     location / {
         try_files $uri $uri/ /index.html;
-        add_header Cache-Control "no-cache";
-        add_header Cross-Origin-Embedder-Policy $coep_header;
-        add_header Cross-Origin-Opener-Policy $coop_header;
     }
 
     # Static assets
@@ -294,6 +276,13 @@ server {
         add_header Cache-Control "public, immutable";
     }
 
+    # EmulatorJS player - requires COOP/COEP headers for SharedArrayBuffer
+    location ~ ^/rom/.*/ejs$ {
+        add_header Cross-Origin-Embedder-Policy "require-corp";
+        add_header Cross-Origin-Opener-Policy "same-origin";
+        try_files $uri /index.html;
+    }
+
     # Backend API
     location /api {
         proxy_pass http://romm_backend;