Update CHANGELOG.md

* Refactor BentoPDF

* preserve .env.production if it exists

* Increase CPU cores to 2

CHANGELOG.md

@@ -412,6 +412,30 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
 ## 2026-03-05
 
+### 🆕 New Scripts
+
+  - ddclient ([#12587](https://github.com/community-scripts/ProxmoxVE/pull/12587))
+- Netbird ([#12585](https://github.com/community-scripts/ProxmoxVE/pull/12585))
+- Papra ([#12577](https://github.com/community-scripts/ProxmoxVE/pull/12577))
+
+### 🚀 Updated Scripts
+
+  - #### 🐞 Bug Fixes
+
+    - Refactor: BentoPDF [@vhsdream](https://github.com/vhsdream) ([#12597](https://github.com/community-scripts/ProxmoxVE/pull/12597))
+    - Tianji: Fix the bug introduced by the refactor [@tremor021](https://github.com/tremor021) ([#12564](https://github.com/community-scripts/ProxmoxVE/pull/12564))
+    - PowerDNS: use 'launch=' instead of 'launch+=' for gsqlite3 backend [@MickLesk](https://github.com/MickLesk) ([#12579](https://github.com/community-scripts/ProxmoxVE/pull/12579))
+
+### 🗑️ Deleted Scripts
+
+  - Suwayomi-Server: remove due to inactivity and very low usage [@MickLesk](https://github.com/MickLesk) ([#12596](https://github.com/community-scripts/ProxmoxVE/pull/12596))
+
+### 💾 Core
+
+  - #### 🔧 Refactor
+
+    - core: add var_os / var_version to whitelist for app.vars [@MickLesk](https://github.com/MickLesk) ([#12576](https://github.com/community-scripts/ProxmoxVE/pull/12576))
+
 ## 2026-03-04
 
 ### 🚀 Updated Scripts

ct/bentopdf.sh

@@ -7,7 +7,7 @@ source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxV
 
 APP="BentoPDF"
 var_tags="${var_tags:-pdf-editor}"
-var_cpu="${var_cpu:-1}"
+var_cpu="${var_cpu:-2}"
 var_ram="${var_ram:-4096}"
 var_disk="${var_disk:-4}"
 var_os="${var_os:-debian}"
@@ -35,16 +35,32 @@ function update_script() {
     systemctl stop bentopdf
     msg_ok "Stopped Service"
 
+    [[ -f /opt/bentopdf/.env.production ]] && cp /opt/bentopdf/.env.production /opt/production.env
+
     CLEAN_INSTALL=1 fetch_and_deploy_gh_release "bentopdf" "alam00000/bentopdf" "tarball" "latest" "/opt/bentopdf"
 
     msg_info "Updating BentoPDF"
     cd /opt/bentopdf
     $STD npm ci --no-audit --no-fund
+    $STD npm install http-server -g
+    if [[ -f /opt/production.env ]]; then
+      mv /opt/production.env ./.env.production
+    else
+      cp ./.env.example ./.env.production
+    fi
+    export NODE_OPTIONS="--max-old-space-size=3072"
     export SIMPLE_MODE=true
-    $STD npm run build -- --mode production
+    export VITE_USE_CDN=true
+    $STD npm run build:all
     msg_ok "Updated BentoPDF"
 
     msg_info "Starting Service"
+    if grep -q '8080' /etc/systemd/system/bentopdf.service; then
+      sed -i -e 's|/bentopdf|/bentopdf/dist|' \
+        -e 's|npx.*|npx http-server -g -b -d false -r --no-dotfiles|' \
+        /etc/systemd/system/bentopdf.service
+      systemctl daemon-reload
+    fi
     systemctl start bentopdf
     msg_ok "Started Service"
     msg_ok "Updated successfully!"

ct/ddclient.sh

@@ -0,0 +1,46 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: mitchscobell
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://ddclient.net/
+
+APP="ddclient"
+var_tags="${var_tags:-network}"
+var_cpu="${var_cpu:-1}"
+var_ram="${var_ram:-512}"
+var_disk="${var_disk:-2}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+  if [[ ! -f /etc/ddclient.conf ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  msg_info "Updating ddclient"
+  $STD apt update
+  $STD apt install --only-upgrade -y ddclient
+  $STD systemctl restart ddclient
+  msg_ok "Updated ddclient"
+  msg_ok "Updated successfully!"
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"

ct/headers/ddclient

@@ -0,0 +1,6 @@
+       __    __     ___            __ 
+  ____/ /___/ /____/ (_)__  ____  / /_
+ / __  / __  / ___/ / / _ \/ __ \/ __/
+/ /_/ / /_/ / /__/ / /  __/ / / / /_  
+\__,_/\__,_/\___/_/_/\___/_/ /_/\__/  
+                                      

ct/headers/netbird

@@ -0,0 +1,6 @@
+    _   __     __  ____  _          __
+   / | / /__  / /_/ __ )(_)________/ /
+  /  |/ / _ \/ __/ __  / / ___/ __  / 
+ / /|  /  __/ /_/ /_/ / / /  / /_/ /  
+/_/ |_/\___/\__/_____/_/_/   \__,_/   
+                                      

ct/headers/papra

@@ -0,0 +1,6 @@
+    ____                        
+   / __ \____ _____  _________ _
+  / /_/ / __ `/ __ \/ ___/ __ `/
+ / ____/ /_/ / /_/ / /  / /_/ / 
+/_/    \__,_/ .___/_/   \__,_/  
+           /_/                  

ct/netbird.sh

@@ -0,0 +1,47 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: TechHutTV
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://netbird.io/
+
+APP="NetBird"
+var_tags="${var_tags:-network;vpn}"
+var_cpu="${var_cpu:-1}"
+var_ram="${var_ram:-512}"
+var_disk="${var_disk:-4}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_unprivileged="${var_unprivileged:-1}"
+var_tun="${var_tun:-yes}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -f /etc/netbird/config.json ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  msg_info "Updating Netbird"
+  $STD apt update
+  $STD apt upgrade -y
+  msg_ok "Updated successfully!"
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access NetBird by entering the container and running:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}netbird up${CL}"

ct/papra.sh

@@ -0,0 +1,68 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/papra-hq/papra
+
+APP="Papra"
+var_tags="${var_tags:-document-management}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-2048}"
+var_disk="${var_disk:-10}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -d /opt/papra ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  if check_for_gh_release "papra" "papra-hq/papra"; then
+    msg_info "Stopping Service"
+    systemctl stop papra
+    msg_ok "Stopped Service"
+
+    msg_info "Backing up Configuration"
+    cp /opt/papra/apps/papra-server/.env /opt/papra_env.bak
+    msg_ok "Backed up Configuration"
+
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "papra" "papra-hq/papra" "tarball"
+
+    msg_info "Building Application"
+    cd /opt/papra
+    cp /opt/papra_env.bak /opt/papra/apps/papra-server/.env
+    $STD pnpm install --frozen-lockfile
+    $STD pnpm --filter "@papra/app-client..." run build
+    $STD pnpm --filter "@papra/app-server..." run build
+    ln -sf /opt/papra/apps/papra-client/dist /opt/papra/apps/papra-server/public
+    rm -f /opt/papra_env.bak
+    msg_ok "Built Application"
+
+    msg_info "Starting Service"
+    systemctl start papra
+    msg_ok "Started Service"
+    msg_ok "Updated successfully!"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:1221${CL}"

ct/powerdns.sh

@@ -47,7 +47,10 @@ function update_script() {
     cp /opt/poweradmin_powerdns.db.bak /opt/poweradmin/powerdns.db
     rm -rf /opt/poweradmin/install
     rm -f /opt/poweradmin_settings.php.bak /opt/poweradmin_powerdns.db.bak
-    chown -R www-data:www-data /opt/poweradmin
+    chown -R www-data:pdns /opt/poweradmin
+    chmod 775 /opt/poweradmin
+    chown pdns:pdns /opt/poweradmin/powerdns.db
+    chmod 664 /opt/poweradmin/powerdns.db
     msg_ok "Updated Poweradmin"
 
     msg_info "Restarting Services"

frontend/public/json/bentopdf.json

@@ -19,7 +19,7 @@
       "type": "default",
       "script": "ct/bentopdf.sh",
       "resources": {
-        "cpu": 1,
+        "cpu": 2,
         "ram": 4096,
         "hdd": 4,
         "os": "debian",

frontend/public/json/ddclient.json

@@ -0,0 +1,44 @@
+{
+  "name": "ddclient",
+  "slug": "ddclient",
+  "categories": [
+    4
+  ],
+  "date_created": "2026-03-05",
+  "type": "ct",
+  "updateable": true,
+  "privileged": false,
+  "interface_port": null,
+  "documentation": "https://ddclient.net/",
+  "website": "https://ddclient.net/",
+  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/ddclient.webp",
+  "config_path": "/etc/ddclient.conf",
+  "description": "ddclient is a Perl client used to update dynamic DNS entries for accounts on a wide range of dynamic DNS service providers. It supports multiple protocols and providers, allowing automatic IP address updates for your domain names.",
+  "install_methods": [
+    {
+      "type": "default",
+      "script": "ct/ddclient.sh",
+      "resources": {
+        "cpu": 1,
+        "ram": 512,
+        "hdd": 2,
+        "os": "debian",
+        "version": "13"
+      }
+    }
+  ],
+  "default_credentials": {
+    "username": null,
+    "password": null
+  },
+  "notes": [
+    {
+      "type": "info",
+      "text": "After installation, edit `/etc/ddclient.conf` with your dynamic DNS provider credentials"
+    },
+    {
+      "type": "info",
+      "text": "Sample configuration is created for Namecheap but can be modified for other providers"
+    }
+  ]
+}

frontend/public/json/github-versions.json

@@ -1,5 +1,5 @@
 {
-  "generated": "2026-03-05T06:17:38Z",
+  "generated": "2026-03-05T12:12:30Z",
   "versions": [
     {
       "slug": "2fauth",
@@ -214,9 +214,9 @@
     {
       "slug": "comfyui",
       "repo": "comfyanonymous/ComfyUI",
-      "version": "v0.15.1",
+      "version": "v0.16.0",
       "pinned": false,
-      "date": "2026-02-26T22:01:35Z"
+      "date": "2026-03-05T10:35:07Z"
     },
     {
       "slug": "commafeed",
@@ -1229,9 +1229,9 @@
     {
       "slug": "pulse",
       "repo": "rcourtman/Pulse",
-      "version": "v5.1.18",
+      "version": "v5.1.19",
       "pinned": false,
-      "date": "2026-03-03T22:09:15Z"
+      "date": "2026-03-05T11:14:54Z"
     },
     {
       "slug": "pve-scripts-local",
@@ -1355,9 +1355,9 @@
     {
       "slug": "scanopy",
       "repo": "scanopy/scanopy",
-      "version": "v0.14.11",
+      "version": "v0.14.12",
       "pinned": false,
-      "date": "2026-03-02T08:48:42Z"
+      "date": "2026-03-05T07:24:59Z"
     },
     {
       "slug": "scraparr",
@@ -1369,9 +1369,9 @@
     {
       "slug": "seaweedfs",
       "repo": "seaweedfs/seaweedfs",
-      "version": "4.14",
+      "version": "4.15",
       "pinned": false,
-      "date": "2026-03-05T04:49:27Z"
+      "date": "2026-03-05T06:30:30Z"
     },
     {
       "slug": "seelf",

frontend/public/json/netbird.json

@@ -0,0 +1,50 @@
+{
+  "name": "NetBird",
+  "slug": "netbird",
+  "categories": [4],
+  "date_created": "2026-03-05",
+  "type": "ct",
+  "updateable": true,
+  "privileged": false,
+  "interface_port": null,
+  "documentation": "https://docs.netbird.io/",
+  "website": "https://netbird.io/",
+  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/netbird.webp",
+  "config_path": "/etc/netbird/config.json",
+  "description": "NetBird is an open source VPN management platform that creates secure peer-to-peer networks using WireGuard. It enables secure connectivity between devices anywhere in the world without complex firewall configurations or port forwarding. NetBird offers features like zero-configuration networking, SSO integration, access control policies, and a centralized management dashboard. It's designed to be simple to deploy and manage, making it ideal for connecting remote teams, securing IoT devices, or building secure infrastructure networks.",
+  "install_methods": [
+    {
+      "type": "default",
+      "script": "ct/netbird.sh",
+      "resources": {
+        "cpu": 1,
+        "ram": 512,
+        "hdd": 4,
+        "os": "debian",
+        "version": "13"
+      }
+    }
+  ],
+  "default_credentials": {
+    "username": null,
+    "password": null
+  },
+  "notes": [
+    {
+      "text": "The NetBird client (agent) allows a peer to join a pre-existing NetBird deployment. If a NetBird deployment is not yet available, there are both managed and self-hosted options available.",
+      "type": "info"
+    },
+    {
+      "text": "After installation, enter the container and run `netbird` to view the commands.",
+      "type": "info"
+    },
+    {
+      "text": "Use a Setup Key from your NetBird dashboard or SSO login to authenticate during setup or in the container.",
+      "type": "info"
+    },
+    {
+      "text": "Check connection status with `netbird status`.",
+      "type": "info"
+    }
+  ]
+}

frontend/public/json/papra.json

@@ -0,0 +1,56 @@
+{
+  "name": "Papra",
+  "slug": "papra",
+  "categories": [
+    12
+  ],
+  "date_created": "2026-03-05",
+  "type": "ct",
+  "updateable": true,
+  "privileged": false,
+  "interface_port": 1221,
+  "documentation": "https://github.com/CorentinTh/papra",
+  "website": "https://github.com/CorentinTh/papra",
+  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/papra.webp",
+  "config_path": "/opt/papra/.env",
+  "description": "Papra is a modern, self-hosted document management system with full-text search, OCR support, and automatic document processing. Built with Node.js and featuring a clean web interface for organizing and managing your documents.",
+  "install_methods": [
+    {
+      "type": "default",
+      "script": "ct/papra.sh",
+      "resources": {
+        "cpu": 2,
+        "ram": 2048,
+        "hdd": 10,
+        "os": "debian",
+        "version": "13"
+      }
+    }
+  ],
+  "default_credentials": {
+    "username": null,
+    "password": null
+  },
+  "notes": [
+    {
+      "text": "First visit will prompt you to create an account",
+      "type": "info"
+    },
+    {
+      "text": "Tesseract OCR is pre-installed for all languages",
+      "type": "info"
+    },
+    {
+      "text": "Documents are stored in /opt/papra/app-data/documents",
+      "type": "info"
+    },
+    {
+      "text": "Ingestion folder available at /opt/papra/ingestion for automatic document import",
+      "type": "info"
+    },
+    {
+      "text": "Email functionality runs in dry-run mode by default",
+      "type": "warning"
+    }
+  ]
+}

install/bentopdf-install.sh

@@ -19,8 +19,12 @@ fetch_and_deploy_gh_release "bentopdf" "alam00000/bentopdf" "tarball" "latest" "
 msg_info "Setup BentoPDF"
 cd /opt/bentopdf
 $STD npm ci --no-audit --no-fund
+$STD npm install http-server -g
+cp ./.env.example ./.env.production
+export NODE_OPTIONS="--max-old-space-size=3072"
 export SIMPLE_MODE=true
-$STD npm run build -- --mode production
+export VITE_USE_CDN=true
+$STD npm run build:all
 msg_ok "Setup BentoPDF"
 
 msg_info "Creating Service"
@@ -31,8 +35,8 @@ After=network.target
 
 [Service]
 Type=simple
-WorkingDirectory=/opt/bentopdf
-ExecStart=/usr/bin/npx serve dist -p 8080
+WorkingDirectory=/opt/bentopdf/dist
+ExecStart=/usr/bin/npx http-server -g -b -d false -r --no-dotfiles
 Restart=always
 RestartSec=10
 

install/ddclient-install.sh

@@ -0,0 +1,37 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 mitchscobell
+# Author: mitchscobell
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://ddclient.net/
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing ddclient"
+DEBIAN_FRONTEND=noninteractive $STD apt -o Dpkg::Options::="--force-confdef" -o Dpkg::Options::="--force-confold" install -y ddclient
+msg_ok "Installed ddclient"
+
+msg_info "Creating ddclient service"
+cat << EOF >/etc/ddclient.conf
+protocol=namecheap
+use=web, web=dynamicdns.park-your-domain.com/getip
+protocol=namecheap
+use=web, web=dynamicdns.park-your-domain.com/getip
+server=dynamicdns.park-your-domain.com
+login=yourdomain.com
+password='your-ddns-password'
+@,www
+EOF
+chmod 600 /etc/ddclient.conf
+systemctl enable -q --now ddclient
+msg_ok "Created ddclient service"
+
+motd_ssh
+customize
+cleanup_lxc

install/netbird-install.sh

@@ -0,0 +1,180 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: TechHutTV
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://netbird.io/
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing NetBird"
+setup_deb822_repo \
+	"netbird" \
+	"https://pkgs.netbird.io/debian/public.key" \
+	"https://pkgs.netbird.io/debian" \
+	"stable"
+$STD apt install -y netbird
+msg_ok "Installed NetBird"
+
+msg_info "Starting NetBird Service"
+systemctl enable -q --now netbird
+msg_ok "Started NetBird Service"
+
+echo ""
+echo ""
+echo -e "${BL}NetBird Deployment Type${CL}"
+echo "─────────────────────────────────────────"
+echo "Are you using NetBird Managed or Self-Hosted?"
+echo ""
+echo " 1) NetBird Managed (default) - Use NetBird's managed service"
+echo " 2) Self-Hosted - Use your own NetBird management server"
+echo ""
+
+read -r -p "${TAB3}Select deployment type [1]: " DEPLOYMENT_TYPE
+DEPLOYMENT_TYPE="${DEPLOYMENT_TYPE:-1}"
+
+NETBIRD_MGMT_URL=""
+case "$DEPLOYMENT_TYPE" in
+  1)
+    msg_ok "Using NetBird Managed service"
+    ;;
+  2)
+    echo ""
+    echo -e "${BL}Self-Hosted Configuration${CL}"
+    echo "─────────────────────────────────────────"
+    echo "Enter your NetBird management server URL."
+    echo "Example: https://management.example.com"
+    echo ""
+    read -r -p "Management URL: " NETBIRD_MGMT_URL
+
+    if [[ -z "$NETBIRD_MGMT_URL" ]]; then
+      msg_warn "No management URL provided. Run 'netbird up --management-url <url>' to connect."
+    else
+      NETBIRD_MGMT_URL="${NETBIRD_MGMT_URL%/}"
+      msg_ok "Management URL configured: ${NETBIRD_MGMT_URL}"
+    fi
+    ;;
+  *)
+    msg_warn "Invalid selection. Using NetBird Managed service."
+    ;;
+esac
+
+echo ""
+echo ""
+echo -e "${BL}NetBird Connection Setup${CL}"
+echo "─────────────────────────────────────────"
+echo "Choose how to connect to your NetBird network:"
+echo ""
+if [[ "$DEPLOYMENT_TYPE" == "1" ]]; then
+  echo " 1) Setup Key (default) - Use a pre-generated setup key"
+  echo " 2) SSO Login - Authenticate via browser with your identity provider"
+  echo " 3) Skip - Configure later with 'netbird up'"
+else
+  echo " 1) Setup Key (default) - Use a pre-generated setup key"
+  echo " 2) Skip - Configure later with 'netbird up'"
+fi
+echo ""
+
+read -r -p "Select authentication method [1]: " AUTH_METHOD
+AUTH_METHOD="${AUTH_METHOD:-1}"
+
+if [[ "$DEPLOYMENT_TYPE" == "1" ]]; then
+  case "$AUTH_METHOD" in
+    1)
+      echo ""
+      echo "Enter your NetBird setup key from the NetBird dashboard."
+      echo ""
+      read -r -p "Setup key: " NETBIRD_SETUP_KEY
+      echo ""
+
+      if [[ -z "$NETBIRD_SETUP_KEY" ]]; then
+        msg_warn "No setup key provided. Run 'netbird up -k <key>' to connect."
+      else
+        msg_info "Connecting to NetBird with setup key"
+        if $STD netbird up -k "$NETBIRD_SETUP_KEY"; then
+          msg_ok "Connected to NetBird"
+        else
+          msg_warn "Connection failed. Run 'netbird up -k <key>' to retry."
+        fi
+      fi
+      ;;
+    2)
+      echo ""
+      echo -e "${BL}SSO Authentication${CL}"
+      echo "─────────────────────────────────────────"
+      echo "A login URL will appear below."
+      echo "Copy the URL and open it in your browser to authenticate."
+      echo ""
+
+      msg_info "Starting SSO login"
+      netbird login 2>&1 || true
+      echo ""
+
+      msg_info "Connecting to NetBird"
+      if $STD netbird up; then
+        msg_ok "Connected to NetBird"
+      else
+        msg_warn "Connection failed. Run 'netbird up' to retry."
+      fi
+      ;;
+    3)
+      msg_ok "Skipped. Run 'netbird up' to connect."
+      ;;
+    *)
+      msg_warn "Invalid selection. Run 'netbird up' to connect."
+      ;;
+  esac
+else
+  case "$AUTH_METHOD" in
+    1)
+      echo ""
+      echo "Enter your NetBird setup key from the NetBird dashboard."
+      echo ""
+      read -r -p "Setup key: " NETBIRD_SETUP_KEY
+      echo ""
+
+      if [[ -z "$NETBIRD_SETUP_KEY" ]]; then
+        if [[ -z "$NETBIRD_MGMT_URL" ]]; then
+          msg_warn "No setup key provided. Run 'netbird up -k <key> --management-url <url>' to connect."
+        else
+          msg_warn "No setup key provided. Run 'netbird up -k <key> --management-url $NETBIRD_MGMT_URL' to connect."
+        fi
+      else
+        if [[ -z "$NETBIRD_MGMT_URL" ]]; then
+          msg_error "Management URL is required for self-hosted deployments. Please configure it first."
+        else
+          msg_info "Connecting to NetBird with setup key"
+          if $STD netbird up -k "$NETBIRD_SETUP_KEY" --management-url "$NETBIRD_MGMT_URL"; then
+            msg_ok "Connected to NetBird"
+          else
+            msg_warn "Connection failed. Run 'netbird up -k <key> --management-url $NETBIRD_MGMT_URL' to retry."
+          fi
+        fi
+      fi
+      ;;
+    2)
+      if [[ -z "$NETBIRD_MGMT_URL" ]]; then
+        msg_ok "Skipped. Run 'netbird up --management-url <url>' to connect."
+      else
+        msg_ok "Skipped. Run 'netbird up --management-url $NETBIRD_MGMT_URL' to connect."
+      fi
+      ;;
+    *)
+      if [[ -z "$NETBIRD_MGMT_URL" ]]; then
+        msg_warn "Invalid selection. Run 'netbird up --management-url <url>' to connect."
+      else
+        msg_warn "Invalid selection. Run 'netbird up --management-url $NETBIRD_MGMT_URL' to connect."
+      fi
+      ;;
+  esac
+fi
+
+motd_ssh
+customize
+cleanup_lxc

install/papra-install.sh

@@ -0,0 +1,79 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/papra-hq/papra
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt install -y \
+  build-essential \
+  tesseract-ocr \
+  tesseract-ocr-all
+msg_ok "Installed Dependencies"
+
+RELEASE=$(curl -fsSL https://api.github.com/repos/papra-hq/papra/releases | grep -oP '"tag_name":\s*"\K@papra/app@[^"]+' | head -n1)
+fetch_and_deploy_gh_release "papra" "papra-hq/papra" "tarball" "${RELEASE}" "/opt/papra"
+
+pnpm_version=$(grep -oP '"packageManager":\s*"pnpm@\K[^"]+' /opt/papra/package.json)
+NODE_VERSION="24" NODE_MODULE="pnpm@$pnpm_version" setup_nodejs
+
+msg_info "Installing Papra (Patience)"
+cd /opt/papra
+$STD pnpm install --frozen-lockfile
+$STD pnpm --filter "@papra/app-client..." run build
+$STD pnpm --filter "@papra/app-server..." run build
+ln -sf /opt/papra/apps/papra-client/dist /opt/papra/apps/papra-server/public
+msg_ok "Installed Papra"
+
+msg_info "Configuring Papra"
+mkdir -p /opt/papra_data/{db,documents,ingestion}
+[[ ! -f /opt/papra_data/.secret ]] && openssl rand -hex 32 >/opt/papra_data/.secret
+cat <<EOF >/opt/papra/apps/papra-server/.env
+NODE_ENV=production
+SERVER_SERVE_PUBLIC_DIR=true
+PORT=1221
+DATABASE_URL=file:/opt/papra_data/db/db.sqlite
+DOCUMENT_STORAGE_FILESYSTEM_ROOT=/opt/papra_data/documents
+PAPRA_CONFIG_DIR=/opt/papra_data
+AUTH_SECRET=$(cat /opt/papra_data/.secret)
+BETTER_AUTH_SECRET=$(cat /opt/papra_data/.secret)
+BETTER_AUTH_TELEMETRY=0
+CLIENT_BASE_URL=http://${LOCAL_IP}:1221
+SERVER_BASE_URL=http://${LOCAL_IP}:1221
+EMAILS_DRY_RUN=true
+INGESTION_FOLDER_IS_ENABLED=true
+INGESTION_FOLDER_ROOT_PATH=/opt/papra_data/ingestion
+EOF
+msg_ok "Configured Papra"
+
+msg_info "Creating Service"
+cat <<EOF >/etc/systemd/system/papra.service
+[Unit]
+Description=Papra Document Management
+After=network.target
+
+[Service]
+Type=simple
+WorkingDirectory=/opt/papra/apps/papra-server
+EnvironmentFile=/opt/papra/apps/papra-server/.env
+ExecStartPre=/usr/bin/pnpm run migrate:up
+ExecStart=/usr/bin/node dist/index.js
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now papra
+msg_ok "Created Service"
+
+motd_ssh
+customize
+cleanup_lxc

install/powerdns-install.sh

@@ -41,7 +41,7 @@ $STD apt install -y \
 sed -i 's/^launch=$/# launch=/' /etc/powerdns/pdns.conf
 rm -f /etc/powerdns/pdns.d/bind.conf
 cat <<EOF >/etc/powerdns/pdns.d/gsqlite3.conf
-launch+=gsqlite3
+launch=gsqlite3
 gsqlite3-database=/opt/poweradmin/powerdns.db
 EOF
 msg_ok "Setup PowerDNS"
@@ -131,12 +131,13 @@ cat <<EOF >/etc/apache2/sites-enabled/poweradmin.conf
 </VirtualHost>
 EOF
 $STD a2enmod rewrite headers
-chown -R www-data:www-data /opt/poweradmin
+chown -R www-data:pdns /opt/poweradmin
+chmod 775 /opt/poweradmin
 chown pdns:pdns /opt/poweradmin/powerdns.db
 chmod 664 /opt/poweradmin/powerdns.db
 usermod -aG pdns www-data
 $STD systemctl restart pdns apache2
-msg_info "Created Service"
+msg_ok "Created Service"
 
 motd_ssh
 customize

install/tianji-install.sh

@@ -27,6 +27,8 @@ PG_VERSION="17" setup_postgresql
 PG_DB_NAME="tianji_db" PG_DB_USER="tianji" setup_postgresql_db
 PYTHON_VERSION="3.13" setup_uv
 fetch_and_deploy_gh_release "tianji" "msgbyte/tianji" "tarball"
+TIANJI_SECRET=$(openssl rand -base64 256 | tr -dc 'A-Za-z' | head -c 64)
+echo "Tianji Secret: $TIANJI_SECRET" >>~/tianji.creds
 
 msg_info "Setting up Tianji"
 cd /opt/tianji

misc/build.func

@@ -1032,8 +1032,8 @@ load_vars_file() {
   local VAR_WHITELIST=(
     var_apt_cacher var_apt_cacher_ip var_brg var_cpu var_disk var_fuse var_gpu var_keyctl
     var_gateway var_hostname var_ipv6_method var_mac var_mknod var_mount_fs var_mtu
-    var_net var_nesting var_ns var_protection var_pw var_ram var_tags var_timezone var_tun var_unprivileged
-    var_verbose var_vlan var_ssh var_ssh_authorized_key var_container_storage var_template_storage var_searchdomain
+    var_net var_nesting var_ns var_os var_protection var_pw var_ram var_tags var_timezone var_tun var_unprivileged
+    var_verbose var_version var_vlan var_ssh var_ssh_authorized_key var_container_storage var_template_storage var_searchdomain
   )
 
   # Whitelist check helper
@@ -1214,8 +1214,8 @@ default_var_settings() {
   local VAR_WHITELIST=(
     var_apt_cacher var_apt_cacher_ip var_brg var_cpu var_disk var_fuse var_gpu var_keyctl
     var_gateway var_hostname var_ipv6_method var_mac var_mknod var_mount_fs var_mtu
-    var_net var_nesting var_ns var_protection var_pw var_ram var_tags var_timezone var_tun var_unprivileged
-    var_verbose var_vlan var_ssh var_ssh_authorized_key var_container_storage var_template_storage
+    var_net var_nesting var_ns var_os var_protection var_pw var_ram var_tags var_timezone var_tun var_unprivileged
+    var_verbose var_version var_vlan var_ssh var_ssh_authorized_key var_container_storage var_template_storage
   )
 
   # Snapshot: environment variables (highest precedence)
@@ -1376,8 +1376,8 @@ if ! declare -p VAR_WHITELIST >/dev/null 2>&1; then
   declare -ag VAR_WHITELIST=(
     var_apt_cacher var_apt_cacher_ip var_brg var_cpu var_disk var_fuse var_gpu
     var_gateway var_hostname var_ipv6_method var_mac var_mtu
-    var_net var_ns var_pw var_ram var_tags var_tun var_unprivileged
-    var_verbose var_vlan var_ssh var_ssh_authorized_key var_container_storage var_template_storage
+    var_net var_ns var_os var_pw var_ram var_tags var_tun var_unprivileged
+    var_verbose var_version var_vlan var_ssh var_ssh_authorized_key var_container_storage var_template_storage
   )
 fi
 
@@ -1549,6 +1549,8 @@ _build_current_app_vars_tmp() {
     echo "# Generated on $(date -u '+%Y-%m-%dT%H:%M:%SZ')"
     echo
 
+    echo "var_os=$(_sanitize_value "${var_os:-}")"
+    echo "var_version=$(_sanitize_value "${var_version:-}")"
     echo "var_unprivileged=$(_sanitize_value "$_unpriv")"
     echo "var_cpu=$(_sanitize_value "$_cpu")"
     echo "var_ram=$(_sanitize_value "$_ram")"