remove empty lines

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

CHANGELOG.md

@@ -445,10 +445,38 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
 </details>
 
-## 2026-04-20
+## 2026-04-21
+
+### 🆕 New Scripts
+
+  - gogs ([#13896](https://github.com/community-scripts/ProxmoxVE/pull/13896))
+- anchor ([#13895](https://github.com/community-scripts/ProxmoxVE/pull/13895))
+- minthcm ([#13903](https://github.com/community-scripts/ProxmoxVE/pull/13903))
+- foldergram ([#13900](https://github.com/community-scripts/ProxmoxVE/pull/13900))
 
 ### 🚀 Updated Scripts
 
+  - OpenCloud: Pin version to 6.1.0 [@vhsdream](https://github.com/vhsdream) ([#13890](https://github.com/community-scripts/ProxmoxVE/pull/13890))
+
+  - #### 🐞 Bug Fixes
+
+    - Domain-Locker: Update dependencies [@tremor021](https://github.com/tremor021) ([#13901](https://github.com/community-scripts/ProxmoxVE/pull/13901))
+    - homelable: fix install failure by correcting password-reset chmod target [@Copilot](https://github.com/Copilot) ([#13894](https://github.com/community-scripts/ProxmoxVE/pull/13894))
+
+  - #### ✨ New Features
+
+    - FileFlows: Update dependencies [@tremor021](https://github.com/tremor021) ([#13917](https://github.com/community-scripts/ProxmoxVE/pull/13917))
+
+## 2026-04-20
+
+### 🆕 New Scripts
+
+  - WhoDB ([#13880](https://github.com/community-scripts/ProxmoxVE/pull/13880))
+
+### 🚀 Updated Scripts
+
+  - pangolin: create migration tables before data transfer to prevent role loss [@MickLesk](https://github.com/MickLesk) ([#13874](https://github.com/community-scripts/ProxmoxVE/pull/13874))
+
   - #### 🐞 Bug Fixes
 
     - Pangolin: pre-apply schema migrations to prevent data loss [@MickLesk](https://github.com/MickLesk) ([#13861](https://github.com/community-scripts/ProxmoxVE/pull/13861))
@@ -458,11 +486,19 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
   - #### ✨ New Features
 
     - Wanderer: add pocketbase CLI wrapper with env [@MickLesk](https://github.com/MickLesk) ([#13863](https://github.com/community-scripts/ProxmoxVE/pull/13863))
+    - feat(homelable): add password reset utility script [@davidsoncabista](https://github.com/davidsoncabista) ([#13798](https://github.com/community-scripts/ProxmoxVE/pull/13798))
 
   - #### 🔧 Refactor
 
+    - Several Scripts: Bump NodeJS to align Node.js versions with upstream for 5 scripts [@MickLesk](https://github.com/MickLesk) ([#13875](https://github.com/community-scripts/ProxmoxVE/pull/13875))
     - Refactor: PMG Post Install [@MickLesk](https://github.com/MickLesk) ([#13693](https://github.com/community-scripts/ProxmoxVE/pull/13693))
 
+### 💾 Core
+
+  - #### 🐞 Bug Fixes
+
+    - core: detect Perl breakage after LXC stack upgrade and improve storage validation [@MickLesk](https://github.com/MickLesk) ([#13879](https://github.com/community-scripts/ProxmoxVE/pull/13879))
+
 ## 2026-04-19
 
 ### 🆕 New Scripts

ct/anchor.sh

@@ -0,0 +1,83 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/ZhFahim/anchor
+
+APP="Anchor"
+var_tags="${var_tags:-notes;productivity;sync}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-2048}"
+var_disk="${var_disk:-10}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -f ~/.anchor ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  if check_for_gh_release "anchor" "ZhFahim/anchor"; then
+    msg_info "Stopping Services"
+    systemctl stop anchor-web anchor-server
+    msg_ok "Stopped Services"
+
+    msg_info "Backing up Configuration"
+    cp /opt/anchor/.env /opt/anchor.env.bak
+    msg_ok "Backed up Configuration"
+
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "anchor" "ZhFahim/anchor" "tarball"
+
+    msg_info "Building Server"
+    cd /opt/anchor/server
+    $STD pnpm install --frozen-lockfile
+    $STD pnpm prisma generate
+    $STD pnpm build
+    [[ -d src/generated ]] && mkdir -p dist/src && cp -R src/generated dist/src/
+    msg_ok "Built Server"
+
+    msg_info "Building Web Interface"
+    cd /opt/anchor/web
+    $STD pnpm install --frozen-lockfile
+    SERVER_URL=http://127.0.0.1:3001 $STD pnpm build
+    cp -r .next/static .next/standalone/.next/static
+    cp -r public .next/standalone/public
+    msg_ok "Built Web Interface"
+
+    cp /opt/anchor.env.bak /opt/anchor/.env
+    rm -f /opt/anchor.env.bak
+
+    msg_info "Running Database Migrations"
+    cd /opt/anchor/server
+    set -a && source /opt/anchor/.env && set +a
+    $STD pnpm prisma migrate deploy
+    msg_ok "Ran Database Migrations"
+
+    msg_info "Starting Services"
+    systemctl start anchor-server anchor-web
+    msg_ok "Started Services"
+    msg_ok "Updated ${APP}"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:3000${CL}"

ct/domain-locker.sh

@@ -20,41 +20,43 @@ color
 catch_errors
 
 function update_script() {
-    header_info
-    check_container_storage
-    check_container_resources
-    if [[ ! -d /opt/domain-locker ]]; then
-        msg_error "No ${APP} Installation Found!"
-        exit
-    fi
-
-    if check_for_gh_release "domain-locker" "Lissy93/domain-locker"; then
-        msg_info "Stopping Service"
-        systemctl stop domain-locker
-        msg_info "Service stopped"
-
-        PG_VERSION="17" setup_postgresql
-        NODE_VERSION="22" setup_nodejs
-        CLEAN_INSTALL=1 fetch_and_deploy_gh_release "domain-locker" "Lissy93/domain-locker" "tarball"
-
-        msg_info "Installing Modules (patience)"
-        cd /opt/domain-locker
-        $STD npm install
-        msg_ok "Installed Modules"
-
-        msg_info "Building Domain-Locker (a lot of patience)"
-        set -a
-        source /opt/domain-locker.env
-        set +a
-        $STD npm run build
-        msg_info "Built Domain-Locker"
-
-        msg_info "Restarting Services"
-        systemctl start domain-locker
-        msg_ok "Restarted Services"
-        msg_ok "Updated successfully!"
-    fi
+  header_info
+  check_container_storage
+  check_container_resources
+  if [[ ! -d /opt/domain-locker ]]; then
+    msg_error "No ${APP} Installation Found!"
     exit
+  fi
+
+  ensure_dependencies whois
+
+  if check_for_gh_release "domain-locker" "Lissy93/domain-locker"; then
+    msg_info "Stopping Service"
+    systemctl stop domain-locker
+    msg_info "Service stopped"
+
+    PG_VERSION="17" setup_postgresql
+    NODE_VERSION="22" setup_nodejs
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "domain-locker" "Lissy93/domain-locker" "tarball"
+
+    msg_info "Installing Modules (patience)"
+    cd /opt/domain-locker
+    $STD npm install
+    msg_ok "Installed Modules"
+
+    msg_info "Building Domain-Locker (a lot of patience)"
+    set -a
+    source /opt/domain-locker.env
+    set +a
+    $STD npm run build
+    msg_info "Built Domain-Locker"
+
+    msg_info "Restarting Services"
+    systemctl start domain-locker
+    msg_ok "Restarted Services"
+    msg_ok "Updated successfully!"
+  fi
+  exit
 }
 
 start

ct/erpnext.sh

@@ -0,0 +1,47 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/frappe/erpnext
+
+APP="ERPNext"
+var_tags="${var_tags:-erp;business;accounting}"
+var_cpu="${var_cpu:-4}"
+var_ram="${var_ram:-4096}"
+var_disk="${var_disk:-20}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+  if [[ ! -d /opt/frappe-bench ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+  msg_info "Updating ERPNext"
+  $STD sudo -u frappe bash -c 'export PATH="$HOME/.local/bin:$PATH"; cd /opt/frappe-bench && bench update --reset'
+  msg_ok "Updated ERPNext"
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}${CL}"
+echo -e "${INFO}${YW} Credentials:${CL}"
+echo -e "${TAB}${BGN}Username: Administrator${CL}"
+echo -e "${TAB}${BGN}Password: see ~/erpnext.creds${CL}"

ct/foldergram.sh

@@ -0,0 +1,61 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: Slaviša Arežina (tremor021)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/foldergram/foldergram
+
+APP="Foldergram"
+var_tags="${var_tags:-photos}"
+var_cpu="${var_cpu:-1}"
+var_ram="${var_ram:-2048}"
+var_disk="${var_disk:-4}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+  if [[ ! -d /opt/foldergram ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  if check_for_gh_release "foldergram" "foldergram/foldergram"; then
+    msg_info "Stopping Service"
+    systemctl stop foldergram
+    msg_ok "Stopped Service"
+
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "foldergram" "foldergram/foldergram" "tarball"
+
+    msg_info "Installing Foldergram"
+    cd /opt/foldergram
+    $STD pnpm install --frozen-lockfile
+    $STD pnpm run build
+    msg_ok "Installed Foldergram"
+
+    msg_info "Starting Service"
+    systemctl start foldergram
+    msg_ok "Started Service"
+    msg_ok "Updated successfully!"
+  fi
+  cleanup_lxc
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:4141${CL}"

ct/gogs.sh

@@ -0,0 +1,65 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://gogs.io/
+
+APP="Gogs"
+var_tags="${var_tags:-git;code;devops}"
+var_cpu="${var_cpu:-2}"
+var_ram="${var_ram:-1024}"
+var_disk="${var_disk:-8}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -f /opt/gogs/gogs ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  if check_for_gh_release "gogs" "gogs/gogs"; then
+    msg_info "Stopping Service"
+    systemctl stop gogs
+    msg_ok "Stopped Service"
+
+    msg_info "Backing up Data"
+    cp -r /opt/gogs/custom /opt/gogs_custom_backup
+    cp -r /opt/gogs/data /opt/gogs_data_backup
+    msg_ok "Backed up Data"
+
+    CLEAN_INSTALL=1 fetch_and_deploy_gh_release "gogs" "gogs/gogs" "prebuild" "latest" "/opt/gogs" "gogs_*_linux_amd64.tar.gz"
+
+    msg_info "Restoring Data"
+    cp -r /opt/gogs_custom_backup/. /opt/gogs/custom
+    cp -r /opt/gogs_data_backup/. /opt/gogs/data
+    rm -rf /opt/gogs_custom_backup /opt/gogs_data_backup
+    msg_ok "Restored Data"
+
+    msg_info "Starting Service"
+    systemctl start gogs
+    msg_ok "Started Service"
+    msg_ok "Updated successfully!"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:3000${CL}"

ct/headers/anchor

@@ -0,0 +1,6 @@
+    ___               __              
+   /   |  ____  _____/ /_  ____  _____
+  / /| | / __ \/ ___/ __ \/ __ \/ ___/
+ / ___ |/ / / / /__/ / / / /_/ / /    
+/_/  |_/_/ /_/\___/_/ /_/\____/_/     
+                                      

ct/headers/foldergram

@@ -0,0 +1,6 @@
+    ______      __    __                                   
+   / ____/___  / /___/ /__  _________ __________ _____ ___ 
+  / /_  / __ \/ / __  / _ \/ ___/ __ `/ ___/ __ `/ __ `__ \
+ / __/ / /_/ / / /_/ /  __/ /  / /_/ / /  / /_/ / / / / / /
+/_/    \____/_/\__,_/\___/_/   \__, /_/   \__,_/_/ /_/ /_/ 
+                              /____/                       

ct/headers/gogs

@@ -0,0 +1,6 @@
+   ______                
+  / ____/___  ____ ______
+ / / __/ __ \/ __ `/ ___/
+/ /_/ / /_/ / /_/ (__  ) 
+\____/\____/\__, /____/  
+           /____/        

ct/headers/minthcm

@@ -0,0 +1,6 @@
+    __  ____       __  __  __________  ___
+   /  |/  (_)___  / /_/ / / / ____/  |/  /
+  / /|_/ / / __ \/ __/ /_/ / /   / /|_/ / 
+ / /  / / / / / / /_/ __  / /___/ /  / /  
+/_/  /_/_/_/ /_/\__/_/ /_/\____/_/  /_/   
+                                          

ct/headers/whodb

@@ -0,0 +1,6 @@
+ _       ____          ____  ____ 
+| |     / / /_  ____  / __ \/ __ )
+| | /| / / __ \/ __ \/ / / / __  |
+| |/ |/ / / / / /_/ / /_/ / /_/ / 
+|__/|__/_/ /_/\____/_____/_____/  
+                                  

ct/minthcm.sh

@@ -0,0 +1,41 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MintHCM
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/minthcm/minthcm
+
+APP="MintHCM"
+var_tags="${var_tags:-hcm}"
+var_disk="${var_disk:-20}"
+var_cpu="${var_cpu:-4}"
+var_ram="${var_ram:-4096}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+  if [[ ! -d /var/www/MintHCM ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  msg_custom "🚀" "${GN}" "The app offers a built-in updater. Please use it."
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}${CL}"

ct/opencloud.sh

@@ -29,7 +29,7 @@ function update_script() {
     exit
   fi
 
-  RELEASE="v6.0.0"
+  RELEASE="v6.1.0"
   if check_for_gh_release "OpenCloud" "opencloud-eu/opencloud" "${RELEASE}" "each release is tested individually before the version is updated. Please do not open issues for this"; then
     msg_info "Stopping services"
     systemctl stop opencloud opencloud-wopi

ct/pangolin.sh

@@ -76,8 +76,23 @@ function update_script() {
     if [[ -f "$DB" ]]; then
       sqlite3 "$DB" "ALTER TABLE 'orgs' ADD COLUMN 'settingsLogRetentionDaysConnection' integer DEFAULT 0 NOT NULL;" 2>/dev/null || true
       sqlite3 "$DB" "ALTER TABLE 'clientSitesAssociationsCache' ADD COLUMN 'isJitMode' integer DEFAULT 0 NOT NULL;" 2>/dev/null || true
-      # Migrate roleId from userOrgs → userOrgRoles before the column is dropped
+
+      # Create new role-mapping tables and migrate data before drizzle-kit
+      # drops the roleId columns from userOrgs and userInvites.
+      sqlite3 "$DB" "CREATE TABLE IF NOT EXISTS 'userOrgRoles' (
+        'userId' text NOT NULL REFERENCES 'user'('id') ON DELETE CASCADE,
+        'orgId' text NOT NULL REFERENCES 'orgs'('orgId') ON DELETE CASCADE,
+        'roleId' integer NOT NULL REFERENCES 'roles'('roleId') ON DELETE CASCADE,
+        UNIQUE('userId', 'orgId', 'roleId')
+      );" 2>/dev/null || true
       sqlite3 "$DB" "INSERT OR IGNORE INTO 'userOrgRoles' (userId, orgId, roleId) SELECT userId, orgId, roleId FROM 'userOrgs' WHERE roleId IS NOT NULL;" 2>/dev/null || true
+
+      sqlite3 "$DB" "CREATE TABLE IF NOT EXISTS 'userInviteRoles' (
+        'inviteId' text NOT NULL REFERENCES 'userInvites'('inviteId') ON DELETE CASCADE,
+        'roleId' integer NOT NULL REFERENCES 'roles'('roleId') ON DELETE CASCADE,
+        PRIMARY KEY('inviteId', 'roleId')
+      );" 2>/dev/null || true
+      sqlite3 "$DB" "INSERT OR IGNORE INTO 'userInviteRoles' (inviteId, roleId) SELECT inviteId, roleId FROM 'userInvites' WHERE roleId IS NOT NULL;" 2>/dev/null || true
     fi
 
     ENVIRONMENT=prod $STD npx drizzle-kit push --force --config drizzle.sqlite.config.ts

ct/whodb.sh

@@ -0,0 +1,54 @@
+#!/usr/bin/env bash
+source <(curl -fsSL https://raw.githubusercontent.com/community-scripts/ProxmoxVE/main/misc/build.func)
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://whodb.com/
+
+APP="WhoDB"
+var_tags="${var_tags:-database;management;gui}"
+var_cpu="${var_cpu:-1}"
+var_ram="${var_ram:-512}"
+var_disk="${var_disk:-2}"
+var_os="${var_os:-debian}"
+var_version="${var_version:-13}"
+var_unprivileged="${var_unprivileged:-1}"
+
+header_info "$APP"
+variables
+color
+catch_errors
+
+function update_script() {
+  header_info
+  check_container_storage
+  check_container_resources
+
+  if [[ ! -f /opt/whodb/whodb ]]; then
+    msg_error "No ${APP} Installation Found!"
+    exit
+  fi
+
+  if check_for_gh_release "whodb" "clidey/whodb"; then
+    msg_info "Stopping Service"
+    systemctl stop whodb
+    msg_ok "Stopped Service"
+
+    fetch_and_deploy_gh_release "whodb" "clidey/whodb" "singlefile" "latest" "/opt/whodb" "whodb-*-linux-amd64"
+
+    msg_info "Starting Service"
+    systemctl start whodb
+    msg_ok "Started Service"
+    msg_ok "Updated successfully!"
+  fi
+  exit
+}
+
+start
+build_container
+description
+
+msg_ok "Completed Successfully!\n"
+echo -e "${CREATING}${GN}${APP} setup has been successfully initialized!${CL}"
+echo -e "${INFO}${YW} Access it using the following URL:${CL}"
+echo -e "${TAB}${GATEWAY}${BGN}http://${IP}:8080${CL}"

install/anchor-install.sh

@@ -0,0 +1,99 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/ZhFahim/anchor
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+NODE_VERSION="24" NODE_MODULE="pnpm" setup_nodejs
+PG_VERSION="17" setup_postgresql
+PG_DB_NAME="anchor" PG_DB_USER="anchor" setup_postgresql_db
+
+fetch_and_deploy_gh_release "anchor" "ZhFahim/anchor" "tarball"
+
+msg_info "Building Server"
+cd /opt/anchor/server
+$STD pnpm install --frozen-lockfile
+$STD pnpm prisma generate
+$STD pnpm build
+[[ -d src/generated ]] && mkdir -p dist/src && cp -R src/generated dist/src/
+msg_ok "Built Server"
+
+msg_info "Building Web Interface"
+cd /opt/anchor/web
+$STD pnpm install --frozen-lockfile
+SERVER_URL=http://127.0.0.1:3001 $STD pnpm build
+cp -r .next/static .next/standalone/.next/static
+cp -r public .next/standalone/public
+msg_ok "Built Web Interface"
+
+msg_info "Configuring Application"
+JWT_SECRET=$(openssl rand -base64 32)
+cat <<EOF >/opt/anchor/.env
+APP_URL=http://${LOCAL_IP}:3000
+JWT_SECRET=${JWT_SECRET}
+DATABASE_URL=postgresql://anchor:${PG_DB_PASS}@localhost:5432/anchor
+PG_HOST=localhost
+PG_USER=anchor
+PG_PASSWORD=${PG_DB_PASS}
+PG_DATABASE=anchor
+PG_PORT=5432
+EOF
+msg_ok "Configured Application"
+
+msg_info "Running Database Migrations"
+cd /opt/anchor/server
+set -a && source /opt/anchor/.env && set +a
+$STD pnpm prisma migrate deploy
+msg_ok "Ran Database Migrations"
+
+msg_info "Creating Services"
+cat <<EOF >/etc/systemd/system/anchor-server.service
+[Unit]
+Description=Anchor API Server
+After=network.target postgresql.service
+
+[Service]
+Type=simple
+User=root
+WorkingDirectory=/opt/anchor/server
+EnvironmentFile=/opt/anchor/.env
+ExecStart=/usr/bin/node dist/src/main.js
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+EOF
+cat <<EOF >/etc/systemd/system/anchor-web.service
+[Unit]
+Description=Anchor Web Interface
+After=network.target anchor-server.service
+
+[Service]
+Type=simple
+User=root
+WorkingDirectory=/opt/anchor/web/.next/standalone
+EnvironmentFile=/opt/anchor/.env
+Environment=PORT=3000 HOSTNAME=0.0.0.0 NODE_ENV=production
+ExecStart=/usr/bin/node server.js
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now anchor-server anchor-web
+msg_ok "Created Services"
+
+motd_ssh
+customize
+cleanup_lxc

install/domain-locker-install.sh

@@ -13,6 +13,10 @@ setting_up_container
 network_check
 update_os
 
+msg_info "Installing dependencies"
+$STD apt install -y whois
+msg_ok "Installed dependencies"
+
 PG_VERSION="17" setup_postgresql
 PG_DB_NAME="domainlocker_db" PG_DB_USER="domainlocker" setup_postgresql_db
 NODE_VERSION="22" setup_nodejs

install/erpnext-install.sh

@@ -0,0 +1,100 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/frappe/erpnext
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt install -y \
+  git \
+  build-essential \
+  python3-dev \
+  libffi-dev \
+  libssl-dev \
+  redis-server \
+  nginx \
+  supervisor \
+  fail2ban \
+  xvfb \
+  libfontconfig1 \
+  libxrender1 \
+  fontconfig \
+  libjpeg-dev \
+  libmariadb-dev \
+  python3-pip \
+  wkhtmltopdf
+msg_ok "Installed Dependencies"
+
+NODE_VERSION="24" NODE_MODULE="yarn" setup_nodejs
+UV_PYTHON="3.13" setup_uv
+setup_mariadb
+
+msg_info "Configuring MariaDB for ERPNext"
+cat <<EOF >/etc/mysql/mariadb.conf.d/50-erpnext.cnf
+[mysqld]
+character-set-server=utf8mb4
+collation-server=utf8mb4_unicode_ci
+
+[client]
+default-character-set=utf8mb4
+EOF
+$STD systemctl restart mariadb
+msg_ok "Configured MariaDB for ERPNext"
+
+msg_info "Installing Frappe Bench"
+useradd -m -s /bin/bash frappe
+chown frappe:frappe /opt
+echo "frappe ALL=(ALL) NOPASSWD:ALL" >/etc/sudoers.d/frappe
+$STD sudo -u frappe bash -c 'export PATH="$HOME/.local/bin:$PATH"; uv tool install frappe-bench'
+msg_ok "Installed Frappe Bench"
+
+msg_info "Initializing Frappe Bench"
+ADMIN_PASS=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | head -c13)
+DB_ROOT_PASS=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | head -c13)
+mysql -u root -e "ALTER USER 'root'@'localhost' IDENTIFIED BY '${DB_ROOT_PASS}'; FLUSH PRIVILEGES;"
+$STD sudo -u frappe bash -c 'export PATH="$HOME/.local/bin:$PATH"; cd /opt && bench init --frappe-branch version-15 frappe-bench'
+$STD sudo -u frappe bash -c 'export PATH="$HOME/.local/bin:$PATH"; cd /opt/frappe-bench && bench get-app erpnext --branch version-15'
+$STD sudo -u frappe bash -c "export PATH=\"\$HOME/.local/bin:\$PATH\"; cd /opt/frappe-bench && bench new-site site1.local --db-root-username root --db-root-password \"$DB_ROOT_PASS\" --admin-password \"$ADMIN_PASS\" --install-app erpnext --set-default"
+msg_ok "Initialized Frappe Bench"
+
+msg_info "Configuring ERPNext"
+cat <<EOF >/opt/frappe-bench/.env
+ADMIN_PASSWORD=${ADMIN_PASS}
+DB_ROOT_PASSWORD=${DB_ROOT_PASS}
+SITE_NAME=site1.local
+EOF
+{
+  echo "ERPNext Credentials"
+  echo "=================="
+  echo "Admin Username: Administrator"
+  echo "Admin Password: ${ADMIN_PASS}"
+  echo "DB Root Password: ${DB_ROOT_PASS}"
+  echo "Site Name: site1.local"
+} >~/erpnext.creds
+$STD systemctl enable --now redis-server
+msg_ok "Configured ERPNext"
+
+msg_info "Setting up Production"
+BENCH_PY="/home/frappe/.local/share/uv/tools/frappe-bench/bin/python"
+$STD sudo -u frappe bash -c "curl -fsSL https://bootstrap.pypa.io/get-pip.py | \"${BENCH_PY}\""
+$STD sudo -u frappe bash -c 'export PATH="$HOME/.local/bin:$PATH"; uv tool install ansible'
+ln -sf /home/frappe/.local/bin/ansible* /usr/local/bin/
+$STD bash -c 'export PATH="/home/frappe/.local/bin:$PATH"; cd /opt/frappe-bench && bench setup production frappe --yes'
+ln -sf /opt/frappe-bench/config/supervisor.conf /etc/supervisor/conf.d/frappe-bench.conf
+$STD supervisorctl reread
+$STD supervisorctl update
+$STD systemctl enable --now supervisor
+msg_ok "Set up Production"
+
+motd_ssh
+customize
+cleanup_lxc

install/fileflows-install.sh

@@ -5,7 +5,6 @@
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
 # Source: https://fileflows.com/
 
-# Import Functions und Setup
 source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
 color
 verb_ip6
@@ -17,6 +16,7 @@ update_os
 msg_info "Installing Dependencies"
 $STD apt install -y \
   ffmpeg \
+  pciutils \
   imagemagick
 msg_ok "Installed Dependencies"
 
@@ -35,6 +35,7 @@ fetch_and_deploy_from_url "https://fileflows.com/downloads/zip" "/opt/fileflows"
 
 $STD ln -svf /usr/bin/ffmpeg /usr/local/bin/ffmpeg
 $STD ln -svf /usr/bin/ffprobe /usr/local/bin/ffprobe
+$STD rm -rf /opt/fileflows/Server/runtimes/win-*
 
 read -r -p "${TAB3}Do you want to install FileFlows Server or Node? (S/N): " install_server
 

install/foldergram-install.sh

@@ -0,0 +1,65 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: Slaviša Arežina (tremor021)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/foldergram/foldergram
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt install -y --no-install-recommends ffmpeg
+msg_ok "Installed Dependencies"
+
+NODE_VERSION=25 NODE_MODULE="corepack" setup_nodejs
+
+fetch_and_deploy_gh_release "foldergram" "foldergram/foldergram" "tarball"
+
+msg_info "Configuring Foldergram"
+export COREPACK_ENABLE_DOWNLOAD_PROMPT=0
+$STD corepack enable
+cd /opt/foldergram
+$STD pnpm install
+$STD pnpm run build
+mkdir -p /opt/foldergram_media
+cat <<EOF >/opt/foldergram_media/foldergram.env
+NODE_ENV=production
+SERVER_PORT=4141
+DATA_ROOT=/opt/foldergram_media
+GALLERY_ROOT=/opt/foldergram_media/gallery
+DB_DIR=/opt/foldergram_media/db
+THUMBNAILS_DIR=/opt/foldergram_media/thumbnails
+PREVIEWS_DIR=/opt/foldergram_media/previews
+IMAGE_DETAIL_SOURCE=preview
+DERIVATIVE_MODE=eager
+GALLERY_EXCLUDED_FOLDERS=
+EOF
+msg_ok "Configured Foldergram"
+
+msg_info "Creating services"
+cat <<EOF >/etc/systemd/system/foldergram.service
+[Unit]
+Description=Foldergram Service
+After=network.target
+
+[Service]
+WorkingDirectory=/opt/foldergram
+ExecStart=/usr/bin/pnpm start
+Restart=always
+EnvironmentFile=/opt/foldergram_media/foldergram.env
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now foldergram
+msg_ok "Created services"
+
+motd_ssh
+customize
+cleanup_lxc

install/gogs-install.sh

@@ -0,0 +1,50 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://gogs.io/
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+msg_info "Installing Dependencies"
+$STD apt install -y git
+msg_ok "Installed Dependencies"
+
+fetch_and_deploy_gh_release "gogs" "gogs/gogs" "prebuild" "latest" "/opt/gogs" "gogs_*_linux_amd64.tar.gz"
+
+msg_info "Setting up Gogs"
+mkdir -p /opt/gogs/{custom/conf,data,log}
+msg_ok "Set up Gogs"
+
+msg_info "Creating Service"
+cat <<EOF >/etc/systemd/system/gogs.service
+[Unit]
+Description=Gogs Git Service
+After=network.target
+
+[Service]
+Type=simple
+User=root
+WorkingDirectory=/opt/gogs
+ExecStart=/opt/gogs/gogs web
+Restart=on-failure
+RestartSec=5
+Environment=USER=root
+Environment=HOME=/root
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now gogs
+msg_ok "Created Service"
+
+motd_ssh
+customize
+cleanup_lxc

install/homelable-install.sh

@@ -45,6 +45,30 @@ STATUS_CHECKER_INTERVAL=60
 EOF
 msg_ok "Configured Homelable"
 
+msg_info "Creating Password Reset Utility"
+cat <<'EOF' >/root/change_password.sh
+#!/usr/bin/env bash
+
+NEW_PASS=""
+
+while [[ -z "$NEW_PASS" ]]; do
+    read -s -p "Enter new password: " NEW_PASS
+    echo ""
+    if [[ -z "$NEW_PASS" ]]; then
+        echo "Error: Password cannot be blank. Try again."
+    fi
+done
+
+HASH=$(/opt/homelable/backend/.venv/bin/python -c "from passlib.context import CryptContext; print(CryptContext(schemes=['bcrypt']).hash('${NEW_PASS}'))")
+
+sed -i "s|^AUTH_PASSWORD_HASH=.*|AUTH_PASSWORD_HASH='${HASH}'|" /opt/homelable/backend/.env
+
+systemctl restart homelable
+echo "Password updated and service restarted successfully!"
+EOF
+chmod +x /root/change_password.sh
+msg_ok "Created Password Reset Utility"
+
 msg_info "Building Frontend"
 cd /opt/homelable/frontend
 $STD npm ci

install/minthcm-install.sh

@@ -0,0 +1,83 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MintHCM
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://github.com/minthcm/minthcm
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+PHP_VERSION="8.2"
+PHP_APACHE="YES" PHP_MODULE="mysql,redis" PHP_FPM="YES" setup_php
+setup_composer
+setup_mariadb
+$STD mariadb -u root -e "SET GLOBAL sql_mode='STRICT_TRANS_TABLES,NO_ZERO_IN_DATE,NO_ZERO_DATE,ERROR_FOR_DIVISION_BY_ZERO,NO_ENGINE_SUBSTITUTION'"
+
+fetch_and_deploy_gh_release "MintHCM" "minthcm/minthcm" "tarball" "latest" "/var/www/MintHCM"
+
+msg_info "Configuring MintHCM"
+mkdir -p /etc/php/${PHP_VERSION}/mods-available
+cp /var/www/MintHCM/docker/config/000-default.conf /etc/apache2/sites-available/000-default.conf
+cp /var/www/MintHCM/docker/config/php-minthcm.ini /etc/php/${PHP_VERSION}/mods-available/php-minthcm.ini
+mkdir -p "/etc/php/${PHP_VERSION}/cli/conf.d" "/etc/php/${PHP_VERSION}/apache2/conf.d"
+ln -s "/etc/php/${PHP_VERSION}/mods-available/php-minthcm.ini" "/etc/php/${PHP_VERSION}/cli/conf.d/20-minthcm.ini"
+ln -s "/etc/php/${PHP_VERSION}/mods-available/php-minthcm.ini" "/etc/php/${PHP_VERSION}/apache2/conf.d/20-minthcm.ini"
+chown -R www-data:www-data /var/www/MintHCM
+find /var/www/MintHCM -type d -exec chmod 755 {} \;
+find /var/www/MintHCM -type f -exec chmod 644 {} \;
+mkdir -p /var/www/script
+cp /var/www/MintHCM/docker/script/generate_config.php /var/www/script/generate_config.php
+cp /var/www/MintHCM/docker/.env /var/www/script/.env
+chown -R www-data:www-data /var/www/script
+$STD a2enmod rewrite
+$STD a2enmod headers
+$STD systemctl restart apache2
+msg_ok "Configured MintHCM"
+
+msg_info "Setting up Elasticsearch"
+setup_deb822_repo \
+  "elasticsearch" \
+  "https://artifacts.elastic.co/GPG-KEY-elasticsearch" \
+  "https://artifacts.elastic.co/packages/7.x/apt" \
+  "stable"
+$STD apt install -y elasticsearch
+echo "-Xms2g" >>/etc/elasticsearch/jvm.options
+echo "-Xmx2g" >>/etc/elasticsearch/jvm.options
+$STD /usr/share/elasticsearch/bin/elasticsearch-plugin install ingest-attachment -b
+systemctl enable -q --now elasticsearch
+msg_ok "Set up Elasticsearch"
+
+msg_info "Configuring Database"
+DB_PASS=$(openssl rand -base64 18 | tr -dc 'a-zA-Z0-9' | head -c13)
+$STD mariadb -u root -e "CREATE USER 'minthcm'@'localhost' IDENTIFIED BY '${DB_PASS}';"
+$STD mariadb -u root -e "GRANT ALL ON *.* TO 'minthcm'@'localhost'; FLUSH PRIVILEGES;"
+sed -i "s/^DB_HOST=.*/DB_HOST=localhost/" /var/www/script/.env
+sed -i "s/^DB_USER=.*/DB_USER=minthcm/" /var/www/script/.env
+sed -i "s/^DB_PASS=.*/DB_PASS=$DB_PASS/" /var/www/script/.env
+sed -i "s/^ELASTICSEARCH_HOST=.*/ELASTICSEARCH_HOST=localhost/" /var/www/script/.env
+msg_ok "Configured Database"
+
+msg_info "Generating configuration file"
+set -a
+source /var/www/script/.env
+set +a
+$STD php /var/www/script/generate_config.php
+msg_ok "Generated configuration file"
+
+msg_info "Installing MintHCM"
+cd /var/www/MintHCM
+$STD sudo -u www-data php MintCLI install </var/www/MintHCM/configMint4
+printf "*    *    *    *    *     cd /var/www/MintHCM/legacy; php -f cron.php > /dev/null 2>&1\n" >/var/spool/cron/crontabs/www-data
+service cron start
+rm -f /var/www/MintHCM/configMint4
+msg_ok "Installed MintHCM"
+
+motd_ssh
+customize
+cleanup_lxc

install/opencloud-install.sh

@@ -64,7 +64,7 @@ $STD sudo -u cool coolconfig set-admin-password --user=admin --password="$COOLPA
 echo "$COOLPASS" >~/.coolpass
 msg_ok "Installed Collabora Online"
 
-fetch_and_deploy_gh_release "OpenCloud" "opencloud-eu/opencloud" "singlefile" "v6.0.0" "/usr/bin" "opencloud-*-linux-amd64"
+fetch_and_deploy_gh_release "OpenCloud" "opencloud-eu/opencloud" "singlefile" "v6.1.0" "/usr/bin" "opencloud-*-linux-amd64"
 mv /usr/bin/OpenCloud /usr/bin/opencloud
 
 msg_info "Configuring OpenCloud"

install/whodb-install.sh

@@ -0,0 +1,40 @@
+#!/usr/bin/env bash
+
+# Copyright (c) 2021-2026 community-scripts ORG
+# Author: MickLesk (CanbiZ)
+# License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
+# Source: https://whodb.com/
+
+source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
+color
+verb_ip6
+catch_errors
+setting_up_container
+network_check
+update_os
+
+fetch_and_deploy_gh_release "whodb" "clidey/whodb" "singlefile" "latest" "/opt/whodb" "whodb-*-linux-amd64"
+
+msg_info "Creating Service"
+cat <<EOF >/etc/systemd/system/whodb.service
+[Unit]
+Description=WhoDB Database Management
+After=network.target
+
+[Service]
+Type=simple
+User=root
+WorkingDirectory=/opt/whodb
+ExecStart=/opt/whodb/whodb
+Restart=on-failure
+RestartSec=5
+
+[Install]
+WantedBy=multi-user.target
+EOF
+systemctl enable -q --now whodb
+msg_ok "Created Service"
+
+motd_ssh
+customize
+cleanup_lxc

misc/build.func

@@ -3658,7 +3658,7 @@ build_container() {
     local _mount_clean="${ALLOW_MOUNT_FS// /}"
     _mount_clean="${_mount_clean%%,}"
     _mount_clean="${_mount_clean##,}"
-    _mount_clean="${_mount_clean%%;}"  
+    _mount_clean="${_mount_clean%%;}"
     _mount_clean="${_mount_clean//,/;}"
     if [ -n "$_mount_clean" ]; then
       [ -n "$FEATURES" ] && FEATURES="$FEATURES,"
@@ -5250,9 +5250,133 @@ create_lxc_container() {
   # Extract Debian OS minor from template name: debian-13-standard_13.1-1_amd64.tar.zst => "13.1"
   parse_template_osver() { sed -n 's/.*_\([0-9][0-9]*\(\.[0-9]\+\)\?\)-.*/\1/p' <<<"$1"; }
 
+  # Switch to the previous OS major version template and retry pct create
+  # Determines the fallback version automatically based on available templates.
+  # Returns: 0 = success, 1 = failed
+  fallback_to_previous_os_version() {
+    local old_template="$TEMPLATE"
+    local os_type="${PCT_OSTYPE:-}"
+    local current_ver="${PCT_OSVERSION:-}"
+
+    # Determine template search pattern based on OS type
+    local tpl_pattern=""
+    case "$os_type" in
+    debian | ubuntu) tpl_pattern="-standard_" ;;
+    alpine | fedora | rocky | centos) tpl_pattern="-default_" ;;
+    *) tpl_pattern="" ;;
+    esac
+
+    msg_info "Searching for an older $os_type template (current: $os_type $current_ver)"
+
+    # Collect all available versions for this OS type (local + online)
+    local -a all_versions=()
+
+    # Local templates
+    mapfile -t _local_vers < <(
+      pveam list "$TEMPLATE_STORAGE" 2>/dev/null |
+        awk -v os="$os_type" -v pat="$tpl_pattern" '$1 ~ ("^"os"|/"os) && $1 ~ pat {print $1}' |
+        sed 's|.*/||' |
+        sed -E "s/^${os_type}-([0-9]+(\.[0-9]+)?).*/\1/" |
+        sort -u -V
+    )
+    all_versions+=("${_local_vers[@]}")
+
+    # Online templates (only if needed)
+    if command -v timeout &>/dev/null; then
+      timeout 30 pveam update >/dev/null 2>&1 || true
+    else
+      pveam update >/dev/null 2>&1 || true
+    fi
+    mapfile -t _online_vers < <(
+      pveam available -section system 2>/dev/null |
+        awk '{print $2}' |
+        grep -E "^${os_type}-[0-9]" |
+        { [[ -n "$tpl_pattern" ]] && grep "$tpl_pattern" || cat; } |
+        sed -E "s/^${os_type}-([0-9]+(\.[0-9]+)?).*/\1/" |
+        sort -u -V 2>/dev/null || true
+    )
+    all_versions+=("${_online_vers[@]}")
+
+    # Deduplicate and sort, find the highest version below current
+    local fallback_ver=""
+    fallback_ver=$(printf '%s\n' "${all_versions[@]}" | sort -u -V | awk -v cur="$current_ver" '{
+      # Compare major versions: extract major part
+      split($0, a, ".")
+      split(cur, b, ".")
+      if (a[1]+0 < b[1]+0) ver=$0
+    } END { if (ver) print ver }')
+
+    if [[ -z "$fallback_ver" ]]; then
+      msg_error "No older $os_type template version found."
+      return 1
+    fi
+
+    msg_ok "Fallback version: $os_type $fallback_ver"
+
+    # Find the actual template file for this version
+    local fallback_search="${os_type}-${fallback_ver}"
+    local fallback_template=""
+
+    # Check local first
+    mapfile -t _fb_local < <(
+      pveam list "$TEMPLATE_STORAGE" 2>/dev/null |
+        awk -v search="$fallback_search" -v pat="$tpl_pattern" '$1 ~ search && $1 ~ pat {print $1}' |
+        sed 's|.*/||' | sort -t - -k 2 -V
+    )
+    if [[ ${#_fb_local[@]} -gt 0 ]]; then
+      fallback_template="${_fb_local[-1]}"
+    else
+      # Check online
+      mapfile -t _fb_online < <(
+        pveam available -section system 2>/dev/null |
+          awk '{print $2}' |
+          grep -E "^${fallback_search}.*${tpl_pattern}" |
+          sort -t - -k 2 -V 2>/dev/null || true
+      )
+      [[ ${#_fb_online[@]} -gt 0 ]] && fallback_template="${_fb_online[-1]}"
+    fi
+
+    if [[ -z "$fallback_template" ]]; then
+      msg_error "No template found for $os_type $fallback_ver."
+      return 1
+    fi
+
+    msg_ok "Found template: $fallback_template"
+
+    # Download if needed
+    local fallback_path
+    fallback_path="$(pvesm path "$TEMPLATE_STORAGE:vztmpl/$fallback_template" 2>/dev/null || true)"
+    [[ -z "$fallback_path" ]] && fallback_path="/var/lib/vz/template/cache/$fallback_template"
+
+    if [[ ! -f "$fallback_path" ]]; then
+      msg_info "Downloading $os_type $fallback_ver template"
+      if ! pveam download "$TEMPLATE_STORAGE" "$fallback_template" >>"${BUILD_LOG:-/dev/null}" 2>&1; then
+        msg_error "Failed to download $os_type $fallback_ver template."
+        return 1
+      fi
+      msg_ok "Template downloaded"
+    fi
+
+    # Update variables
+    TEMPLATE="$fallback_template"
+    TEMPLATE_PATH="$fallback_path"
+    PCT_OSVERSION="$fallback_ver"
+    export PCT_OSVERSION
+
+    # Retry pct create
+    msg_info "Retrying container creation with $os_type $fallback_ver"
+    if pct create "$CTID" "${TEMPLATE_STORAGE}:vztmpl/${TEMPLATE}" $PCT_OPTIONS >>"$LOGFILE" 2>&1; then
+      msg_ok "Container created successfully with $os_type $fallback_ver (fallback from $old_template)."
+      return 0
+    else
+      msg_error "Container creation with $os_type $fallback_ver also failed. See $LOGFILE"
+      return 1
+    fi
+  }
+
   # Offer upgrade for pve-container/lxc-pve if candidate > installed; optional auto-retry pct create
   # Returns:
-  #   0 = no upgrade needed
+  #   0 = no upgrade needed / container created after upgrade or fallback
   #   1 = upgraded (and if do_retry=yes and retry succeeded, creation done)
   #   2 = user declined
   #   3 = upgrade attempted but failed OR retry failed
@@ -5280,13 +5404,58 @@ create_lxc_container() {
     echo "  pve-container: installed=${_pvec_i:-n/a}  candidate=${_pvec_c:-n/a}"
     echo "  lxc-pve     : installed=${_lxcp_i:-n/a}  candidate=${_lxcp_c:-n/a}"
     echo
-    read -rp "Do you want to upgrade now? [y/N] " _ans </dev/tty
+
+    # Offer older OS version fallback when template version might be too new for LXC stack
+    local _has_fallback_option=false
+    if [[ -n "${PCT_OSTYPE:-}" && -n "${PCT_OSVERSION:-}" ]]; then
+      _has_fallback_option=true
+      echo "  [1] Upgrade LXC stack now (recommended)"
+      echo "  [2] Use an older ${PCT_OSTYPE} template instead (may not work with all scripts)"
+      echo "  [3] Cancel"
+      echo
+      read -rp "Select option [1/2/3]: " _ans </dev/tty
+    else
+      read -rp "Do you want to upgrade now? [y/N] " _ans </dev/tty
+    fi
+
+    if [[ "$_has_fallback_option" == true ]]; then
+      case "$_ans" in
+      1)
+        _ans="y"
+        ;;
+      2)
+        if [[ "$do_retry" == "yes" ]]; then
+          if fallback_to_previous_os_version; then
+            return 0
+          else
+            return 3
+          fi
+        else
+          msg_custom "ℹ️" "${YW}" "OS version fallback is only available during container creation."
+          return 2
+        fi
+        ;;
+      *)
+        return 2
+        ;;
+      esac
+    fi
+
     case "${_ans,,}" in
     y | yes)
       msg_info "Upgrading Proxmox LXC stack (pve-container, lxc-pve)"
       apt_update_safe
       if $STD apt-get install -y --only-upgrade pve-container lxc-pve; then
         msg_ok "LXC stack upgraded."
+        # Verify pct binary still works after upgrade (partial upgrades can break Perl modules)
+        if ! pct list &>/dev/null; then
+          msg_error "LXC stack upgrade caused PVE tool breakage (likely Perl module incompatibility)."
+          msg_custom "⚠️" "${YW}" "A partial package upgrade has left the PVE stack in an inconsistent state."
+          msg_custom "🔧" "${YW}" "Please run the following on the Proxmox host, then retry:"
+          echo -e "${TAB}  apt update && apt dist-upgrade -y"
+          echo -e "${TAB}  reboot"
+          return 3
+        fi
         if [[ "$do_retry" == "yes" ]]; then
           msg_info "Retrying container creation after upgrade"
           if pct create "$CTID" "${TEMPLATE_STORAGE}:vztmpl/${TEMPLATE}" $PCT_OPTIONS >>"$LOGFILE" 2>&1; then
@@ -5385,10 +5554,35 @@ create_lxc_container() {
   fi
 
   msg_info "Validating storage '$CONTAINER_STORAGE'"
-  STORAGE_TYPE=$(grep -E "^[^:]+: $CONTAINER_STORAGE$" /etc/pve/storage.cfg | cut -d: -f1 | head -1 || true)
+  # Check if storage.cfg is accessible (pmxcfs must be mounted)
+  if [[ ! -f /etc/pve/storage.cfg ]]; then
+    if ! mountpoint -q /etc/pve 2>/dev/null; then
+      msg_error "Proxmox cluster filesystem (pmxcfs) is not mounted at /etc/pve."
+      msg_custom "🔧" "${YW}" "Try: systemctl restart pve-cluster"
+    else
+      msg_error "/etc/pve/storage.cfg does not exist."
+      msg_custom "🔧" "${YW}" "Check Proxmox cluster filesystem integrity: pvecm status"
+    fi
+    exit 213
+  fi
+
+  STORAGE_TYPE=$(grep -E "^[^:]+:[[:space:]]*$CONTAINER_STORAGE[[:space:]]*$" /etc/pve/storage.cfg | cut -d: -f1 | head -1 || true)
+
+  # Fallback: use pvesm status to determine storage type
+  if [[ -z "$STORAGE_TYPE" ]]; then
+    STORAGE_TYPE=$(pvesm status -storage "$CONTAINER_STORAGE" 2>/dev/null | awk 'NR>1{print $2}')
+  fi
 
   if [[ -z "$STORAGE_TYPE" ]]; then
     msg_error "Storage '$CONTAINER_STORAGE' not found in /etc/pve/storage.cfg"
+    msg_custom "📋" "${YW}" "Available storages: $(pvesm status 2>/dev/null | awk 'NR>1{printf "%s (%s) ", $1, $2}' || echo 'n/a')"
+    if [[ -r /etc/pve/storage.cfg ]]; then
+      msg_custom "📋" "${YW}" "Storage definitions found in config:"
+      grep -E '^[a-z]+:' /etc/pve/storage.cfg 2>/dev/null | while IFS= read -r _line; do
+        echo "${TAB}  $_line"
+      done
+    fi
+    msg_custom "📖" "${YW}" "See https://pve.proxmox.com/wiki/Storage for storage configuration details."
     exit 213
   fi
 
@@ -5811,6 +6005,17 @@ create_lxc_container() {
   if ! pct create "$CTID" "${TEMPLATE_STORAGE}:vztmpl/${TEMPLATE}" $PCT_OPTIONS >"$LOGFILE" 2>&1; then
     msg_debug "Container creation failed on ${TEMPLATE_STORAGE}. Checking error..."
 
+    # Check for Perl module breakage (partial PVE upgrade)
+    if grep -qiE 'Compilation failed|Bareword.*not allowed' "$LOGFILE"; then
+      msg_error "Container creation failed due to broken Perl modules on the PVE host."
+      msg_custom "⚠️" "${YW}" "This usually happens after a partial PVE package upgrade."
+      msg_custom "🔧" "${YW}" "Please run the following on the Proxmox host, then retry:"
+      echo -e "${TAB}  apt update && apt dist-upgrade -y"
+      echo -e "${TAB}  reboot"
+      _flush_pct_log
+      exit 232
+    fi
+
     # Check if CTID collision (race condition: ID claimed between validation and creation)
     if grep -qiE 'already exists|already in use' "$LOGFILE"; then
       local old_ctid="$CTID"
@@ -5856,15 +6061,16 @@ create_lxc_container() {
               rc=$?
               case $rc in
               0) : ;; # success - container created, continue
-              2)
-                msg_error "Upgrade declined. Please update and re-run: apt update && apt install --only-upgrade pve-container lxc-pve"
-                _flush_pct_log
-                exit 231
-                ;;
-              3)
-                msg_error "Upgrade and/or retry failed. Please inspect: $LOGFILE"
-                _flush_pct_log
-                exit 231
+              2 | 3)
+                # Upgrade declined or failed — try older OS version as last resort
+                msg_warn "Attempting older ${PCT_OSTYPE:-} version as last resort"
+                if fallback_to_previous_os_version; then
+                  : # success
+                else
+                  msg_error "All recovery options exhausted. Please inspect: $LOGFILE"
+                  _flush_pct_log
+                  exit 231
+                fi
                 ;;
               esac
             else
@@ -5888,15 +6094,16 @@ create_lxc_container() {
             rc=$?
             case $rc in
             0) : ;; # success - container created, continue
-            2)
-              msg_error "Upgrade declined. Please update and re-run: apt update && apt install --only-upgrade pve-container lxc-pve"
-              _flush_pct_log
-              exit 231
-              ;;
-            3)
-              msg_error "Upgrade and/or retry failed. Please inspect: $LOGFILE"
-              _flush_pct_log
-              exit 231
+            2 | 3)
+              # Upgrade declined or failed — try older OS version as last resort
+              msg_warn "Attempting older ${PCT_OSTYPE:-} version as last resort"
+              if fallback_to_previous_os_version; then
+                : # success
+              else
+                msg_error "All recovery options exhausted. Please inspect: $LOGFILE"
+                _flush_pct_log
+                exit 231
+              fi
               ;;
             esac
           else
@@ -5915,7 +6122,7 @@ create_lxc_container() {
       fi
     fi # close CTID collision else-branch
   fi
-  set +f  # re-enable globbing after pct create block
+  set +f # re-enable globbing after pct create block
 
   # Verify container exists (allow up to 10s for pmxcfs sync in clusters)
   local _pct_visible=false