Merge branch 'main' of https://github.com/community-scripts/ProxmoxVE

2025-08-25 14:23:27 +02:00 · 2025-08-25 14:23:27 +02:00 · df564ace13
commit df564ace13
parent 2be054a004 d2b28413eb
10 changed files with 478 additions and 14 deletions
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@ -12,6 +12,11 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit

 ## 2025-08-25

+### 🆕 New Scripts
+
+  - Alpine-Redlib ([#7178](https://github.com/community-scripts/ProxmoxVE/pull/7178))
+- healthchecks ([#7177](https://github.com/community-scripts/ProxmoxVE/pull/7177))
+
 ### 🚀 Updated Scripts

  - #### 🐞 Bug Fixes
@ -21,6 +26,8 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit

  - #### ✨ New Features

+    - [core]: uv uses now "update-shell" command [@MickLesk](https://github.com/MickLesk) ([#7172](https://github.com/community-scripts/ProxmoxVE/pull/7172))
+    - [core]: tools.func - better verbose for postgresql [@MickLesk](https://github.com/MickLesk) ([#7173](https://github.com/community-scripts/ProxmoxVE/pull/7173))
    - n8n: Force update to NodeJS v22 [@tremor021](https://github.com/tremor021) ([#7176](https://github.com/community-scripts/ProxmoxVE/pull/7176))

 ## 2025-08-24
--- a/ct/alpine-redlib.sh
+++ b/ct/alpine-redlib.sh
@ -0,0 +1,56 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2025 community-scripts ORG
+# Author: andrej-kocijan (Andrej Kocijan)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/redlib-org/redlib
+
+APP="Alpine-Redlib"
+var_tags="${var_tags:-alpine;frontend}"
+var_cpu="${var_cpu:-1}"
+var_ram="${var_ram:-512}"
+var_disk="${var_disk:-1}"
+var_os="${var_os:-alpine}"
+var_version="${var_version:-3.22}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_resources
+
+  if [[ ! -d /opt/redlib ]]; then
+      msg_error "No ${APP} Installation Found!"
+      exit
+  fi
+
+  msg_info "Updating Alpine Packages"
+  $STD apk -U upgrade
+  msg_ok "Updated Alpine Packages"
+
+  msg_info "Stopping ${APP} Service"
+  $STD rc-service redlib stop
+  msg_ok "Stopped ${APP} Service"
+
+  fetch_and_deploy_gh_release "redlib" "redlib-org/redlib" "prebuild" "latest" "/opt/redlib" "redlib-x86_64-unknown-linux-musl.tar.gz"
+
+  msg_info "Starting ${APP} Service"
+  $STD rc-service redlib start
+  msg_ok "Started ${APP} Service"
+
+  msg_ok "Update Successful"
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:5252${CL}"
--- a/ct/headers/alpine-redlib
+++ b/ct/headers/alpine-redlib
@ -0,0 +1,6 @@
+    ___    __      _                  ____           _____ __  
+   /   |  / /___  (_)___  ___        / __ \___  ____/ / (_) /_ 
+  / /| | / / __ \/ / __ \/ _ \______/ /_/ / _ \/ __  / / / __ \
+ / ___ |/ / /_/ / / / / /  __/_____/ _, _/  __/ /_/ / / / /_/ /
+/_/  |_/_/ .___/_/_/ /_/\___/     /_/ |_|\___/\__,_/_/_/_.___/ 
+        /_/                                                    
--- a/ct/headers/healthchecks
+++ b/ct/headers/healthchecks
@ -0,0 +1,6 @@
+    __               ____  __         __              __       
+   / /_  ___  ____ _/ / /_/ /_  _____/ /_  ___  _____/ /_______
+  / __ \/ _ \/ __ `/ / __/ __ \/ ___/ __ \/ _ \/ ___/ //_/ ___/
+ / / / /  __/ /_/ / / /_/ / / / /__/ / / /  __/ /__/ ,< (__  ) 
+/_/ /_/\___/\__,_/_/\__/_/ /_/\___/_/ /_/\___/\___/_/|_/____/  
+                                                               
--- a/ct/healthchecks.sh
+++ b/ct/healthchecks.sh
@ -0,0 +1,70 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2025 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://healthchecks.io/
+
+APP="healthchecks"
+var_tags="${var_tags:-monitoring}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-2048}"
+var_disk="${var_disk:-5}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-12}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -d /opt/healthchecks ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  RELEASE=$(curl -fsSL https://api.github.com/repos/healthchecks/healthchecks/releases/latest | jq '.tag_name' | sed 's/^"v//;s/"$//')
+  if [[ "${RELEASE}" != "$(cat ~/.healthchecks 2>/dev/null)" ]] || [[ ! -f ~/.healthchecks ]]; then
+    msg_info "Stopping $APP"
+    systemctl stop healthchecks
+    msg_ok "Stopped $APP"
+
+    setup_uv
+    fetch_and_deploy_gh_release "healthchecks" "healthchecks/healthchecks"
+
+    msg_info "Updating $APP to v${RELEASE}"
+    cd /opt/healthchecks
+    mkdir -p /opt/healthchecks/static-collected/
+    $STD uv pip install wheel gunicorn -r requirements.txt --system
+    $STD uv run -- python manage.py makemigrations
+    $STD uv run -- python manage.py migrate --noinput
+    $STD uv run -- python manage.py collectstatic --noinput
+    $STD uv run -- python manage.py compress
+    msg_ok "Updated $APP to v${RELEASE}"
+
+    msg_info "Starting $APP"
+    systemctl start healthchecks
+    systemctl restart caddy
+    msg_ok "Started $APP"
+
+    msg_ok "Update Successful"
+  else
+    msg_ok "No update required. ${APP} is already at v${RELEASE}"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}https://${IP}${CL}"
--- a/frontend/public/json/healthchecks.json
+++ b/frontend/public/json/healthchecks.json
@ -0,0 +1,44 @@
+{
+  "name": "Healthchecks",
+  "slug": "healthchecks",
+  "categories": [
+    9
+  ],
+  "date_created": "2025-08-25",
+  "type": "ct",
+  "updateable": true,
+  "privileged": false,
+  "config_path": "/opt/healthchecks/hc/local_settings.py",
+  "interface_port": 3000,
+  "documentation": "https://healthchecks.io/docs/",
+  "website": "https://healthchecks.io/",
+  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons/webp/healthchecks.webp",
+  "description": "Healthchecks is a cron job monitoring service. It listens for HTTP requests and email messages (\"pings\") from your cron jobs and scheduled tasks (\"checks\"). When a ping does not arrive on time, Healthchecks sends out alerts. Healthchecks comes with a web dashboard, API, 25+ integrations for delivering notifications, monthly email reports, WebAuthn 2FA support, team management features: projects, team members, read-only access.",
+  "install_methods": [
+    {
+      "type": "default",
+      "script": "ct/healthchecks.sh",
+      "resources": {
+        "cpu": 2,
+        "ram": 2048,
+        "hdd": 5,
+        "os": "Debian",
+        "version": "12"
+      }
+    }
+  ],
+  "default_credentials": {
+    "username": null,
+    "password": null
+  },
+  "notes": [
+    {
+      "text": "if you change your LXC-IP, you need to update /etc/caddy/Caddyfile & /opt/healthchecks/hc/local_settings.py",
+      "type": "info"
+    },
+    {
+      "text": "Show credentials: `cat ~/healthchecks.creds`",
+      "type": "info"
+    }
+  ]
+}
--- a/frontend/public/json/redlib.json
+++ b/frontend/public/json/redlib.json
@ -0,0 +1,35 @@
+{
+  "name": "Redlib",
+  "slug": "redlib",
+  "categories": [
+    10
+  ],
+  "date_created": "2025-08-25",
+  "type": "ct",
+  "updateable": true,
+  "privileged": false,
+  "interface_port": 5252,
+  "documentation": "https://github.com/redlib-org/redlib/blob/main/README.md",
+  "website": "https://github.com/redlib-org/redlib",
+  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons/webp/redlib.webp",
+  "config_path": "/opt/redlib/redlib.conf",
+  "description": "An alternative private front-end to Reddit. Redlib hopes to provide an easier way to browse Reddit, without the ads, trackers, and bloat.",
+  "install_methods": [
+    {
+      "type": "default",
+      "script": "ct/alpine-redlib.sh",
+      "resources": {
+        "cpu": 1,
+        "ram": 512,
+        "hdd": 1,
+        "os": "alpine",
+        "version": "3.22"
+      }
+    }
+  ],
+  "default_credentials": {
+    "username": null,
+    "password": null
+  },
+  "notes": []
+}
--- a/install/alpine-redlib-install.sh
+++ b/install/alpine-redlib-install.sh
@ -0,0 +1,98 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2025 community-scripts ORG
+# Author: andrej-kocijan (Andrej Kocijan)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/redlib-org/redlib
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+fetch_and_deploy_gh_release "redlib" "redlib-org/redlib" "prebuild" "latest" "/opt/redlib" "redlib-x86_64-unknown-linux-musl.tar.gz"
+
+msg_info "Configuring Redlib"
+cat <<EOF >/opt/redlib/redlib.conf
+############################################
+# Redlib Instance Configuration File
+# Uncomment and edit values as needed
+############################################
+
+## Instance settings
+ADDRESS=0.0.0.0
+PORT=5252                           # Integer (0-65535) - Internal port
+#REDLIB_SFW_ONLY=off                # ["on", "off"] - Filter all NSFW content
+#REDLIB_BANNER=                     # String - Displayed on instance info page
+#REDLIB_ROBOTS_DISABLE_INDEXING=off # ["on", "off"] - Disable search engine indexing
+#REDLIB_PUSHSHIFT_FRONTEND=undelete.pullpush.io # Pushshift frontend for removed links
+#REDLIB_ENABLE_RSS=off              # ["on", "off"] - Enable RSS feed generation
+#REDLIB_FULL_URL=                   # String - Needed for proper RSS URLs
+
+## Default user settings
+#REDLIB_DEFAULT_THEME=system        # Theme (system, light, dark, black, dracula, nord, laserwave, violet, gold, rosebox, gruvboxdark, gruvboxlight, tokyoNight, icebergDark, doomone, libredditBlack, libredditDark, libredditLight)
+#REDLIB_DEFAULT_FRONT_PAGE=default  # ["default", "popular", "all"]
+#REDLIB_DEFAULT_LAYOUT=card         # ["card", "clean", "compact"]
+#REDLIB_DEFAULT_WIDE=off            # ["on", "off"]
+#REDLIB_DEFAULT_POST_SORT=hot       # ["hot", "new", "top", "rising", "controversial"]
+#REDLIB_DEFAULT_COMMENT_SORT=confidence # ["confidence", "top", "new", "controversial", "old"]
+#REDLIB_DEFAULT_BLUR_SPOILER=off    # ["on", "off"]
+#REDLIB_DEFAULT_SHOW_NSFW=off       # ["on", "off"]
+#REDLIB_DEFAULT_BLUR_NSFW=off       # ["on", "off"]
+#REDLIB_DEFAULT_USE_HLS=off         # ["on", "off"]
+#REDLIB_DEFAULT_HIDE_HLS_NOTIFICATION=off # ["on", "off"]
+#REDLIB_DEFAULT_AUTOPLAY_VIDEOS=off # ["on", "off"]
+#REDLIB_DEFAULT_SUBSCRIPTIONS=      # Example: sub1+sub2+sub3
+#REDLIB_DEFAULT_HIDE_AWARDS=off     # ["on", "off"]
+#REDLIB_DEFAULT_DISABLE_VISIT_REDDIT_CONFIRMATION=off # ["on", "off"]
+#REDLIB_DEFAULT_HIDE_SCORE=off      # ["on", "off"]
+#REDLIB_DEFAULT_HIDE_SIDEBAR_AND_SUMMARY=off # ["on", "off"]
+#REDLIB_DEFAULT_FIXED_NAVBAR=on     # ["on", "off"]
+#REDLIB_DEFAULT_REMOVE_DEFAULT_FEEDS=off # ["on", "off"]
+EOF
+msg_ok "Configured Redlib"
+
+msg_info "Creating Redlib Service"
+cat <<EOF >/etc/init.d/redlib
+#!/sbin/openrc-run
+
+name="Redlib"
+description="Redlib Service"
+command="/opt/redlib/redlib"
+pidfile="/run/redlib.pid"
+supervisor="supervise-daemon"
+command_background="yes"
+
+depend() {
+    need net
+}
+
+start_pre() {
+
+    set -a
+    . /opt/redlib/redlib.conf
+    set +a
+
+    : ${ADDRESS:=0.0.0.0}
+    : ${PORT:=5252}
+
+    command_args="-a ${ADDRESS} -p ${PORT}"
+}
+EOF
+$STD chmod +x /etc/init.d/redlib
+$STD rc-update add redlib default
+msg_ok "Created Redlib Service"
+
+msg_info "Starting Redlib Service"
+$STD rc-service redlib start
+msg_ok "Started Redlib Service"
+
+motd_ssh
+customize
+
+msg_info "Cleaning up"
+$STD apk cache clean
+msg_ok "Cleaned"
--- a/install/healthchecks-install.sh
+++ b/install/healthchecks-install.sh
@ -0,0 +1,136 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2025 community-scripts ORG
+# Author: MickLesk (Canbiz)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://healthchecks.io/
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt-get install -y \
+  gcc \
+  libpq-dev \
+  libcurl4-openssl-dev \
+  libssl-dev \
+  caddy
+msg_ok "Installed Dependencies"
+
+setup_uv
+PG_VERSION=16 setup_postgresql
+
+msg_info "Setup Database"
+DB_NAME=healthchecks_db
+DB_USER=hc_user
+DB_PASS=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | cut -c1-13)
+SECRET_KEY="$(openssl rand -base64 32 | tr -dc 'a-zA-Z0-9' | cut -c1-32)"
+ADMIN_EMAIL="admin@helper-scripts.local"
+ADMIN_PASSWORD="$DB_PASS"
+
+$STD sudo -u postgres psql -c "CREATE ROLE $DB_USER WITH LOGIN PASSWORD '$DB_PASS';"
+$STD sudo -u postgres psql -c "CREATE DATABASE $DB_NAME WITH OWNER $DB_USER ENCODING 'UTF8' TEMPLATE template0;"
+$STD sudo -u postgres psql -c "ALTER ROLE $DB_USER SET client_encoding TO 'utf8';"
+$STD sudo -u postgres psql -c "ALTER ROLE $DB_USER SET default_transaction_isolation TO 'read committed';"
+$STD sudo -u postgres psql -c "ALTER ROLE $DB_USER SET timezone TO 'UTC'"
+{
+  echo "healthchecks-Credentials"
+  echo "healthchecks Database User: $DB_USER"
+  echo "healthchecks Database Password: $DB_PASS"
+  echo "healthchecks Database Name: $DB_NAME"
+  echo "healthchecks Admin Email: $ADMIN_EMAIL"
+  echo "healthchecks Admin Password: $ADMIN_PASSWORD"
+} >>~/healthchecks.creds
+msg_ok "Set up Database"
+
+fetch_and_deploy_gh_release "healthchecks" "healthchecks/healthchecks"
+
+msg_info "Setup healthchecks"
+cd /opt/healthchecks
+mkdir -p /opt/healthchecks/static-collected/
+$STD uv pip install wheel gunicorn -r requirements.txt --system
+
+LOCAL_IP=$(hostname -I | awk '{print $1}')
+cat <<EOF >/opt/healthchecks/hc/local_settings.py
+DEBUG = False
+
+ALLOWED_HOSTS = ["${LOCAL_IP}", "127.0.0.1", "localhost"]
+CSRF_TRUSTED_ORIGINS = ["http://${LOCAL_IP}", "https://${LOCAL_IP}"]
+
+SECRET_KEY = "${SECRET_KEY}"
+
+SITE_ROOT = "http://${LOCAL_IP}:8000"
+SITE_NAME = "MyChecks"
+DEFAULT_FROM_EMAIL = "healthchecks@${LOCAL_IP}"
+
+STATIC_ROOT = "/opt/healthchecks/static-collected"
+COMPRESS_OFFLINE = True
+
+DATABASES = {
+    'default': {
+        'ENGINE': 'django.db.backends.postgresql',
+        'NAME': '${DB_NAME}',
+        'USER': '${DB_USER}',
+        'PASSWORD': '${DB_PASS}',
+        'HOST': '127.0.0.1',
+        'PORT': '5432',
+        'TEST': {'CHARSET': 'UTF8'}
+    }
+}
+EOF
+
+$STD uv run -- python manage.py makemigrations
+$STD uv run -- python manage.py migrate --noinput
+$STD uv run -- python manage.py collectstatic --noinput
+$STD uv run -- python manage.py compress
+
+cat <<EOF | $STD uv run -- python manage.py shell
+from django.contrib.auth import get_user_model
+User = get_user_model()
+if not User.objects.filter(email="${ADMIN_EMAIL}").exists():
+    User.objects.create_superuser("${ADMIN_EMAIL}", "${ADMIN_EMAIL}", "${ADMIN_PASSWORD}")
+EOF
+msg_ok "Installed healthchecks"
+
+msg_info "Configuring Caddy"
+cat <<EOF >/etc/caddy/Caddyfile
+{
+    email admin@example.com
+}
+
+${LOCAL_IP} {
+    reverse_proxy 127.0.0.1:8000
+}
+EOF
+msg_ok "Configured Caddy"
+
+msg_info "Creating Service"
+cat <<EOF >/etc/systemd/system/healthchecks.service
+[Unit]
+Description=Healthchecks Service
+After=network.target postgresql.service
+
+[Service]
+WorkingDirectory=/opt/healthchecks/
+ExecStart=/usr/local/bin/uv run -- gunicorn hc.wsgi:application --bind 127.0.0.1:8000
+Restart=always
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now healthchecks caddy
+systemctl reload caddy
+msg_ok "Created Service"
+
+motd_ssh
+customize
+
+msg_info "Cleaning up"
+$STD apt-get -y autoremove
+$STD apt-get -y autoclean
+msg_ok "Cleaned"
--- a/misc/tools.func
+++ b/misc/tools.func
@ -161,19 +161,19 @@ function setup_postgresql() {
    if [[ "$CURRENT_PG_VERSION" == "$PG_VERSION" ]]; then
      : # PostgreSQL is already at the desired version – no action needed
    else
-      msg_info "Detected PostgreSQL $CURRENT_PG_VERSION, preparing upgrade to $PG_VERSION"
+      $STD msg_info "Detected PostgreSQL $CURRENT_PG_VERSION, preparing upgrade to $PG_VERSION"
      NEED_PG_INSTALL=true
    fi
  else
-    msg_info "Setup PostgreSQL $PG_VERSION"
+										   
    NEED_PG_INSTALL=true
  fi

  if [[ "$NEED_PG_INSTALL" == true ]]; then
    if [[ -n "$CURRENT_PG_VERSION" ]]; then
-      msg_info "Dumping PostgreSQL $CURRENT_PG_VERSION data"
+      $STD msg_info "Dumping PostgreSQL $CURRENT_PG_VERSION data"
      su - postgres -c "pg_dumpall > /var/lib/postgresql/backup_$(date +%F)_v${CURRENT_PG_VERSION}.sql"
-      msg_ok "Data dump completed"
+      $STD msg_ok "Data dump completed"

      systemctl stop postgresql
    fi
@ -186,29 +186,30 @@ function setup_postgresql() {

    echo "deb https://apt.postgresql.org/pub/repos/apt ${DISTRO}-pgdg main" \
      >/etc/apt/sources.list.d/pgdg.list
-    $STD msg_ok "Repository added"
+								  

    $STD apt-get update
+    $STD msg_ok "Repository added"

    msg_info "Setup PostgreSQL $PG_VERSION"
    $STD apt-get install -y "postgresql-${PG_VERSION}" "postgresql-client-${PG_VERSION}"
-    msg_ok "Setup PostgreSQL $PG_VERSION"
+										 

    if [[ -n "$CURRENT_PG_VERSION" ]]; then
      $STD apt-get purge -y "postgresql-${CURRENT_PG_VERSION}" "postgresql-client-${CURRENT_PG_VERSION}" || true
    fi

-    $STD msg_info "Starting PostgreSQL $PG_VERSION"
+												   
    systemctl enable -q --now postgresql
-    $STD msg_ok "PostgreSQL $PG_VERSION started"
+												

    if [[ -n "$CURRENT_PG_VERSION" ]]; then
-      msg_info "Restoring dumped data"
+      $STD msg_info "Restoring dumped data"
      su - postgres -c "psql < /var/lib/postgresql/backup_$(date +%F)_v${CURRENT_PG_VERSION}.sql"
-      msg_ok "Data restored"
+      $STD msg_ok "Data restored"
    fi

-    msg_ok "PostgreSQL $PG_VERSION installed"
+    $STD msg_ok "PostgreSQL $PG_VERSION installed"
  fi

  # Install optional PostgreSQL modules
@ -216,13 +217,13 @@ function setup_postgresql() {
    IFS=',' read -ra MODULES <<<"$PG_MODULES"
    for module in "${MODULES[@]}"; do
      local pkg="postgresql-${PG_VERSION}-${module}"
-      msg_info "Setup PostgreSQL module/s: $pkg"
+      $STD msg_info "Setup PostgreSQL module/s: $pkg"
      $STD apt-get install -y "$pkg" || {
        msg_error "Failed to install $pkg"
        continue
      }
    done
-    msg_ok "Setup PostgreSQL modules"
+    $STD msg_ok "Setup PostgreSQL modules"
  fi
 }

@ -1328,8 +1329,13 @@ function setup_uv() {
    return 1
  }

-  rm -rf "$TMP_DIR"
+  if [[ ":$PATH:" != *":/usr/local/bin:"* ]]; then
+    export PATH="/usr/local/bin:$PATH"
+  fi
  ensure_usr_local_bin_persist
+  if ! $STD uv python update-shell; then
+    msg_error "uv shell integration failed – continuing anyway"
+  fi
  msg_ok "Setup uv $LATEST_VERSION"

  # Optional: install specific Python version