chore(deps): update ghcr.io/linuxserver/code-server docker tag to v4.111.0

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [harbor.alexlebens.net/images/site-profile](https://gitea.alexlebens.dev/alexlebens/site-profile) | minor | `3.1.0` → `3.4.0` |

---

### Release Notes

<details>
<summary>alexlebens/site-profile (harbor.alexlebens.net/images/site-profile)</summary>

### [`v3.4.0`](https://gitea.alexlebens.dev/alexlebens/site-profile/compare/3.2.0...3.4.0)

[Compare Source](https://gitea.alexlebens.dev/alexlebens/site-profile/compare/3.2.0...3.4.0)

### [`v3.2.0`](https://gitea.alexlebens.dev/alexlebens/site-profile/compare/3.1.0...3.2.0)

[Compare Source](https://gitea.alexlebens.dev/alexlebens/site-profile/compare/3.1.0...3.2.0)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41OS4yIiwidXBkYXRlZEluVmVyIjoiNDMuNTkuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=-->

Reviewed-on: #4662
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>

clusters/cl01tl/helm/actual/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.6.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-digest: sha256:ff3e2f03e93cdd4593e28b9c8bd5b9ddb25548a20a070b2e202057f216207d03
-generated: "2026-01-16T18:44:37.399172263Z"
+  version: 0.8.0
+digest: sha256:ff81b3d8fc831e4b8048f646fffcf597aa7410e52ecf27690eab8104047dbe6f
+generated: "2026-03-06T01:04:41.514235218Z"

clusters/cl01tl/helm/actual/Chart.yaml

@@ -19,7 +19,7 @@ dependencies:
     version: 4.6.2
   - name: volsync-target
     alias: volsync-target-data
-    version: 0.7.0
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/actual-budget.png
 # renovate: datasource=github-releases depName=actualbudget/actual

clusters/cl01tl/helm/actual/values.yaml

@@ -81,7 +81,8 @@ volsync-target-data:
     enabled: true
     schedule: 0 8 * * *
   remote:
-    enabled: false
-  external:
     enabled: true
     schedule: 0 9 * * *
+  external:
+    enabled: true
+    schedule: 0 10 * * *

clusters/cl01tl/helm/argo-workflows/Chart.lock

@@ -7,6 +7,6 @@ dependencies:
   version: 2.4.20
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.8.0
-digest: sha256:772ba83a6e0fa6a7e3633ff1fff0f8221b45a1f36ec890489cfa383330d99f81
-generated: "2026-02-27T18:14:32.22595048Z"
+  version: 7.9.1
+digest: sha256:c3f9876ca432887c05eaa87d4e6006dcb8b3a5e654dc976103426a313fde12bc
+generated: "2026-03-11T22:55:29.202299472Z"

clusters/cl01tl/helm/argo-workflows/Chart.yaml

@@ -25,7 +25,7 @@ dependencies:
     repository: https://argoproj.github.io/argo-helm
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.8.0
+    version: 7.9.1
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 # renovate: datasource=github-releases depName=argoproj/argo-workflows

clusters/cl01tl/helm/argo-workflows/values.yaml

@@ -105,7 +105,7 @@ postgres-18-cluster:
       - name: live-backup
         suspend: false
         immediate: true
-        schedule: "0 0 0 * * *"
+        schedule: "0 0 14 * * *"
         backupName: garage-local
       # - name: weekly-backup
       #   suspend: true

clusters/cl01tl/helm/argocd/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: argo-cd
   repository: https://argoproj.github.io/argo-helm
-  version: 9.4.7
-digest: sha256:9fc78ed4a6a55f65e3250e687caf67ad09e852eb7b01313e372127e75f451a79
-generated: "2026-03-03T20:05:52.081769174Z"
+  version: 9.4.10
+digest: sha256:795aad956acef3f5efb8160390caf9b9792b7b4150d3a7984f1c5edbad92dfaa
+generated: "2026-03-10T18:58:35.720448421Z"

clusters/cl01tl/helm/argocd/Chart.yaml

@@ -15,8 +15,8 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: argo-cd
-    version: 9.4.7
+    version: 9.4.10
     repository: https://argoproj.github.io/argo-helm
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 # renovate: datasource=github-releases depName=argoproj/argo-cd
-appVersion: v3.3.2
+appVersion: v3.3.3

clusters/cl01tl/helm/audiobookshelf/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
+  version: 0.8.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-digest: sha256:c8a988258b26187972a8b69767bf5df502d7e2b12710eb357ac15240d872fd37
-generated: "2026-01-16T18:44:48.982249243Z"
+  version: 0.8.0
+digest: sha256:7ee4cfdf7f908401c39b3cda0cf8783b25dcb9cf93e7c911609bab9e303ec5bf
+generated: "2026-03-06T01:05:03.534042627Z"

clusters/cl01tl/helm/audiobookshelf/Chart.yaml

@@ -21,11 +21,11 @@ dependencies:
     version: 4.6.2
   - name: volsync-target
     alias: volsync-target-config
-    version: 0.7.0
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-metadata
-    version: 0.7.0
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/audiobookshelf.png
 # renovate: datasource=github-releases depName=advplyr/audiobookshelf

clusters/cl01tl/helm/audiobookshelf/values.yaml

@@ -21,7 +21,7 @@ audiobookshelf:
         apprise-api:
           image:
             repository: caronc/apprise
-            tag: v1.3.1
+            tag: v1.3.2
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -127,17 +127,19 @@ volsync-target-config:
     enabled: true
     schedule: 2 8 * * *
   remote:
-    enabled: false
-  external:
     enabled: true
     schedule: 2 9 * * *
+  external:
+    enabled: true
+    schedule: 2 10 * * *
 volsync-target-metadata:
   pvcTarget: audiobookshelf-metadata
   local:
     enabled: true
     schedule: 4 8 * * *
   remote:
-    enabled: false
-  external:
     enabled: true
     schedule: 4 9 * * *
+  external:
+    enabled: true
+    schedule: 4 10 * * *

clusters/cl01tl/helm/authentik/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 2026.2.1
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.3.0
+  version: 2.4.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.8.0
-- name: redis-replication
+  version: 7.9.1
+- name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.1.0
-digest: sha256:ee8c360d746800a6f3f41f64fd2f116224b305d8bcb8660ed2687c7987e59c37
-generated: "2026-03-04T00:37:25.727534823Z"
+  version: 0.4.0
+digest: sha256:abb34b7bb54393236e695453aa1940497cb4def3d3a56a45ca004a22f8e05648
+generated: "2026-03-11T22:55:49.936164674Z"

clusters/cl01tl/helm/authentik/Chart.yaml

@@ -25,13 +25,14 @@ dependencies:
     repository: https://charts.goauthentik.io/
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.3.0
+    version: 2.4.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.8.0
+    version: 7.9.1
     repository: oci://harbor.alexlebens.net/helm-charts
-  - name: redis-replication
-    version: 1.1.0
+  - name: valkey
+    alias: valkey
+    version: 0.4.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/authentik.png
 # renovate: datasource=github-releases depName=goauthentik/authentik

clusters/cl01tl/helm/authentik/values.yaml

@@ -28,7 +28,7 @@ authentik:
             key: password
   authentik:
     redis:
-      host: redis-replication-authentik-master
+      host: authentik-valkey
   server:
     name: server
     replicas: 1
@@ -68,7 +68,7 @@ postgres-18-cluster:
   recovery:
     method: objectStore
     objectStore:
-      index: 1
+      index: 2
   backup:
     objectStore:
       - name: garage-local
@@ -91,9 +91,9 @@ postgres-18-cluster:
       #   isWALArchiver: false
     scheduledBackups:
       - name: live-backup
-        suspend: true
+        suspend: false
         immediate: true
-        schedule: "0 0 0 * * *"
+        schedule: "0 5 14 * * *"
         backupName: garage-local
       # - name: weekly-backup
       #   suspend: true
@@ -105,10 +105,3 @@ postgres-18-cluster:
       #   immediate: true
       #   schedule: "0 0 0 * * *"
       #   backupName: external
-redis-replication:
-  existingSecret:
-    enabled: false
-  redisReplication:
-    clusterSize: 3
-    sentinel:
-      enabled: true

clusters/cl01tl/helm/backrest/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
+  version: 0.8.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-digest: sha256:18365b7dd3995703aad6928ce22dd1c3b8ffd5f1cccf54b8f1489ad111d13104
-generated: "2026-01-16T18:45:00.087995513Z"
+  version: 0.8.0
+digest: sha256:f203538010828e77336f3cf39451a1072c90aeb8ece7c173a3476c49883b46d1
+generated: "2026-03-06T01:05:24.935421139Z"

clusters/cl01tl/helm/backrest/Chart.yaml

@@ -19,12 +19,12 @@ dependencies:
     version: 4.6.2
   - name: volsync-target
     alias: volsync-target-config
-    version: 0.7.0
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data
-    version: 0.7.0
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/backrest.png
 # renovate: datasource=github-releases depName=garethgeorge/backrest
-appVersion: v1.12.0
+appVersion: v1.12.1

clusters/cl01tl/helm/backrest/values.yaml

@@ -8,7 +8,7 @@ backrest:
         main:
           image:
             repository: garethgeorge/backrest
-            tag: v1.12.0
+            tag: v1.12.1
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -111,17 +111,19 @@ volsync-target-data:
     enabled: true
     schedule: 6 8 * * *
   remote:
-    enabled: false
-  external:
     enabled: true
     schedule: 6 9 * * *
+  external:
+    enabled: true
+    schedule: 6 10 * * *
 volsync-target-config:
   pvcTarget: backrest-config
   local:
     enabled: true
     schedule: 8 8 * * *
   remote:
-    enabled: false
-  external:
     enabled: true
     schedule: 8 9 * * *
+  external:
+    enabled: true
+    schedule: 8 10 * * *

clusters/cl01tl/helm/bazarr/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.6.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-digest: sha256:77d0e82601292b4173d355d18c0de82bb37684a3dc29d7c8af4169308f14de48
-generated: "2026-01-16T18:45:10.855338471Z"
+  version: 0.8.0
+digest: sha256:ce88e4cd451613c9dbc25d285700970789ff678452ef277f3c8465dbf6157f1f
+generated: "2026-03-06T01:05:44.405374459Z"

clusters/cl01tl/helm/bazarr/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     version: 4.6.2
   - name: volsync-target
     alias: volsync-target-config
-    version: 0.7.0
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/bazarr.png
 # renovate: datasource=github-releases depName=morpheus65535/bazarr

clusters/cl01tl/helm/bazarr/values.yaml

@@ -15,7 +15,7 @@ bazarr:
         main:
           image:
             repository: ghcr.io/linuxserver/bazarr
-            tag: 1.5.6@sha256:94eee5e3e14430b7b144d4556be73963a7daf6f1bddc25586627f426465482ce
+            tag: 1.5.6@sha256:05f9d5b24884f37120453dc1a008a47be244eebec32099ae1bd29032e75b67aa
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -87,7 +87,8 @@ volsync-target-config:
     enabled: true
     schedule: 10 8 * * *
   remote:
-    enabled: false
-  external:
     enabled: true
     schedule: 10 9 * * *
+  external:
+    enabled: true
+    schedule: 10 10 * * *

clusters/cl01tl/helm/blocky/Chart.lock

@@ -2,8 +2,8 @@ dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
   version: 4.6.2
-- name: redis-replication
+- name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.1.0
-digest: sha256:27a4d0d6fc6622d47686fbf1dcae41c5f7e72157b0fa35abb11b375ab91f949f
-generated: "2026-03-04T00:37:53.921436029Z"
+  version: 0.4.0
+digest: sha256:a5b0099261d772b24a302a106d106cfa82ac07fa14564141e00cf107d708e859
+generated: "2026-03-09T23:06:16.853255429Z"

clusters/cl01tl/helm/blocky/Chart.yaml

@@ -17,8 +17,9 @@ dependencies:
     alias: blocky
     repository: https://bjw-s-labs.github.io/helm-charts/
     version: 4.6.2
-  - name: redis-replication
-    version: 1.1.0
+  - name: valkey
+    alias: valkey
+    version: 0.4.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/blocky.png
 # renovate: datasource=github-releases depName=0xerr0r/blocky

clusters/cl01tl/helm/blocky/values.yaml

@@ -135,6 +135,7 @@ blocky:
               komodo                          IN      CNAME   traefik-cl01tl
               lidarr                          IN      CNAME   traefik-cl01tl
               mail                            IN      CNAME   traefik-cl01tl
+              movie-roulette                  IN      CNAME   traefik-cl01tl
               music-grabber                   IN      CNAME   traefik-cl01tl
               navidrome                       IN      CNAME   traefik-cl01tl
               ntfy                            IN      CNAME   traefik-cl01tl
@@ -192,36 +193,42 @@ blocky:
                   *.alexlebens.dev
                   *.boreal-beaufort.ts.net
                   *.discord.com
+                  cdn.trackjs.com
               ads:
                 - |
                   *.alexlebens.net
                   *.alexlebens.dev
                   *.boreal-beaufort.ts.net
                   *.discord.com
+                  cdn.trackjs.com
               priv:
                 - |
                   *.alexlebens.net
                   *.alexlebens.dev
                   *.boreal-beaufort.ts.net
                   *.discord.com
+                  cdn.trackjs.com
               mal:
                 - |
                   *.alexlebens.net
                   *.alexlebens.dev
                   *.boreal-beaufort.ts.net
                   *.discord.com
+                  cdn.trackjs.com
               pro:
                 - |
                   *.alexlebens.net
                   *.alexlebens.dev
                   *.boreal-beaufort.ts.net
                   *.discord.com
+                  cdn.trackjs.com
               oisd:
                 - |
                   *.alexlebens.net
                   *.alexlebens.dev
                   *.boreal-beaufort.ts.net
                   *.discord.com
+                  cdn.trackjs.com
             clientGroupsBlock:
               default:
                 - sus
@@ -253,7 +260,7 @@ blocky:
             cacheTimeNegative: 30m
 
           redis:
-            address: redis-replication-blocky-master.blocky:6379
+            address: blocky-valkey.blocky:6379
             required: true
 
           prometheus:
@@ -326,6 +333,3 @@ blocky:
               readOnly: true
               mountPropagation: None
               subPath: config.yml
-redis-replication:
-  redisReplication:
-    clusterSize: 1

clusters/cl01tl/helm/booklore/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 25.10.4
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
+  version: 0.8.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-digest: sha256:81601af110374e1571481873ace19f7bc694edb917ef35c1fbc623efe147a66d
-generated: "2026-01-16T18:45:33.641059484Z"
+  version: 0.8.0
+digest: sha256:d4c7bf75f72f7eab4ad968bf9f55daac9392c9b2df08f8a27c5dc4f8fffb5f57
+generated: "2026-03-06T01:06:05.696573273Z"

clusters/cl01tl/helm/booklore/Chart.yaml

@@ -22,12 +22,12 @@ dependencies:
     repository: https://helm.mariadb.com/mariadb-operator
   - name: volsync-target
     alias: volsync-target-config
-    version: 0.7.0
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data
-    version: 0.7.0
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/booklore.png
 # renovate: datasource=github-releases depName=booklore-app/BookLore
-appVersion: v2.0.5
+appVersion: v2.2.0

clusters/cl01tl/helm/booklore/values.yaml

@@ -9,11 +9,15 @@ booklore:
         main:
           image:
             repository: ghcr.io/booklore-app/booklore
-            tag: v2.0.5
+            tag: v2.2.0
             pullPolicy: IfNotPresent
           env:
             - name: TZ
               value: America/Chicago
+            - name: USER_ID
+              value: 1000
+            - name: GROUP_ID
+              value: 1000
             - name: DATABASE_URL
               value: jdbc:mariadb://booklore-mariadb-cluster-primary.booklore:3306/booklore
             - name: DATABASE_USERNAME
@@ -221,10 +225,11 @@ volsync-target-config:
     enabled: true
     schedule: 12 8 * * *
   remote:
-    enabled: false
-  external:
     enabled: true
     schedule: 12 9 * * *
+  external:
+    enabled: true
+    schedule: 12 10 * * *
 volsync-target-data:
   pvcTarget: booklore-data
   local:
@@ -234,11 +239,11 @@ volsync-target-data:
       cacheCapacity: 10Gi
   remote:
     enabled: true
-    schedule: 14 10 * * *
+    schedule: 14 9 * * *
     restic:
       cacheCapacity: 10Gi
   external:
     enabled: true
-    schedule: 14 9 * * *
+    schedule: 14 10 * * *
     restic:
       cacheCapacity: 10Gi

clusters/cl01tl/helm/cert-manager/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: cert-manager
   repository: https://charts.jetstack.io
-  version: v1.19.4
-digest: sha256:5c4a0a0568677bfcf4529e6ec6a005957cd1820fd5f1d1f108e74370d409fe88
-generated: "2026-02-24T19:30:44.415585645Z"
+  version: v1.20.0
+digest: sha256:1543bd17649cb32982de3cce017fcbed1b44c41d50b76c6471b266f33e261c29
+generated: "2026-03-10T16:06:49.332999536Z"

clusters/cl01tl/helm/cert-manager/Chart.yaml

@@ -14,8 +14,8 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: cert-manager
-    version: v1.19.4
+    version: v1.20.0
     repository: https://charts.jetstack.io
 icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/cert-manager.png
 # renovate: datasource=github-releases depName=cert-manager/cert-manager
-appVersion: v1.19.4
+appVersion: v1.20.0

clusters/cl01tl/helm/code-server/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.3.0
+  version: 2.4.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-digest: sha256:a170a0695881a7eed9bc2b0fc8b7f7bce18919e9bea0c5342a35e5a1a5ffa406
-generated: "2026-02-07T00:36:52.387080745Z"
+  version: 0.8.0
+digest: sha256:dee0f52096efc543f4db3a5dc2732fd37ae9b7950b264e399a6e74c2f3e7cee6
+generated: "2026-03-09T22:04:00.58415637Z"

clusters/cl01tl/helm/code-server/Chart.yaml

@@ -22,10 +22,10 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.3.0
+    version: 2.4.0
   - name: volsync-target
     alias: volsync-target-config
-    version: 0.7.0
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/visual-studio-code.png
 # renovate: datasource=github-releases depName=linuxserver/docker-code-server

clusters/cl01tl/helm/code-server/values.yaml

@@ -9,7 +9,7 @@ code-server:
         main:
           image:
             repository: ghcr.io/linuxserver/code-server
-            tag: 4.109.5@sha256:aa43fb2fc31127e9d2166e903c7f13792351e38658ba29645662a89ff04ff90d
+            tag: 4.111.0@sha256:04107645b21f33215d1087773e2c889dfed823434f5dc4c7e9ae20df218a8ef3
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -79,7 +79,8 @@ volsync-target-config:
     enabled: true
     schedule: 16 8 * * *
   remote:
-    enabled: false
-  external:
     enabled: true
     schedule: 16 9 * * *
+  external:
+    enabled: true
+    schedule: 16 10 * * *

clusters/cl01tl/helm/coredns/Chart.yaml

@@ -19,4 +19,4 @@ dependencies:
     repository: https://coredns.github.io/helm
 icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/coredns.png
 # renovate: datasource=github-releases depName=coredns/coredns
-appVersion: v1.14.1
+appVersion: v1.14.2

clusters/cl01tl/helm/dawarich/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.8.0
+  version: 7.9.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.2.0
-digest: sha256:2682dcbc71417a103cf4c1ed920caac5b14272b021dc579fb8a3cf2fedfa0490
-generated: "2026-03-03T16:10:42.029406-06:00"
+  version: 0.4.0
+digest: sha256:9524709cf393c01f28b0d073ef6870a2f1afd46f3bc5f564e73c55450aba8dd0
+generated: "2026-03-11T22:56:11.749729235Z"

clusters/cl01tl/helm/dawarich/Chart.yaml

@@ -18,12 +18,12 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.8.0
+    version: 7.9.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
-    version: 0.2.0
+    version: 0.4.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/dawarich.png
 # renovate: datasource=github-releases depName=Freika/dawarich
-appVersion: 1.3.1
+appVersion: 1.3.2

clusters/cl01tl/helm/dawarich/values.yaml

@@ -9,7 +9,7 @@ dawarich:
         main:
           image:
             repository: freikin/dawarich
-            tag: 1.3.1
+            tag: 1.3.2
             pullPolicy: IfNotPresent
           command: ["web-entrypoint.sh"]
           args: ["bin/rails", "server", "-p", "3000", "-b", "::"]
@@ -106,7 +106,7 @@ dawarich:
         sidekiq:
           image:
             repository: freikin/dawarich
-            tag: 1.3.1
+            tag: 1.3.2
             pullPolicy: IfNotPresent
           command: ["sidekiq-entrypoint.sh"]
           args: ["sidekiq"]
@@ -330,7 +330,7 @@ postgres-18-cluster:
       - name: live-backup
         suspend: false
         immediate: true
-        schedule: "0 0 0 * * *"
+        schedule: "0 10 14 * * *"
         backupName: garage-local
       # - name: weekly-backup
       #   suspend: true

clusters/cl01tl/helm/descheduler/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: descheduler
   repository: https://kubernetes-sigs.github.io/descheduler/
-  version: 0.35.0
-digest: sha256:afa0e5fe35f9287db619de604c82a22c3ab90dfcaa3a845ff30491e47c7a5846
-generated: "2026-02-19T23:03:22.794515683Z"
+  version: 0.35.1
+digest: sha256:ed7cc8068b83ac483fda3a781227b35e12a34abdca214b5490e7036c89db1a95
+generated: "2026-03-09T21:21:45.788316167Z"

clusters/cl01tl/helm/descheduler/Chart.yaml

@@ -14,8 +14,8 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: descheduler
-    version: 0.35.0
+    version: 0.35.1
     repository: https://kubernetes-sigs.github.io/descheduler/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 # renovate: datasource=github-releases depName=kubernetes-sigs/descheduler
-appVersion: v0.35.0
+appVersion: v0.35.1

clusters/cl01tl/helm/directus/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.8.0
-- name: redis-replication
+  version: 7.9.1
+- name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.1.0
-digest: sha256:081224a2297891ecb7e7306d7da895a6e7988e9a28e7244f310231f60dd9f6c8
-generated: "2026-03-04T00:38:19.7054203Z"
+  version: 0.4.0
+digest: sha256:0b50b4938669a7210930d6ee86a9602611b54cd13774f3386dbad04b4771e7f4
+generated: "2026-03-11T22:56:26.818980186Z"

clusters/cl01tl/helm/directus/Chart.yaml

@@ -23,11 +23,12 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.8.0
+    version: 7.9.1
     repository: oci://harbor.alexlebens.net/helm-charts
-  - name: redis-replication
-    version: 1.1.0
+  - name: valkey
+    alias: valkey
+    version: 0.4.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/directus.png
 # renovate: datasource=github-releases depName=directus/directus
-appVersion: 11.16.0
+appVersion: 11.16.1

clusters/cl01tl/helm/directus/templates/external-secret.yaml

@@ -98,10 +98,10 @@ spec:
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
-  name: directus-redis-config
+  name: directus-bucket-garage
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: directus-redis-config
+    app.kubernetes.io/name: directus-bucket-garage
     app.kubernetes.io/instance: {{ .Release.Name }}
     app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
@@ -109,17 +109,61 @@ spec:
     kind: ClusterSecretStore
     name: vault
   data:
+    - secretKey: ACCESS_KEY_ID
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/directus-assets
+        metadataPolicy: None
+        property: ACCESS_KEY_ID
+    - secretKey: ACCESS_SECRET_KEY
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/directus-assets
+        metadataPolicy: None
+        property: ACCESS_SECRET_KEY
+    - secretKey: ACCESS_REGION
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/directus-assets
+        metadataPolicy: None
+        property: ACCESS_REGION
+
+---
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: directus-valkey-config
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: directus-valkey-config
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  data:
+    - secretKey: default
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/directus/valkey
+        metadataPolicy: None
+        property: password
     - secretKey: user
       remoteRef:
         conversionStrategy: Default
         decodingStrategy: None
-        key: /cl01tl/directus/redis
+        key: /cl01tl/directus/valkey
         metadataPolicy: None
         property: user
     - secretKey: password
       remoteRef:
         conversionStrategy: Default
         decodingStrategy: None
-        key: /cl01tl/directus/redis
+        key: /cl01tl/directus/valkey
         metadataPolicy: None
         property: password

clusters/cl01tl/helm/directus/templates/object-bucket-claim.yaml

@@ -1,11 +0,0 @@
-apiVersion: objectbucket.io/v1alpha1
-kind: ObjectBucketClaim
-metadata:
-  name: ceph-bucket-directus
-  labels:
-    app.kubernetes.io/name: ceph-bucket-directus
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  generateBucketName: bucket-directus
-  storageClassName: ceph-bucket

clusters/cl01tl/helm/directus/values.yaml

@@ -9,7 +9,7 @@ directus:
         main:
           image:
             repository: directus/directus
-            tag: 11.16.0
+            tag: 11.16.1
             pullPolicy: IfNotPresent
           env:
             - name: PUBLIC_URL
@@ -72,16 +72,16 @@ directus:
             - name: REDIS_ENABLED
               value: true
             - name: REDIS_HOST
-              value: redis-replication-directus-master
+              value: directus-valkey
             - name: REDIS_USERNAME
               valueFrom:
                 secretKeyRef:
-                  name: directus-redis-config
+                  name: directus-valkey-config
                   key: user
             - name: REDIS_PASSWORD
               valueFrom:
                 secretKeyRef:
-                  name: directus-redis-config
+                  name: directus-valkey-config
                   key: password
             - name: STORAGE_LOCATIONS
               value: s3
@@ -90,22 +90,22 @@ directus:
             - name: STORAGE_S3_KEY
               valueFrom:
                 secretKeyRef:
-                  name: ceph-bucket-directus
-                  key: AWS_ACCESS_KEY_ID
+                  name: directus-bucket-garage
+                  key: ACCESS_KEY_ID
             - name: STORAGE_S3_SECRET
               valueFrom:
                 secretKeyRef:
-                  name: ceph-bucket-directus
-                  key: AWS_SECRET_ACCESS_KEY
-            - name: STORAGE_S3_BUCKET
-              valueFrom:
-                configMapKeyRef:
-                  name: ceph-bucket-directus
-                  key: BUCKET_NAME
+                  name: directus-bucket-garage
+                  key: ACCESS_SECRET_KEY
             - name: STORAGE_S3_REGION
-              value: us-east-1
+              valueFrom:
+                secretKeyRef:
+                  name: directus-bucket-garage
+                  key: ACCESS_REGION
+            - name: STORAGE_S3_BUCKET
+              value: directus-assets
             - name: STORAGE_S3_ENDPOINT
-              value: http://rook-ceph-rgw-ceph-objectstore.rook-ceph.svc:80
+              value: http://garage-main.garage:3900
             - name: STORAGE_S3_FORCE_PATH_STYLE
               value: true
             - name: AUTH_PROVIDERS
@@ -219,7 +219,7 @@ postgres-18-cluster:
       - name: live-backup
         suspend: false
         immediate: true
-        schedule: "0 0 0 * * *"
+        schedule: "0 15 14 * * *"
         backupName: garage-local
       # - name: weekly-backup
       #   suspend: true
@@ -231,12 +231,13 @@ postgres-18-cluster:
       #   immediate: true
       #   schedule: "0 0 0 * * *"
       #   backupName: external
-redis-replication:
-  existingSecret:
-    enabled: true
-    name: directus-redis-config
-    key: password
-  redisReplication:
-    clusterSize: 3
-    sentinel:
+valkey:
+  valkey:
+    auth:
       enabled: true
+      usersExistingSecret: directus-valkey-config
+      aclUsers:
+        default:
+          permissions: "~* &* +@all"
+    metrics:
+      enabled: false

clusters/cl01tl/helm/element-web/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: element-web
   repository: https://ananace.gitlab.io/charts
-  version: 1.4.31
+  version: 1.4.32
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.3.0
-digest: sha256:7447f3828246d85acd5a2a75b6d086d8fbe29ee90ad61b96dd25de8dcfefbc4e
-generated: "2026-03-03T18:08:31.901975101Z"
+  version: 2.4.0
+digest: sha256:49d9dd45eff7cbbc11644e4a8bd3c9d3bf84716ed034a76f097f0ba1fea4c934
+generated: "2026-03-11T16:04:17.556777286Z"

clusters/cl01tl/helm/element-web/Chart.yaml

@@ -17,11 +17,11 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: element-web
-    version: 1.4.31
+    version: 1.4.32
     repository: https://ananace.gitlab.io/charts
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.3.0
+    version: 2.4.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/element.png
 # renovate: datasource=github-releases depName=element-hq/element-web
-appVersion: v1.12.11
+appVersion: v1.12.12

clusters/cl01tl/helm/element-web/values.yaml

@@ -2,7 +2,7 @@ element-web:
   replicaCount: 1
   image:
     repository: vectorim/element-web
-    tag: v1.12.11
+    tag: v1.12.12
     pullPolicy: IfNotPresent
   defaultServer:
     url: https://matrix.alexlebens.dev

clusters/cl01tl/helm/external-secrets/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: external-secrets
   repository: https://charts.external-secrets.io
-  version: 2.0.1
-digest: sha256:f47905e03f649c28d29f7a381799fb2df1f0a7bf122af174aeba47ba94f34847
-generated: "2026-02-20T19:29:28.137671934Z"
+  version: 2.1.0
+digest: sha256:b19563d51f1922403185979c6c442531a7bb13d302e8438b5a18d450259b7245
+generated: "2026-03-07T18:02:23.908145348Z"

clusters/cl01tl/helm/external-secrets/Chart.yaml

@@ -12,8 +12,8 @@ sources:
   - https://github.com/external-secrets/external-secrets/tree/main/deploy/charts/external-secrets
 dependencies:
   - name: external-secrets
-    version: 2.0.1
+    version: 2.1.0
     repository: https://charts.external-secrets.io
 icon: https://avatars.githubusercontent.com/u/68335991?s=48&v=4
 # renovate: datasource=github-releases depName=external-secrets/external-secrets
-appVersion: v2.0.1
+appVersion: v2.1.0

clusters/cl01tl/helm/freshrss/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.3.0
+  version: 2.4.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.8.0
+  version: 7.9.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-digest: sha256:e99b942b1c28deb0c120f5dec6d8a0dae8cb9714109c40cf08054af1467bc56f
-generated: "2026-02-27T18:15:22.681368568Z"
+  version: 0.8.0
+digest: sha256:a3703e245881145524304af8a03c89d309c602479be3f7f8953c2fba120bf341
+generated: "2026-03-11T22:56:41.856429843Z"

clusters/cl01tl/helm/freshrss/Chart.yaml

@@ -23,14 +23,14 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.3.0
+    version: 2.4.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.8.0
+    version: 7.9.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data
-    version: 0.7.0
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/freshrss.png
 # renovate: datasource=github-releases depName=FreshRSS/FreshRSS

clusters/cl01tl/helm/freshrss/values.yaml

@@ -197,7 +197,7 @@ postgres-18-cluster:
   recovery:
     method: objectStore
     objectStore:
-      index: 1
+      index: 2
   backup:
     objectStore:
       - name: garage-local
@@ -222,7 +222,7 @@ postgres-18-cluster:
       - name: live-backup
         suspend: false
         immediate: true
-        schedule: "0 0 0 * * *"
+        schedule: "0 20 14 * * *"
         backupName: garage-local
       # - name: weekly-backup
       #   suspend: true
@@ -250,7 +250,8 @@ volsync-target-data:
     enabled: true
     schedule: 18 8 * * *
   remote:
-    enabled: false
-  external:
     enabled: true
     schedule: 18 9 * * *
+  external:
+    enabled: true
+    schedule: 18 10 * * *

clusters/cl01tl/helm/garage/templates/service.yaml

@@ -0,0 +1,32 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: garage-main
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: garage-main
+    app.kubernetes.io/service: garage-main
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  ports:
+    - name: admin
+      port: 3903
+      protocol: TCP
+      targetPort: 3903
+    - name: rpc
+      port: 3901
+      protocol: TCP
+      targetPort: 3901
+    - name: s3
+      port: 3900
+      protocol: TCP
+      targetPort: 3900
+    - name: web
+      port: 3902
+      protocol: TCP
+      targetPort: 3902
+  selector:
+    app.kubernetes.io/instance: garage
+    app.kubernetes.io/name: garage
+    garage-type: server

clusters/cl01tl/helm/garage/values.yaml

@@ -118,9 +118,9 @@ garage:
             pullPolicy: IfNotPresent
           env:
             - name: API_BASE_URL
-              value: http://garage-1.garage:3903
+              value: http://garage-main.garage:3903
             - name: S3_ENDPOINT_URL
-              value: http://garage-1.garage:3900
+              value: http://garage-main.garage:3900
             - name: API_ADMIN_KEY
               valueFrom:
                 secretKeyRef:
@@ -225,26 +225,6 @@ garage:
           api_bind_addr = "[::]:3903"
           metrics_require_token = true
   service:
-    garage-main:
-      forceRename: garage-main
-      controller: server-2
-      ports:
-        s3:
-          port: 3900
-          targetPort: 3900
-          protocol: HTTP
-        rpc:
-          port: 3901
-          targetPort: 3901
-          protocol: HTTP
-        web:
-          port: 3902
-          targetPort: 3902
-          protocol : HTTP
-        admin:
-          port: 3903
-          targetPort: 3903
-          protocol: HTTP
     server-1:
       forceRename: garage-1
       controller: server-1

clusters/cl01tl/helm/gatus/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 1.5.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.8.0
+  version: 7.9.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-digest: sha256:d7790fe1459aecff41e33719556aa370a3b5c3b4ae7c414268665c63ad3952f3
-generated: "2026-02-27T18:15:37.998212393Z"
+  version: 0.8.0
+digest: sha256:2fe7c088e99a11e0c6dd09fe48bb1e292eb58e22d9f8ff681bb6c6790945d54e
+generated: "2026-03-11T22:56:56.957400817Z"

clusters/cl01tl/helm/gatus/Chart.yaml

@@ -22,11 +22,11 @@ dependencies:
     version: 1.5.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.8.0
+    version: 7.9.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data
-    version: 0.7.0
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/gatus.png
 # renovate: datasource=github-releases depName=TwiN/gatus

clusters/cl01tl/helm/gatus/values.yaml

@@ -137,6 +137,9 @@ gatus:
       - name: yamtrack
         url: https://yamtrack.alexlebens.net
         <<: *defaults
+      - name: movie-roulette
+        url: https://movie-roulette.alexlebens.net
+        <<: *defaults
       - name: jellyfin
         url: https://jellyfin.alexlebens.net
         <<: *defaults
@@ -427,7 +430,7 @@ postgres-18-cluster:
       - name: live-backup
         suspend: false
         immediate: true
-        schedule: "0 0 0 * * *"
+        schedule: "0 25 14 * * *"
         backupName: garage-local
       # - name: weekly-backup
       #   suspend: true
@@ -443,9 +446,10 @@ volsync-target-data:
   pvcTarget: gatus
   local:
     enabled: true
-    schedule: 22 8 * * *
+    schedule: 20 8 * * *
   remote:
-    enabled: false
+    enabled: true
+    schedule: 20 9 * * *
   external:
     enabled: true
-    schedule: 22 9 * * *
+    schedule: 20 10 * * *

clusters/cl01tl/helm/generic-device-plugin/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: generic-device-plugin
   repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-  version: 0.20.20
-digest: sha256:8841709955381394b6304b7c53345692517e419c197ddc59b66a505ae742ec04
-generated: "2026-03-03T03:03:20.457381608Z"
+  version: 0.20.21
+digest: sha256:4f1359a01b8b85722ab1805426a86f3ea64d0134513ce14fe9c55f3f918a21fb
+generated: "2026-03-09T23:02:42.799515974Z"

clusters/cl01tl/helm/generic-device-plugin/Chart.yaml

@@ -15,6 +15,6 @@ maintainers:
 dependencies:
   - name: generic-device-plugin
     repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-    version: 0.20.20
+    version: 0.20.21
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 appVersion: 1.0.0

clusters/cl01tl/helm/gitea/Chart.lock

@@ -7,21 +7,21 @@ dependencies:
   version: 0.0.3
 - name: meilisearch
   repository: https://meilisearch.github.io/meilisearch-kubernetes
-  version: 0.26.0
+  version: 0.27.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.3.0
+  version: 2.4.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.8.0
-- name: redis-replication
-  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.1.0
+  version: 7.9.1
 - name: valkey
-  repository: https://valkey.io/valkey-helm
-  version: 0.9.3
+  repository: oci://harbor.alexlebens.net/helm-charts
+  version: 0.4.0
+- name: valkey
+  repository: oci://harbor.alexlebens.net/helm-charts
+  version: 0.4.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-digest: sha256:9d89745fb4c694706585f7bf6652a45307ad3e528f0f6bd0225ed44282567438
-generated: "2026-03-04T00:38:48.956491426Z"
+  version: 0.8.0
+digest: sha256:8f243465537fe443e97a8813e23e95d3608a6a2898b93209d03cf43f4ca8cc5d
+generated: "2026-03-11T22:57:17.026946319Z"

clusters/cl01tl/helm/gitea/Chart.yaml

@@ -33,26 +33,26 @@ dependencies:
     repository: https://dl.gitea.com/charts/
     version: 0.0.3
   - name: meilisearch
-    version: 0.26.0
+    version: 0.27.0
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.3.0
+    version: 2.4.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.8.0
+    version: 7.9.1
     repository: oci://harbor.alexlebens.net/helm-charts
-  - name: redis-replication
-    alias: redis-replication-gitea
-    version: 1.1.0
+  - name: valkey
+    alias: valkey-gitea
+    version: 0.4.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey-renovate
-    version: 0.9.3
-    repository: https://valkey.io/valkey-helm
+    version: 0.4.0
+    repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-storage
-    version: 0.7.0
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/gitea.png
 # renovate: datasource=github-releases depName=go-gitea/gitea

clusters/cl01tl/helm/gitea/values.yaml

@@ -70,13 +70,13 @@ gitea:
       cache:
         ENABLED: true
         ADAPTER: redis
-        HOST: redis://redis-replication-gitea-master.gitea:6379
+        HOST: redis://gitea-valkey.gitea:6379
       queue:
         TYPE: redis
-        CONN_STR: redis://redis-replication-gitea-master.gitea:6379
+        CONN_STR: redis://gitea-valkey.gitea:6379
       session:
         PROVIDER: redis
-        PROVIDER_CONFIG: redis://redis-replication-gitea-master.gitea:6379
+        PROVIDER_CONFIG: redis://gitea-valkey.gitea:6379
       indexer:
         ISSUE_INDEXER_ENABLED: true
         ISSUE_INDEXER_TYPE: meilisearch
@@ -145,7 +145,7 @@ gitea-actions:
         log:
           level: debug
         cache:
-          enabled: false
+          enabled: true
         runner:
           labels:
             - "ubuntu-latest:docker://harbor.alexlebens.net/proxy-hub.docker/gitea/runner-images:ubuntu-24.04"
@@ -222,7 +222,7 @@ postgres-18-cluster:
       - name: live-backup
         suspend: false
         immediate: true
-        schedule: "0 0 0 * * *"
+        schedule: "0 0 7 * * *"
         backupName: garage-local
       # - name: weekly-backup
       #   suspend: true
@@ -234,40 +234,22 @@ postgres-18-cluster:
       #   immediate: true
       #   schedule: "0 0 0 * * *"
       #   backupName: external
-redis-replication-gitea:
-  replicationNameOverride: redis-replication-gitea
-  redisReplication:
-    clusterSize: 3
+valkey-gitea:
+  valkey:
     resources:
       requests:
         cpu: 20m
-        memory: 400Mi
-    volumeClaimTemplate:
-      spec:
-        resources:
-          requests:
-            storage: 10Gi
-    sentinel:
-      enabled: true
+        memory: 256Mi
+    dataStorage:
+      requestedSize: 10Gi
+    replica:
+      persistence:
+        size: 10Gi
 valkey-renovate:
-  image:
-    registry: ghcr.io
-    repository: valkey-io/valkey
-    tag: 9.0.3-alpine
-  resources:
-    requests:
-      cpu: 10m
-      memory: 32Mi
-  dataStorage:
-    enabled: false
-  replica:
-    enabled: false
-  metrics:
-    enabled: true
-    serviceMonitor:
-      enabled: true
-    podMonitor:
-      enabled: true
+  valkey:
+    nameOverride: valkey-renovate
+    replica:
+      enabled: false
 volsync-target-storage:
   pvcTarget: gitea-shared-storage
   moverSecurityContext:
@@ -277,7 +259,7 @@ volsync-target-storage:
     fsGroupChangePolicy: OnRootMismatch
   local:
     enabled: true
-    schedule: 0 0 0 * * *
+    schedule: 0 0 7 * * *
     restic:
       pruneIntervalDays: 3
       retain:

clusters/cl01tl/helm/grafana-operator/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 5.22.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.8.0
-- name: redis-replication
+  version: 7.9.1
+- name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.1.0
-- name: redis-replication
+  version: 0.4.0
+- name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.1.0
-digest: sha256:ad859d46d684dcb166896c336d899da35bad32dc12ec64e327fbd366c77d81d7
-generated: "2026-03-04T00:39:30.940857832Z"
+  version: 0.4.0
+digest: sha256:45cdb638fe815c3fc9703626b902d0f69ed8ffd0625e0f95bd7b33682126433b
+generated: "2026-03-11T22:57:43.133815464Z"

clusters/cl01tl/helm/grafana-operator/Chart.yaml

@@ -21,15 +21,15 @@ dependencies:
     repository: https://grafana.github.io/helm-charts
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.8.0
+    version: 7.9.1
     repository: oci://harbor.alexlebens.net/helm-charts
-  - name: redis-replication
-    alias: redis-replication-unified-alerting
-    version: 1.1.0
+  - name: valkey
+    alias: valkey-unified-alerting
+    version: 0.4.0
     repository: oci://harbor.alexlebens.net/helm-charts
-  - name: redis-replication
-    alias: redis-replication-remote-cache
-    version: 1.1.0
+  - name: valkey
+    alias: valkey-remote-cache
+    version: 0.4.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/grafana.png
 # renovate: datasource=github-releases depName=grafana/grafana-operator

clusters/cl01tl/helm/grafana-operator/templates/grafana-dashboard.yaml

@@ -301,44 +301,6 @@ spec:
   resyncPeriod: 1h
   url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/service/harbor.json
 
----
-apiVersion: grafana.integreatly.org/v1beta1
-kind: GrafanaDashboard
-metadata:
-  name: grafana-dashboard-redis-replication
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: grafana-dashboard-redis-replication
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  instanceSelector:
-    matchLabels:
-      app: grafana-main
-  contentCacheDuration: 1h
-  folderUID: grafana-folder-service
-  resyncPeriod: 1h
-  url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/service/redis-replication.json
-
----
-apiVersion: grafana.integreatly.org/v1beta1
-kind: GrafanaDashboard
-metadata:
-  name: grafana-dashboard-redis-operator
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: grafana-dashboard-redis-operator
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  instanceSelector:
-    matchLabels:
-      app: grafana-main
-  contentCacheDuration: 1h
-  folderUID: grafana-folder-service
-  resyncPeriod: 1h
-  url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/service/redis-operator.json
-
 ---
 apiVersion: grafana.integreatly.org/v1beta1
 kind: GrafanaDashboard

clusters/cl01tl/helm/grafana-operator/templates/grafana.yaml

@@ -45,10 +45,10 @@ spec:
       password: ${DB_PASSWORD}
     remote_cache:
       type: redis
-      connstr: addr=redis-replication-remote-cache-master.grafana-operator:6379,pool_size=100,db=0,ssl=false
+      connstr: addr=grafana-operator-valkey-remote-cache.grafana-operator:6379,pool_size=100,db=0,ssl=false
     unified_alerting:
       enabled: "true"
-      ha_redis_address: redis-replication-unified-alerting-master.grafana-operator:6379
+      ha_redis_address: grafana-operator-valkey-unified-alerting.grafana-operator:6379
   deployment:
     spec:
       replicas: 3

clusters/cl01tl/helm/grafana-operator/values.yaml

@@ -42,7 +42,7 @@ postgres-18-cluster:
       - name: live-backup
         suspend: false
         immediate: true
-        schedule: "0 0 0 * * *"
+        schedule: "0 30 14 * * *"
         backupName: garage-local
       # - name: weekly-backup
       #   suspend: true
@@ -54,13 +54,11 @@ postgres-18-cluster:
       #   immediate: true
       #   schedule: "0 0 0 * * *"
       #   backupName: external
-redis-replication-unified-alerting:
-  replicationNameOverride: redis-replication-unified-alerting
-  redisReplication:
-    clusterSize: 3
-    sentinel:
-      enabled: true
-redis-replication-remote-cache:
-  replicationNameOverride: redis-replication-remote-cache
-  redisReplication:
-    clusterSize: 1
+valkey-unified-alerting:
+  valkey:
+    nameOverride: valkey-unified-alerting
+valkey-remote-cache:
+  valkey:
+    nameOverride: valkey-remote-cache
+    replica:
+      enabled: false

clusters/cl01tl/helm/harbor/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 1.18.2
 - name: postgres-cluster
   repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
-  version: 7.8.0
-- name: redis-replication
+  version: 7.9.1
+- name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.1.0
-digest: sha256:5ed0bf7a628fafdf2adc742b80ba900fd836e56682e9c3c37c4959cc56a91e4b
-generated: "2026-03-04T00:40:00.093022723Z"
+  version: 0.4.0
+digest: sha256:898f51eabee5959b9e7ebe90640cb915cb2dee446e6a6649a29499fecab8b6c7
+generated: "2026-03-11T22:58:00.955579445Z"

clusters/cl01tl/helm/harbor/Chart.yaml

@@ -21,11 +21,12 @@ dependencies:
     repository: https://helm.goharbor.io
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.8.0
+    version: 7.9.1
     repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
-  - name: redis-replication
-    version: 1.1.0
+  - name: valkey
+    alias: valkey
+    version: 0.4.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/harbor.png
 # renovate: datasource=github-releases depName=goharbor/harbor
-appVersion: v2.14.2
+appVersion: v2.14.3

clusters/cl01tl/helm/harbor/values.yaml

@@ -41,12 +41,12 @@ harbor:
   portal:
     image:
       repository: goharbor/harbor-portal
-      tag: v2.14.2
+      tag: v2.14.3
     replicas: 2
   core:
     image:
       repository: goharbor/harbor-core
-      tag: v2.14.2
+      tag: v2.14.3
     replicas: 2
     existingSecret: harbor-secret
     secretName: harbor-secret
@@ -54,7 +54,7 @@ harbor:
   jobservice:
     image:
       repository: goharbor/harbor-jobservice
-      tag: v2.14.2
+      tag: v2.14.3
     replicas: 2
     jobLoggers:
       - stdout
@@ -63,11 +63,11 @@ harbor:
     registry:
       image:
         repository: goharbor/registry-photon
-        tag: v2.14.2
+        tag: v2.14.3
     controller:
       image:
         repository: goharbor/harbor-registryctl
-        tag: v2.14.2
+        tag: v2.14.3
     existingSecret: harbor-secret
     relativeurls: true
     credentials:
@@ -90,18 +90,18 @@ harbor:
   redis:
     type: external
     external:
-      addr: "redis-replication-harbor-master.harbor:6379"
+      addr: harbor-valkey.harbor:6379
   exporter:
     image:
       repository: goharbor/harbor-exporter
-      tag: v2.14.2
+      tag: v2.14.3
     replicas: 2
 postgres-18-cluster:
   mode: recovery
   recovery:
     method: objectStore
     objectStore:
-      index: 1
+      index: 2
   backup:
     objectStore:
       - name: garage-local
@@ -126,7 +126,7 @@ postgres-18-cluster:
       - name: live-backup
         suspend: false
         immediate: true
-        schedule: "0 0 0 * * *"
+        schedule: "0 35 14 * * *"
         backupName: garage-local
       # - name: weekly-backup
       #   suspend: true
@@ -138,8 +138,3 @@ postgres-18-cluster:
       #   immediate: true
       #   schedule: "0 0 0 * * *"
       #   backupName: external
-redis-replication:
-  redisReplication:
-    clusterSize: 3
-    sentinel:
-      enabled: true

clusters/cl01tl/helm/home-assistant/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.6.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-digest: sha256:2ba5b6579e7296d663fd0dcb7dfb4fea67142413801f6fbc4125a0e731b45210
-generated: "2026-01-16T18:46:42.940648748Z"
+  version: 0.8.0
+digest: sha256:dc33c006806b1ac93403a6e77c12e013cac6cf64586bc1d26c54841e6ddf7d2c
+generated: "2026-03-06T01:08:23.774548766Z"

clusters/cl01tl/helm/home-assistant/Chart.yaml

@@ -21,8 +21,8 @@ dependencies:
     version: 4.6.2
   - name: volsync-target
     alias: volsync-target-config
-    version: 0.7.0
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/home-assistant.png
 # renovate: datasource=github-releases depName=home-assistant/core
-appVersion: 2026.3.0
+appVersion: 2026.3.1

clusters/cl01tl/helm/home-assistant/values.yaml

@@ -9,7 +9,7 @@ home-assistant:
         main:
           image:
             repository: ghcr.io/home-assistant/home-assistant
-            tag: 2026.3.0
+            tag: 2026.3.1
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -21,7 +21,7 @@ home-assistant:
         code-server:
           image:
             repository: ghcr.io/linuxserver/code-server
-            tag: 4.109.5@sha256:aa43fb2fc31127e9d2166e903c7f13792351e38658ba29645662a89ff04ff90d
+            tag: 4.111.0@sha256:04107645b21f33215d1087773e2c889dfed823434f5dc4c7e9ae20df218a8ef3
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -134,9 +134,10 @@ volsync-target-config:
     fsGroupChangePolicy: OnRootMismatch
   local:
     enabled: true
-    schedule: 24 8 * * *
+    schedule: 22 8 * * *
   remote:
-    enabled: false
+    enabled: true
+    schedule: 22 9 * * *
   external:
     enabled: true
-    schedule: 24 9 * * *
+    schedule: 22 10 * * *

clusters/cl01tl/helm/homepage/values.yaml

@@ -36,6 +36,24 @@ homepage:
     config:
       enabled: true
       data:
+        custom.css: |
+            html {
+                font-size: 18px;
+            }
+            ul#myTab {
+                background-color: rgba(240, 230, 215, 0.12) !important;
+                color: white !important;
+            }
+            li.service div.service-card,
+            li.bookmark a.rounded-md {
+                color: white !important;
+                background-color: rgba(240, 230, 215, 0.12) !important;
+                transition: all 150ms ease !important;
+            }
+            li.service div.service-card:hover,
+            li.bookmark a.rounded-md:hover {
+                background-color: rgba(240, 230, 215, 0.18) !important;
+            }
         docker.yaml: ""
         kubernetes.yaml: |
           mode: cluster
@@ -44,6 +62,7 @@ homepage:
           headerStyle: clean
           hideVersion: true
           cardBlur: xs
+          color: slate
           background:
             image: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/background.jpg
           theme: dark
@@ -141,6 +160,12 @@ homepage:
                   href: https://yamtrack.alexlebens.net
                   siteMonitor: http://yamtrack.yamtrack:80
                   statusStyle: dot
+              - Movie Roulette:
+                  icon: https://raw.githubusercontent.com/sahara101/Movie-Roulette/refs/heads/main/static/icons/icon.png
+                  description: Movie Roulette
+                  href: https://movie-roulette.alexlebens.net
+                  siteMonitor: http://movie-roulette.movie-roulette:80
+                  statusStyle: dot
               - Movies and TV:
                   icon: sh-jellyfin.webp
                   description: Jellyfin
@@ -826,10 +851,10 @@ homepage:
       advancedMounts:
         main:
           main:
-            - path: /app/config/bookmarks.yaml
+            - path: /app/config/custom.css
               readOnly: true
               mountPropagation: None
-              subPath: bookmarks.yaml
+              subPath: custom.css
             - path: /app/config/docker.yaml
               readOnly: true
               mountPropagation: None
@@ -838,10 +863,6 @@ homepage:
               readOnly: true
               mountPropagation: None
               subPath: kubernetes.yaml
-            - path: /app/config/services.yaml
-              readOnly: true
-              mountPropagation: None
-              subPath: services.yaml
             - path: /app/config/settings.yaml
               readOnly: true
               mountPropagation: None
@@ -850,3 +871,11 @@ homepage:
               readOnly: true
               mountPropagation: None
               subPath: widgets.yaml
+            - path: /app/config/services.yaml
+              readOnly: true
+              mountPropagation: None
+              subPath: services.yaml
+            - path: /app/config/bookmarks.yaml
+              readOnly: true
+              mountPropagation: None
+              subPath: bookmarks.yaml

clusters/cl01tl/helm/immich/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.8.0
-- name: redis-replication
+  version: 7.9.1
+- name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.1.0
+  version: 0.4.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-digest: sha256:8c204b4e38b60693c1ed5a80ea441567bc074aebf3282591b987087024ecd3bc
-generated: "2026-03-04T00:40:31.462721535Z"
+  version: 0.8.0
+digest: sha256:b886b0a1555ea75fbff52a58ccbf1659acbda20e933107bcbab9b00192aa25bd
+generated: "2026-03-11T22:58:20.294240859Z"

clusters/cl01tl/helm/immich/Chart.yaml

@@ -20,14 +20,15 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.8.0
+    version: 7.9.1
     repository: oci://harbor.alexlebens.net/helm-charts
-  - name: redis-replication
-    version: 1.1.0
+  - name: valkey
+    alias: valkey
+    version: 0.4.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data
-    version: 0.7.0
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/immich.png
 # renovate: datasource=github-releases depName=immich-app/immich

clusters/cl01tl/helm/immich/values.yaml

@@ -19,7 +19,7 @@ immich:
             - name: IMMICH_CONFIG_FILE
               value: /config/immich.json
             - name: REDIS_HOSTNAME
-              value: redis-replication-immich-master
+              value: immich-valkey
             - name: DB_VECTOR_EXTENSION
               value: vectorchord
             - name: DB_HOSTNAME
@@ -209,7 +209,7 @@ postgres-18-cluster:
       - name: live-backup
         suspend: false
         immediate: true
-        schedule: "0 0 0 * * *"
+        schedule: "0 40 14 * * *"
         backupName: garage-local
       # - name: weekly-backup
       #   suspend: true
@@ -221,26 +221,20 @@ postgres-18-cluster:
       #   immediate: true
       #   schedule: "0 0 0 * * *"
       #   backupName: external
-
-redis-replication:
-  redisReplication:
-    clusterSize: 3
-    sentinel:
-      enabled: true
 volsync-target-data:
   pvcTarget: immich
   local:
     enabled: true
-    schedule: 28 8 * * *
+    schedule: 24 8 * * *
     restic:
       cacheCapacity: 10Gi
   remote:
     enabled: true
-    schedule: 28 10 * * *
+    schedule: 24 9 * * *
     restic:
       cacheCapacity: 10Gi
   external:
     enabled: true
-    schedule: 28 9 * * *
+    schedule: 24 10 * * *
     restic:
       cacheCapacity: 10Gi

clusters/cl01tl/helm/jellyfin/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: meilisearch
   repository: https://meilisearch.github.io/meilisearch-kubernetes
-  version: 0.26.0
+  version: 0.27.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-digest: sha256:68e88cb0f8b9569d8b53dcc63d47c31320aa0f10173eb938e5b56e8b84b0caec
-generated: "2026-03-04T00:24:27.958585796Z"
+  version: 0.8.0
+digest: sha256:ca384647a640ae717ac874a2627f00ac9a1e5c97ff5eeb8f326ebdd471ab1623
+generated: "2026-03-09T15:04:08.648165537Z"

clusters/cl01tl/helm/jellyfin/Chart.yaml

@@ -25,11 +25,11 @@ dependencies:
     repository: https://bjw-s-labs.github.io/helm-charts/
     version: 4.6.2
   - name: meilisearch
-    version: 0.26.0
+    version: 0.27.0
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: volsync-target
     alias: volsync-target-config
-    version: 0.7.0
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/jellyfin.png
 # renovate: datasource=github-releases depName=jellyfin/jellyfin

clusters/cl01tl/helm/jellyfin/values.yaml

@@ -143,14 +143,16 @@ volsync-target-config:
   pvcTarget: jellyfin-config
   local:
     enabled: true
-    schedule: 30 8 * * *
+    schedule: 26 8 * * *
     restic:
       cacheCapacity: 10Gi
   remote:
+    enabled: true
+    schedule: 26 9 * * *
     restic:
       cacheCapacity: 10Gi
   external:
     enabled: true
-    schedule: 30 9 * * *
+    schedule: 26 10 * * *
     restic:
       cacheCapacity: 10Gi

clusters/cl01tl/helm/jellystat/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.8.0
+  version: 7.9.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-digest: sha256:34b82ccec2d4666175e0952d03f9467e3966c1a9a15661c6ceeed2b492c9d82d
-generated: "2026-02-27T18:16:58.512565338Z"
+  version: 0.8.0
+digest: sha256:29b92b08c230d5f3abc13949b299acccd1e9f8ff7df1f691a5dec41df5405595
+generated: "2026-03-11T22:58:35.766813121Z"

clusters/cl01tl/helm/jellystat/Chart.yaml

@@ -21,11 +21,11 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.8.0
+    version: 7.9.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data
-    version: 0.7.0
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/jellystat.png
 # renovate: datasource=github-releases depName=CyferShepard/Jellystat

clusters/cl01tl/helm/jellystat/values.yaml

@@ -129,7 +129,7 @@ postgres-18-cluster:
       - name: live-backup
         suspend: false
         immediate: true
-        schedule: "0 0 0 * * *"
+        schedule: "0 45 14 * * *"
         backupName: garage-local
       # - name: weekly-backup
       #   suspend: true
@@ -145,9 +145,10 @@ volsync-target-data:
   pvcTarget: jellystat-data
   local:
     enabled: true
-    schedule: 32 8 * * *
+    schedule: 28 8 * * *
   remote:
-    enabled: false
+    enabled: true
+    schedule: 28 9 * * *
   external:
     enabled: true
-    schedule: 32 9 * * *
+    schedule: 28 10 * * *

clusters/cl01tl/helm/karakeep/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.6.2
 - name: meilisearch
   repository: https://meilisearch.github.io/meilisearch-kubernetes
-  version: 0.26.0
+  version: 0.27.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.3.0
+  version: 2.4.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-digest: sha256:771c49ed1981152cc94725f772eb30e973410b858dcc6e9f335054934649347d
-generated: "2026-03-04T00:24:56.137773017Z"
+  version: 0.8.0
+digest: sha256:75f92316d4b6229d00e3dfa39ed5026ad39a28f833321cd3887a2048cdac34c7
+generated: "2026-03-09T22:04:48.630821646Z"

clusters/cl01tl/helm/karakeep/Chart.yaml

@@ -22,14 +22,14 @@ dependencies:
     repository: https://bjw-s-labs.github.io/helm-charts/
     version: 4.6.2
   - name: meilisearch
-    version: 0.26.0
+    version: 0.27.0
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.3.0
+    version: 2.4.0
   - name: volsync-target
     alias: volsync-target-data
-    version: 0.7.0
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/webp/karakeep.webp
 # renovate: datasource=github-releases depName=karakeep-app/karakeep

clusters/cl01tl/helm/karakeep/templates/external-secret.yaml

@@ -57,6 +57,43 @@ spec:
         metadataPolicy: None
         property: secret
 
+---
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: karakeep-bucket-garage
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: karakeep-bucket-garage
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  data:
+    - secretKey: ACCESS_KEY_ID
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/karakeep-assets
+        metadataPolicy: None
+        property: ACCESS_KEY_ID
+    - secretKey: ACCESS_SECRET_KEY
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/karakeep-assets
+        metadataPolicy: None
+        property: ACCESS_SECRET_KEY
+    - secretKey: ACCESS_REGION
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/karakeep-assets
+        metadataPolicy: None
+        property: ACCESS_REGION
+
 ---
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret

clusters/cl01tl/helm/karakeep/templates/object-bucket-claim.yaml

@@ -1,11 +0,0 @@
-apiVersion: objectbucket.io/v1alpha1
-kind: ObjectBucketClaim
-metadata:
-  name: ceph-bucket-karakeep
-  labels:
-    app.kubernetes.io/name: ceph-bucket-karakeep
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  generateBucketName: bucket-karakeep
-  storageClassName: ceph-bucket

clusters/cl01tl/helm/karakeep/values.yaml

@@ -29,24 +29,24 @@ karakeep:
                   name: karakeep-key-secret
                   key: prometheus-token
             - name: ASSET_STORE_S3_ENDPOINT
-              value: http://rook-ceph-rgw-ceph-objectstore.rook-ceph.svc:80
+              value: http://garage-main.garage:3900
             - name: ASSET_STORE_S3_REGION
-              value: us-east-1
-            - name: ASSET_STORE_S3_BUCKET
               valueFrom:
-                configMapKeyRef:
-                  name: ceph-bucket-karakeep
-                  key: BUCKET_NAME
+                secretKeyRef:
+                  name: karakeep-bucket-garage
+                  key: ACCESS_REGION
+            - name: ASSET_STORE_S3_BUCKET
+              value: karakeep-assets
             - name: ASSET_STORE_S3_ACCESS_KEY_ID
               valueFrom:
                 secretKeyRef:
-                  name: ceph-bucket-karakeep
-                  key: AWS_ACCESS_KEY_ID
+                  name: karakeep-bucket-garage
+                  key: ACCESS_KEY_ID
             - name: ASSET_STORE_S3_SECRET_ACCESS_KEY
               valueFrom:
                 secretKeyRef:
-                  name: ceph-bucket-karakeep
-                  key: AWS_SECRET_ACCESS_KEY
+                  name: karakeep-bucket-garage
+                  key: ACCESS_SECRET_KEY
             - name: ASSET_STORE_S3_FORCE_PATH_STYLE
               value: true
             - name: MEILI_ADDR
@@ -172,9 +172,10 @@ volsync-target-data:
   pvcTarget: karakeep
   local:
     enabled: true
-    schedule: 34 8 * * *
+    schedule: 30 8 * * *
   remote:
-    enabled: false
+    enabled: true
+    schedule: 30 9 * * *
   external:
     enabled: true
-    schedule: 34 9 * * *
+    schedule: 30 10 * * *

clusters/cl01tl/helm/komodo/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.8.0
-digest: sha256:dd1ccfe8d0bfc7248141d2f72806c6437572f21d818941e9071f58d1a0a47259
-generated: "2026-02-27T18:17:12.586352018Z"
+  version: 7.9.1
+digest: sha256:833a88f82c14f78d63abea99244f2473bee2f5124a533a898a34844956f62b27
+generated: "2026-03-11T22:58:51.287064579Z"

clusters/cl01tl/helm/komodo/Chart.yaml

@@ -23,7 +23,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgresql-17-fdb-cluster
-    version: 7.8.0
+    version: 7.9.1
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/komodo.png
 # renovate: datasource=github-releases depName=moghtech/komodo

clusters/cl01tl/helm/komodo/values.yaml

@@ -205,7 +205,7 @@ postgresql-17-fdb-cluster:
   recovery:
     method: objectStore
     objectStore:
-      index: 1
+      index: 2
   backup:
     objectStore:
       - name: garage-local
@@ -230,7 +230,7 @@ postgresql-17-fdb-cluster:
       - name: live-backup
         suspend: false
         immediate: true
-        schedule: "0 0 0 * * *"
+        schedule: "0 50 14 * * *"
         backupName: garage-local
       # - name: weekly-backup
       #   suspend: true

clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: kube-prometheus-stack
   repository: oci://ghcr.io/prometheus-community/charts
-  version: 82.9.0
+  version: 82.10.3
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
   version: 4.6.2
-- name: redis-replication
+- name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.1.0
-digest: sha256:7bb97029b1c2588ec93e5a9e267ff189489397048393ed4c871c5e42208cc660
-generated: "2026-03-05T04:51:19.209422923Z"
+  version: 0.4.0
+digest: sha256:37ffa4a21ed29703cae9c9f3fb029566a1dd6af6e0fe8cc3862a2226d6644114
+generated: "2026-03-10T19:02:41.11005238Z"

clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml

@@ -20,14 +20,15 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: kube-prometheus-stack
-    version: 82.9.0
+    version: 82.10.3
     repository: oci://ghcr.io/prometheus-community/charts
   - name: app-template
     alias: ntfy-alertmanager
     repository: https://bjw-s-labs.github.io/helm-charts/
     version: 4.6.2
-  - name: redis-replication
-    version: 1.1.0
+  - name: valkey
+    alias: valkey
+    version: 0.4.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/prometheus.png
 # renovate: datasource=github-releases depName=prometheus-operator/prometheus-operator

clusters/cl01tl/helm/kube-prometheus-stack/values.yaml

@@ -170,17 +170,10 @@ ntfy-alertmanager:
               readOnly: true
               mountPropagation: None
               subPath: config
-redis-replication:
-  redisReplication:
-    clusterSize: 3
-    resources:
-      requests:
-        cpu: 20m
-        memory: 32Mi
-    volumeClaimTemplate:
-      spec:
-        resources:
-          requests:
-            storage: 10Gi
-    sentinel:
-      enabled: true
+valkey:
+  valkey:
+    dataStorage:
+      requestedSize: 10Gi
+    replica:
+      persistence:
+        size: 10Gi

clusters/cl01tl/helm/libation/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.6.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-digest: sha256:2062e2b2bd3858edb894fc41dc3946b6e991734a3bfb6215d3a4562e9d919ca6
-generated: "2026-01-16T18:49:13.859329796Z"
+  version: 0.8.0
+digest: sha256:0cdd20ce501fafcd8fdedb4115352eed88c578713de6b325d661ec630b14ef17
+generated: "2026-03-06T01:10:32.425014216Z"

clusters/cl01tl/helm/libation/Chart.yaml

@@ -20,7 +20,7 @@ dependencies:
     version: 4.6.2
   - name: volsync-target
     alias: volsync-target-config
-    version: 0.7.0
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/libation.png
 # renovate: datasource=github-releases depName=rmcrackan/Libation

clusters/cl01tl/helm/libation/values.yaml

@@ -75,9 +75,10 @@ volsync-target-config:
   pvcTarget: libation
   local:
     enabled: true
-    schedule: 36 8 * * *
+    schedule: 32 8 * * *
   remote:
-    enabled: false
+    enabled: true
+    schedule: 32 9 * * *
   external:
     enabled: true
-    schedule: 36 9 * * *
+    schedule: 32 10 * * *

clusters/cl01tl/helm/lidarr/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.8.0
+  version: 7.9.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-digest: sha256:a38acc5cf042d553608a6e8deafee1cb09e4c8ad7222c6ce482ffaaf6fe2c384
-generated: "2026-02-27T18:17:26.460296811Z"
+  version: 0.8.0
+digest: sha256:d43b95fa1fc70c93541b9d73180406b31059c6cc45aa57a0cc8d9386c64833c3
+generated: "2026-03-11T22:59:07.151659257Z"

clusters/cl01tl/helm/lidarr/Chart.yaml

@@ -24,11 +24,11 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.8.0
+    version: 7.9.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config
-    version: 0.7.0
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/lidarr.png
 appVersion: 3.1.2-nightly

clusters/cl01tl/helm/lidarr/values.yaml

@@ -15,7 +15,7 @@ lidarr:
         main:
           image:
             repository: ghcr.io/linuxserver/lidarr
-            tag: 3.1.2-nightly@sha256:f64fabd1737d9c7d519e1a37aba97b2e110d717e1c497a6f9788766f9633cf8f
+            tag: 3.1.2-nightly@sha256:2b1b64f07214c6cf05bcfed999aa74ee23825e4bc2ef2c48aba1cd5d5bf968fe
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -167,7 +167,7 @@ postgres-18-cluster:
       - name: live-backup
         suspend: false
         immediate: true
-        schedule: "0 0 0 * * *"
+        schedule: "0 55 14 * * *"
         backupName: garage-local
       # - name: weekly-backup
       #   suspend: true
@@ -188,9 +188,10 @@ volsync-target-config:
     fsGroupChangePolicy: OnRootMismatch
   local:
     enabled: true
-    schedule: 38 8 * * *
+    schedule: 34 8 * * *
   remote:
-    enabled: false
+    enabled: true
+    schedule: 34 9 * * *
   external:
     enabled: true
-    schedule: 38 9 * * *
+    schedule: 34 10 * * *

clusters/cl01tl/helm/local-path-provisioner/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: local-path-provisioner
   repository: https://charts.containeroo.ch
-  version: 0.0.35
-digest: sha256:c59cc5a81e797a9e2ab0f8e6bf03cb3e4dfc740555631aa1d41b7def1d2c60c8
-generated: "2026-01-10T19:01:45.394965495Z"
+  version: 0.0.36
+digest: sha256:ac212733a0ba2046767ad1718ca740d5aad3d1bfc49c5e7a5056c8414c1d65d4
+generated: "2026-03-10T19:00:30.739038561Z"

clusters/cl01tl/helm/local-path-provisioner/Chart.yaml

@@ -15,8 +15,8 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: local-path-provisioner
-    version: 0.0.35
+    version: 0.0.36
     repository: https://charts.containeroo.ch
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 # renovate: datasource=github-releases depName=rancher/local-path-provisioner
-appVersion: v0.0.34
+appVersion: v0.0.35