chore(deps): update helm release cilium to v1.19.0

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/tailscale/tailscale](https://tailscale.com/kb/1282/docker) ([source](https://github.com/tailscale/tailscale)) | patch | `v1.94.1` → `v1.94.2` |

---

### Release Notes

<details>
<summary>tailscale/tailscale (ghcr.io/tailscale/tailscale)</summary>

### [`v1.94.2`](https://github.com/tailscale/tailscale/compare/v1.94.1...v1.94.2)

[Compare Source](https://github.com/tailscale/tailscale/compare/v1.94.1...v1.94.2)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4zLjYiLCJ1cGRhdGVkSW5WZXIiOiI0My4zLjYiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImF1dG9tZXJnZSIsImltYWdlIl19-->

Reviewed-on: #3994
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>

clusters/cl01tl/helm/blocky/values.yaml

@@ -139,7 +139,6 @@ blocky:
               objects                         IN      CNAME   traefik-cl01tl
               ollama                          IN      CNAME   traefik-cl01tl
               omni-tools                      IN      CNAME   traefik-cl01tl
-              overseerr                       IN      CNAME   traefik-cl01tl
               photoview                       IN      CNAME   traefik-cl01tl
               plex                            IN      CNAME   traefik-cl01tl
               postiz                          IN      CNAME   traefik-cl01tl

clusters/cl01tl/helm/cilium/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: cilium
   repository: https://helm.cilium.io/
-  version: 1.18.6
+  version: 1.19.0
-digest: sha256:8ea328ac238524b5b423e6289f5e25d05ef64e6aa19cfd5de238f1d5dd533e9b
+digest: sha256:d2319facc93cab2a0a137588d8bd93315b52025b3ec86bc89edb0e236a74c814
-generated: "2026-02-05T12:00:20.15778-06:00"
+generated: "2026-02-15T23:19:01.331570089Z"

clusters/cl01tl/helm/cilium/Chart.yaml

@@ -15,7 +15,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: cilium
-    version: 1.18.6
+    version: 1.19.0
     repository: https://helm.cilium.io/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/cilium.png
 # renovate: datasource=github-releases depName=cilium/cilium

clusters/cl01tl/helm/gatus/values.yaml

@@ -131,9 +131,6 @@ gatus:
         <<: *defaults
         conditions:
           - "[STATUS] == 401"
-      - name: overseerr
-        url: https://overseerr.alexlebens.net
-        <<: *defaults
       - name: seerr
         url: https://seerr.alexlebens.net
         <<: *defaults

clusters/cl01tl/helm/homepage/values.yaml

@@ -131,13 +131,7 @@ homepage:
         services.yaml: |
           - Media:
               - Media Requests:
-                  icon: sh-overseerr.webp
+                  icon: sh-seerr.webp
-                  description: Overseerr
-                  href: https://overseerr.alexlebens.net
-                  siteMonitor: http://overseerr.overseerr:80
-                  statusStyle: dot
-              - Media Requests (New):
-                  icon: sh-overseerr.webp
                   description: Seerr
                   href: https://seerr.alexlebens.net
                   siteMonitor: http://seerr-seerr-chart.seerr:80

clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock

@@ -9,4 +9,4 @@ dependencies:
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.0.4
 digest: sha256:df15eec7d903a6160214c81bf27e69d698a1e89764c474c13af0b6889a5c0da7
-generated: "2026-02-15T21:05:44.357768481Z"
+generated: "2026-02-15T22:04:26.902082861Z"

clusters/cl01tl/helm/outline/Chart.yaml

@@ -34,4 +34,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/outline.png
 # renovate: datasource=github-releases depName=outline/outline
-appVersion: 1.4.0
+appVersion: 1.5.0

clusters/cl01tl/helm/outline/values.yaml

@@ -9,7 +9,7 @@ outline:
         main:
           image:
             repository: outlinewiki/outline
-            tag: 1.4.0
+            tag: 1.5.0
             pullPolicy: IfNotPresent
           env:
             - name: NODE_ENV

clusters/cl01tl/helm/overseerr/Chart.lock

@@ -1,6 +0,0 @@
-dependencies:
-- name: app-template
-  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
-digest: sha256:c7f53a9c86a84aab15434cde30a70cf024cf9898ff8485438a0ecdc6ca815ecc
-generated: "2026-01-16T18:51:06.856481136Z"

clusters/cl01tl/helm/overseerr/Chart.yaml

@@ -1,22 +0,0 @@
-apiVersion: v2
-name: overseerr
-version: 1.0.0
-description: Overseerr
-keywords:
-  - overseer
-  - media
-  - request
-home: https://wiki.alexlebens.dev/s/ba89ec92-a15c-48d5-9c33-a28a0134b0f9
-sources:
-  - https://github.com/sct/overseerr
-  - https://github.com/sct/overseerr/pkgs/container/overseerr
-  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: app-template
-    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
-icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/overseerr.png
-# renovate: datasource=github-releases depName=sct/overseerr
-appVersion: 1.34.0

clusters/cl01tl/helm/overseerr/templates/external-secret.yaml

@@ -1,55 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: overseerr-main-backup-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: overseerr-main-backup-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  target:
-    template:
-      mergePolicy: Merge
-      engineVersion: v2
-      data:
-        RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/overseerr/overseerr-main"
-  data:
-    - secretKey: BUCKET_ENDPOINT
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/volsync/restic/config
-        metadataPolicy: None
-        property: S3_BUCKET_ENDPOINT
-    - secretKey: RESTIC_PASSWORD
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/volsync/restic/config
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
-    - secretKey: AWS_DEFAULT_REGION
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/volsync/restic/config
-        metadataPolicy: None
-        property: AWS_DEFAULT_REGION
-    - secretKey: AWS_ACCESS_KEY_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
-        property: access_key
-    - secretKey: AWS_SECRET_ACCESS_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
-        property: secret_key

clusters/cl01tl/helm/overseerr/templates/replication-source.yaml

@@ -1,25 +0,0 @@
-apiVersion: volsync.backube/v1alpha1
-kind: ReplicationSource
-metadata:
-  name: overseerr-main-backup-source
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: overseerr-main-backup-source
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  sourcePVC: overseerr-main
-  trigger:
-    schedule: 0 4 * * *
-  restic:
-    pruneIntervalDays: 7
-    repository: overseerr-main-backup-secret
-    retain:
-      hourly: 1
-      daily: 3
-      weekly: 2
-      monthly: 2
-      yearly: 4
-    copyMethod: Snapshot
-    storageClassName: ceph-block
-    volumeSnapshotClassName: ceph-blockpool-snapshot

clusters/cl01tl/helm/overseerr/values.yaml

@@ -1,61 +0,0 @@
-app-template:
-  controllers:
-    main:
-      type: deployment
-      replicas: 1
-      strategy: Recreate
-      revisionHistoryLimit: 3
-      containers:
-        main:
-          image:
-            repository: ghcr.io/sct/overseerr
-            tag: 1.34.0
-            pullPolicy: IfNotPresent
-          env:
-            - name: TZ
-              value: US/Central
-          resources:
-            requests:
-              cpu: 10m
-              memory: 512Mi
-  service:
-    main:
-      controller: main
-      ports:
-        http:
-          port: 80
-          targetPort: 5055
-          protocol: HTTP
-  route:
-    main:
-      kind: HTTPRoute
-      parentRefs:
-        - group: gateway.networking.k8s.io
-          kind: Gateway
-          name: traefik-gateway
-          namespace: traefik
-      hostnames:
-        - overseerr.alexlebens.net
-      rules:
-        - backendRefs:
-            - group: ''
-              kind: Service
-              name: overseerr
-              port: 80
-              weight: 100
-          matches:
-            - path:
-                type: PathPrefix
-                value: /
-  persistence:
-    main:
-      forceRename: overseerr-main
-      storageClass: ceph-block
-      accessMode: ReadWriteOnce
-      size: 10Gi
-      retain: true
-      advancedMounts:
-        main:
-          main:
-            - path: /app/config
-              readOnly: false

clusters/cl01tl/helm/postiz/Chart.yaml

@@ -41,4 +41,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/postiz.png
 # renovate: datasource=github-releases depName=gitroomhq/postiz-app
-appVersion: v2.17.0
+appVersion: v2.18.0

clusters/cl01tl/helm/postiz/values.yaml

@@ -9,7 +9,7 @@ postiz:
         main:
           image:
             repository: ghcr.io/gitroomhq/postiz-app
-            tag: v2.17.0
+            tag: v2.18.0
             pullPolicy: IfNotPresent
           env:
             - name: MAIN_URL

clusters/cl01tl/helm/seerr/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: seerr-chart
   repository: oci://ghcr.io/seerr-team/seerr
-  version: 3.0.0
+  version: 3.0.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:76a0254571f2376ba6fbb773b6491d658d02e19d4f5a89a822536e0bd57dd48e
+digest: sha256:8cc70a42f9889bb273a2d4d7cf24c76059de26da1f9c1439cd39eacec9523e07
-generated: "2025-12-27T13:32:32.932724-06:00"
+generated: "2026-02-15T15:51:17.322439-06:00"

clusters/cl01tl/helm/seerr/Chart.yaml

@@ -17,11 +17,11 @@ maintainers:
 dependencies:
   - name: seerr-chart
     repository: oci://ghcr.io/seerr-team/seerr
-    version: 3.0.0
+    version: 3.0.2
   - name: volsync-target
     alias: volsync-target-config
     version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
-icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/overseerr.png
+icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/seerr.png
 # renovate: datasource=github-releases depName=seerr-team/seerr
-appVersion: develop
+appVersion: v3.0.1

clusters/cl01tl/helm/seerr/values.yaml

@@ -1,7 +1,8 @@
 seerr-chart:
   image:
-    tag: develop
+    registry: ghcr.io
-    sha: c3de4154620ea574adffa83abf84cbed21ef1d59ae9ec2402813e7edbcaec3ff
+    repository: seerr-team/seerr
+    tag: v3.0.1
   probes:
     livenessProbe:
       initialDelaySeconds: 60
@@ -15,8 +16,6 @@ seerr-chart:
       timeoutSeconds: 5
       successThreshold: 1
       failureThreshold: 5
-  service:
-    port: 80
   config:
     persistence:
       size: 5Gi

clusters/cl01tl/helm/stalwart/values.yaml

@@ -9,7 +9,7 @@ stalwart:
         main:
           image:
             repository: stalwartlabs/stalwart
-            tag: v0.15.4
+            tag: v0.15.5
             pullPolicy: IfNotPresent
           resources:
             requests:

hosts/ps08rp/blocky/compose.yaml

@@ -1,7 +1,7 @@
 ---
 services:
     tailscale-blocky:
-        image: ghcr.io/tailscale/tailscale:v1.94.1
+        image: ghcr.io/tailscale/tailscale:v1.94.2
         container_name: tailscale-blocky
         cap_add:
             - net_admin

hosts/ps08rp/blocky/config.yml

@@ -114,7 +114,6 @@ customDNS:
     objects                         IN      CNAME   traefik-cl01tl
     ollama                          IN      CNAME   traefik-cl01tl
     omni-tools                      IN      CNAME   traefik-cl01tl
-    overseerr                       IN      CNAME   traefik-cl01tl
     photoview                       IN      CNAME   traefik-cl01tl
     plex                            IN      CNAME   traefik-cl01tl
     postiz                          IN      CNAME   traefik-cl01tl

hosts/ps08rp/traefik/compose.yaml

@@ -1,7 +1,7 @@
 ---
 services:
     traefik:
-        image: ghcr.io/traefik/traefik:v3.6.7
+        image: ghcr.io/traefik/traefik:v3.6.8
         container_name: traefik
         command:
             - "--global.checkNewVersion=false"

hosts/ps09rp/blocky/compose.yaml

@@ -1,7 +1,7 @@
 ---
 services:
     tailscale-blocky:
-        image: ghcr.io/tailscale/tailscale:v1.94.1
+        image: ghcr.io/tailscale/tailscale:v1.94.2
         container_name: tailscale-blocky
         cap_add:
             - net_admin

hosts/ps09rp/blocky/config.yml

@@ -135,7 +135,6 @@ customDNS:
     objects                         IN      CNAME   traefik-cl01tl
     ollama                          IN      CNAME   traefik-cl01tl
     omni-tools                      IN      CNAME   traefik-cl01tl
-    overseerr                       IN      CNAME   traefik-cl01tl
     photoview                       IN      CNAME   traefik-cl01tl
     plex                            IN      CNAME   traefik-cl01tl
     postiz                          IN      CNAME   traefik-cl01tl

hosts/ps09rp/traefik/compose.yaml

@@ -1,7 +1,7 @@
 ---
 services:
     traefik:
-        image: ghcr.io/traefik/traefik:v3.6.7
+        image: ghcr.io/traefik/traefik:v3.6.8
         container_name: traefik
         command:
             - "--global.checkNewVersion=false"

hosts/ps10rp/blocky/compose.yaml

@@ -1,7 +1,7 @@
 ---
 services:
     tailscale-blocky:
-        image: ghcr.io/tailscale/tailscale:v1.94.1
+        image: ghcr.io/tailscale/tailscale:v1.94.2
         container_name: tailscale-blocky
         cap_add:
             - net_admin

hosts/ps10rp/garage/compose.yaml

@@ -1,6 +1,6 @@
 services:
     tailscale-garage:
-        image: ghcr.io/tailscale/tailscale:v1.94.1
+        image: ghcr.io/tailscale/tailscale:v1.94.2
         container_name: tailscale-garage
         cap_add:
             - net_admin
@@ -20,7 +20,7 @@ services:
             - /dev/net/tun:/dev/net/tun
 
     tailscale-garage-ui:
-        image: ghcr.io/tailscale/tailscale:v1.94.1
+        image: ghcr.io/tailscale/tailscale:v1.94.2
         container_name: tailscale-garage-ui
         cap_add:
             - net_admin

hosts/ps10rp/gitea/compose.yaml

@@ -1,6 +1,6 @@
 services:
     tailscale-gitea:
-        image: ghcr.io/tailscale/tailscale:v1.94.1
+        image: ghcr.io/tailscale/tailscale:v1.94.2
         container_name: tailscale-gitea
         cap_add:
             - net_admin

hosts/ps10rp/homepage/compose.yaml

@@ -1,7 +1,7 @@
 ---
 services:
     tailscale-homepage:
-        image: ghcr.io/tailscale/tailscale:v1.94.1
+        image: ghcr.io/tailscale/tailscale:v1.94.2
         container_name: tailscale-homepage
         cap_add:
             - net_admin

hosts/ps10rp/node-exporter/compose.yaml

@@ -1,7 +1,7 @@
 ---
 services:
     tailscale-node-exporter:
-        image: ghcr.io/tailscale/tailscale:v1.94.1
+        image: ghcr.io/tailscale/tailscale:v1.94.2
         container_name: tailscale-node-exporter
         cap_add:
             - net_admin

hosts/ps10rp/tailscale-subnet/compose.yaml

@@ -1,7 +1,7 @@
 ---
 services:
     tailscale:
-        image: ghcr.io/tailscale/tailscale:v1.94.1
+        image: ghcr.io/tailscale/tailscale:v1.94.2
         container_name: tailscale-subnet
         cap_add:
             - net_admin

hosts/ps10rp/traefik/compose.yaml

@@ -1,7 +1,7 @@
 ---
 services:
     tailscale-traefik:
-        image: ghcr.io/tailscale/tailscale:v1.94.1
+        image: ghcr.io/tailscale/tailscale:v1.94.2
         container_name: tailscale-traefik
         cap_add:
             - net_admin
@@ -20,7 +20,7 @@ services:
             - /dev/net/tun:/dev/net/tun
 
     traefik:
-        image: ghcr.io/traefik/traefik:v3.6.7
+        image: ghcr.io/traefik/traefik:v3.6.8
         container_name: traefik
         command:
             - "--global.checkNewVersion=false"