Add external installer warnings and user confirmation

Added explicit warnings and user confirmation prompts to install scripts that run external installers from third-party sources. Updated JSON metadata to remove warning notes about external sources, as the scripts now handle user notification and consent directly. This improves transparency and user safety during installation.

CHANGELOG.md

@@ -12,6 +12,22 @@ Exercise vigilance regarding copycat or coat-tailing sites that seek to exploit
 
 ## 2025-09-10
 
+### 🚀 Updated Scripts
+
+  - #### ✨ New Features
+
+    - Booklore: Add Bookdrop location to .env [@michelroegl-brunner](https://github.com/michelroegl-brunner) ([#7533](https://github.com/community-scripts/ProxmoxVE/pull/7533))
+
+  - #### 🔧 Refactor
+
+    - Improve npmplus credential retrieval and messaging [@MickLesk](https://github.com/MickLesk) ([#7532](https://github.com/community-scripts/ProxmoxVE/pull/7532))
+
+### 🌐 Website
+
+  - #### 📝 Script Information
+
+    - set updateable to true for several lxc JSON-configs [@MickLesk](https://github.com/MickLesk) ([#7534](https://github.com/community-scripts/ProxmoxVE/pull/7534))
+
 ## 2025-09-09
 
 ### 🚀 Updated Scripts

frontend/public/json/add-netbird-lxc.json

@@ -6,7 +6,7 @@
   ],
   "date_created": "2024-05-19",
   "type": "addon",
-  "updateable": false,
+  "updateable": true,
   "privileged": false,
   "interface_port": null,
   "documentation": "https://docs.netbird.io/",

frontend/public/json/add-tailscale-lxc.json

@@ -6,7 +6,7 @@
   ],
   "date_created": "2024-05-02",
   "type": "addon",
-  "updateable": false,
+  "updateable": true,
   "privileged": false,
   "interface_port": null,
   "documentation": "https://tailscale.com/kb/1017/install",

frontend/public/json/apt-cacher-ng.json

@@ -6,7 +6,7 @@
   ],
   "date_created": "2024-05-02",
   "type": "ct",
-  "updateable": false,
+  "updateable": true,
   "privileged": false,
   "interface_port": 3142,
   "documentation": "https://www.unix-ag.uni-kl.de/~bloch/acng/html/index.html",

frontend/public/json/beszel.json

@@ -6,7 +6,7 @@
   ],
   "date_created": "2025-01-20",
   "type": "ct",
-  "updateable": false,
+  "updateable": true,
   "privileged": false,
   "interface_port": 8090,
   "documentation": "https://beszel.dev/guide/what-is-beszel",

frontend/public/json/cloudflare-ddns.json

@@ -6,7 +6,7 @@
   ],
   "date_created": "2025-05-22",
   "type": "ct",
-  "updateable": false,
+  "updateable": true,
   "privileged": false,
   "interface_port": null,
   "documentation": "https://github.com/favonia/cloudflare-ddns/blob/main/README.markdown",

frontend/public/json/cloudflared.json

@@ -6,7 +6,7 @@
   ],
   "date_created": "2024-05-02",
   "type": "ct",
-  "updateable": false,
+  "updateable": true,
   "privileged": false,
   "interface_port": null,
   "documentation": "https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/",

frontend/public/json/dashy.json

@@ -6,7 +6,7 @@
   ],
   "date_created": "2024-05-02",
   "type": "ct",
-  "updateable": false,
+  "updateable": true,
   "privileged": false,
   "interface_port": 4000,
   "documentation": "https://dashy.to/docs",

frontend/public/json/deconz.json

@@ -6,7 +6,7 @@
   ],
   "date_created": "2024-05-02",
   "type": "ct",
-  "updateable": false,
+  "updateable": true,
   "privileged": true,
   "interface_port": 80,
   "documentation": "https://github.com/dresden-elektronik/deconz-rest-plugin/wiki",

frontend/public/json/deluge.json

@@ -6,7 +6,7 @@
   ],
   "date_created": "2024-05-02",
   "type": "ct",
-  "updateable": false,
+  "updateable": true,
   "privileged": false,
   "interface_port": 8112,
   "documentation": "https://www.deluge-torrent.org/userguide/",

frontend/public/json/fhem.json

@@ -6,7 +6,7 @@
   ],
   "date_created": "2024-05-02",
   "type": "ct",
-  "updateable": false,
+  "updateable": true,
   "privileged": false,
   "interface_port": 8083,
   "documentation": "https://fhem.de/#Documentation",

frontend/public/json/filebrowser-quantum.json

@@ -7,7 +7,7 @@
   ],
   "date_created": "2025-06-18",
   "type": "addon",
-  "updateable": false,
+  "updateable": true,
   "privileged": false,
   "interface_port": 8080,
   "documentation": "https://github.com/gtsteffaniak/filebrowser/wiki/Getting-Started",

frontend/public/json/filebrowser.json

@@ -7,7 +7,7 @@
   ],
   "date_created": "2024-05-02",
   "type": "addon",
-  "updateable": false,
+  "updateable": true,
   "privileged": false,
   "interface_port": 8080,
   "documentation": null,

frontend/public/json/homebridge.json

@@ -6,7 +6,7 @@
   ],
   "date_created": "2024-05-02",
   "type": "ct",
-  "updateable": false,
+  "updateable": true,
   "privileged": false,
   "interface_port": 8581,
   "documentation": "https://github.com/homebridge/homebridge/wiki",

frontend/public/json/hyperhdr.json

@@ -6,7 +6,7 @@
   ],
   "date_created": "2024-05-02",
   "type": "ct",
-  "updateable": false,
+  "updateable": true,
   "privileged": true,
   "interface_port": 8090,
   "documentation": "https://github.com/awawa-dev/HyperHDR/wiki",

frontend/public/json/influxdb.json

@@ -6,7 +6,7 @@
   ],
   "date_created": "2024-05-02",
   "type": "ct",
-  "updateable": false,
+  "updateable": true,
   "privileged": false,
   "interface_port": 8086,
   "documentation": "https://docs.influxdata.com/",

frontend/public/json/jeedom.json

@@ -6,7 +6,7 @@
   ],
   "date_created": "2025-07-29",
   "type": "ct",
-  "updateable": false,
+  "updateable": true,
   "privileged": false,
   "interface_port": 80,
   "documentation": "https://doc.jeedom.com",

frontend/public/json/jenkins.json

@@ -6,7 +6,7 @@
   ],
   "date_created": "2024-12-26",
   "type": "ct",
-  "updateable": false,
+  "updateable": true,
   "privileged": false,
   "interface_port": 8080,
   "documentation": "https://www.jenkins.io/doc/",

frontend/public/json/lazylibrarian.json

@@ -6,7 +6,7 @@
   ],
   "date_created": "2024-05-02",
   "type": "ct",
-  "updateable": false,
+  "updateable": true,
   "privileged": false,
   "interface_port": 5299,
   "documentation": "https://lazylibrarian.gitlab.io/lazylibrarian.gitlab.io/",

frontend/public/json/lldap.json

@@ -6,7 +6,7 @@
   ],
   "date_created": "2024-08-06",
   "type": "ct",
-  "updateable": false,
+  "updateable": true,
   "privileged": false,
   "interface_port": 17170,
   "documentation": "https://github.com/lldap/lldap/blob/main/README.md",

frontend/public/json/mariadb.json

@@ -6,7 +6,7 @@
   ],
   "date_created": "2024-05-02",
   "type": "ct",
-  "updateable": false,
+  "updateable": true,
   "privileged": false,
   "interface_port": 3306,
   "documentation": "https://github.com/community-scripts/ProxmoxVE/discussions/192",

frontend/public/json/mattermost.json

@@ -6,7 +6,7 @@
   ],
   "date_created": "2025-01-30",
   "type": "ct",
-  "updateable": false,
+  "updateable": true,
   "privileged": false,
   "interface_port": 8065,
   "documentation": "https://docs.mattermost.com/",

frontend/public/json/mongodb.json

@@ -6,7 +6,7 @@
   ],
   "date_created": "2024-05-18",
   "type": "ct",
-  "updateable": false,
+  "updateable": true,
   "privileged": false,
   "interface_port": 27017,
   "documentation": "https://www.mongodb.com/docs/manual/",

frontend/public/json/mqtt.json

@@ -6,7 +6,7 @@
   ],
   "date_created": "2024-05-02",
   "type": "ct",
-  "updateable": false,
+  "updateable": true,
   "privileged": false,
   "interface_port": null,
   "documentation": "https://mosquitto.org/documentation/",

frontend/public/json/npmplus.json

@@ -6,7 +6,7 @@
   ],
   "date_created": "2025-03-13",
   "type": "ct",
-  "updateable": false,
+  "updateable": true,
   "privileged": false,
   "interface_port": 81,
   "documentation": "https://github.com/ZoeyVid/NPMplus/blob/develop/README.md",
@@ -39,7 +39,7 @@
     }
   ],
   "default_credentials": {
-    "username": "root",
+    "username": "admin@example.org",
     "password": null
   },
   "notes": [
@@ -52,7 +52,7 @@
       "type": "info"
     },
     {
-      "text": "Application credentials: `cat /opt/.npm_pwd`",
+      "text": "Application credentials: `cat /opt/.npm_pwd` - if file not exist in LXC check docker logs for password with `docker logs npmplus`",
       "type": "info"
     }
   ]

frontend/public/json/ntfy.json

@@ -6,7 +6,7 @@
   ],
   "date_created": "2024-05-02",
   "type": "ct",
-  "updateable": false,
+  "updateable": true,
   "privileged": false,
   "interface_port": 80,
   "documentation": "https://docs.ntfy.sh/",

frontend/public/json/omv.json

@@ -6,7 +6,7 @@
   ],
   "date_created": "2024-05-02",
   "type": "ct",
-  "updateable": false,
+  "updateable": true,
   "privileged": false,
   "interface_port": 80,
   "documentation": "https://docs.openmediavault.org/en/stable/",

frontend/public/json/openhab.json

@@ -6,7 +6,7 @@
   ],
   "date_created": "2024-05-02",
   "type": "ct",
-  "updateable": false,
+  "updateable": true,
   "privileged": false,
   "interface_port": 8443,
   "documentation": "https://www.openhab.org/docs/",

frontend/public/json/pialert.json

@@ -6,7 +6,7 @@
   ],
   "date_created": "2024-05-02",
   "type": "ct",
-  "updateable": false,
+  "updateable": true,
   "privileged": false,
   "interface_port": null,
   "documentation": "https://github.com/leiweibau/Pi.Alert/blob/main/README.md",
@@ -31,10 +31,5 @@
     "username": null,
     "password": null
   },
-  "notes": [
+  "notes": []
-    {
-      "text": "WARNING: Installation sources scripts outside of Community Scripts repo. Please check the source before installing.",
-      "type": "warning"
-    }
-  ]
 }

frontend/public/json/plex.json

@@ -35,10 +35,6 @@
     {
       "text": "With Privileged/Unprivileged Hardware Acceleration Support",
       "type": "info"
-    },
-    {
-      "text": "WARNING: Installation sources scripts outside of Community Scripts repo. Please check the source before installing.",
-      "type": "warning"
     }
   ]
 }

frontend/public/json/podman-homeassistant.json

@@ -1,52 +1,48 @@
 {
-    "name": "Podman Home Assistant Container",
+  "name": "Podman Home Assistant Container",
-    "slug": "podman-homeassistant",
+  "slug": "podman-homeassistant",
-    "categories": [
+  "categories": [
-        16
+    16
-    ],
+  ],
-    "date_created": "2024-04-29",
+  "date_created": "2024-04-29",
-    "type": "ct",
+  "type": "ct",
-    "updateable": true,
+  "updateable": true,
-    "privileged": false,
+  "privileged": false,
-    "interface_port": 8123,
+  "interface_port": 8123,
-    "documentation": "https://www.home-assistant.io/docs/",
+  "documentation": "https://www.home-assistant.io/docs/",
-    "website": "https://www.home-assistant.io/",
+  "website": "https://www.home-assistant.io/",
-    "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons/webp/home-assistant.webp",
+  "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons/webp/home-assistant.webp",
-    "config_path": "/var/lib/containers/storage/volumes/hass_config/_data",
+  "config_path": "/var/lib/containers/storage/volumes/hass_config/_data",
-    "description": "A standalone Podman container-based installation of Home Assistant Core means that the Home Assistant Core software is installed inside a container managed by Podman, separate from the host operating system. This provides a flexible and scalable solution for running the software, as the container can be easily moved between host systems or isolated from other processes for security. Podman is a popular open-source tool for managing containers that is similar to Docker, but designed for use on Linux systems without a daemon.\r\n\r\n\ud83d\udec8 If the LXC is created Privileged, the script will automatically set up USB passthrough.",
+  "description": "A standalone Podman container-based installation of Home Assistant Core means that the Home Assistant Core software is installed inside a container managed by Podman, separate from the host operating system. This provides a flexible and scalable solution for running the software, as the container can be easily moved between host systems or isolated from other processes for security. Podman is a popular open-source tool for managing containers that is similar to Docker, but designed for use on Linux systems without a daemon.\r\n\r\n\ud83d\udec8 If the LXC is created Privileged, the script will automatically set up USB passthrough.",
-    "install_methods": [
+  "install_methods": [
-        {
+    {
-            "type": "default",
+      "type": "default",
-            "script": "ct/podman-homeassistant.sh",
+      "script": "ct/podman-homeassistant.sh",
-            "resources": {
+      "resources": {
-                "cpu": 2,
+        "cpu": 2,
-                "ram": 2048,
+        "ram": 2048,
-                "hdd": 16,
+        "hdd": 16,
-                "os": "debian",
+        "os": "debian",
-                "version": "12"
+        "version": "12"
-            }
+      }
-        }
+    }
-    ],
+  ],
-    "default_credentials": {
+  "default_credentials": {
-        "username": null,
+    "username": null,
-        "password": null
+    "password": null
+  },
+  "notes": [
+    {
+      "text": "If the LXC is created Privileged, the script will automatically set up USB passthrough.",
+      "type": "warning"
     },
-    "notes": [
+    {
-        {
+      "text": "config path: `/var/lib/containers/storage/volumes/hass_config/_data`",
-            "text": "If the LXC is created Privileged, the script will automatically set up USB passthrough.",
+      "type": "info"
-            "type": "warning"
+    },
-        },
+    {
-        {
+      "text": "Options to Install Portainer or Portainer Agent",
-            "text": "config path: `/var/lib/containers/storage/volumes/hass_config/_data`",
+      "type": "warning"
-            "type": "info"
+    }
-        },
+  ]
-        {
-            "text": "Options to Install Portainer or Portainer Agent",
-            "type": "warning"
-        },
-        {
-            "text": "WARNING: Installation sources scripts outside of Community Scripts repo. Please check the source before installing.",
-            "type": "warning"
-        }
-    ]
 }

frontend/public/json/radicale.json

@@ -6,7 +6,7 @@
   ],
   "date_created": "2025-02-02",
   "type": "ct",
-  "updateable": false,
+  "updateable": true,
   "privileged": false,
   "interface_port": 5232,
   "documentation": "https://radicale.org/master.html#documentation-1",

frontend/public/json/smokeping.json

@@ -6,7 +6,7 @@
   ],
   "date_created": "2024-05-02",
   "type": "ct",
-  "updateable": false,
+  "updateable": true,
   "privileged": false,
   "interface_port": null,
   "documentation": "https://oss.oetiker.ch/smokeping/doc/index.en.html",

frontend/public/json/syncthing.json

@@ -6,7 +6,7 @@
   ],
   "date_created": "2024-05-02",
   "type": "ct",
-  "updateable": false,
+  "updateable": true,
   "privileged": false,
   "interface_port": 8384,
   "documentation": "https://docs.syncthing.net/",

frontend/public/json/tautulli.json

@@ -6,7 +6,7 @@
   ],
   "date_created": "2024-05-02",
   "type": "ct",
-  "updateable": false,
+  "updateable": true,
   "privileged": false,
   "interface_port": 8181,
   "documentation": "https://github.com/Tautulli/Tautulli/wiki",

frontend/public/json/unifi.json

@@ -6,7 +6,7 @@
   ],
   "date_created": "2024-05-02",
   "type": "ct",
-  "updateable": false,
+  "updateable": true,
   "privileged": false,
   "interface_port": 8443,
   "documentation": null,

install/booklore-install.sh

@@ -46,7 +46,7 @@ $STD npm run build --configuration=production
 msg_ok "Built Frontend"
 
 msg_info "Creating Environment"
-mkdir -p /opt/booklore_storage{/data,/books}
+mkdir -p /opt/booklore_storage{/data,/books,/bookdrop}
 cat <<EOF >/opt/booklore_storage/.env
 DATABASE_URL=jdbc:mariadb://localhost:3306/$DB_NAME
 DATABASE_USERNAME=$DB_USER
@@ -55,6 +55,7 @@ BOOKLORE_PORT=6060
 
 BOOKLORE_DATA_PATH=/opt/booklore_storage/data
 BOOKLORE_BOOKS_PATH=/opt/booklore_storage/books
+BOOKLORE_BOOKDROP_PATH=/opt/booklore_storage/bookdrop
 EOF
 msg_ok "Created Environment"
 

install/bunkerweb-install.sh

@@ -19,7 +19,17 @@ $STD apt-get install -y lsb-release
 msg_ok "Installed Dependencies"
 
 RELEASE=$(curl -fsSL https://api.github.com/repos/bunkerity/bunkerweb/releases/latest | grep "tag_name" | awk '{print substr($2, 3, length($2)-4) }')
-msg_info "Installing BunkerWeb v${RELEASE} (Patience)"
+msg_warn "WARNING: This script will run an external installer from a third-party source (install-bunkerweb.sh)."
+msg_warn "The following code is NOT maintained or audited by our repository."
+msg_warn "If you have any doubts or concerns, please review the installer code before proceeding:"
+msg_custom "${TAB3}${GATEWAY}${BGN}${CL}" "\e[1;34m" "→  https://github.com/bunkerity/bunkerweb/raw/v${RELEASE}/misc/install-bunkerweb.sh"
+echo
+read -r -p "${TAB3}Do you want to continue? [y/N]: " CONFIRM
+if [[ ! "$CONFIRM" =~ ^([yY][eE][sS]|[yY])$ ]]; then
+  msg_error "Aborted by user. No changes have been made."
+  exit 10
+fi
+msg_info "Installing BunkerWeb (Patience)"
 curl -fsSL -o install-bunkerweb.sh https://github.com/bunkerity/bunkerweb/raw/v${RELEASE}/misc/install-bunkerweb.sh
 chmod +x install-bunkerweb.sh
 $STD ./install-bunkerweb.sh --yes

install/casaos-install.sh

@@ -13,6 +13,16 @@ setting_up_container
 network_check
 update_os
 
+msg_warn "WARNING: This script will run an external installer from a third-party source (https://casaos.zimaspace.com/)."
+msg_warn "The following code is NOT maintained or audited by our repository."
+msg_warn "If you have any doubts or concerns, please review the installer code before proceeding:"
+msg_custom "${TAB3}${GATEWAY}${BGN}${CL}" "\e[1;34m" "→  https://get.casaos.io/"
+echo
+read -r -p "${TAB3}Do you want to continue? [y/N]: " CONFIRM
+if [[ ! "$CONFIRM" =~ ^([yY][eE][sS]|[yY])$ ]]; then
+  msg_error "Aborted by user. No changes have been made."
+  exit 10
+fi
 msg_info "Installing CasaOS (Patience)"
 DOCKER_CONFIG_PATH='/etc/docker/daemon.json'
 mkdir -p $(dirname $DOCKER_CONFIG_PATH)

install/channels-install.sh

@@ -18,6 +18,17 @@ $STD apt-get install -y chromium
 $STD apt-get install -y xvfb
 msg_ok "Installed Dependencies"
 
+msg_warn "WARNING: This script will run an external installer from a third-party source (https://getchannels.com)."
+msg_warn "The following code is NOT maintained or audited by our repository."
+msg_warn "If you have any doubts or concerns, please review the installer code before proceeding:"
+msg_custom "${TAB3}${GATEWAY}${BGN}${CL}" "\e[1;34m" "→  https://getchannels.com/dvr/setup.sh"
+echo
+read -r -p "${TAB3}Do you want to continue? [y/N]: " CONFIRM
+if [[ ! "$CONFIRM" =~ ^([yY][eE][sS]|[yY])$ ]]; then
+  msg_error "Aborted by user. No changes have been made."
+  exit 10
+fi
+
 if [[ "$CTTYPE" == "0" ]]; then
   msg_info "Setting Up Hardware Acceleration"
   $STD apt-get -y install \

install/iobroker-install.sh

@@ -17,6 +17,17 @@ msg_info "Installing Dependencies"
 $STD apt-get install -y ca-certificates
 msg_ok "Installed Dependencies"
 
+msg_warn "WARNING: This script will run an external installer from a third-party source (https://iobroker.net/)."
+msg_warn "The following code is NOT maintained or audited by our repository."
+msg_warn "If you have any doubts or concerns, please review the installer code before proceeding:"
+msg_custom "${TAB3}${GATEWAY}${BGN}${CL}" "\e[1;34m" "→  https://iobroker.net/install.sh"
+echo
+read -r -p "${TAB3}Do you want to continue? [y/N]: " CONFIRM
+if [[ ! "$CONFIRM" =~ ^([yY][eE][sS]|[yY])$ ]]; then
+  msg_error "Aborted by user. No changes have been made."
+  exit 10
+fi
+
 NODE_VERSION="22" setup_nodejs
 
 msg_info "Installing ioBroker (Patience)"

install/jeedom-install.sh

@@ -19,6 +19,17 @@ $STD apt-get install -y \
   git
 msg_ok "Dependencies installed"
 
+msg_warn "WARNING: This script will run an external installer from a third-party source (https://github.com/jeedom/)."
+msg_warn "The following code is NOT maintained or audited by our repository."
+msg_warn "If you have any doubts or concerns, please review the installer code before proceeding:"
+msg_custom "${TAB3}${GATEWAY}${BGN}${CL}" "\e[1;34m" "→  https://raw.githubusercontent.com/jeedom/core/master/install/install.sh"
+echo
+read -r -p "${TAB3}Do you want to continue? [y/N]: " CONFIRM
+if [[ ! "$CONFIRM" =~ ^([yY][eE][sS]|[yY])$ ]]; then
+  msg_error "Aborted by user. No changes have been made."
+  exit 10
+fi
+
 DEFAULT_BRANCH="master"
 REPO_URL="https://github.com/jeedom/core.git"
 

install/kasm-install.sh

@@ -13,20 +13,32 @@ setting_up_container
 network_check
 update_os
 
-msg_info "Installing Kasm Workspaces"
 KASM_VERSION=$(curl -fsSL 'https://www.kasmweb.com/downloads' | grep -o 'https://kasm-static-content.s3.amazonaws.com/kasm_release_[^"]*\.tar\.gz' | head -n 1 | sed -E 's/.*release_(.*)\.tar\.gz/\1/')
+
+msg_warn "WARNING: This script will run an external installer from a third-party source (https://www.kasmweb.com/)."
+msg_warn "The following code is NOT maintained or audited by our repository."
+msg_warn "If you have any doubts or concerns, please review the installer code before proceeding:"
+msg_custom "${TAB3}${GATEWAY}${BGN}${CL}" "\e[1;34m" "→  install.sh inside tar.gz https://kasm-static-content.s3.amazonaws.com/kasm_release_${KASM_VERSION}.tar.gz"
+echo
+read -r -p "${TAB3}Do you want to continue? [y/N]: " CONFIRM
+if [[ ! "$CONFIRM" =~ ^([yY][eE][sS]|[yY])$ ]]; then
+  msg_error "Aborted by user. No changes have been made."
+  exit 10
+fi
+
+msg_info "Installing Kasm Workspaces"
 curl -fsSL -o "/opt/kasm_release_${KASM_VERSION}.tar.gz" "https://kasm-static-content.s3.amazonaws.com/kasm_release_${KASM_VERSION}.tar.gz"
 cd /opt
 tar -xf "kasm_release_${KASM_VERSION}.tar.gz"
 chmod +x /opt/kasm_release/install.sh
-printf 'y\ny\ny\n4\n' | bash /opt/kasm_release/install.sh > ~/kasm-install.output 2>&1
+printf 'y\ny\ny\n4\n' | bash /opt/kasm_release/install.sh >~/kasm-install.output 2>&1
 awk '
   /^Kasm UI Login Credentials$/ {capture=1}
   capture {print}
   /^Service Registration Token$/ {in_token=1}
   in_token && /^-+$/ {dash_count++}
   in_token && dash_count==2 {exit}
-' ~/kasm-install.output > ~/kasm.creds
+' ~/kasm-install.output >~/kasm.creds
 msg_ok "Installed Kasm Workspaces"
 
 motd_ssh

install/mattermost-install.sh

@@ -13,6 +13,17 @@ setting_up_container
 network_check
 update_os
 
+msg_warn "WARNING: This script will run an external installer from a third-party source (https://mattermost.com/)."
+msg_warn "The following code is NOT maintained or audited by our repository."
+msg_warn "If you have any doubts or concerns, please review the installer code before proceeding:"
+msg_custom "${TAB3}${GATEWAY}${BGN}${CL}" "\e[1;34m" "→  https://deb.packages.mattermost.com/repo-setup.sh"
+echo
+read -r -p "${TAB3}Do you want to continue? [y/N]: " CONFIRM
+if [[ ! "$CONFIRM" =~ ^([yY][eE][sS]|[yY])$ ]]; then
+  msg_error "Aborted by user. No changes have been made."
+  exit 10
+fi
+
 PG_VERSION="16" setup_postgresql
 
 msg_info "Setting up PostgreSQL"

install/nextcloudpi-install.sh

@@ -3,7 +3,7 @@
 # Copyright (c) 2021-2025 tteck
 # Author: tteck (tteckster)
 # License: MIT | https://github.com/community-scripts/ProxmoxVE/raw/main/LICENSE
-# Source: https://www.turnkeylinux.org/nextcloud
+# Source: https://nextcloudpi.com/
 
 source /dev/stdin <<<"$FUNCTIONS_FILE_PATH"
 color
@@ -13,8 +13,19 @@ setting_up_container
 network_check
 update_os
 
+msg_warn "WARNING: This script will run an external installer from a third-party source (https://nextcloudpi.com/)."
+msg_warn "The following code is NOT maintained or audited by our repository."
+msg_warn "If you have any doubts or concerns, please review the installer code before proceeding:"
+msg_custom "${TAB3}${GATEWAY}${BGN}${CL}" "\e[1;34m" "→  https://raw.githubusercontent.com/nextcloud/nextcloudpi/master/install.sh"
+echo
+read -r -p "${TAB3}Do you want to continue? [y/N]: " CONFIRM
+if [[ ! "$CONFIRM" =~ ^([yY][eE][sS]|[yY])$ ]]; then
+  msg_error "Aborted by user. No changes have been made."
+  exit 10
+fi
+
 msg_info "Installing NextCloudPi (Patience)"
-bash <(curl -fsSL https://raw.githubusercontent.com/nextcloud/nextcloudpi/master/install.sh) >/dev/null 2>&1
+$STD bash <(curl -fsSL https://raw.githubusercontent.com/nextcloud/nextcloudpi/master/install.sh)
 msg_ok "Installed NextCloudPi"
 
 motd_ssh

install/npmplus-install.sh

@@ -89,19 +89,36 @@ customize
 
 msg_info "Retrieving Default Login (Patience)"
 PASSWORD_FOUND=0
+
 for i in {1..60}; do
-  PASSWORD_LINE=$(docker logs "$CONTAINER_ID" 2>&1 | awk '/Creating a new user:/ { print; exit }')
+  PASSWORD_LINE=$(
-  if [[ -n "$PASSWORD_LINE" ]]; then
+    { awk '/Creating a new user:/{print; exit}' < <(docker logs "$CONTAINER_ID" 2>&1); } || true
-    PASSWORD=$(echo "$PASSWORD_LINE" | awk -F 'password: ' '{print $2}')
+  )
-    echo -e "username: admin@example.org\npassword: $PASSWORD" >/opt/.npm_pwd
+
+  if [[ -n "${PASSWORD_LINE:-}" ]]; then
+    PASSWORD="${PASSWORD_LINE#*password: }"
+    printf 'username: admin@example.org\npassword: %s\n' "$PASSWORD" >/opt/.npm_pwd
     msg_ok "Saved default login to /opt/.npm_pwd"
     PASSWORD_FOUND=1
     break
   fi
   sleep 2
 done
+if [[ $PASSWORD_FOUND -eq 0 ]]; then
+  PASSWORD_LINE=$(
+    timeout 30s bash -c '
+      docker logs -f --since=0s --tail=0 "$1" 2>&1 | awk "/Creating a new user:/{print; exit}"
+    ' _ "$CONTAINER_ID" || true
+  )
+  if [[ -n "${PASSWORD_LINE:-}" ]]; then
+    PASSWORD="${PASSWORD_LINE#*password: }"
+    printf 'username: admin@example.org\npassword: %s\n' "$PASSWORD" >/opt/.npm_pwd
+    msg_ok "Saved default login to /opt/.npm_pwd (live)"
+    PASSWORD_FOUND=1
+  fi
+fi
 
 if [[ $PASSWORD_FOUND -eq 0 ]]; then
-  msg_error "Could not retrieve default login after 60 seconds."
+  msg_error "Could not retrieve default login after 120s."
   echo -e "\nYou can manually check the container logs with:\n  docker logs $CONTAINER_ID | grep 'Creating a new user:'\n"
 fi

install/pihole-install.sh

@@ -13,6 +13,17 @@ setting_up_container
 network_check
 update_os
 
+msg_warn "WARNING: This script will run an external installer from a third-party source (https://pi-hole.net/)."
+msg_warn "The following code is NOT maintained or audited by our repository."
+msg_warn "If you have any doubts or concerns, please review the installer code before proceeding:"
+msg_custom "${TAB3}${GATEWAY}${BGN}${CL}" "\e[1;34m" "→  https://install.pi-hole.net"
+echo
+read -r -p "${TAB3}Do you want to continue? [y/N]: " CONFIRM
+if [[ ! "$CONFIRM" =~ ^([yY][eE][sS]|[yY])$ ]]; then
+  msg_error "Aborted by user. No changes have been made."
+  exit 10
+fi
+
 msg_info "Installing Dependencies"
 $STD apt-get install -y ufw
 msg_ok "Installed Dependencies"

install/runtipi-install.sh

@@ -13,6 +13,17 @@ setting_up_container
 network_check
 update_os
 
+msg_warn "WARNING: This script will run an external installer from a third-party source (https://runtipi.io/)."
+msg_warn "The following code is NOT maintained or audited by our repository."
+msg_warn "If you have any doubts or concerns, please review the installer code before proceeding:"
+msg_custom "${TAB3}${GATEWAY}${BGN}${CL}" "\e[1;34m" "→  https://raw.githubusercontent.com/runtipi/runtipi/master/scripts/install.sh"
+echo
+read -r -p "${TAB3}Do you want to continue? [y/N]: " CONFIRM
+if [[ ! "$CONFIRM" =~ ^([yY][eE][sS]|[yY])$ ]]; then
+  msg_error "Aborted by user. No changes have been made."
+  exit 10
+fi
+
 msg_info "Installing Runtipi (Patience)"
 DOCKER_CONFIG_PATH='/etc/docker/daemon.json'
 mkdir -p "$(dirname "$DOCKER_CONFIG_PATH")"

install/wazuh-install.sh

@@ -13,9 +13,18 @@ setting_up_container
 network_check
 update_os
 
-msg_info "Fetching Latest Wazuh Version"
 RELEASE=$(curl -fsSL https://api.github.com/repos/wazuh/wazuh/releases/latest | grep '"tag_name"' | awk -F '"' '{print substr($4, 2, length($2)-4)}')
-msg_ok "Latest Wazuh Version: $RELEASE"
+
+msg_warn "WARNING: This script will run an external installer from a third-party source (https://wazuh.com/)."
+msg_warn "The following code is NOT maintained or audited by our repository."
+msg_warn "If you have any doubts or concerns, please review the installer code before proceeding:"
+msg_custom "${TAB3}${GATEWAY}${BGN}${CL}" "\e[1;34m" "→  https://packages.wazuh.com/$RELEASE/wazuh-install.sh "
+echo
+read -r -p "${TAB3}Do you want to continue? [y/N]: " CONFIRM
+if [[ ! "$CONFIRM" =~ ^([yY][eE][sS]|[yY])$ ]]; then
+  msg_error "Aborted by user. No changes have been made."
+  exit 10
+fi
 
 msg_info "Setup Wazuh"
 curl -fsSL https://packages.wazuh.com/$RELEASE/wazuh-install.sh -o wazuh-install.sh

install/yunohost-install.sh

@@ -14,11 +14,23 @@ network_check
 update_os
 
 msg_info "Installing Dependencies"
-$STD apt-get install -y apt-transport-https
+$STD apt-get install -y \
-$STD apt-get install -y lsb-release
+  apt-transport-https \
-$STD apt-get install -y ca-certificates
+  lsb-release \
+  ca-certificates
 msg_ok "Installed Dependencies"
 
+msg_warn "WARNING: This script will run an external installer from a third-party source (https://yunohost.org/)."
+msg_warn "The following code is NOT maintained or audited by our repository."
+msg_warn "If you have any doubts or concerns, please review the installer code before proceeding:"
+msg_custom "${TAB3}${GATEWAY}${BGN}${CL}" "\e[1;34m" "→  https://install.yunohost.org"
+echo
+read -r -p "${TAB3}Do you want to continue? [y/N]: " CONFIRM
+if [[ ! "$CONFIRM" =~ ^([yY][eE][sS]|[yY])$ ]]; then
+  msg_error "Aborted by user. No changes have been made."
+  exit 10
+fi
+
 msg_info "Installing YunoHost (Patience)"
 touch /etc/.pve-ignore.resolv.conf
 curl -fsSLo /usr/share/keyrings/deb.sury.org-php.gpg https://packages.sury.org/php/apt.gpg