fixes

2026-02-25 05:57:26 +00:00 · 2025-04-09 14:23:35 +02:00
parent 2671c388d0
commit b67b565d23
17 changed files with 123 additions and 0 deletions
--- a/tools/addon/add-iptag.sh
+++ b/tools/addon/add-iptag.sh
@@ -0,0 +1,912 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2025 community-scripts ORG
+# Author: MickLesk (Canbiz) && Desert_Gamer
+# License: MIT
+# Source: https://github.com/gitsang/iptag
+
+function header_info {
+  clear
+  cat <<"EOF"
+ ___ ____     _____              
+|_ _|  _ \ _ |_   _|_ _  __ _    
+ | || |_) (_)  | |/ _` |/ _` |   
+ | ||  __/ _   | | (_| | (_| |   
+|___|_|   (_)  |_|\__,_|\__, |   
+                        |___/   
+EOF
+}
+
+clear
+header_info
+APP="IP-Tag"
+hostname=$(hostname)
+
+# Farbvariablen
+YW=$(echo "\033[33m")
+GN=$(echo "\033[1;92m")
+RD=$(echo "\033[01;31m")
+CL=$(echo "\033[m")
+BFR="\\r\\033[K"
+HOLD=" "
+CM=" ✔️ ${CL}"
+CROSS=" ✖️ ${CL}"
+
+# This function enables error handling in the script by setting options and defining a trap for the ERR signal.
+catch_errors() {
+  set -Eeuo pipefail
+  trap 'error_handler $LINENO "$BASH_COMMAND"' ERR
+}
+
+# This function is called when an error occurs. It receives the exit code, line number, and command that caused the error, and displays an error message.
+error_handler() {
+  if [ -n "$SPINNER_PID" ] && ps -p $SPINNER_PID >/dev/null; then 
+    kill $SPINNER_PID >/dev/null
+  fi
+  printf "\e[?25h"
+  local exit_code="$?"
+  local line_number="$1"
+  local command="$2"
+  local error_message="${RD}[ERROR]${CL} in line ${RD}$line_number${CL}: exit code ${RD}$exit_code${CL}: while executing command ${YW}$command${CL}"
+  echo -e "\n$error_message\n"
+}
+
+# This function displays a spinner.
+spinner() {
+  local frames=('⠋' '⠙' '⠹' '⠸' '⠼' '⠴' '⠦' '⠧' '⠇' '⠏')
+  local spin_i=0
+  local interval=0.1
+  printf "\e[?25l"
+
+  local color="${YWB}"
+
+  while true; do
+    printf "\r ${color}%s${CL}" "${frames[spin_i]}"
+    spin_i=$(((spin_i + 1) % ${#frames[@]}))
+    sleep "$interval"
+  done
+}
+
+# This function displays an informational message with a yellow color.
+msg_info() {
+  local msg="$1"
+  echo -ne "${TAB}${YW}${HOLD}${msg}${HOLD}"
+  spinner &
+  SPINNER_PID=$!
+}
+
+# This function displays a success message with a green color.
+msg_ok() {
+  if [ -n "$SPINNER_PID" ] && ps -p $SPINNER_PID >/dev/null; then 
+    kill $SPINNER_PID >/dev/null
+  fi
+  printf "\e[?25h"
+  local msg="$1"
+  echo -e "${BFR}${CM}${GN}${msg}${CL}"
+}
+
+# This function displays a error message with a red color.
+msg_error() {
+  if [ -n "$SPINNER_PID" ] && ps -p $SPINNER_PID >/dev/null; then 
+    kill $SPINNER_PID >/dev/null
+  fi
+  printf "\e[?25h"
+  local msg="$1"
+  echo -e "${BFR}${CROSS}${RD}${msg}${CL}"
+}
+
+# Check if service exists
+check_service_exists() {
+  if systemctl is-active --quiet iptag.service; then
+    return 0
+  else
+    return 1
+  fi
+}
+
+# Migrate configuration from old path to new
+migrate_config() {
+  local old_config="/opt/lxc-iptag"
+  local new_config="/opt/iptag/iptag.conf"
+  
+  if [[ -f "$old_config" ]]; then
+    msg_info "Migrating configuration from old path"
+    if cp "$old_config" "$new_config" &>/dev/null; then
+      rm -rf "$old_config" &>/dev/null
+      msg_ok "Configuration migrated and old config removed"
+    else
+      msg_error "Failed to migrate configuration"
+    fi
+  fi
+}
+
+# Update existing installation
+update_installation() {
+  msg_info "Updating IP-Tag Scripts"
+  systemctl stop iptag.service &>/dev/null
+  
+  # Create directory if it doesn't exist
+  if [[ ! -d "/opt/iptag" ]]; then
+    mkdir -p /opt/iptag
+  fi
+  
+  # Migrate config if needed
+  migrate_config
+  
+  # Update main script
+  cat <<'EOF' >/opt/iptag/iptag
+#!/bin/bash
+# =============== CONFIGURATION =============== #
+CONFIG_FILE="/opt/iptag/iptag.conf"
+
+# Load the configuration file if it exists
+if [ -f "$CONFIG_FILE" ]; then
+  # shellcheck source=./iptag.conf
+  source "$CONFIG_FILE"
+fi
+
+# Convert IP to integer for comparison
+ip_to_int() {
+  local ip="$1"
+  local a b c d
+  IFS=. read -r a b c d <<< "${ip}"
+  echo "$((a << 24 | b << 16 | c << 8 | d))"
+}
+
+# Check if IP is in CIDR
+ip_in_cidr() {
+  local ip="$1"
+  local cidr="$2"
+  
+  # Use ipcalc with the -c option (check), which returns 0 if the IP is in the network
+  if ipcalc -c "$ip" "$cidr" >/dev/null 2>&1; then
+    # Get network address and mask from CIDR
+    local network prefix
+    network=$(echo "$cidr" | cut -d/ -f1)
+    prefix=$(echo "$cidr" | cut -d/ -f2)
+    
+    # Check if IP is in the network
+    local ip_a ip_b ip_c ip_d net_a net_b net_c net_d
+    IFS=. read -r ip_a ip_b ip_c ip_d <<< "$ip"
+    IFS=. read -r net_a net_b net_c net_d <<< "$network"
+    
+    # Check octets match based on prefix length
+    local result=0
+    if (( prefix >= 8 )); then
+      [[ "$ip_a" != "$net_a" ]] && result=1
+    fi
+    if (( prefix >= 16 )); then
+      [[ "$ip_b" != "$net_b" ]] && result=1
+    fi
+    if (( prefix >= 24 )); then
+      [[ "$ip_c" != "$net_c" ]] && result=1
+    fi
+    
+    return $result
+  fi
+  
+  return 1
+}
+
+# Format IP address according to the configuration
+format_ip_tag() {
+  local ip="$1"
+  local format="${TAG_FORMAT:-full}"
+  
+  case "$format" in
+    "last_octet")
+      echo "${ip##*.}"
+      ;;
+    "last_two_octets")
+      echo "${ip#*.*.}"
+      ;;
+    *)
+      echo "$ip"
+      ;;
+  esac
+}
+
+# Check if IP is in any CIDRs
+ip_in_cidrs() {
+  local ip="$1"
+  local cidrs="$2"
+  
+  # Check that cidrs is not empty
+  [[ -z "$cidrs" ]] && return 1
+  
+  local IFS=' '
+  for cidr in $cidrs; do
+    ip_in_cidr "$ip" "$cidr" && return 0
+  done
+  return 1
+}
+
+# Check if IP is valid
+is_valid_ipv4() {
+  local ip="$1"
+  [[ "$ip" =~ ^([0-9]{1,3}\.){3}[0-9]{1,3}$ ]] || return 1
+  local IFS='.'
+  read -ra parts <<< "$ip"
+  for part in "${parts[@]}"; do
+    [[ "$part" =~ ^[0-9]+$ ]] && ((part >= 0 && part <= 255)) || return 1
+  done
+  return 0
+}
+
+lxc_status_changed() {
+  current_lxc_status=$(pct list 2>/dev/null)
+  if [ "${last_lxc_status}" == "${current_lxc_status}" ]; then
+    return 1
+  else
+    last_lxc_status="${current_lxc_status}"
+    return 0
+  fi
+}
+
+vm_status_changed() {
+  current_vm_status=$(qm list 2>/dev/null)
+  if [ "${last_vm_status}" == "${current_vm_status}" ]; then
+    return 1
+  else
+    last_vm_status="${current_vm_status}"
+    return 0
+  fi
+}
+
+fw_net_interface_changed() {
+  current_net_interface=$(ifconfig | grep "^fw")
+  if [ "${last_net_interface}" == "${current_net_interface}" ]; then
+    return 1
+  else
+    last_net_interface="${current_net_interface}"
+    return 0
+  fi
+}
+
+# Get VM IPs using MAC addresses and ARP table
+get_vm_ips() {
+  local vmid=$1
+  local ips=""
+  
+  # Check if VM is running
+  qm status "$vmid" 2>/dev/null | grep -q "status: running" || return
+  
+  # Get MAC addresses from VM configuration
+  local macs
+  macs=$(qm config "$vmid" 2>/dev/null | grep -E 'net[0-9]+' | grep -o -E '[a-fA-F0-9]{2}(:[a-fA-F0-9]{2}){5}')
+  
+  # Look up IPs from ARP table using MAC addresses
+  for mac in $macs; do
+    local ip
+    ip=$(arp -an 2>/dev/null | grep -i "$mac" | grep -o -E '([0-9]{1,3}\.){3}[0-9]{1,3}')
+    if [ -n "$ip" ]; then
+      ips+="$ip "
+    fi
+  done
+  
+  echo "$ips"
+}
+
+# Update tags for container or VM
+update_tags() {
+  local type="$1"
+  local vmid="$2"
+  local config_cmd="pct"
+  [[ "$type" == "vm" ]] && config_cmd="qm"
+  
+  # Get current IPs
+  local current_ips_full
+  if [[ "$type" == "lxc" ]]; then
+    # Redirect error output to suppress AppArmor warnings
+    current_ips_full=$(lxc-info -n "${vmid}" -i 2>/dev/null | grep -E "^IP:" | awk '{print $2}')
+  else
+    current_ips_full=$(get_vm_ips "${vmid}")
+  fi
+  
+  # Parse current tags and get valid IPs
+  local current_tags=()
+  local next_tags=()
+  mapfile -t current_tags < <($config_cmd config "${vmid}" 2>/dev/null | grep tags | awk '{print $2}' | sed 's/;/\n/g')
+  
+  for tag in "${current_tags[@]}"; do
+    # Skip tag if it looks like an IP (full or partial)
+    if ! is_valid_ipv4 "${tag}" && ! [[ "$tag" =~ ^[0-9]+(\.[0-9]+)*$ ]]; then
+      next_tags+=("${tag}")
+    fi
+  done
+  
+  # Add valid IPs to tags
+  local added_ips=()
+  local skipped_ips=()
+  
+  for ip in ${current_ips_full}; do
+    if is_valid_ipv4 "${ip}"; then
+      if ip_in_cidrs "${ip}" "${CIDR_LIST[*]}"; then
+        local formatted_ip=$(format_ip_tag "$ip")
+        next_tags+=("${formatted_ip}")
+        added_ips+=("${formatted_ip}")
+      else
+        skipped_ips+=("${ip}")
+      fi
+    fi
+  done
+  
+  # Log only if there are changes
+  if [ ${#added_ips[@]} -gt 0 ]; then
+    echo "${type^} ${vmid}: added IP tags: ${added_ips[*]}"
+  fi
+  
+  # Update if changed
+  if [[ "$(IFS=';'; echo "${current_tags[*]}")" != "$(IFS=';'; echo "${next_tags[*]}")" ]]; then
+    $config_cmd set "${vmid}" -tags "$(IFS=';'; echo "${next_tags[*]}")" &>/dev/null
+  fi
+}
+
+# Check if status changed
+check_status_changed() {
+  local type="$1"
+  local current_status
+  
+  case "$type" in
+    "lxc")
+      current_status=$(pct list 2>/dev/null | grep -v VMID)
+      [[ "${last_lxc_status}" == "${current_status}" ]] && return 1
+      last_lxc_status="${current_status}"
+      ;;
+    "vm")
+      current_status=$(qm list 2>/dev/null | grep -v VMID)
+      [[ "${last_vm_status}" == "${current_status}" ]] && return 1
+      last_vm_status="${current_status}"
+      ;;
+    "fw")
+      current_status=$(ifconfig 2>/dev/null | grep "^fw")
+      [[ "${last_net_interface}" == "${current_status}" ]] && return 1
+      last_net_interface="${current_status}"
+      ;;
+  esac
+  return 0
+}
+
+# Update tags for all containers/VMs of specified type
+update_all_tags() {
+  local type="$1"
+  local vmid_list=""
+  
+  if [[ "$type" == "lxc" ]]; then
+    # Redirect stderr to /dev/null to suppress AppArmor messages
+    vmid_list=$(pct list 2>/dev/null | grep -v VMID | awk '{print $1}')
+    echo "Found $(echo "$vmid_list" | wc -w) LXC containers"
+  else
+    vmid_list=$(qm list 2>/dev/null | grep -v VMID | awk '{print $1}')
+    echo "Found $(echo "$vmid_list" | wc -w) virtual machines"
+  fi
+  
+  for vmid in $vmid_list; do
+    update_tags "$type" "$vmid"
+  done
+}
+
+check() {
+  current_time=$(date +%s)
+  
+  # Check LXC status
+  time_since_last_lxc_status_check=$((current_time - last_lxc_status_check_time))
+  if [[ "${LXC_STATUS_CHECK_INTERVAL}" -gt 0 ]] \
+    && [[ "${time_since_last_lxc_status_check}" -ge "${LXC_STATUS_CHECK_INTERVAL}" ]]; then
+    echo "Checking LXC status..."
+    last_lxc_status_check_time=${current_time}
+    if check_status_changed "lxc"; then
+      update_all_tags "lxc"
+      last_update_lxc_time=${current_time}
+    fi
+  fi
+  
+  # Check VM status
+  time_since_last_vm_status_check=$((current_time - last_vm_status_check_time))
+  if [[ "${VM_STATUS_CHECK_INTERVAL}" -gt 0 ]] \
+    && [[ "${time_since_last_vm_status_check}" -ge "${VM_STATUS_CHECK_INTERVAL}" ]]; then
+    echo "Checking VM status..."
+    last_vm_status_check_time=${current_time}
+    if check_status_changed "vm"; then
+      update_all_tags "vm"
+      last_update_vm_time=${current_time}
+    fi
+  fi
+  
+  # Check network interface changes
+  time_since_last_fw_net_interface_check=$((current_time - last_fw_net_interface_check_time))
+  if [[ "${FW_NET_INTERFACE_CHECK_INTERVAL}" -gt 0 ]] \
+    && [[ "${time_since_last_fw_net_interface_check}" -ge "${FW_NET_INTERFACE_CHECK_INTERVAL}" ]]; then
+    echo "Checking network interfaces..."
+    last_fw_net_interface_check_time=${current_time}
+    if check_status_changed "fw"; then
+      update_all_tags "lxc"
+      update_all_tags "vm"
+      last_update_lxc_time=${current_time}
+      last_update_vm_time=${current_time}
+    fi
+  fi
+  
+  # Force update if needed
+  for type in "lxc" "vm"; do
+    local last_update_var="last_update_${type}_time"
+    local time_since_last_update=$((current_time - ${!last_update_var}))
+    if [ ${time_since_last_update} -ge ${FORCE_UPDATE_INTERVAL} ]; then
+      echo "Force updating ${type} tags..."
+      update_all_tags "$type"
+      eval "${last_update_var}=${current_time}"
+    fi
+  done
+}
+
+# Initialize time variables
+last_lxc_status_check_time=0
+last_vm_status_check_time=0
+last_fw_net_interface_check_time=0
+last_update_lxc_time=0
+last_update_vm_time=0
+
+# main: Set the IP tags for all LXC containers and VMs
+main() {
+  while true; do
+    check
+    sleep "${LOOP_INTERVAL}"
+  done
+}
+
+main
+EOF
+  chmod +x /opt/iptag/iptag
+  
+  # Update service file
+  cat <<EOF >/lib/systemd/system/iptag.service
+[Unit]
+Description=IP-Tag service
+After=network.target
+
+[Service]
+Type=simple
+ExecStart=/opt/iptag/iptag
+Restart=always
+
+[Install]
+WantedBy=multi-user.target
+EOF
+  
+  systemctl daemon-reload &>/dev/null
+  systemctl enable -q --now iptag.service &>/dev/null
+  msg_ok "Updated IP-Tag Scripts"
+}
+
+# Main installation process
+if check_service_exists; then
+  while true; do
+    read -p "IP-Tag service is already installed. Do you want to update it? (y/n): " yn
+    case $yn in
+      [Yy]*)
+        update_installation
+        exit 0
+        ;;
+      [Nn]*)
+        msg_error "Installation cancelled."
+        exit 0
+        ;;
+      *) 
+        msg_error "Please answer yes or no."
+        ;;
+    esac
+  done
+fi
+
+while true; do
+  read -p "This will install ${APP} on ${hostname}. Proceed? (y/n): " yn
+  case $yn in
+    [Yy]*)
+      break
+      ;;
+    [Nn]*)
+      msg_error "Installation cancelled."
+      exit
+      ;;
+    *)
+      msg_error "Please answer yes or no."
+      ;;
+  esac
+done
+
+if ! pveversion | grep -Eq "pve-manager/8\.[0-3](\.[0-9]+)*"; then
+  msg_error "This version of Proxmox Virtual Environment is not supported"
+  msg_error "⚠️ Requires Proxmox Virtual Environment Version 8.0 or later."
+  msg_error "Exiting..."
+  sleep 2
+  exit
+fi
+
+FILE_PATH="/usr/local/bin/iptag"
+if [[ -f "$FILE_PATH" ]]; then
+  msg_info "The file already exists: '$FILE_PATH'. Skipping installation."
+  exit 0
+fi
+
+msg_info "Installing Dependencies"
+apt-get update &>/dev/null
+apt-get install -y ipcalc net-tools &>/dev/null
+msg_ok "Installed Dependencies"
+
+msg_info "Setting up IP-Tag Scripts"
+mkdir -p /opt/iptag
+msg_ok "Setup IP-Tag Scripts"
+
+# Migrate config if needed
+migrate_config
+
+msg_info "Setup Default Config"
+if [[ ! -f /opt/iptag/iptag.conf ]]; then
+  cat <<EOF >/opt/iptag/iptag.conf
+# Configuration file for LXC IP tagging
+
+# List of allowed CIDRs
+CIDR_LIST=(
+  192.168.0.0/16
+  172.16.0.0/12
+  10.0.0.0/8
+  100.64.0.0/10
+)
+
+# Tag format options:
+# - "full": full IP address (e.g., 192.168.0.100)
+# - "last_octet": only the last octet (e.g., 100)
+# - "last_two_octets": last two octets (e.g., 0.100)
+TAG_FORMAT="full"
+
+# Interval settings (in seconds)
+LOOP_INTERVAL=60
+VM_STATUS_CHECK_INTERVAL=60
+FW_NET_INTERFACE_CHECK_INTERVAL=60
+LXC_STATUS_CHECK_INTERVAL=60
+FORCE_UPDATE_INTERVAL=1800
+EOF
+  msg_ok "Setup default config"
+else
+  msg_ok "Default config already exists"
+fi
+
+msg_info "Setup Main Function"
+if [[ ! -f /opt/iptag/iptag ]]; then
+  cat <<'EOF' >/opt/iptag/iptag
+#!/bin/bash
+# =============== CONFIGURATION =============== #
+CONFIG_FILE="/opt/iptag/iptag.conf"
+
+# Load the configuration file if it exists
+if [ -f "$CONFIG_FILE" ]; then
+  # shellcheck source=./iptag.conf
+  source "$CONFIG_FILE"
+fi
+
+# Convert IP to integer for comparison
+ip_to_int() {
+  local ip="$1"
+  local a b c d
+  IFS=. read -r a b c d <<< "${ip}"
+  echo "$((a << 24 | b << 16 | c << 8 | d))"
+}
+
+# Check if IP is in CIDR
+ip_in_cidr() {
+  local ip="$1"
+  local cidr="$2"
+  
+  # Use ipcalc with the -c option (check), which returns 0 if the IP is in the network
+  if ipcalc -c "$ip" "$cidr" >/dev/null 2>&1; then
+    # Get network address and mask from CIDR
+    local network prefix
+    network=$(echo "$cidr" | cut -d/ -f1)
+    prefix=$(echo "$cidr" | cut -d/ -f2)
+    
+    # Check if IP is in the network
+    local ip_a ip_b ip_c ip_d net_a net_b net_c net_d
+    IFS=. read -r ip_a ip_b ip_c ip_d <<< "$ip"
+    IFS=. read -r net_a net_b net_c net_d <<< "$network"
+    
+    # Check octets match based on prefix length
+    local result=0
+    if (( prefix >= 8 )); then
+      [[ "$ip_a" != "$net_a" ]] && result=1
+    fi
+    if (( prefix >= 16 )); then
+      [[ "$ip_b" != "$net_b" ]] && result=1
+    fi
+    if (( prefix >= 24 )); then
+      [[ "$ip_c" != "$net_c" ]] && result=1
+    fi
+    
+    return $result
+  fi
+  
+  return 1
+}
+
+# Format IP address according to the configuration
+format_ip_tag() {
+  local ip="$1"
+  local format="${TAG_FORMAT:-full}"
+  
+  case "$format" in
+    "last_octet")
+      echo "${ip##*.}"
+      ;;
+    "last_two_octets")
+      echo "${ip#*.*.}"
+      ;;
+    *)
+      echo "$ip"
+      ;;
+  esac
+}
+
+# Check if IP is in any CIDRs
+ip_in_cidrs() {
+  local ip="$1"
+  local cidrs="$2"
+  
+  # Check that cidrs is not empty
+  [[ -z "$cidrs" ]] && return 1
+  
+  local IFS=' '
+  for cidr in $cidrs; do
+    ip_in_cidr "$ip" "$cidr" && return 0
+  done
+  return 1
+}
+
+# Check if IP is valid
+is_valid_ipv4() {
+  local ip="$1"
+  [[ "$ip" =~ ^([0-9]{1,3}\.){3}[0-9]{1,3}$ ]] || return 1
+  local IFS='.'
+  read -ra parts <<< "$ip"
+  for part in "${parts[@]}"; do
+    [[ "$part" =~ ^[0-9]+$ ]] && ((part >= 0 && part <= 255)) || return 1
+  done
+  return 0
+}
+
+lxc_status_changed() {
+  current_lxc_status=$(pct list 2>/dev/null)
+  if [ "${last_lxc_status}" == "${current_lxc_status}" ]; then
+    return 1
+  else
+    last_lxc_status="${current_lxc_status}"
+    return 0
+  fi
+}
+
+vm_status_changed() {
+  current_vm_status=$(qm list 2>/dev/null)
+  if [ "${last_vm_status}" == "${current_vm_status}" ]; then
+    return 1
+  else
+    last_vm_status="${current_vm_status}"
+    return 0
+  fi
+}
+
+fw_net_interface_changed() {
+  current_net_interface=$(ifconfig | grep "^fw")
+  if [ "${last_net_interface}" == "${current_net_interface}" ]; then
+    return 1
+  else
+    last_net_interface="${current_net_interface}"
+    return 0
+  fi
+}
+
+# Get VM IPs using MAC addresses and ARP table
+get_vm_ips() {
+  local vmid=$1
+  local ips=""
+  
+  # Check if VM is running
+  qm status "$vmid" 2>/dev/null | grep -q "status: running" || return
+  
+  # Get MAC addresses from VM configuration
+  local macs
+  macs=$(qm config "$vmid" 2>/dev/null | grep -E 'net[0-9]+' | grep -o -E '[a-fA-F0-9]{2}(:[a-fA-F0-9]{2}){5}')
+  
+  # Look up IPs from ARP table using MAC addresses
+  for mac in $macs; do
+    local ip
+    ip=$(arp -an 2>/dev/null | grep -i "$mac" | grep -o -E '([0-9]{1,3}\.){3}[0-9]{1,3}')
+    if [ -n "$ip" ]; then
+      ips+="$ip "
+    fi
+  done
+  
+  echo "$ips"
+}
+
+# Update tags for container or VM
+update_tags() {
+  local type="$1"
+  local vmid="$2"
+  local config_cmd="pct"
+  [[ "$type" == "vm" ]] && config_cmd="qm"
+  
+  # Get current IPs
+  local current_ips_full
+  if [[ "$type" == "lxc" ]]; then
+    # Redirect error output to suppress AppArmor warnings
+    current_ips_full=$(lxc-info -n "${vmid}" -i 2>/dev/null | grep -E "^IP:" | awk '{print $2}')
+  else
+    current_ips_full=$(get_vm_ips "${vmid}")
+  fi
+  
+  # Parse current tags and get valid IPs
+  local current_tags=()
+  local next_tags=()
+  mapfile -t current_tags < <($config_cmd config "${vmid}" 2>/dev/null | grep tags | awk '{print $2}' | sed 's/;/\n/g')
+  
+  for tag in "${current_tags[@]}"; do
+    # Skip tag if it looks like an IP (full or partial)
+    if ! is_valid_ipv4 "${tag}" && ! [[ "$tag" =~ ^[0-9]+(\.[0-9]+)*$ ]]; then
+      next_tags+=("${tag}")
+    fi
+  done
+  
+  # Add valid IPs to tags
+  local added_ips=()
+  local skipped_ips=()
+  
+  for ip in ${current_ips_full}; do
+    if is_valid_ipv4 "${ip}"; then
+      if ip_in_cidrs "${ip}" "${CIDR_LIST[*]}"; then
+        local formatted_ip=$(format_ip_tag "$ip")
+        next_tags+=("${formatted_ip}")
+        added_ips+=("${formatted_ip}")
+      else
+        skipped_ips+=("${ip}")
+      fi
+    fi
+  done
+  
+  # Log only if there are changes
+  if [ ${#added_ips[@]} -gt 0 ]; then
+    echo "${type^} ${vmid}: added IP tags: ${added_ips[*]}"
+  fi
+  
+  # Update if changed
+  if [[ "$(IFS=';'; echo "${current_tags[*]}")" != "$(IFS=';'; echo "${next_tags[*]}")" ]]; then
+    $config_cmd set "${vmid}" -tags "$(IFS=';'; echo "${next_tags[*]}")" &>/dev/null
+  fi
+}
+
+# Check if status changed
+check_status_changed() {
+  local type="$1"
+  local current_status
+  
+  case "$type" in
+    "lxc")
+      current_status=$(pct list 2>/dev/null | grep -v VMID)
+      [[ "${last_lxc_status}" == "${current_status}" ]] && return 1
+      last_lxc_status="${current_status}"
+      ;;
+    "vm")
+      current_status=$(qm list 2>/dev/null | grep -v VMID)
+      [[ "${last_vm_status}" == "${current_status}" ]] && return 1
+      last_vm_status="${current_status}"
+      ;;
+    "fw")
+      current_status=$(ifconfig 2>/dev/null | grep "^fw")
+      [[ "${last_net_interface}" == "${current_status}" ]] && return 1
+      last_net_interface="${current_status}"
+      ;;
+  esac
+  return 0
+}
+
+check() {
+  current_time=$(date +%s)
+  
+  # Check LXC status
+  time_since_last_lxc_status_check=$((current_time - last_lxc_status_check_time))
+  if [[ "${LXC_STATUS_CHECK_INTERVAL}" -gt 0 ]] \
+    && [[ "${time_since_last_lxc_status_check}" -ge "${LXC_STATUS_CHECK_INTERVAL}" ]]; then
+    echo "Checking LXC status..."
+    last_lxc_status_check_time=${current_time}
+    if check_status_changed "lxc"; then
+      update_all_tags "lxc"
+      last_update_lxc_time=${current_time}
+    fi
+  fi
+  
+  # Check VM status
+  time_since_last_vm_status_check=$((current_time - last_vm_status_check_time))
+  if [[ "${VM_STATUS_CHECK_INTERVAL}" -gt 0 ]] \
+    && [[ "${time_since_last_vm_status_check}" -ge "${VM_STATUS_CHECK_INTERVAL}" ]]; then
+    echo "Checking VM status..."
+    last_vm_status_check_time=${current_time}
+    if check_status_changed "vm"; then
+      update_all_tags "vm"
+      last_update_vm_time=${current_time}
+    fi
+  fi
+  
+  # Check network interface changes
+  time_since_last_fw_net_interface_check=$((current_time - last_fw_net_interface_check_time))
+  if [[ "${FW_NET_INTERFACE_CHECK_INTERVAL}" -gt 0 ]] \
+    && [[ "${time_since_last_fw_net_interface_check}" -ge "${FW_NET_INTERFACE_CHECK_INTERVAL}" ]]; then
+    echo "Checking network interfaces..."
+    last_fw_net_interface_check_time=${current_time}
+    if check_status_changed "fw"; then
+      update_all_tags "lxc"
+      update_all_tags "vm"
+      last_update_lxc_time=${current_time}
+      last_update_vm_time=${current_time}
+    fi
+  fi
+  
+  # Force update if needed
+  for type in "lxc" "vm"; do
+    local last_update_var="last_update_${type}_time"
+    local time_since_last_update=$((current_time - ${!last_update_var}))
+    if [ ${time_since_last_update} -ge ${FORCE_UPDATE_INTERVAL} ]; then
+      echo "Force updating ${type} tags..."
+      update_all_tags "$type"
+      eval "${last_update_var}=${current_time}"
+    fi
+  done
+}
+
+# Initialize time variables
+last_lxc_status_check_time=0
+last_vm_status_check_time=0
+last_fw_net_interface_check_time=0
+last_update_lxc_time=0
+last_update_vm_time=0
+
+# main: Set the IP tags for all LXC containers and VMs
+main() {
+  while true; do
+    check
+    sleep "${LOOP_INTERVAL}"
+  done
+}
+
+main
+EOF
+  msg_ok "Setup Main Function"
+else
+  msg_ok "Main Function already exists"
+fi
+chmod +x /opt/iptag/iptag
+
+msg_info "Creating Service"
+if [[ ! -f /lib/systemd/system/iptag.service ]]; then
+  cat <<EOF >/lib/systemd/system/iptag.service
+[Unit]
+Description=IP-Tag service
+After=network.target
+
+[Service]
+Type=simple
+ExecStart=/opt/iptag/iptag
+Restart=always
+
+[Install]
+WantedBy=multi-user.target
+EOF
+  msg_ok "Created Service"
+else
+  msg_ok "Service already exists."
+fi
+
+msg_ok "Setup IP-Tag Scripts"
+
+msg_info "Starting Service"
+systemctl daemon-reload &>/dev/null
+systemctl enable -q --now iptag.service &>/dev/null
+msg_ok "Started Service"
+SPINNER_PID=""
+echo -e "\n${APP} installation completed successfully! ${CL}\n"
--- a/tools/addon/code-server.sh
+++ b/tools/addon/code-server.sh
@@ -0,0 +1,96 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2025 tteck
+# Author: tteck (tteckster)
+# License: MIT
+# https://github.com/community-scripts/ProxmoxVED/raw/main/LICENSE
+
+function header_info {
+    cat <<"EOF"
+   ______          __        _____                          
+  / ____/___  ____/ /__     / ___/___  ______   _____  _____
+ / /   / __ \/ __  / _ \    \__ \/ _ \/ ___/ | / / _ \/ ___/
+/ /___/ /_/ / /_/ /  __/   ___/ /  __/ /   | |/ /  __/ /    
+\____/\____/\__,_/\___/   /____/\___/_/    |___/\___/_/     
+ 
+EOF
+}
+IP=$(hostname -I | awk '{print $1}')
+YW=$(echo "\033[33m")
+BL=$(echo "\033[36m")
+RD=$(echo "\033[01;31m")
+BGN=$(echo "\033[4;92m")
+GN=$(echo "\033[1;92m")
+DGN=$(echo "\033[32m")
+CL=$(echo "\033[m")
+BFR="\\r\\033[K"
+HOLD="-"
+CM="${GN}✓${CL}"
+APP="Code Server"
+hostname="$(hostname)"
+set -o errexit
+set -o errtrace
+set -o nounset
+set -o pipefail
+shopt -s expand_aliases
+alias die='EXIT=$? LINE=$LINENO error_exit'
+trap die ERR
+
+function error_exit() {
+    trap - ERR
+    local reason="Unknown failure occured."
+    local msg="${1:-$reason}"
+    local flag="${RD}‼ ERROR ${CL}$EXIT@$LINE"
+    echo -e "$flag $msg" 1>&2
+    exit $EXIT
+}
+clear
+header_info
+if command -v pveversion >/dev/null 2>&1; then echo -e "⚠️  Can't Install on Proxmox "; exit; fi
+if [ -e /etc/alpine-release ]; then echo -e "⚠️  Can't Install on Alpine"; exit; fi
+while true; do
+    read -p "This will Install ${APP} on $hostname. Proceed(y/n)?" yn
+    case $yn in
+    [Yy]*) break ;;
+    [Nn]*) exit ;;
+    *) echo "Please answer yes or no." ;;
+    esac
+done
+
+function msg_info() {
+    local msg="$1"
+    echo -ne " ${HOLD} ${YW}${msg}..."
+}
+
+function msg_ok() {
+    local msg="$1"
+    echo -e "${BFR} ${CM} ${GN}${msg}${CL}"
+}
+
+msg_info "Installing Dependencies"
+apt-get update &>/dev/null
+apt-get install -y curl &>/dev/null
+apt-get install -y git &>/dev/null
+msg_ok "Installed Dependencies"
+
+VERSION=$(curl -s https://api.github.com/repos/coder/code-server/releases/latest |
+    grep "tag_name" |
+    awk '{print substr($2, 3, length($2)-4) }')
+
+msg_info "Installing Code-Server v${VERSION}"
+curl -fOL https://github.com/coder/code-server/releases/download/v$VERSION/code-server_${VERSION}_amd64.deb &>/dev/null
+dpkg -i code-server_${VERSION}_amd64.deb &>/dev/null
+rm -rf code-server_${VERSION}_amd64.deb
+mkdir -p ~/.config/code-server/
+systemctl enable -q --now code-server@$USER
+cat <<EOF >~/.config/code-server/config.yaml
+bind-addr: 0.0.0.0:8680
+auth: none
+password: 
+cert: false
+EOF
+systemctl restart code-server@$USER
+msg_ok "Installed Code-Server v${VERSION} on $hostname"
+
+echo -e "${APP} should be reachable by going to the following URL.
+         ${BL}http://$IP:8680${CL} \n"
--- a/tools/addon/filebrowser.sh
+++ b/tools/addon/filebrowser.sh
@@ -0,0 +1,184 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2025 community-scripts ORG
+# Author: tteck (tteckster) | Co-Author: MickLesk
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+
+function header_info {
+  clear
+  cat <<"EOF"
+    _______ __     ____
+   / ____(_) /__  / __ )_________ _      __________  _____
+  / /_  / / / _ \/ __  / ___/ __ \ | /| / / ___/ _ \/ ___/
+ / __/ / / /  __/ /_/ / /  / /_/ / |/ |/ (__  )  __/ /
+/_/   /_/_/\___/_____/_/   \____/|__/|__/____/\___/_/
+EOF
+}
+
+YW=$(echo "\033[33m")
+GN=$(echo "\033[1;92m")
+RD=$(echo "\033[01;31m")
+BL=$(echo "\033[36m")
+CL=$(echo "\033[m")
+CM="${GN}✔️${CL}"
+CROSS="${RD}✖️${CL}"
+INFO="${BL}ℹ️${CL}"
+
+APP="FileBrowser"
+INSTALL_PATH="/usr/local/bin/filebrowser"
+DB_PATH="/usr/local/community-scripts/filebrowser.db"
+DEFAULT_PORT=8080
+
+# Get first non-loopback IP & Detect primary network interface dynamically
+IFACE=$(ip -4 route | awk '/default/ {print $5; exit}')
+IP=$(ip -4 addr show "$IFACE" | awk '/inet / {print $2}' | cut -d/ -f1 | head -n 1)
+
+[[ -z "$IP" ]] && IP=$(hostname -I | awk '{print $1}')
+[[ -z "$IP" ]] && IP="127.0.0.1"
+
+# Detect OS
+if [[ -f "/etc/alpine-release" ]]; then
+  OS="Alpine"
+  SERVICE_PATH="/etc/init.d/filebrowser"
+  PKG_MANAGER="apk add --no-cache"
+elif [[ -f "/etc/debian_version" ]]; then
+  OS="Debian"
+  SERVICE_PATH="/etc/systemd/system/filebrowser.service"
+  PKG_MANAGER="apt-get install -y"
+else
+  echo -e "${CROSS} Unsupported OS detected. Exiting."
+  exit 1
+fi
+
+header_info
+
+function msg_info() {
+  local msg="$1"
+  echo -e "${INFO} ${YW}${msg}...${CL}"
+}
+
+function msg_ok() {
+  local msg="$1"
+  echo -e "${CM} ${GN}${msg}${CL}"
+}
+
+function msg_error() {
+  local msg="$1"
+  echo -e "${CROSS} ${RD}${msg}${CL}"
+}
+
+if [ -f "$INSTALL_PATH" ]; then
+  echo -e "${YW}⚠️ ${APP} is already installed.${CL}"
+  read -r -p "Would you like to uninstall ${APP}? (y/N): " uninstall_prompt
+  if [[ "${uninstall_prompt,,}" =~ ^(y|yes)$ ]]; then
+    msg_info "Uninstalling ${APP}"
+    if [[ "$OS" == "Debian" ]]; then
+      systemctl disable --now filebrowser.service &>/dev/null
+      rm -f "$SERVICE_PATH"
+    else
+      rc-service filebrowser stop &>/dev/null
+      rc-update del filebrowser &>/dev/null
+      rm -f "$SERVICE_PATH"
+    fi
+    rm -f "$INSTALL_PATH" "$DB_PATH"
+    msg_ok "${APP} has been uninstalled."
+    exit 0
+  fi
+
+  read -r -p "Would you like to update ${APP}? (y/N): " update_prompt
+  if [[ "${update_prompt,,}" =~ ^(y|yes)$ ]]; then
+    msg_info "Updating ${APP}"
+    curl -fsSL https://github.com/filebrowser/filebrowser/releases/latest/download/linux-amd64-filebrowser.tar.gz | tar -xzv -C /usr/local/bin &>/dev/null
+    chmod +x "$INSTALL_PATH"
+    msg_ok "Updated ${APP}"
+    exit 0
+  else
+    echo -e "${YW}⚠️ Update skipped. Exiting.${CL}"
+    exit 0
+  fi
+fi
+
+echo -e "${YW}⚠️ ${APP} is not installed.${CL}"
+read -r -p "Enter port number (Default: ${DEFAULT_PORT}): " PORT
+PORT=${PORT:-$DEFAULT_PORT}
+
+read -r -p "Would you like to install ${APP}? (y/n): " install_prompt
+if [[ "${install_prompt,,}" =~ ^(y|yes)$ ]]; then
+  msg_info "Installing ${APP} on ${OS}"
+  $PKG_MANAGER wget tar curl &>/dev/null
+  curl -fsSL https://github.com/filebrowser/filebrowser/releases/latest/download/linux-amd64-filebrowser.tar.gz | tar -xzv -C /usr/local/bin &>/dev/null
+  chmod +x "$INSTALL_PATH"
+  msg_ok "Installed ${APP}"
+
+  msg_info "Creating FileBrowser directory"
+  mkdir -p /usr/local/community-scripts
+  chown root:root /usr/local/community-scripts
+  chmod 755 /usr/local/community-scripts
+  touch "$DB_PATH"
+  chown root:root "$DB_PATH"
+  chmod 644 "$DB_PATH"
+  msg_ok "Directory created successfully"
+
+  read -r -p "Would you like to use No Authentication? (y/N): " auth_prompt
+  if [[ "${auth_prompt,,}" =~ ^(y|yes)$ ]]; then
+    msg_info "Configuring No Authentication"
+    cd /usr/local/community-scripts
+    filebrowser config init -a '0.0.0.0' -p "$PORT" -d "$DB_PATH" &>/dev/null
+    filebrowser config set -a '0.0.0.0' -p "$PORT" -d "$DB_PATH" &>/dev/null
+    filebrowser config init --auth.method=noauth &>/dev/null
+    filebrowser config set --auth.method=noauth &>/dev/null
+    filebrowser users add ID 1 --perm.admin &>/dev/null
+    msg_ok "No Authentication configured"
+  else
+    msg_info "Setting up default authentication"
+    cd /usr/local/community-scripts
+    filebrowser config init -a '0.0.0.0' -p "$PORT" -d "$DB_PATH" &>/dev/null
+    filebrowser config set -a '0.0.0.0' -p "$PORT" -d "$DB_PATH" &>/dev/null
+    filebrowser users add admin helper-scripts.com --perm.admin --database "$DB_PATH" &>/dev/null
+    msg_ok "Default authentication configured (admin:helper-scripts.com)"
+  fi
+
+  msg_info "Creating service"
+  if [[ "$OS" == "Debian" ]]; then
+    cat <<EOF >"$SERVICE_PATH"
+[Unit]
+Description=Filebrowser
+After=network-online.target
+
+[Service]
+User=root
+WorkingDirectory=/usr/local/community-scripts
+ExecStartPre=/bin/touch /usr/local/community-scripts/filebrowser.db
+ExecStartPre=/usr/local/bin/filebrowser config set -a "0.0.0.0" -p 9000 -d /usr/local/community-scripts/filebrowser.db
+ExecStart=/usr/local/bin/filebrowser -r / -d /usr/local/community-scripts/filebrowser.db -p 9000
+Restart=always
+
+[Install]
+WantedBy=multi-user.target
+EOF
+    systemctl enable -q --now filebrowser
+  else
+    cat <<EOF >"$SERVICE_PATH"
+#!/sbin/openrc-run
+
+command="/usr/local/bin/filebrowser"
+command_args="-r / -d $DB_PATH -p $PORT"
+command_background=true
+pidfile="/var/run/filebrowser.pid"
+directory="/usr/local/community-scripts"
+
+depend() {
+    need net
+}
+EOF
+    chmod +x "$SERVICE_PATH"
+    rc-update add filebrowser default &>/dev/null
+    rc-service filebrowser start &>/dev/null
+  fi
+  msg_ok "Service created successfully"
+
+  echo -e "${CM} ${GN}${APP} is reachable at: ${BL}http://$IP:$PORT${CL}"
+else
+  echo -e "${YW}⚠️ Installation skipped. Exiting.${CL}"
+  exit 0
+fi
--- a/tools/addon/grafana-loki.sh
+++ b/tools/addon/grafana-loki.sh
@@ -0,0 +1,32 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2025 tteck
+# Author: tteck (tteckster)
+# License: MIT
+# https://github.com/community-scripts/ProxmoxVED/raw/main/LICENSE
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt-get install -y gnupg2
+msg_ok "Installed Dependencies"
+
+msg_info "Setting up rclone"
+wget https://github.com/rclone/rclone/releases/download/v1.69.1/rclone-v1.69.1-linux-amd64.de
+dpkg -i rclone-v1.69.1-linux-amd64.deb
+rclone rcd --rc-web-gui --rc-web-gui-no-open-browser --rc-addr :3000 --rc-user admin --rc-pass 12345
+msg_ok "Set up Grafana"
+
+motd_ssh
+customize
+
+msg_info "Cleaning up"
+$STD apt-get -y autoremove
+$STD apt-get -y autoclean
+msg_ok "Cleaned"
--- a/tools/addon/phpmyadmin.sh
+++ b/tools/addon/phpmyadmin.sh
@@ -0,0 +1,123 @@
+#!/usr/bin/env bash
+
+# community-scripts ORG | phpMyAdmin Installer
+# Author: MickLesk
+# License: MIT
+
+function header_info {
+    clear
+    cat <<"EOF"
+    ____  __          __  ___      ___       __          _     
+   / __ \/ /_  ____  /  |/  /_  __/   | ____/ /___ ___  (_)___ 
+  / /_/ / __ \/ __ \/ /|_/ / / / / /| |/ __  / __ `__ \/ / __ \
+ / ____/ / / / /_/ / /  / / /_/ / ___ / /_/ / / / / / / / / / /
+/_/   /_/ /_/ .___/_/  /_/\__, /_/  |_\__,_/_/ /_/ /_/_/_/ /_/ 
+           /_/           /____/                                
+EOF
+}
+
+YW=$(echo "\033[33m")
+GN=$(echo "\033[1;92m")
+RD=$(echo "\033[01;31m")
+BL=$(echo "\033[36m")
+CL=$(echo "\033[m")
+CM="${GN}✔️${CL}"
+CROSS="${RD}✖️${CL}"
+INFO="${BL}ℹ️${CL}"
+
+APP="phpMyAdmin"
+PORT=8081
+WEBROOT="/usr/share/phpmyadmin"
+
+IFACE=$(ip -4 route | awk '/default/ {print $5; exit}')
+IP=$(ip -4 addr show "$IFACE" | awk '/inet / {print $2}' | cut -d/ -f1 | head -n 1)
+[[ -z "$IP" ]] && IP="127.0.0.1"
+
+if [[ -f "/etc/alpine-release" ]]; then
+    OS="Alpine"
+    SERVICE_PATH="/etc/init.d/phpmyadmin"
+    PKG_MANAGER="apk add --no-cache"
+    PHP_SERVICE="php81"
+elif [[ -f "/etc/debian_version" ]]; then
+    OS="Debian"
+    SERVICE_PATH="/etc/systemd/system/phpmyadmin.service"
+    PKG_MANAGER="apt-get install -y"
+    PHP_SERVICE="php"
+else
+    echo -e "${CROSS} Unsupported OS"
+    exit 1
+fi
+
+header_info
+
+function msg_info() { echo -e "${INFO} ${YW}${1}...${CL}"; }
+function msg_ok() { echo -e "${CM} ${GN}${1}${CL}"; }
+function msg_error() { echo -e "${CROSS} ${RD}${1}${CL}"; }
+
+read -r -p "Install ${APP}? (y/n): " prompt
+if [[ "${prompt,,}" =~ ^(y|yes)$ ]]; then
+    msg_info "Installing dependencies"
+    $PKG_MANAGER lighttpd ${PHP_SERVICE} ${PHP_SERVICE}-session ${PHP_SERVICE}-mysqli ${PHP_SERVICE}-mbstring ${PHP_SERVICE}-gettext curl unzip &>/dev/null
+    msg_ok "Dependencies installed"
+
+    msg_info "Fetching latest phpMyAdmin"
+    mkdir -p "$WEBROOT"
+    curl -fsSL https://www.phpmyadmin.net/downloads/phpMyAdmin-latest-all-languages.zip -o /tmp/pma.zip
+    unzip -q /tmp/pma.zip -d /usr/share/
+    mv /usr/share/phpMyAdmin-* "$WEBROOT"
+    rm -f /tmp/pma.zip
+    msg_ok "phpMyAdmin installed to $WEBROOT"
+
+    msg_info "Creating Lighttpd config"
+    cat <<EOF >/etc/lighttpd/lighttpd.conf
+server.modules = ("mod_access", "mod_alias", "mod_redirect")
+server.document-root = "$WEBROOT"
+server.port = $PORT
+index-file.names = ( "index.php", "index.html" )
+alias.url = ( "/phpmyadmin/" => "$WEBROOT/" )
+mimetype.assign = ( ".html" => "text/html", ".php" => "text/html" )
+server.modules += ( "mod_fastcgi" )
+fastcgi.server = ( ".php" => ((
+  "bin-path" => "/usr/bin/${PHP_SERVICE}-cgi",
+  "socket" => "/tmp/php-fastcgi.socket"
+)))
+EOF
+    msg_ok "Config created"
+
+    msg_info "Creating service"
+    if [[ "$OS" == "Debian" ]]; then
+        cat <<EOF >"$SERVICE_PATH"
+[Unit]
+Description=phpMyAdmin Lighttpd
+After=network.target
+
+[Service]
+ExecStart=/usr/sbin/lighttpd -D -f /etc/lighttpd/lighttpd.conf
+Restart=always
+
+[Install]
+WantedBy=multi-user.target
+EOF
+        systemctl enable --now phpmyadmin &>/dev/null
+    else
+        cat <<EOF >"$SERVICE_PATH"
+#!/sbin/openrc-run
+
+command="/usr/sbin/lighttpd"
+command_args="-D -f /etc/lighttpd/lighttpd.conf"
+command_background=true
+
+depend() {
+    need net
+}
+EOF
+        chmod +x "$SERVICE_PATH"
+        rc-update add phpmyadmin default &>/dev/null
+        rc-service phpmyadmin start &>/dev/null
+    fi
+    msg_ok "Service ready"
+    echo -e "${CM} ${GN}${APP} is reachable at: ${BL}http://$IP:$PORT${CL}"
+else
+    echo -e "${YW}⚠️ Installation skipped. Exiting.${CL}"
+    exit 0
+fi