chore(deps): update helm release eck-operator to v3.4.0

Merge pull request 'chore(deps): update searxng/searxng:latest docker digest to 0c74024' (#6554 ) from renovate/unified-searxng into main
chore(deps): update searxng/searxng:latest docker digest to 0c74024
2026-05-06 07:18:58 +00:00 · 2026-05-06 07:06:42 +00:00 · 2026-05-06 07:05:56 +00:00 · 2026-05-06 03:07:18 +00:00 · 2026-05-06 03:06:50 +00:00 · 2026-05-06 01:02:56 +00:00
83 changed files with 148 additions and 886 deletions
--- a/.gitea/workflows/renovate.yaml
+++ b/.gitea/workflows/renovate.yaml
@@ -13,7 +13,7 @@ on:
 jobs:
  renovate:
    runs-on: ubuntu-js
-    container: ghcr.io/renovatebot/renovate:43.160.4@sha256:00185c0d63462acec8331cc9a94dcd74a763f2765fca0edcc3ff568af1dc8104
+    container: ghcr.io/renovatebot/renovate:43.165.1@sha256:b1e44b4b22ded56a2ccd5f41edb764b8ef62dd537b3b32e60d676b0424e7bc06
    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
--- a/clusters/cl01tl/helm/actual/Chart.yaml
+++ b/clusters/cl01tl/helm/actual/Chart.yaml
@@ -24,4 +24,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/actual-budget.png
 # renovate: datasource=github-releases depName=actualbudget/actual
-appVersion: 26.4.0
+appVersion: 26.5.0
--- a/clusters/cl01tl/helm/actual/values.yaml
+++ b/clusters/cl01tl/helm/actual/values.yaml
@@ -8,7 +8,7 @@ actual:
        main:
          image:
            repository: ghcr.io/actualbudget/actual
-            tag: 26.4.0@sha256:b0e732e2c41b3dc468a71548e88ef76d3f0c157fc43d15fa05d14ec1c5747e1e
+            tag: 26.5.0@sha256:b733ae30c70a66dc4d03577526e53575a0c04eab4f3ab6ace30934776251058c
          env:
            - name: ACTUAL_PORT
              value: 5006
--- a/clusters/cl01tl/helm/argocd/values.yaml
+++ b/clusters/cl01tl/helm/argocd/values.yaml
@@ -91,7 +91,7 @@ argo-cd:
    enabled: true
    image:
      repository: redis
-      tag: 8.6.2-alpine@sha256:81b6f81d6a6c5b9019231a2e8eb10085e3a139a34f833dcc965a8a959b040b72
+      tag: 8.6.3-alpine@sha256:69f2c586c8a7e9cce4ae1ee9bbaf60bc4bb5f4bb3880e4ed022b1fd758a7cab9
    persistentVolume:
      enabled: true
    redis:
@@ -103,7 +103,7 @@ argo-cd:
      enabled: true
      image:
        repository: haproxy
-        tag: 3.3.7-alpine@sha256:2afa53c856e4e9fcc7dfb35b807fcb189896d7e62b38d363f9bedea92bce7f9a
+        tag: 3.3.8-alpine@sha256:10690acb357180d5214c6fce59e2cefded6cc72b0f7e3febb323fea95b27e349
      resources:
        requests:
          cpu: 5m
--- a/clusters/cl01tl/helm/audiobookshelf/values.yaml
+++ b/clusters/cl01tl/helm/audiobookshelf/values.yaml
@@ -23,7 +23,7 @@ audiobookshelf:
        apprise-api:
          image:
            repository: ghcr.io/caronc/apprise
-            tag: v1.4.0@sha256:9d97a6b9b42cf6afdf3b5466dbed2a59cd42a4bb777ec6aa57b5f2ee623569eb
+            tag: v1.4.1@sha256:25e0577915c2f06233ae1dce077f05c0fc9ba4f0ea89de5aee18a32b2ee9a75c
          env:
            - name: TZ
              value: America/Chicago
--- a/clusters/cl01tl/helm/backrest/Chart.yaml
+++ b/clusters/cl01tl/helm/backrest/Chart.yaml
@@ -28,4 +28,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/backrest.png
 # renovate: datasource=github-releases depName=garethgeorge/backrest
-appVersion: v1.12.1
+appVersion: v1.13.0
--- a/clusters/cl01tl/helm/backrest/values.yaml
+++ b/clusters/cl01tl/helm/backrest/values.yaml
@@ -8,7 +8,7 @@ backrest:
        main:
          image:
            repository: ghcr.io/garethgeorge/backrest
-            tag: v1.12.1@sha256:f4d34bd6fa985d13bdb6c01c5d8727e07708899afa9567d800808357d77b9fb0
+            tag: v1.13.0@sha256:9c9966b5c285ec791a6b06cb4545fa0247424d05442e12f9558b4322d9f8a15f
          env:
            - name: TZ
              value: America/Chicago
--- a/clusters/cl01tl/helm/blocky/values.yaml
+++ b/clusters/cl01tl/helm/blocky/values.yaml
@@ -134,7 +134,7 @@ blocky:
              komodo                          IN      CNAME   traefik-cl01tl
              languagetool                    IN      CNAME   traefik-cl01tl
              lidarr                          IN      CNAME   traefik-cl01tl
-              mail                            IN      CNAME   traefik-cl01tl
+              loki                            IN      CNAME   traefik-cl01tl
              medialyze                       IN      CNAME   traefik-cl01tl
              music-grabber                   IN      CNAME   traefik-cl01tl
              navidrome                       IN      CNAME   traefik-cl01tl
@@ -162,7 +162,6 @@ blocky:
              sonarr-4k                       IN      CNAME   traefik-cl01tl
              sonarr-anime                    IN      CNAME   traefik-cl01tl
              sparkyfitness                   IN      CNAME   traefik-cl01tl
-              stalwart                        IN      CNAME   traefik-cl01tl
              tdarr                           IN      CNAME   traefik-cl01tl
              tubearchivist                   IN      CNAME   traefik-cl01tl
              vault                           IN      CNAME   traefik-cl01tl
--- a/clusters/cl01tl/helm/coredns/values.yaml
+++ b/clusters/cl01tl/helm/coredns/values.yaml
@@ -1,7 +1,7 @@
 coredns:
  image:
-    repository: registry.k8s.io/coredns/coredns
-    tag: v1.14.2@sha256:e7e6440cfd1e919280958f5b5a6ab2b184d385bba774c12ad2a9e1e4183f90d9
+    repository: coredns/coredns
+    tag: 1.14.3@sha256:b21d26b915e10acb5bc78715c1e8b6047ab2675389b2bcc18b3a6499d90e74c0
  replicaCount: 3
  resources:
    limits:
--- a/clusters/cl01tl/helm/dawarich/Chart.yaml
+++ b/clusters/cl01tl/helm/dawarich/Chart.yaml
@@ -42,4 +42,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/dawarich.png
 # renovate: datasource=github-releases depName=Freika/dawarich
-appVersion: 1.7.2
+appVersion: 1.7.5
--- a/clusters/cl01tl/helm/dawarich/values.yaml
+++ b/clusters/cl01tl/helm/dawarich/values.yaml
@@ -8,7 +8,7 @@ dawarich:
        main:
          image:
            repository: freikin/dawarich
-            tag: 1.7.2@sha256:642c225e9b8f041565e6129871e71eb51e42e95a6c576d0025beff2aa0bcd4a0
+            tag: 1.7.5@sha256:dceef4bf7bd5e6a842d61cdd2a82440a0db34f70dc766e02b0b3b212e13b4ba6
          command:
            - "web-entrypoint.sh"
          args:
@@ -126,7 +126,7 @@ dawarich:
        sidekiq:
          image:
            repository: freikin/dawarich
-            tag: 1.7.2@sha256:642c225e9b8f041565e6129871e71eb51e42e95a6c576d0025beff2aa0bcd4a0
+            tag: 1.7.5@sha256:dceef4bf7bd5e6a842d61cdd2a82440a0db34f70dc766e02b0b3b212e13b4ba6
          command:
            - "sidekiq-entrypoint.sh"
          args:
--- a/clusters/cl01tl/helm/elastic-operator/Chart.lock
+++ b/clusters/cl01tl/helm/elastic-operator/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: eck-operator
  repository: https://helm.elastic.co
-  version: 3.3.2
-digest: sha256:ac7a849a6d8244ef56c11f18438c4c76133f92d245228c5a1c8369d42562c177
-generated: "2026-04-01T21:30:02.975920565Z"
+  version: 3.4.0
+digest: sha256:b4787630154471f65ceeb12f65fa24616eab9470e61e089b8e656e42f05f74f1
+generated: "2026-05-06T07:18:41.608729031Z"
--- a/clusters/cl01tl/helm/elastic-operator/Chart.yaml
+++ b/clusters/cl01tl/helm/elastic-operator/Chart.yaml
@@ -14,7 +14,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: eck-operator
-    version: 3.3.2
+    version: 3.4.0
    repository: https://helm.elastic.co
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/elastic.png
 # renovate: datasource=github-releases depName=elastic/cloud-on-k8s
--- a/clusters/cl01tl/helm/elastic-operator/values.yaml
+++ b/clusters/cl01tl/helm/elastic-operator/values.yaml
@@ -1,6 +1,5 @@
 eck-operator:
  managedNamespaces:
-    - stalwart
    - tubearchivist
  installCRDs: true
  replicaCount: 2
--- a/clusters/cl01tl/helm/element-web/Chart.lock
+++ b/clusters/cl01tl/helm/element-web/Chart.lock
@@ -1,9 +1,9 @@
 dependencies:
 - name: element-web
  repository: https://ananace.gitlab.io/charts
-  version: 1.4.34
+  version: 1.4.36
 - name: cloudflared
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 2.6.0
-digest: sha256:e988be9f997351a8f658bf5151ec4fb04ae7d877389c9bf01b7331e1a58005ef
-generated: "2026-04-24T21:06:15.882448748Z"
+digest: sha256:36b3f340ee46f20961fdaac41724528c6c3d4b34bf26d97779da7e33087250a1
+generated: "2026-05-03T00:56:23.054212477Z"
--- a/clusters/cl01tl/helm/element-web/Chart.yaml
+++ b/clusters/cl01tl/helm/element-web/Chart.yaml
@@ -15,7 +15,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: element-web
-    version: 1.4.34
+    version: 1.4.36
    repository: https://ananace.gitlab.io/charts
  - name: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
--- a/clusters/cl01tl/helm/excalidraw/values.yaml
+++ b/clusters/cl01tl/helm/excalidraw/values.yaml
@@ -8,7 +8,7 @@ excalidraw:
        main:
          image:
            repository: excalidraw/excalidraw
-            tag: latest@sha256:20ffa04668e19616bb0c1b3632849e5cd96e0bc7a1336b73d9d072667f2c2854
+            tag: latest@sha256:b6cd04431d88f2756a7c3095cf7970884e8fd6b2800c9445b5a60a5c715bbf0c
          env:
            - name: NODE_ENV
              value: production
--- a/clusters/cl01tl/helm/gatus/values.yaml
+++ b/clusters/cl01tl/helm/gatus/values.yaml
@@ -212,12 +212,6 @@ gatus:
      - name: authentik
        url: https://authentik.alexlebens.net
        <<: *defaults
-      - name: roundcube
-        url: https://mail.alexlebens.net
-        <<: *defaults
-      - name: stalwart
-        url: https://stalwart.alexlebens.net
-        <<: *defaults
      - name: ntfy
        url: https://ntfy.alexlebens.net
        <<: *defaults
--- a/clusters/cl01tl/helm/grimmory/Chart.yaml
+++ b/clusters/cl01tl/helm/grimmory/Chart.yaml
@@ -28,4 +28,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/grimmory.png
 # renovate: datasource=github-releases depName=grimmory-tools/grimmory
-appVersion: v3.0.2
+appVersion: v3.0.3
--- a/clusters/cl01tl/helm/grimmory/templates/external-secret.yaml
+++ b/clusters/cl01tl/helm/grimmory/templates/external-secret.yaml
@@ -32,12 +32,12 @@ spec:
  data:
    - secretKey: access
      remoteRef:
-        key: /digital-ocean/home-infra/mariadb-backups
-        property: AWS_ACCESS_KEY_ID
+        key: /backblaze/home-infra/mariadb-backups
+        property: ACCESS_KEY_ID
    - secretKey: secret
      remoteRef:
-        key: /digital-ocean/home-infra/mariadb-backups
-        property: AWS_SECRET_ACCESS_KEY
+        key: /backblaze/home-infra/mariadb-backups
+        property: ACCESS_SECRET_KEY

 ---
 apiVersion: external-secrets.io/v1
--- a/clusters/cl01tl/helm/grimmory/values.yaml
+++ b/clusters/cl01tl/helm/grimmory/values.yaml
@@ -12,7 +12,7 @@ grimmory:
        main:
          image:
            repository: ghcr.io/grimmory-tools/grimmory
-            tag: v3.0.2@sha256:4557a78321add7d70bef7c0b89c2617c8c023246ae39698bc2cbe636f8c97f9b
+            tag: v3.0.3@sha256:a903a2b44c308bd1738b6f7cdb5a2e5a2a1ae23a092f30eb68581e2be1af50cd
          env:
            - name: TZ
              value: America/Chicago
@@ -151,7 +151,7 @@ mariadb-cluster:
  physicalBackups:
    - name: backup-external
      schedule:
-        cron: "0 0 * * 0"
+        cron: "0 0 * * 6"
        suspend: false
        immediate: true
      compression: gzip
@@ -159,10 +159,10 @@ mariadb-cluster:
      successfulJobsHistoryLimit: 1
      storage:
        s3:
-          bucket: mariadb-backups-b230a2f5aecf080a4b372c08
+          bucket: mariadb-backups-6e3b78870f7af040
          prefix: cl01tl/grimmory
-          endpoint: nyc3.digitaloceanspaces.com
-          region: us-east-1
+          endpoint: s3.us-east-005.backblazeb2.com
+          region: us-east-005
          accessKeyIdSecretKeyRef:
            name: grimmory-mariadb-cluster-backup-secret-external
            key: access
--- a/clusters/cl01tl/helm/homepage/values.yaml
+++ b/clusters/cl01tl/helm/homepage/values.yaml
@@ -487,24 +487,6 @@ homepage:
                  href: https://authentik.alexlebens.net
                  siteMonitor: http://authentik-server.authentik:80
                  statusStyle: dot
-              - Email Client:
-                  icon: sh-roundcube.webp
-                  description: Roundcube
-                  href: https://mail.alexlebens.net
-                  siteMonitor: http://roundcube.roundcube:80
-                  statusStyle: dot
-              - Email Server:
-                  icon: sh-stalwart.webp
-                  description: Stalwart
-                  href: https://stalwart.alexlebens.net
-                  siteMonitor: http://stalwart.stalwart:80
-                  statusStyle: dot
-                  namespace: stalwart
-                  app: stalwart
-                  podSelector: >-
-                      app.kubernetes.io/instance in (
-                          stalwart
-                      )
              - Notifications:
                  icon: sh-ntfy.webp
                  description: ntfy
--- a/clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml
+++ b/clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml
@@ -35,4 +35,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/prometheus.png
 # renovate: datasource=github-releases depName=prometheus-operator/prometheus-operator
-appVersion: v0.90.1
+appVersion: v0.91.0
--- a/clusters/cl01tl/helm/loki/Chart.lock
+++ b/clusters/cl01tl/helm/loki/Chart.lock
@@ -1,9 +1,9 @@
 dependencies:
 - name: loki
-  repository: https://grafana.github.io/helm-charts
-  version: 6.55.0
+  repository: oci://ghcr.io/grafana-community/helm-charts
+  version: 13.5.0
 - name: alloy
  repository: https://grafana.github.io/helm-charts
  version: 1.8.0
-digest: sha256:e3c7508c21ed7737f692387ca79a0c001c3393edbedff7b05c60325469a4fb2b
-generated: "2026-04-24T17:01:55.023153925Z"
+digest: sha256:bef475f5b6770e4b582b4499e38417789b2bb59ce0ee93c0390daef780e5728d
+generated: "2026-05-02T19:36:44.416322-05:00"
--- a/clusters/cl01tl/helm/loki/Chart.yaml
+++ b/clusters/cl01tl/helm/loki/Chart.yaml
@@ -9,14 +9,14 @@ home: https://docs.alexlebens.dev/applications/loki/
 sources:
  - https://github.com/grafana/loki
  - https://github.com/grafana/alloy
-  - https://github.com/grafana/loki/tree/main/production/helm/loki
+  - https://github.com/grafana-community/helm-charts/tree/main/charts/loki
  - https://github.com/grafana/alloy/tree/main/operations/helm/charts/alloy
 maintainers:
  - name: alexlebens
 dependencies:
  - name: loki
-    version: 6.55.0
-    repository: https://grafana.github.io/helm-charts
+    version: 13.5.0
+    repository: oci://ghcr.io/grafana-community/helm-charts
  - name: alloy
    version: 1.8.0
    repository: https://grafana.github.io/helm-charts
--- a/clusters/cl01tl/helm/loki/values.yaml
+++ b/clusters/cl01tl/helm/loki/values.yaml
@@ -1,5 +1,5 @@
 loki:
-  deploymentMode: SingleBinary
+  deploymentMode: Monolithic
  loki:
    auth_enabled: false
    limits_config:
@@ -31,8 +31,6 @@ loki:
      pool_config:
        remote_timeout: 10s
      remote_timeout: 10s
-  enterprise:
-    enabled: false
  gateway:
    enabled: true
    resources:
@@ -41,6 +39,18 @@ loki:
        memory: 20Mi
    basicAuth:
      enabled: false
+    route:
+      main:
+        enabled: true
+        apiVersion: gateway.networking.k8s.io/v1
+        kind: HTTPRoute
+        hostnames:
+          - loki.alexlebens.net
+        parentRefs:
+          - group: gateway.networking.k8s.io
+            kind: Gateway
+            name: traefik-gateway
+            namespace: traefik
  singleBinary:
    replicas: 1
    resources:
@@ -48,14 +58,16 @@ loki:
        cpu: 100m
        memory: 800Mi
    persistence:
-      enabled: true
      size: 150Gi
      storageClass: synology-iscsi-delete
  write:
+    enabled: false
    replicas: 0
  read:
+    enabled: false
    replicas: 0
  backend:
+    enabled: false
    replicas: 0
 alloy:
  crds:
--- a/clusters/cl01tl/helm/mariadb-operator/values.yaml
+++ b/clusters/cl01tl/helm/mariadb-operator/values.yaml
@@ -2,7 +2,8 @@ mariadb-operator:
  crds:
    enabled: false
  ha:
-    enabled: true
+    enabled: false
+    replicas: 1
  metrics:
    enabled: true
  pdb:
--- a/clusters/cl01tl/helm/matrix-synapse/Chart.lock
+++ b/clusters/cl01tl/helm/matrix-synapse/Chart.lock
@@ -1,7 +1,7 @@
 dependencies:
 - name: matrix-synapse
  repository: https://ananace.gitlab.io/charts
-  version: 3.12.25
+  version: 3.12.26
 - name: app-template
  repository: https://bjw-s-labs.github.io/helm-charts/
  version: 4.6.2
@@ -38,5 +38,5 @@ dependencies:
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 1.1.1
-digest: sha256:fd3a3d94f4e206577c23fc00a4c0bde760cd812a38aff67f31a6366b69de5bc2
-generated: "2026-05-02T01:48:21.626438015Z"
+digest: sha256:4377d9ff96042ba996b879caf6108260d2eb9d20bccdb26ae7042d96d2772012
+generated: "2026-05-03T01:00:09.899197368Z"
--- a/clusters/cl01tl/helm/matrix-synapse/Chart.yaml
+++ b/clusters/cl01tl/helm/matrix-synapse/Chart.yaml
@@ -26,7 +26,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: matrix-synapse
-    version: 3.12.25
+    version: 3.12.26
    repository: https://ananace.gitlab.io/charts
  - name: app-template
    alias: matrix-hookshot
--- a/clusters/cl01tl/helm/medialyze/Chart.yaml
+++ b/clusters/cl01tl/helm/medialyze/Chart.yaml
@@ -24,4 +24,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://raw.githubusercontent.com/frederikemmer/MediaLyze/d8f69c0628bac7c047b90f91a66341648029c273/frontend/public/favicon.svg
 # renovate: datasource=github-releases depName=frederikemmer/MediaLyze
-appVersion: 0.9.0
+appVersion: 0.10.1
--- a/clusters/cl01tl/helm/medialyze/values.yaml
+++ b/clusters/cl01tl/helm/medialyze/values.yaml
@@ -12,7 +12,7 @@ medialyze:
        main:
          image:
            repository: ghcr.io/frederikemmer/medialyze
-            tag: 0.9.0@sha256:3d88b4f4a3e6cf2489a5236e5174d58d6274e99008ce2ddd4159d1389744473f
+            tag: 0.10.1@sha256:4139a6ea9839cb0ff8a1883568d8ae1833ec62eea34a19f777c7e0ac84ff6848
          env:
            - name: HOST_PORT
              value: 8080
--- a/clusters/cl01tl/helm/music-grabber/Chart.yaml
+++ b/clusters/cl01tl/helm/music-grabber/Chart.yaml
@@ -24,4 +24,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/music-grabber.png
 # renovate: datasource=docker depName=g33kphr33k/musicgrabber
-appVersion: 2.8.1
+appVersion: 2.8.4
--- a/clusters/cl01tl/helm/music-grabber/values.yaml
+++ b/clusters/cl01tl/helm/music-grabber/values.yaml
@@ -12,7 +12,7 @@ music-grabber:
        main:
          image:
            repository: g33kphr33k/musicgrabber
-            tag: 2.8.1@sha256:b0946724ca54944c239bceddd445bc78f91cfc0d439379c4f063d3819e7b47d3
+            tag: 2.8.4@sha256:bf889837c5ddff5cd9bc4162c0e0e52920e4dc3678554f7a87075d50eb1510f7
          env:
            - name: MUSIC_DIR
              value: /mnt/store/Music Grabber/
--- a/clusters/cl01tl/helm/ollama/Chart.yaml
+++ b/clusters/cl01tl/helm/ollama/Chart.yaml
@@ -31,4 +31,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ollama.png
 # renovate: datasource=github-releases depName=ollama/ollama
-appVersion: 0.22.1
+appVersion: 0.23.1
--- a/clusters/cl01tl/helm/ollama/values.yaml
+++ b/clusters/cl01tl/helm/ollama/values.yaml
@@ -21,7 +21,7 @@ ollama:
        main:
          image:
            repository: ollama/ollama
-            tag: 0.22.1@sha256:3ca37ec2b9cb6341b62554074205c616778fe98abcf9e4fc50361b79a07407ae
+            tag: 0.23.1@sha256:6077dbbd6508dce8973f8b91c30d8026b1279ab0483e15f0dfad469dba676c2f
          env:
            - name: OLLAMA_KEEP_ALIVE
              value: 24h
@@ -55,7 +55,7 @@ ollama:
        main:
          image:
            repository: ollama/ollama
-            tag: 0.22.1@sha256:3ca37ec2b9cb6341b62554074205c616778fe98abcf9e4fc50361b79a07407ae
+            tag: 0.23.1@sha256:6077dbbd6508dce8973f8b91c30d8026b1279ab0483e15f0dfad469dba676c2f
          env:
            - name: OLLAMA_KEEP_ALIVE
              value: 24h
@@ -89,7 +89,7 @@ ollama:
        main:
          image:
            repository: ollama/ollama
-            tag: 0.22.1@sha256:3ca37ec2b9cb6341b62554074205c616778fe98abcf9e4fc50361b79a07407ae
+            tag: 0.23.1@sha256:6077dbbd6508dce8973f8b91c30d8026b1279ab0483e15f0dfad469dba676c2f
          env:
            - name: OLLAMA_KEEP_ALIVE
              value: 24h
--- a/clusters/cl01tl/helm/openbao/values.yaml
+++ b/clusters/cl01tl/helm/openbao/values.yaml
@@ -273,8 +273,8 @@ rclone-openbao-backups-external:
    source:
      bucketName: openbao-backups
    destination:
-      bucketName: openbao-backups-6e088aad5fad110b
-      providerType: DigitalOcean
+      bucketName: openbao-backups-038053cd180284dc
+      providerType: Other
  prune:
    enabled: true
    ageToPrune: 90d
@@ -287,7 +287,7 @@ rclone-openbao-backups-external:
          path: /garage/config
      destination:
        credentials:
-          path: /digital-ocean/home-infra/openbao-backups
+          path: /backblaze/home-infra/openbao-backups
        config:
-          path: /digital-ocean/config
+          path: /backblaze/config
          endpointProperty: ENDPOINT
--- a/clusters/cl01tl/helm/outline/Chart.yaml
+++ b/clusters/cl01tl/helm/outline/Chart.yaml
@@ -38,4 +38,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/outline.png
 # renovate: datasource=github-releases depName=outline/outline
-appVersion: 1.7.0
+appVersion: 1.7.1
--- a/clusters/cl01tl/helm/outline/values.yaml
+++ b/clusters/cl01tl/helm/outline/values.yaml
@@ -11,7 +11,7 @@ outline:
        main:
          image:
            repository: outlinewiki/outline
-            tag: 1.7.0@sha256:b13ccd15653513a79eb66283bfa91287f5e3d0944d8cb056d5288b8565992de5
+            tag: 1.7.1@sha256:361df7040e6f0d7abac768b99f40122197921626a7e69501aabb5fcb496fc1b4
          env:
            - name: NODE_ENV
              value: production
--- a/clusters/cl01tl/helm/plex/Chart.yaml
+++ b/clusters/cl01tl/helm/plex/Chart.yaml
@@ -20,4 +20,4 @@ dependencies:
    version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/plex.png
 # renovate: datasource=github-releases depName=linuxserver/docker-plex
-appVersion: 1.43.1.10611-1e34174b1-ls303
+appVersion: 1.43.1.10611-1e34174b1-ls304
--- a/clusters/cl01tl/helm/plex/values.yaml
+++ b/clusters/cl01tl/helm/plex/values.yaml
@@ -22,7 +22,7 @@ plex:
        main:
          image:
            repository: ghcr.io/linuxserver/plex
-            tag: 1.43.1.10611-1e34174b1-ls303@sha256:b785bdd60e781662f16e0526a6b54c07856739df95ab558a674a3c084dbde423
+            tag: 1.43.1.10611-1e34174b1-ls304@sha256:c5e295f023b4e92b3ca467626dbc2ba8a9b5e53934810df74d99c14e38ae1857
          env:
            - name: TZ
              value: America/Chicago
--- a/clusters/cl01tl/helm/qbittorrent/values.yaml
+++ b/clusters/cl01tl/helm/qbittorrent/values.yaml
@@ -168,7 +168,7 @@ qbittorrent:
        apprise-api:
          image:
            repository: ghcr.io/caronc/apprise
-            tag: v1.4.0@sha256:9d97a6b9b42cf6afdf3b5466dbed2a59cd42a4bb777ec6aa57b5f2ee623569eb
+            tag: v1.4.1@sha256:25e0577915c2f06233ae1dce077f05c0fc9ba4f0ea89de5aee18a32b2ee9a75c
          env:
            - name: TZ
              value: America/Chicago
@@ -199,7 +199,7 @@ qbittorrent:
        qui:
          image:
            repository: ghcr.io/autobrr/qui
-            tag: v1.17.0@sha256:fb3832e68f66b056e1b049d16c40732661e7b73999bc642d4b11469a3ebbabd3
+            tag: v1.18.0@sha256:2e768c8509831afd1f606d27d9aa8e5f3fc722fac4ea88acfdc4fa3b0e9b13ae
          env:
            - name: QUI__METRICS_ENABLED
              value: true
--- a/clusters/cl01tl/helm/radarr-4k/Chart.yaml
+++ b/clusters/cl01tl/helm/radarr-4k/Chart.yaml
@@ -33,4 +33,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/radarr-4k.png
 # renovate: datasource=github-releases depName=linuxserver/docker-radarr
-appVersion: 6.1.1.10360-ls300
+appVersion: 6.1.1.10360-ls301
--- a/clusters/cl01tl/helm/radarr-4k/values.yaml
+++ b/clusters/cl01tl/helm/radarr-4k/values.yaml
@@ -14,7 +14,7 @@ radarr-4k:
        main:
          image:
            repository: ghcr.io/linuxserver/radarr
-            tag: 6.1.1.10360-ls300@sha256:b01097ad2d948c9f5eca39eb60bb529e2e55b0738c4bf7db09383bef0abab59d
+            tag: 6.1.1.10360-ls301@sha256:659e5f20500948b1491f31dd85c6f99a43508ce3e46595793e1e15aa955bf6d7
          env:
            - name: TZ
              value: America/Chicago
--- a/clusters/cl01tl/helm/radarr-anime/Chart.yaml
+++ b/clusters/cl01tl/helm/radarr-anime/Chart.yaml
@@ -33,4 +33,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/radarr-anime.png
 # renovate: datasource=github-releases depName=linuxserver/docker-radarr
-appVersion: 6.1.1.10360-ls300
+appVersion: 6.1.1.10360-ls301
--- a/clusters/cl01tl/helm/radarr-anime/values.yaml
+++ b/clusters/cl01tl/helm/radarr-anime/values.yaml
@@ -14,7 +14,7 @@ radarr-anime:
        main:
          image:
            repository: ghcr.io/linuxserver/radarr
-            tag: 6.1.1.10360-ls300@sha256:b01097ad2d948c9f5eca39eb60bb529e2e55b0738c4bf7db09383bef0abab59d
+            tag: 6.1.1.10360-ls301@sha256:659e5f20500948b1491f31dd85c6f99a43508ce3e46595793e1e15aa955bf6d7
          env:
            - name: TZ
              value: America/Chicago
--- a/clusters/cl01tl/helm/radarr-standup/Chart.yaml
+++ b/clusters/cl01tl/helm/radarr-standup/Chart.yaml
@@ -33,4 +33,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/radarr.png
 # renovate: datasource=github-releases depName=linuxserver/docker-radarr
-appVersion: 6.1.1.10360-ls300
+appVersion: 6.1.1.10360-ls301
--- a/clusters/cl01tl/helm/radarr-standup/values.yaml
+++ b/clusters/cl01tl/helm/radarr-standup/values.yaml
@@ -14,7 +14,7 @@ radarr-standup:
        main:
          image:
            repository: ghcr.io/linuxserver/radarr
-            tag: 6.1.1.10360-ls300@sha256:b01097ad2d948c9f5eca39eb60bb529e2e55b0738c4bf7db09383bef0abab59d
+            tag: 6.1.1.10360-ls301@sha256:659e5f20500948b1491f31dd85c6f99a43508ce3e46595793e1e15aa955bf6d7
          env:
            - name: TZ
              value: America/Chicago
--- a/clusters/cl01tl/helm/radarr/Chart.yaml
+++ b/clusters/cl01tl/helm/radarr/Chart.yaml
@@ -33,4 +33,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/radarr.png
 # renovate: datasource=github-releases depName=linuxserver/docker-radarr
-appVersion: 6.1.1.10360-ls300
+appVersion: 6.1.1.10360-ls301
--- a/clusters/cl01tl/helm/radarr/values.yaml
+++ b/clusters/cl01tl/helm/radarr/values.yaml
@@ -14,7 +14,7 @@ radarr:
        main:
          image:
            repository: ghcr.io/linuxserver/radarr
-            tag: 6.1.1.10360-ls300@sha256:b01097ad2d948c9f5eca39eb60bb529e2e55b0738c4bf7db09383bef0abab59d
+            tag: 6.1.1.10360-ls301@sha256:659e5f20500948b1491f31dd85c6f99a43508ce3e46595793e1e15aa955bf6d7
          env:
            - name: TZ
              value: America/Chicago
--- a/clusters/cl01tl/helm/roundcube/Chart.lock
+++ b/clusters/cl01tl/helm/roundcube/Chart.lock
@@ -1,12 +0,0 @@
-dependencies:
- name: app-template
-  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
- name: postgres-cluster
-  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.12.1
- name: volsync-target
-  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.1.1
-digest: sha256:6ea0ffea8d47e3c62657f35ce0dda5d5f67aa13c99107dee396787a6e0c3633c
-generated: "2026-04-28T23:36:57.236521514Z"
--- a/clusters/cl01tl/helm/roundcube/Chart.yaml
+++ b/clusters/cl01tl/helm/roundcube/Chart.yaml
@@ -1,32 +0,0 @@
-apiVersion: v2
-name: roundcube
-version: 1.0.0
-description: Roundcube
-keywords:
-  - roundcube
-  - email-client
-home: https://docs.alexlebens.dev/applications/rclone/
-sources:
-  - https://github.com/roundcube/roundcubemail
-  - https://hub.docker.com/r/roundcube/roundcubemail
-  - https://hub.docker.com/_/nginx
-  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/postgres-cluster
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: app-template
-    alias: roundcube
-    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
-  - name: postgres-cluster
-    alias: postgres-18-cluster
-    version: 7.12.1
-    repository: oci://harbor.alexlebens.net/helm-charts
-  - name: volsync-target
-    alias: volsync-target-data
-    version: 1.1.1
-    repository: oci://harbor.alexlebens.net/helm-charts
-icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/roundcube.png
-# renovate: datasource=github-releases depName=roundcube/roundcubemail
-appVersion: 1.6.15
--- a/clusters/cl01tl/helm/roundcube/templates/_helpers.tpl
+++ b/clusters/cl01tl/helm/roundcube/templates/_helpers.tpl
@@ -1,14 +0,0 @@
-{{/*
-Common labels
-*/}}
-{{- define "custom.labels" -}}
-{{ include "custom.selectorLabels" $ }}
-{{- end }}
-
-{{/*
-Selector labels
-*/}}
-{{- define "custom.selectorLabels" -}}
-app.kubernetes.io/instance: {{ .Release.Name }}
-app.kubernetes.io/part-of: {{ .Release.Name }}
-{{- end }}
--- a/clusters/cl01tl/helm/roundcube/templates/external-secret.yaml
+++ b/clusters/cl01tl/helm/roundcube/templates/external-secret.yaml
@@ -1,17 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: roundcube-key
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: roundcube-key
-    {{- include "custom.labels" . | nindent 4 }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: openbao
-  data:
-    - secretKey: DES_KEY
-      remoteRef:
-        key: /cl01tl/roundcube/key
-        property: des-key
--- a/clusters/cl01tl/helm/roundcube/values.yaml
+++ b/clusters/cl01tl/helm/roundcube/values.yaml
@@ -1,236 +0,0 @@
-roundcube:
-  controllers:
-    main:
-      type: deployment
-      replicas: 1
-      strategy: Recreate
-      containers:
-        main:
-          image:
-            repository: roundcube/roundcubemail
-            tag: 1.6.15-fpm-alpine@sha256:0e07c1c66d5a1392f0c47cc79e85e0c60095108f715037d7d0aa3fd8cbe2e780
-          env:
-            - name: ROUNDCUBEMAIL_DB_TYPE
-              value: pgsql
-            - name: ROUNDCUBEMAIL_DB_HOST
-              valueFrom:
-                secretKeyRef:
-                  name: roundcube-postgresql-18-cluster-app
-                  key: host
-            - name: ROUNDCUBEMAIL_DB_NAME
-              valueFrom:
-                secretKeyRef:
-                  name: roundcube-postgresql-18-cluster-app
-                  key: dbname
-            - name: ROUNDCUBEMAIL_DB_USER
-              valueFrom:
-                secretKeyRef:
-                  name: roundcube-postgresql-18-cluster-app
-                  key: user
-            - name: ROUNDCUBEMAIL_DB_PASSWORD
-              valueFrom:
-                secretKeyRef:
-                  name: roundcube-postgresql-18-cluster-app
-                  key: password
-            - name: ROUNDCUBEMAIL_DES_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: roundcube-key
-                  key: DES_KEY
-            - name: ROUNDCUBEMAIL_DEFAULT_HOST
-              value: stalwart.stalwart
-            - name: ROUNDCUBEMAIL_DEFAULT_PORT
-              value: 143
-            - name: ROUNDCUBEMAIL_SMTP_SERVER
-              value: stalwart.stalwart
-            - name: ROUNDCUBEMAIL_SMTP_PORT
-              value: 25
-            - name: ROUNDCUBEMAIL_SKIN
-              value: elastic
-            - name: ROUNDCUBEMAIL_PLUGINS
-              value: archive,zipdownload,newmail_notifier
-          resources:
-            requests:
-              cpu: 1m
-              memory: 40Mi
-        nginx:
-          image:
-            repository: nginx
-            tag: 1.30.0-alpine-slim@sha256:830b40ff1beb5e018e56aef2ed1f9fe87a7797e35a555b75fea5c9568e316b04
-          env:
-            - name: NGINX_HOST
-              value: mail.alexlebens.net
-            - name: NGINX_PHP_CGI
-              value: roundcube.roundcube:9000
-    cleandb:
-      type: cronjob
-      cronjob:
-        suspend: false
-        timeZone: America/Chicago
-        schedule: 30 4 * * *
-        backoffLimit: 3
-        parallelism: 1
-      containers:
-        backup:
-          image:
-            repository: roundcube/roundcubemail
-            tag: 1.6.15-fpm-alpine@sha256:0e07c1c66d5a1392f0c47cc79e85e0c60095108f715037d7d0aa3fd8cbe2e780
-          args:
-            - bin/cleandb.sh
-          env:
-            - name: ROUNDCUBEMAIL_DB_TYPE
-              value: pgsql
-            - name: ROUNDCUBEMAIL_DB_HOST
-              valueFrom:
-                secretKeyRef:
-                  name: roundcube-postgresql-18-cluster-app
-                  key: host
-            - name: ROUNDCUBEMAIL_DB_NAME
-              valueFrom:
-                secretKeyRef:
-                  name: roundcube-postgresql-18-cluster-app
-                  key: dbname
-            - name: ROUNDCUBEMAIL_DB_USER
-              valueFrom:
-                secretKeyRef:
-                  name: roundcube-postgresql-18-cluster-app
-                  key: user
-            - name: ROUNDCUBEMAIL_DB_PASSWORD
-              valueFrom:
-                secretKeyRef:
-                  name: roundcube-postgresql-18-cluster-app
-                  key: password
-            - name: ROUNDCUBEMAIL_DES_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: roundcube-key
-                  key: DES_KEY
-            - name: ROUNDCUBEMAIL_DEFAULT_HOST
-              value: tls://stalwart.stalwart
-            - name: ROUNDCUBEMAIL_SMTP_SERVER
-              value: tls://stalwart.stalwart
-            - name: ROUNDCUBEMAIL_SKIN
-              value: elastic
-            - name: ROUNDCUBEMAIL_PLUGINS
-              value: archive,zipdownload,newmail_notifier
-  configMaps:
-    config:
-      enabled: true
-      data:
-        default.conf: |
-          server {
-              listen 80 default_server;
-              server_name _;
-              root /var/www/html;
-
-              location / {
-                  try_files $uri /index.php$is_args$args;
-              }
-
-              location ~ \.php(/|$) {
-                  try_files $uri =404;
-                  fastcgi_pass roundcube:9000;
-                  fastcgi_read_timeout 300;
-                  proxy_read_timeout 300;
-                  fastcgi_split_path_info ^(.+\.php)(/.*)$;
-                  include fastcgi_params;
-                  fastcgi_param SCRIPT_FILENAME $realpath_root$fastcgi_script_name;
-                  fastcgi_param DOCUMENT_ROOT $realpath_root;
-                  internal;
-              }
-
-              client_max_body_size 6m;
-
-              error_log  /var/log/nginx/error.log;
-              access_log /var/log/nginx/access.log;
-          }
-  service:
-    main:
-      controller: main
-      ports:
-        mail:
-          port: 9000
-          targetPort: 9000
-        web:
-          port: 80
-          targetPort: 80
-  route:
-    main:
-      kind: HTTPRoute
-      parentRefs:
-        - group: gateway.networking.k8s.io
-          kind: Gateway
-          name: traefik-gateway
-          namespace: traefik
-      hostnames:
-        - mail.alexlebens.net
-      rules:
-        - backendRefs:
-            - name: roundcube
-              port: 80
-          matches:
-            - path:
-                type: PathPrefix
-                value: /
-  persistence:
-    config:
-      enabled: true
-      type: configMap
-      name: roundcube-config
-      advancedMounts:
-        main:
-          nginx:
-            - path: /etc/nginx/conf.d/default.conf
-              readOnly: true
-              mountPropagation: None
-              subPath: default.conf
-    data:
-      forceRename: roundcube-data
-      storageClass: ceph-block
-      accessMode: ReadWriteOnce
-      size: 5Gi
-      advancedMounts:
-        main:
-          main:
-            - path: /var/www/html
-              readOnly: false
-          nginx:
-            - path: /var/www/html
-              readOnly: false
-    temp:
-      type: emptyDir
-      advancedMounts:
-        main:
-          main:
-            - path: /tmp/roundcube-temp
-              readOnly: false
-postgres-18-cluster:
-  mode: recovery
-  recovery:
-    method: objectStore
-    objectStore:
-      index: 1
-  backup:
-    objectStore:
-      - name: garage-local
-        index: 1
-        destinationBucket: postgres-backups
-        externalSecretCredentialPath: /garage/home-infra/postgres-backups
-        isWALArchiver: true
-    scheduledBackups:
-      - name: live-backup
-        suspend: false
-        immediate: true
-        schedule: "0 40 15 * * *"
-        backupName: garage-local
-volsync-target-data:
-  pvcTarget: roundcube-data
-  local:
-    enabled: true
-    schedule: 12 11 * * *
-  remote:
-    enabled: true
-    schedule: 12 12 * * *
-  external:
-    enabled: true
-    schedule: 12 13 * * *
--- a/clusters/cl01tl/helm/searxng/values.yaml
+++ b/clusters/cl01tl/helm/searxng/values.yaml
@@ -10,7 +10,7 @@ searxng:
        main:
          image:
            repository: searxng/searxng
-            tag: latest@sha256:189189aa5ffe9275eaa276bace4732fa64197c1c03f9f01003fa02a0585a766a
+            tag: latest@sha256:0c740243608b7eed0a99aa824f9dbf00bff9195c59f23ff00a406e534aa6e863
          env:
            - name: SEARXNG_BASE_URL
              value: http://searxng-api.searxng:8080
@@ -38,7 +38,7 @@ searxng:
        main:
          image:
            repository: searxng/searxng
-            tag: latest@sha256:189189aa5ffe9275eaa276bace4732fa64197c1c03f9f01003fa02a0585a766a
+            tag: latest@sha256:0c740243608b7eed0a99aa824f9dbf00bff9195c59f23ff00a406e534aa6e863
          env:
            - name: SEARXNG_BASE_URL
              value: https://searxng.alexlebens.net/
--- a/clusters/cl01tl/helm/snapshot-controller/Chart.lock
+++ b/clusters/cl01tl/helm/snapshot-controller/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: snapshot-controller
  repository: https://piraeus.io/helm-charts/
-  version: 5.0.3
-digest: sha256:53f2282222ab38cbc77af5c3328c28cdc4e8c0b4eaa4d6a202301eb1e003c8f3
-generated: "2026-02-17T19:47:27.760584237Z"
+  version: 5.0.4
+digest: sha256:b5b31a39dcb780f2d8c54fa3d4bc9c45f03b91bb66735f6101c2e75e6e98fc42
+generated: "2026-05-05T18:25:41.007106464Z"
--- a/clusters/cl01tl/helm/snapshot-controller/Chart.yaml
+++ b/clusters/cl01tl/helm/snapshot-controller/Chart.yaml
@@ -13,7 +13,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: snapshot-controller
-    version: 5.0.3
+    version: 5.0.4
    repository: https://piraeus.io/helm-charts/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 # renovate: datasource=github-releases depName=kubernetes-csi/external-snapshotter
--- a/clusters/cl01tl/helm/sparkyfitness/values.yaml
+++ b/clusters/cl01tl/helm/sparkyfitness/values.yaml
@@ -20,7 +20,7 @@ sparkyfitness:
  server:
    image:
      repository: ghcr.io/codewithcj/sparkyfitness-server
-      tag: v0.16.6.0@sha256:fda636e5adce8da495fe649df4aa230f37c47edbd134798163ac8461479ca725
+      tag: v0.16.6.1@sha256:5710eba08e2fcbd1718f74dfcf72273a8d7e7dab3fe49c87bbab23e9d2b08c6f
    resources:
      requests:
        cpu: 100m
@@ -45,7 +45,7 @@ sparkyfitness:
  frontend:
    image:
      repository: ghcr.io/codewithcj/sparkyfitness-frontend
-      tag: v0.16.6.0@sha256:8680cbcd2f2cb5d582600c508c9328cd0c20c13d14e0402a5261cdf51eb925c8
+      tag: v0.16.6.1@sha256:9a52fc95e96375d86990a036aa8ffebd9de8866c8601e3f2d27a483f8e102166
    resources:
      requests:
        cpu: 10m
--- a/clusters/cl01tl/helm/stalwart/Chart.lock
+++ b/clusters/cl01tl/helm/stalwart/Chart.lock
@@ -1,15 +0,0 @@
-dependencies:
- name: app-template
-  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
- name: postgres-cluster
-  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.12.1
- name: valkey
-  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
- name: volsync-target
-  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.1.1
-digest: sha256:dd614761622fa310ad50f400727fa6a6574071c2ac057294364409fdfe0ff545
-generated: "2026-05-02T01:49:21.562586412Z"
--- a/clusters/cl01tl/helm/stalwart/Chart.yaml
+++ b/clusters/cl01tl/helm/stalwart/Chart.yaml
@@ -1,37 +0,0 @@
-apiVersion: v2
-name: stalwart
-version: 1.0.0
-description: Stalwart
-keywords:
-  - stalwart
-  - email
-home: https://docs.alexlebens.dev/applications/stalwart/
-sources:
-  - https://github.com/stalwartlabs/mail-server
-  - https://github.com/stalwartlabs/stalwart/pkgs/container/stalwart
-  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/postgres-cluster
-  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/valkey
-  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/volsync-target
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: app-template
-    alias: stalwart
-    version: 4.6.2
-    repository: https://bjw-s-labs.github.io/helm-charts/
-  - name: postgres-cluster
-    alias: postgres-18-cluster
-    version: 7.12.1
-    repository: oci://harbor.alexlebens.net/helm-charts
-  - name: valkey
-    alias: valkey
-    version: 0.7.0
-    repository: oci://harbor.alexlebens.net/helm-charts
-  - name: volsync-target
-    alias: volsync-target-config
-    version: 1.1.1
-    repository: oci://harbor.alexlebens.net/helm-charts
-icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/stalwart.png
-# renovate: datasource=github-releases depName=stalwartlabs/mail-server
-appVersion: v0.15.5
--- a/clusters/cl01tl/helm/stalwart/templates/_helpers.tpl
+++ b/clusters/cl01tl/helm/stalwart/templates/_helpers.tpl
@@ -1,14 +0,0 @@
-{{/*
-Common labels
-*/}}
-{{- define "custom.labels" -}}
-{{ include "custom.selectorLabels" $ }}
-{{- end }}
-
-{{/*
-Selector labels
-*/}}
-{{- define "custom.selectorLabels" -}}
-app.kubernetes.io/instance: {{ .Release.Name }}
-app.kubernetes.io/part-of: {{ .Release.Name }}
-{{- end }}
--- a/clusters/cl01tl/helm/stalwart/templates/elasticsearch.yaml
+++ b/clusters/cl01tl/helm/stalwart/templates/elasticsearch.yaml
@@ -1,29 +0,0 @@
-apiVersion: elasticsearch.k8s.elastic.co/v1
-kind: Elasticsearch
-metadata:
-  name: elasticsearch-stalwart
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: elasticsearch-stalwart
-    {{- include "custom.labels" . | nindent 4 }}
-spec:
-  # renovate: datasource=docker depName=elasticsearch
-  version: 9.3.3
-  auth:
-    fileRealm:
-      - secretName: stalwart-elasticsearch-config
-  nodeSets:
-    - name: default
-      count: 2
-      config:
-        node.store.allow_mmap: false
-      volumeClaimTemplates:
-        - metadata:
-            name: elasticsearch-data
-          spec:
-            accessModes:
-              - ReadWriteOnce
-            resources:
-              requests:
-                storage: 5Gi
-            storageClassName: ceph-block
--- a/clusters/cl01tl/helm/stalwart/templates/external-secret.yaml
+++ b/clusters/cl01tl/helm/stalwart/templates/external-secret.yaml
@@ -1,25 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: stalwart-elasticsearch-config
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: stalwart-elasticsearch-config
-    {{- include "custom.labels" . | nindent 4 }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: openbao
-  data:
-    - secretKey: username
-      remoteRef:
-        key: /cl01tl/stalwart/elasticsearch
-        property: username
-    - secretKey: password
-      remoteRef:
-        key: /cl01tl/stalwart/elasticsearch
-        property: password
-    - secretKey: roles
-      remoteRef:
-        key: /cl01tl/stalwart/elasticsearch
-        property: roles
--- a/clusters/cl01tl/helm/stalwart/templates/namespace.yaml
+++ b/clusters/cl01tl/helm/stalwart/templates/namespace.yaml
@@ -1,10 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: {{ .Release.Namespace }}
-    {{- include "custom.labels" . | nindent 4 }}
-    pod-security.kubernetes.io/audit: privileged
-    pod-security.kubernetes.io/enforce: privileged
-    pod-security.kubernetes.io/warn: privileged
--- a/clusters/cl01tl/helm/stalwart/templates/prometheus-rule.yaml
+++ b/clusters/cl01tl/helm/stalwart/templates/prometheus-rule.yaml
@@ -1,169 +0,0 @@
-apiVersion: monitoring.coreos.com/v1
-kind: PrometheusRule
-metadata:
-  name: elasticsearch
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: elasticsearch
-    {{- include "custom.labels" . | nindent 4 }}
-spec:
-  groups:
-    - name: ElasticsearchExporter
-      rules:
-        - alert: ElasticsearchHeapUsageTooHigh
-          expr: (elasticsearch_jvm_memory_used_bytes{area="heap"} / elasticsearch_jvm_memory_max_bytes{area="heap"}) * 100 > 90 and elasticsearch_jvm_memory_max_bytes{area="heap"} > 0
-          for: 2m
-          labels:
-            severity: critical
-          annotations:
-            summary: Elasticsearch Heap Usage Too High (instance {{ `{{ $labels.instance }}` }})
-            description: "The heap usage is over 90%\n  VALUE = {{ `{{ $value }}` }}\n  LABELS = {{ `{{ $labels }}` }}"
-        - alert: ElasticsearchHeapUsageWarning
-          expr: (elasticsearch_jvm_memory_used_bytes{area="heap"} / elasticsearch_jvm_memory_max_bytes{area="heap"}) * 100 > 80 and elasticsearch_jvm_memory_max_bytes{area="heap"} > 0
-          for: 2m
-          labels:
-            severity: warning
-          annotations:
-            summary: Elasticsearch Heap Usage warning (instance {{ `{{ $labels.instance }}` }})
-            description: "The heap usage is over 80%\n  VALUE = {{ `{{ $value }}` }}\n  LABELS = {{ `{{ $labels }}` }}"
-        - alert: ElasticsearchDiskOutOfSpace
-          expr: elasticsearch_filesystem_data_available_bytes / elasticsearch_filesystem_data_size_bytes * 100 < 10 and elasticsearch_filesystem_data_size_bytes > 0
-          for: 0m
-          labels:
-            severity: critical
-          annotations:
-            summary: Elasticsearch disk out of space (instance {{ `{{ $labels.instance }}` }})
-            description: "The disk usage is over 90%\n  VALUE = {{ `{{ $value }}` }}\n  LABELS = {{ `{{ $labels }}` }}"
-        - alert: ElasticsearchDiskSpaceLow
-          expr: elasticsearch_filesystem_data_available_bytes / elasticsearch_filesystem_data_size_bytes * 100 < 20 and elasticsearch_filesystem_data_size_bytes > 0
-          for: 2m
-          labels:
-            severity: warning
-          annotations:
-            summary: Elasticsearch disk space low (instance {{ `{{ $labels.instance }}` }})
-            description: "The disk usage is over 80%\n  VALUE = {{ `{{ $value }}` }}\n  LABELS = {{ `{{ $labels }}` }}"
-        - alert: ElasticsearchClusterRed
-          expr: elasticsearch_cluster_health_status{color="red"} == 1
-          for: 0m
-          labels:
-            severity: critical
-          annotations:
-            summary: Elasticsearch Cluster Red (instance {{ `{{ $labels.instance }}` }})
-            description: "Elastic Cluster Red status\n  VALUE = {{ `{{ $value }}` }}\n  LABELS = {{ `{{ $labels }}` }}"
-        - alert: ElasticsearchClusterYellow
-          expr: elasticsearch_cluster_health_status{color="yellow"} == 1
-          for: 0m
-          labels:
-            severity: warning
-          annotations:
-            summary: Elasticsearch Cluster Yellow (instance {{ `{{ $labels.instance }}` }})
-            description: "Elastic Cluster Yellow status\n  VALUE = {{ `{{ $value }}` }}\n  LABELS = {{ `{{ $labels }}` }}"
-          # 1m delay allows a restart without triggering an alert.
-        - alert: ElasticsearchHealthyNodes
-          expr: elasticsearch_cluster_health_number_of_nodes < 3
-          for: 1m
-          labels:
-            severity: critical
-          annotations:
-            summary: Elasticsearch Healthy Nodes (instance {{ `{{ $labels.instance }}` }})
-            description: "Missing node in Elasticsearch cluster\n  VALUE = {{ `{{ $value }}` }}\n  LABELS = {{ `{{ $labels }}` }}"
-          # 1m delay allows a restart without triggering an alert.
-        - alert: ElasticsearchHealthyDataNodes
-          expr: elasticsearch_cluster_health_number_of_data_nodes < 3
-          for: 1m
-          labels:
-            severity: critical
-          annotations:
-            summary: Elasticsearch Healthy Data Nodes (instance {{ `{{ $labels.instance }}` }})
-            description: "Missing data node in Elasticsearch cluster\n  VALUE = {{ `{{ $value }}` }}\n  LABELS = {{ `{{ $labels }}` }}"
-        - alert: ElasticsearchRelocatingShards
-          expr: elasticsearch_cluster_health_relocating_shards > 0
-          for: 0m
-          labels:
-            severity: info
-          annotations:
-            summary: Elasticsearch relocating shards (instance {{ `{{ $labels.instance }}` }})
-            description: "Elasticsearch is relocating shards\n  VALUE = {{ `{{ $value }}` }}\n  LABELS = {{ `{{ $labels }}` }}"
-        - alert: ElasticsearchRelocatingShardsTooLong
-          expr: elasticsearch_cluster_health_relocating_shards > 0
-          for: 15m
-          labels:
-            severity: warning
-          annotations:
-            summary: Elasticsearch relocating shards too long (instance {{ `{{ $labels.instance }}` }})
-            description: "Elasticsearch has been relocating shards for 15min\n  VALUE = {{ `{{ $value }}` }}\n  LABELS = {{ `{{ $labels }}` }}"
-        - alert: ElasticsearchInitializingShards
-          expr: elasticsearch_cluster_health_initializing_shards > 0
-          for: 0m
-          labels:
-            severity: info
-          annotations:
-            summary: Elasticsearch initializing shards (instance {{ `{{ $labels.instance }}` }})
-            description: "Elasticsearch is initializing shards\n  VALUE = {{ `{{ $value }}` }}\n  LABELS = {{ `{{ $labels }}` }}"
-        - alert: ElasticsearchInitializingShardsTooLong
-          expr: elasticsearch_cluster_health_initializing_shards > 0
-          for: 15m
-          labels:
-            severity: warning
-          annotations:
-            summary: Elasticsearch initializing shards too long (instance {{ `{{ $labels.instance }}` }})
-            description: "Elasticsearch has been initializing shards for 15 min\n  VALUE = {{ `{{ $value }}` }}\n  LABELS = {{ `{{ $labels }}` }}"
-        - alert: ElasticsearchUnassignedShards
-          expr: elasticsearch_cluster_health_unassigned_shards > 0
-          for: 2m
-          labels:
-            severity: critical
-          annotations:
-            summary: Elasticsearch unassigned shards (instance {{ `{{ $labels.instance }}` }})
-            description: "Elasticsearch has unassigned shards\n  VALUE = {{ `{{ $value }}` }}\n  LABELS = {{ `{{ $labels }}` }}"
-        - alert: ElasticsearchPendingTasks
-          expr: elasticsearch_cluster_health_number_of_pending_tasks > 0
-          for: 15m
-          labels:
-            severity: warning
-          annotations:
-            summary: Elasticsearch pending tasks (instance {{ `{{ $labels.instance }}` }})
-            description: "Elasticsearch has pending tasks. Cluster works slowly.\n  VALUE = {{ `{{ $value }}` }}\n  LABELS = {{ `{{ $labels }}` }}"
-        - alert: ElasticsearchNoNewDocuments
-          expr: increase(elasticsearch_indices_indexing_index_total{es_data_node="true"}[10m]) < 1
-          for: 0m
-          labels:
-            severity: warning
-          annotations:
-            summary: Elasticsearch no new documents (instance {{ `{{ $labels.instance }}` }})
-            description: "No new documents for 10 min!\n  VALUE = {{ `{{ $value }}` }}\n  LABELS = {{ `{{ $labels }}` }}"
-          # Threshold of 10ms (0.01s) per indexing operation is a rough default. Adjust based on your document size and cluster performance.
-        - alert: ElasticsearchHighIndexingLatency
-          expr: rate(elasticsearch_indices_indexing_index_time_seconds_total[5m]) / rate(elasticsearch_indices_indexing_index_total[5m]) > 0.01 and rate(elasticsearch_indices_indexing_index_total[5m]) > 0
-          for: 10m
-          labels:
-            severity: warning
-          annotations:
-            summary: Elasticsearch High Indexing Latency (instance {{ `{{ $labels.instance }}` }})
-            description: "The indexing latency on Elasticsearch cluster is higher than the threshold (current value: {{ `{{ $value }}` }}s).\n  VALUE = {{ `{{ $value }}` }}\n  LABELS = {{ `{{ $labels }}` }}"
-          # Threshold of 10000 ops/s is a rough default. Adjust based on your cluster capacity and expected workload.
-        - alert: ElasticsearchHighIndexingRate
-          expr: sum(rate(elasticsearch_indices_indexing_index_total[1m]))> 10000
-          for: 5m
-          labels:
-            severity: warning
-          annotations:
-            summary: Elasticsearch High Indexing Rate (instance {{ `{{ $labels.instance }}` }})
-            description: "The indexing rate on Elasticsearch cluster is higher than the threshold.\n  VALUE = {{ `{{ $value }}` }}\n  LABELS = {{ `{{ $labels }}` }}"
-          # Threshold of 100 queries/s is very low for most production clusters. Adjust based on your expected query volume.
-        - alert: ElasticsearchHighQueryRate
-          expr: sum(rate(elasticsearch_indices_search_query_total[1m])) > 100
-          for: 5m
-          labels:
-            severity: warning
-          annotations:
-            summary: Elasticsearch High Query Rate (instance {{ `{{ $labels.instance }}` }})
-            description: "The query rate on Elasticsearch cluster is higher than the threshold.\n  VALUE = {{ `{{ $value }}` }}\n  LABELS = {{ `{{ $labels }}` }}"
-        - alert: ElasticsearchHighQueryLatency
-          expr: rate(elasticsearch_indices_search_query_time_seconds[1m]) / rate(elasticsearch_indices_search_query_total[1m]) > 1 and rate(elasticsearch_indices_search_query_total[1m]) > 0
-          for: 5m
-          labels:
-            severity: warning
-          annotations:
-            summary: Elasticsearch High Query Latency (instance {{ `{{ $labels.instance }}` }})
-            description: "The query latency on Elasticsearch cluster is higher than the threshold (current value: {{ `{{ $value }}` }}s).\n  VALUE = {{ `{{ $value }}` }}\n  LABELS = {{ `{{ $labels }}` }}"
--- a/clusters/cl01tl/helm/stalwart/values.yaml
+++ b/clusters/cl01tl/helm/stalwart/values.yaml
@@ -1,129 +0,0 @@
-stalwart:
-  controllers:
-    main:
-      forceRename: stalwart
-      type: deployment
-      replicas: 1
-      strategy: Recreate
-      containers:
-        main:
-          image:
-            repository: ghcr.io/stalwartlabs/stalwart
-            tag: v0.15.5@sha256:dcf575db2d53d9ef86d6ced8abe4ba491984659a0f8862cc6079ee7b41c3c568
-          resources:
-            requests:
-              cpu: 10m
-              memory: 100Mi
-    metrics:
-      type: deployment
-      replicas: 1
-      strategy: Recreate
-      containers:
-        main:
-          image:
-            repository: quay.io/prometheuscommunity/elasticsearch-exporter
-            tag: v1.10.0@sha256:a6a4d4403f670faf6a94b8c7f9adbca3ead91f26dd64e5ccf95fa69025dc6e58
-          args:
-            - '--es.uri=https://elasticsearch-stalwart-es-http.tubearchivist:9200'
-            - '--es.ssl-skip-verify'
-          resources:
-            requests:
-              cpu: 1m
-              memory: 10Mi
-  service:
-    main:
-      controller: main
-      forceRename: stalwart
-      ports:
-        http:
-          port: 80
-          targetPort: 8080
-        smtp:
-          port: 25
-          targetPort: 25
-        smtps:
-          port: 465
-          targetPort: 465
-        imap:
-          port: 143
-          targetPort: 143
-        imaps:
-          port: 993
-          targetPort: 993
-    metrics:
-      controller: metrics
-      ports:
-        metrics:
-          port: 9114
-          targetPort: 9114
-  serviceMonitor:
-    main:
-      selector:
-        matchLabels:
-          app.kubernetes.io/name: stalwart-metrics
-          app.kubernetes.io/instance: stalwart-metrics
-      serviceName: '{{ include "bjw-s.common.lib.chart.names.fullname" $ }}'
-      endpoints:
-        - port: metrics
-          interval: 30s
-          scrapeTimeout: 10s
-          path: /metrics
-  route:
-    main:
-      kind: HTTPRoute
-      parentRefs:
-        - group: gateway.networking.k8s.io
-          kind: Gateway
-          name: traefik-gateway
-          namespace: traefik
-      hostnames:
-        - stalwart.alexlebens.net
-      rules:
-        - backendRefs:
-            - name: stalwart
-              port: 80
-          matches:
-            - path:
-                type: PathPrefix
-                value: /
-  persistence:
-    config:
-      forceRename: stalwart-config
-      storageClass: ceph-block
-      accessMode: ReadWriteOnce
-      size: 10Gi
-      advancedMounts:
-        main:
-          main:
-            - path: /opt/stalwart
-              readOnly: false
-postgres-18-cluster:
-  mode: recovery
-  recovery:
-    method: objectStore
-    objectStore:
-      index: 1
-  backup:
-    objectStore:
-      - name: garage-local
-        index: 1
-        destinationBucket: postgres-backups
-        externalSecretCredentialPath: /garage/home-infra/postgres-backups
-        isWALArchiver: true
-    scheduledBackups:
-      - name: live-backup
-        suspend: false
-        immediate: true
-        schedule: "0 5 16 * * *"
-        backupName: garage-local
-volsync-target-config:
-  pvcTarget: stalwart-config
-  local:
-    enabled: true
-    schedule: 28 11 * * *
-  remote:
-    enabled: true
-    schedule: 28 12 * * *
-  external:
-    enabled: true
-    schedule: 28 13 * * *
--- a/clusters/cl01tl/helm/tdarr/values.yaml
+++ b/clusters/cl01tl/helm/tdarr/values.yaml
@@ -12,7 +12,7 @@ tdarr:
        main:
          image:
            repository: ghcr.io/haveagitgat/tdarr
-            tag: 2.70.01@sha256:4d48a46fb984b29e07cf4fd66cf7d3c8bd7c2c8dd662d09b4e20e11ae93e52fc
+            tag: 2.71.01@sha256:e66fd4083cd6024bc3e2d66cc1f07f84eeb1a66f57e75ca9354015a4b776413a
          env:
            - name: TZ
              value: America/Chicago
@@ -68,7 +68,7 @@ tdarr:
        main:
          image:
            repository: ghcr.io/haveagitgat/tdarr_node
-            tag: 2.70.01@sha256:60176a6ffc7584edde5420b7e1816f60227aa166f159b58a721d34564075c6e4
+            tag: 2.71.01@sha256:fab0c179faac72727f5ca98ff33104596099feaef1faf72410159a51077b520b
          env:
            - name: TZ
              value: America/Chicago
--- a/clusters/cl01tl/helm/traefik/Chart.lock
+++ b/clusters/cl01tl/helm/traefik/Chart.lock
@@ -1,9 +1,9 @@
 dependencies:
 - name: traefik
  repository: https://traefik.github.io/charts
-  version: 39.0.8
+  version: 39.0.9
 - name: traefik-crds
  repository: https://traefik.github.io/charts
  version: 1.17.0
-digest: sha256:93a74b11097a301c811ad03080fd1d6a1c1e695b6794b2c6cff7d61ae98ecc4f
-generated: "2026-04-24T16:35:47.354173673Z"
+digest: sha256:07d8c441e598f82718a4755dde9732afa68137b87abcffb738309eb23f57e75e
+generated: "2026-05-06T03:06:41.336775281Z"
--- a/clusters/cl01tl/helm/traefik/Chart.yaml
+++ b/clusters/cl01tl/helm/traefik/Chart.yaml
@@ -14,11 +14,11 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: traefik
-    version: 39.0.8
+    version: 39.0.9
    repository: https://traefik.github.io/charts
  - name: traefik-crds
    version: 1.17.0
    repository: https://traefik.github.io/charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/traefik.png
 # renovate: datasource=github-releases depName=traefik/traefik
-appVersion: v3.6.15
+appVersion: v3.7.0
--- a/clusters/cl01tl/helm/traefik/values.yaml
+++ b/clusters/cl01tl/helm/traefik/values.yaml
@@ -2,7 +2,7 @@ traefik:
  image:
    registry: docker.io
    repository: traefik
-    tag: v3.6.15@sha256:8cb20d16e01a53d8d7f7696ac2f1af7d200d5c9984d226ce2299731d9eab6d6c
+    tag: v3.7.0@sha256:eb328e2c806c53aafbbace6c451fa54d268961261a85452fcf0fb752a30c17be
  deployment:
    kind: DaemonSet
  ingressClass:
--- a/clusters/cl01tl/helm/tubearchivist/templates/elasticsearch.yaml
+++ b/clusters/cl01tl/helm/tubearchivist/templates/elasticsearch.yaml
@@ -8,7 +8,7 @@ metadata:
    {{- include "custom.labels" . | nindent 4 }}
 spec:
  # renovate: datasource=docker depName=elasticsearch
-  version: 9.3.3
+  version: 9.3.4
  auth:
    fileRealm:
      - secretName: tubearchivist-elasticsearch-config
--- a/clusters/cl01tl/helm/vaultwarden/Chart.yaml
+++ b/clusters/cl01tl/helm/vaultwarden/Chart.yaml
@@ -33,4 +33,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/vaultwarden.png
 # renovate: datasource=github-releases depName=dani-garcia/vaultwarden
-appVersion: 1.35.8
+appVersion: 1.36.0
--- a/clusters/cl01tl/helm/vaultwarden/values.yaml
+++ b/clusters/cl01tl/helm/vaultwarden/values.yaml
@@ -8,7 +8,7 @@ vaultwarden:
        main:
          image:
            repository: ghcr.io/dani-garcia/vaultwarden
-            tag: 1.35.8@sha256:c4f6056fe0c288a052a223cecd263a90d1dda1a0177bb5b054a363a6c7b211d9
+            tag: 1.36.0@sha256:d626d04934cd1192ad8ced1adb975099fca78cec33ab467d2d3c923cde7f3b0c
          env:
            - name: DOMAIN
              value: https://passwords.alexlebens.dev
--- a/clusters/cl01tl/helm/whodb/Chart.yaml
+++ b/clusters/cl01tl/helm/whodb/Chart.yaml
@@ -19,4 +19,4 @@ dependencies:
    version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/whodb.png
 # renovate: datasource=github-releases depName=clidey/whodb
-appVersion: 0.106.0
+appVersion: 0.107.0
--- a/clusters/cl01tl/helm/whodb/values.yaml
+++ b/clusters/cl01tl/helm/whodb/values.yaml
@@ -7,7 +7,7 @@ whodb:
        main:
          image:
            repository: clidey/whodb
-            tag: 0.106.0@sha256:f872bfcdf2f1cd6d9e97fa4c5d8dd521636bea1bfc0efe0a27ab6c9c11137010
+            tag: 0.107.0@sha256:20fb865bd0972bf56600c9e16715a3b5f30fef77defc19d74efcf72218d5f567
          env:
            - name: WHODB_OLLAMA_HOST
              value: ollama-server-2.ollama
--- a/clusters/cl01tl/helm/yubal/Chart.yaml
+++ b/clusters/cl01tl/helm/yubal/Chart.yaml
@@ -23,4 +23,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/yubal.png
 # renovate: datasource=github-releases depName=guillevc/yubal
-appVersion: v0.7.2
+appVersion: v0.8.0
--- a/clusters/cl01tl/helm/yubal/values.yaml
+++ b/clusters/cl01tl/helm/yubal/values.yaml
@@ -14,7 +14,7 @@ yubal:
        main:
          image:
            repository: ghcr.io/guillevc/yubal
-            tag: 0.7.2@sha256:906b7c90b738e77ad140178f6a5145f98c12af36e8321d427148c092836c37be
+            tag: 0.8.0@sha256:f3872ab590e74472e56c3aaaef497879f77191cd96306eeb8d3576a814c8a147
          env:
            - name: YUBAL_TZ
              value: America/Chicago
--- a/hosts/ps08rp/blocky/config.yml
+++ b/hosts/ps08rp/blocky/config.yml
@@ -111,7 +111,7 @@ customDNS:
    komodo                          IN      CNAME   traefik-cl01tl
    languagetool                    IN      CNAME   traefik-cl01tl
    lidarr                          IN      CNAME   traefik-cl01tl
-    mail                            IN      CNAME   traefik-cl01tl
+    loki                            IN      CNAME   traefik-cl01tl
    medialyze                       IN      CNAME   traefik-cl01tl
    music-grabber                   IN      CNAME   traefik-cl01tl
    navidrome                       IN      CNAME   traefik-cl01tl
@@ -140,7 +140,6 @@ customDNS:
    sonarr-4k                       IN      CNAME   traefik-cl01tl
    sonarr-anime                    IN      CNAME   traefik-cl01tl
    sparkyfitness                   IN      CNAME   traefik-cl01tl
-    stalwart                        IN      CNAME   traefik-cl01tl
    tdarr                           IN      CNAME   traefik-cl01tl
    tubearchivist                   IN      CNAME   traefik-cl01tl
    vault                           IN      CNAME   traefik-cl01tl
--- a/hosts/ps08rp/traefik/compose.yaml
+++ b/hosts/ps08rp/traefik/compose.yaml
@@ -1,7 +1,7 @@
 ---
 services:
    traefik:
-        image: ghcr.io/traefik/traefik:v3.6.15@sha256:8cb20d16e01a53d8d7f7696ac2f1af7d200d5c9984d226ce2299731d9eab6d6c
+        image: ghcr.io/traefik/traefik:v3.7.0@sha256:eb328e2c806c53aafbbace6c451fa54d268961261a85452fcf0fb752a30c17be
        container_name: traefik
        command:
            - "--global.checkNewVersion=false"
--- a/hosts/ps09rp/blocky/config.yml
+++ b/hosts/ps09rp/blocky/config.yml
@@ -132,7 +132,7 @@ customDNS:
    komodo                          IN      CNAME   traefik-cl01tl
    languagetool                    IN      CNAME   traefik-cl01tl
    lidarr                          IN      CNAME   traefik-cl01tl
-    mail                            IN      CNAME   traefik-cl01tl
+    loki                            IN      CNAME   traefik-cl01tl
    medialyze                       IN      CNAME   traefik-cl01tl
    music-grabber                   IN      CNAME   traefik-cl01tl
    navidrome                       IN      CNAME   traefik-cl01tl
@@ -161,7 +161,6 @@ customDNS:
    sonarr-4k                       IN      CNAME   traefik-cl01tl
    sonarr-anime                    IN      CNAME   traefik-cl01tl
    sparkyfitness                   IN      CNAME   traefik-cl01tl
-    stalwart                        IN      CNAME   traefik-cl01tl
    tdarr                           IN      CNAME   traefik-cl01tl
    tubearchivist                   IN      CNAME   traefik-cl01tl
    vault                           IN      CNAME   traefik-cl01tl
--- a/hosts/ps09rp/traefik/compose.yaml
+++ b/hosts/ps09rp/traefik/compose.yaml
@@ -1,7 +1,7 @@
 ---
 services:
    traefik:
-        image: ghcr.io/traefik/traefik:v3.6.15@sha256:8cb20d16e01a53d8d7f7696ac2f1af7d200d5c9984d226ce2299731d9eab6d6c
+        image: ghcr.io/traefik/traefik:v3.7.0@sha256:eb328e2c806c53aafbbace6c451fa54d268961261a85452fcf0fb752a30c17be
        container_name: traefik
        command:
            - "--global.checkNewVersion=false"
--- a/hosts/ps10rp/traefik/compose.yaml
+++ b/hosts/ps10rp/traefik/compose.yaml
@@ -20,7 +20,7 @@ services:
            - /dev/net/tun:/dev/net/tun

    traefik:
-        image: ghcr.io/traefik/traefik:v3.6.15@sha256:8cb20d16e01a53d8d7f7696ac2f1af7d200d5c9984d226ce2299731d9eab6d6c
+        image: ghcr.io/traefik/traefik:v3.7.0@sha256:eb328e2c806c53aafbbace6c451fa54d268961261a85452fcf0fb752a30c17be
        container_name: traefik
        command:
            - "--global.checkNewVersion=false"
--- a/renovate.json
+++ b/renovate.json
@@ -90,10 +90,10 @@
    {
      "description": "Specific app grouping overrides",
      "matchPackageNames": [
-        "/(^|/|-)(argo-cd|bazarr|cilium|dawarich|element-web|home-assistant|immich|komodo|plex|postiz|prowlarr|radarr|rook-ceph|roundcube|rybbit|sonarr|sparkyfitness|stalwartlabs|tdarr|traefik)/",
+        "/(^|/|-)(argo-cd|bazarr|cilium|dawarich|element-web|home-assistant|immich|komodo|plex|postiz|prowlarr|radarr|rook-ceph|rybbit|sonarr|sparkyfitness|tdarr|traefik)/",
        "/^rook(-ceph|/rook|/ceph)/"
      ],
-      "groupName": "{{#if packageName}}{{{replace '^.*(argo-cd|bazarr|cilium|dawarich|element-web|home-assistant|immich|komodo|plex|postiz|prowlarr|radarr|rook-ceph|roundcube|rybbit|sonarr|sparkyfitness|stalwartlabs|tdarr|traefik).*$' '$1' packageName}}}{{else}}{{{replace '^.*(argo-cd|bazarr|cilium|dawarich|element-web|home-assistant|immich|komodo|plex|postiz|prowlarr|radarr|rook-ceph|roundcube|rybbit|sonarr|sparkyfitness|stalwartlabs|tdarr|traefik).*$' '$1' depName}}}{{/if}}",
+      "groupName": "{{#if packageName}}{{{replace '^.*(argo-cd|bazarr|cilium|dawarich|element-web|home-assistant|immich|komodo|plex|postiz|prowlarr|radarr|rook-ceph|rybbit|sonarr|sparkyfitness|tdarr|traefik).*$' '$1' packageName}}}{{else}}{{{replace '^.*(argo-cd|bazarr|cilium|dawarich|element-web|home-assistant|immich|komodo|plex|postiz|prowlarr|radarr|rook-ceph|rybbit|sonarr|sparkyfitness|tdarr|traefik).*$' '$1' depName}}}{{/if}}",
      "groupSlug": "unified-{{{groupName}}}"
    },
    {
@@ -159,29 +159,45 @@
      "minimumReleaseAge": "3 days"
    },
    {
-      "description": "Disable automerge for ghcr docker dependencies, unsupported release age",
-      "matchDatasources": [
-        "docker"
-      ],
-      "matchPackageNames": [
-        "/^ghcr\\.io//"
-      ],
-      "automerge": false
-    },
-    {
-      "description": "Automerge images, specific packages, without release age",
+      "description": "Automerge minor, specific packages, without release age",
      "matchUpdateTypes": [
+        "patch",
        "minor"
      ],
      "matchPackageNames": [
-        "ghcr.io/renovatebot/renovate",
-        "ghcr.io/prometheus-community/charts/kube-prometheus-stack"
+        "/(^|/|-)(actual)/",
+        "/(^|/|-)(kube-prometheus-stack)/",
+        "/(^|/|-)(libation)/",
+        "/(^|/|-)(lidarr)/",
+        "/(^|/|-)(medialyze|MediaLyze)/",
+        "/(^|/|-)(musicgrabber)/",
+        "/(^|/|-)(ollama)/",
+        "/(^|/|-)(outline)/",
+        "/(^|/|-)(qui)/",
+        "/(^|/|-)(radarr)/",
+        "/(^|/|-)(renovate)/",
+        "/(^|/|-)(sonarr)/",
+        "/(^|/|-)(tdarr)/",
+        "/(^|/|-)(traefik)/",
+        "/(^|/|-)(yubal)/"
      ],
      "addLabels": [
        "{{{datasource}}}",
        "automerge"
      ],
      "automerge": true
+    },
+    {
+      "description": "Disable minimum release age for ghcr and quay docker dependencies",
+      "matchDatasources": [
+        "docker"
+      ],
+      "matchPackageNames": [
+        "/^ghcr\\.io//",
+        "/^quay\\.io//",
+        "/^harbor\\.alexlebens\\.net//"
+      ],
+      "minimumReleaseAge": ""
    }
  ]
 }