alexlebens/infrastructure
1
0
Fork 0
Code Issues 1 Pull Requests 4 Actions Activity

Compare commits

base: alexlebens:2632801eae89d0aad3980a58e72d2dee9d327fad
Branches Tags
alexlebens:main alexlebens:renovate/unified-haveagitgattdarr_node alexlebens:renovate/unified-haveagitgattdarr alexlebens:renovate/cilium-1.x alexlebens:renovate/unified-dock.mau.devmautrixwhatsapp alexlebens:manifests
..
compare: alexlebens:main
Branches Tags
alexlebens:renovate/unified-haveagitgattdarr_node alexlebens:renovate/unified-haveagitgattdarr alexlebens:renovate/cilium-1.x alexlebens:renovate/unified-dock.mau.devmautrixwhatsapp alexlebens:main alexlebens:manifests

15 Commits
2632801eae ... main

Author SHA1 Message Date
Renovate Bot
8dae800fe5 chore(deps): update helm release argo-cd to v9.4.12 (#4836)
All checks were successful
renovate / renovate (push) Successful in 4m1s
Details
2026-03-18 11:04:23 +00:00
Renovate Bot
c3729cec9f chore(deps): update helm release argo-cd to v9.4.12 (#4836)
Some checks failed
renovate / renovate (push) Has been cancelled
Details
lint-test-helm / lint-helm (push) Successful in 48s
Details
lint-test-helm / validate-kubeconform (push) Has been skipped
Details
2026-03-18 11:04:16 +00:00
Renovate Bot
29730a299f chore(deps): update helm release grafana-operator to v5.22.2 (#4834)
All checks were successful
renovate / renovate (push) Successful in 3m46s
Details
2026-03-18 10:05:08 +00:00
Renovate Bot
2c5a1eec32 chore(deps): update helm release grafana-operator to v5.22.2 (#4834)
All checks were successful
lint-test-helm / lint-helm (push) Successful in 2m13s
Details
lint-test-helm / validate-kubeconform (push) Has been skipped
Details
renovate / renovate (push) Successful in 3m55s
Details
2026-03-18 10:04:53 +00:00
Renovate Bot
21a2c6c96a chore(deps): update dependency grafana/grafana-operator to v5.22.2 (#4833)
Some checks failed
lint-test-helm / validate-kubeconform (push) Has been cancelled
Details
lint-test-helm / lint-helm (push) Has started running
Details
renovate / renovate (push) Has been cancelled
Details
2026-03-18 10:03:59 +00:00
Renovate Bot
0c2f495fac chore(deps): update ubuntu docker tag to resolute-20260312 (#4831)
All checks were successful
lint-test-helm / lint-helm (push) Successful in 1m14s
Details
lint-test-helm / validate-kubeconform (push) Has been skipped
Details
renovate / renovate (push) Successful in 4m24s
Details
2026-03-18 08:03:58 +00:00
Alex Lebens
aed71f8086 tmp/trivy (#4829)
All checks were successful
lint-test-helm / lint-helm (push) Successful in 38s
Details
lint-test-helm / validate-kubeconform (push) Has been skipped
Details
renovate / renovate (push) Successful in 3m32s
Details 
Reviewed-on: #4829
 2026-03-18 03:45:47 +00:00
Alex Lebens
c27d7bdf9b feat: disable sbom and infra scanner (#4827)
All checks were successful
lint-test-helm / lint-helm (push) Successful in 37s
Details
lint-test-helm / validate-kubeconform (push) Has been skipped
Details
renovate / renovate (push) Successful in 2m19s
Details 
Reviewed-on: #4827
 2026-03-18 03:27:09 +00:00
Renovate Bot
6f97007dfb chore(deps): update d3fk/s3cmd:latest docker digest to e3965f8 (#4825)
All checks were successful
lint-test-helm / lint-helm (push) Successful in 1m57s
Details
lint-test-helm / validate-kubeconform (push) Has been skipped
Details
renovate / renovate (push) Successful in 2m56s
Details
2026-03-18 03:04:52 +00:00
Alex Lebens
520e6f9763 Merge (#4823)
Some checks failed
lint-test-helm / lint-helm (push) Successful in 42s
Details
lint-test-helm / validate-kubeconform (push) Has been skipped
Details
renovate / renovate (push) Has been cancelled
Details 
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Reviewed-on: #4823
 2026-03-18 03:02:04 +00:00
Renovate Bot
e255e2b8ad chore(deps): update ollama/ollama docker tag to v0.18.1 (#4821)
All checks were successful
lint-test-helm / lint-helm (push) Successful in 1m24s
Details
lint-test-helm / validate-kubeconform (push) Has been skipped
Details
renovate / renovate (push) Successful in 3m48s
Details
2026-03-18 02:02:48 +00:00
Renovate Bot
a003ae1f45 chore(deps): update dependency ollama/ollama to v0.18.1 (#4819)
All checks were successful
lint-test-helm / lint-helm (push) Successful in 1m47s
Details
lint-test-helm / validate-kubeconform (push) Has been skipped
Details
renovate / renovate (push) Successful in 2m10s
Details
2026-03-18 01:05:28 +00:00
Renovate Bot
0d3a85fc10 chore(deps): update dependency binwiederhier/ntfy to v2.19.2 (#4818)
Some checks failed
lint-test-helm / validate-kubeconform (push) Has been cancelled
Details
lint-test-helm / lint-helm (push) Has started running
Details
renovate / renovate (push) Has been cancelled
Details
2026-03-18 01:05:03 +00:00
Alex Lebens
0bed6ebbe0 Add medialyze (#4816)
All checks were successful
lint-test-helm / lint-helm (push) Successful in 40s
Details
lint-test-helm / validate-kubeconform (push) Has been skipped
Details
lint-test-docker / lint-docker-compose (push) Successful in 1m18s
Details
renovate / renovate (push) Successful in 5m7s
Details 
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Reviewed-on: #4816
 2026-03-17 22:57:09 +00:00
Renovate Bot
77c29e7db5 chore(deps): update harbor.alexlebens.net/images/site-profile docker tag to v3.14.0 (#4814)
All checks were successful
lint-test-helm / lint-helm (push) Successful in 22s
Details
lint-test-helm / validate-kubeconform (push) Has been skipped
Details
renovate / renovate (push) Successful in 2m7s
Details 
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [harbor.alexlebens.net/images/site-profile](https://gitea.alexlebens.dev/alexlebens/site-profile) | minor | `3.13.0` → `3.14.0` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/2) for more information.

---

### Release Notes

<details>
<summary>alexlebens/site-profile (harbor.alexlebens.net/images/site-profile)</summary>

### [`v3.14.0`](https://gitea.alexlebens.dev/alexlebens/site-profile/releases/tag/3.14.0)

[Compare Source](https://gitea.alexlebens.dev/alexlebens/site-profile/compare/3.13.0...3.14.0)

##### Features

- release for content ([abdb30b](abdb30b0e3))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41OS4yIiwidXBkYXRlZEluVmVyIjoiNDMuNTkuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=-->

Reviewed-on: #4814
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
 2026-03-17 21:20:56 +00:00
23 changed files with 196 additions and 27 deletions
Expand all files Collapse all files

6
clusters/cl01tl/helm/argocd/Chart.lock
View File

@@ -1,6 +1,6 @@
dependencies:
- name: argo-cd
repository: https://argoproj.github.io/argo-helm
version: 9.4.11
digest: sha256:7726a0806d7ab4e0c2f5942aceee4ce363decf63d54a545a91b537559e5a9f0f
generated: "2026-03-17T13:05:43.394982076Z"
version: 9.4.12
digest: sha256:2bea48f3d44a453b8cdc83c7a18f9e417116d300dfad9672bab4ac97cefa891d
generated: "2026-03-18T11:03:53.835514883Z"

2
clusters/cl01tl/helm/argocd/Chart.yaml
View File

@@ -15,7 +15,7 @@ maintainers:
- name: alexlebens
dependencies:
- name: argo-cd
version: 9.4.11
version: 9.4.12
repository: https://argoproj.github.io/argo-helm
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
# renovate: datasource=github-releases depName=argoproj/argo-cd

1
clusters/cl01tl/helm/blocky/values.yaml
View File

@@ -135,6 +135,7 @@ blocky:
komodo IN CNAME traefik-cl01tl
lidarr IN CNAME traefik-cl01tl
mail IN CNAME traefik-cl01tl
medialyze IN CNAME traefik-cl01tl
movie-roulette IN CNAME traefik-cl01tl
music-grabber IN CNAME traefik-cl01tl
navidrome IN CNAME traefik-cl01tl

2
clusters/cl01tl/helm/garage/values.yaml
View File

@@ -34,7 +34,7 @@ garage:
debug:
image:
repository: ubuntu
tag: resolute-20260108
tag: resolute-20260312
pullPolicy: IfNotPresent
command:
- "sleep"

3
clusters/cl01tl/helm/gatus/values.yaml
View File

@@ -227,6 +227,9 @@ gatus:
- name: jellystat
url: https://jellystat.alexlebens.net
<<: *defaults
- name: medialyze
url: https://medialyze.alexlebens.net
<<: *defaults
- name: authentik
url: https://authentik.alexlebens.net
<<: *defaults

6
clusters/cl01tl/helm/grafana-operator/Chart.lock
View File

@@ -1,7 +1,7 @@
dependencies:
- name: grafana-operator
repository: https://grafana.github.io/helm-charts
version: 5.22.1
version: 5.22.2
- name: postgres-cluster
repository: oci://harbor.alexlebens.net/helm-charts
version: 7.10.0
@@ -11,5 +11,5 @@ dependencies:
- name: valkey
repository: oci://harbor.alexlebens.net/helm-charts
version: 0.4.0
digest: sha256:9cbba52d093e40b20917af87263e1fb0e478912440f660543f3527e70452edc7
generated: "2026-03-15T20:05:59.855514102Z"
digest: sha256:a3bf183bcecb4d4b5354fe91a549075997dccb41c193da9daec9ccbe4d659fe2
generated: "2026-03-18T10:04:15.165729555Z"

4
clusters/cl01tl/helm/grafana-operator/Chart.yaml
View File

@@ -17,7 +17,7 @@ maintainers:
- name: alexlebens
dependencies:
- name: grafana-operator
version: 5.22.1
version: 5.22.2
repository: https://grafana.github.io/helm-charts
- name: postgres-cluster
alias: postgres-18-cluster
@@ -33,4 +33,4 @@ dependencies:
repository: oci://harbor.alexlebens.net/helm-charts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/grafana.png
# renovate: datasource=github-releases depName=grafana/grafana-operator
appVersion: v5.22.1
appVersion: v5.22.2

6
clusters/cl01tl/helm/homepage/values.yaml
View File

@@ -477,6 +477,12 @@ homepage:
href: https://jellystat.alexlebens.net
siteMonitor: http://jellystat.jellystat:80
statusStyle: dot
- MediaLyze:
icon: https://raw.githubusercontent.com/frederikemmer/MediaLyze/d8f69c0628bac7c047b90f91a66341648029c273/frontend/public/favicon.svg
description: Jellyfin Media Monitoring
href: https://medialyze.alexlebens.net
siteMonitor: http://medialyze.medialyze:80
statusStyle: dot
- Services:
- Auth (Public):
icon: sh-authentik.webp

2
clusters/cl01tl/helm/libation/values.yaml
View File

@@ -35,7 +35,7 @@ libation:
main:
image:
repository: ubuntu
tag: resolute-20260108
tag: resolute-20260312
pullPolicy: IfNotPresent
command:
- "sleep"

6
clusters/cl01tl/helm/medialyze/Chart.lock Normal file
View File

@@ -0,0 +1,6 @@
dependencies:
- name: app-template
repository: https://bjw-s-labs.github.io/helm-charts/
version: 4.6.2
digest: sha256:17ac9bc0cc2eac395c630c22ab095e3e34e5d75a34523c3f39629ca1c56ecbc8
generated: "2026-03-17T17:46:15.885193-05:00"

22
clusters/cl01tl/helm/medialyze/Chart.yaml Normal file
View File

@@ -0,0 +1,22 @@
apiVersion: v2
name: medialyze
version: 1.0.0
description: MediaLyze
keywords:
- medialyze
- jellyfin
home: https://wiki.alexlebens.dev/
sources:
- https://github.com/frederikemmer/MediaLyze
- https://github.com/frederikemmer/MediaLyze/pkgs/container/medialyze
- https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
maintainers:
- name: alexlebens
dependencies:
- name: app-template
alias: medialyze
repository: https://bjw-s-labs.github.io/helm-charts/
version: 4.6.2
icon: https://raw.githubusercontent.com/frederikemmer/MediaLyze/d8f69c0628bac7c047b90f91a66341648029c273/frontend/public/favicon.svg
# renovate: datasource=github-releases depName=frederikemmer/MediaLyze
appVersion: 0.2.1

17
clusters/cl01tl/helm/medialyze/templates/persistent-volume-claim.yaml Normal file
View File

@@ -0,0 +1,17 @@
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: medialyze-nfs-storage
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: medialyze-nfs-storage
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec:
volumeName: medialyze-nfs-storage
storageClassName: nfs-client
accessModes:
- ReadWriteMany
resources:
requests:
storage: 1Gi

23
clusters/cl01tl/helm/medialyze/templates/persistent-volume.yaml Normal file
View File

@@ -0,0 +1,23 @@
apiVersion: v1
kind: PersistentVolume
metadata:
name: medialyze-nfs-storage
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: medialyze-nfs-storage
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec:
persistentVolumeReclaimPolicy: Retain
storageClassName: nfs-client
capacity:
storage: 1Gi
accessModes:
- ReadWriteMany
nfs:
path: /volume2/Storage
server: synologybond.alexlebens.net
mountOptions:
- vers=4
- minorversion=1
- noac

85
clusters/cl01tl/helm/medialyze/values.yaml Normal file
View File

@@ -0,0 +1,85 @@
medialyze:
controllers:
main:
type: deployment
replicas: 1
strategy: Recreate
revisionHistoryLimit: 3
containers:
main:
image:
repository: ghcr.io/frederikemmer/medialyze
tag: 0.2.1
pullPolicy: IfNotPresent
env:
- name: HOST_PORT
value: 8080
- name: SCAN_RUNTIME_WORKER_COUNT
value: 2
- name: TZ
value: America/Chicago
- name: MEDIA_HOST_DIR
value: /media
resources:
requests:
cpu: 10m
memory: 128Mi
service:
main:
controller: main
ports:
http:
port: 80
targetPort: 8080
protocol: HTTP
route:
main:
kind: HTTPRoute
parentRefs:
- group: gateway.networking.k8s.io
kind: Gateway
name: traefik-gateway
namespace: traefik
hostnames:
- medialyze.alexlebens.net
rules:
- backendRefs:
- group: ''
kind: Service
name: medialyze
port: 80
weight: 100
matches:
- path:
type: PathPrefix
value: /
persistence:
data:
forceRename: medialyze-data
storageClass: ceph-block
accessMode: ReadWriteOnce
size: 1Gi
retain: true
advancedMounts:
main:
main:
- path: /config
readOnly: false
media:
existingClaim: medialyze-nfs-storage
advancedMounts:
main:
main:
- path: /media
readOnly: true
volsync-target-data:
pvcTarget: medialyze-data
local:
enabled: true
schedule: 36 11 * * *
remote:
enabled: true
schedule: 36 12 * * *
external:
enabled: true
schedule: 36 14 * * *

2
clusters/cl01tl/helm/ntfy/Chart.yaml
View File

@@ -20,4 +20,4 @@ dependencies:
version: 4.6.2
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ntfy.png
# renovate: datasource=github-releases depName=binwiederhier/ntfy
appVersion: 2.19.1
appVersion: 2.19.2

2
clusters/cl01tl/helm/ntfy/values.yaml
View File

@@ -9,7 +9,7 @@ ntfy:
main:
image:
repository: binwiederhier/ntfy
tag: v2.19.1
tag: v2.19.2
pullPolicy: IfNotPresent
args: ["serve"]
env:

2
clusters/cl01tl/helm/ollama/Chart.yaml
View File

@@ -31,4 +31,4 @@ dependencies:
repository: oci://harbor.alexlebens.net/helm-charts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ollama.png
# renovate: datasource=github-releases depName=ollama/ollama
appVersion: 0.18.0
appVersion: 0.18.1

6
clusters/cl01tl/helm/ollama/values.yaml
View File

@@ -22,7 +22,7 @@ ollama:
main:
image:
repository: ollama/ollama
tag: 0.18.0
tag: 0.18.1
pullPolicy: IfNotPresent
env:
- name: OLLAMA_KEEP_ALIVE
@@ -58,7 +58,7 @@ ollama:
main:
image:
repository: ollama/ollama
tag: 0.18.0
tag: 0.18.1
pullPolicy: IfNotPresent
env:
- name: OLLAMA_KEEP_ALIVE
@@ -94,7 +94,7 @@ ollama:
main:
image:
repository: ollama/ollama
tag: 0.18.0
tag: 0.18.1
pullPolicy: IfNotPresent
env:
- name: OLLAMA_KEEP_ALIVE

6
clusters/cl01tl/helm/talos/values.yaml
View File

@@ -69,7 +69,7 @@ etcd-backup:
s3-prune:
image:
repository: d3fk/s3cmd
tag: latest@sha256:a41234c2b43d6cfa0d51c9523a2d7925f7f21297a41d69932946c3e364d32b5e
tag: latest@sha256:e3965f8205dfb96fb00e66cee54a0d171f1829a3cc6a1bbb980ab076730e54be
pullPolicy: IfNotPresent
command:
- /bin/sh
@@ -155,7 +155,7 @@ etcd-backup:
s3-prune:
image:
repository: d3fk/s3cmd
tag: latest@sha256:a41234c2b43d6cfa0d51c9523a2d7925f7f21297a41d69932946c3e364d32b5e
tag: latest@sha256:e3965f8205dfb96fb00e66cee54a0d171f1829a3cc6a1bbb980ab076730e54be
pullPolicy: IfNotPresent
command:
- /bin/sh
@@ -241,7 +241,7 @@ etcd-backup:
s3-prune:
image:
repository: d3fk/s3cmd
tag: latest@sha256:a41234c2b43d6cfa0d51c9523a2d7925f7f21297a41d69932946c3e364d32b5e
tag: latest@sha256:e3965f8205dfb96fb00e66cee54a0d171f1829a3cc6a1bbb980ab076730e54be
pullPolicy: IfNotPresent
command:
- /bin/sh

12
clusters/cl01tl/helm/trivy/values.yaml
View File

@@ -2,13 +2,13 @@ trivy-operator:
targetWorkloads: "pod,replicaset,replicationcontroller,statefulset,daemonset,cronjob,job"
operator:
replicas: 1
scanJobsConcurrentLimit: 3
scanJobsConcurrentLimit: 1
vulnerabilityScannerEnabled: true
sbomGenerationEnabled: true
clusterSbomCacheEnabled: true
sbomGenerationEnabled: false
clusterSbomCacheEnabled: false
configAuditScannerEnabled: true
rbacAssessmentScannerEnabled: true
infraAssessmentScannerEnabled: true
infraAssessmentScannerEnabled: false
clusterComplianceEnabled: false
vulnerabilityScannerScanOnlyCurrentRevisions: true
accessGlobalSecretsAndServiceAccount: true
@@ -47,6 +47,10 @@ trivy-operator:
memory: 512Mi
replicas: 1
nodeCollector:
tolerations:
- key: node-role.kubernetes.io/control-plane
operator: Exists
effect: NoSchedule
volumeMounts:
- name: var-lib-etcd
mountPath: /var/lib/etcd

6
clusters/cl01tl/helm/vault/values.yaml
View File

@@ -187,7 +187,7 @@ snapshot:
s3-backup-local:
image:
repository: d3fk/s3cmd
tag: latest@sha256:a41234c2b43d6cfa0d51c9523a2d7925f7f21297a41d69932946c3e364d32b5e
tag: latest@sha256:e3965f8205dfb96fb00e66cee54a0d171f1829a3cc6a1bbb980ab076730e54be
pullPolicy: IfNotPresent
command:
- /bin/sh
@@ -208,7 +208,7 @@ snapshot:
s3-backup-remote:
image:
repository: d3fk/s3cmd
tag: latest@sha256:a41234c2b43d6cfa0d51c9523a2d7925f7f21297a41d69932946c3e364d32b5e
tag: latest@sha256:e3965f8205dfb96fb00e66cee54a0d171f1829a3cc6a1bbb980ab076730e54be
pullPolicy: IfNotPresent
command:
- /bin/sh
@@ -229,7 +229,7 @@ snapshot:
s3-backup-external:
image:
repository: d3fk/s3cmd
tag: latest@sha256:a41234c2b43d6cfa0d51c9523a2d7925f7f21297a41d69932946c3e364d32b5e
tag: latest@sha256:e3965f8205dfb96fb00e66cee54a0d171f1829a3cc6a1bbb980ab076730e54be
pullPolicy: IfNotPresent
command:
- /bin/sh

1
hosts/ps08rp/blocky/config.yml
View File

@@ -110,6 +110,7 @@ customDNS:
komodo IN CNAME traefik-cl01tl
lidarr IN CNAME traefik-cl01tl
mail IN CNAME traefik-cl01tl
medialyze IN CNAME traefik-cl01tl
movie-roulette IN CNAME traefik-cl01tl
music-grabber IN CNAME traefik-cl01tl
navidrome IN CNAME traefik-cl01tl

1
hosts/ps09rp/blocky/config.yml
View File

@@ -131,6 +131,7 @@ customDNS:
komodo IN CNAME traefik-cl01tl
lidarr IN CNAME traefik-cl01tl
mail IN CNAME traefik-cl01tl
medialyze IN CNAME traefik-cl01tl
movie-roulette IN CNAME traefik-cl01tl
music-grabber IN CNAME traefik-cl01tl
navidrome IN CNAME traefik-cl01tl