Patch Gremlin

Automated system update notifications for Debian and RHEL-based systems with Discord, Microsoft Teams, Slack, Matrix, ntfy and Gotify support. Integrates with unattended-upgrades (Debian/Ubuntu) or dnf-automatic (RHEL/Fedora/Amazon Linux) to send notifications when security updates are installed.

Upgrading from 1.x? 2.0 changes how notifications are triggered and where secrets are stored, and fixes a credential-exposure issue. Read CHANGELOG.md and SECURITY.md, then re-run the installer.

Features

• 🔔 Multi-Platform: Discord, Microsoft Teams, Slack, Matrix, ntfy, Gotify and generic JSON webhooks — any combination
• 🔒 Secrets Done Right: Doppler or a local file, always mode 600 and root-owned, loaded via systemd EnvironmentFile=
• ⚙️ Accurate Triggering: Fires when the upgrade run actually finishes, so the report describes that run
• 🔄 Auto-Reboot: Optional, with the reboot window derived from your update time
• 🧠 Intelligent: Distinguishes "5 packages updated" from "12 still pending (3 security)" from "up to date"
• 📊 Monitoring-Ready: Nagios/Icinga check, Prometheus exporter, and a machine-readable state file
• 🌍 Timezone-Aware: Detects and configures the system timezone during setup
• 🤖 Automatable: Every setting can come from the environment — no prompts required
• 🖥️ Multi-OS: Debian/Ubuntu/Raspbian and RHEL/Rocky/AlmaLinux/Amazon Linux/Fedora
• ✅ Tested: 107 automated tests running against six distributions in CI

Quick Start

Installation Methods

Choose your preferred method for storing notification secrets:

Option 1: Local File Storage (Simpler)

Secrets stored in /etc/update-notifier/secrets.conf - no external dependencies.

# 1. Clone and enter directory
git clone https://github.com/ChiefGyk3D/Patch-Gremlin.git
cd Patch-Gremlin

# 2. Run setup (it will prompt for secret storage choice)
sudo ./setup-unattended-upgrades.sh

# 3. Follow prompts:
#    - Choose update type (security only / all updates)
#    - Choose schedule (daily / weekly)
#    - Choose timezone
#    - Choose verbose logging (default: quiet)
#    - Choose auto-reboot after updates (default: enabled)
#    - Choose LOCAL file storage
#    - Enter webhook URLs for your platforms

# Done! Test the notification:
sudo /usr/local/bin/update-notifier.sh

Option 2: Doppler (Centralized Secret Management)

Best for managing multiple servers or sharing secrets across teams.

# 1. Install Doppler CLI
curl -sLf https://cli.doppler.com/install.sh | sh

# 2. Authenticate (both user and root)
doppler login
sudo doppler login

# 3. Setup Doppler project
sudo doppler setup --project your-project --config your-config

# 4. Add secrets (choose platforms you want)
doppler secrets set UPDATE_NOTIFIER_DISCORD_WEBHOOK="https://discord.com/api/webhooks/..."
doppler secrets set UPDATE_NOTIFIER_MATRIX_HOMESERVER="https://matrix.org"
doppler secrets set UPDATE_NOTIFIER_MATRIX_USERNAME="username"
doppler secrets set UPDATE_NOTIFIER_MATRIX_PASSWORD="your-password"
doppler secrets set UPDATE_NOTIFIER_MATRIX_ROOM_ID="!room:matrix.org"

# 5. Clone and run setup
git clone https://github.com/ChiefGyk3D/Patch-Gremlin.git
cd Patch-Gremlin
sudo ./setup-unattended-upgrades.sh

# 6. Follow prompts and choose DOPPLER mode
#    You'll need to provide your Doppler service token when prompted

# Done! Test the notification:
sudo /usr/local/bin/update-notifier.sh

Creating a Doppler Service Token

When using Doppler mode, the setup will prompt for a service token:

# Create a service token (no expiration)
doppler configs tokens create patch-gremlin-token --max-age 0

# Copy the token (starts with dp.st.) and paste when prompted

The service token allows the notification script to access your secrets without requiring doppler login on the system.

Configuration

Interactive Setup

The setup script (setup-unattended-upgrades.sh) will interactively ask you about:

1. Update Type

   • Security updates only (recommended)
   • All available updates

2. Update Schedule

   • Daily (recommended for security)
   • Weekly (choose day of week)
   • Custom time (default: 02:00)

3. Timezone

   • Keep current or select from common timezones

4. Verbose Logging

   • Quiet (recommended) - only important messages
   • Verbose - detailed DEBUG output

5. Automatic Reboot

   • Enabled (recommended) - automatically reboots after kernel or critical library updates
   • Disabled - requires manual reboot after kernel updates
   • Reboots even with logged-in users when enabled

6. Secret Storage

   • LOCAL file - simpler, secrets in /etc/update-notifier/secrets.conf
   • DOPPLER - centralized, requires Doppler CLI and service token

7. Notification Platforms

   • Discord webhook URL
   • Microsoft Teams webhook URL
   • Slack webhook URL
   • Matrix (webhook OR homeserver + username/password)
   • At least one required

Unattended Installation

Every setting can come from the environment. Pass --non-interactive and the installer never prompts — it fails fast with a clear message if something required is missing, which makes it safe to drive from Ansible or cloud-init.

sudo -E env \
  UPDATE_TYPE=security \
  UPDATE_SCHEDULE=daily \
  UPDATE_TIME=03:30 \
  SYSTEM_TIMEZONE=America/New_York \
  AUTO_REBOOT=true \
  REBOOT_WITH_USERS=false \
  SECRET_MODE=local \
  LOCAL_DISCORD_WEBHOOK='https://discord.com/api/webhooks/...' \
  ./setup-unattended-upgrades.sh --non-interactive

Variable	Values	Default
UPDATE_TYPE	security, all	prompt
UPDATE_SCHEDULE	daily, weekly	prompt
UPDATE_DAY	Sun…Sat	Sat
UPDATE_TIME	HH:MM, 24-hour	02:00
SYSTEM_TIMEZONE	e.g. Europe/Berlin	unchanged
VERBOSE_LOGGING	true, false	false
AUTO_REBOOT	true, false	prompt
REBOOT_WITH_USERS	true, false	false
ENABLE_HEARTBEAT	true, false	false
SECRET_MODE	doppler, local	prompt
DOPPLER_TOKEN	dp.st.…	required for Doppler

Local-mode endpoints come from LOCAL_DISCORD_WEBHOOK, LOCAL_SLACK_WEBHOOK, LOCAL_TEAMS_WEBHOOK, LOCAL_MATRIX_*, LOCAL_NTFY_*, LOCAL_GOTIFY_* and LOCAL_WEBHOOK_URL. At least one is required. Run ./setup-unattended-upgrades.sh --help for the full list.

All values are validated before anything is written, so a malformed UPDATE_TIME is rejected rather than ending up inside a systemd unit.

When Notifications Fire

Patch Gremlin hooks onto the upgrade unit itself (ExecStartPost on apt-daily-upgrade.service or dnf-automatic.service), so the notification always describes the run that just completed.

A scheduled "heartbeat" report is also installed but disabled by default. Enable it with ENABLE_HEARTBEAT=true to get a report even on days when no upgrade ran; it is scheduled two hours after the upgrade window so it can never race it.

# Enable the heartbeat later
sudo systemctl enable --now update-notifier.timer

Customizing Doppler Secret Names

If you need different secret names (to avoid conflicts with other programs), create config.sh:

cp config.example.sh config.sh
nano config.sh

Edit to match your Doppler secret names:

# Customize these to match YOUR Doppler secret names
export DOPPLER_DISCORD_SECRET="MY_DISCORD_WEBHOOK"
export DOPPLER_TEAMS_SECRET="MY_TEAMS_WEBHOOK"
export DOPPLER_SLACK_SECRET="MY_SLACK_WEBHOOK"
export DOPPLER_MATRIX_HOMESERVER_SECRET="MY_MATRIX_SERVER"
export DOPPLER_MATRIX_USERNAME_SECRET="MY_MATRIX_USER"
export DOPPLER_MATRIX_PASSWORD_SECRET="MY_MATRIX_PASS"
export DOPPLER_MATRIX_ROOM_ID_SECRET="MY_MATRIX_ROOM"

Then run setup with your config:

source config.sh
sudo -E ./setup-unattended-upgrades.sh

Local Secrets File Format

If using local file storage, secrets are stored in /etc/update-notifier/secrets.conf:

SECRET_MODE="local"

# Discord
DISCORD_WEBHOOK="https://discord.com/api/webhooks/..."

# Microsoft Teams
TEAMS_WEBHOOK="https://outlook.office.com/webhook/..."

# Slack
SLACK_WEBHOOK="https://hooks.slack.com/services/..."

# Matrix - Webhook (if available)
MATRIX_WEBHOOK="https://matrix.example.org/_matrix/webhook/..."

# Matrix - API (recommended)
MATRIX_HOMESERVER="https://matrix.org"
MATRIX_USERNAME="username"
MATRIX_PASSWORD="your-password"
MATRIX_ROOM_ID="!room:matrix.org"

Security: This file is automatically created with chmod 600 (owner read/write only). It is parsed as plain KEY="VALUE" lines, never executed as a shell script: $, backticks and quotes in a value are kept literally.

Getting Webhook URLs

Discord

1. Go to Server Settings → Integrations → Webhooks
2. Click "New Webhook" or edit existing
3. Copy webhook URL
4. Format: https://discord.com/api/webhooks/{id}/{token}

Microsoft Teams

1. Go to channel → More options (⋯) → Connectors
2. Search for "Incoming Webhook" → Configure
3. Give it a name, optionally upload image
4. Copy webhook URL
5. Format: https://outlook.office.com/webhook/...

Slack

1. Go to https://api.slack.com/apps
2. Create New App → From scratch
3. Add "Incoming Webhooks" feature
4. Activate and add to workspace
5. Copy webhook URL
6. Format: https://hooks.slack.com/services/...

Matrix

Getting Your Room ID:

Element Web/Desktop:

1. Open the room → Click room name → Settings → Advanced
2. Copy "Internal room ID" (starts with !)

Element Mobile:

1. Open room → Tap room name → About
2. Room ID is at the bottom

Username Format:

• ✅ Correct: username (just the localpart)
• ❌ Wrong: @username:matrix.org (full format)

The script will automatically extract the localpart if needed.

Testing & Diagnostics

Quick Commands

# Test notification (dry run - nothing is sent)
sudo /usr/local/bin/update-notifier.sh --dry-run

# Send a real test notification
sudo /usr/local/bin/update-notifier.sh

# Comprehensive diagnostics
sudo ./diagnose-config.sh

# Health check (exit 0/1/2, for monitoring)
sudo /usr/local/bin/patch-gremlin-health-check.sh

# Full deployment test (exits non-zero if anything failed)
sudo ./test-deployment.sh --skip-live

# Verbose logging on/off/show
sudo ./configure-verbosity.sh --verbose
sudo ./configure-verbosity.sh --quiet
sudo ./configure-verbosity.sh --show

# Machine-readable last-run state
cat /var/lib/patch-gremlin/state

# View logs
sudo journalctl -t patch-gremlin --since "1 day ago"
sudo journalctl -f -t patch-gremlin

Running the Test Suite

The project ships a sandboxed bats suite that never writes outside a temp directory or touches the network:

sudo apt-get install -y bats shellcheck
./tests/run.sh

Monitoring Integration

Health Check (Exit Codes)

sudo /usr/local/bin/patch-gremlin-health-check.sh
# 0 = Healthy
# 1 = Warning (non-critical)
# 2 = Critical (service broken)

Use --quiet to suppress output and rely on the exit code alone.

Nagios / Icinga

sudo cp monitoring/nagios-check.sh /usr/local/bin/
/usr/local/bin/nagios-check.sh
# OK - Patch Gremlin healthy | last_run_age_hours=3 status=updated pending=0 ...

Prometheus

Write to the node_exporter textfile collector directory:

sudo cp monitoring/prometheus-exporter.sh /usr/local/bin/
*/5 * * * * root /usr/local/bin/prometheus-exporter.sh \
  > /var/lib/node_exporter/patch_gremlin.prom.tmp \
  && mv /var/lib/node_exporter/patch_gremlin.prom.tmp \
        /var/lib/node_exporter/patch_gremlin.prom

Exported metrics:

Metric	Meaning
patch_gremlin_health	1 = healthy, 0 = unhealthy
patch_gremlin_last_run_timestamp_seconds	Unix time of the last run
patch_gremlin_last_notification_success	1 if the last run delivered
patch_gremlin_packages_upgraded	Packages upgraded in the last run
patch_gremlin_pending_updates	Packages still awaiting upgrade
patch_gremlin_pending_security_updates	Of those, security updates
patch_gremlin_status_info{status="…"}	Last run status as a label

Diagnostics (Human-Readable)

sudo ./diagnose-config.sh

Shows:

• Secret storage mode (LOCAL vs DOPPLER)
• Configured webhooks
• Service status
• Timer schedule
• Live notification test
• Troubleshooting tips

Files & Structure

Installed Files

/usr/local/bin/
├── update-notifier.sh                  # Main notification script
└── patch-gremlin-health-check.sh       # Health check for monitoring

/etc/update-notifier/
├── env                                 # Mode 600 - secrets / secret names
└── secrets.conf                        # Mode 600 - local mode endpoints

/var/lib/patch-gremlin/
└── state                               # Last-run status, counts, timestamp

/var/backups/patch-gremlin/             # Config backups (NOT in apt.conf.d)

/etc/systemd/system/
├── update-notifier.service             # Notification service (hardened)
├── update-notifier.timer               # Optional heartbeat (off by default)
├── apt-daily-upgrade.service.d/        # (Debian) ExecStartPost trigger
│   └── patch-gremlin.conf
└── apt-daily-upgrade.timer.d/          # (Debian) Schedule override
    └── patch-gremlin.conf

/etc/apt/apt.conf.d/                    # (Debian only)
├── 20auto-upgrades                     # APT periodic config
└── 50unattended-upgrades               # Unattended-upgrades config

/etc/dnf/automatic.conf                 # (RHEL only)
/etc/systemd/system/dnf-automatic.service.d/
└── patch-gremlin.conf                  # (RHEL only) ExecStartPost trigger

Repository Scripts

setup-unattended-upgrades.sh    # Installer (interactive or --non-interactive)
update-notifier.sh              # Notification script (copied to /usr/local/bin)
uninstall.sh                    # Removal (--all, --purge-backups)
config.example.sh               # Template for Doppler secret-name overrides

# User tools
diagnose-config.sh              # Detailed diagnostics + troubleshooting
health-check.sh                 # Monitoring health check (exit 0/1/2)
configure-verbosity.sh          # --quiet / --verbose / --show
fix-verbose-now.sh              # Deprecated shim for --quiet
test-deployment.sh              # On-host verification, exits non-zero on failure

# Monitoring integrations
monitoring/
├── nagios-check.sh             # Nagios/Icinga check
└── prometheus-exporter.sh      # Prometheus textfile-collector metrics

# Tests
tests/
├── notifier.bats               # Log parsing, status, JSON payload validity
├── setup.bats                  # Staged installs, validation, secret handling
├── lifecycle.bats              # Install -> configure -> uninstall round trips
├── monitoring.bats             # Health check + Nagios + Prometheus
├── fixtures/                   # Real-format unattended-upgrades / dnf logs
└── helpers/                    # curl, apt, dnf, systemctl stubs

Advanced Configuration

Environment Variables

Customize script behavior:

# Testing
PATCH_GREMLIN_DRY_RUN=true              # Build but never send (same as --dry-run)

# Behaviour
PATCH_GREMLIN_NOTIFY_ON=changes         # Stay quiet when nothing changed
PATCH_GREMLIN_BOT_NAME="Patch Gremlin"  # Display name in notifications
PATCH_GREMLIN_HOSTNAME=web01.example.com # Override the reported host name
PATCH_GREMLIN_MAX_PACKAGE_NAMES=20      # Package names listed before "and N more"

# Performance tuning
PATCH_GREMLIN_MAX_LOG_LINES=100         # Log lines inspected (default: 50)
PATCH_GREMLIN_RETRY_COUNT=5             # HTTP retries (default: 3)
PATCH_GREMLIN_RETRY_DELAY=5             # Retry delay seconds (default: 2)
PATCH_GREMLIN_CURL_TIMEOUT=60           # HTTP timeout seconds (default: 30)

# Paths (mainly for testing - see CONTRIBUTING.md)
PATCH_GREMLIN_LOG_FILE=/path/to.log     # Override upgrade-log discovery
PATCH_GREMLIN_SECRETS_FILE=/path        # Override the secrets file
PATCH_GREMLIN_STATE_DIR=/path           # Override the state directory

Client-side retries stop early on a 4xx other than 429, since a rejected payload will not become valid on a retry.

Adding ntfy or Gotify

# ntfy (local mode)
sudo -E env SECRET_MODE=local \
  LOCAL_NTFY_URL='https://ntfy.sh' LOCAL_NTFY_TOPIC='my-servers' \
  ./setup-unattended-upgrades.sh --non-interactive

# Gotify
sudo -E env SECRET_MODE=local \
  LOCAL_GOTIFY_URL='https://gotify.example.com/message' \
  LOCAL_GOTIFY_TOKEN='AxxxxxxxxxxxxxX' \
  ./setup-unattended-upgrades.sh --non-interactive

Generic JSON Webhook

Set LOCAL_WEBHOOK_URL to receive a machine-readable payload instead of a chat-formatted message:

{
  "host": "web01",
  "status": "updated",
  "summary": "3 package(s) updated",
  "detail": "✅ Updates Applied: 3 package(s)\n   libssl3, openssl, curl",
  "upgraded_count": 3,
  "pending_total": 12,
  "pending_security": 2,
  "timestamp": "2026-08-21T02:14:07.000Z",
  "version": "2.0.1"
}

Adjusting Verbosity

Change log verbosity after installation:

# Interactive toggle
sudo ./configure-verbosity.sh

# Shows current setting, lets you enable/disable verbose DEBUG output

Quiet mode (default):

• Shows package updates installed
• Shows errors if they occur
• Clean, readable logs

Verbose mode:

• Shows detailed DEBUG from unattended-upgrades
• Package checking details
• Origin pattern matching
• Useful for troubleshooting

Upgrading Existing Installation

If Patch Gremlin is already installed, the setup script will detect it and offer options:

Options:
  1) Reinstall/Reconfigure (preserves nothing)
  2) Update scripts only (keeps configuration)
  3) Cancel installation

Choose option 2 to update the scripts while keeping your current configuration.

Troubleshooting

Quick Diagnostics

# Run comprehensive diagnostics
sudo ./diagnose-config.sh

This will check:

• Secret storage configuration
• Systemd service setup
• Timer status and schedule
• Network connectivity
• Live notification test

Common Issues

1. LOCAL mode but no notifications sent

# Check secrets file exists and has content
sudo cat /etc/update-notifier/secrets.conf

# Edit and add webhook URLs
sudo nano /etc/update-notifier/secrets.conf

# Test notification
sudo /usr/local/bin/update-notifier.sh

2. DOPPLER mode authentication fails

# Re-authenticate
sudo doppler login
sudo doppler setup --project your-project --config your-config

# Verify secrets exist
doppler secrets --only-names

# Check service has token
systemctl show update-notifier.service | grep DOPPLER_TOKEN

3. Timer not running

# Check timer status
sudo systemctl status update-notifier.timer

# Enable and start if needed
sudo systemctl enable --now update-notifier.timer

# View schedule
sudo systemctl list-timers update-notifier*

4. Script runs but notifications fail

# Check recent logs
sudo journalctl -t patch-gremlin --since "1 hour ago"

# Test with dry run
sudo PATCH_GREMLIN_DRY_RUN=true /usr/local/bin/update-notifier.sh

# Check webhook URLs are correct
# LOCAL mode:
sudo cat /etc/update-notifier/secrets.conf

# DOPPLER mode:
doppler secrets get UPDATE_NOTIFIER_DISCORD_WEBHOOK --plain

5. Too much DEBUG output in logs

# Disable verbose logging
sudo ./configure-verbosity.sh
# Choose option 1 (Disable)

6. Matrix login fails

Check username format - should be just the localpart:

# LOCAL mode:
grep MATRIX_USERNAME /etc/update-notifier/secrets.conf
# Should show: MATRIX_USERNAME="username"
# NOT: MATRIX_USERNAME="@username:matrix.org"

# DOPPLER mode:
doppler secrets get UPDATE_NOTIFIER_MATRIX_USERNAME --plain
# Should show just: username

Getting Help

1. Run diagnostics: sudo ./diagnose-config.sh
2. Check logs: sudo journalctl -t patch-gremlin --since "1 day ago"
3. See GitHub Issues
4. Join Discord or Matrix

Uninstallation

sudo ./uninstall.sh

This will remove:

• Notification script from /usr/local/bin/
• Systemd service and timer
• Configuration files
• Post-upgrade hooks (APT or DNF)
• Local secrets file (if present)

Note: Doppler secrets are NOT removed (they may be used by other systems).

Requirements

• OS: Debian 12+, Ubuntu 20.04+, RHEL 8+, Rocky 8+, AlmaLinux 8+, Amazon Linux 2023, Fedora 35+
• Access: Root/sudo privileges
• Secrets: At least one notification platform configured
• Optional: Doppler CLI (only if using Doppler mode)

Supported Operating Systems

Debian-based:

• Debian 12 (Bookworm), 13 (Trixie)
• Ubuntu 20.04 LTS, 22.04 LTS, 24.04 LTS
• Raspberry Pi OS
• Other Debian derivatives

RHEL-based:

• Red Hat Enterprise Linux 8, 9
• Rocky Linux 8, 9
• AlmaLinux 8, 9
• Amazon Linux 2023
• Fedora 35+

How It Works

Update Process

Debian/Ubuntu:

1. unattended-upgrades runs automatically (via systemd timer or apt-daily)
2. Security updates are downloaded and installed
3. APT post-invoke hook triggers update-notifier.sh
4. Script analyzes logs and sends notifications

RHEL/Fedora/Amazon Linux:

1. dnf-automatic runs automatically (via systemd timer)
2. Security updates are downloaded and installed
3. DNF systemd hook triggers update-notifier.sh
4. Script analyzes logs and sends notifications

Notification Script Logic

1. Load Configuration

   • Check if LOCAL mode: read /etc/update-notifier/secrets.conf
   • Check if DOPPLER mode: use environment variables from systemd service
   • Fall back to Doppler CLI if needed

2. Analyze Logs

   • Parse system logs (syslog or journald)
   • Detect actual package updates vs no updates
   • Extract package names and counts
   • Determine notification color/priority

3. Send Notifications

   • Format message for each platform
   • Include hostname, timestamp (timezone-aware), log excerpt
   • Retry on failure (configurable retries and delays)
   • Log success/failure to syslog

4. Clean Exit

   • Return appropriate exit code
   • Clean up temporary files

Security

• Local secrets: File is chmod 600 (root read/write only)
• Doppler secrets: Service token embedded in systemd Environment directives
• No passwords in logs: All credentials are redacted from log output
• HTTPS only: All webhook calls use secure connections

License

Dual License: MPL-2.0 OR Commercial

• Open Source Use: Licensed under the Mozilla Public License 2.0 (MPL-2.0)
• Commercial Use: IF planning on modifying, requires contacting @ChiefGyk3D
  • Most requests approved free of charge with the condition that improvements be contributed back
  • See LICENSE for full details

Contributing

Issues and pull requests welcome! By contributing, you agree to license your contributions under the same dual license (MPL-2.0 / Commercial).

CI. Shell lint and tests, security scanning and releases run through the reusable workflows in git-your-ship-together. Branch protection requires these checks:

• ci / CI green (ShellCheck, bash -n on four distributions, workflow lint)
• security / CodeQL, security / Secret scan (gitleaks) and security / Semgrep

The documentation checks are path-filtered to Markdown and are not required.

Ways to contribute:

• 🐛 Report bugs
• 💡 Suggest features
• 📖 Improve documentation
• 🔧 Submit code improvements
• ⭐ Star the repository
• 📢 Share with others

---

💬 Community & Support

Community Channels

• GitHub Issues - Bug reports and feature requests
• Discord Server - Real-time chat and support
• Matrix Space - Federated chat alternative

Stay Updated

• Watch releases - Get notified of new versions
• Follow development - Track progress on roadmap
• Join discussions - Participate in feature planning

---

💝 Support Development

If you find Patch Gremlin useful, consider supporting development:

Recurring Support

Patreon	StreamElements

Cryptocurrency Tips

	Bitcoin bc1qztdzcy2wyavj2tsuandu4p0tcklzttvdnzalla
	Monero 84Y34QubRwQYK2HNviezeH9r6aRcPvgWmKtDkN3EwiuVbp6sNLhm9ffRgs6BA9X1n9jY7wEN16ZEpiEngZbecXseUrW8SeQ
	Ethereum 0x554f18cfB684889c3A60219BDBE7b050C39335ED

---

Made with ❤️ by ChiefGyk3D

Author & Socials

Mastodon	Bluesky	Twitch	YouTube	Kick	TikTok	Discord	Matrix

_{ChiefGyk3D is the author of Patch Gremlin}