shorten more jsons

Author: MickLesk

json/casdoor.json

@@ -17,7 +17,7 @@
     "arm64"
   ],
   "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/casdoor.webp",
-  "description": "Casdoor is an open-source identity and access management (IAM) and single sign-on platform with a web UI. It acts as an OAuth 2.0, OIDC, SAML and CAS provider, adds LDAP, RADIUS and SCIM endpoints, social and enterprise login providers, MFA and WebAuthn, and manages organizations, users, roles and Casbin-based permissions. This script installs the prebuilt release with a local PostgreSQL database.",
+  "description": "Casdoor is an open-source identity and access management (IAM) and single sign-on platform. It acts as an OAuth 2.0, OIDC, SAML and CAS provider with LDAP, RADIUS and SCIM endpoints, social logins, MFA and WebAuthn, and Casbin-based permissions.",
   "install_methods": [
     {
       "type": "default",
@@ -38,15 +38,15 @@
   },
   "notes": [
     {
-      "text": "Log in at http://<IP>:8000 as admin with password 123 (organization built-in). These defaults are public and give full control over every user and application, so change the password right after the install: the user menu in the top right, My Account, Password.",
+      "text": "The default admin login (organization built-in) is public and controls every user and application. Change the password right away under the user menu > My Account.",
       "type": "warning"
     },
     {
-      "text": "origin in /opt/casdoor_data/conf/app.conf is the OIDC issuer and the base of the links Casdoor mails out, and points at the container IP. Change it before connecting applications when the IP changes or Casdoor sits behind a reverse proxy or domain, then run systemctl restart casdoor.",
+      "text": "origin in /opt/casdoor_data/conf/app.conf is the OIDC issuer. Behind a reverse proxy or domain, change it before connecting applications and run systemctl restart casdoor.",
       "type": "info"
     },
     {
-      "text": "Besides the web UI on port 8000, Casdoor serves its built-in LDAP server on port 389 and a RADIUS server on UDP port 1812. The RADIUS shared secret is generated during the install and stored as radiusSecret in /opt/casdoor_data/conf/app.conf.",
+      "text": "Casdoor also serves LDAP on port 389 and RADIUS on UDP port 1812. The RADIUS secret is radiusSecret in /opt/casdoor_data/conf/app.conf.",
       "type": "info"
     }
   ]

json/chartdb.json

@@ -18,7 +18,7 @@
     "arm64"
   ],
   "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/chartdb.webp",
-  "description": "ChartDB is a database diagram editor that runs in the browser. A single query run against PostgreSQL, MySQL, MariaDB, SQL Server, SQLite, ClickHouse or CockroachDB returns the schema as JSON, which ChartDB turns into an editable entity-relationship diagram; diagrams can also be built from scratch, imported from DBML or SQL, and exported as SQL, DBML or images. This script builds the web app from source and serves it with nginx.",
+  "description": "ChartDB is a database diagram editor that runs in the browser. One query against PostgreSQL, MySQL, MariaDB, SQL Server, SQLite, ClickHouse or CockroachDB returns the schema, which ChartDB turns into an editable ER diagram that can be exported as SQL, DBML or an image.",
   "install_methods": [
     {
       "type": "default",
@@ -39,24 +39,16 @@
   },
   "notes": [
     {
-      "text": "Diagrams are stored in the browser (IndexedDB), not in the container. Another browser or device, cleared site data or a different address (new IP, hostname or reverse proxy) shows an empty diagram list, and container backups do not include them. Export diagrams you want to keep (JSON, DBML or SQL).",
+      "text": "Diagrams are stored in your browser, not in the container. Another browser, cleared site data or a new address shows an empty list, so export the diagrams you want to keep.",
       "type": "warning"
     },
     {
-      "text": "ChartDB is served over HTTPS with a self-signed certificate (http:// redirects to it): accept the certificate warning on first visit. HTTPS is needed because the AI export and the copy buttons only work in a secure context.",
+      "text": "ChartDB uses a self-signed certificate: accept the browser warning on the first visit.",
       "type": "info"
     },
     {
-      "text": "AI-assisted SQL export to another database dialect is optional. In /opt/chartdb_data/config.js, uncomment OPENAI_API_KEY and fill in the key for OpenAI, or uncomment all three lines for an OpenAI-compatible server such as Ollama or vLLM (set its URL and model, and leave the key empty if the server needs none), then reload the page; no rebuild or restart is needed. The browser calls the endpoint directly, so it has to be reachable from the browser over HTTPS and allow requests from the ChartDB address (CORS).",
-      "type": "info"
-    },
-    {
-      "text": "An OPENAI_API_KEY in config.js is sent to every browser that opens ChartDB, so anyone who can reach the container can read it. Use a key with a spending limit and keep ChartDB off the public internet when one is set.",
+      "text": "For the optional AI SQL export, set OPENAI_API_KEY or an OpenAI-compatible endpoint in /opt/chartdb_data/config.js. The key is sent to every browser that opens ChartDB, so use one with a spending limit.",
       "type": "warning"
-    },
-    {
-      "text": "Fathom analytics are switched off by DISABLE_ANALYTICS in /opt/chartdb_data/config.js. Install and every update build ChartDB from source and need the 6 GB of RAM; the running site is static files served by nginx, so the RAM can be lowered to 512 MB after the install and raised again before an update.",
-      "type": "info"
     }
   ]
 }

json/chatto.json

@@ -14,7 +14,7 @@
     "website": "https://chatto.run",
     "repository": "https://github.com/chattocorp/chatto",
     "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/chatto.webp",
-    "description": "Chatto is a fully-featured, privacy-first team and group chat application that is free and easy to self-host. It ships as a single binary with an embedded NATS/JetStream store (no external database) and supports voice/video calls and screensharing via an optional LiveKit server.",
+    "description": "Chatto is a privacy-first team and group chat app built for self-hosting. It runs as a single binary with an embedded NATS/JetStream store, so it needs no external database, and supports voice and video calls and screensharing through an optional LiveKit server.",
     "install_methods": [
         {
             "type": "default",
@@ -35,23 +35,15 @@
     },
     "notes": [
         {
-            "text": "Create the first account with `cd /opt/chatto && ./chatto operator user create --login <yourname>` (the operator API is enabled by default), or register via the web UI at http://IP:4000. Pick your own login: root, admin, superuser, op, operator and support are blocked by default and fail with 'this username is not available'.",
+            "text": "Register the first account in the web UI, or run cd /opt/chatto && ./chatto operator user create --login <name>. Logins such as root, admin, op and operator are blocked.",
             "type": "info"
         },
         {
-            "text": "Review /opt/chatto_data/chatto.toml and configure SMTP credentials and a public webserver.url before using Chatto in production.",
-            "type": "warning"
-        },
-        {
-            "text": "All persistent data (embedded NATS/JetStream store and chatto.toml with its secrets) lives in /opt/chatto_data, kept outside the app directory so it survives updates. Include /opt/chatto_data in regular backups.",
-            "type": "warning"
-        },
-        {
-            "text": "Uploads go through the embedded NATS/JetStream store, which gets slow with many or large files. Testers report it becomes noticeably more usable with more CPU cores assigned to the container.",
+            "text": "Set SMTP credentials and a public webserver.url in /opt/chatto_data/chatto.toml before using Chatto in production.",
             "type": "info"
         },
         {
-            "text": "Voice and video calls require a separately deployed LiveKit server; configure the [livekit] section in chatto.toml to enable them.",
+            "text": "Voice and video calls need a separately deployed LiveKit server, configured in the [livekit] section of chatto.toml.",
             "type": "info"
         }
     ]

json/ideon.json

@@ -17,7 +17,7 @@
     "arm64"
   ],
   "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/ideon.webp",
-  "description": "Ideon is a self-hosted visual workspace that maps a project on an infinite canvas. Notes, files, links, tasks, kanban boards, sketches and live Git repository blocks (GitHub, GitLab, Gitea, Forgejo) sit side by side, are edited together in real time and can be rewound to earlier snapshots. This script builds Ideon from source and runs it with PostgreSQL.",
+  "description": "Ideon is a self-hosted visual workspace that maps a project on an infinite canvas. Notes, files, links, tasks, kanban boards, sketches and live Git repository blocks sit side by side, are edited together in real time and can be rewound to earlier snapshots.",
   "install_methods": [
     {
       "type": "default",
@@ -38,27 +38,15 @@
   },
   "notes": [
     {
-      "text": "There is no default account. The first visit to http://<IP>:3000 opens the setup page that creates the super-admin; anyone who reaches the port can claim it until then, so finish the setup right after the install. Public registration is off afterwards, further users are invited from the Team page.",
+      "text": "There is no default account: the first visit opens the setup page that creates the super-admin. Finish it right after the install.",
       "type": "warning"
     },
     {
-      "text": "Redirects, invitation and share links are built from APP_URL in /opt/ideon_data/.env, which points at the container IP. Change it when the IP changes or Ideon sits behind a reverse proxy or domain, then run systemctl restart ideon.",
+      "text": "Links and redirects use APP_URL in /opt/ideon_data/.env. Change it behind a reverse proxy or after an IP change, add the SMTP_* values for email, then run systemctl restart ideon.",
       "type": "info"
     },
     {
-      "text": "Back up SECRET_KEY from /opt/ideon_data/.env together with the database and /opt/ideon_data/storage (uploads, avatars and the canvas documents). Sessions and encrypted values such as Git tokens depend on it.",
-      "type": "warning"
-    },
-    {
-      "text": "Ideon connects to PostgreSQL as a regular role that is subject to its row-level security, unlike the upstream Docker setup whose database user is a superuser. Canvases, blocks, files and collaboration work, but a few features expect to bypass it: Shell blocks are refused, MCP/API-key clients and access requests to other users' projects report the project as missing, and the admin audit log only lists the admin's own entries.",
-      "type": "info"
-    },
-    {
-      "text": "Install and every update build Ideon from source (Next.js), which takes about 10 minutes on 2 cores and needs the 4 GB of RAM. The running app uses around 300 MB, so the RAM can be lowered after the install and raised again before an update.",
-      "type": "info"
-    },
-    {
-      "text": "Email (invitations, password reset, magic links) needs the SMTP_* values in /opt/ideon_data/.env, followed by systemctl restart ideon.",
+      "text": "Shell blocks, MCP and API-key clients, and access requests to other users' projects do not work here, as the database user is not a superuser like in upstream's Docker setup.",
       "type": "info"
     }
   ]

json/k3s-vm.json

@@ -36,11 +36,11 @@
   },
   "notes": [
     {
-      "text": "Default settings use Debian 13; choose another Debian/Ubuntu cloud image in Advanced settings. Cloud-Init uses the shared credentials/network wizard and is enabled by default for unattended runs. Explicitly disabling it on Debian uses a nocloud image with root console login and no password; set a password immediately.",
-      "type": "info"
+      "text": "Cloud-Init sets up credentials, SSH keys and networking. If you turn it off on Debian, root logs in on the console without a password, so set one right away.",
+      "type": "warning"
     },
     {
-      "text": "K3s and Helm are installed into the image before import. k9s is added from the derailed/k9s release when available. Optional ArgoCD bootstrap runs on first boot through argocd-bootstrap.service; monitor journalctl -u argocd-bootstrap -f.",
+      "text": "ArgoCD is installed on first boot by default. Set INSTALL_ARGOCD_BOOTSTRAP=0 to skip it.",
       "type": "info"
     },
     {

json/netbird-server.json

@@ -36,7 +36,7 @@
   },
   "notes": [
     {
-      "text": "Default settings use Debian 13; Advanced settings offer other Debian/Ubuntu cloud images. Shared Cloud-Init configures credentials/networking when enabled. NetBird domain/proxy settings are required after VM settings; unattended deployment requires VM_NETBIRD_DOMAIN. Setup is staged with the netbird-setup.service first-boot unit; follow it with tail -f /var/log/netbird-setup.log. If Docker cannot be pre-installed, install-docker.service runs first and logs to /var/log/install-docker.log.",
+      "text": "Needs a public domain whose DNS A record points at this VM, with 80/tcp, 443/tcp and 3478/udp reachable. The install asks for it; unattended installs must set VM_NETBIRD_DOMAIN.",
       "type": "info"
     },
     {

json/nextcloud-aio-vm.json

@@ -36,12 +36,12 @@
   },
   "notes": [
     {
-      "text": "Default settings use Debian 13; Advanced settings offer other Debian/Ubuntu cloud images. The AIO master container is started by the nextcloud-aio.service first-boot unit (log: /var/log/nextcloud-aio.log); if Docker cannot be pre-installed, install-docker.service runs first. Finish the setup at https://<VM-IP>:8080; the AIO password is printed with `docker exec nextcloud-aio-mastercontainer grep password /mnt/docker-aio-config/data/configuration.json`.",
-      "type": "info"
+      "text": "Nextcloud AIO needs a domain with a valid certificate and does not work on a bare IP. For a VM that works on an IP straight away, use the TurnKey-based nextcloud-vm instead.",
+      "type": "warning"
     },
     {
-      "text": "Nextcloud AIO requires a domain with a valid certificate and does not work on a bare IP. Point the domain at the VM and open 80/tcp and 443/tcp, or follow the AIO local-instance guide for a LAN-only setup. For a VM that works on an IP address straight away, use the TurnKey-based nextcloud-vm instead.",
-      "type": "warning"
+      "text": "Finish the setup at https://<VM-IP>:8080 with the AIO password: `docker exec nextcloud-aio-mastercontainer grep password /mnt/docker-aio-config/data/configuration.json`",
+      "type": "info"
     },
     {
       "text": "If you use Cloud-init, checkout cloud-init discussion: `https://github.com/community-scripts/ProxmoxVE/discussions/272`",

json/nextdns.json

@@ -13,7 +13,7 @@
   "website": "https://nextdns.io/",
   "repository": "https://github.com/nextdns/nextdns",
   "logo": "https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/nextdns.webp",
-  "description": "NextDNS is a DNS-over-HTTPS (DoH) client and resolver that blocks ads, trackers and malware using cloud-managed profiles. This script installs a minimal Debian LXC with the official NextDNS CLI from the NextDNS apt repository, prompts for your profile ID, and configures router mode so DNS is served on TCP/UDP port 53.",
+  "description": "NextDNS is a DNS-over-HTTPS (DoH) client and resolver that blocks ads, trackers and malware using cloud-managed profiles. It serves DNS for your network on port 53; profiles are managed at my.nextdns.io, there is no local web interface.",
   "install_methods": [
     {
       "type": "default",
@@ -43,23 +43,7 @@
   ],
   "notes": [
     {
-      "text": "During install you will be asked for your NextDNS profile ID (or pass var_nextdns_profile). The script runs: nextdns install -profile <id> -report-client-info -setup-router",
-      "type": "info"
-    },
-    {
-      "text": "Create or copy your profile ID from https://my.nextdns.io before running the script.",
-      "type": "info"
-    },
-    {
-      "text": "After install, NextDNS listens on TCP/UDP port 53. Point DHCP clients at the container IP:53, or set the container as upstream DNS on your router. There is no local web UI (profiles are managed at my.nextdns.io).",
-      "type": "info"
-    },
-    {
-      "text": "Router mode (-setup-router) makes this LXC the DNS server for your network.",
-      "type": "info"
-    },
-    {
-      "text": "Updates use the official NextDNS apt repository (repo.nextdns.io). Run the container update script or apt upgrade inside the LXC.",
+      "text": "Have your NextDNS profile ID from https://my.nextdns.io ready: the install asks for it, or pass var_nextdns_profile.",
       "type": "info"
     }
   ]

json/nightingale.json

@@ -17,7 +17,7 @@
     "arm64"
   ],
   "logo": "https://cdn.jsdelivr.net/gh/n9e/n9e.github.io@main/static/apple-touch-icon.png",
-  "description": "Nightingale is an open-source monitoring and alerting platform. Like Grafana it connects to existing data sources such as Prometheus, VictoriaMetrics, Elasticsearch, Loki, ClickHouse or MySQL, but its focus is the alerting engine: alert rules, muting, subscriptions, event pipelines and notifications to more than 20 channels, plus dashboards, a host inventory fed by the Categraf agent and a built-in time series database. This script installs the prebuilt release with MariaDB and Redis.",
+  "description": "Nightingale is an open-source monitoring and alerting platform. It queries data sources such as Prometheus, VictoriaMetrics, Elasticsearch or Loki, and adds alert rules, muting, notifications to more than 20 channels, dashboards and a built-in time series database.",
   "install_methods": [
     {
       "type": "default",
@@ -38,15 +38,11 @@
   },
   "notes": [
     {
-      "text": "Log in at http://<IP>:17000 as root with password root.2020. These defaults are public and the account is an administrator, so change the password right after the install: the user menu in the top right, Profile, Change password.",
+      "text": "The default login is public and has admin rights. Change the password right after the first login: user menu, Profile, Change password.",
       "type": "warning"
     },
     {
-      "text": "No external Prometheus or VictoriaMetrics is needed: metrics pushed by Categraf agents land in Nightingale's built-in time series database, registered as the datasource embedded-tsdb. Install Categraf on the hosts to monitor from Infrastructure, Hosts, which serves the bundled agent and generates the install command. Samples are kept 15 days and capped at 4 GiB, set in [EmbeddedTSDB] of /opt/nightingale_data/config.toml.",
-      "type": "info"
-    },
-    {
-      "text": "Unlike the upstream default, anonymous queries against the datasources are disabled (PromQuerier = false in [Center.AnonymousAccess] of /opt/nightingale_data/config.toml), because they would let anyone who reaches port 17000 read every datasource. Set it to true for dashboards shared without login, then run systemctl restart nightingale.",
+      "text": "No separate Prometheus is needed: Categraf agents push metrics into the built-in time series database. Infrastructure > Hosts generates the agent install command.",
       "type": "info"
     }
   ]