Update ghcr.io/booklore-app/booklore Docker tag to v1.16.0

clusters/cl01tl/helm/booklore/values.yaml

@@ -9,7 +9,7 @@ booklore:
         main:
           image:
             repository: ghcr.io/booklore-app/booklore
-            tag: v1.16.1
+            tag: v1.16.0
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/gitea/values.yaml

@@ -1,7 +1,7 @@
 gitea:
   global:
     imageRegistry: registry.hub.docker.com
-  replicaCount: 1
+  replicaCount: 2
   image:
     repository: gitea/gitea
     tag: 1.25.3

clusters/cl01tl/helm/grafana-operator/values.yaml

@@ -17,11 +17,11 @@ postgres-18-cluster:
   recovery:
     method: objectStore
     objectStore:
-      index: 2
+      index: 1
   backup:
     objectStore:
       - name: garage-local
-        index: 2
+        index: 1
         destinationBucket: postgres-backups
         externalSecretCredentialPath: /garage/home-infra/postgres-backups
         isWALArchiver: true

clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: kube-prometheus-stack
   repository: oci://ghcr.io/prometheus-community/charts
-  version: 80.8.0
+  version: 80.6.0
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
   version: 4.5.0
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.5.0
-digest: sha256:8e4076f0ba94134eb91dc12364fde4f50bffc6dc3c4cc32a5ea6b9ede777a3b6
-generated: "2025-12-28T21:56:15.664575212Z"
+digest: sha256:6f046a936f1d732a44113eb0b7e54330a4261042179f37f4c94fccc9f20ee511
+generated: "2025-12-20T01:04:57.413744271Z"

clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml

@@ -20,7 +20,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: kube-prometheus-stack
-    version: 80.8.0
+    version: 80.6.0
     repository: oci://ghcr.io/prometheus-community/charts
   - name: app-template
     alias: ntfy-alertmanager

clusters/cl01tl/helm/libation/values.yaml

@@ -60,17 +60,6 @@ libation:
           main:
             - path: /config
               readOnly: false
-    audiobooks:
-      existingClaim: libation-nfs-storage
-      advancedMounts:
-        main:
-          main:
-            - path: /data
-              readOnly: false
-        debug:
-          main:
-            - path: /data
-              readOnly: false
 volsync-target-config:
   pvcTarget: libation
   local:

clusters/cl01tl/helm/searxng/values.yaml

@@ -9,7 +9,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:6f3a875c64bd804d1ccf2fe3c8df35e985b75ffbf0322f216544e79912fabab2
+            tag: latest@sha256:8d98d5c1b678714c3b20dacfab5ea5e3b67f79e50df6d5dbc92ed4f0a964ccbd
             pullPolicy: IfNotPresent
           env:
             - name: SEARXNG_BASE_URL
@@ -39,7 +39,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:6f3a875c64bd804d1ccf2fe3c8df35e985b75ffbf0322f216544e79912fabab2
+            tag: latest@sha256:8d98d5c1b678714c3b20dacfab5ea5e3b67f79e50df6d5dbc92ed4f0a964ccbd
             pullPolicy: IfNotPresent
           env:
             - name: SEARXNG_BASE_URL

clusters/cl01tl/helm/vaultwarden/templates/external-secret.yaml

@@ -1,28 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: vaultwarden-oidc-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: vaultwarden-oidc-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: client
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /authentik/oidc/vaultwarden
-        metadataPolicy: None
-        property: client
-    - secretKey: secret
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /authentik/oidc/vaultwarden
-        metadataPolicy: None
-        property: secret

clusters/cl01tl/helm/vaultwarden/values.yaml

@@ -9,7 +9,7 @@ vaultwarden:
         main:
           image:
             repository: vaultwarden/server
-            tag: 1.35.0
+            tag: 1.34.3
             pullPolicy: IfNotPresent
           env:
             - name: DOMAIN
@@ -23,24 +23,6 @@ vaultwarden:
                 secretKeyRef:
                   name: vaultwarden-postgresql-18-cluster-app
                   key: uri
-            - name: SSO_ENABLED
-              value: true
-            - name: SSO_SIGNUPS_MATCH_EMAIL
-              value: true
-            - name: SSO_AUTHORITY
-              value: https://auth.alexlebens.dev/application/o/vaultwarden/
-            - name: SSO_SCOPES
-              value: "email profile offline_access"
-            - name: SSO_CLIENT_ID
-              valueFrom:
-                secretKeyRef:
-                  name: vaultwarden-oidc-secret
-                  key: client
-            - name: SSO_CLIENT_SECRET
-              valueFrom:
-                secretKeyRef:
-                  name: vaultwarden-oidc-secret
-                  key: secret
           resources:
             requests:
               cpu: 10m

clusters/cl01tl/helm/ytdl-sub/Chart.yaml

@@ -1,22 +0,0 @@
-apiVersion: v2
-name: ytdl-sub
-version: 1.0.0
-description: ytdl-sub
-keywords:
-  - ytdl-sub
-  - music
-  - youtube
-home: https://wiki.alexlebens.dev/s/
-sources:
-  - https://github.com/jmbannon/ytdl-sub
-  - https://github.com/jmbannon/ytdl-sub/pkgs/container/ytdl-sub
-  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: app-template
-    alias: ytdl-sub
-    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.5.0
-# renovate: github=jmbannon/ytdl-sub
-appVersion: 2025.12.26

clusters/cl01tl/helm/ytdl-sub/templates/persistent-volume-claim.yaml

@@ -1,17 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: ytdl-sub-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: ytdl-sub-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  volumeName: ytdl-sub-nfs-storage
-  storageClassName: nfs-client
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 1Gi

clusters/cl01tl/helm/ytdl-sub/templates/persistent-volume.yaml

@@ -1,23 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: ytdl-sub-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: ytdl-sub-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: nfs-client
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  nfs:
-    path: /volume2/Storage/Music Youtube/
-    server: synologybond.alexlebens.net
-  mountOptions:
-    - vers=4
-    - minorversion=1
-    - noac

clusters/cl01tl/helm/ytdl-sub/values.yaml

@@ -1,101 +0,0 @@
-ytdl-sub:
-  controllers:
-    main:
-      type: cronjob
-      cronjob:
-        suspend: false
-        concurrencyPolicy: Forbid
-        timeZone: US/Central
-        schedule: 0 0 1 1 *
-        startingDeadlineSeconds: 90
-        successfulJobsHistory: 1
-        failedJobsHistory: 1
-        backoffLimit: 3
-        parallelism: 1
-      containers:
-        main:
-          image:
-            repository: ghcr.io/jmbannon/ytdl-sub
-            tag: 2025.12.26
-            pullPolicy: IfNotPresent
-          command:
-            - ytdl-sub
-            - --dry-run
-            - -c
-            - /config/config.yaml
-            - sub
-            - /config/subscriptions.yaml
-          env:
-            - name: TZ
-              value: America/Chicago
-            - name: CRON_RUN_ON_START
-              value: false
-          resources:
-            requests:
-              cpu: 10m
-              memory: 128Mi
-  configMaps:
-    config:
-      enabled: true
-      data:
-        config.yaml: |
-          configuration:
-            working_directory: /cache
-
-          presets:
-            Custom MP3:
-              preset:
-                - "Max MP3 Quality"
-
-              embed_thumbnail: True
-
-              square_thumbnail: True
-
-              throttle_protection:
-                sleep_per_download_s:
-                  min: 5
-                  max: 15
-                sleep_per_subscription_s:
-                  min: 5
-                  max: 15
-                max_downloads_per_subscription:
-                  min: 1
-                  max: 200
-
-              overrides:
-                music_directory: "/music"
-
-        subscriptions.yaml: |
-          YT Music | Custom MP3:
-            - "https://www.youtube.com/playlist?list=PLtiOoYqxYXtKK3fMya_xhqK0Wit0i10Gy&si=8wNBH-kGT9Nx0XBK"  # Music Saved
-
-  persistence:
-    config:
-      enabled: true
-      type: configMap
-      name: ytdl-sub
-      advancedMounts:
-        main:
-          main:
-            - path: /config/config.yaml
-              readOnly: true
-              mountPropagation: None
-              subPath: config.yaml
-            - path: /config/subscriptions.yaml
-              readOnly: true
-              mountPropagation: None
-              subPath: subscriptions.yaml
-    cache:
-      type: emptyDir
-      advancedMounts:
-        main:
-          main:
-            - path: /cache
-              readOnly: false
-    music:
-      existingClaim: ytdl-sub-nfs-storage
-      advancedMounts:
-        main:
-          main:
-            - path: /music
-              readOnly: false

renovate.json

@@ -18,7 +18,8 @@
       "addLabels": [
         "chart"
       ],
-      "automerge": false
+      "automerge": false,
+      "minimumReleaseAge": "1 days"
     },
     {
       "description": "Automerge chart patches",
@@ -58,7 +59,8 @@
       "addLabels": [
         "image"
       ],
-      "automerge": false
+      "automerge": false,
+      "minimumReleaseAge": "1 days"
     },
     {
       "description": "Automerge image patches",