From 2b58087e06678542693bc5db2205b492a450812a Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Fri, 20 Mar 2026 16:03:03 +0000 Subject: [PATCH 01/10] chore(deps): update searxng/searxng:latest docker digest to aa1dca9 (#4925) --- clusters/cl01tl/helm/searxng/values.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/clusters/cl01tl/helm/searxng/values.yaml b/clusters/cl01tl/helm/searxng/values.yaml index bfdb97a6f..91052255a 100644 --- a/clusters/cl01tl/helm/searxng/values.yaml +++ b/clusters/cl01tl/helm/searxng/values.yaml @@ -9,7 +9,7 @@ searxng: main: image: repository: searxng/searxng - tag: latest@sha256:67a3e2e339eb33e60d16df2b328961583c908c4b6f3a176b23ecb9ddd6f137fd + tag: latest@sha256:aa1dca9aa92b185649d67ea2fdd1891a221de08054dff9dca141c1806c8c3e91 pullPolicy: IfNotPresent env: - name: SEARXNG_BASE_URL @@ -39,7 +39,7 @@ searxng: main: image: repository: searxng/searxng - tag: latest@sha256:67a3e2e339eb33e60d16df2b328961583c908c4b6f3a176b23ecb9ddd6f137fd + tag: latest@sha256:aa1dca9aa92b185649d67ea2fdd1891a221de08054dff9dca141c1806c8c3e91 pullPolicy: IfNotPresent env: - name: SEARXNG_BASE_URL From 96eae46b5e53fce0c6d8a889e0e309f149806d6e Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Fri, 20 Mar 2026 20:44:59 +0000 Subject: [PATCH 02/10] chore(deps): update kube-prometheus-stack docker tag to v82.13.0 (#4928) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This PR contains the following updates: | Package | Update | Change | |---|---|---| | [kube-prometheus-stack](https://github.com/prometheus-operator/kube-prometheus) ([source](https://github.com/prometheus-community/helm-charts)) | minor | `82.12.0` → `82.13.0` | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/2) for more information. --- ### Release Notes
prometheus-community/helm-charts (kube-prometheus-stack) ### [`v82.13.0`](https://github.com/prometheus-community/helm-charts/releases/tag/kube-prometheus-stack-82.13.0) [Compare Source](https://github.com/prometheus-community/helm-charts/compare/kube-prometheus-stack-82.12.0...kube-prometheus-stack-82.13.0) kube-prometheus-stack collects Kubernetes manifests, Grafana dashboards, and Prometheus rules combined with documentation and scripts to provide easy to operate end-to-end Kubernetes cluster monitoring with Prometheus using the Prometheus Operator. #### What's Changed - \[kube-prometheus-stack] Update kube-prometheus-stack dependency non-major updates by [@​renovate](https://github.com/renovate)\[bot] in [#​6758](https://github.com/prometheus-community/helm-charts/pull/6758) **Full Changelog**:
--- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/4928 Co-authored-by: Renovate Bot Co-committed-by: Renovate Bot --- clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock | 6 +++--- clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock b/clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock index ed819451d..62cdc16c1 100644 --- a/clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock +++ b/clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock @@ -1,12 +1,12 @@ dependencies: - name: kube-prometheus-stack repository: oci://ghcr.io/prometheus-community/charts - version: 82.12.0 + version: 82.13.0 - name: app-template repository: https://bjw-s-labs.github.io/helm-charts/ version: 4.6.2 - name: valkey repository: oci://harbor.alexlebens.net/helm-charts version: 0.4.0 -digest: sha256:05c8453c68596a58884eb65cc0e2f86f5aaa764a63fe4b8c53d40b5f9b40670e -generated: "2026-03-19T09:02:27.865169773Z" +digest: sha256:1d90bebd9c0afd20f8ff780edd15da18b20f89cf35fd85832d6d8d44b2e0544b +generated: "2026-03-20T18:02:38.368086545Z" diff --git a/clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml b/clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml index 3d9ef91c5..1b2443760 100644 --- a/clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml +++ b/clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml @@ -20,7 +20,7 @@ maintainers: - name: alexlebens dependencies: - name: kube-prometheus-stack - version: 82.12.0 + version: 82.13.0 repository: oci://ghcr.io/prometheus-community/charts - name: app-template alias: ntfy-alertmanager From a25522fbf0ce293bc49e6978d9e316be86034967 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Fri, 20 Mar 2026 20:46:54 +0000 Subject: [PATCH 03/10] chore(deps): update searxng/searxng:latest docker digest to b41b861 (#4930) --- clusters/cl01tl/helm/searxng/values.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/clusters/cl01tl/helm/searxng/values.yaml b/clusters/cl01tl/helm/searxng/values.yaml index 91052255a..bccb55f21 100644 --- a/clusters/cl01tl/helm/searxng/values.yaml +++ b/clusters/cl01tl/helm/searxng/values.yaml @@ -9,7 +9,7 @@ searxng: main: image: repository: searxng/searxng - tag: latest@sha256:aa1dca9aa92b185649d67ea2fdd1891a221de08054dff9dca141c1806c8c3e91 + tag: latest@sha256:b41b861ff61c7ab36dfb9b7901744c44d5a3e13e51c624d6b1c2ede027ee0dec pullPolicy: IfNotPresent env: - name: SEARXNG_BASE_URL @@ -39,7 +39,7 @@ searxng: main: image: repository: searxng/searxng - tag: latest@sha256:aa1dca9aa92b185649d67ea2fdd1891a221de08054dff9dca141c1806c8c3e91 + tag: latest@sha256:b41b861ff61c7ab36dfb9b7901744c44d5a3e13e51c624d6b1c2ede027ee0dec pullPolicy: IfNotPresent env: - name: SEARXNG_BASE_URL From b5fa28c44b705e0fe7006d474823010794ced355 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Fri, 20 Mar 2026 20:48:54 +0000 Subject: [PATCH 04/10] chore(deps): update helm release argo-workflows to v1.0.5 (#4932) --- clusters/cl01tl/helm/argo-workflows/Chart.lock | 6 +++--- clusters/cl01tl/helm/argo-workflows/Chart.yaml | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/clusters/cl01tl/helm/argo-workflows/Chart.lock b/clusters/cl01tl/helm/argo-workflows/Chart.lock index ed748676a..e40bf4241 100644 --- a/clusters/cl01tl/helm/argo-workflows/Chart.lock +++ b/clusters/cl01tl/helm/argo-workflows/Chart.lock @@ -1,12 +1,12 @@ dependencies: - name: argo-workflows repository: https://argoproj.github.io/argo-helm - version: 1.0.4 + version: 1.0.5 - name: argo-events repository: https://argoproj.github.io/argo-helm version: 2.4.21 - name: postgres-cluster repository: oci://harbor.alexlebens.net/helm-charts version: 7.10.0 -digest: sha256:84e79ab455d1e8e5d12637b4f1fcc87efaa04f51558824ab9fa1f38963198c8b -generated: "2026-03-20T01:09:49.976096171Z" +digest: sha256:d0d7ebf1c0013d001aa2f17d04a6d3f3d7a1fa7d5c62792eef856b87c24eb26e +generated: "2026-03-20T20:48:30.830922259Z" diff --git a/clusters/cl01tl/helm/argo-workflows/Chart.yaml b/clusters/cl01tl/helm/argo-workflows/Chart.yaml index 8e8a267b3..10c59b31a 100644 --- a/clusters/cl01tl/helm/argo-workflows/Chart.yaml +++ b/clusters/cl01tl/helm/argo-workflows/Chart.yaml @@ -18,7 +18,7 @@ maintainers: - name: alexlebens dependencies: - name: argo-workflows - version: 1.0.4 + version: 1.0.5 repository: https://argoproj.github.io/argo-helm - name: argo-events version: 2.4.21 From d59fd7a0a6fd6f3b9d9fb6f889dc335afcc69595 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Fri, 20 Mar 2026 20:51:00 +0000 Subject: [PATCH 05/10] chore(deps): update helm release traefik to v39.0.6 (#4934) --- clusters/cl01tl/helm/traefik/Chart.lock | 6 +++--- clusters/cl01tl/helm/traefik/Chart.yaml | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/clusters/cl01tl/helm/traefik/Chart.lock b/clusters/cl01tl/helm/traefik/Chart.lock index bd8f34ba3..6525d5330 100644 --- a/clusters/cl01tl/helm/traefik/Chart.lock +++ b/clusters/cl01tl/helm/traefik/Chart.lock @@ -1,9 +1,9 @@ dependencies: - name: traefik repository: https://traefik.github.io/charts - version: 39.0.5 + version: 39.0.6 - name: traefik-crds repository: https://traefik.github.io/charts version: 1.15.0 -digest: sha256:8edf8d2dcabdba2c2b8d6a9508f001ba5ef4bec205423f864b92f2adedd73b60 -generated: "2026-03-16T15:32:49.364653199Z" +digest: sha256:45b11c0cb1083daff76df3c90ecf7d73fc09979239bdc0f272d826fab92a3ba4 +generated: "2026-03-20T20:50:42.131002257Z" diff --git a/clusters/cl01tl/helm/traefik/Chart.yaml b/clusters/cl01tl/helm/traefik/Chart.yaml index 3c5688334..99055c2f7 100644 --- a/clusters/cl01tl/helm/traefik/Chart.yaml +++ b/clusters/cl01tl/helm/traefik/Chart.yaml @@ -15,7 +15,7 @@ maintainers: - name: alexlebens dependencies: - name: traefik - version: 39.0.5 + version: 39.0.6 repository: https://traefik.github.io/charts - name: traefik-crds version: 1.15.0 From f4922e05ee98912ea043067241a1d20282a93529 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Fri, 20 Mar 2026 21:50:45 +0000 Subject: [PATCH 06/10] chore(deps): update dependency external-secrets/external-secrets to v2.2.0 (#4923) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This PR contains the following updates: | Package | Update | Change | |---|---|---| | [external-secrets/external-secrets](https://github.com/external-secrets/external-secrets) | minor | `v2.1.0` → `v2.2.0` | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/2) for more information. --- ### Release Notes
external-secrets/external-secrets (external-secrets/external-secrets) ### [`v2.2.0`](https://github.com/external-secrets/external-secrets/releases/tag/v2.2.0) [Compare Source](https://github.com/external-secrets/external-secrets/compare/v2.1.0...v2.2.0) Image: `ghcr.io/external-secrets/external-secrets:v2.2.0` Image: `ghcr.io/external-secrets/external-secrets:v2.2.0-ubi` Image: `ghcr.io/external-secrets/external-secrets:v2.2.0-ubi-boringssl` #### What's Changed ##### General - chore: release charts v2.1.0 by [@​Skarlso](https://github.com/Skarlso) in [#​6030](https://github.com/external-secrets/external-secrets/pull/6030) - chore: fix the stability doc by [@​Skarlso](https://github.com/Skarlso) in [#​6035](https://github.com/external-secrets/external-secrets/pull/6035) - fix(security): Fix vulnerabilities by [@​othomann](https://github.com/othomann) in [#​6052](https://github.com/external-secrets/external-secrets/pull/6052) - fix(aws): sync tags and resource policy even when secret value unchanged by [@​evs-secops](https://github.com/evs-secops) in [#​6025](https://github.com/external-secrets/external-secrets/pull/6025) - fix: publish now uses docker build v4 which required some changes by [@​Skarlso](https://github.com/Skarlso) in [#​6062](https://github.com/external-secrets/external-secrets/pull/6062) - feat(gcpsm): auto-detect projectID from GCP metadata server by [@​patjlm](https://github.com/patjlm) in [#​5922](https://github.com/external-secrets/external-secrets/pull/5922) - chore(templating): Remove years in license and their checks by [@​evrardj-roche](https://github.com/evrardj-roche) in [#​5955](https://github.com/external-secrets/external-secrets/pull/5955) - docs: Add Roche to official ADOPTERS by [@​evrardj-roche](https://github.com/evrardj-roche) in [#​6076](https://github.com/external-secrets/external-secrets/pull/6076) - feat: Add Last Sync column to ExternalSecret and PushSecret printers by [@​jaruwat-panturat](https://github.com/jaruwat-panturat) in [#​6068](https://github.com/external-secrets/external-secrets/pull/6068) - fix(onepassword): support native item IDs by [@​chadxz](https://github.com/chadxz) in [#​6073](https://github.com/external-secrets/external-secrets/pull/6073) - feat: extract LGTM processor to external JS file with tests by [@​mateenali66](https://github.com/mateenali66) in [#​6074](https://github.com/external-secrets/external-secrets/pull/6074) - feat: fail fast if LGTM label does not exist in repository by [@​mateenali66](https://github.com/mateenali66) in [#​6078](https://github.com/external-secrets/external-secrets/pull/6078) - feat(passbolt): add support for Passbolt V5 API by [@​cedricherzog-passbolt](https://github.com/cedricherzog-passbolt) in [#​5919](https://github.com/external-secrets/external-secrets/pull/5919) - fix(infisical): dataFrom.find.path should filter by secret path not name by [@​johnvox](https://github.com/johnvox) in [#​6086](https://github.com/external-secrets/external-secrets/pull/6086) - fix: disable the priority queue which misbehaves at scale by [@​Skarlso](https://github.com/Skarlso) in [#​6083](https://github.com/external-secrets/external-secrets/pull/6083) - chore: update go version to 1.26.1 by [@​Skarlso](https://github.com/Skarlso) in [#​6072](https://github.com/external-secrets/external-secrets/pull/6072) - docs(aws): fix PushSecret metadata indentation in resource policy exa... by [@​Br1an67](https://github.com/Br1an67) in [#​6056](https://github.com/external-secrets/external-secrets/pull/6056) - fix(aws): prevent EC2 IMDS fallback when explicit credentials are pro... by [@​Br1an67](https://github.com/Br1an67) in [#​6036](https://github.com/external-secrets/external-secrets/pull/6036) - feat(templating): Add certSANs function to extract SANs from certificates by [@​mzdeb](https://github.com/mzdeb) in [#​6058](https://github.com/external-secrets/external-secrets/pull/6058) - docs: document template.metadata labels/annotations behavior by [@​lucpas](https://github.com/lucpas) in [#​6102](https://github.com/external-secrets/external-secrets/pull/6102) - fix: CODEOWNERS are seriously out of date by [@​Skarlso](https://github.com/Skarlso) in [#​6106](https://github.com/external-secrets/external-secrets/pull/6106) - feat(helm): add readinessProbe support for external-secrets deployment by [@​AlexOQ](https://github.com/AlexOQ) in [#​5831](https://github.com/external-secrets/external-secrets/pull/5831) - fix: update grpc for CVE-2026-33186 by [@​Skarlso](https://github.com/Skarlso) in [#​6108](https://github.com/external-secrets/external-secrets/pull/6108) - feat(azurekv): add expiration time to azure kv secret by [@​muraliavarma](https://github.com/muraliavarma) in [#​5935](https://github.com/external-secrets/external-secrets/pull/5935) - feat: add path to cloud.ru provider by [@​heavyandrew](https://github.com/heavyandrew) in [#​5952](https://github.com/external-secrets/external-secrets/pull/5952) - fix(add-eso-version): fix separator line pattern in add\_eso\_version.sh script by [@​riccardomc](https://github.com/riccardomc) in [#​6113](https://github.com/external-secrets/external-secrets/pull/6113) ##### Dependencies - chore(deps): bump zizmorcore/zizmor-action from 0.5.0 to 0.5.2 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6038](https://github.com/external-secrets/external-secrets/pull/6038) - chore(deps): bump charset-normalizer from 3.4.4 to 3.4.5 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6047](https://github.com/external-secrets/external-secrets/pull/6047) - chore(deps): bump platformdirs from 4.9.2 to 4.9.4 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6050](https://github.com/external-secrets/external-secrets/pull/6050) - chore(deps): bump mkdocs-material from 9.7.3 to 9.7.4 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6049](https://github.com/external-secrets/external-secrets/pull/6049) - chore(deps): bump github/codeql-action from 4.32.4 to 4.32.6 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6039](https://github.com/external-secrets/external-secrets/pull/6039) - chore(deps): bump step-security/harden-runner from 2.15.0 to 2.15.1 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6043](https://github.com/external-secrets/external-secrets/pull/6043) - chore(deps): bump actions/dependency-review-action from 4.8.3 to 4.9.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6040](https://github.com/external-secrets/external-secrets/pull/6040) - chore(deps): bump crazy-max/ghaction-import-gpg from 6.3.0 to 7.0.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6044](https://github.com/external-secrets/external-secrets/pull/6044) - chore(deps): bump docker/login-action from 3.7.0 to 4.0.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6042](https://github.com/external-secrets/external-secrets/pull/6042) - chore(deps): bump docker/setup-buildx-action from 3.12.0 to 4.0.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6041](https://github.com/external-secrets/external-secrets/pull/6041) - chore(deps): bump docker/setup-qemu-action from 3.7.0 to 4.0.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6046](https://github.com/external-secrets/external-secrets/pull/6046) - chore(deps): bump aquasecurity/trivy-action from 0.34.1 to 0.35.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6048](https://github.com/external-secrets/external-secrets/pull/6048) - chore(deps): bump anchore/sbom-action from 0.23.0 to 0.23.1 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6093](https://github.com/external-secrets/external-secrets/pull/6093) - chore(deps): bump distroless/static from `28efbe9` to `47b2d72` by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6088](https://github.com/external-secrets/external-secrets/pull/6088) - chore(deps): bump ubi9/ubi from `cecb1cd` to `6ed9f6f` by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6087](https://github.com/external-secrets/external-secrets/pull/6087) - chore(deps): bump mkdocs-material from 9.7.4 to 9.7.5 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6096](https://github.com/external-secrets/external-secrets/pull/6096) - chore(deps): bump tornado from 6.5.4 to 6.5.5 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6094](https://github.com/external-secrets/external-secrets/pull/6094) - chore(deps): bump charset-normalizer from 3.4.5 to 3.4.6 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6095](https://github.com/external-secrets/external-secrets/pull/6095) - chore(deps): bump step-security/harden-runner from 2.15.1 to 2.16.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6089](https://github.com/external-secrets/external-secrets/pull/6089) - chore(deps): bump sigstore/cosign-installer from 4.0.0 to 4.1.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6092](https://github.com/external-secrets/external-secrets/pull/6092) - chore(deps): bump softprops/action-gh-release from 2.5.0 to 2.6.1 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6090](https://github.com/external-secrets/external-secrets/pull/6090) - chore(deps): bump actions/create-github-app-token from 2.2.1 to 3.0.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6091](https://github.com/external-secrets/external-secrets/pull/6091) #### New Contributors - [@​othomann](https://github.com/othomann) made their first contribution in [#​6052](https://github.com/external-secrets/external-secrets/pull/6052) - [@​evs-secops](https://github.com/evs-secops) made their first contribution in [#​6025](https://github.com/external-secrets/external-secrets/pull/6025) - [@​patjlm](https://github.com/patjlm) made their first contribution in [#​5922](https://github.com/external-secrets/external-secrets/pull/5922) - [@​jaruwat-panturat](https://github.com/jaruwat-panturat) made their first contribution in [#​6068](https://github.com/external-secrets/external-secrets/pull/6068) - [@​chadxz](https://github.com/chadxz) made their first contribution in [#​6073](https://github.com/external-secrets/external-secrets/pull/6073) - [@​mateenali66](https://github.com/mateenali66) made their first contribution in [#​6074](https://github.com/external-secrets/external-secrets/pull/6074) - [@​cedricherzog-passbolt](https://github.com/cedricherzog-passbolt) made their first contribution in [#​5919](https://github.com/external-secrets/external-secrets/pull/5919) - [@​johnvox](https://github.com/johnvox) made their first contribution in [#​6086](https://github.com/external-secrets/external-secrets/pull/6086) - [@​Br1an67](https://github.com/Br1an67) made their first contribution in [#​6056](https://github.com/external-secrets/external-secrets/pull/6056) - [@​mzdeb](https://github.com/mzdeb) made their first contribution in [#​6058](https://github.com/external-secrets/external-secrets/pull/6058) - [@​lucpas](https://github.com/lucpas) made their first contribution in [#​6102](https://github.com/external-secrets/external-secrets/pull/6102) - [@​AlexOQ](https://github.com/AlexOQ) made their first contribution in [#​5831](https://github.com/external-secrets/external-secrets/pull/5831) - [@​muraliavarma](https://github.com/muraliavarma) made their first contribution in [#​5935](https://github.com/external-secrets/external-secrets/pull/5935) - [@​heavyandrew](https://github.com/heavyandrew) made their first contribution in [#​5952](https://github.com/external-secrets/external-secrets/pull/5952) **Full Changelog**:
--- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/4923 Co-authored-by: Renovate Bot Co-committed-by: Renovate Bot --- clusters/cl01tl/helm/external-secrets/Chart.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/clusters/cl01tl/helm/external-secrets/Chart.yaml b/clusters/cl01tl/helm/external-secrets/Chart.yaml index 2c3c66297..071080fe5 100644 --- a/clusters/cl01tl/helm/external-secrets/Chart.yaml +++ b/clusters/cl01tl/helm/external-secrets/Chart.yaml @@ -16,4 +16,4 @@ dependencies: repository: https://charts.external-secrets.io icon: https://avatars.githubusercontent.com/u/68335991?s=48&v=4 # renovate: datasource=github-releases depName=external-secrets/external-secrets -appVersion: v2.1.0 +appVersion: v2.2.0 From c1175d4cbd0095bb5298039d31fb1ece43f7a309 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Fri, 20 Mar 2026 21:51:00 +0000 Subject: [PATCH 07/10] chore(deps): update gitroomhq/postiz-app to v2.21.0 (#4924) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This PR contains the following updates: | Package | Update | Change | |---|---|---| | ghcr.io/gitroomhq/postiz-app | minor | `v2.20.2` → `v2.21.0` | | [gitroomhq/postiz-app](https://github.com/gitroomhq/postiz-app) | minor | `v2.20.2` → `v2.21.0` | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/2) for more information. --- ### Release Notes
gitroomhq/postiz-app (gitroomhq/postiz-app) ### [`v2.21.0`](https://github.com/gitroomhq/postiz-app/releases/tag/v2.21.0): MeWe Integration, Integration Fixes & PR Quality [Compare Source](https://github.com/gitroomhq/postiz-app/compare/v2.20.2...v2.21.0) #### What's Changed ##### New Integration - Added MeWe social media integration ##### Improvements - Added PR Quality workflow for pull request checks ##### Fixes - Fixed adding integrations flow - Fixed OAuth integration connection handling **Full Changelog**:
--- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/4924 Co-authored-by: Renovate Bot Co-committed-by: Renovate Bot --- clusters/cl01tl/helm/postiz/Chart.yaml | 2 +- clusters/cl01tl/helm/postiz/values.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/clusters/cl01tl/helm/postiz/Chart.yaml b/clusters/cl01tl/helm/postiz/Chart.yaml index 3a06a761f..3e6ff0e21 100644 --- a/clusters/cl01tl/helm/postiz/Chart.yaml +++ b/clusters/cl01tl/helm/postiz/Chart.yaml @@ -42,4 +42,4 @@ dependencies: repository: oci://harbor.alexlebens.net/helm-charts icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/postiz.png # renovate: datasource=github-releases depName=gitroomhq/postiz-app -appVersion: v2.20.2 +appVersion: v2.21.0 diff --git a/clusters/cl01tl/helm/postiz/values.yaml b/clusters/cl01tl/helm/postiz/values.yaml index f67fbcf67..c4be9f02e 100644 --- a/clusters/cl01tl/helm/postiz/values.yaml +++ b/clusters/cl01tl/helm/postiz/values.yaml @@ -9,7 +9,7 @@ postiz: main: image: repository: ghcr.io/gitroomhq/postiz-app - tag: v2.20.2 + tag: v2.21.0 pullPolicy: IfNotPresent env: - name: MAIN_URL From 71eddc44e349ab5fb7d21a25ed194b2439f524e3 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Fri, 20 Mar 2026 21:52:11 +0000 Subject: [PATCH 08/10] chore(deps): update helm release external-secrets to v2.2.0 (#4927) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This PR contains the following updates: | Package | Update | Change | |---|---|---| | [external-secrets](https://github.com/external-secrets/external-secrets) | minor | `2.1.0` → `2.2.0` | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/2) for more information. --- ### Release Notes
external-secrets/external-secrets (external-secrets) ### [`v2.2.0`](https://github.com/external-secrets/external-secrets/releases/tag/v2.2.0) [Compare Source](https://github.com/external-secrets/external-secrets/compare/v2.1.0...v2.2.0) Image: `ghcr.io/external-secrets/external-secrets:v2.2.0` Image: `ghcr.io/external-secrets/external-secrets:v2.2.0-ubi` Image: `ghcr.io/external-secrets/external-secrets:v2.2.0-ubi-boringssl` ##### What's Changed ##### General - chore: release charts v2.1.0 by [@​Skarlso](https://github.com/Skarlso) in [#​6030](https://github.com/external-secrets/external-secrets/pull/6030) - chore: fix the stability doc by [@​Skarlso](https://github.com/Skarlso) in [#​6035](https://github.com/external-secrets/external-secrets/pull/6035) - fix(security): Fix vulnerabilities by [@​othomann](https://github.com/othomann) in [#​6052](https://github.com/external-secrets/external-secrets/pull/6052) - fix(aws): sync tags and resource policy even when secret value unchanged by [@​evs-secops](https://github.com/evs-secops) in [#​6025](https://github.com/external-secrets/external-secrets/pull/6025) - fix: publish now uses docker build v4 which required some changes by [@​Skarlso](https://github.com/Skarlso) in [#​6062](https://github.com/external-secrets/external-secrets/pull/6062) - feat(gcpsm): auto-detect projectID from GCP metadata server by [@​patjlm](https://github.com/patjlm) in [#​5922](https://github.com/external-secrets/external-secrets/pull/5922) - chore(templating): Remove years in license and their checks by [@​evrardj-roche](https://github.com/evrardj-roche) in [#​5955](https://github.com/external-secrets/external-secrets/pull/5955) - docs: Add Roche to official ADOPTERS by [@​evrardj-roche](https://github.com/evrardj-roche) in [#​6076](https://github.com/external-secrets/external-secrets/pull/6076) - feat: Add Last Sync column to ExternalSecret and PushSecret printers by [@​jaruwat-panturat](https://github.com/jaruwat-panturat) in [#​6068](https://github.com/external-secrets/external-secrets/pull/6068) - fix(onepassword): support native item IDs by [@​chadxz](https://github.com/chadxz) in [#​6073](https://github.com/external-secrets/external-secrets/pull/6073) - feat: extract LGTM processor to external JS file with tests by [@​mateenali66](https://github.com/mateenali66) in [#​6074](https://github.com/external-secrets/external-secrets/pull/6074) - feat: fail fast if LGTM label does not exist in repository by [@​mateenali66](https://github.com/mateenali66) in [#​6078](https://github.com/external-secrets/external-secrets/pull/6078) - feat(passbolt): add support for Passbolt V5 API by [@​cedricherzog-passbolt](https://github.com/cedricherzog-passbolt) in [#​5919](https://github.com/external-secrets/external-secrets/pull/5919) - fix(infisical): dataFrom.find.path should filter by secret path not name by [@​johnvox](https://github.com/johnvox) in [#​6086](https://github.com/external-secrets/external-secrets/pull/6086) - fix: disable the priority queue which misbehaves at scale by [@​Skarlso](https://github.com/Skarlso) in [#​6083](https://github.com/external-secrets/external-secrets/pull/6083) - chore: update go version to 1.26.1 by [@​Skarlso](https://github.com/Skarlso) in [#​6072](https://github.com/external-secrets/external-secrets/pull/6072) - docs(aws): fix PushSecret metadata indentation in resource policy exa... by [@​Br1an67](https://github.com/Br1an67) in [#​6056](https://github.com/external-secrets/external-secrets/pull/6056) - fix(aws): prevent EC2 IMDS fallback when explicit credentials are pro... by [@​Br1an67](https://github.com/Br1an67) in [#​6036](https://github.com/external-secrets/external-secrets/pull/6036) - feat(templating): Add certSANs function to extract SANs from certificates by [@​mzdeb](https://github.com/mzdeb) in [#​6058](https://github.com/external-secrets/external-secrets/pull/6058) - docs: document template.metadata labels/annotations behavior by [@​lucpas](https://github.com/lucpas) in [#​6102](https://github.com/external-secrets/external-secrets/pull/6102) - fix: CODEOWNERS are seriously out of date by [@​Skarlso](https://github.com/Skarlso) in [#​6106](https://github.com/external-secrets/external-secrets/pull/6106) - feat(helm): add readinessProbe support for external-secrets deployment by [@​AlexOQ](https://github.com/AlexOQ) in [#​5831](https://github.com/external-secrets/external-secrets/pull/5831) - fix: update grpc for CVE-2026-33186 by [@​Skarlso](https://github.com/Skarlso) in [#​6108](https://github.com/external-secrets/external-secrets/pull/6108) - feat(azurekv): add expiration time to azure kv secret by [@​muraliavarma](https://github.com/muraliavarma) in [#​5935](https://github.com/external-secrets/external-secrets/pull/5935) - feat: add path to cloud.ru provider by [@​heavyandrew](https://github.com/heavyandrew) in [#​5952](https://github.com/external-secrets/external-secrets/pull/5952) - fix(add-eso-version): fix separator line pattern in add\_eso\_version.sh script by [@​riccardomc](https://github.com/riccardomc) in [#​6113](https://github.com/external-secrets/external-secrets/pull/6113) ##### Dependencies - chore(deps): bump zizmorcore/zizmor-action from 0.5.0 to 0.5.2 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6038](https://github.com/external-secrets/external-secrets/pull/6038) - chore(deps): bump charset-normalizer from 3.4.4 to 3.4.5 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6047](https://github.com/external-secrets/external-secrets/pull/6047) - chore(deps): bump platformdirs from 4.9.2 to 4.9.4 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6050](https://github.com/external-secrets/external-secrets/pull/6050) - chore(deps): bump mkdocs-material from 9.7.3 to 9.7.4 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6049](https://github.com/external-secrets/external-secrets/pull/6049) - chore(deps): bump github/codeql-action from 4.32.4 to 4.32.6 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6039](https://github.com/external-secrets/external-secrets/pull/6039) - chore(deps): bump step-security/harden-runner from 2.15.0 to 2.15.1 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6043](https://github.com/external-secrets/external-secrets/pull/6043) - chore(deps): bump actions/dependency-review-action from 4.8.3 to 4.9.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6040](https://github.com/external-secrets/external-secrets/pull/6040) - chore(deps): bump crazy-max/ghaction-import-gpg from 6.3.0 to 7.0.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6044](https://github.com/external-secrets/external-secrets/pull/6044) - chore(deps): bump docker/login-action from 3.7.0 to 4.0.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6042](https://github.com/external-secrets/external-secrets/pull/6042) - chore(deps): bump docker/setup-buildx-action from 3.12.0 to 4.0.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6041](https://github.com/external-secrets/external-secrets/pull/6041) - chore(deps): bump docker/setup-qemu-action from 3.7.0 to 4.0.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6046](https://github.com/external-secrets/external-secrets/pull/6046) - chore(deps): bump aquasecurity/trivy-action from 0.34.1 to 0.35.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6048](https://github.com/external-secrets/external-secrets/pull/6048) - chore(deps): bump anchore/sbom-action from 0.23.0 to 0.23.1 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6093](https://github.com/external-secrets/external-secrets/pull/6093) - chore(deps): bump distroless/static from `28efbe9` to `47b2d72` by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6088](https://github.com/external-secrets/external-secrets/pull/6088) - chore(deps): bump ubi9/ubi from `cecb1cd` to `6ed9f6f` by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6087](https://github.com/external-secrets/external-secrets/pull/6087) - chore(deps): bump mkdocs-material from 9.7.4 to 9.7.5 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6096](https://github.com/external-secrets/external-secrets/pull/6096) - chore(deps): bump tornado from 6.5.4 to 6.5.5 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6094](https://github.com/external-secrets/external-secrets/pull/6094) - chore(deps): bump charset-normalizer from 3.4.5 to 3.4.6 in /hack/api-docs by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6095](https://github.com/external-secrets/external-secrets/pull/6095) - chore(deps): bump step-security/harden-runner from 2.15.1 to 2.16.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6089](https://github.com/external-secrets/external-secrets/pull/6089) - chore(deps): bump sigstore/cosign-installer from 4.0.0 to 4.1.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6092](https://github.com/external-secrets/external-secrets/pull/6092) - chore(deps): bump softprops/action-gh-release from 2.5.0 to 2.6.1 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6090](https://github.com/external-secrets/external-secrets/pull/6090) - chore(deps): bump actions/create-github-app-token from 2.2.1 to 3.0.0 by [@​dependabot](https://github.com/dependabot)\[bot] in [#​6091](https://github.com/external-secrets/external-secrets/pull/6091) ##### New Contributors - [@​othomann](https://github.com/othomann) made their first contribution in [#​6052](https://github.com/external-secrets/external-secrets/pull/6052) - [@​evs-secops](https://github.com/evs-secops) made their first contribution in [#​6025](https://github.com/external-secrets/external-secrets/pull/6025) - [@​patjlm](https://github.com/patjlm) made their first contribution in [#​5922](https://github.com/external-secrets/external-secrets/pull/5922) - [@​jaruwat-panturat](https://github.com/jaruwat-panturat) made their first contribution in [#​6068](https://github.com/external-secrets/external-secrets/pull/6068) - [@​chadxz](https://github.com/chadxz) made their first contribution in [#​6073](https://github.com/external-secrets/external-secrets/pull/6073) - [@​mateenali66](https://github.com/mateenali66) made their first contribution in [#​6074](https://github.com/external-secrets/external-secrets/pull/6074) - [@​cedricherzog-passbolt](https://github.com/cedricherzog-passbolt) made their first contribution in [#​5919](https://github.com/external-secrets/external-secrets/pull/5919) - [@​johnvox](https://github.com/johnvox) made their first contribution in [#​6086](https://github.com/external-secrets/external-secrets/pull/6086) - [@​Br1an67](https://github.com/Br1an67) made their first contribution in [#​6056](https://github.com/external-secrets/external-secrets/pull/6056) - [@​mzdeb](https://github.com/mzdeb) made their first contribution in [#​6058](https://github.com/external-secrets/external-secrets/pull/6058) - [@​lucpas](https://github.com/lucpas) made their first contribution in [#​6102](https://github.com/external-secrets/external-secrets/pull/6102) - [@​AlexOQ](https://github.com/AlexOQ) made their first contribution in [#​5831](https://github.com/external-secrets/external-secrets/pull/5831) - [@​muraliavarma](https://github.com/muraliavarma) made their first contribution in [#​5935](https://github.com/external-secrets/external-secrets/pull/5935) - [@​heavyandrew](https://github.com/heavyandrew) made their first contribution in [#​5952](https://github.com/external-secrets/external-secrets/pull/5952) **Full Changelog**:
--- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/4927 Co-authored-by: Renovate Bot Co-committed-by: Renovate Bot --- clusters/cl01tl/helm/external-secrets/Chart.lock | 6 +++--- clusters/cl01tl/helm/external-secrets/Chart.yaml | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/clusters/cl01tl/helm/external-secrets/Chart.lock b/clusters/cl01tl/helm/external-secrets/Chart.lock index 3d29d2050..00018c684 100644 --- a/clusters/cl01tl/helm/external-secrets/Chart.lock +++ b/clusters/cl01tl/helm/external-secrets/Chart.lock @@ -1,6 +1,6 @@ dependencies: - name: external-secrets repository: https://charts.external-secrets.io - version: 2.1.0 -digest: sha256:b19563d51f1922403185979c6c442531a7bb13d302e8438b5a18d450259b7245 -generated: "2026-03-07T18:02:23.908145348Z" + version: 2.2.0 +digest: sha256:832fc3f8d3728bdea2b696a6044e4c18967cd9ab9c5cc74adbf40aaa270a84b4 +generated: "2026-03-20T20:53:08.407747649Z" diff --git a/clusters/cl01tl/helm/external-secrets/Chart.yaml b/clusters/cl01tl/helm/external-secrets/Chart.yaml index 071080fe5..2853ec700 100644 --- a/clusters/cl01tl/helm/external-secrets/Chart.yaml +++ b/clusters/cl01tl/helm/external-secrets/Chart.yaml @@ -12,7 +12,7 @@ sources: - https://github.com/external-secrets/external-secrets/tree/main/deploy/charts/external-secrets dependencies: - name: external-secrets - version: 2.1.0 + version: 2.2.0 repository: https://charts.external-secrets.io icon: https://avatars.githubusercontent.com/u/68335991?s=48&v=4 # renovate: datasource=github-releases depName=external-secrets/external-secrets From ae3ac652de03a3f46c36506238b7ccedae40e373 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Fri, 20 Mar 2026 21:54:00 +0000 Subject: [PATCH 09/10] chore(deps): update searxng/searxng:latest docker digest to b6db575 (#4936) --- clusters/cl01tl/helm/searxng/values.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/clusters/cl01tl/helm/searxng/values.yaml b/clusters/cl01tl/helm/searxng/values.yaml index bccb55f21..64bdaa608 100644 --- a/clusters/cl01tl/helm/searxng/values.yaml +++ b/clusters/cl01tl/helm/searxng/values.yaml @@ -9,7 +9,7 @@ searxng: main: image: repository: searxng/searxng - tag: latest@sha256:b41b861ff61c7ab36dfb9b7901744c44d5a3e13e51c624d6b1c2ede027ee0dec + tag: latest@sha256:b6db575bb821d35279474090270db9e53e92432a66d19e7da51c0ef1b5ddb806 pullPolicy: IfNotPresent env: - name: SEARXNG_BASE_URL @@ -39,7 +39,7 @@ searxng: main: image: repository: searxng/searxng - tag: latest@sha256:b41b861ff61c7ab36dfb9b7901744c44d5a3e13e51c624d6b1c2ede027ee0dec + tag: latest@sha256:b6db575bb821d35279474090270db9e53e92432a66d19e7da51c0ef1b5ddb806 pullPolicy: IfNotPresent env: - name: SEARXNG_BASE_URL From 6b8c2826f55380a7f6359c56f30b50e6ea8ab672 Mon Sep 17 00:00:00 2001 From: Alex Lebens Date: Fri, 20 Mar 2026 22:54:46 +0000 Subject: [PATCH 10/10] tmp/lang (#4938) Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/4938 --- clusters/cl01tl/helm/blocky/values.yaml | 1 + clusters/cl01tl/helm/gatus/values.yaml | 3 + clusters/cl01tl/helm/homepage/values.yaml | 6 ++ clusters/cl01tl/helm/languagetool/Chart.lock | 9 +++ clusters/cl01tl/helm/languagetool/Chart.yaml | 27 +++++++ clusters/cl01tl/helm/languagetool/values.yaml | 76 +++++++++++++++++++ hosts/ps08rp/blocky/config.yml | 1 + hosts/ps09rp/blocky/config.yml | 1 + 8 files changed, 124 insertions(+) create mode 100644 clusters/cl01tl/helm/languagetool/Chart.lock create mode 100644 clusters/cl01tl/helm/languagetool/Chart.yaml create mode 100644 clusters/cl01tl/helm/languagetool/values.yaml diff --git a/clusters/cl01tl/helm/blocky/values.yaml b/clusters/cl01tl/helm/blocky/values.yaml index 9863e188a..7359e599e 100644 --- a/clusters/cl01tl/helm/blocky/values.yaml +++ b/clusters/cl01tl/helm/blocky/values.yaml @@ -133,6 +133,7 @@ blocky: jellystat IN CNAME traefik-cl01tl kiwix IN CNAME traefik-cl01tl komodo IN CNAME traefik-cl01tl + languagetool IN CNAME traefik-cl01tl lidarr IN CNAME traefik-cl01tl mail IN CNAME traefik-cl01tl medialyze IN CNAME traefik-cl01tl diff --git a/clusters/cl01tl/helm/gatus/values.yaml b/clusters/cl01tl/helm/gatus/values.yaml index 2f8089ee0..7e24388e2 100644 --- a/clusters/cl01tl/helm/gatus/values.yaml +++ b/clusters/cl01tl/helm/gatus/values.yaml @@ -191,6 +191,9 @@ gatus: - name: excalidraw url: https://excalidraw.alexlebens.net <<: *defaults + - name: languagetool + url: https://languagetool.alexlebens.net + <<: *defaults - name: gitea url: https://gitea.alexlebens.net <<: *defaults diff --git a/clusters/cl01tl/helm/homepage/values.yaml b/clusters/cl01tl/helm/homepage/values.yaml index 201be8014..9d87f57a2 100644 --- a/clusters/cl01tl/helm/homepage/values.yaml +++ b/clusters/cl01tl/helm/homepage/values.yaml @@ -324,6 +324,12 @@ homepage: href: https://excalidraw.alexlebens.net siteMonitor: http://excalidraw.excalidraw:80 statusStyle: dot + - Proofreading: + icon: sh-languagetool.webp + description: LanguageTool + href: https://languagetool.alexlebens.net + siteMonitor: http://languagetool.languagetool:80 + statusStyle: dot - Code: - Code (Public): icon: sh-gitea.webp diff --git a/clusters/cl01tl/helm/languagetool/Chart.lock b/clusters/cl01tl/helm/languagetool/Chart.lock new file mode 100644 index 000000000..8fa3a9ef9 --- /dev/null +++ b/clusters/cl01tl/helm/languagetool/Chart.lock @@ -0,0 +1,9 @@ +dependencies: +- name: app-template + repository: https://bjw-s-labs.github.io/helm-charts/ + version: 4.6.2 +- name: volsync-target + repository: oci://harbor.alexlebens.net/helm-charts + version: 0.8.0 +digest: sha256:cb14506ada77add5ffcb93d38763e2a5c962312e5754618265d15c4361fea783 +generated: "2026-03-20T17:49:46.393059-05:00" diff --git a/clusters/cl01tl/helm/languagetool/Chart.yaml b/clusters/cl01tl/helm/languagetool/Chart.yaml new file mode 100644 index 000000000..a5cbacbe5 --- /dev/null +++ b/clusters/cl01tl/helm/languagetool/Chart.yaml @@ -0,0 +1,27 @@ +apiVersion: v2 +name: languagetool +version: 1.0.0 +description: LanguageTool +keywords: + - languagetool + - spellchecking +home: https://wiki.alexlebens.dev/ +sources: + - https://github.com/languagetool-org/languagetool + - https://github.com/Erikvl87/docker-languagetool + - https://hub.docker.com/r/erikvl87/languagetool + - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template +maintainers: + - name: alexlebens +dependencies: + - name: app-template + alias: languagetool + repository: https://bjw-s-labs.github.io/helm-charts/ + version: 4.6.2 + - name: volsync-target + alias: volsync-target-data + version: 0.8.0 + repository: oci://harbor.alexlebens.net/helm-charts +icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/languagetool.webp +# renovate: datasource=github-releases depName=Erikvl87/docker-languagetool +appVersion: "6.7" diff --git a/clusters/cl01tl/helm/languagetool/values.yaml b/clusters/cl01tl/helm/languagetool/values.yaml new file mode 100644 index 000000000..ead9e9bee --- /dev/null +++ b/clusters/cl01tl/helm/languagetool/values.yaml @@ -0,0 +1,76 @@ +languagetool: + controllers: + main: + type: deployment + replicas: 1 + strategy: Recreate + revisionHistoryLimit: 3 + containers: + main: + image: + repository: erikvl87/languagetool + tag: 6.7 + pullPolicy: IfNotPresent + env: + - name: langtool_languageModel + value: /ngrams + - name: Java_Xms + value: 512m + - name: Java_Xmx + value: 1g + resources: + requests: + cpu: 10m + memory: 128Mi + service: + main: + controller: main + ports: + http: + port: 80 + targetPort: 8010 + protocol: HTTP + route: + main: + kind: HTTPRoute + parentRefs: + - group: gateway.networking.k8s.io + kind: Gateway + name: traefik-gateway + namespace: traefik + hostnames: + - languagetool.alexlebens.net + rules: + - backendRefs: + - group: '' + kind: Service + name: languagetool + port: 80 + weight: 100 + matches: + - path: + type: PathPrefix + value: / + persistence: + data: + forceRename: languagetool-data + storageClass: ceph-block + accessMode: ReadWriteOnce + size: 1Gi + retain: true + advancedMounts: + main: + main: + - path: /ngrams + readOnly: false +volsync-target-data: + pvcTarget: languagetool-data + local: + enabled: true + schedule: 38 11 * * * + remote: + enabled: true + schedule: 38 12 * * * + external: + enabled: true + schedule: 38 14 * * * diff --git a/hosts/ps08rp/blocky/config.yml b/hosts/ps08rp/blocky/config.yml index 8abb9a992..c56e2ab75 100644 --- a/hosts/ps08rp/blocky/config.yml +++ b/hosts/ps08rp/blocky/config.yml @@ -108,6 +108,7 @@ customDNS: jellystat IN CNAME traefik-cl01tl kiwix IN CNAME traefik-cl01tl komodo IN CNAME traefik-cl01tl + languagetool IN CNAME traefik-cl01tl lidarr IN CNAME traefik-cl01tl mail IN CNAME traefik-cl01tl medialyze IN CNAME traefik-cl01tl diff --git a/hosts/ps09rp/blocky/config.yml b/hosts/ps09rp/blocky/config.yml index 811ee6e8a..93bbaf2e2 100644 --- a/hosts/ps09rp/blocky/config.yml +++ b/hosts/ps09rp/blocky/config.yml @@ -129,6 +129,7 @@ customDNS: jellystat IN CNAME traefik-cl01tl kiwix IN CNAME traefik-cl01tl komodo IN CNAME traefik-cl01tl + languagetool IN CNAME traefik-cl01tl lidarr IN CNAME traefik-cl01tl mail IN CNAME traefik-cl01tl medialyze IN CNAME traefik-cl01tl