feat: fix service

feat: add movie-routelette
chore(deps): update goharbor/harbor-exporter docker tag to v2.14.3 (#4605 )
2026-03-10 16:21:08 -05:00 · 2026-03-10 16:05:21 -05:00 · 2026-03-10 20:15:39 +00:00 · 2026-03-10 20:12:04 +00:00 · 2026-03-10 20:12:00 +00:00 · 2026-03-10 20:11:36 +00:00
30 changed files with 250 additions and 41 deletions
--- a/clusters/cl01tl/helm/argocd/Chart.lock
+++ b/clusters/cl01tl/helm/argocd/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: argo-cd
  repository: https://argoproj.github.io/argo-helm
-  version: 9.4.9
-digest: sha256:5dbcd4491181bcedd914c0bb0dfa80af521703062898822b60a85e2a0a96e126
-generated: "2026-03-09T17:01:48.010446725Z"
+  version: 9.4.10
+digest: sha256:795aad956acef3f5efb8160390caf9b9792b7b4150d3a7984f1c5edbad92dfaa
+generated: "2026-03-10T18:58:35.720448421Z"
--- a/clusters/cl01tl/helm/argocd/Chart.yaml
+++ b/clusters/cl01tl/helm/argocd/Chart.yaml
@@ -15,7 +15,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: argo-cd
-    version: 9.4.9
+    version: 9.4.10
    repository: https://argoproj.github.io/argo-helm
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 # renovate: datasource=github-releases depName=argoproj/argo-cd
--- a/clusters/cl01tl/helm/blocky/values.yaml
+++ b/clusters/cl01tl/helm/blocky/values.yaml
@@ -135,6 +135,7 @@ blocky:
              komodo                          IN      CNAME   traefik-cl01tl
              lidarr                          IN      CNAME   traefik-cl01tl
              mail                            IN      CNAME   traefik-cl01tl
+              movie-roulette                  IN      CNAME   traefik-cl01tl
              music-grabber                   IN      CNAME   traefik-cl01tl
              navidrome                       IN      CNAME   traefik-cl01tl
              ntfy                            IN      CNAME   traefik-cl01tl
--- a/clusters/cl01tl/helm/cert-manager/Chart.lock
+++ b/clusters/cl01tl/helm/cert-manager/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: cert-manager
  repository: https://charts.jetstack.io
-  version: v1.19.4
-digest: sha256:5c4a0a0568677bfcf4529e6ec6a005957cd1820fd5f1d1f108e74370d409fe88
-generated: "2026-02-24T19:30:44.415585645Z"
+  version: v1.20.0
+digest: sha256:1543bd17649cb32982de3cce017fcbed1b44c41d50b76c6471b266f33e261c29
+generated: "2026-03-10T16:06:49.332999536Z"
--- a/clusters/cl01tl/helm/cert-manager/Chart.yaml
+++ b/clusters/cl01tl/helm/cert-manager/Chart.yaml
@@ -14,8 +14,8 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: cert-manager
-    version: v1.19.4
+    version: v1.20.0
    repository: https://charts.jetstack.io
 icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/cert-manager.png
 # renovate: datasource=github-releases depName=cert-manager/cert-manager
-appVersion: v1.19.4
+appVersion: v1.20.0
--- a/clusters/cl01tl/helm/element-web/Chart.yaml
+++ b/clusters/cl01tl/helm/element-web/Chart.yaml
@@ -24,4 +24,4 @@ dependencies:
    version: 2.4.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/element.png
 # renovate: datasource=github-releases depName=element-hq/element-web
-appVersion: v1.12.11
+appVersion: v1.12.12
--- a/clusters/cl01tl/helm/element-web/values.yaml
+++ b/clusters/cl01tl/helm/element-web/values.yaml
@@ -2,7 +2,7 @@ element-web:
  replicaCount: 1
  image:
    repository: vectorim/element-web
-    tag: v1.12.11
+    tag: v1.12.12
    pullPolicy: IfNotPresent
  defaultServer:
    url: https://matrix.alexlebens.dev
--- a/clusters/cl01tl/helm/gatus/values.yaml
+++ b/clusters/cl01tl/helm/gatus/values.yaml
@@ -137,6 +137,9 @@ gatus:
      - name: yamtrack
        url: https://yamtrack.alexlebens.net
        <<: *defaults
+      - name: movie-roulette
+        url: https://movie-roulette.alexlebens.net
+        <<: *defaults
      - name: jellyfin
        url: https://jellyfin.alexlebens.net
        <<: *defaults
--- a/clusters/cl01tl/helm/harbor/Chart.yaml
+++ b/clusters/cl01tl/helm/harbor/Chart.yaml
@@ -29,4 +29,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/harbor.png
 # renovate: datasource=github-releases depName=goharbor/harbor
-appVersion: v2.14.2
+appVersion: v2.14.3
--- a/clusters/cl01tl/helm/harbor/values.yaml
+++ b/clusters/cl01tl/helm/harbor/values.yaml
@@ -41,12 +41,12 @@ harbor:
  portal:
    image:
      repository: goharbor/harbor-portal
-      tag: v2.14.2
+      tag: v2.14.3
    replicas: 2
  core:
    image:
      repository: goharbor/harbor-core
-      tag: v2.14.2
+      tag: v2.14.3
    replicas: 2
    existingSecret: harbor-secret
    secretName: harbor-secret
@@ -54,7 +54,7 @@ harbor:
  jobservice:
    image:
      repository: goharbor/harbor-jobservice
-      tag: v2.14.2
+      tag: v2.14.3
    replicas: 2
    jobLoggers:
      - stdout
@@ -63,11 +63,11 @@ harbor:
    registry:
      image:
        repository: goharbor/registry-photon
-        tag: v2.14.2
+        tag: v2.14.3
    controller:
      image:
        repository: goharbor/harbor-registryctl
-        tag: v2.14.2
+        tag: v2.14.3
    existingSecret: harbor-secret
    relativeurls: true
    credentials:
@@ -94,7 +94,7 @@ harbor:
  exporter:
    image:
      repository: goharbor/harbor-exporter
-      tag: v2.14.2
+      tag: v2.14.3
    replicas: 2
 postgres-18-cluster:
  mode: recovery
--- a/clusters/cl01tl/helm/homepage/values.yaml
+++ b/clusters/cl01tl/helm/homepage/values.yaml
@@ -160,6 +160,12 @@ homepage:
                  href: https://yamtrack.alexlebens.net
                  siteMonitor: http://yamtrack.yamtrack:80
                  statusStyle: dot
+              - Movie Roulette:
+                  icon: https://raw.githubusercontent.com/sahara101/Movie-Roulette/refs/heads/main/static/icons/icon.png
+                  description: Movie Roulette
+                  href: https://movie-roulette.alexlebens.net
+                  siteMonitor: http://movie-roulette.movie-roulette:80
+                  statusStyle: dot
              - Movies and TV:
                  icon: sh-jellyfin.webp
                  description: Jellyfin
--- a/clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock
+++ b/clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock
@@ -1,12 +1,12 @@
 dependencies:
 - name: kube-prometheus-stack
  repository: oci://ghcr.io/prometheus-community/charts
-  version: 82.10.2
+  version: 82.10.3
 - name: app-template
  repository: https://bjw-s-labs.github.io/helm-charts/
  version: 4.6.2
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.4.0
-digest: sha256:9019f0e0bcbe5033457c9d402590b51a1b27e2e6141bfd5d84b9b30a5f666c98
-generated: "2026-03-09T23:07:53.50141436Z"
+digest: sha256:37ffa4a21ed29703cae9c9f3fb029566a1dd6af6e0fe8cc3862a2226d6644114
+generated: "2026-03-10T19:02:41.11005238Z"
--- a/clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml
+++ b/clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml
@@ -20,7 +20,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: kube-prometheus-stack
-    version: 82.10.2
+    version: 82.10.3
    repository: oci://ghcr.io/prometheus-community/charts
  - name: app-template
    alias: ntfy-alertmanager
--- a/clusters/cl01tl/helm/local-path-provisioner/Chart.lock
+++ b/clusters/cl01tl/helm/local-path-provisioner/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: local-path-provisioner
  repository: https://charts.containeroo.ch
-  version: 0.0.35
-digest: sha256:c59cc5a81e797a9e2ab0f8e6bf03cb3e4dfc740555631aa1d41b7def1d2c60c8
-generated: "2026-01-10T19:01:45.394965495Z"
+  version: 0.0.36
+digest: sha256:ac212733a0ba2046767ad1718ca740d5aad3d1bfc49c5e7a5056c8414c1d65d4
+generated: "2026-03-10T19:00:30.739038561Z"
--- a/clusters/cl01tl/helm/local-path-provisioner/Chart.yaml
+++ b/clusters/cl01tl/helm/local-path-provisioner/Chart.yaml
@@ -15,8 +15,8 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: local-path-provisioner
-    version: 0.0.35
+    version: 0.0.36
    repository: https://charts.containeroo.ch
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 # renovate: datasource=github-releases depName=rancher/local-path-provisioner
-appVersion: v0.0.34
+appVersion: v0.0.35
--- a/clusters/cl01tl/helm/local-path-provisioner/values.yaml
+++ b/clusters/cl01tl/helm/local-path-provisioner/values.yaml
@@ -1,7 +1,7 @@
 local-path-provisioner:
  image:
    repository: rancher/local-path-provisioner
-    tag: v0.0.34
+    tag: v0.0.35
  helperImage:
    repository: busybox
    tag: 1.37.0
--- a/clusters/cl01tl/helm/loki/Chart.lock
+++ b/clusters/cl01tl/helm/loki/Chart.lock
@@ -4,6 +4,6 @@ dependencies:
  version: 6.53.0
 - name: alloy
  repository: https://grafana.github.io/helm-charts
-  version: 1.6.1
-digest: sha256:ec17a816dcdc476ad67cd056556d9a42a9fb8057ef75a928f8604939006e3416
-generated: "2026-03-02T15:18:56.219024346Z"
+  version: 1.6.2
+digest: sha256:88b8ace6bcbcbff4b04727499705fbe94de7fe4b8f0b8aa254a1e7d1d2c65fac
+generated: "2026-03-10T18:56:19.38475079Z"
--- a/clusters/cl01tl/helm/loki/Chart.yaml
+++ b/clusters/cl01tl/helm/loki/Chart.yaml
@@ -19,7 +19,7 @@ dependencies:
    version: 6.53.0
    repository: https://grafana.github.io/helm-charts
  - name: alloy
-    version: 1.6.1
+    version: 1.6.2
    repository: https://grafana.github.io/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/loki.png
 # renovate: datasource=github-releases depName=grafana/loki
--- a/clusters/cl01tl/helm/matrix-synapse/Chart.yaml
+++ b/clusters/cl01tl/helm/matrix-synapse/Chart.yaml
@@ -81,4 +81,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/matrix.png
 # renovate: datasource=github-releases depName=element-hq/synapse
-appVersion: v1.148.0
+appVersion: v1.149.0
--- a/clusters/cl01tl/helm/movie-roulette/Chart.lock
+++ b/clusters/cl01tl/helm/movie-roulette/Chart.lock
@@ -0,0 +1,6 @@
+dependencies:
+- name: app-template
+  repository: https://bjw-s-labs.github.io/helm-charts/
+  version: 4.6.2
+digest: sha256:faa35ccfc18b2d47fad558e168bd3c68e64790fe2b1356881452ae4f5cd8b443
+generated: "2026-03-10T16:01:13.738843-05:00"
--- a/clusters/cl01tl/helm/movie-roulette/Chart.yaml
+++ b/clusters/cl01tl/helm/movie-roulette/Chart.yaml
@@ -0,0 +1,22 @@
+apiVersion: v2
+name: movie-roulette
+version: 1.0.0
+description: Movie Roulette
+keywords:
+  - movie-roulette
+  - jellyfin
+home: https://wiki.alexlebens.dev/
+sources:
+  - https://github.com/sahara101/Movie-Roulette
+  - https://github.com/sahara101/Movie-Roulette/pkgs/container/movie-roulette
+  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
+maintainers:
+  - name: alexlebens
+dependencies:
+  - name: app-template
+    alias: movie-roulette
+    repository: https://bjw-s-labs.github.io/helm-charts/
+    version: 4.6.2
+icon: https://raw.githubusercontent.com/sahara101/Movie-Roulette/refs/heads/main/static/icons/icon.png
+# renovate: datasource=github-releases depName=sahara101/Movie-Roulette
+appVersion: v5.2.1
--- a/clusters/cl01tl/helm/movie-roulette/templates/external-secret.yaml
+++ b/clusters/cl01tl/helm/movie-roulette/templates/external-secret.yaml
@@ -0,0 +1,42 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: movie-roulette-config-secret
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: movie-roulette-config-secret
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  data:
+    - secretKey: secret-key
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/movie-roulette/key
+        metadataPolicy: None
+        property: secret-key
+    - secretKey: jellyfin-key
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/jellyfin/movie-roulette
+        metadataPolicy: None
+        property: jellyfin-key
+    - secretKey: jellyfin-user
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/jellyfin/movie-roulette
+        metadataPolicy: None
+        property: user
+    - secretKey: seerr-key
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/seerr/key
+        metadataPolicy: None
+        property: key
--- a/clusters/cl01tl/helm/movie-roulette/values.yaml
+++ b/clusters/cl01tl/helm/movie-roulette/values.yaml
@@ -0,0 +1,127 @@
+movie-roulette:
+  controllers:
+    main:
+      type: deployment
+      replicas: 1
+      strategy: Recreate
+      revisionHistoryLimit: 3
+      containers:
+        main:
+          image:
+            repository: ghcr.io/sahara101/movie-roulette
+            tag: v5.2.1
+            pullPolicy: IfNotPresent
+          env:
+            - name: FLASK_SECRET_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: movie-roulette-config-secret
+                  key: secret-key
+            - name: CORS_ALLOWED_ORIGINS
+              value: movie-roulette.alexlebens.net
+            - name: DISABLE_SETTINGS
+              value: "TRUE"
+            - name: AUTH_ENABLED
+              value: "TRUE"
+            - name: AUTH_SESSION_LIFETIME
+              value: "86400"
+            - name: JELLYFIN_URL
+              value: http://jellyfin.alexlebens.net
+            - name: JELLYFIN_API_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: movie-roulette-config-secret
+                  key: jellyfin-key
+            - name: JELLYFIN_USER_ID
+              valueFrom:
+                secretKeyRef:
+                  name: movie-roulette-config-secret
+                  key: jellyfin-user
+            - name: LOGIN_BACKDROP_ENABLED
+              value: "TRUE"
+            - name: HOMEPAGE_MODE
+              value: "FALSE"
+            - name: USE_LINKS
+              value: "TRUE"
+            - name: USE_FILTER
+              value: "TRUE"
+            - name: USE_WATCH_BUTTON
+              value: "TRUE"
+            - name: USE_NEXT_BUTTON
+              value: "TRUE"
+            - name: USE_GRID_VIEW
+              value: "true"
+            - name: ENABLE_MOBILE_TRUNCATION
+              value: "TRUE"
+            - name: SHOW_NOW_WATCHING_CARD
+              value: "FALSE"
+            - name: USE_HEROUI_THEME
+              value: "FALSE"
+            - name: ENABLE_MOVIE_LOGOS
+              value: "TRUE"
+            - name: LOAD_MOVIE_ON_START
+              value: "FALSE"
+            - name: SEERR_URL
+              value: http://seerr.alexlebens.net
+            - name: SEERR_API_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: movie-roulette-config-secret
+                  key: seerr-key
+            - name: REQUEST_SERVICE_DEFAULT
+              value: "seerr"
+          resources:
+            requests:
+              cpu: 10m
+              memory: 128Mi
+  service:
+    main:
+      controller: main
+      ports:
+        http:
+          port: 80
+          targetPort: 4000
+          protocol: HTTP
+  route:
+    main:
+      kind: HTTPRoute
+      parentRefs:
+        - group: gateway.networking.k8s.io
+          kind: Gateway
+          name: traefik-gateway
+          namespace: traefik
+      hostnames:
+        - movie-roulette.alexlebens.net
+      rules:
+        - backendRefs:
+            - group: ''
+              kind: Service
+              name: movie-roulette
+              port: 80
+              weight: 100
+          matches:
+            - path:
+                type: PathPrefix
+                value: /
+  persistence:
+    data:
+      forceRename: movie-roulette-data
+      storageClass: ceph-block
+      accessMode: ReadWriteOnce
+      size: 1Gi
+      retain: true
+      advancedMounts:
+        main:
+          main:
+            - path: /config
+              readOnly: false
+volsync-target-data:
+  pvcTarget: movie-roulette-data
+  local:
+    enabled: true
+    schedule: 44 11 * * *
+  remote:
+    enabled: false
+  external:
+    enabled: true
+    schedule: 44 12 * * *
--- a/clusters/cl01tl/helm/music-grabber/values.yaml
+++ b/clusters/cl01tl/helm/music-grabber/values.yaml
@@ -9,7 +9,7 @@ music-grabber:
        main:
          image:
            repository: g33kphr33k/musicgrabber
-            tag: 2.3.4
+            tag: 2.3.5
            pullPolicy: IfNotPresent
          env:
            - name: MUSIC_DIR
--- a/clusters/cl01tl/helm/postiz/Chart.yaml
+++ b/clusters/cl01tl/helm/postiz/Chart.yaml
@@ -42,4 +42,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/postiz.png
 # renovate: datasource=github-releases depName=gitroomhq/postiz-app
-appVersion: v2.20.1
+appVersion: v2.20.2
--- a/clusters/cl01tl/helm/postiz/values.yaml
+++ b/clusters/cl01tl/helm/postiz/values.yaml
@@ -9,7 +9,7 @@ postiz:
        main:
          image:
            repository: ghcr.io/gitroomhq/postiz-app
-            tag: v2.20.1
+            tag: v2.20.2
            pullPolicy: IfNotPresent
          env:
            - name: MAIN_URL
--- a/clusters/cl01tl/helm/searxng/values.yaml
+++ b/clusters/cl01tl/helm/searxng/values.yaml
@@ -9,7 +9,7 @@ searxng:
        main:
          image:
            repository: searxng/searxng
-            tag: latest@sha256:a973f277a9025be36675ee803039d5f309c57e8521a500b5edee4cdba01c316a
+            tag: latest@sha256:943c8997857aa050ef405779df2fd809960b0e230707f0c45d8e1f0d6a5bb4b7
            pullPolicy: IfNotPresent
          env:
            - name: SEARXNG_BASE_URL
@@ -39,7 +39,7 @@ searxng:
        main:
          image:
            repository: searxng/searxng
-            tag: latest@sha256:a973f277a9025be36675ee803039d5f309c57e8521a500b5edee4cdba01c316a
+            tag: latest@sha256:943c8997857aa050ef405779df2fd809960b0e230707f0c45d8e1f0d6a5bb4b7
            pullPolicy: IfNotPresent
          env:
            - name: SEARXNG_BASE_URL
--- a/clusters/cl01tl/helm/talos/values.yaml
+++ b/clusters/cl01tl/helm/talos/values.yaml
@@ -405,7 +405,7 @@ etcd-defrag:
        main:
          image:
            repository: ghcr.io/siderolabs/talosctl
-            tag: v1.12.4
+            tag: v1.12.5
            pullPolicy: IfNotPresent
          args:
            - etcd
@@ -438,7 +438,7 @@ etcd-defrag:
        main:
          image:
            repository: ghcr.io/siderolabs/talosctl
-            tag: v1.12.4
+            tag: v1.12.5
            pullPolicy: IfNotPresent
          args:
            - etcd
@@ -471,7 +471,7 @@ etcd-defrag:
        main:
          image:
            repository: ghcr.io/siderolabs/talosctl
-            tag: v1.12.4
+            tag: v1.12.5
            pullPolicy: IfNotPresent
          args:
            - etcd
--- a/hosts/ps08rp/blocky/config.yml
+++ b/hosts/ps08rp/blocky/config.yml
@@ -110,6 +110,7 @@ customDNS:
    komodo                          IN      CNAME   traefik-cl01tl
    lidarr                          IN      CNAME   traefik-cl01tl
    mail                            IN      CNAME   traefik-cl01tl
+    movie-roulette                  IN      CNAME   traefik-cl01tl
    music-grabber                   IN      CNAME   traefik-cl01tl
    navidrome                       IN      CNAME   traefik-cl01tl
    ntfy                            IN      CNAME   traefik-cl01tl
--- a/hosts/ps09rp/blocky/config.yml
+++ b/hosts/ps09rp/blocky/config.yml
@@ -131,6 +131,7 @@ customDNS:
    komodo                          IN      CNAME   traefik-cl01tl
    lidarr                          IN      CNAME   traefik-cl01tl
    mail                            IN      CNAME   traefik-cl01tl
+    movie-roulette                  IN      CNAME   traefik-cl01tl
    music-grabber                   IN      CNAME   traefik-cl01tl
    navidrome                       IN      CNAME   traefik-cl01tl
    ntfy                            IN      CNAME   traefik-cl01tl