chore(deps): update rclone/rclone to v1.73.3 (#5069 )

chore(deps): update kube-prometheus-stack docker tag to v82.13.6 (#5067 )
chore(deps): update immich to v2.6.2 (#5065 )
2026-03-24 17:21:31 +00:00 · 2026-03-24 17:21:16 +00:00 · 2026-03-24 17:20:44 +00:00 · 2026-03-24 17:20:34 +00:00 · 2026-03-24 17:00:18 +00:00 · 2026-03-24 16:59:46 +00:00
46 changed files with 190 additions and 198 deletions
--- a/.gitea/workflows/renovate.yaml
+++ b/.gitea/workflows/renovate.yaml
@@ -13,7 +13,7 @@ on:
 jobs:
  renovate:
    runs-on: ubuntu-latest
-    container: ghcr.io/renovatebot/renovate:43.84.2@sha256:92285747b3aac062a4f567762c272a12dce037843a20177a02c95b7c420e20cb
+    container: ghcr.io/renovatebot/renovate:43.89.1@sha256:d3d91696934f07fc9549ae9e860a46a0f3c850d5e18cacbb15f5b3e46444b72f
    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
--- a/clusters/cl01tl/helm/argo-workflows/Chart.lock
+++ b/clusters/cl01tl/helm/argo-workflows/Chart.lock
@@ -1,12 +1,12 @@
 dependencies:
 - name: argo-workflows
  repository: https://argoproj.github.io/argo-helm
-  version: 1.0.5
+  version: 1.0.6
 - name: argo-events
  repository: https://argoproj.github.io/argo-helm
  version: 2.4.21
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 7.10.0
-digest: sha256:d0d7ebf1c0013d001aa2f17d04a6d3f3d7a1fa7d5c62792eef856b87c24eb26e
-generated: "2026-03-20T20:48:30.830922259Z"
+digest: sha256:5635bfe609d8a901df257ef3e6cb469396a21bdd4c6f96e7e33f84036019c52b
+generated: "2026-03-24T16:59:01.228848139Z"
--- a/clusters/cl01tl/helm/argo-workflows/Chart.yaml
+++ b/clusters/cl01tl/helm/argo-workflows/Chart.yaml
@@ -18,7 +18,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: argo-workflows
-    version: 1.0.5
+    version: 1.0.6
    repository: https://argoproj.github.io/argo-helm
  - name: argo-events
    version: 2.4.21
--- a/clusters/cl01tl/helm/audiobookshelf/values.yaml
+++ b/clusters/cl01tl/helm/audiobookshelf/values.yaml
@@ -4,6 +4,10 @@ audiobookshelf:
      type: deployment
      replicas: 1
      strategy: Recreate
+      pod:
+        securityContext:
+          fsGroup: 1000
+          fsGroupChangePolicy: OnRootMismatch
      containers:
        main:
          image:
--- a/clusters/cl01tl/helm/blocky/values.yaml
+++ b/clusters/cl01tl/helm/blocky/values.yaml
@@ -108,7 +108,6 @@ blocky:
              authentik                       IN      CNAME   traefik-cl01tl
              backrest                        IN      CNAME   traefik-cl01tl
              bazarr                          IN      CNAME   traefik-cl01tl
-              booklore                        IN      CNAME   traefik-cl01tl
              ceph                            IN      CNAME   traefik-cl01tl
              code-server                     IN      CNAME   traefik-cl01tl
              dawarich                        IN      CNAME   traefik-cl01tl
@@ -121,6 +120,7 @@ blocky:
              gatus                           IN      CNAME   traefik-cl01tl
              gitea                           IN      CNAME   traefik-cl01tl
              grafana                         IN      CNAME   traefik-cl01tl
+              grimmory                        IN      CNAME   traefik-cl01tl
              harbor                          IN      CNAME   traefik-cl01tl
              headlamp                        IN      CNAME   traefik-cl01tl
              home                            IN      CNAME   traefik-cl01tl
--- a/clusters/cl01tl/helm/cilium/Chart.yaml
+++ b/clusters/cl01tl/helm/cilium/Chart.yaml
@@ -19,4 +19,4 @@ dependencies:
    repository: https://helm.cilium.io/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/cilium.png
 # renovate: datasource=github-releases depName=cilium/cilium
-appVersion: 1.19.1
+appVersion: 1.19.2
--- a/clusters/cl01tl/helm/element-web/Chart.lock
+++ b/clusters/cl01tl/helm/element-web/Chart.lock
@@ -1,9 +1,9 @@
 dependencies:
 - name: element-web
  repository: https://ananace.gitlab.io/charts
-  version: 1.4.32
+  version: 1.4.33
 - name: cloudflared
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 2.4.0
-digest: sha256:49d9dd45eff7cbbc11644e4a8bd3c9d3bf84716ed034a76f097f0ba1fea4c934
-generated: "2026-03-11T16:04:17.556777286Z"
+digest: sha256:63b0e582d42fb42bcf4d96ba4b299e42c434c42f284208596808288543192fe0
+generated: "2026-03-24T16:11:50.424321433Z"
--- a/clusters/cl01tl/helm/element-web/Chart.yaml
+++ b/clusters/cl01tl/helm/element-web/Chart.yaml
@@ -17,11 +17,11 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: element-web
-    version: 1.4.32
+    version: 1.4.33
    repository: https://ananace.gitlab.io/charts
  - name: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
    version: 2.4.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/element.png
 # renovate: datasource=github-releases depName=element-hq/element-web
-appVersion: v1.12.12
+appVersion: v1.12.13
--- a/clusters/cl01tl/helm/element-web/values.yaml
+++ b/clusters/cl01tl/helm/element-web/values.yaml
@@ -2,7 +2,7 @@ element-web:
  replicaCount: 1
  image:
    repository: vectorim/element-web
-    tag: v1.12.12
+    tag: v1.12.13
    pullPolicy: IfNotPresent
  defaultServer:
    url: https://matrix.alexlebens.dev
--- a/clusters/cl01tl/helm/gatus/values.yaml
+++ b/clusters/cl01tl/helm/gatus/values.yaml
@@ -164,8 +164,8 @@ gatus:
      - name: foldergram
        url: https://foldergram.alexlebens.net
        <<: *defaults
-      - name: booklore
-        url: https://booklore.alexlebens.net
+      - name: grimmory
+        url: https://grimmory.alexlebens.net
        <<: *defaults
      - name: directus
        url: https://directus.alexlebens.net
--- a/clusters/cl01tl/helm/generic-device-plugin/Chart.lock
+++ b/clusters/cl01tl/helm/generic-device-plugin/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: generic-device-plugin
  repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-  version: 0.20.25
-digest: sha256:04f987ed54b51b4401ab056b4627cfce7d1fe660bb496a459e975f4dcc8ff466
-generated: "2026-03-24T00:12:00.102697457Z"
+  version: 0.20.26
+digest: sha256:47d12b7555d345dea0438d13ac538896994dbd44b142b9a546dbfe5c0939a92b
+generated: "2026-03-24T16:59:26.537547513Z"
--- a/clusters/cl01tl/helm/generic-device-plugin/Chart.yaml
+++ b/clusters/cl01tl/helm/generic-device-plugin/Chart.yaml
@@ -15,6 +15,6 @@ maintainers:
 dependencies:
  - name: generic-device-plugin
    repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-    version: 0.20.25
+    version: 0.20.26
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 appVersion: 1.0.0
--- a/clusters/cl01tl/helm/grimmory/Chart.lock
+++ b/clusters/cl01tl/helm/grimmory/Chart.lock
@@ -8,8 +8,5 @@ dependencies:
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.8.0
- name: volsync-target
-  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.8.0
-digest: sha256:e65fa008c652092da5431e9780eb2a87c944298a12e58e432efad61c9e826da5
-generated: "2026-03-14T23:57:22.721295098Z"
+digest: sha256:6ee403da03c1bcc0289a9abdef0508344072d51173da996eda69b8305d5feefa
+generated: "2026-03-23T20:35:19.743257-05:00"
--- a/clusters/cl01tl/helm/grimmory/Chart.yaml
+++ b/clusters/cl01tl/helm/grimmory/Chart.yaml
@@ -1,23 +1,22 @@
 apiVersion: v2
-name: booklore
+name: grimmory
 version: 1.0.0
-description: booklore
+description: Grimmory
 keywords:
-  - booklore
  - grimmory
  - books
-home: https://wiki.alexlebens.dev/
+home: https://docs.alexlebens.dev/applications/grimmory/
 sources:
-  - https://github.com/booklore-app/BookLore
  - https://github.com/grimmory-tools/grimmory
-  - https://github.com/booklore-app/booklore/pkgs/container/booklore
  - https://github.com/grimmory-tools/grimmory/pkgs/container/grimmory
  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
+  - https://github.com/mariadb-operator/mariadb-operator/tree/main/deploy/charts/mariadb-cluster
+  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/volsync-target
 maintainers:
  - name: alexlebens
 dependencies:
  - name: app-template
-    alias: booklore
+    alias: grimmory
    repository: https://bjw-s-labs.github.io/helm-charts/
    version: 4.6.2
  - name: mariadb-cluster
@@ -27,10 +26,6 @@ dependencies:
    alias: volsync-target-config
    version: 0.8.0
    repository: oci://harbor.alexlebens.net/helm-charts
-  - name: volsync-target
-    alias: volsync-target-data
-    version: 0.8.0
-    repository: oci://harbor.alexlebens.net/helm-charts
-icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/booklore.png
+icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/grimmory.png
 # renovate: datasource=github-releases depName=grimmory-tools/grimmory
 appVersion: v2.3.0
--- a/clusters/cl01tl/helm/grimmory/templates/external-secret.yaml
+++ b/clusters/cl01tl/helm/grimmory/templates/external-secret.yaml
@@ -1,10 +1,10 @@
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
-  name: booklore-database-secret
+  name: grimmory-database-secret
  namespace: {{ .Release.Namespace }}
  labels:
-    app.kubernetes.io/name: booklore-database-secret
+    app.kubernetes.io/name: grimmory-database-secret
    app.kubernetes.io/instance: {{ .Release.Name }}
    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
@@ -14,20 +14,17 @@ spec:
  data:
    - secretKey: password
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/booklore/database
-        metadataPolicy: None
+        key: /cl01tl/grimmory/database
        property: password

 ---
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
-  name: booklore-data-replication-secret
+  name: grimmory-data-replication-secret
  namespace: {{ .Release.Namespace }}
  labels:
-    app.kubernetes.io/name: booklore-data-replication-secret
+    app.kubernetes.io/name: grimmory-data-replication-secret
    app.kubernetes.io/instance: {{ .Release.Name }}
    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
@@ -37,20 +34,17 @@ spec:
  data:
    - secretKey: psk.txt
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/booklore/replication
-        metadataPolicy: None
+        key: /cl01tl/grimmory/replication
        property: psk.txt

 ---
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
-  name: booklore-mariadb-cluster-backup-secret-external
+  name: grimmory-mariadb-cluster-backup-secret-external
  namespace: {{ .Release.Namespace }}
  labels:
-    app.kubernetes.io/name: booklore-mariadb-cluster-backup-secret-external
+    app.kubernetes.io/name: grimmory-mariadb-cluster-backup-secret-external
    app.kubernetes.io/instance: {{ .Release.Name }}
    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
@@ -60,27 +54,21 @@ spec:
  data:
    - secretKey: access
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /digital-ocean/home-infra/mariadb-backups
-        metadataPolicy: None
        property: access
    - secretKey: secret
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /digital-ocean/home-infra/mariadb-backups
-        metadataPolicy: None
        property: secret

 ---
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
-  name: booklore-mariadb-cluster-backup-secret-garage
+  name: grimmory-mariadb-cluster-backup-secret-garage
  namespace: {{ .Release.Namespace }}
  labels:
-    app.kubernetes.io/name: booklore-mariadb-cluster-backup-secret-garage
+    app.kubernetes.io/name: grimmory-mariadb-cluster-backup-secret-garage
    app.kubernetes.io/instance: {{ .Release.Name }}
    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
@@ -90,15 +78,9 @@ spec:
  data:
    - secretKey: access
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /garage/home-infra/mariadb-backups
-        metadataPolicy: None
        property: access
    - secretKey: secret
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /garage/home-infra/mariadb-backups
-        metadataPolicy: None
        property: secret
--- a/clusters/cl01tl/helm/grimmory/templates/namespace.yaml
+++ b/clusters/cl01tl/helm/grimmory/templates/namespace.yaml
@@ -1,11 +1,11 @@
 apiVersion: v1
 kind: Namespace
 metadata:
-  name: booklore
+  name: grimmory
  annotations:
    volsync.backube/privileged-movers: "true"
  labels:
-    app.kubernetes.io/name: booklore
+    app.kubernetes.io/name: grimmory
    app.kubernetes.io/instance: {{ .Release.Name }}
    app.kubernetes.io/part-of: {{ .Release.Name }}
    pod-security.kubernetes.io/audit: privileged
--- a/clusters/cl01tl/helm/grimmory/templates/persistent-volume-claim.yaml
+++ b/clusters/cl01tl/helm/grimmory/templates/persistent-volume-claim.yaml
@@ -1,14 +1,14 @@
 apiVersion: v1
 kind: PersistentVolumeClaim
 metadata:
-  name: booklore-books-nfs-storage
+  name: grimmory-books-nfs-storage
  namespace: {{ .Release.Namespace }}
  labels:
-    app.kubernetes.io/name: booklore-books-nfs-storage
+    app.kubernetes.io/name: grimmory-books-nfs-storage
    app.kubernetes.io/instance: {{ .Release.Name }}
    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
-  volumeName: booklore-books-nfs-storage
+  volumeName: grimmory-books-nfs-storage
  storageClassName: nfs-client
  accessModes:
    - ReadWriteMany
@@ -20,14 +20,14 @@ spec:
 apiVersion: v1
 kind: PersistentVolumeClaim
 metadata:
-  name: booklore-books-import-nfs-storage
+  name: grimmory-books-import-nfs-storage
  namespace: {{ .Release.Namespace }}
  labels:
-    app.kubernetes.io/name: booklore-books-import-nfs-storage
+    app.kubernetes.io/name: grimmory-books-import-nfs-storage
    app.kubernetes.io/instance: {{ .Release.Name }}
    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
-  volumeName: booklore-books-import-nfs-storage
+  volumeName: grimmory-books-import-nfs-storage
  storageClassName: nfs-client
  accessModes:
    - ReadWriteMany
--- a/clusters/cl01tl/helm/grimmory/templates/persistent-volume.yaml
+++ b/clusters/cl01tl/helm/grimmory/templates/persistent-volume.yaml
@@ -1,10 +1,10 @@
 apiVersion: v1
 kind: PersistentVolume
 metadata:
-  name: booklore-books-nfs-storage
+  name: grimmory-books-nfs-storage
  namespace: {{ .Release.Namespace }}
  labels:
-    app.kubernetes.io/name: booklore-books-nfs-storage
+    app.kubernetes.io/name: grimmory-books-nfs-storage
    app.kubernetes.io/instance: {{ .Release.Name }}
    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
@@ -26,10 +26,10 @@ spec:
 apiVersion: v1
 kind: PersistentVolume
 metadata:
-  name: booklore-books-import-nfs-storage
+  name: grimmory-books-import-nfs-storage
  namespace: {{ .Release.Namespace }}
  labels:
-    app.kubernetes.io/name: booklore-books-import-nfs-storage
+    app.kubernetes.io/name: grimmory-books-import-nfs-storage
    app.kubernetes.io/instance: {{ .Release.Name }}
    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
--- a/clusters/cl01tl/helm/grimmory/values.yaml
+++ b/clusters/cl01tl/helm/grimmory/values.yaml
@@ -1,16 +1,18 @@
-booklore:
+grimmory:
  controllers:
    main:
      type: deployment
      replicas: 1
      strategy: Recreate
-      revisionHistoryLimit: 3
+      pod:
+        securityContext:
+          fsGroup: 1000
+          fsGroupChangePolicy: OnRootMismatch
      containers:
        main:
          image:
            repository: ghcr.io/grimmory-tools/grimmory
-            tag: v2.3.0
-            pullPolicy: IfNotPresent
+            tag: v2.3.0@sha256:9014247f591074529894f81115ca40f899db697e89f72c2fe91ec530e3f19597
          env:
            - name: TZ
              value: America/Chicago
@@ -19,22 +21,22 @@ booklore:
            - name: GROUP_ID
              value: 1000
            - name: DATABASE_URL
-              value: jdbc:mariadb://booklore-mariadb-cluster-primary.booklore:3306/booklore
+              value: jdbc:mariadb://grimmory-mariadb-cluster-primary.grimmory:3306/booklore
            - name: DATABASE_USERNAME
-              value: booklore
+              value: grimmory
            - name: DATABASE_PASSWORD
              valueFrom:
                secretKeyRef:
-                  name: booklore-database-secret
+                  name: grimmory-database-secret
                  key: password
-            - name: BOOKLORE_PORT
+            - name: GRIMMORY_PORT
              value: 6060
            - name: SWAGGER_ENABLED
              value: false
          resources:
            requests:
-              cpu: 50m
-              memory: 128Mi
+              cpu: 10m
+              memory: 1Gi
  service:
    main:
      controller: main
@@ -52,41 +54,26 @@ booklore:
          name: traefik-gateway
          namespace: traefik
      hostnames:
-        - booklore.alexlebens.net
+        - grimmory.alexlebens.net
      rules:
        - backendRefs:
-            - group: ''
-              kind: Service
-              name: booklore
+            - name: grimmory
              port: 80
-              weight: 100
          matches:
            - path:
                type: PathPrefix
                value: /
  persistence:
    config:
-      forceRename: booklore-config
+      forceRename: grimmory-config
      storageClass: ceph-block
      accessMode: ReadWriteOnce
      size: 5Gi
-      retain: true
      advancedMounts:
        main:
          main:
            - path: /app/data
              readOnly: false
-    data:
-      forceRename: booklore-data
-      storageClass: ceph-block
-      accessMode: ReadWriteOnce
-      size: 10Gi
-      retain: true
-      advancedMounts:
-        main:
-          main:
-            - path: /data
-              readOnly: false
    books-import:
      type: emptyDir
      advancedMounts:
@@ -94,8 +81,15 @@ booklore:
          main:
            - path: /bookdrop
              readOnly: false
+    data:
+      existingClaim: grimmory-books-nfs-storage
+      advancedMounts:
+        main:
+          main:
+            - path: /data
+              readOnly: false
    ingest:
-      existingClaim: booklore-books-import-nfs-storage
+      existingClaim: grimmory-books-import-nfs-storage
      advancedMounts:
        main:
          main:
@@ -105,7 +99,7 @@ mariadb-cluster:
  mariadb:
    rootPasswordSecretKeyRef:
      generate: false
-      name: booklore-database-secret
+      name: grimmory-database-secret
      key: password
    storage:
      size: 5Gi
@@ -115,14 +109,14 @@ mariadb-cluster:
    bootstrapFrom:
      s3:
        bucket: mariadb-backups-b230a2f5aecf080a4b372c08
-        prefix: cl01tl/booklore
+        prefix: cl01tl/grimmory
        endpoint: nyc3.digitaloceanspaces.com
        region: us-east-1
        accessKeyIdSecretKeyRef:
-          name: booklore-mariadb-cluster-backup-secret-external
+          name: grimmory-mariadb-cluster-backup-secret-external
          key: access
        secretAccessKeySecretKeyRef:
-          name: booklore-mariadb-cluster-backup-secret-external
+          name: grimmory-mariadb-cluster-backup-secret-external
          key: secret
        tls:
          enabled: true
@@ -134,21 +128,22 @@ mariadb-cluster:
      cleanupPolicy: Delete
      requeueInterval: 10h
  users:
-    - name: booklore
+    - name: grimmory
      passwordSecretKeyRef:
-        name: booklore-database-secret
+        name: grimmory-database-secret
        key: password
      host: '%'
+      maxUserConnections: 100
      cleanupPolicy: Delete
      requeueInterval: 10h
      retryInterval: 30s
  grants:
-    - name: booklore
+    - name: grimmory
      privileges:
        - "ALL PRIVILEGES"
      database: "booklore"
      table: "*"
-      username: booklore
+      username: grimmory
      grantOption: true
      host: '%'
      cleanupPolicy: Delete
@@ -166,14 +161,14 @@ mariadb-cluster:
      storage:
        s3:
          bucket: mariadb-backups-b230a2f5aecf080a4b372c08
-          prefix: cl01tl/booklore
+          prefix: cl01tl/grimmory
          endpoint: nyc3.digitaloceanspaces.com
          region: us-east-1
          accessKeyIdSecretKeyRef:
-            name: booklore-mariadb-cluster-backup-secret-external
+            name: grimmory-mariadb-cluster-backup-secret-external
            key: access
          secretAccessKeySecretKeyRef:
-            name: booklore-mariadb-cluster-backup-secret-external
+            name: grimmory-mariadb-cluster-backup-secret-external
            key: secret
          tls:
            enabled: true
@@ -188,14 +183,14 @@ mariadb-cluster:
      storage:
        s3:
          bucket: mariadb-backups
-          prefix: cl01tl/booklore
+          prefix: cl01tl/grimmory
          endpoint: garage-ps10rp.boreal-beaufort.ts.net:3900
          region: us-east-1
          accessKeyIdSecretKeyRef:
-            name: booklore-mariadb-cluster-backup-secret-garage
+            name: grimmory-mariadb-cluster-backup-secret-garage
            key: access
          secretAccessKeySecretKeyRef:
-            name: booklore-mariadb-cluster-backup-secret-garage
+            name: grimmory-mariadb-cluster-backup-secret-garage
            key: secret
          tls:
            enabled: true
@@ -210,17 +205,20 @@ mariadb-cluster:
      storage:
        s3:
          bucket: mariadb-backups
-          prefix: cl01tl/booklore
+          prefix: cl01tl/grimmory
          endpoint: garage-main.garage:3900
          region: us-east-1
          accessKeyIdSecretKeyRef:
-            name: booklore-mariadb-cluster-backup-secret-garage
+            name: grimmory-mariadb-cluster-backup-secret-garage
            key: access
          secretAccessKeySecretKeyRef:
-            name: booklore-mariadb-cluster-backup-secret-garage
+            name: grimmory-mariadb-cluster-backup-secret-garage
            key: secret
 volsync-target-config:
-  pvcTarget: booklore-config
+  pvcTarget: grimmory-config
+  moverSecurityContext:
+    fsGroup: 1000
+    fsGroupChangePolicy: OnRootMismatch
  local:
    enabled: true
    schedule: 12 8 * * *
@@ -230,20 +228,3 @@ volsync-target-config:
  external:
    enabled: true
    schedule: 12 10 * * *
-volsync-target-data:
-  pvcTarget: booklore-data
-  local:
-    enabled: true
-    schedule: 14 8 * * *
-    restic:
-      cacheCapacity: 10Gi
-  remote:
-    enabled: true
-    schedule: 14 9 * * *
-    restic:
-      cacheCapacity: 10Gi
-  external:
-    enabled: true
-    schedule: 14 10 * * *
-    restic:
-      cacheCapacity: 10Gi
--- a/clusters/cl01tl/helm/home-assistant/Chart.yaml
+++ b/clusters/cl01tl/helm/home-assistant/Chart.yaml
@@ -25,4 +25,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/home-assistant.png
 # renovate: datasource=github-releases depName=home-assistant/core
-appVersion: 2026.3.3
+appVersion: 2026.3.4
--- a/clusters/cl01tl/helm/home-assistant/values.yaml
+++ b/clusters/cl01tl/helm/home-assistant/values.yaml
@@ -9,7 +9,7 @@ home-assistant:
        main:
          image:
            repository: ghcr.io/home-assistant/home-assistant
-            tag: 2026.3.3
+            tag: 2026.3.4
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/helm/homepage/values.yaml
+++ b/clusters/cl01tl/helm/homepage/values.yaml
@@ -211,8 +211,8 @@ homepage:
              - Books:
                  icon: sh-booklore.webp
                  description: Grimmory
-                  href: https://booklore.alexlebens.net
-                  siteMonitor: http://booklore.booklore:80
+                  href: https://grimmory.alexlebens.net
+                  siteMonitor: http://grimmory.grimmory:80
                  statusStyle: dot
          - Public:
              - Site:
--- a/clusters/cl01tl/helm/houndarr/values.yaml
+++ b/clusters/cl01tl/helm/houndarr/values.yaml
@@ -9,7 +9,7 @@ houndarr:
        main:
          image:
            repository: ghcr.io/av1155/houndarr
-            tag: v1.6.0
+            tag: v1.6.2
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/helm/immich/Chart.yaml
+++ b/clusters/cl01tl/helm/immich/Chart.yaml
@@ -32,4 +32,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/immich.png
 # renovate: datasource=github-releases depName=immich-app/immich
-appVersion: v2.6.1
+appVersion: v2.6.2
--- a/clusters/cl01tl/helm/immich/values.yaml
+++ b/clusters/cl01tl/helm/immich/values.yaml
@@ -9,7 +9,7 @@ immich:
        main:
          image:
            repository: ghcr.io/immich-app/immich-server
-            tag: v2.6.1
+            tag: v2.6.2
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock
+++ b/clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock
@@ -1,12 +1,12 @@
 dependencies:
 - name: kube-prometheus-stack
  repository: oci://ghcr.io/prometheus-community/charts
-  version: 82.13.0
+  version: 82.13.6
 - name: app-template
  repository: https://bjw-s-labs.github.io/helm-charts/
  version: 4.6.2
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.4.0
-digest: sha256:1d90bebd9c0afd20f8ff780edd15da18b20f89cf35fd85832d6d8d44b2e0544b
-generated: "2026-03-20T18:02:38.368086545Z"
+digest: sha256:6c29e37c4a0b08244b3ab0c60b2e07a2574f382f18183d98017d2d0dbcab7f21
+generated: "2026-03-24T17:20:56.086048387Z"
--- a/clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml
+++ b/clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml
@@ -20,7 +20,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: kube-prometheus-stack
-    version: 82.13.0
+    version: 82.13.6
    repository: oci://ghcr.io/prometheus-community/charts
  - name: app-template
    alias: ntfy-alertmanager
--- a/clusters/cl01tl/helm/matrix-synapse/Chart.lock
+++ b/clusters/cl01tl/helm/matrix-synapse/Chart.lock
@@ -1,7 +1,7 @@
 dependencies:
 - name: matrix-synapse
  repository: https://ananace.gitlab.io/charts
-  version: 3.12.23
+  version: 3.12.24
 - name: app-template
  repository: https://bjw-s-labs.github.io/helm-charts/
  version: 4.6.2
@@ -38,5 +38,5 @@ dependencies:
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.8.0
-digest: sha256:1578e2c48447f217e72bffb3afcb6f1f15c427a4acce5dbca830cdd7045b1348
-generated: "2026-03-15T20:07:12.751000922Z"
+digest: sha256:8fb2d00605ade15db97e778f47ecc1ffae3705ce3408a17e0a21f7def65de884
+generated: "2026-03-24T16:59:56.540825394Z"
--- a/clusters/cl01tl/helm/matrix-synapse/Chart.yaml
+++ b/clusters/cl01tl/helm/matrix-synapse/Chart.yaml
@@ -29,7 +29,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: matrix-synapse
-    version: 3.12.23
+    version: 3.12.24
    repository: https://ananace.gitlab.io/charts
  - name: app-template
    alias: matrix-hookshot
--- a/clusters/cl01tl/helm/medialyze/Chart.yaml
+++ b/clusters/cl01tl/helm/medialyze/Chart.yaml
@@ -19,4 +19,4 @@ dependencies:
    version: 4.6.2
 icon: https://raw.githubusercontent.com/frederikemmer/MediaLyze/d8f69c0628bac7c047b90f91a66341648029c273/frontend/public/favicon.svg
 # renovate: datasource=github-releases depName=frederikemmer/MediaLyze
-appVersion: 0.2.3
+appVersion: 0.2.5
--- a/clusters/cl01tl/helm/medialyze/values.yaml
+++ b/clusters/cl01tl/helm/medialyze/values.yaml
@@ -9,7 +9,7 @@ medialyze:
        main:
          image:
            repository: ghcr.io/frederikemmer/medialyze
-            tag: 0.2.3
+            tag: 0.2.5
            pullPolicy: IfNotPresent
          env:
            - name: HOST_PORT
--- a/clusters/cl01tl/helm/qbittorrent/values.yaml
+++ b/clusters/cl01tl/helm/qbittorrent/values.yaml
@@ -162,7 +162,7 @@ qbittorrent:
        qbit-manage:
          image:
            repository: ghcr.io/stuffanthings/qbit_manage
-            tag: v4.6.5
+            tag: v4.6.6
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/helm/rclone/Chart.yaml
+++ b/clusters/cl01tl/helm/rclone/Chart.yaml
@@ -20,4 +20,4 @@ dependencies:
    version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/rclone.webp
 # renovate: datasource=github-releases depName=rclone/rclone
-appVersion: v1.73.2
+appVersion: v1.73.3
--- a/clusters/cl01tl/helm/rclone/values.yaml
+++ b/clusters/cl01tl/helm/rclone/values.yaml
@@ -16,7 +16,7 @@ rclone:
        sync:
          image:
            repository: rclone/rclone
-            tag: 1.73.2
+            tag: 1.73.3
            pullPolicy: IfNotPresent
          args:
            - sync
@@ -99,7 +99,7 @@ rclone:
        sync:
          image:
            repository: rclone/rclone
-            tag: 1.73.2
+            tag: 1.73.3
            pullPolicy: IfNotPresent
          args:
            - sync
@@ -182,7 +182,7 @@ rclone:
        sync:
          image:
            repository: rclone/rclone
-            tag: 1.73.2
+            tag: 1.73.3
            pullPolicy: IfNotPresent
          args:
            - sync
@@ -254,7 +254,7 @@ rclone:
        prune:
          image:
            repository: rclone/rclone
-            tag: 1.73.2
+            tag: 1.73.3
            pullPolicy: IfNotPresent
          args:
            - delete
@@ -307,7 +307,7 @@ rclone:
        sync:
          image:
            repository: rclone/rclone
-            tag: 1.73.2
+            tag: 1.73.3
            pullPolicy: IfNotPresent
          args:
            - sync
@@ -390,7 +390,7 @@ rclone:
        sync:
          image:
            repository: rclone/rclone
-            tag: 1.73.2
+            tag: 1.73.3
            pullPolicy: IfNotPresent
          args:
            - sync
@@ -466,7 +466,7 @@ rclone:
        prune:
          image:
            repository: rclone/rclone
-            tag: 1.73.2
+            tag: 1.73.3
            pullPolicy: IfNotPresent
          args:
            - delete
--- a/clusters/cl01tl/helm/rybbit/values.yaml
+++ b/clusters/cl01tl/helm/rybbit/values.yaml
@@ -139,7 +139,7 @@ rybbit:
                  key: clickhouse-password
          probes:
            liveness:
-              enabled: true
+              enabled: false
              custom: true
              spec:
                exec:
--- a/clusters/cl01tl/helm/searxng/values.yaml
+++ b/clusters/cl01tl/helm/searxng/values.yaml
@@ -9,7 +9,7 @@ searxng:
        main:
          image:
            repository: searxng/searxng
-            tag: latest@sha256:b6db575bb821d35279474090270db9e53e92432a66d19e7da51c0ef1b5ddb806
+            tag: latest@sha256:5cb5844fcb0f6e739cca03352a9d48e6e936323cb90f717cd07cee872b6d081a
            pullPolicy: IfNotPresent
          env:
            - name: SEARXNG_BASE_URL
@@ -39,7 +39,7 @@ searxng:
        main:
          image:
            repository: searxng/searxng
-            tag: latest@sha256:b6db575bb821d35279474090270db9e53e92432a66d19e7da51c0ef1b5ddb806
+            tag: latest@sha256:5cb5844fcb0f6e739cca03352a9d48e6e936323cb90f717cd07cee872b6d081a
            pullPolicy: IfNotPresent
          env:
            - name: SEARXNG_BASE_URL
--- a/clusters/cl01tl/helm/shelfmark/templates/external-secret.yaml
+++ b/clusters/cl01tl/helm/shelfmark/templates/external-secret.yaml
@@ -12,14 +12,14 @@ spec:
    kind: ClusterSecretStore
    name: vault
  data:
-    - secretKey: booklore-user
+    - secretKey: grimmory-user
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        key: /cl01tl/shelfmark/booklore
        metadataPolicy: None
        property: user
-    - secretKey: booklore-password
+    - secretKey: grimmory-password
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
--- a/clusters/cl01tl/helm/shelfmark/values.yaml
+++ b/clusters/cl01tl/helm/shelfmark/values.yaml
@@ -17,7 +17,7 @@ shelfmark:
            - name: DOCKERMODE
              value: true
            - name: CALIBRE_WEB_URL
-              value: https://booklore.alexlebens.net
+              value: https://grimmory.alexlebens.net
            - name: AUDIOBOOK_LIBRARY_URL
              value: https://audiobookshelf.alexlebens.net
            - name: SEARCH_MODE
@@ -29,17 +29,17 @@ shelfmark:
            - name: BOOKS_OUTPUT_MODE
              value: booklore
            - name: BOOKLORE_HOST
-              value: http://booklore.booklore:80
+              value: http://grimmory.grimmory:80
            - name: BOOKLORE_USERNAME
              valueFrom:
                secretKeyRef:
                  name: shelfmark-config-secret
-                  key: booklore-user
+                  key: grimmory-user
            - name: BOOKLORE_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: shelfmark-config-secret
-                  key: booklore-password
+                  key: grimmory-password
            - name: BOOKLORE_DESTINATION
              value: library
            - name: BOOKLORE_LIBRARY_ID
--- a/clusters/cl01tl/helm/tdarr/values.yaml
+++ b/clusters/cl01tl/helm/tdarr/values.yaml
@@ -48,7 +48,7 @@ tdarr:
        main:
          image:
            repository: ghcr.io/haveagitgat/tdarr_node
-            tag: 2.64.02
+            tag: 2.65.01
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/helm/traefik/Chart.lock
+++ b/clusters/cl01tl/helm/traefik/Chart.lock
@@ -4,6 +4,6 @@ dependencies:
  version: 39.0.6
 - name: traefik-crds
  repository: https://traefik.github.io/charts
-  version: 1.15.0
-digest: sha256:45b11c0cb1083daff76df3c90ecf7d73fc09979239bdc0f272d826fab92a3ba4
-generated: "2026-03-20T20:50:42.131002257Z"
+  version: 1.16.0
+digest: sha256:7311d1720303d2930821ac085e246c09d2935aa5f4b8223040017afe3c5acfc4
+generated: "2026-03-24T14:04:56.829498329Z"
--- a/clusters/cl01tl/helm/traefik/Chart.yaml
+++ b/clusters/cl01tl/helm/traefik/Chart.yaml
@@ -18,7 +18,7 @@ dependencies:
    version: 39.0.6
    repository: https://traefik.github.io/charts
  - name: traefik-crds
-    version: 1.15.0
+    version: 1.16.0
    repository: https://traefik.github.io/charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/webp/traefik.webp
 # renovate: datasource=github-releases depName=traefik/traefik
--- a/clusters/cl01tl/helm/unpoller/Chart.yaml
+++ b/clusters/cl01tl/helm/unpoller/Chart.yaml
@@ -21,4 +21,4 @@ dependencies:
    version: 4.6.2
 icon: https://camo.githubusercontent.com/c5d07a5b3acfeac8e1c25bf56f440ffe032b86e4e7f15de82357f022a43fc927/68747470733a2f2f756e706f6c6c65722e636f6d2f696d672f6c6f676f2e706e67
 # renovate: datasource=github-releases depName=unpoller/unpoller
-appVersion: v2.37.0
+appVersion: v2.38.0
--- a/clusters/cl01tl/helm/unpoller/values.yaml
+++ b/clusters/cl01tl/helm/unpoller/values.yaml
@@ -9,7 +9,7 @@ unpoller:
        main:
          image:
            repository: ghcr.io/unpoller/unpoller
-            tag: v2.37.0
+            tag: v2.38.0
            pullPolicy: IfNotPresent
          env:
            - name: UP_UNIFI_CONTROLLER_0_SAVE_ALARMS
--- a/hosts/ps08rp/blocky/config.yml
+++ b/hosts/ps08rp/blocky/config.yml
@@ -85,7 +85,6 @@ customDNS:
    authentik                       IN      CNAME   traefik-cl01tl
    backrest                        IN      CNAME   traefik-cl01tl
    bazarr                          IN      CNAME   traefik-cl01tl
-    booklore                        IN      CNAME   traefik-cl01tl
    ceph                            IN      CNAME   traefik-cl01tl
    code-server                     IN      CNAME   traefik-cl01tl
    dawarich                        IN      CNAME   traefik-cl01tl
@@ -98,6 +97,7 @@ customDNS:
    gatus                           IN      CNAME   traefik-cl01tl
    gitea                           IN      CNAME   traefik-cl01tl
    grafana                         IN      CNAME   traefik-cl01tl
+    grimmory                        IN      CNAME   traefik-cl01tl
    harbor                          IN      CNAME   traefik-cl01tl
    headlamp                        IN      CNAME   traefik-cl01tl
    home                            IN      CNAME   traefik-cl01tl
--- a/hosts/ps09rp/blocky/config.yml
+++ b/hosts/ps09rp/blocky/config.yml
@@ -106,7 +106,6 @@ customDNS:
    authentik                       IN      CNAME   traefik-cl01tl
    backrest                        IN      CNAME   traefik-cl01tl
    bazarr                          IN      CNAME   traefik-cl01tl
-    booklore                        IN      CNAME   traefik-cl01tl
    ceph                            IN      CNAME   traefik-cl01tl
    code-server                     IN      CNAME   traefik-cl01tl
    dawarich                        IN      CNAME   traefik-cl01tl
@@ -119,6 +118,7 @@ customDNS:
    gatus                           IN      CNAME   traefik-cl01tl
    gitea                           IN      CNAME   traefik-cl01tl
    grafana                         IN      CNAME   traefik-cl01tl
+    grimmory                        IN      CNAME   traefik-cl01tl
    harbor                          IN      CNAME   traefik-cl01tl
    headlamp                        IN      CNAME   traefik-cl01tl
    home                            IN      CNAME   traefik-cl01tl
--- a/renovate.json
+++ b/renovate.json
@@ -168,8 +168,7 @@
        "image",
        "automerge"
      ],
-      "automerge": true,
-      "minimumReleaseAge": "1 days"
+      "automerge": true
    },
    {
      "description": "Automerge digest updates, specific packages",
@@ -187,8 +186,7 @@
        "automerge"
      ],
      "enabled": true,
-      "automerge": true,
-      "minimumReleaseAge": "1 days"
+      "automerge": true
    },
    {
      "description": "Label appVersion and images, merged",
@@ -223,17 +221,52 @@
      "minimumReleaseAge": "1 days"
    },
    {
-      "description": "Group unmatched Dawarich dependencies",
-      "matchPackageNames": [
-        "freikin/dawarich",
-        "freika/dawarich",
-        "ghcr.io/freikin/dawarich",
-        "ghcr.io/freika/dawarich",
-        "docker.io/freikin/dawarich",
-        "docker.io/freika/dawarich"
-      ],
+      "description": "Group Dawarich dependencies",
      "groupName": "dawarich",
-      "groupSlug": "unified-dawarich"
+      "groupSlug": "unified-dawarich",
+      "matchPackageNames": [
+        "/^(ghcr\\.io/|docker\\.io/)?(freika|freikin)/dawarich/"
+      ]
+    },
+    {
+      "description": "Group Komodo dependencies",
+      "groupName": "komodo",
+      "groupSlug": "unified-komodo",
+      "matchPackageNames": [
+        "/^moghtech/komodo/",
+        "/^ghcr\\.io/moghtech/komodo/",
+        "/^docker\\.io/moghtech/komodo/"
+      ]
+    },
+    {
+      "description": "Group Immich dependencies",
+      "groupName": "immich",
+      "groupSlug": "unified-immich",
+      "matchPackageNames": [
+        "/^immich-app/immich/",
+        "/^ghcr\\.io/immich-app/immich/",
+        "/^docker\\.io/immich-app/immich/"
+      ]
+    },
+    {
+      "description": "Group Home Assistant dependencies",
+      "groupName": "home-assistant",
+      "groupSlug": "unified-home-assistant",
+      "matchPackageNames": [
+        "/^home-assistant//",
+        "/^ghcr\\.io/home-assistant//",
+        "/^docker\\.io/home-assistant//"
+      ]
+    },
+    {
+      "description": "Group Element Web updates",
+      "groupName": "element-web",
+      "groupSlug": "unified-element-web",
+      "matchPackageNames": [
+        "/element-web/",
+        "/vectorim/element-web/",
+        "/element-hq/element-web/"
+      ]
    }
  ]
 }
Author	SHA1	Message	Date
Renovate Bot	718f89b1f0	chore(deps): update rclone/rclone to v1.73.3 (#5069 ) All checks were successful lint-test-helm / lint-helm (push) Successful in 22s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 1m46s Details	2026-03-24 17:21:31 +00:00
Renovate Bot	76dd030acc	chore(deps): update kube-prometheus-stack docker tag to v82.13.6 (#5067 ) Some checks failed lint-test-helm / validate-kubeconform (push) Has been cancelled Details lint-test-helm / lint-helm (push) Has been cancelled Details renovate / renovate (push) Has been cancelled Details	2026-03-24 17:21:16 +00:00
Renovate Bot	933c77ab42	chore(deps): update immich to v2.6.2 (#5065 ) Some checks failed lint-test-helm / lint-helm (push) Successful in 20s Details lint-test-helm / validate-kubeconform (push) Has been cancelled Details renovate / renovate (push) Has been cancelled Details	2026-03-24 17:20:44 +00:00
Renovate Bot	a169aa5def	chore(deps): update home-assistant to v2026.3.4 (#5064 ) Some checks failed lint-test-helm / validate-kubeconform (push) Has been cancelled Details lint-test-helm / lint-helm (push) Has been cancelled Details renovate / renovate (push) Has been cancelled Details	2026-03-24 17:20:34 +00:00
Renovate Bot	c80d2c7e2b	chore(deps): update helm release matrix-synapse to v3.12.24 (#5061 ) All checks were successful lint-test-helm / lint-helm (push) Successful in 21s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 1m52s Details	2026-03-24 17:00:18 +00:00
Renovate Bot	c68ee5d6d0	chore(deps): update helm release generic-device-plugin to v0.20.26 (#5059 ) Some checks failed lint-test-helm / lint-helm (push) Successful in 21s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Has been cancelled Details	2026-03-24 16:59:46 +00:00
Renovate Bot	4b297941ac	chore(deps): update helm release argo-workflows to v1.0.6 (#5058 ) Some checks failed lint-test-helm / validate-kubeconform (push) Has been cancelled Details lint-test-helm / lint-helm (push) Has been cancelled Details renovate / renovate (push) Has been cancelled Details	2026-03-24 16:59:23 +00:00
Renovate Bot	288dc661cd	chore(deps): update ghcr.io/stuffanthings/qbit_manage docker tag to v4.6.6 (#5055 ) All checks were successful lint-test-helm / lint-helm (push) Successful in 24s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 2m30s Details	2026-03-24 16:40:35 +00:00
Renovate Bot	c4d4ff1a66	chore(deps): update ghcr.io/av1155/houndarr docker tag to v1.6.2 (#5053 ) Some checks failed lint-test-helm / validate-kubeconform (push) Has been cancelled Details lint-test-helm / lint-helm (push) Has been cancelled Details renovate / renovate (push) Has been cancelled Details	2026-03-24 16:40:16 +00:00
Renovate Bot	e23b5d1aaf	chore(deps): update frederikemmer/medialyze to v0.2.5 (#5050 ) All checks were successful lint-test-helm / lint-helm (push) Successful in 15s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 2m18s Details	2026-03-24 16:12:49 +00:00
Renovate Bot	8e5b4cf952	chore(deps): update element-web (#5048 ) Some checks failed lint-test-helm / validate-kubeconform (push) Has been cancelled Details lint-test-helm / lint-helm (push) Has been cancelled Details renovate / renovate (push) Has been cancelled Details	2026-03-24 16:12:28 +00:00
Renovate Bot	1e959fd12b	chore(deps): update searxng/searxng:latest docker digest to 5cb5844 (#5004 ) All checks were successful lint-test-helm / lint-helm (push) Successful in 24s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 2m30s Details This PR contains the following updates: \| Package \| Update \| Change \| \|---\|---\|---\| \| searxng/searxng \| digest \| `b6db575` → `5cb5844` \| --- ### Configuration 📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied. ♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 Ignore: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My44NC4yIiwidXBkYXRlZEluVmVyIjoiNDMuODQuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiYXV0b21lcmdlIiwiaW1hZ2UiXX0=--> Reviewed-on: #5004 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>	2026-03-24 16:06:28 +00:00
Alex Lebens	1200ba46d6	ci: change to support jsonc All checks were successful renovate / renovate (push) Successful in 2m25s Details	2026-03-24 10:59:33 -05:00
Renovate Bot	0fc683f069	chore(deps): update ghcr.io/renovatebot/renovate docker tag to v43.89.1 (#5046 ) Some checks failed renovate / renovate (push) Failing after 6s Details	2026-03-24 15:58:34 +00:00
Alex Lebens	ee8cc64401	ci: no minimum release Some checks failed renovate / renovate (push) Has been cancelled Details	2026-03-24 10:54:18 -05:00
Renovate Bot	0ec91efbf2	chore(config): migrate Renovate config (#5045 ) All checks were successful renovate / renovate (push) Successful in 1m55s Details The Renovate config in this repository needs migrating. Typically this is because one or more configuration options you are using have been renamed. You don't need to merge this PR right away, because Renovate will continue to migrate these fields internally each time it runs. But later some of these fields may be fully deprecated and the migrations removed. So it's a good idea to merge this migration PR soon. 🔕 Ignore: Close this PR and you won't be reminded about config migration again, but one day your current config may no longer be valid. ❓ Got questions? Does something look wrong to you? Please don't hesitate to [request help here](https://github.com/renovatebot/renovate/discussions). --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). Reviewed-on: #5045 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>	2026-03-24 15:51:32 +00:00
Alex Lebens	f569ab914a	ci: group more All checks were successful renovate / renovate (push) Successful in 2m7s Details	2026-03-24 10:46:54 -05:00
Alex Lebens	7b8d7d66e8	ci: fix group name All checks were successful renovate / renovate (push) Successful in 2m6s Details	2026-03-24 10:38:58 -05:00
Alex Lebens	340cac8698	ci: group apps All checks were successful renovate / renovate (push) Successful in 2m58s Details	2026-03-24 10:34:52 -05:00
Renovate Bot	e0f4b4b629	chore(deps): update unpoller/unpoller to v2.38.0 (#5029 ) All checks were successful lint-test-helm / lint-helm (push) Successful in 16s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 1m55s Details This PR contains the following updates: \| Package \| Update \| Change \| \|---\|---\|---\| \| [ghcr.io/unpoller/unpoller](https://github.com/unpoller/unpoller) \| minor \| `v2.37.0` → `v2.38.0` \| \| [unpoller/unpoller](https://github.com/unpoller/unpoller) \| minor \| `v2.37.0` → `v2.38.0` \| --- ### Release Notes <details> <summary>unpoller/unpoller (ghcr.io/unpoller/unpoller)</summary> ### [`v2.38.0`](https://github.com/unpoller/unpoller/releases/tag/v2.38.0) [Compare Source](https://github.com/unpoller/unpoller/compare/v2.37.0...v2.38.0) ##### Changelog - [`2f1e28c`](`2f1e28c7d3`) chore: apply linter auto-fixes (wsl\_v5, nlreturn, tagalign) ([#984](https://github.com/unpoller/unpoller/issues/984)) - [`18c6e66`](`18c6e66a8e`) feat: add Site Magic site-to-site VPN metrics (closes [#926](https://github.com/unpoller/unpoller/issues/926)) ([#983](https://github.com/unpoller/unpoller/issues/983)) </details> --- ### Configuration 📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied. ♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 Ignore: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My44NC4yIiwidXBkYXRlZEluVmVyIjoiNDMuODQuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=--> Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/5029 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>	2026-03-24 15:27:41 +00:00
Renovate Bot	3d24db859a	chore(deps): update helm release traefik-crds to v1.16.0 (#5036 ) Some checks failed lint-test-helm / lint-helm (push) Successful in 18s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Has been cancelled Details This PR contains the following updates: \| Package \| Update \| Change \| \|---\|---\|---\| \| [traefik-crds](https://traefik.io/) ([source](https://github.com/traefik/traefik-helm-chart)) \| minor \| `1.15.0` → `1.16.0` \| --- ### Configuration 📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied. ♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 Ignore: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My44NC4yIiwidXBkYXRlZEluVmVyIjoiNDMuODQuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiY2hhcnQiXX0=--> Reviewed-on: #5036 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>	2026-03-24 15:26:11 +00:00
Alex Lebens	2280df1e16	feat: disable liveness (#5042 ) Some checks failed lint-test-helm / validate-kubeconform (push) Has been cancelled Details lint-test-helm / lint-helm (push) Has been cancelled Details renovate / renovate (push) Has been cancelled Details Reviewed-on: #5042	2026-03-24 15:25:53 +00:00
Renovate Bot	2d75a2f197	chore(deps): update dependency cilium/cilium to v1.19.2 (#5037 ) All checks were successful lint-test-helm / lint-helm (push) Successful in 22s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 3m32s Details render-manifests / render-manifests (push) Successful in 5m15s Details	2026-03-24 14:02:30 +00:00
Alex Lebens	36ac6266ca	tmp/booklore (#5034 ) All checks were successful lint-test-docker / lint-docker-compose (push) Successful in 23s Details lint-test-helm / lint-helm (push) Successful in 26s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 2m0s Details Reviewed-on: #5034	2026-03-24 03:44:24 +00:00
Alex Lebens	e20bc4b2cf	tmp/grimmory-5 (#5032 ) All checks were successful lint-test-helm / lint-helm (push) Successful in 24s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 2m14s Details Reviewed-on: #5032	2026-03-24 03:28:49 +00:00
Alex Lebens	5706150396	feat: change to boot from grimmory (#5030 ) All checks were successful lint-test-helm / lint-helm (push) Successful in 14s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 1m9s Details Reviewed-on: #5030	2026-03-24 02:54:59 +00:00
Alex Lebens	d4d75563ed	feat: change user All checks were successful lint-test-helm / lint-helm (push) Successful in 13s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 1m59s Details	2026-03-23 21:49:41 -05:00
Alex Lebens	5643260b63	feat: scale (#5027 ) All checks were successful lint-test-helm / lint-helm (push) Successful in 13s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 2m18s Details Reviewed-on: #5027	2026-03-24 02:44:26 +00:00
Alex Lebens	2c354902d7	tmp/grimmory-2 (#5025 ) All checks were successful lint-test-helm / lint-helm (push) Successful in 23s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 1m44s Details Reviewed-on: #5025	2026-03-24 02:25:28 +00:00
Alex Lebens	3f9743ee3f	fix: add mover contect (#5023 ) All checks were successful lint-test-helm / lint-helm (push) Successful in 24s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 2m27s Details Reviewed-on: #5023	2026-03-24 02:10:14 +00:00
Alex Lebens	1b61891d18	Add Grimmory as separate from Booklore (#5020 ) All checks were successful lint-test-helm / lint-helm (push) Successful in 53s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details lint-test-docker / lint-docker-compose (push) Successful in 1m17s Details renovate / renovate (push) Successful in 1m15s Details Reviewed-on: #5020	2026-03-24 01:50:24 +00:00
Renovate Bot	0f844bb80c	chore(deps): update ghcr.io/haveagitgat/tdarr_node docker tag to v2.65.01 (#5003 ) All checks were successful lint-test-helm / lint-helm (push) Successful in 29s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 1m44s Details This PR contains the following updates: \| Package \| Update \| Change \| \|---\|---\|---\| \| [ghcr.io/haveagitgat/tdarr_node](https://github.com/HaveAGitGat/tdarr_express_be) \| minor \| `2.64.02` → `2.65.01` \| --- ### Configuration 📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied. ♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 Ignore: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My44NC4yIiwidXBkYXRlZEluVmVyIjoiNDMuODQuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=--> Reviewed-on: #5003 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>	2026-03-24 01:48:01 +00:00