Merge pull request 'feat: refactor apps' (#5637) from tmp/refactor-38 into main

Reviewed-on: #5637

clusters/cl01tl/helm/speedtest-exporter/Chart.yaml

@@ -4,11 +4,11 @@ version: 1.0.0
 description: Speedtest Exporter
 keywords:
   - speedtest-exporter
-  - internet
-  - metrics
-home: https://wiki.alexlebens.dev/s/843d4622-ea44-40bc-8fd1-1a6b71ba9a57
+  - internet-speed
+home: https://docs.alexlebens.dev/applications/speedtest-exporter/
 sources:
   - https://github.com/MiguelNdeCarvalho/speedtest-exporter
+  - https://github.com/miguelndecarvalho/speedtest-exporter/pkgs/container/speedtest-exporter
   - https://gitlab.com/alexander-chernov/helm/speedtest-exporter
 maintainers:
   - name: alexlebens

clusters/cl01tl/helm/speedtest-exporter/values.yaml

@@ -1,7 +1,7 @@
 speedtest-exporter:
   image:
     repository: ghcr.io/miguelndecarvalho/speedtest-exporter
-    tag: v3.5.4
+    tag: v3.5.4@sha256:f1064d49124c7fc45faabb87c6c876a2fd04e92b3dc14d4b871301217ba30fed
   securityContext:
     capabilities:
       drop:
@@ -9,8 +9,9 @@ speedtest-exporter:
     readOnlyRootFilesystem: true
     runAsNonRoot: true
     runAsUser: 1000
+  resources:
+    limits:
+      cpu: 1m
+      memory: 30Mi
   serviceMonitor:
-    enabled: true
-    namespace: speedtest-exporter
-    interval: "180m"
-    scrapeTimeout: "2m"
+    interval: 180m

clusters/cl01tl/helm/stack/Chart.yaml

@@ -3,11 +3,9 @@ name: stack
 version: 1.0.0
 description: Stack
 keywords:
-  - argocd
-  - application
   - stack
-  - deployment
-home: https://wiki.alexlebens.dev/s/0c2d1896-710d-4972-9bc8-08d71987428a
+  - argocd
+home: https://docs.alexlebens.dev/applications/stack/
 sources:
   - https://github.com/argoproj/argo-cd
   - https://gitea.alexlebens.dev/alexlebens/infrastructure

clusters/cl01tl/helm/stalwart/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.10.0
+  version: 7.11.2
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.0
+  version: 0.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:6ffe4bd6af377f2ba5134389027e86085928d5e1108bb5ecf0d4b1e4cc908b67
-generated: "2026-03-15T20:10:31.966910173Z"
+digest: sha256:c4a92f0283952a59f2e4add1a1b9522d2f9eb0a37dce32aa6104e3087c0b5503
+generated: "2026-04-06T20:21:29.186267-05:00"

clusters/cl01tl/helm/stalwart/Chart.yaml

@@ -5,15 +5,14 @@ description: Stalwart
 keywords:
   - stalwart
   - email
-  - smtp
-home: https://wiki.alexlebens.dev/s/e10d3a19-9329-4443-a023-6ab70ffaff6e
+home: https://docs.alexlebens.dev/applications/stalwart/
 sources:
   - https://github.com/stalwartlabs/mail-server
-  - https://github.com/elastic/elasticsearch
-  - https://github.com/cloudnative-pg/cloudnative-pg
-  - https://hub.docker.com/r/stalwartlabs/mail-server
+  - https://github.com/stalwartlabs/stalwart/pkgs/container/stalwart
   - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
   - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/postgres-cluster
+  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/valkey
+  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/volsync-target
 maintainers:
   - name: alexlebens
 dependencies:
@@ -23,11 +22,11 @@ dependencies:
     repository: https://bjw-s-labs.github.io/helm-charts/
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.10.0
+    version: 7.11.2
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
-    version: 0.4.0
+    version: 0.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/stalwart/templates/external-secret.yaml

@@ -14,22 +14,13 @@ spec:
   data:
     - secretKey: username
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cl01tl/stalwart/elasticsearch
-        metadataPolicy: None
         property: username
     - secretKey: password
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cl01tl/stalwart/elasticsearch
-        metadataPolicy: None
         property: password
     - secretKey: roles
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cl01tl/stalwart/elasticsearch
-        metadataPolicy: None
         property: roles

clusters/cl01tl/helm/stalwart/values.yaml

@@ -4,17 +4,15 @@ stalwart:
       type: deployment
       replicas: 1
       strategy: Recreate
-      revisionHistoryLimit: 3
       containers:
         main:
           image:
-            repository: stalwartlabs/stalwart
-            tag: v0.15.5
-            pullPolicy: IfNotPresent
+            repository: ghcr.io/stalwartlabs/stalwart
+            tag: v0.15.5@sha256:dcf575db2d53d9ef86d6ced8abe4ba491984659a0f8862cc6079ee7b41c3c568
           resources:
             requests:
               cpu: 10m
-              memory: 128Mi
+              memory: 100Mi
   service:
     main:
       controller: main
@@ -22,23 +20,18 @@ stalwart:
         http:
           port: 80
           targetPort: 8080
-          protocol: HTTP
         smtp:
           port: 25
           targetPort: 25
-          protocol: TCP
         smtps:
           port: 465
           targetPort: 465
-          protocol: TCP
         imap:
           port: 143
           targetPort: 143
-          protocol: TCP
         imaps:
           port: 993
           targetPort: 993
-          protocol: TCP
   route:
     main:
       kind: HTTPRoute
@@ -51,11 +44,8 @@ stalwart:
         - stalwart.alexlebens.net
       rules:
         - backendRefs:
-            - group: ''
-              kind: Service
-              name: stalwart
+            - name: stalwart
               port: 80
-              weight: 100
           matches:
             - path:
                 type: PathPrefix
@@ -66,7 +56,6 @@ stalwart:
       storageClass: ceph-block
       accessMode: ReadWriteOnce
       size: 10Gi
-      retain: true
       advancedMounts:
         main:
           main:
@@ -85,35 +74,12 @@ postgres-18-cluster:
         destinationBucket: postgres-backups
         externalSecretCredentialPath: /garage/home-infra/postgres-backups
         isWALArchiver: true
-      # - name: garage-remote
-      #   index: 1
-      #   destinationBucket: postgres-backups
-      #   externalSecretCredentialPath: /garage/home-infra/postgres-backups
-      #   retentionPolicy: "90d"
-      #   data:
-      #     compression: bzip2
-      # - name: external
-      #   index: 1
-      #   endpointURL: https://nyc3.digitaloceanspaces.com
-      #   destinationBucket: postgres-backups-ce540ddf106d186bbddca68a
-      #   externalSecretCredentialPath: /garage/home-infra/postgres-backups
-      #   isWALArchiver: false
     scheduledBackups:
       - name: live-backup
         suspend: false
         immediate: true
         schedule: "0 5 16 * * *"
         backupName: garage-local
-      # - name: weekly-backup
-      #   suspend: true
-      #   immediate: true
-      #   schedule: "0 0 4 * * SAT"
-      #   backupName: garage-remote
-      # - name: daily-backup
-      #   suspend: true
-      #   immediate: true
-      #   schedule: "0 0 0 * * *"
-      #   backupName: external
 volsync-target-config:
   pvcTarget: stalwart-config
   local:

renovate.json

@@ -33,7 +33,7 @@
         "/(^|/)templates/.*\\.yaml$/"
       ],
       "matchStrings": [
-        "#\\s*renovate:\\s*datasource=(?<datasource>\\S+)\\s+depName=(?<depName>\\S+)(?:\\s+versioning=(?<versioning>\\S+))?\\s+tag:\\s*[\"']?(?<currentValue>[^@\\s\"']+)(?:@(?<currentDigest>sha256:[a-f0-9]+))?[\"']?"
+        "#\\s*renovate:\\s*datasource=(?<datasource>\\S+)\\s+depName=(?<depName>\\S+)(?:\\s+versioning=(?<versioning>\\S+))?\\s+(?:tag|version):\\s*[\"']?(?<currentValue>[^@\\s\"']+)(?:@(?<currentDigest>sha256:[a-f0-9]+))?[\"']?"
       ],
       "versioningTemplate": "{{#if versioning}}{{{versioning}}}{{else}}docker{{/if}}"
     },