chore(deps): update volsync-target docker tag to v2

Merge pull request 'chore(deps): update ubuntu docker tag to resolute-20260421' (#6536 ) from renovate/unified-ubuntu into main
chore(deps): update ubuntu docker tag to resolute-20260421
2026-05-08 05:27:22 +00:00 · 2026-05-08 05:01:14 +00:00 · 2026-05-08 04:27:52 +00:00 · 2026-05-08 04:25:35 +00:00 · 2026-05-08 04:22:31 +00:00 · 2026-05-08 03:51:29 +00:00
205 changed files with 832 additions and 804 deletions
--- a/.gitea/workflows/renovate.yaml
+++ b/.gitea/workflows/renovate.yaml
@@ -13,7 +13,7 @@ on:
 jobs:
  renovate:
    runs-on: ubuntu-js
-    container: ghcr.io/renovatebot/renovate:43.165.1@sha256:b1e44b4b22ded56a2ccd5f41edb764b8ef62dd537b3b32e60d676b0424e7bc06
+    container: ghcr.io/renovatebot/renovate:43.169.4@sha256:4c84638a2b70b2fe2c3bbf87d25e6f8aba40d83f8ca2b7c0bd3d0f1a4591ef7b
    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
--- a/clusters/cl01tl/helm/actual/Chart.lock
+++ b/clusters/cl01tl/helm/actual/Chart.lock
@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 5.0.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.1.1
-digest: sha256:e472c85ad45c6071ccc3a23047927aba42814a931865736e40ad5c16d597ea53
-generated: "2026-04-28T23:30:55.463292642Z"
+  version: 2.0.0
+digest: sha256:9468b3406ab0d91bf44a1a940eca8648782f3519d0c683d21b33e16c258c9175
+generated: "2026-05-08T05:15:41.995074938Z"
--- a/clusters/cl01tl/helm/actual/Chart.yaml
+++ b/clusters/cl01tl/helm/actual/Chart.yaml
@@ -17,10 +17,10 @@ dependencies:
  - name: app-template
    alias: actual
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 5.0.0
  - name: volsync-target
    alias: volsync-target-data
-    version: 1.1.1
+    version: 2.0.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/actual-budget.png
 # renovate: datasource=github-releases depName=actualbudget/actual
--- a/clusters/cl01tl/helm/argocd/Chart.yaml
+++ b/clusters/cl01tl/helm/argocd/Chart.yaml
@@ -13,8 +13,8 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: argo-cd
-    version: 9.5.11
+    version: 9.5.12
    repository: https://argoproj.github.io/argo-helm
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 # renovate: datasource=github-releases depName=argoproj/argo-cd
-appVersion: v3.3.9
+appVersion: v3.4.1
--- a/clusters/cl01tl/helm/audiobookshelf/Chart.lock
+++ b/clusters/cl01tl/helm/audiobookshelf/Chart.lock
@@ -1,12 +1,12 @@
 dependencies:
 - name: app-template
  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 5.0.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.1.1
+  version: 2.0.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.1.1
-digest: sha256:2275b211b02253019e5830e0258f936f1494380cc50cea03bc31d75281365dcc
-generated: "2026-04-28T17:54:10.288277-05:00"
+  version: 2.0.0
+digest: sha256:57c3cc8da25c1dfc8684c5f20f804ce4642abee25cb317097ce6bd17f8bb0504
+generated: "2026-05-08T05:15:53.858692994Z"
--- a/clusters/cl01tl/helm/audiobookshelf/Chart.yaml
+++ b/clusters/cl01tl/helm/audiobookshelf/Chart.yaml
@@ -21,14 +21,14 @@ dependencies:
  - name: app-template
    alias: audiobookshelf
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 5.0.0
  - name: volsync-target
    alias: volsync-target-config
-    version: 1.1.1
+    version: 2.0.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-metadata
-    version: 1.1.1
+    version: 2.0.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/audiobookshelf.png
 # renovate: datasource=github-releases depName=advplyr/audiobookshelf
--- a/clusters/cl01tl/helm/authentik/Chart.lock
+++ b/clusters/cl01tl/helm/authentik/Chart.lock
@@ -4,12 +4,12 @@ dependencies:
  version: 2026.2.2
 - name: cloudflared
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.6.0
+  version: 3.1.0
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 7.12.1
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-digest: sha256:808a2347fadb6a48800c0f7355c422c9ed2ce9f7d1ca3b7d64d62574be98e1f8
-generated: "2026-05-02T01:46:08.112423002Z"
+  version: 0.8.0
+digest: sha256:05dff7a03596d8c1937a4bab6137ebcfab5b8501309316dbe7dc19ca41df9ba9
+generated: "2026-05-08T04:19:53.01704606Z"
--- a/clusters/cl01tl/helm/authentik/Chart.yaml
+++ b/clusters/cl01tl/helm/authentik/Chart.yaml
@@ -22,14 +22,14 @@ dependencies:
    repository: https://charts.goauthentik.io/
  - name: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.6.0
+    version: 3.1.0
  - name: postgres-cluster
    alias: postgres-18-cluster
    version: 7.12.1
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: valkey
    alias: valkey
-    version: 0.7.0
+    version: 0.8.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/authentik.png
 # renovate: datasource=github-releases depName=goauthentik/authentik
--- a/clusters/cl01tl/helm/backrest/Chart.lock
+++ b/clusters/cl01tl/helm/backrest/Chart.lock
@@ -1,12 +1,12 @@
 dependencies:
 - name: app-template
  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 5.0.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.1.1
+  version: 2.0.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.1.1
-digest: sha256:82e85dc79199cc8b75dde412d595621817b3fa2c073c131162d0079a0b63f369
-generated: "2026-04-28T23:31:05.864191451Z"
+  version: 2.0.0
+digest: sha256:440dd48f7cb11c3f84c4543fd51dedeea511b29a96571cefdf3d42ddb988554f
+generated: "2026-05-08T05:16:05.810583854Z"
--- a/clusters/cl01tl/helm/backrest/Chart.yaml
+++ b/clusters/cl01tl/helm/backrest/Chart.yaml
@@ -17,14 +17,14 @@ dependencies:
  - name: app-template
    alias: backrest
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 5.0.0
  - name: volsync-target
    alias: volsync-target-config
-    version: 1.1.1
+    version: 2.0.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-data
-    version: 1.1.1
+    version: 2.0.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/backrest.png
 # renovate: datasource=github-releases depName=garethgeorge/backrest
--- a/clusters/cl01tl/helm/bazarr/Chart.lock
+++ b/clusters/cl01tl/helm/bazarr/Chart.lock
@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 5.0.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.1.1
-digest: sha256:9228c387a1b50545d8b348c94ae55b17952d32652ca48d0329c65f4ee651706e
-generated: "2026-04-28T23:31:15.743170757Z"
+  version: 2.0.0
+digest: sha256:a792d16034f5d4f2a94833480ba8700366c9b64d50443934e15033c349a28e81
+generated: "2026-05-08T05:16:17.66715306Z"
--- a/clusters/cl01tl/helm/bazarr/Chart.yaml
+++ b/clusters/cl01tl/helm/bazarr/Chart.yaml
@@ -21,10 +21,10 @@ dependencies:
  - name: app-template
    alias: bazarr
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 5.0.0
  - name: volsync-target
    alias: volsync-target-config
-    version: 1.1.1
+    version: 2.0.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/bazarr.png
 # renovate: datasource=github-releases depName=linuxserver/docker-bazarr
--- a/clusters/cl01tl/helm/blocky/Chart.lock
+++ b/clusters/cl01tl/helm/blocky/Chart.lock
@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 5.0.0
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-digest: sha256:855928ecd442b96a98bbeb9f957951cb70a8ab07e3c45ffd2ab33dcd5bf85a18
-generated: "2026-05-02T01:46:25.970760734Z"
+  version: 0.8.0
+digest: sha256:c1b8be978ecda2e495eb0a65c62f1794edd1de5c47e288abb8b53b65be4353ac
+generated: "2026-05-08T02:30:25.905416473Z"
--- a/clusters/cl01tl/helm/blocky/Chart.yaml
+++ b/clusters/cl01tl/helm/blocky/Chart.yaml
@@ -17,10 +17,10 @@ dependencies:
  - name: app-template
    alias: blocky
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 5.0.0
  - name: valkey
    alias: valkey
-    version: 0.7.0
+    version: 0.8.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/blocky.png
 # renovate: datasource=github-releases depName=0xerr0r/blocky
--- a/clusters/cl01tl/helm/cloudnative-pg/Chart.lock
+++ b/clusters/cl01tl/helm/cloudnative-pg/Chart.lock
@@ -7,9 +7,9 @@ dependencies:
  version: 0.6.0
 - name: rclone-bucket
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.5.0
+  version: 0.7.0
 - name: rclone-bucket
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.5.0
-digest: sha256:5db4d27087f8a712e7825dc2aac1dc26b6b4e0f9eb11373805be67212bb38e12
-generated: "2026-05-02T01:21:57.977371366Z"
+  version: 0.7.0
+digest: sha256:756a06f08b0e8b888049195e02136115f3c3b09dabfb01c934934c9053cfb40b
+generated: "2026-05-07T01:19:41.214483969Z"
--- a/clusters/cl01tl/helm/cloudnative-pg/Chart.yaml
+++ b/clusters/cl01tl/helm/cloudnative-pg/Chart.yaml
@@ -26,11 +26,11 @@ dependencies:
  - name: rclone-bucket
    alias: rclone-postgres-backups-remote
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.5.0
+    version: 0.7.0
  - name: rclone-bucket
    alias: rclone-postgres-backups-external
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.5.0
+    version: 0.7.0
 icon: https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg.github.io/refs/heads/main/assets/images/hero_image.png
 # renovate: datasource=github-releases depName=cloudnative-pg/cloudnative-pg
 appVersion: 1.29.0
--- a/clusters/cl01tl/helm/cloudnative-pg/values.yaml
+++ b/clusters/cl01tl/helm/cloudnative-pg/values.yaml
@@ -18,7 +18,7 @@ rclone-postgres-backups-remote:
  nameOverride: postgres-backups-remote-rclone
  cronJob:
    suspend: false
-    schedule: 0 6 * * 6
+    schedule: 30 6 * * 1
  rclone:
    source:
      bucketName: postgres-backups
@@ -44,14 +44,13 @@ rclone-postgres-backups-remote:
 rclone-postgres-backups-external:
  nameOverride: postgres-backups-external-rclone
  cronJob:
-    suspend: true
-    schedule: 0 6 * * 6
+    suspend: false
+    schedule: 0 6 * * 1
  rclone:
    source:
-      bucketName: openbao-backups
+      bucketName: postgres-backups
    destination:
-      bucketName: postgres-backups-ecc1010276b61716
-      providerType: DigitalOcean
+      bucketName: postgres-backups-775957147abfbc73
  prune:
    enabled: true
    ageToPrune: 45d
@@ -66,10 +65,10 @@ rclone-postgres-backups-external:
          path: /garage/config
      destination:
        credentials:
-          path: /digital-ocean/home-infra/postgres-backups
+          path: /backblaze/home-infra/postgres-backups
          keyIdProperty: AWS_ACCESS_KEY_ID
          secretKeyProperty: AWS_SECRET_ACCESS_KEY
          regionProperty: AWS_REGION
        config:
-          path: /digital-ocean/config
+          path: /backblaze/config
          endpointProperty: ENDPOINT
--- a/clusters/cl01tl/helm/dawarich/Chart.lock
+++ b/clusters/cl01tl/helm/dawarich/Chart.lock
@@ -1,21 +1,21 @@
 dependencies:
 - name: app-template
  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 5.0.0
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 7.12.1
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
+  version: 0.8.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.1.1
+  version: 2.0.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.1.1
+  version: 2.0.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.1.1
-digest: sha256:3cd2af21091719533fb337241480c613ab14b3cb5820af6e386936ddf4243c14
-generated: "2026-05-02T01:46:38.13080627Z"
+  version: 2.0.0
+digest: sha256:0d0edd3f24d5ae14aa81d31cea6ea065527e4220644235d479b7b079ac5484d8
+generated: "2026-05-08T05:16:30.126342831Z"
--- a/clusters/cl01tl/helm/dawarich/Chart.yaml
+++ b/clusters/cl01tl/helm/dawarich/Chart.yaml
@@ -19,26 +19,26 @@ dependencies:
  - name: app-template
    alias: dawarich
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 5.0.0
  - name: postgres-cluster
    alias: postgres-18-cluster
    version: 7.12.1
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: valkey
    alias: valkey
-    version: 0.7.0
+    version: 0.8.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-storage
-    version: 1.1.1
+    version: 2.0.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-public
-    version: 1.1.1
+    version: 2.0.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-watched
-    version: 1.1.1
+    version: 2.0.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/dawarich.png
 # renovate: datasource=github-releases depName=Freika/dawarich
--- a/clusters/cl01tl/helm/descheduler/values.yaml
+++ b/clusters/cl01tl/helm/descheduler/values.yaml
@@ -10,7 +10,7 @@ descheduler:
    requests:
      cpu: 10m
      memory: 50Mi
-  deschedulingInterval: 5m
+  deschedulingInterval: 2m
  replicas: 3
  leaderElection:
    enabled: true
@@ -51,13 +51,13 @@ descheduler:
          - name: LowNodeUtilization
            args:
              thresholds:
-                cpu: 20
-                memory: 20
-                pods: 20
+                cpu: 30
+                memory: 30
+                pods: 30
              targetThresholds:
-                cpu: 50
-                memory: 50
-                pods: 60
+                cpu: 45
+                memory: 45
+                pods: 45
        plugins:
          balance:
            enabled:
--- a/clusters/cl01tl/helm/directus/Chart.lock
+++ b/clusters/cl01tl/helm/directus/Chart.lock
@@ -1,15 +1,18 @@
 dependencies:
 - name: app-template
  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 5.0.0
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 7.12.1
 - name: valkey
+  repository: oci://harbor.alexlebens.net/helm-charts
+  version: 0.8.0
+- name: rclone-bucket
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.7.0
 - name: rclone-bucket
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.5.0
-digest: sha256:0545b7862144935e861641090f24e1cfb43ba73da7bcbca5013fae6e002e2daa
-generated: "2026-05-02T01:46:52.095684422Z"
+  version: 0.7.0
+digest: sha256:1e83fc82322d5a95e1febd4cbe591eadde20254fe7e080e9d65f4ace4ddbfbf3
+generated: "2026-05-08T02:30:50.680428569Z"
--- a/clusters/cl01tl/helm/directus/Chart.yaml
+++ b/clusters/cl01tl/helm/directus/Chart.yaml
@@ -19,19 +19,23 @@ dependencies:
  - name: app-template
    alias: directus
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 5.0.0
  - name: postgres-cluster
    alias: postgres-18-cluster
    version: 7.12.1
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: valkey
    alias: valkey
-    version: 0.7.0
+    version: 0.8.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: rclone-bucket
    alias: rclone-directus-assets-remote
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.5.0
+    version: 0.7.0
+  - name: rclone-bucket
+    alias: rclone-directus-assets-external
+    repository: oci://harbor.alexlebens.net/helm-charts
+    version: 0.7.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/directus.png
 # renovate: datasource=github-releases depName=directus/directus
 appVersion: 11.17.4
--- a/clusters/cl01tl/helm/directus/values.yaml
+++ b/clusters/cl01tl/helm/directus/values.yaml
@@ -211,9 +211,10 @@ valkey:
        default:
          permissions: "~* &* +@all"
 rclone-directus-assets-remote:
+  nameOverride: directus-assets-remote-rclone
  cronJob:
    suspend: false
-    schedule: 0 0 * * *
+    schedule: 30 6 * * 2
  rclone:
    source:
      bucketName: directus-assets
@@ -231,3 +232,26 @@ rclone-directus-assets-remote:
          path: /garage/home-infra/directus-assets
        config:
          path: /garage/config
+rclone-directus-assets-external:
+  nameOverride: directus-assets-external-rclone
+  cronJob:
+    suspend: false
+    schedule: 0 6 * * 2
+  rclone:
+    source:
+      bucketName: directus-assets
+    destination:
+      bucketName: directus-assets-37363a16b71dc59b
+  secret:
+    externalSecret:
+      source:
+        credentials:
+          path: /garage/home-infra/directus-assets
+        config:
+          path: /garage/config
+      destination:
+        credentials:
+          path: /backblaze/home-infra/directus-assets
+        config:
+          path: /backblaze/config
+          endpointProperty: ENDPOINT
--- a/clusters/cl01tl/helm/elastic-operator/Chart.lock
+++ b/clusters/cl01tl/helm/elastic-operator/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: eck-operator
  repository: https://helm.elastic.co
-  version: 3.3.2
-digest: sha256:ac7a849a6d8244ef56c11f18438c4c76133f92d245228c5a1c8369d42562c177
-generated: "2026-04-01T21:30:02.975920565Z"
+  version: 3.4.0
+digest: sha256:b4787630154471f65ceeb12f65fa24616eab9470e61e089b8e656e42f05f74f1
+generated: "2026-05-06T19:10:32.416627028Z"
--- a/clusters/cl01tl/helm/elastic-operator/Chart.yaml
+++ b/clusters/cl01tl/helm/elastic-operator/Chart.yaml
@@ -14,8 +14,8 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: eck-operator
-    version: 3.3.2
+    version: 3.4.0
    repository: https://helm.elastic.co
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/elastic.png
 # renovate: datasource=github-releases depName=elastic/cloud-on-k8s
-appVersion: v3.3.2
+appVersion: v3.4.0
--- a/clusters/cl01tl/helm/element-web/Chart.lock
+++ b/clusters/cl01tl/helm/element-web/Chart.lock
@@ -4,6 +4,6 @@ dependencies:
  version: 1.4.36
 - name: cloudflared
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.6.0
-digest: sha256:36b3f340ee46f20961fdaac41724528c6c3d4b34bf26d97779da7e33087250a1
-generated: "2026-05-03T00:56:23.054212477Z"
+  version: 3.1.0
+digest: sha256:69f6ee2b73ce840564c18dce35023e515dbfb57cd4a3f1806d5bf3d3633de411
+generated: "2026-05-08T04:20:05.240655985Z"
--- a/clusters/cl01tl/helm/element-web/Chart.yaml
+++ b/clusters/cl01tl/helm/element-web/Chart.yaml
@@ -19,7 +19,7 @@ dependencies:
    repository: https://ananace.gitlab.io/charts
  - name: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.6.0
+    version: 3.1.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/element.png
 # renovate: datasource=github-releases depName=element-hq/element-web
 appVersion: v1.12.17
--- a/clusters/cl01tl/helm/eraser/Chart.lock
+++ b/clusters/cl01tl/helm/eraser/Chart.lock
@@ -4,6 +4,6 @@ dependencies:
  version: 1.4.1
 - name: app-template
  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
-digest: sha256:8414813d3d9d195b16ef7ebf814f7095a16413f4b0e579fcb37738000624f68c
-generated: "2026-04-08T21:39:05.689756-05:00"
+  version: 5.0.0
+digest: sha256:b510fa700aade3c4ff5d8cacd8099c6f52d958aff97d436d4fe63abde2200439
+generated: "2026-05-07T20:44:14.408868308Z"
--- a/clusters/cl01tl/helm/eraser/Chart.yaml
+++ b/clusters/cl01tl/helm/eraser/Chart.yaml
@@ -21,7 +21,7 @@ dependencies:
  - name: app-template
    alias: eraser-metrics
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 5.0.0
 icon: https://raw.githubusercontent.com/eraser-dev/eraser/refs/heads/main/images/eraser-logo-color-1c.png
 # renovate: datasource=github-releases depName=eraser-dev/eraser
 appVersion: v1.4.1
--- a/clusters/cl01tl/helm/eraser/templates/namespace.yaml
+++ b/clusters/cl01tl/helm/eraser/templates/namespace.yaml
@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: {{ .Release.Namespace }}
+    {{- include "custom.labels" . | nindent 4 }}
+    pod-security.kubernetes.io/audit: privileged
+    pod-security.kubernetes.io/enforce: privileged
+    pod-security.kubernetes.io/warn: privileged
--- a/clusters/cl01tl/helm/eraser/values.yaml
+++ b/clusters/cl01tl/helm/eraser/values.yaml
@@ -44,6 +44,8 @@ eraser-metrics:
      type: deployment
      replicas: 1
      strategy: Recreate
+      serviceAccount:
+        name: eraser-metrics
      containers:
        main:
          image:
@@ -83,6 +85,9 @@ eraser-metrics:
                  - otlp
                exporters:
                  - prometheus
+  serviceAccount:
+    eraser:
+      enabled: true
  service:
    main:
      controller: main
--- a/clusters/cl01tl/helm/excalidraw/Chart.lock
+++ b/clusters/cl01tl/helm/excalidraw/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
-digest: sha256:e05d84dd266b8b456a8bc7f9a2bb3ab01f4ac926efd1a58cf405b0cdab343d3f
-generated: "2026-01-17T18:27:08.062835-06:00"
+  version: 5.0.0
+digest: sha256:297d4f45c64ccbaac66c103774e97bacde3f249cab40afef06c0c1106b62ab79
+generated: "2026-05-07T20:44:26.213030206Z"
--- a/clusters/cl01tl/helm/excalidraw/Chart.yaml
+++ b/clusters/cl01tl/helm/excalidraw/Chart.yaml
@@ -16,7 +16,7 @@ dependencies:
  - name: app-template
    alias: excalidraw
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 5.0.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/excalidraw.png
 # renovate: datasource=github-releases depName=excalidraw/excalidraw
 appVersion: v0.18.1
--- a/clusters/cl01tl/helm/excalidraw/values.yaml
+++ b/clusters/cl01tl/helm/excalidraw/values.yaml
@@ -8,7 +8,7 @@ excalidraw:
        main:
          image:
            repository: excalidraw/excalidraw
-            tag: latest@sha256:b6cd04431d88f2756a7c3095cf7970884e8fd6b2800c9445b5a60a5c715bbf0c
+            tag: latest@sha256:f7ee194addd607bf831d2af0f0a34463dd4225e426cf35199ef0b12a803398e9
          env:
            - name: NODE_ENV
              value: production
--- a/clusters/cl01tl/helm/foldergram/Chart.lock
+++ b/clusters/cl01tl/helm/foldergram/Chart.lock
@@ -1,12 +1,12 @@
 dependencies:
 - name: app-template
  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 5.0.0
 - name: cloudflared
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.6.0
+  version: 3.1.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.1.1
-digest: sha256:942224d5a91527ca20a46363d9c5b165643b11df043c119a315f94931e9e4975
-generated: "2026-04-28T23:31:37.471509638Z"
+  version: 2.0.0
+digest: sha256:e223fcec2548c52391bf5b741dab483778b162a40781bdd774db49ff3f9498e7
+generated: "2026-05-08T05:16:42.305046655Z"
--- a/clusters/cl01tl/helm/foldergram/Chart.yaml
+++ b/clusters/cl01tl/helm/foldergram/Chart.yaml
@@ -18,13 +18,13 @@ dependencies:
  - name: app-template
    alias: foldergram
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 5.0.0
  - name: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.6.0
+    version: 3.1.0
  - name: volsync-target
    alias: volsync-target-db
-    version: 1.1.1
+    version: 2.0.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://raw.githubusercontent.com/foldergram/foldergram/refs/heads/main/client/public/icon-512.png
 # renovate: datasource=github-releases depName=foldergram/foldergram
--- a/clusters/cl01tl/helm/freshrss/Chart.lock
+++ b/clusters/cl01tl/helm/freshrss/Chart.lock
@@ -1,15 +1,15 @@
 dependencies:
 - name: app-template
  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 5.0.0
 - name: cloudflared
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.6.0
+  version: 3.1.0
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 7.12.1
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.1.1
-digest: sha256:6b2bae691798ed86c9549dfce0c455015533f00fff92363b58bce61201fbfc8d
-generated: "2026-04-28T23:31:47.227478798Z"
+  version: 2.0.0
+digest: sha256:e783a2f617608266d58ef093a0dc46877a3f70fc00ea6c744bfaccd9a44dc670
+generated: "2026-05-08T05:16:55.658324844Z"
--- a/clusters/cl01tl/helm/freshrss/Chart.yaml
+++ b/clusters/cl01tl/helm/freshrss/Chart.yaml
@@ -19,17 +19,17 @@ dependencies:
  - name: app-template
    alias: freshrss
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 5.0.0
  - name: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.6.0
+    version: 3.1.0
  - name: postgres-cluster
    alias: postgres-18-cluster
    version: 7.12.1
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-data
-    version: 1.1.1
+    version: 2.0.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/freshrss.png
 # renovate: datasource=github-releases depName=FreshRSS/FreshRSS
--- a/clusters/cl01tl/helm/garage/Chart.lock
+++ b/clusters/cl01tl/helm/garage/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
-digest: sha256:86536c14fa61870a64540b77f65afae8f4308e41a66eefae7fe85b83bf0df30e
-generated: "2026-01-16T18:46:33.321938614Z"
+  version: 5.0.0
+digest: sha256:925129100b32d9daf71142dc3fc42914cc26d40581a523c574c81ec79e2a0fc6
+generated: "2026-05-07T20:44:57.951189479Z"
--- a/clusters/cl01tl/helm/garage/Chart.yaml
+++ b/clusters/cl01tl/helm/garage/Chart.yaml
@@ -18,7 +18,7 @@ dependencies:
  - name: app-template
    alias: garage
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 5.0.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/garage.png
 # renovate: datasource=docker depName=dxflrs/garage
 appVersion: v2.3.0
--- a/clusters/cl01tl/helm/gatus/Chart.lock
+++ b/clusters/cl01tl/helm/gatus/Chart.lock
@@ -7,6 +7,6 @@ dependencies:
  version: 7.12.1
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.1.1
-digest: sha256:883863a9121ecbd519b19c6ffcfbaf7df0f7273b0877d303ed8922ba07f79c4b
-generated: "2026-04-28T23:31:56.941778354Z"
+  version: 2.0.0
+digest: sha256:25d95b64934fb0fe59914f82b752de38979929342c0a8dad1be77e4a1b2ed93f
+generated: "2026-05-08T05:17:12.373933524Z"
--- a/clusters/cl01tl/helm/gatus/Chart.yaml
+++ b/clusters/cl01tl/helm/gatus/Chart.yaml
@@ -24,7 +24,7 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-data
-    version: 1.1.1
+    version: 2.0.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/gatus.png
 # renovate: datasource=github-releases depName=TwiN/gatus
--- a/clusters/cl01tl/helm/generic-device-plugin/Chart.lock
+++ b/clusters/cl01tl/helm/generic-device-plugin/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: generic-device-plugin
  repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-  version: 0.20.31
-digest: sha256:2e073f735a5ff699844eb67715ab20d403261b3e9c035ebdc4292cee9666b4f4
-generated: "2026-04-15T01:16:30.361061773Z"
+  version: 0.20.33
+digest: sha256:c08407bfa5509e7805760023be163f2597ff41af1183a9b258413230e907d830
+generated: "2026-05-07T19:57:30.083273789Z"
--- a/clusters/cl01tl/helm/generic-device-plugin/Chart.yaml
+++ b/clusters/cl01tl/helm/generic-device-plugin/Chart.yaml
@@ -14,6 +14,6 @@ maintainers:
 dependencies:
  - name: generic-device-plugin
    repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-    version: 0.20.31
+    version: 0.20.33
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 appVersion: 1.0.0
--- a/clusters/cl01tl/helm/gitea/Chart.lock
+++ b/clusters/cl01tl/helm/gitea/Chart.lock
@@ -10,18 +10,18 @@ dependencies:
  version: 0.32.0
 - name: cloudflared
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.6.0
+  version: 3.1.0
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 7.12.1
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
+  version: 0.8.0
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
+  version: 0.8.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.1.1
-digest: sha256:511ffcd0b9ab17ff7c9dff6fc72a2ef802a51a14a4f03e416acee40fa0d1f12a
-generated: "2026-05-02T01:47:05.386747243Z"
+  version: 2.0.0
+digest: sha256:68c99ce456f3621b9346eed9998d0af2160b1f277ab6f9bf79bcc47ccd3e5c15
+generated: "2026-05-08T05:17:27.295567788Z"
--- a/clusters/cl01tl/helm/gitea/Chart.yaml
+++ b/clusters/cl01tl/helm/gitea/Chart.yaml
@@ -37,22 +37,22 @@ dependencies:
    repository: https://meilisearch.github.io/meilisearch-kubernetes
  - name: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.6.0
+    version: 3.1.0
  - name: postgres-cluster
    alias: postgres-18-cluster
    version: 7.12.1
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: valkey
    alias: valkey-gitea
-    version: 0.7.0
+    version: 0.8.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: valkey
    alias: valkey-renovate
-    version: 0.7.0
+    version: 0.8.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-storage
-    version: 1.1.1
+    version: 2.0.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/gitea.png
 # renovate: datasource=github-releases depName=go-gitea/gitea
--- a/clusters/cl01tl/helm/grafana-operator/Chart.lock
+++ b/clusters/cl01tl/helm/grafana-operator/Chart.lock
@@ -7,9 +7,9 @@ dependencies:
  version: 7.12.1
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
+  version: 0.8.0
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-digest: sha256:1abbac7c3dd999e08b60bc86d45bf4d5740c02a078d4ee7145c5379c274e93d3
-generated: "2026-05-02T01:47:25.480915936Z"
+  version: 0.8.0
+digest: sha256:a8553690c0fa8cbb9b6707388c3bcc11f2f38314d6512b1b9b2467f862cca4d9
+generated: "2026-05-08T02:31:18.145858152Z"
--- a/clusters/cl01tl/helm/grafana-operator/Chart.yaml
+++ b/clusters/cl01tl/helm/grafana-operator/Chart.yaml
@@ -24,11 +24,11 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: valkey
    alias: valkey-unified-alerting
-    version: 0.7.0
+    version: 0.8.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: valkey
    alias: valkey-remote-cache
-    version: 0.7.0
+    version: 0.8.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/grafana.png
 # renovate: datasource=github-releases depName=grafana/grafana-operator
--- a/clusters/cl01tl/helm/grafana-operator/templates/grafana-dashboard.yaml
+++ b/clusters/cl01tl/helm/grafana-operator/templates/grafana-dashboard.yaml
@@ -411,24 +411,6 @@ spec:
  resyncPeriod: 6h
  url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/service/unpoller.json

---
-apiVersion: grafana.integreatly.org/v1beta1
-kind: GrafanaDashboard
-metadata:
-  name: grafana-dashboard-version-checker-internal
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: grafana-dashboard-version-checker-internal
-    {{- include "custom.labels" . | nindent 4 }}
-spec:
-  instanceSelector:
-    matchLabels:
-      app: grafana-main
-  contentCacheDuration: 6h
-  folderUID: grafana-folder-service
-  resyncPeriod: 6h
-  url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/service/version-checker-internal.json
-
 ---
 apiVersion: grafana.integreatly.org/v1beta1
 kind: GrafanaDashboard
--- a/clusters/cl01tl/helm/grimmory/Chart.lock
+++ b/clusters/cl01tl/helm/grimmory/Chart.lock
@@ -1,12 +1,12 @@
 dependencies:
 - name: app-template
  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 5.0.0
 - name: mariadb-cluster
  repository: https://helm.mariadb.com/mariadb-operator
  version: 26.3.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.1.1
-digest: sha256:3e1a513297b39105174d3f1d6010ac85526de3d9cf6418ea724599b42e8c0cd9
-generated: "2026-04-28T23:32:22.706602876Z"
+  version: 2.0.0
+digest: sha256:27ac7e85baa400d8bf3ae2d7fa84bef1cb4f240043b34b6b6316d8fe4bf88851
+generated: "2026-05-08T05:17:44.507387528Z"
--- a/clusters/cl01tl/helm/grimmory/Chart.yaml
+++ b/clusters/cl01tl/helm/grimmory/Chart.yaml
@@ -18,13 +18,13 @@ dependencies:
  - name: app-template
    alias: grimmory
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 5.0.0
  - name: mariadb-cluster
    version: 26.3.0
    repository: https://helm.mariadb.com/mariadb-operator
  - name: volsync-target
    alias: volsync-target-config
-    version: 1.1.1
+    version: 2.0.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/grimmory.png
 # renovate: datasource=github-releases depName=grimmory-tools/grimmory
--- a/clusters/cl01tl/helm/harbor/Chart.lock
+++ b/clusters/cl01tl/helm/harbor/Chart.lock
@@ -1,12 +1,12 @@
 dependencies:
 - name: harbor
  repository: https://helm.goharbor.io
-  version: 1.18.3
+  version: 1.19.0
 - name: postgres-cluster
  repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
  version: 7.12.1
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-digest: sha256:8ce1125e688aa0f2da0f9f11157b8bab9bbc11aa82d16ed8e7c5141dccb508fd
-generated: "2026-05-02T01:47:39.632625858Z"
+  version: 0.8.0
+digest: sha256:4ef3c0544281466cf714f5c6410309d4e090463d7f9a5750cd954c520abb0a40
+generated: "2026-05-08T02:31:31.873945824Z"
--- a/clusters/cl01tl/helm/harbor/Chart.yaml
+++ b/clusters/cl01tl/helm/harbor/Chart.yaml
@@ -16,7 +16,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: harbor
-    version: 1.18.3
+    version: 1.19.0
    repository: https://helm.goharbor.io
  - name: postgres-cluster
    alias: postgres-18-cluster
@@ -24,7 +24,7 @@ dependencies:
    repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
  - name: valkey
    alias: valkey
-    version: 0.7.0
+    version: 0.8.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/harbor.png
 # renovate: datasource=github-releases depName=goharbor/harbor
--- a/clusters/cl01tl/helm/harbor/values.yaml
+++ b/clusters/cl01tl/helm/harbor/values.yaml
@@ -37,12 +37,12 @@ harbor:
  portal:
    image:
      repository: ghcr.io/goharbor/harbor-portal
-      tag: v2.15.0@sha256:541d5fa95bf77240d46a438f86245cdfd6afa6dd7fdd0cf4dd4c905af6a980b1
+      tag: v2.15.1@sha256:ac55161c57a8351807adf8f8def264bdd52667c371d0436beefebdac4341c9e2
    replicas: 2
  core:
    image:
      repository: ghcr.io/goharbor/harbor-core
-      tag: v2.15.0@sha256:32a13f6693a278261e9c9cb7eb606c5e2aa021308ae44fdc73225755048500a8
+      tag: v2.15.1@sha256:887a85b8ea98b76bfc9f715f1a0785bb99f9a1034241513902dd6e95be922a83
    replicas: 2
    existingSecret: harbor-secret
    secretName: harbor-secret
@@ -50,7 +50,7 @@ harbor:
  jobservice:
    image:
      repository: ghcr.io/goharbor/harbor-jobservice
-      tag: v2.15.0@sha256:a22c7cccba4673b26ffb96f5c37971d85d879dd837bc82448e01c0170b68cf28
+      tag: v2.15.1@sha256:0de4fd2ce3a02d3e6591b439e4674ea085885ddf43652b44004cc67eb19dba12
    replicas: 2
    jobLoggers:
      - stdout
@@ -59,11 +59,11 @@ harbor:
    registry:
      image:
        repository: goharbor/registry-photon
-        tag: v2.15.0@sha256:beb49fd16cf0906c04a2bf51a22f7210289e7cc2ae43a733e2a0364380aceae6
+        tag: v2.15.1@sha256:ebf0325c2661729dbb317cbf839608eb8b15cfa158911a94976f2c21563c466e
    controller:
      image:
        repository: ghcr.io/goharbor/harbor-registryctl
-        tag: v2.15.0@sha256:463172f71d3a1e8d4f9e3b4e687a447f41fbc3126316d8c150dba04a903bbc47
+        tag: v2.15.1@sha256:554147a956989175f63f8d41573d716c6ddf6052acd1749c88c0f99ce6ee2bff
    existingSecret: harbor-secret
    relativeurls: true
    credentials:
@@ -74,7 +74,7 @@ harbor:
    enabled: true
    image:
      repository: ghcr.io/goharbor/trivy-adapter-photon
-      tag: v2.15.0@sha256:6fd6de9cfbbb04cb1d94722cfa01cf71b8994d3f9e7891d3b03a89a7536480ba
+      tag: v2.15.1@sha256:f0c52bed36c083ec4fded26cefab01e4cd58c9354c261cb3156c69f57bb50131
  database:
    type: external
    external:
@@ -90,7 +90,7 @@ harbor:
  exporter:
    image:
      repository: ghcr.io/goharbor/harbor-exporter
-      tag: v2.15.0@sha256:ad065e4e1a0ee900a0bb1a03d57028ed4b51dc04933f5c1cb5c4aee301a72ddb
+      tag: v2.15.1@sha256:372275b6b6abeb571fa7bd5de458e3d75f1a1636503b3c0abe02938f2b285d75
    replicas: 2
 postgres-18-cluster:
  mode: recovery
--- a/clusters/cl01tl/helm/headlamp/Chart.lock
+++ b/clusters/cl01tl/helm/headlamp/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: headlamp
  repository: https://kubernetes-sigs.github.io/headlamp/
-  version: 0.41.0
-digest: sha256:b1cbc64b393c6c9e1c460510adab528cee8336735659040b9c517976e5c6f15d
-generated: "2026-03-26T15:07:50.703213905Z"
+  version: 0.42.0
+digest: sha256:09efb4cfe9ef92337074c8ae52a564bf902be41f9fcd742dde34b3fe4b4331fa
+generated: "2026-05-07T20:38:18.198513024Z"
--- a/clusters/cl01tl/helm/headlamp/Chart.yaml
+++ b/clusters/cl01tl/helm/headlamp/Chart.yaml
@@ -13,8 +13,8 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: headlamp
-    version: 0.41.0
+    version: 0.42.0
    repository: https://kubernetes-sigs.github.io/headlamp/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/headlamp.png
 # renovate: datasource=github-releases depName=headlamp-k8s/headlamp
-appVersion: v0.41.0
+appVersion: vv0.42.0
--- a/clusters/cl01tl/helm/headlamp/values.yaml
+++ b/clusters/cl01tl/helm/headlamp/values.yaml
@@ -3,7 +3,7 @@ headlamp:
  image:
    registry: ghcr.io
    repository: headlamp-k8s/headlamp
-    tag: v0.41.0@sha256:89c6c65810bfde61796483c93c70d659104355593792bf55cab680d685da8eeb
+    tag: v0.42.0@sha256:c9754bae1d799220da0547e51ceee234f6e66ebadc138518ca73e33ecd331e59
  config:
    oidc:
      secret:
--- a/clusters/cl01tl/helm/home-assistant/Chart.lock
+++ b/clusters/cl01tl/helm/home-assistant/Chart.lock
@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 5.0.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.1.1
-digest: sha256:0c0dd41e2bd0102b956697b2171e223988042072fe61b7b979d4091e76fca9d4
-generated: "2026-04-28T23:32:34.16634307Z"
+  version: 2.0.0
+digest: sha256:89add90994b0d2fe2f54bd69d273fd3091f72171876f0e8c9d5921424a75eeb9
+generated: "2026-05-08T05:17:58.564176815Z"
--- a/clusters/cl01tl/helm/home-assistant/Chart.yaml
+++ b/clusters/cl01tl/helm/home-assistant/Chart.yaml
@@ -17,11 +17,11 @@ dependencies:
  - name: app-template
    alias: home-assistant
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 5.0.0
  - name: volsync-target
    alias: volsync-target-config
-    version: 1.1.1
+    version: 2.0.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/home-assistant.png
 # renovate: datasource=github-releases depName=home-assistant/core
-appVersion: 2026.4.4
+appVersion: 2026.5.0
--- a/clusters/cl01tl/helm/home-assistant/values.yaml
+++ b/clusters/cl01tl/helm/home-assistant/values.yaml
@@ -12,7 +12,7 @@ home-assistant:
        main:
          image:
            repository: ghcr.io/home-assistant/home-assistant
-            tag: 2026.4.4@sha256:c1e5f0147f4cb51ccb05bb30b62a1269cc1bd48a6274792d3b38a77ab274dfd2
+            tag: 2026.5.0@sha256:8edcb16cff8158e87a3a2b48b3bcca05c30dcea0212eb6a2fe940b6d52ed216a
          env:
            - name: TZ
              value: America/Chicago
@@ -23,7 +23,7 @@ home-assistant:
        code-server:
          image:
            repository: ghcr.io/linuxserver/code-server
-            tag: 4.117.0-ls334@sha256:1f384394d473c43ab6a39b2227ba3aa9c95af648ce3a67e1b4da1969c16c7c0d
+            tag: 4.118.0-ls336@sha256:6e542034343228a692e0b24f12cbcc8ade3650ec1e2c9e195bc291f2bf024e3c
          env:
            - name: TZ
              value: America/Chicago
--- a/clusters/cl01tl/helm/homepage/Chart.lock
+++ b/clusters/cl01tl/helm/homepage/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
-digest: sha256:1f6cc724b7c88b5209d893b4b3c914e4064a5450e9bb6ca89ef5642199020f2b
-generated: "2026-01-16T18:47:06.186790637Z"
+  version: 5.0.0
+digest: sha256:81785552a943df54d09164776a170a007573e38ab96b00872bb22030079076e9
+generated: "2026-05-07T20:45:33.699577658Z"
--- a/clusters/cl01tl/helm/homepage/Chart.yaml
+++ b/clusters/cl01tl/helm/homepage/Chart.yaml
@@ -16,7 +16,7 @@ dependencies:
  - name: app-template
    alias: homepage
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 5.0.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/homepage.png
 # renovate: datasource=github-releases depName=gethomepage/homepage
 appVersion: v1.12.3
--- a/clusters/cl01tl/helm/homepage/values.yaml
+++ b/clusters/cl01tl/helm/homepage/values.yaml
@@ -8,8 +8,6 @@ homepage:
      strategy: Recreate
      annotations:
        reloader.stakater.com/auto: "true"
-      serviceAccount:
-        name: homepage
      pod:
        automountServiceAccountToken: true
      containers:
@@ -27,10 +25,6 @@ homepage:
            requests:
              cpu: 1m
              memory: 128Mi
-  serviceAccount:
-    homepage:
-      enabled: true
-      staticToken: true
  configMaps:
    config:
      enabled: true
@@ -885,9 +879,9 @@ homepage:
              - Github:
                  - abbr: GH
                    href: https://github.com/alexlebens
-              - Digital Ocean:
-                  - abbr: DO
-                    href: https://www.digitalocean.com/
+              - Backblaze:
+                  - abbr: BB
+                    href: https://secure.backblaze.com
              - Cloudflare:
                  - abbr: CF
                    href: https://dash.cloudflare.com/b76e303258b84076ee01fd0f515c0768
@@ -897,9 +891,6 @@ homepage:
              - ProtonVPN:
                  - abbr: PV
                    href: https://account.protonvpn.com/
-              - AirVPN:
-                  - abbr: AV
-                    href: https://airvpn.org/
              - Unifi:
                  - abbr: UF
                    href: https://unifi.ui.com/
--- a/clusters/cl01tl/helm/houndarr/Chart.lock
+++ b/clusters/cl01tl/helm/houndarr/Chart.lock
@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 5.0.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.1.1
-digest: sha256:de21eea7c5550645f0f1208758c3a81c6e015b90eae728c0b9740ddfc3f26880
-generated: "2026-04-28T23:32:44.359353393Z"
+  version: 2.0.0
+digest: sha256:9041fccd2b6c8370f137ee36fc304054966b82a675fea5dd78b0c58d8e36d739
+generated: "2026-05-08T05:18:10.549176565Z"
--- a/clusters/cl01tl/helm/houndarr/Chart.yaml
+++ b/clusters/cl01tl/helm/houndarr/Chart.yaml
@@ -18,10 +18,10 @@ dependencies:
  - name: app-template
    alias: houndarr
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 5.0.0
  - name: volsync-target
    alias: volsync-target-data
-    version: 1.1.1
+    version: 2.0.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/houndarr.png
 # renovate: datasource=github-releases depName=av1155/houndarr
--- a/clusters/cl01tl/helm/immich/Chart.lock
+++ b/clusters/cl01tl/helm/immich/Chart.lock
@@ -1,15 +1,15 @@
 dependencies:
 - name: app-template
  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 5.0.0
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 7.12.1
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
+  version: 0.8.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.1.1
-digest: sha256:a0fdf72de4f4e2a475035e6ece26fe570e548895db02374a08fd4f3481c55dc0
-generated: "2026-05-02T01:47:54.093954603Z"
+  version: 2.0.0
+digest: sha256:84d4796c8b111f9888e31181cc560604500ea4b9fd8749c9ad5bcf05e23c8ae8
+generated: "2026-05-08T05:18:24.704745565Z"
--- a/clusters/cl01tl/helm/immich/Chart.yaml
+++ b/clusters/cl01tl/helm/immich/Chart.yaml
@@ -18,18 +18,18 @@ dependencies:
  - name: app-template
    alias: immich
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 5.0.0
  - name: postgres-cluster
    alias: postgres-18-cluster
    version: 7.12.1
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: valkey
    alias: valkey
-    version: 0.7.0
+    version: 0.8.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-data
-    version: 1.1.1
+    version: 2.0.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/immich.png
 # renovate: datasource=github-releases depName=immich-app/immich
--- a/clusters/cl01tl/helm/immich/values.yaml
+++ b/clusters/cl01tl/helm/immich/values.yaml
@@ -4,8 +4,8 @@ immich:
      type: deployment
      replicas: 1
      strategy: Recreate
-      serviceAccount:
-        name: immich
+      pod:
+        automountServiceAccountToken: true
      containers:
        main:
          image:
@@ -88,10 +88,6 @@ immich:
              gpu.intel.com/i915: 1
              cpu: 10m
              memory: 500Mi
-  serviceAccount:
-    immich:
-      enabled: true
-      staticToken: true
  service:
    main:
      controller: main
--- a/clusters/cl01tl/helm/isponsorblocktv/Chart.lock
+++ b/clusters/cl01tl/helm/isponsorblocktv/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
-digest: sha256:65da71c32b4576a11e590f059d97dae22137448cb71049258d018cf5b7bb4a92
-generated: "2026-04-26T14:59:16.326539-05:00"
+  version: 5.0.0
+digest: sha256:61c0d967c3f1f6e12fc8effa4add37ba7b307f680280f8e5ff2cb772cfc73213
+generated: "2026-05-07T20:46:03.870794632Z"
--- a/clusters/cl01tl/helm/isponsorblocktv/Chart.yaml
+++ b/clusters/cl01tl/helm/isponsorblocktv/Chart.yaml
@@ -16,7 +16,7 @@ dependencies:
  - name: app-template
    alias: isponsorblocktv
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 5.0.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/youtube.png
 # renovate: datasource=github-releases depName=dmunozv04/iSponsorBlockTV
 appVersion: v2.8.1
--- a/clusters/cl01tl/helm/isponsorblocktv/values.yaml
+++ b/clusters/cl01tl/helm/isponsorblocktv/values.yaml
@@ -4,8 +4,8 @@ isponsorblocktv:
      type: deployment
      replicas: 1
      strategy: Recreate
-      serviceAccount:
-        name: isponsorblocktv
+      pod:
+        automountServiceAccountToken: true
      containers:
        main:
          image:
@@ -15,10 +15,6 @@ isponsorblocktv:
            requests:
              cpu: 1m
              memory: 20Mi
-  serviceAccount:
-    isponsorblocktv:
-      enabled: true
-      staticToken: true
  persistence:
    config:
      type: custom
--- a/clusters/cl01tl/helm/jellyfin/Chart.lock
+++ b/clusters/cl01tl/helm/jellyfin/Chart.lock
@@ -1,12 +1,12 @@
 dependencies:
 - name: app-template
  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 5.0.0
 - name: meilisearch
  repository: https://meilisearch.github.io/meilisearch-kubernetes
  version: 0.32.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.1.1
-digest: sha256:e087d85b352de607cecf84a09bec368f37dbb63bfcc8c5bc1ebfbe97de121231
-generated: "2026-04-28T23:33:06.05345494Z"
+  version: 2.0.0
+digest: sha256:1de3f59fa3ae926fa3a49f39d92f0b78f5eb7ebc6009e1dc397fb90b3eaa9e94
+generated: "2026-05-08T05:18:37.439857631Z"
--- a/clusters/cl01tl/helm/jellyfin/Chart.yaml
+++ b/clusters/cl01tl/helm/jellyfin/Chart.yaml
@@ -20,13 +20,13 @@ dependencies:
  - name: app-template
    alias: jellyfin
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 5.0.0
  - name: meilisearch
    version: 0.32.0
    repository: https://meilisearch.github.io/meilisearch-kubernetes
  - name: volsync-target
    alias: volsync-target-config
-    version: 1.1.1
+    version: 2.0.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/jellyfin.png
 # renovate: datasource=github-releases depName=jellyfin/jellyfin
--- a/clusters/cl01tl/helm/jellystat/Chart.lock
+++ b/clusters/cl01tl/helm/jellystat/Chart.lock
@@ -1,12 +1,12 @@
 dependencies:
 - name: app-template
  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 5.0.0
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 7.12.1
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.1.1
-digest: sha256:ef0f5d679b6e46d3bbfb37f4b06cba7b8ca98955de2be961366b5b23feda884c
-generated: "2026-04-28T23:33:17.913213442Z"
+  version: 2.0.0
+digest: sha256:516f2350d8782dd6507067995b2b86a5cc650998673a0e25379043ee76d43602
+generated: "2026-05-08T05:18:52.891193359Z"
--- a/clusters/cl01tl/helm/jellystat/Chart.yaml
+++ b/clusters/cl01tl/helm/jellystat/Chart.yaml
@@ -18,14 +18,14 @@ dependencies:
  - name: app-template
    alias: jellystat
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 5.0.0
  - name: postgres-cluster
    alias: postgres-18-cluster
    version: 7.12.1
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-data
-    version: 1.1.1
+    version: 2.0.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/jellystat.png
 # renovate: datasource=github-releases depName=CyferShepard/Jellystat
--- a/clusters/cl01tl/helm/karakeep/Chart.lock
+++ b/clusters/cl01tl/helm/karakeep/Chart.lock
@@ -1,18 +1,21 @@
 dependencies:
 - name: app-template
  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 5.0.0
 - name: meilisearch
  repository: https://meilisearch.github.io/meilisearch-kubernetes
  version: 0.32.0
 - name: cloudflared
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.6.0
+  version: 3.1.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.1.1
+  version: 2.0.0
 - name: rclone-bucket
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.5.0
-digest: sha256:399d686a6186e665a804f98a3dca1132d028f6cb9fc458866ec94b09920dbb6f
-generated: "2026-05-02T01:23:08.040832303Z"
+  version: 0.7.0
+- name: rclone-bucket
+  repository: oci://harbor.alexlebens.net/helm-charts
+  version: 0.7.0
+digest: sha256:95afcd4244af24135ba7704b4a8d968f10e68702de059a2fd0e00a12c1f0b223
+generated: "2026-05-08T05:19:06.603030714Z"
--- a/clusters/cl01tl/helm/karakeep/Chart.yaml
+++ b/clusters/cl01tl/helm/karakeep/Chart.yaml
@@ -22,21 +22,25 @@ dependencies:
  - name: app-template
    alias: karakeep
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 5.0.0
  - name: meilisearch
    version: 0.32.0
    repository: https://meilisearch.github.io/meilisearch-kubernetes
  - name: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.6.0
+    version: 3.1.0
  - name: volsync-target
    alias: volsync-target-data
-    version: 1.1.1
+    version: 2.0.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: rclone-bucket
    alias: rclone-karakeep-assets-remote
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.5.0
+    version: 0.7.0
+  - name: rclone-bucket
+    alias: rclone-karakeep-assets-external
+    repository: oci://harbor.alexlebens.net/helm-charts
+    version: 0.7.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/karakeep.png
 # renovate: datasource=github-releases depName=karakeep-app/karakeep
 appVersion: 0.31.0
--- a/clusters/cl01tl/helm/karakeep/values.yaml
+++ b/clusters/cl01tl/helm/karakeep/values.yaml
@@ -175,7 +175,7 @@ volsync-target-data:
 rclone-karakeep-assets-remote:
  cronJob:
    suspend: false
-    schedule: 10 0 * * *
+    schedule: 30 6 * * 3
  rclone:
    source:
      bucketName: karakeep-assets
@@ -193,3 +193,26 @@ rclone-karakeep-assets-remote:
          path: /garage/home-infra/karakeep-assets
        config:
          path: /garage/config
+rclone-karakeep-assets-external:
+  nameOverride: karakeep-assets-external-rclone
+  cronJob:
+    suspend: false
+    schedule: 0 6 * * 3
+  rclone:
+    source:
+      bucketName: karakeep-assets
+    destination:
+      bucketName: karakeep-assets-bcb0bc04dac3e3fd
+  secret:
+    externalSecret:
+      source:
+        credentials:
+          path: /garage/home-infra/karakeep-assets
+        config:
+          path: /garage/config
+      destination:
+        credentials:
+          path: /backblaze/home-infra/karakeep-assets
+        config:
+          path: /backblaze/config
+          endpointProperty: ENDPOINT
--- a/clusters/cl01tl/helm/kiwix/Chart.lock
+++ b/clusters/cl01tl/helm/kiwix/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
-digest: sha256:aab81291201585c1169bd5d160768441b7c26670a78bcbefca6a781be0924576
-generated: "2026-01-16T18:48:20.708363828Z"
+  version: 5.0.0
+digest: sha256:c2ea7bdfa94d5489a0ace86b807949d3cfb0d436ce49a78bcbde0c6f1798608b
+generated: "2026-05-07T20:46:50.166598682Z"
--- a/clusters/cl01tl/helm/kiwix/Chart.yaml
+++ b/clusters/cl01tl/helm/kiwix/Chart.yaml
@@ -16,7 +16,7 @@ dependencies:
  - name: app-template
    alias: kiwix
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 5.0.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kiwix-dark.png
 # renovate: datasource=github-releases depName=kiwix/kiwix-tools
 appVersion: 3.8.2
--- a/clusters/cl01tl/helm/komodo/Chart.lock
+++ b/clusters/cl01tl/helm/komodo/Chart.lock
@@ -1,12 +1,12 @@
 dependencies:
 - name: app-template
  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 5.0.0
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 7.12.1
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.1.1
-digest: sha256:275833c68c02ccd34edaf4ccd38b901293c0a2e11e6ae3b7b2c8fdccf58d7b56
-generated: "2026-04-28T23:33:42.286082953Z"
+  version: 2.0.0
+digest: sha256:3f0db4bc60cd7ab4a44b4488d3cedb34f85dd40c91d9134345f06ecab711420a
+generated: "2026-05-08T05:19:25.971304605Z"
--- a/clusters/cl01tl/helm/komodo/Chart.yaml
+++ b/clusters/cl01tl/helm/komodo/Chart.yaml
@@ -20,15 +20,15 @@ dependencies:
  - name: app-template
    alias: komodo
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 5.0.0
  - name: postgres-cluster
    alias: postgresql-17-fdb-cluster
    version: 7.12.1
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-keys
-    version: 1.1.1
+    version: 2.0.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/komodo.png
 # renovate: datasource=github-releases depName=moghtech/komodo
-appVersion: v2.1.2
+appVersion: v2.2.0
--- a/clusters/cl01tl/helm/komodo/values.yaml
+++ b/clusters/cl01tl/helm/komodo/values.yaml
@@ -8,7 +8,7 @@ komodo:
        main:
          image:
            repository: ghcr.io/moghtech/komodo-core
-            tag: 2.1.2@sha256:8a7dbba232e4e49797bb412be5f78207c89fcf22cc2727b38631ae30f7518a4c
+            tag: 2.2.0@sha256:833880ca8b1a6c1c133efb07e8633525bf63094b4faa72700cf52f60fd69e6c6
          env:
            - name: COMPOSE_LOGGING_DRIVER
              value: local
--- a/clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock
+++ b/clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock
@@ -7,9 +7,9 @@ dependencies:
  version: 28.0.1
 - name: app-template
  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 5.0.0
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-digest: sha256:902e19ae8e5818d1ac4c30f804e616e8428b927358e4823ef6e373fdf655cba1
-generated: "2026-05-02T01:48:08.598425992Z"
+  version: 0.8.0
+digest: sha256:393093164e2cc0e94111c86181bcbfb4f605f9eeeb9a1fd1960ba5fc764902ee
+generated: "2026-05-08T02:31:55.970087487Z"
--- a/clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml
+++ b/clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml
@@ -28,10 +28,10 @@ dependencies:
  - name: app-template
    alias: ntfy-alertmanager
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 5.0.0
  - name: valkey
    alias: valkey
-    version: 0.7.0
+    version: 0.8.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/prometheus.png
 # renovate: datasource=github-releases depName=prometheus-operator/prometheus-operator
--- a/clusters/cl01tl/helm/kube-prometheus-stack/values.yaml
+++ b/clusters/cl01tl/helm/kube-prometheus-stack/values.yaml
@@ -121,6 +121,8 @@ ntfy-alertmanager:
      type: deployment
      replicas: 1
      strategy: Recreate
+      pod:
+        automountServiceAccountToken: true
      serviceAccount:
        name: ntfy-alertmanager
      containers:
@@ -128,10 +130,6 @@ ntfy-alertmanager:
          image:
            repository: xenrox/ntfy-alertmanager
            tag: 1.0.0@sha256:81788c7905774b7b0b2ed6833b2bc4826a90a42e4b738706edcedd5f489e7a73
-  serviceAccount:
-    ntfy-alertmanager:
-      enabled: true
-      staticToken: true
  service:
    main:
      controller: main
--- a/clusters/cl01tl/helm/kubelet-serving-cert-approver/Chart.lock
+++ b/clusters/cl01tl/helm/kubelet-serving-cert-approver/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
-digest: sha256:c0c65eaac1dfcc33b70a59d12319dee96ccd28cdd9fb201cd091f1802b0b2892
-generated: "2026-01-16T18:48:53.976469964Z"
+  version: 5.0.0
+digest: sha256:f646d2de1a56914cc1b94a661a869e7f89579f0000bbc79078801b757925931a
+generated: "2026-05-07T20:47:20.425067929Z"
--- a/clusters/cl01tl/helm/kubelet-serving-cert-approver/Chart.yaml
+++ b/clusters/cl01tl/helm/kubelet-serving-cert-approver/Chart.yaml
@@ -16,7 +16,7 @@ dependencies:
  - name: app-template
    alias: kubelet-serving-cert-approver
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 5.0.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 # renovate: datasource=github-releases depName=alex1989hu/kubelet-serving-cert-approver
 appVersion: 0.10.3
--- a/clusters/cl01tl/helm/kubelet-serving-cert-approver/values.yaml
+++ b/clusters/cl01tl/helm/kubelet-serving-cert-approver/values.yaml
@@ -29,8 +29,6 @@ kubelet-serving-cert-approver:
      type: deployment
      replicas: 1
      strategy: Recreate
-      serviceAccount:
-        name: kubelet-serving-cert-approver
      pod:
        automountServiceAccountToken: true
      containers:
@@ -57,10 +55,6 @@ kubelet-serving-cert-approver:
            privileged: false
            readOnlyRootFilesystem: true
            runAsNonRoot: true
-  serviceAccount:
-    kubelet-serving-cert-approver:
-      enabled: true
-      staticToken: true
  service:
    main:
      controller: main
--- a/clusters/cl01tl/helm/kubernetes-cloudflare-ddns/Chart.lock
+++ b/clusters/cl01tl/helm/kubernetes-cloudflare-ddns/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
-digest: sha256:6cba91672ca98d62208b3ff7cb1b7ffaaf44140bb3a54196c80126a82a0d2430
-generated: "2026-01-16T18:49:04.125289391Z"
+  version: 5.0.0
+digest: sha256:f79a24fbe6769992af0f7c5034713b564f91208497da193265fbce5aac8fb637
+generated: "2026-05-07T20:47:30.731469034Z"
--- a/clusters/cl01tl/helm/kubernetes-cloudflare-ddns/Chart.yaml
+++ b/clusters/cl01tl/helm/kubernetes-cloudflare-ddns/Chart.yaml
@@ -17,7 +17,7 @@ dependencies:
  - name: app-template
    alias: kubernetes-cloudflare-ddns
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 5.0.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/cloudflare.png
 # renovate: datasource=github-releases depName=kubitodev/kubernetes-cloudflare-ddns
 appVersion: v2.0.0
--- a/clusters/cl01tl/helm/languagetool/Chart.lock
+++ b/clusters/cl01tl/helm/languagetool/Chart.lock
@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 5.0.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.1.1
-digest: sha256:f37d15a563f128c99666136b1f361e81f3756af78321f7a9ac96b9ccf40aba0d
-generated: "2026-04-28T23:33:52.4031148Z"
+  version: 2.0.0
+digest: sha256:05112ce6f2fc6ab5ae80412fdb18ff9f91a94be564870098c7ad037e3a12196b
+generated: "2026-05-08T05:19:41.586995692Z"
--- a/clusters/cl01tl/helm/languagetool/Chart.yaml
+++ b/clusters/cl01tl/helm/languagetool/Chart.yaml
@@ -18,10 +18,10 @@ dependencies:
  - name: app-template
    alias: languagetool
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 5.0.0
  - name: volsync-target
    alias: volsync-target-data
-    version: 1.1.1
+    version: 2.0.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/languagetool.png
 # renovate: datasource=github-releases depName=Erikvl87/docker-languagetool
--- a/clusters/cl01tl/helm/libation/Chart.lock
+++ b/clusters/cl01tl/helm/libation/Chart.lock
@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 5.0.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.1.1
-digest: sha256:f93fec3b053028a5a2398ee3a133031f348c77c7c544608b3cc26f4ac6b0723c
-generated: "2026-04-28T23:34:02.933569166Z"
+  version: 2.0.0
+digest: sha256:1a8f96f632edaec9f513bcfb81c90f413efc62cf699bb3d4380550a97f0eda79
+generated: "2026-05-08T05:19:57.546136932Z"
--- a/clusters/cl01tl/helm/libation/Chart.yaml
+++ b/clusters/cl01tl/helm/libation/Chart.yaml
@@ -19,11 +19,11 @@ dependencies:
  - name: app-template
    alias: libation
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 5.0.0
  - name: volsync-target
    alias: volsync-target-config
-    version: 1.1.1
+    version: 2.0.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/libation.png
 # renovate: datasource=github-releases depName=rmcrackan/Libation
-appVersion: 13.3.6
+appVersion: 13.4.1
--- a/clusters/cl01tl/helm/libation/values.yaml
+++ b/clusters/cl01tl/helm/libation/values.yaml
@@ -12,7 +12,7 @@ libation:
        main:
          image:
            repository: rmcrackan/libation
-            tag: 13.3.6@sha256:54695675b9e838b7448c99f7fa03f5c34e0e35c7d7c82c44663959888be9c1b6
+            tag: 13.4.1@sha256:41cf509a8a1592c01c37cb4dc0d5a2e0c84faab20ecd8927f6bb3d73b237981b
          env:
            - name: SLEEP_TIME
              value: "-1"
@@ -30,7 +30,7 @@ libation:
        main:
          image:
            repository: ubuntu
-            tag: resolute-20260413@sha256:5e275723f82c67e387ba9e3c24baa0abdcb268917f276a0561c97bef9450d0b4
+            tag: resolute-20260421@sha256:f3d28607ddd78734bb7f71f117f3c6706c666b8b76cbff7c9ff6e5718d46ff64
          command:
            - "sleep"
            - "infinity"
--- a/clusters/cl01tl/helm/lidarr/Chart.lock
+++ b/clusters/cl01tl/helm/lidarr/Chart.lock
@@ -1,12 +1,12 @@
 dependencies:
 - name: app-template
  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 5.0.0
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 7.12.1
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.1.1
-digest: sha256:764f22175876a5841fe145fc59cc3c724ada8d827287ac15d414e1d661d2b807
-generated: "2026-04-28T23:34:13.853002968Z"
+  version: 2.0.0
+digest: sha256:49b42b52ec61664af45bb2649d343f40fc16eb154b6e88441c64f9116ed9b03b
+generated: "2026-05-08T05:20:12.698442654Z"
--- a/clusters/cl01tl/helm/lidarr/Chart.yaml
+++ b/clusters/cl01tl/helm/lidarr/Chart.yaml
@@ -22,14 +22,14 @@ dependencies:
  - name: app-template
    alias: lidarr
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 5.0.0
  - name: postgres-cluster
    alias: postgres-18-cluster
    version: 7.12.1
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-config
-    version: 1.1.1
+    version: 2.0.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/lidarr.png
 # renovate: datasource=github-releases depName=linuxserver/docker-lidarr
--- a/clusters/cl01tl/helm/loki/Chart.lock
+++ b/clusters/cl01tl/helm/loki/Chart.lock
@@ -1,9 +1,9 @@
 dependencies:
 - name: loki
  repository: oci://ghcr.io/grafana-community/helm-charts
-  version: 13.5.0
+  version: 13.6.1
 - name: alloy
  repository: https://grafana.github.io/helm-charts
-  version: 1.8.0
-digest: sha256:bef475f5b6770e4b582b4499e38417789b2bb59ce0ee93c0390daef780e5728d
-generated: "2026-05-02T19:36:44.416322-05:00"
+  version: 1.8.1
+digest: sha256:2590c2358db4fc9313f9c506998f4e851ee291ae9c1419f1fe5bb9a73d464e60
+generated: "2026-05-07T19:56:09.168096358Z"
--- a/clusters/cl01tl/helm/loki/Chart.yaml
+++ b/clusters/cl01tl/helm/loki/Chart.yaml
@@ -15,10 +15,10 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: loki
-    version: 13.5.0
+    version: 13.6.1
    repository: oci://ghcr.io/grafana-community/helm-charts
  - name: alloy
-    version: 1.8.0
+    version: 1.8.1
    repository: https://grafana.github.io/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/loki.png
 # renovate: datasource=github-releases depName=grafana/loki
--- a/Show More
+++ b/Show More