Bind the RSSHub web port through HOST_IP so the 1Panel external access toggle controls the published address.
Keep the Browserless sidecar unexposed while declaring an empty ports list, which lets 1Panel populate HOST_IP even when it selects the sidecar service for common parameter injection.
Rework the app package to match the current upstream container deployment: generate config.yaml during install/upgrade, add bundled PostgreSQL, keep Guacd, and map the current SSH proxy port.
Disable cross-version upgrades because legacy SQLite/single-container installs cannot be migrated safely by this package. Verified latest and 3.1.1 with real 1Panel v2 smoke tests.
Add Headscale 0.27.1 as a sequential upgrade target from 0.26.1, fix the 0.26.1 command/config defaults, and migrate legacy Headscale config keys during upgrade while preserving unrelated custom sections.
Add Immich 1.132.3 as the safe intermediate upgrade required before newer Immich releases. Leave Tailscale unchanged because the newer patch/minor Docker tags are not available.
Add upgrade scripts for existing MixSpace installs that may not have PostgreSQL or Redis environment keys. Cache generated secrets under data/ so repeated 1Panel upgrades do not rotate the PostgreSQL password unexpectedly.
Update MixSpace latest and 13 to use the current PostgreSQL and Redis runtime expected by the upstream image. Remove the obsolete docker-run command, use the v3 health endpoint, add install scripts, and refresh defaults/docs for 1Panel v2 installs.
Validated with adapter strict-store checks and 1Panel v2 smoke tests for both latest and 13.
Resolve#2909 by replacing the beta FileCodeBox app version with latest, updating the image tag and README metadata, and adding minimal lifecycle scripts.
Allow the Pterodactyl China install form to select MariaDB services while keeping Laravel's DB_CONNECTION set to mysql for both MySQL and MariaDB backends.
Also close the existing compose/env gaps for MAIL_PASSWORD, PANEL_DB_PORT, and PANEL_RECAPTCHA_ENABLED so the app validates cleanly before runtime smoke testing.
Refs #3172
Sync SafeLine latest and newnet-latest runtime environment variables with upstream compose so tengine, luigi, and chaos can reach their dependencies. Also move the newnet default subnet away from link-local space for default installs.
Fixes#3299