core: add var_os / var_version to whitelist for app.vars

Include var_os and var_version in VAR_WHITELIST across load_vars_file, default_var_settings, and the global whitelist declaration. Also emit sanitized var_os and var_version in _build_current_app_vars_tmp so they are included in generated app variable output and can be recognized/persisted by the build tooling.

CHANGELOG.md

@@ -412,10 +412,6 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
 ## 2026-03-05
 
-### 🆕 New Scripts
-
-  - Papra ([#12577](https://github.com/community-scripts/ProxmoxVE/pull/12577))
-
 ## 2026-03-04
 
 ### 🚀 Updated Scripts

ct/headers/papra

@@ -1,6 +0,0 @@
-    ____                        
-   / __ \____ _____  _________ _
-  / /_/ / __ `/ __ \/ ___/ __ `/
- / ____/ /_/ / /_/ / /  / /_/ / 
-/_/    \__,_/ .___/_/   \__,_/  
-           /_/                  

ct/linkwarden.sh

@@ -57,6 +57,8 @@ function update_script() {
       $STD corepack prepare "yarn@${yarn_ver}" --activate || true
     fi
     $STD yarn
+    $STD npx playwright install-deps
+    $STD npx playwright install
     mv /opt/.env /opt/linkwarden/.env
     $STD yarn prisma:generate
     $STD yarn web:build

ct/papra.sh

@@ -1,68 +0,0 @@
-#!/usr/bin/env bash
-source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/papra-hq/papra
-
-APP="Papra"
-var_tags="${var_tags:-document-management}"
-var_cpu="${var_cpu:-2}"
-var_ram="${var_ram:-2048}"
-var_disk="${var_disk:-10}"
-var_os="${var_os:-debian}"
-var_version="${var_version:-13}"
-var_unprivileged="${var_unprivileged:-1}"
-
-header_info "$APP"
-variables
-color
-catch_errors
-
-function update_script() {
-  header_info
-  check_container_storage
-  check_container_resources
-
-  if [[ ! -d /opt/papra ]]; then
-    msg_error "No ${APP} Installation Found!"
-    exit
-  fi
-
-  if check_for_gh_release "papra" "papra-hq/papra"; then
-    msg_info "Stopping Service"
-    systemctl stop papra
-    msg_ok "Stopped Service"
-
-    msg_info "Backing up Configuration"
-    cp /opt/papra/apps/papra-server/.env /opt/papra_env.bak
-    msg_ok "Backed up Configuration"
-
-    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "papra" "papra-hq/papra" "tarball"
-
-    msg_info "Building Application"
-    cd /opt/papra
-    cp /opt/papra_env.bak /opt/papra/apps/papra-server/.env
-    $STD pnpm install --frozen-lockfile
-    $STD pnpm --filter "@papra/app-client..." run build
-    $STD pnpm --filter "@papra/app-server..." run build
-    ln -sf /opt/papra/apps/papra-client/dist /opt/papra/apps/papra-server/public
-    rm -f /opt/papra_env.bak
-    msg_ok "Built Application"
-
-    msg_info "Starting Service"
-    systemctl start papra
-    msg_ok "Started Service"
-    msg_ok "Updated successfully!"
-  fi
-  exit
-}
-
-start
-build_container
-description
-
-msg_ok "Completed successfully!\n"
-echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
-echo -e "${INFO}${YW} Access it using the following URL:${CL}"
-echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:1221${CL}"

ct/powerdns.sh

@@ -47,10 +47,7 @@ function update_script() {
     cp /opt/poweradmin_powerdns.db.bak /opt/poweradmin/powerdns.db
     rm -rf /opt/poweradmin/install
     rm -f /opt/poweradmin_settings.php.bak /opt/poweradmin_powerdns.db.bak
-    chown -R www-data:pdns /opt/poweradmin
-    chmod 775 /opt/poweradmin
-    chown pdns:pdns /opt/poweradmin/powerdns.db
-    chmod 664 /opt/poweradmin/powerdns.db
+    chown -R www-data:www-data /opt/poweradmin
     msg_ok "Updated Poweradmin"
 
     msg_info "Restarting Services"

frontend/public/json/github-versions.json

@@ -1,5 +1,5 @@
 {
-  "generated": "2026-03-05T12:12:30Z",
+  "generated": "2026-03-05T06:17:38Z",
   "versions": [
     {
       "slug": "2fauth",
@@ -214,9 +214,9 @@
     {
       "slug": "comfyui",
       "repo": "comfyanonymous/ComfyUI",
-      "version": "v0.16.0",
+      "version": "v0.15.1",
       "pinned": false,
-      "date": "2026-03-05T10:35:07Z"
+      "date": "2026-02-26T22:01:35Z"
     },
     {
       "slug": "commafeed",
@@ -1229,9 +1229,9 @@
     {
       "slug": "pulse",
       "repo": "rcourtman/Pulse",
-      "version": "v5.1.19",
+      "version": "v5.1.18",
       "pinned": false,
-      "date": "2026-03-05T11:14:54Z"
+      "date": "2026-03-03T22:09:15Z"
     },
     {
       "slug": "pve-scripts-local",
@@ -1355,9 +1355,9 @@
     {
       "slug": "scanopy",
       "repo": "scanopy/scanopy",
-      "version": "v0.14.12",
+      "version": "v0.14.11",
       "pinned": false,
-      "date": "2026-03-05T07:24:59Z"
+      "date": "2026-03-02T08:48:42Z"
     },
     {
       "slug": "scraparr",
@@ -1369,9 +1369,9 @@
     {
       "slug": "seaweedfs",
       "repo": "seaweedfs/seaweedfs",
-      "version": "4.15",
+      "version": "4.14",
       "pinned": false,
-      "date": "2026-03-05T06:30:30Z"
+      "date": "2026-03-05T04:49:27Z"
     },
     {
       "slug": "seelf",

frontend/public/json/papra.json

@@ -1,56 +0,0 @@
-{
-  "name": "Papra",
-  "slug": "papra",
-  "categories": [
-    12
-  ],
-  "date_created": "2026-03-05",
-  "type": "ct",
-  "updateable": true,
-  "privileged": false,
-  "interface_port": 1221,
-  "documentation": "https://github.com/CorentinTh/papra",
-  "website": "https://github.com/CorentinTh/papra",
-  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/papra.webp",
-  "config_path": "/opt/papra/.env",
-  "description": "Papra is a modern, self-hosted document management system with full-text search, OCR support, and automatic document processing. Built with Node.js and featuring a clean web interface for organizing and managing your documents.",
-  "install_methods": [
-    {
-      "type": "default",
-      "script": "ct/papra.sh",
-      "resources": {
-        "cpu": 2,
-        "ram": 2048,
-        "hdd": 10,
-        "os": "debian",
-        "version": "13"
-      }
-    }
-  ],
-  "default_credentials": {
-    "username": null,
-    "password": null
-  },
-  "notes": [
-    {
-      "text": "First visit will prompt you to create an account",
-      "type": "info"
-    },
-    {
-      "text": "Tesseract OCR is pre-installed for all languages",
-      "type": "info"
-    },
-    {
-      "text": "Documents are stored in /opt/papra/app-data/documents",
-      "type": "info"
-    },
-    {
-      "text": "Ingestion folder available at /opt/papra/ingestion for automatic document import",
-      "type": "info"
-    },
-    {
-      "text": "Email functionality runs in dry-run mode by default",
-      "type": "warning"
-    }
-  ]
-}

install/linkwarden-install.sh

@@ -48,6 +48,8 @@ if command -v corepack >/dev/null 2>&1; then
   $STD corepack prepare "yarn@${yarn_ver}" --activate || true
 fi
 $STD yarn
+$STD npx playwright install-deps
+$STD npx playwright install
 cat <<EOF >/opt/linkwarden/.env
 NEXTAUTH_SECRET=${SECRET_KEY}
 NEXTAUTH_URL=http://${LOCAL_IP}:3000

install/papra-install.sh

@@ -1,79 +0,0 @@
-#!/usr/bin/env bash
-
-# Copyright (c) 2021-2026 community-scripts ORG
-# Author: MickLesk (CanbiZ)
-# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://github.com/papra-hq/papra
-
-source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
-color
-verb_ip6
-catch_errors
-setting_up_container
-network_check
-update_os
-
-msg_info "Installing Dependencies"
-$STD apt install -y \
-  build-essential \
-  tesseract-ocr \
-  tesseract-ocr-all
-msg_ok "Installed Dependencies"
-
-RELEASE=$(curl -fsSL https://api.github.com/repos/papra-hq/papra/releases | grep -oP '"tag_name":\s*"\K@papra/app@[^"]+' | head -n1)
-fetch_and_deploy_gh_release "papra" "papra-hq/papra" "tarball" "${RELEASE}" "/opt/papra"
-
-pnpm_version=$(grep -oP '"packageManager":\s*"pnpm@\K[^"]+' /opt/papra/package.json)
-NODE_VERSION="24" NODE_MODULE="pnpm@$pnpm_version" setup_nodejs
-
-msg_info "Installing Papra (Patience)"
-cd /opt/papra
-$STD pnpm install --frozen-lockfile
-$STD pnpm --filter "@papra/app-client..." run build
-$STD pnpm --filter "@papra/app-server..." run build
-ln -sf /opt/papra/apps/papra-client/dist /opt/papra/apps/papra-server/public
-msg_ok "Installed Papra"
-
-msg_info "Configuring Papra"
-mkdir -p /opt/papra_data/{db,documents,ingestion}
-[[ ! -f /opt/papra_data/.secret ]] && openssl rand -hex 32 >/opt/papra_data/.secret
-cat <<EOF >/opt/papra/apps/papra-server/.env
-NODE_ENV=production
-SERVER_SERVE_PUBLIC_DIR=true
-PORT=1221
-DATABASE_URL=file:/opt/papra_data/db/db.sqlite
-DOCUMENT_STORAGE_FILESYSTEM_ROOT=/opt/papra_data/documents
-PAPRA_CONFIG_DIR=/opt/papra_data
-AUTH_SECRET=$(cat /opt/papra_data/.secret)
-BETTER_AUTH_SECRET=$(cat /opt/papra_data/.secret)
-BETTER_AUTH_TELEMETRY=0
-CLIENT_BASE_URL=http://${LOCAL_IP}:1221
-SERVER_BASE_URL=http://${LOCAL_IP}:1221
-EMAILS_DRY_RUN=true
-INGESTION_FOLDER_IS_ENABLED=true
-INGESTION_FOLDER_ROOT_PATH=/opt/papra_data/ingestion
-EOF
-msg_ok "Configured Papra"
-
-msg_info "Creating Service"
-cat <<EOF >/etc/systemd/system/papra.service
-[Unit]
-Description=Papra Document Management
-After=network.target
-
-[Service]
-Type=simple
-WorkingDirectory=/opt/papra/apps/papra-server
-EnvironmentFile=/opt/papra/apps/papra-server/.env
-ExecStartPre=/usr/bin/pnpm run migrate:up
-ExecStart=/usr/bin/node dist/index.js
-
-[Install]
-WantedBy=multi-user.target
-EOF
-systemctl enable -q --now papra
-msg_ok "Created Service"
-
-motd_ssh
-customize
-cleanup_lxc

install/powerdns-install.sh

@@ -131,13 +131,12 @@ cat <<EOF >/etc/apache2/sites-enabled/poweradmin.conf
 </VirtualHost>
 EOF
 $STD a2enmod rewrite headers
-chown -R www-data:pdns /opt/poweradmin
-chmod 775 /opt/poweradmin
+chown -R www-data:www-data /opt/poweradmin
 chown pdns:pdns /opt/poweradmin/powerdns.db
 chmod 664 /opt/poweradmin/powerdns.db
 usermod -aG pdns www-data
 $STD systemctl restart pdns apache2
-msg_ok "Created Service"
+msg_info "Created Service"
 
 motd_ssh
 customize

misc/build.func

@@ -1032,8 +1032,8 @@ load_vars_file() {
   local VAR_WHITELIST=(
     var_apt_cacher var_apt_cacher_ip var_brg var_cpu var_disk var_fuse var_gpu var_keyctl
     var_gateway var_hostname var_ipv6_method var_mac var_mknod var_mount_fs var_mtu
-    var_net var_nesting var_ns var_protection var_pw var_ram var_tags var_timezone var_tun var_unprivileged
-    var_verbose var_vlan var_ssh var_ssh_authorized_key var_container_storage var_template_storage var_searchdomain
+    var_net var_nesting var_ns var_os var_protection var_pw var_ram var_tags var_timezone var_tun var_unprivileged
+    var_verbose var_version var_vlan var_ssh var_ssh_authorized_key var_container_storage var_template_storage var_searchdomain
   )
 
   # Whitelist check helper
@@ -1214,8 +1214,8 @@ default_var_settings() {
   local VAR_WHITELIST=(
     var_apt_cacher var_apt_cacher_ip var_brg var_cpu var_disk var_fuse var_gpu var_keyctl
     var_gateway var_hostname var_ipv6_method var_mac var_mknod var_mount_fs var_mtu
-    var_net var_nesting var_ns var_protection var_pw var_ram var_tags var_timezone var_tun var_unprivileged
-    var_verbose var_vlan var_ssh var_ssh_authorized_key var_container_storage var_template_storage
+    var_net var_nesting var_ns var_os var_protection var_pw var_ram var_tags var_timezone var_tun var_unprivileged
+    var_verbose var_version var_vlan var_ssh var_ssh_authorized_key var_container_storage var_template_storage
   )
 
   # Snapshot: environment variables (highest precedence)
@@ -1376,8 +1376,8 @@ if ! declare -p VAR_WHITELIST >/dev/null 2>&1; then
   declare -ag VAR_WHITELIST=(
     var_apt_cacher var_apt_cacher_ip var_brg var_cpu var_disk var_fuse var_gpu
     var_gateway var_hostname var_ipv6_method var_mac var_mtu
-    var_net var_ns var_pw var_ram var_tags var_tun var_unprivileged
-    var_verbose var_vlan var_ssh var_ssh_authorized_key var_container_storage var_template_storage
+    var_net var_ns var_os var_pw var_ram var_tags var_tun var_unprivileged
+    var_verbose var_version var_vlan var_ssh var_ssh_authorized_key var_container_storage var_template_storage
   )
 fi
 
@@ -1549,6 +1549,8 @@ _build_current_app_vars_tmp() {
     echo "# Generated on $(date -u '+%Y-%m-%dT%H:%M:%SZ')"
     echo
 
+    echo "var_os=$(_sanitize_value "${var_os:-}")"
+    echo "var_version=$(_sanitize_value "${var_version:-}")"
     echo "var_unprivileged=$(_sanitize_value "$_unpriv")"
     echo "var_cpu=$(_sanitize_value "$_cpu")"
     echo "var_ram=$(_sanitize_value "$_ram")"
@@ -3617,16 +3619,16 @@ build_container() {
 $PCT_OPTIONS_STRING"
   fi
 
-  # Add searchdomain if specified
+  # Add storage if specified
   if [ -n "$SD" ]; then
     PCT_OPTIONS_STRING="$PCT_OPTIONS_STRING
-  $SD"
+  -searchdomain $SD"
   fi
 
   # Add nameserver if specified
   if [ -n "$NS" ]; then
     PCT_OPTIONS_STRING="$PCT_OPTIONS_STRING
-  $NS"
+  -nameserver $NS"
   fi
 
   # Network configuration