From cb4832443d36bed87bc2a3ec7caf9184527482d2 Mon Sep 17 00:00:00 2001
From: gitea-bot <gitea-bot@alexlebens.net>
Date: Sun, 4 Jan 2026 20:46:34 +0000
Subject: [PATCH] Automated Manifest Update (#3055)

This PR contains newly rendered Kubernetes manifests automatically generated by the CI workflow.

Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/3055
Co-authored-by: gitea-bot <gitea-bot@alexlebens.net>
Co-committed-by: gitea-bot <gitea-bot@alexlebens.net>
---
 .../manifests/actual/Deployment-actual.yaml      |  2 +-
 .../qbittorrent/Deployment-qbittorrent-main.yaml | 16 +++++++++++++---
 ...xternalSecret-qbittorrent-wireguard-conf.yaml | 14 ++++++++++++++
 3 files changed, 28 insertions(+), 4 deletions(-)

diff --git a/clusters/cl01tl/manifests/actual/Deployment-actual.yaml b/clusters/cl01tl/manifests/actual/Deployment-actual.yaml
index f3ffe1d09..c3082a65b 100644
--- a/clusters/cl01tl/manifests/actual/Deployment-actual.yaml
+++ b/clusters/cl01tl/manifests/actual/Deployment-actual.yaml
@@ -37,7 +37,7 @@ spec:
         - env:
             - name: TZ
               value: US/Central
-          image: ghcr.io/actualbudget/actual:25.12.0
+          image: ghcr.io/actualbudget/actual:26.1.0
           imagePullPolicy: IfNotPresent
           livenessProbe:
             exec:
diff --git a/clusters/cl01tl/manifests/qbittorrent/Deployment-qbittorrent-main.yaml b/clusters/cl01tl/manifests/qbittorrent/Deployment-qbittorrent-main.yaml
index 379612360..e0c96ad43 100644
--- a/clusters/cl01tl/manifests/qbittorrent/Deployment-qbittorrent-main.yaml
+++ b/clusters/cl01tl/manifests/qbittorrent/Deployment-qbittorrent-main.yaml
@@ -77,6 +77,16 @@ spec:
                 secretKeyRef:
                   key: private-key
                   name: qbittorrent-wireguard-conf
+            - name: UPDATER_PROTONVPN_EMAIL
+              valueFrom:
+                secretKeyRef:
+                  key: proton-email
+                  name: qbittorrent-wireguard-conf
+            - name: UPDATER_PROTONVPN_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  key: proton-password
+                  name: qbittorrent-wireguard-conf
             - name: VPN_PORT_FORWARDING
               value: "on"
             - name: VPN_PORT_FORWARDING_UP_COMMAND
@@ -87,9 +97,9 @@ spec:
               value: 192.168.1.0/24,10.244.0.0/16
             - name: FIREWALL_INPUT_PORTS
               value: 8080,9022
-            - name: DOT
-              value: "off"
-          image: ghcr.io/qdm12/gluetun:v3.40.4@sha256:e10584de1f82d8999e5e6c3111901d9d56a2eed21151fb96af060f390bbdfba8
+            - name: DNS_UPSTREAM_RESOLVER_TYPE
+              value: dot
+          image: ghcr.io/qdm12/gluetun:v3.41.0@sha256:6b54856716d0de56e5bb00a77029b0adea57284cf5a466f23aad5979257d3045
           imagePullPolicy: IfNotPresent
           lifecycle:
             postStart:
diff --git a/clusters/cl01tl/manifests/qbittorrent/ExternalSecret-qbittorrent-wireguard-conf.yaml b/clusters/cl01tl/manifests/qbittorrent/ExternalSecret-qbittorrent-wireguard-conf.yaml
index b92d17764..54b64766e 100644
--- a/clusters/cl01tl/manifests/qbittorrent/ExternalSecret-qbittorrent-wireguard-conf.yaml
+++ b/clusters/cl01tl/manifests/qbittorrent/ExternalSecret-qbittorrent-wireguard-conf.yaml
@@ -19,3 +19,17 @@ spec:
         key: /protonvpn/conf/cl01tl
         metadataPolicy: None
         property: private-key
+    - secretKey: proton-email
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /protonvpn/conf/cl01tl
+        metadataPolicy: None
+        property: email
+    - secretKey: proton-password
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /protonvpn/conf/cl01tl
+        metadataPolicy: None
+        property: password