Script library
Apps you can install
Every app here is an open script that follows the Iranux Script Specification. Open one to see what it does and what it will ask you.
Sign in to install; browsing is free.
AiderAI and AgentsCreates a Python virtual environment in /opt/iranux/aider, installs aider-chat 0.86.2 and every dependency at an exact pinned version (wheels only), and links aider into /usr/local/bin. Uses Python 3.10-3.12; on Debian 13 it downloads a pinned, checksum-verified standalone Python 3.12 (about 67 MB). Installs git. No service, no API key stored. Safe to rerun.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
DifyAI and AgentsRuns a trimmed Dify 1.17.1 as 12 Docker containers: about 2.3 GB download, 4 GB RAM and 2 CPU cores at least. Left out: the Agent v2 backend and its sandbox, live co-editing, HTTPS and the other vector stores. Secrets are generated into /opt/iranux/dify/.env (root only). Plain HTTP on the chosen port; the code sandbox runs workflow code.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
FabricAI and AgentsDownloads the official Fabric release for 64-bit Linux (static build), checks its SHA-256 and installs the fabric command in /usr/local/bin. No key or configuration is created; you run fabric --setup yourself. Safe to run again.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
KhojAI and AgentsRuns Khoj and PostgreSQL (pgvector) as Docker containers on this server (about 1.1 GB download, 4 GB RAM recommended). Creates /opt/iranux/khoj with generated secrets (root-only file). Web search and code sandbox services are not included.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
LibreChatAI and AgentsRuns LibreChat, MongoDB and Meilisearch as Docker containers in /opt/iranux/librechat. Generates the encryption keys, session secrets and database passwords once and keeps them in a root-only file. The image is large, so the first download takes a few minutes.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
LiteLLMAI and AgentsRuns the LiteLLM proxy and a PostgreSQL database as Docker containers in /opt/iranux/litellm. Generates the master key, the encryption salt and the database password once and keeps them in a root-only file. The image is large, so the first download takes a few minutes.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
LocalAIAI and AgentsRuns LocalAI (CPU image) as a Docker container in /opt/iranux/localai. No model is installed up front; you pick models from the gallery afterwards. Generates an API key once and keeps it in a root-only file.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
OllamaAI and AgentsDownloads the official Ollama release (about 1.4 GB; a cut download continues when you run it again), checks its SHA-256, installs it under /usr/local and runs it as a hardened systemd service (dynamic user, data in /var/lib/ollama). It listens on 127.0.0.1:11434 unless you change the address. The firewall is never changed. No models are downloaded.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
Open WebUIAI and AgentsRuns Open WebUI as a Docker container. The image is several GB, so the first download takes a few minutes. The session secret is generated once and kept in a root-only file.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
OpenClawAI and AgentsRuns the OpenClaw gateway as a Docker container in /opt/iranux/openclaw. The control panel port listens on 127.0.0.1 only. A gateway token is generated once and kept in a root-only file. You add your AI provider key afterwards. Download about 1.2 GB; if it is cut, run again and it continues.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
OpenHandsAI and AgentsHIGH RISK: the agent can run arbitrary shell commands and reach the network from inside its container (download about 1.4 GB, 4 GB RAM recommended; if the download is cut, run again and it continues). No Docker socket and no privileged mode; only its own volumes are visible. Runs behind a generated access key. Product analytics is switched off.High risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
ActivepiecesAutomationRuns Activepieces, PostgreSQL and Redis as Docker containers in /opt/iranux/activepieces. Generates the encryption key, JWT secret and database password once and keeps them in a root-only file. Telemetry is off and Code steps run in a V8 sandbox (no npm packages in Code steps).Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
changedetection.ioAutomationRuns changedetection.io as a Docker container in /opt/iranux/changedetection-io. Turns on the web login with a generated password (root-only file) and keeps the service running after reboots. The built-in browser engine is not installed; pages are fetched with plain requests.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
HuginnAutomationRuns Huginn (all-in-one image with its own MySQL) as a Docker container in /opt/iranux/huginn. The admin password, the session secret and the invitation code are generated once and kept in a root-only file. Web requests made by agents cannot reach private addresses (the bundled Smokescreen egress filter is on; FTP, IMAP, MQTT and XMPP agents are not covered). The image is large.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
KestraAutomationRuns Kestra (slim image, core plugins) and a PostgreSQL database as Docker containers in /opt/iranux/kestra. Generates the admin password and the database password once and keeps them in a root-only file. The Docker socket is not shared, so Docker-based script tasks are not available.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
n8nAutomationRuns n8n as a Docker container on this server. Creates /opt/iranux/n8n, generates the credential encryption key once (kept in a root-only file) and keeps n8n running after reboots.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
Node-REDAutomationRuns Node-RED as a Docker container in /opt/iranux/node-red. Turns on editor login with a generated admin password (root-only file), encrypts stored credentials with a generated key and keeps Node-RED running after reboots.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
TemporalAutomationHigh risk because Temporal has NO authentication: anyone who can reach the gRPC port can start, signal and terminate workflows. By default the web page and gRPC listen on 127.0.0.1 only. If you expose the web page it is read-only unless you allow changes. Runs the server, PostgreSQL and the UI as containers. Needs about 2 GB of memory.High risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
Trigger.devAutomationHigh risk: 11 containers (webapp, PostgreSQL, Redis, ClickHouse, registry and more) and a worker that starts your tasks through the Docker socket, so task code is effectively root on this server. Task containers share a network with Electric (no authentication) and a Redis without a password. Fixed network names trigger-*: a stack using them conflicts and the script stops. Needs 4 GB RAM and 8 GB disk; may exceed the 10 minute limit. Only the admin email can sign in.High risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
WindmillAutomationRuns Windmill (server and one worker) and a PostgreSQL database as Docker containers in /opt/iranux/windmill. Replaces the default administrator password with a generated one before the port is opened to the network. Download about 1.7 GB (the Windmill image is 1.6 GB); if it is cut, run again and it continues.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
AppwriteDeveloper PlatformsRuns a trimmed Appwrite 2.5.0 as 10 Docker containers with fixed names (appwrite-*, networks gateway and appwrite): another stack using them conflicts and the script stops. About 1.1 GB download, 4 GB RAM, 2 CPU cores. Left out: Functions and Sites, usage statistics, MongoDB, MQTT, geo lookup, screenshots. Traefik reads the Docker socket, so the risk is high. Secrets go to /opt/iranux/appwrite/.env (root only).High risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
ChromaDeveloper PlatformsRuns Chroma and a Caddy proxy as Docker containers. Chroma 1.x has no sign-in of its own, so only the proxy is public and it rejects every request without the generated token (Authorization: Bearer or X-Chroma-Token). Chroma itself has no published port.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
MeilisearchDeveloper PlatformsRuns Meilisearch in production mode as a Docker container. All API calls need the master key, which is generated on the server and saved in a root-only file.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
PocketBaseDeveloper PlatformsDownloads the official PocketBase release for 64-bit Linux, checks its SHA-256 and installs it in /usr/local/bin. Runs it as a hardened systemd service (dynamic user, data in /var/lib/pocketbase), listening on 127.0.0.1:8090 unless you change the address. Creates the first admin once, from your email and a generated password saved in /opt/iranux/pocketbase/admin_password (root only; never in the service file). Safe to run again.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
PostgreSQLDeveloper PlatformsRuns PostgreSQL 18 in Docker on port 5432 (changeable). By default the port is bound to 127.0.0.1, so only programs on this server reach it. With 'Open to the internet' the port is published on all addresses and Docker bypasses the ufw firewall for it, so limit the source addresses yourself. About 256 MB of RAM. The password is generated and kept in a root-only file.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
PostgRESTDeveloper PlatformsRuns PostgREST as a Docker container against the PostgreSQL database you give it. There is no anonymous role, so requests without a valid JWT are refused. The JWT secret is generated on the server and a one-year token for your role is saved in a root-only file.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
QdrantDeveloper PlatformsRuns Qdrant as a Docker container with an API key required on every request. The key is generated on the server and saved in a root-only file. Telemetry is turned off.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
RedisDeveloper PlatformsRuns Redis 8 in Docker on port 6379 (changeable) with a generated password and append-only persistence. By default the port is bound to 127.0.0.1, so only programs on this server reach it. With 'Open to the internet' it is published on all addresses and Docker bypasses the ufw firewall for it. Redis keeps its data in RAM, so it uses as much memory as you store; there is no memory limit set.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
SupabaseDeveloper PlatformsRuns the Supabase self-hosting release v1.26.08 trimmed to 9 Docker containers with fixed names (supabase-*): a second copy or your own stack with the same names conflicts, and the script stops in that case. About 1.4 GB download, 4 GB RAM and 2 CPU cores at least. Left out: analytics, Edge Functions and the Supavisor pooler. Keys and passwords are generated into /opt/iranux/supabase/.env (root only).Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
SurrealDBDeveloper PlatformsDownloads the official SurrealDB release for 64-bit Linux, checks its SHA-256 and installs it in /usr/local/bin. Runs it as a hardened systemd service (dynamic user, data in /var/lib/surrealdb), listening on 127.0.0.1:8000 unless you change the address. The root password is generated and saved in /opt/iranux/surrealdb/root_password (root only). Safe to run again.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
Argo CDDevOpsNeeds the K3s tool installed first (2 GB memory minimum). Applies the checked official Argo CD manifest to a new argocd namespace; its controller gets cluster-admin rights in the cluster. Nothing is public: the service stays ClusterIP, reach it with kubectl port-forward, or open a NodePort with the parameter. The admin password is generated into a root-only file, or checked against the cluster when one already exists.High risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
CaddyDevOpsHigh risk: adds the official Caddy package repository (key fingerprint checked), installs Caddy, starts its service on ports 80 and 443 and opens them in ufw (firewall rules) when ufw is active. With a domain it writes a small Caddyfile with automatic HTTPS; a Caddyfile you edited is never replaced.High risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
CrossplaneDevOpsNeeds the K3s tool installed first (2 GB memory minimum). Installs the checked Crossplane 2.4.2 Helm chart (the checked Helm 4.3.0 stays in /opt/iranux/crossplane/bin, not system-wide) into a new crossplane-system namespace, adding cluster-wide CRDs and a controller with broad cluster rights. It listens on no port. It manages nothing until you add providers and their cloud credentials.High risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
ForgejoDevOpsRuns Forgejo with a SQLite database as a Docker container. The install page is locked, public registration is off, and the admin account is created with a generated password. Git over SSH uses its own port, not the server's SSH port.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
K3sDevOpsHigh risk: Kubernetes changes the host network. K3s adds firewall (iptables) rules, loads the br_netfilter and overlay kernel modules, runs as root and listens on port 6443. Installs the checked K3s binary through the official install script (also checked) with its own download turned off. The bundled Traefik and load balancer are off by default, so ports 80 and 443 stay free. Use at least 2 GB of memory.High risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
K9sDevOpsDownloads the official K9s release for 64-bit Linux (static build), checks its SHA-256 and installs the k9s command in /usr/local/bin. It needs a Kubernetes cluster and a kubeconfig file only when you run it; none is created. Safe to run again.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
NginxDevOpsHigh risk: installs nginx from the Debian or Ubuntu repository, starts it on port 80 (and 443 with HTTPS) and opens these ports in ufw when ufw is active. With a domain it writes one site file in /etc/nginx/sites-available; a site file you edited is never replaced. HTTPS uses Certbot, which works once the domain points at this server (Setup creates the record when it can). HTTPS is skipped, and Nginx stays on HTTP, when another program (for example Xray Reality or GOST) already uses port 443.High risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
Nginx Proxy ManagerDevOpsRuns Nginx Proxy Manager in Docker. It takes ports 80 and 443 for the websites it serves and port 81 for its admin panel, so no other web server or proxy can run on this server. The admin panel is plain HTTP on the public address; limit port 81 to your own address or reach it through an SSH tunnel. About 512 MB of RAM.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
OpenTofuDevOpsDownloads the official OpenTofu release for 64-bit Linux, checks its SHA-256 and installs the tofu command in /usr/local/bin. It runs no service and touches nothing else. Safe to run again.Low risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
TraefikDevOpsRuns Traefik as a Docker container on ports 80 and 443 with a Let's Encrypt resolver. Routes are read from files in /opt/iranux/traefik/dynamic only; the Docker socket is not mounted. The optional dashboard is served at your domain behind a password saved in /opt/iranux/traefik/dashboard_password (root only). Setup creates the domain's DNS record when it can; otherwise point it at this server yourself.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
Woodpecker CIDevOpsHigh risk: the agent mounts the Docker socket of this server, so any pipeline can control Docker (and so the whole server); only run code you trust. Needs an OAuth app you made on your forge first, with the callback address <public address>/authorize. Registration is closed; only the listed admin users can sign in.High risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
Cloudflare API Token Auto ParkingDNS and DomainsAdds your domain to your Cloudflare account as a full zone with a Cloudflare API token, or uses the zone if it already exists. It points the domain and its ns subdomain to your server's IPv4 address (A records, proxy off) and delegates the v, vs, s, ss, t and ts subdomains to the ns subdomain (NS records). It deletes duplicate records with the same name and type, and stops if a conflicting record exists. At the end it shows the name servers to set at your domain registrar.High risk
Iranux Compatiblev1.0.0UbuntuDebian
Cloudflare Global Key Fixed-Order Auto ParkingDNS and DomainsAdds your domain to your Cloudflare account as a full zone with your account email and Global API Key, or uses the zone if it already exists. It points the domain and its ns subdomain to your server's IPv4 address (A records, proxy off) and delegates the v, vs, s, ss, t and ts subdomains to the ns subdomain (NS records). At the end it shows the name servers to set at your domain registrar. The API token script is safer, because a token can be limited to what it needs.High risk
Iranux Compatiblev1.0.0UbuntuDebian
Docker EngineDockerHigh risk: adds the official Docker package repository (key fingerprint checked), installs Docker Engine and the Compose plugin and starts the Docker service. Docker manages firewall (iptables) rules, enables IP forwarding and loads network kernel modules on this server. Safe to run again.High risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
lazydockerDockerDownloads the official lazydocker release for 64-bit Linux (static build), checks its SHA-256 and installs the lazydocker command in /usr/local/bin. Docker itself is not installed or changed; lazydocker needs it only when you run it. Safe to run again.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
AudiobookshelfFiles and MediaRuns Audiobookshelf as a Docker container. Creates /opt/iranux/audiobookshelf with folders for audiobooks and podcasts (put your files there), its config and metadata, and keeps it running after reboots.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
ImmichFiles and MediaRuns Immich with its database, cache and machine-learning service as Docker containers (about 1.2 GB of images, 4 GB of RAM recommended). Creates /opt/iranux/immich with the photo library and the database; the database password is generated once into a root-only file.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
JellyfinFiles and MediaRuns Jellyfin as a Docker container. Creates /opt/iranux/jellyfin with config, cache and a media folder (put your files in /opt/iranux/jellyfin/media), and keeps it running after reboots. Software transcoding only.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
NextcloudFiles and MediaRuns Nextcloud with PostgreSQL, Valkey and a background-jobs container as Docker containers (about 700 MB of images). Creates /opt/iranux/nextcloud with the user files in data; the database password is generated once into a root-only file.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
CapRoverHosting PlatformsRuns the official CapRover installer image, which starts CapRover, nginx and certbot in a new Docker Swarm with access to the Docker socket (root-level control of this server). It takes over ports 80, 443 and 3000, keeps its data in /captain and opens those ports in ufw when ufw is active. The first login password is generated and saved in /opt/iranux/caprover/admin_password. It refuses to run if Swarm is already active.High risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
Cosmos CloudHosting PlatformsRuns Cosmos Cloud as one privileged Docker container on the host network with access to the Docker socket (root-level control of this server). It takes over ports 80 and 443 and keeps its data in /var/lib/cosmos. The admin account is created by the first visitor of the setup wizard.High risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
DokployHosting PlatformsDownloads the official Dokploy installer (pinned commit, SHA-256 checked) and runs it with a fixed version. It starts Dokploy, PostgreSQL and Traefik in a new Docker Swarm, with access to the Docker socket (root-level control of this server), takes over ports 80, 443 and 3000, and sets /etc/dokploy to mode 755 (the installer uses 777). Refuses a foreign Swarm; resumes its own.High risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
KomodoHosting PlatformsRuns Komodo Core, its MongoDB database and the Periphery agent as Docker containers. The agent has access to the Docker socket (root-level control of this server). The admin account is created at the first start with a generated password; sign-up is off.High risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
PangolinHosting PlatformsHigh risk: runs Pangolin, Gerbil (WireGuard, needs the NET_ADMIN and SYS_MODULE capabilities) and Traefik as Docker containers and takes ports 80, 443, 51820/udp and 21820/udp. Traefik downloads the Badger plugin itself at start. Setup creates the dashboard domain's DNS record when it can; otherwise point it at this server yourself. The first admin is created in the browser with a setup token saved in a root-only file.High risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
Portainer CEHosting PlatformsRuns Portainer CE as a Docker container with access to the Docker socket (root-level control of this server). The admin account is created at the first start with a generated password, so nobody else can claim it.High risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
RuntipiHosting PlatformsDownloads the Runtipi command line tool (version 4.10.2), checks its SHA-256 and runs it to start the Runtipi stack (Traefik, PostgreSQL, RabbitMQ and the dashboard) as Docker containers in /opt/iranux/runtipi. The dashboard has read access to the Docker socket. It takes over the web and HTTPS ports, 80 and 443 by default.High risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
BeszelMonitoringRuns the Beszel hub as a Docker container on this server. Creates /opt/iranux/beszel, creates the first account from the email you give and a generated password kept in a root-only file, and keeps the hub running after reboots.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
DozzleMonitoringRuns Dozzle as a Docker container with access to the Docker socket (it reads logs; actions and shell access stay off). A login is required: user admin with a generated password. Creates /opt/iranux/dozzle.High risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
GatusMonitoringRuns Gatus as a Docker container with a starter configuration that checks one address every minute. Creates /opt/iranux/gatus, stores history in SQLite and keeps it running after reboots. The status page is public.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
GlanceMonitoringRuns Glance as a Docker container with a small starter dashboard and a login (user admin, generated password). The dashboard is /opt/iranux/glance/config/glance.yml (written once, yours to edit); the login is in auth.yml next to it.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
Grafana AlloyMonitoringAdds the official Grafana package repository (key fingerprint checked), installs Alloy 1.20.1 after checking the package checksum and starts its service. With a remote write address it writes a configuration that sends host metrics there; an Alloy configuration you edited is never replaced.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
NetdataMonitoringRuns Netdata as a Docker container on the host network and host process namespace, with read-only views of /proc, /sys and the root filesystem. By default the dashboard listens on 127.0.0.1 only because it has no login; telemetry is off.High risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
SigNozMonitoringRuns SigNoz v0.145.0 in 6 Docker containers: web app, OpenTelemetry collector, ClickHouse with Keeper, PostgreSQL and a one-time migration job. About 0.9 GB download, 4 GB RAM and 2 CPU cores at least, plus disk that grows with your telemetry. Left out: multi-node ClickHouse layouts and demo apps. The database password is generated into /opt/iranux/signoz/.env (root only).Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
Uptime KumaMonitoringRuns Uptime Kuma as a Docker container on this server. Creates /opt/iranux/uptime-kuma, pulls a pinned image and keeps it running after reboots.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
VictoriaMetricsMonitoringRuns single-node VictoriaMetrics as a Docker container with HTTP basic authentication (user admin, generated password kept in a root-only file). Creates /opt/iranux/victoriametrics and keeps it running after reboots.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
Iranux Ultimate Setup Port 22 EditionNetwork ServicesInstalls the Iranux SSH WebSocket tunnel on port 443 with Node.js 22, BadVPN UDPGW and a Telegram management bot. It deletes existing non-admin user accounts and earlier tunnel data, stops web servers on ports 80 and 443, forces SSH to port 22 with password login, resets the firewall and upgrades all packages.Dangerous
Iranux Compatiblev1.4.0DebianUbuntu
MasterDnsVPN Server Linux InstallerNetwork ServicesInstalls, updates or uninstalls the MasterDnsVPN DNS tunnel server on Linux. To free port 53 it stops and disables other DNS services, changes or stops systemd-resolved and kills any process still using port 53; it also removes port 53 redirect rules, opens port 53 in the firewall, changes kernel and file limits, generates an encryption key and creates a systemd service.Dangerous
Iranux Compatiblev1.0.0UbuntuDebianAlmaLinuxRocky LinuxRed Hat Enterprise LinuxCentOSFedoraamzn
StormDNS Server Linux InstallerNetwork ServicesInstalls, updates or uninstalls the StormDNS DNS tunnel server on Linux. To free port 53 it stops and disables other DNS services, changes or stops systemd-resolved and kills any process still using port 53; it also removes port 53 redirect rules, opens port 53 in the firewall, changes kernel and file limits, generates an encryption key and creates a systemd service. It also adds a service that blocks all outgoing TCP connections to port 53 from this server.Dangerous
Iranux Compatiblev1.0.0UbuntuDebianAlmaLinuxRocky LinuxRed Hat Enterprise LinuxCentOS
3x-uiPrivate Networks and TunnelsHigh risk: the panel runs as root (it manages firewall state and Xray processes) and the chosen panel port is opened in ufw when ufw is active. Installs the pinned 3x-ui release to /usr/local/x-ui with its systemd unit, sets the first administrator, port and a random web path on the first install (/etc/x-ui holds the database) and keeps the panel running after reboots. Safe to run again: an existing panel keeps its settings.High risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
BackhaulPrivate Networks and TunnelsInstalls the pinned Backhaul release, writes /etc/backhaul/config.toml (mode 640) for the chosen role and transport and runs it as a sandboxed systemd service. The server role opens the tunnel port and the service port in ufw when ufw is active. Safe to run again.High risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
ChiselPrivate Networks and TunnelsInstalls the pinned Chisel release, runs chisel server as a sandboxed systemd service on the chosen port with password authentication and reverse tunnels allowed, and opens the port in ufw when ufw is active. Safe to run again: an existing password is kept.High risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
Cloudflare TunnelPrivate Networks and TunnelsInstalls the pinned cloudflared Debian package, stores the tunnel token in /etc/cloudflared/token (mode 640, never printed), runs the connector as a sandboxed systemd service with automatic updates off, and keeps it running after reboots. Safe to run again.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
FRPPrivate Networks and TunnelsInstalls the pinned frp release (frps and frpc), writes /etc/frp/frps.toml or frpc.toml (mode 640) for the chosen role and runs it as a sandboxed systemd service. The server role opens the tunnel port and the service port in ufw when ufw is active. Safe to run again.High risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
GOST port forwardingPrivate Networks and TunnelsHigh risk: it opens the chosen port (TCP and UDP) in ufw when ufw is active. Installs the pinned GOST release to /usr/local/bin and runs it as a sandboxed systemd service that forwards the listening port to the target address and port. Running it again replaces the target.High risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
Hysteria 2Private Networks and TunnelsHigh risk: it opens the chosen UDP port (and TCP 80 for the certificate when a domain is given) in ufw when ufw is active. Installs the pinned Hysteria release, writes /etc/hysteria/config.yaml (mode 640), makes a self-signed certificate when no domain is given, runs Hysteria as a sandboxed systemd service and keeps the password across runs.High risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
OpenVPNPrivate Networks and TunnelsHigh risk: it enables IPv4 forwarding (a sysctl.d file) and adds firewall NAT rules for the VPN subnet 10.9.0.0/24 through a small systemd unit. Installs openvpn and easy-rsa, creates the CA, server and client certificates (elliptic curve, no Diffie-Hellman wait), starts openvpn-server@server and writes client files to /root/openvpn-clients. Safe to run again: existing keys and clients are kept.High risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
Outline ServerPrivate Networks and TunnelsHigh risk: it opens the management port and the access-key port (TCP and UDP) in ufw when ufw is active. Runs the pinned shadowbox image on the host network the way the official installer does, creates the management certificate and secret path once in /opt/iranux/outline-server, and writes the Outline Manager configuration to a root-only file. The access-key port only applies to keys created after the first run; to change it later, use Outline Manager's server settings.High risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
ratholePrivate Networks and TunnelsInstalls the pinned rathole release, writes /etc/rathole/config.toml (mode 640) for the chosen role and runs it as a sandboxed systemd service. The server role opens the tunnel port and the service port in ufw when ufw is active. Safe to run again.High risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
ShadowsocksPrivate Networks and TunnelsInstalls the pinned shadowsocks-rust release, writes /etc/shadowsocks-rust/config.json (mode 600), runs ssserver as a sandboxed systemd service and opens the chosen port in ufw when ufw is active. Safe to run again: an existing password is kept.High risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
sing-box (TUIC)Private Networks and TunnelsHigh risk: it opens the chosen UDP port in ufw when ufw is active. Installs the pinned sing-box release to /usr/local/bin, writes /etc/sing-box/config.json (mode 640) with one TUIC user, makes a self-signed certificate, checks the configuration with sing-box check, runs sing-box as a sandboxed systemd service and keeps the client id and password across runs.High risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
Snowflake ProxyPrivate Networks and TunnelsRuns the official Tor Project Snowflake proxy as a Docker container with a bandwidth limit you choose. It keeps running after reboots and needs no open port or domain.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
Tor Bridge (obfs4)Private Networks and TunnelsHigh risk: it opens the two chosen ports in ufw when ufw is active. Installs tor and obfs4proxy from the distribution, writes /etc/tor/torrc as a bridge relay (no exit traffic), starts the service and reads the bridge line. Safe to run again: the bridge keys are kept.High risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
Xray VLESS + RealityPrivate Networks and TunnelsHigh risk: it opens the chosen port in ufw when ufw is active. Installs the pinned Xray-core release to /usr/local/bin and /usr/local/share/xray, creates the Reality key pair and short id once (kept in /usr/local/etc/xray, mode 600), writes config.json and runs Xray as a sandboxed systemd service. Safe to run again.High risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
AFFiNEProductivity and Web DataRuns AFFiNE, PostgreSQL (pgvector) and Redis as Docker containers on this server. Creates /opt/iranux/affine with a generated database password (root-only file) and keeps the stack running after reboots.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
BrowserlessProductivity and Web DataRuns Browserless (Chromium) as a Docker container on this server (about 1 GB download). Creates /opt/iranux/browserless and keeps it running after reboots. All requests are refused without the access token.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
Crawl4AIProductivity and Web DataRuns Crawl4AI as a Docker container (about 1.7 GB download, 2 GB RAM minimum) on this server. Creates /opt/iranux/crawl4ai and keeps it running after reboots. The API refuses requests without the token.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
DocumensoProductivity and Web DataRuns Documenso and PostgreSQL as Docker containers on this server. Creates /opt/iranux/documenso with generated secrets and a self-signed document signing certificate (root-only files) and keeps the stack running after reboots.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
HomarrProductivity and Web DataRuns Homarr as a Docker container. Creates /opt/iranux/homarr and generates its encryption key once into a root-only file. The Docker socket is not mounted, so Homarr has no control over this server's containers.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
HomepageProductivity and Web DataRuns Homepage as a Docker container with password login turned on. Creates /opt/iranux/homepage/config for the YAML files. The Docker socket is not mounted, so the Docker integration stays off.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
IT-ToolsProductivity and Web DataRuns IT-Tools as a Docker container serving a static web app. All tools run in the visitor's browser and nothing is stored on the server. Creates /opt/iranux/it-tools for the compose file only.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
LightpandaProductivity and Web DataDownloads the official Lightpanda release for 64-bit Linux, checks its SHA-256 and installs it in /usr/local/bin. Runs its CDP server as a hardened systemd service (dynamic user), listening on 127.0.0.1:9222 unless you change the address, with usage telemetry turned off. Safe to run again.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
MealieProductivity and Web DataRuns Mealie as a Docker container with its built-in SQLite database. Creates /opt/iranux/mealie, replaces Mealie's well-known default administrator password with the one below before the service is opened to the network, and keeps it running after reboots.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
Paperless-ngxProductivity and Web DataRuns Paperless-ngx with PostgreSQL and Valkey as Docker containers (about 1 GB of images). Creates /opt/iranux/paperless-ngx with data, media, an export folder and a consume folder; the database password and the secret key are generated once into a root-only file.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
PenpotProductivity and Web DataRuns Penpot (frontend, backend, exporter), PostgreSQL and Valkey as Docker containers (about 2 GB download, 4 GB RAM recommended). Creates /opt/iranux/penpot with generated secrets (root-only file); no email server is configured.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
Stirling PDFProductivity and Web DataRuns Stirling PDF as a Docker container (about 1.1 GB image). Creates /opt/iranux/stirling-pdf, turns login on with an admin account whose password is set from the parameter below, and keeps it running after reboots.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
WordPressProductivity and Web DataRuns WordPress (Apache, PHP 8.4) and MariaDB 11.8 in Docker and publishes WordPress on one port (default 8080); the database is not reachable from outside. Needs about 1 GB of RAM. The site is plain HTTP until you put HTTPS in front, and whoever opens it first runs the installer and becomes the administrator.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
3x-ui InstallerProxy ManagementInstalls the 3x-ui panel as a system service with an admin login set from the parameters (the password is created by the platform and shown on the result page), a random panel path, and can set up PostgreSQL and an SSL certificate without prompts. On RHEL, Fedora, CentOS and Arch it first upgrades all system packages. A reinstall deletes the existing x-ui program folder, and a Let's Encrypt domain certificate deletes and recreates the folder /root/cert/<your domain>.Dangerous
Iranux Compatiblev1.1.0UbuntuDebianarmbianFedoraamznvirtuozzoRed Hat Enterprise LinuxAlmaLinuxRocky LinuxolCentOSArch Linuxmanjaroparchopensuse-tumbleweedopensuse-leapAlpine Linux
s-ui Alireza InstallerProxy ManagementInstalls or updates the alireza0/s-ui panel: updates system packages, downloads the selected release, installs the systemd service, migrates settings, and optionally sets the panel, subscription and admin settings.High risk
Iranux Compatiblev1.1.0UbuntuDebianCentOSAlmaLinuxRocky LinuxolFedoraArch Linuxmanjaroparchopensuse-tumbleweed
x-ui Alireza InstallerProxy ManagementInstalls or updates the alireza0/x-ui panel: updates system packages, downloads the selected release, installs the systemd service, migrates settings, and can restore a backup left by a failed installation. On a new installation it sets the admin login (the password is created by the platform and shown on the result page) and a random port and panel path.High risk
Iranux Compatiblev1.1.0UbuntuDebianarmbianCentOSAlmaLinuxRocky LinuxolFedoraamznArch Linuxmanjaroparchopensuse-tumbleweed
AutheliaSecurityRuns Authelia and a Caddy proxy as Docker containers. Caddy gets a Let's Encrypt certificate for the portal domain on ports 80 and 443. Creates the configuration, a file-based user list with one user (password hashed by Authelia) and root-only secrets in /opt/iranux/authelia. Setup creates the domain's DNS record when it can; otherwise point it at this server yourself.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
authentikSecurityRuns authentik (server and worker) and PostgreSQL as Docker containers. Creates /opt/iranux/authentik, generates the database password and secret key once (root-only file) and sets the akadmin password at the first start. Needs about 2 GB of RAM. The Docker socket is not mounted, so the optional managed-outpost integration is off.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
CrowdSecSecurityAdds the official CrowdSec package repository (key fingerprint checked), installs the engine (local API on 127.0.0.1:8080) and, if chosen, the nftables firewall bouncer, and starts both. The bouncer adds its own nftables table and never changes default firewall policies or ufw rules. The address that ran this installation, and any you list, are allowlisted. Not enrolled in the online console.High risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
HeadscaleSecurityHigh risk: the service gets the right to bind ports 80 and 443 (CAP_NET_BIND_SERVICE) and uses them for its own Let's Encrypt certificate. Downloads the official Headscale release, checks its SHA-256, installs it in /usr/local/bin, writes /etc/headscale/config.yaml, runs it as a hardened systemd service (dynamic user, data in /var/lib/headscale) and creates the first user. Setup creates the domain's DNS record when it can; otherwise point it at this server yourself.High risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
RustDesk ServerSecurityRuns hbbs and hbbr as Docker containers on the host network (the setup RustDesk documents) on ports 21115 to 21117 and opens them in ufw when ufw is active. Ports 21118 and 21119 (web client) stay closed unless chosen. The server keeps its key pair in /opt/iranux/rustdesk-server/data.High risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
TrivySecurityDownloads the official Trivy release for 64-bit Linux (static build, about 50 MB), checks its SHA-256 and installs the trivy command in /usr/local/bin with its report templates in /usr/local/share/trivy. The vulnerability database is downloaded by Trivy itself on the first scan. Safe to run again.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
VaultwardenSecurityRuns Vaultwarden and a Caddy proxy as Docker containers. Caddy gets a Let's Encrypt certificate for your domain on ports 80 and 443. Setup creates the domain's DNS record when it can; otherwise point it at this server yourself.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
WireGuard VPNSecurityHigh risk: it enables IPv4 forwarding (a sysctl.d file) and adds firewall NAT rules for the VPN subnet. Installs WireGuard, creates the server and client keys (mode 600), starts wg-quick@wg0 and writes client files to /root/wireguard-clients. Safe to run again.High risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
batTerminal ToolsDownloads the official bat release for 64-bit Linux (static build), checks its SHA-256 and installs the bat command in /usr/local/bin with its manual page and Bash completion. Safe to run again.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
btopTerminal ToolsDownloads the official btop release for 64-bit Linux, checks its SHA-256 and installs the btop command in /usr/local/bin with its themes in /usr/local/share/btop. Installs bzip2 only if it is missing. Safe to run again.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
ezaTerminal ToolsDownloads the official eza release for 64-bit Linux (static build), checks its SHA-256 and installs the eza command in /usr/local/bin. Safe to run again.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
fastfetchTerminal ToolsDownloads the official fastfetch release for 64-bit Linux, checks its SHA-256 and installs the fastfetch command in /usr/local/bin with its manual page, Bash completion and example presets in /usr/local/share/fastfetch. Safe to run again.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
fdTerminal ToolsDownloads the official fd release for 64-bit Linux (static build), checks its SHA-256 and installs the fd command in /usr/local/bin with its manual page and Bash completion. Safe to run again.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
lazygitTerminal ToolsDownloads the official lazygit release for 64-bit Linux (static build), checks its SHA-256 and installs the lazygit command in /usr/local/bin. Installs git from the system packages only if it is missing. Safe to run again.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
ripgrepTerminal ToolsDownloads the official ripgrep release for 64-bit Linux, checks its SHA-256 and installs the rg command in /usr/local/bin with its manual page and Bash completion. Safe to run again.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
StarshipTerminal ToolsDownloads the official Starship release for 64-bit Linux (static build), checks its SHA-256 and installs the starship command in /usr/local/bin. It does not change any shell startup file. Safe to run again.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu
zoxideTerminal ToolsDownloads the official zoxide release for 64-bit Linux (static build), checks its SHA-256 and installs the zoxide command in /usr/local/bin with its manual pages and Bash completion. It does not change any shell startup file. Safe to run again.Medium risk
Iranux CompatibleAI-generated for Debian 13, Debian 12, Ubuntu 24.04, Ubuntu 22.04, no runs yetv1.0.0DebianUbuntu