Update ghcr.io/traefik/traefik Docker tag to v3.6.4 (#2295)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/traefik/traefik](https://hub.docker.com/_/traefik) ([source](https://github.com/traefik/traefik-library-image)) | patch | `v3.6.2` -> `v3.6.4` |

---

### Release Notes

<details>
<summary>traefik/traefik-library-image (ghcr.io/traefik/traefik)</summary>

### [`v3.6.4`](https://github.com/traefik/traefik-library-image/compare/v3.6.4...v3.6.4)

[Compare Source](https://github.com/traefik/traefik-library-image/compare/v3.6.4...v3.6.4)

### [`v3.6.4`](https://github.com/traefik/traefik-library-image/compare/v3.6.2...v3.6.4)

[Compare Source](https://github.com/traefik/traefik-library-image/compare/v3.6.2...v3.6.4)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi4zOS4xIiwidXBkYXRlZEluVmVyIjoiNDIuMzkuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiYXV0b21lcmdlIiwiaW1hZ2UiXX0=-->

Co-authored-by: Alex Lebens <alexanderlebens@gmail.com>
Reviewed-on: #2295
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>

.gitea/workflows/lint-test-docker.yaml

@@ -6,12 +6,14 @@ on:
       - main
     paths:
       - 'hosts/**'
+      - '!clusters/**'
 
   push:
     branches:
       - main
     paths:
       - 'hosts/**'
+      - '!clusters/**'
 
 env:
   BASE_BRANCH: "origin/${{ gitea.base_ref }}"
@@ -73,6 +75,7 @@ jobs:
 
             for path in $GIT_DIFF; do
               CHANGED_COMPOSE+=$(echo "$path")
+              CHANGED_COMPOSE+=$(echo " ")
             done
 
           else
@@ -84,13 +87,13 @@ jobs:
           if [ -n "${CHANGED_COMPOSE}" ]; then
             echo ""
             echo ">> Compose to Lint:"
-            echo "$(echo "${CHANGED_COMPOSE[@]}" | sort -u)"
+            echo "$(echo "${CHANGED_COMPOSE}" | sort -u)"
 
             echo "----"
 
             echo "changes-detected=true" >> $GITEA_OUTPUT
             echo "compose-dir<<EOF" >> $GITEA_OUTPUT
-            echo "$(echo "${CHANGED_COMPOSE[@]}" | sort -u)" >> $GITEA_OUTPUT
+            echo "$(echo "${CHANGED_COMPOSE}" | sort -u)" >> $GITEA_OUTPUT
             echo "EOF" >> $GITEA_OUTPUT
           else
             echo "changes-detected=false" >> $GITEA_OUTPUT
@@ -104,7 +107,7 @@ jobs:
           echo ">> Running dclint on changed compose files:"
           echo "$CHANGED_COMPOSE"
 
-          echo "$CHANGED_COMPOSE" | while read -r compose; do
+          for compose in $CHANGED_COMPOSE; do
             echo ">> Linting $compose ..."
             npx dclint $compose
           done

.gitea/workflows/lint-test-helm.yaml

@@ -5,13 +5,15 @@ on:
     branches:
       - main
     paths:
-      - 'clusters/*/helm/**'
+      - 'clusters/cl01tl/helm/**'
+      - '!hosts/**'
 
   push:
     branches:
       - main
     paths:
-      - 'clusters/*/helm/**'
+      - 'clusters/cl01tl/helm/**'
+      - '!hosts/**'
 
 env:
   CLUSTER: cl01tl
@@ -48,7 +50,7 @@ jobs:
         uses: azure/setup-helm@v4
         with:
           token: ${{ secrets.GITEA_TOKEN }}
-          version: v3
+          version: v3.19.2
 
       - name: Check Directories for Changes
         id: check-dir-changes
@@ -61,6 +63,7 @@ jobs:
           if [ "${{ github.event_name }}" == "pull_request" ]; then
             echo ""
             echo ">> Checking for changes in a pull request ..."
+            git diff --name-only "${BASE_BRANCH}" | xargs -I {} dirname {} | sort -u | grep -E "clusters/[^/]+/helm/[^/]+"
             GIT_DIFF=$(git diff --name-only "${BASE_BRANCH}" | xargs -I {} dirname {} | sort -u | grep -E "clusters/[^/]+/helm/[^/]+")
           else
             echo ""
@@ -75,6 +78,7 @@ jobs:
 
             for path in $GIT_DIFF; do
               CHANGED_CHARTS+=$(echo "$path" | awk -F '/' '{print $4}')
+              RENDER_DIR+=$(echo " ")
             done
 
           else
@@ -86,13 +90,13 @@ jobs:
           if [ -n "${CHANGED_CHARTS}" ]; then
             echo ""
             echo ">> Chart to Lint:"
-            echo "$(echo "${CHANGED_CHARTS[@]}" | sort -u)"
+            echo "$(echo "${CHANGED_CHARTS}" | sort -u)"
 
             echo "----"
 
             echo "changes-detected=true" >> $GITEA_OUTPUT
             echo "chart-dir<<EOF" >> $GITEA_OUTPUT
-            echo "$(echo "${CHANGED_CHARTS[@]}" | sort -u)" >> $GITEA_OUTPUT
+            echo "$(echo "${CHANGED_CHARTS}" | sort -u)" >> $GITEA_OUTPUT
             echo "EOF" >> $GITEA_OUTPUT
           else
             echo "changes-detected=false" >> $GITEA_OUTPUT

.gitea/workflows/render-manifests-automerge.yaml

@@ -72,6 +72,7 @@ jobs:
             echo "$GIT_DIFF"
             for path in $GIT_DIFF; do
               RENDER_DIR+=$(echo "$path" | awk -F '/' '{print $4}')
+              RENDER_DIR+=$(echo " ")
             done
 
           else
@@ -81,13 +82,13 @@ jobs:
 
           if [ -n "${RENDER_DIR}" ]; then
             echo ">> Directories to Render:"
-            echo "$(echo "${RENDER_DIR[@]}" | sort -u)"
+            echo "$(echo "${RENDER_DIR}" | sort -u)"
 
             echo "----"
 
             echo "changes-detected=true" >> $GITEA_OUTPUT
             echo "render-dir<<EOF" >> $GITEA_OUTPUT
-            echo "$(echo "${RENDER_DIR[@]}" | sort -u)" >> $GITEA_OUTPUT
+            echo "$(echo "${RENDER_DIR}" | sort -u)" >> $GITEA_OUTPUT
             echo "EOF" >> $GITEA_OUTPUT
           else
             echo "changes-detected=false" >> $GITEA_OUTPUT
@@ -190,7 +191,7 @@ jobs:
 
               echo ""
               echo ">> Formating rendered template ..."
-              echo "$TEMPLATE" | yq 'select(. != null)' | yq -s '"'"$OUTPUT_FOLDER"'" + .kind + "-" + .metadata.name + ".yaml"'
+              echo "$TEMPLATE" | yq '... comments=""' | yq 'select(. != null)' | yq -s '"'"$OUTPUT_FOLDER"'" + .kind + "-" + .metadata.name + ".yaml"'
 
               echo ""
               echo ">> Manifests for $chart_name rendered to $OUTPUT_FOLDER"
@@ -211,13 +212,16 @@ jobs:
         run: |
           cd ${MANIFEST_DIR}
 
-          if git status --porcelain | grep -q .; then
+          GIT_CHANGES=$(git status --porcelain)
+
+          if [ -n "$GIT_CHANGES" ]; then
             echo ">> Changes detected"
             git status --porcelain
             echo "changes-detected=true" >> $GITEA_OUTPUT
+
           else
             echo ">> No changes detected, skipping PR creation"
-            exit 0
+
           fi
 
           echo "----"
@@ -291,10 +295,15 @@ jobs:
 
           if [ "$HTTP_STATUS" == "201" ]; then
             echo ">> Pull Request created successfully!"
+
             PR_URL=$(cat response_body.json | jq -r .html_url)
+            echo ">> Pull Request URL: $PR_URL"
             echo "pull-request-url=${PR_URL}" >> $GITEA_OUTPUT
-            PR_ID=$(cat response_body.json | jq -r .id)
-            echo "pull-request-id=${PR_ID}" >> $GITEA_OUTPUT
+
+            PR_NUMBER=$(cat response_body.json | jq -r .number)
+            echo ">> Pull Request Number: $PR_NUMBER"
+            echo "pull-request-number=${PR_NUMBER}" >> $GITEA_OUTPUT
+
             echo "pull-request-operation=created" >> $GITEA_OUTPUT
 
           elif [ "$HTTP_STATUS" == "422" ]; then
@@ -317,18 +326,17 @@ jobs:
           GITEA_TOKEN: ${{ secrets.BOT_TOKEN }}
           GITEA_URL: ${{ secrets.REPO_URL }}
           BRANCH_NAME: ${{ steps.prepare-manifest-branch.outputs.BRANCH_NAME }}
-          PR_ID: ${{ steps.create-pull-request.outputs.pull-request-id }}
+          PR_NUMBER: ${{ steps.create-pull-request.outputs.pull-request-number }}
         run: |
           cd ${MANIFEST_DIR}
 
-          API_ENDPOINT="${GITEA_URL}/api/v1/repos/${{ gitea.repository }}/pulls/${PR_ID}/merge"
+          API_ENDPOINT="${GITEA_URL}/api/v1/repos/${{ gitea.repository }}/pulls/${PR_NUMBER}/merge"
 
           PAYLOAD=$( jq -n \
             --arg Do "merge" \
-            --arg delete_branch_after_merge "true" \
-            '{Do: $Do, delete_branch_after_merge: $delete_branch_after_merge}' )
+            '{Do: $Do}' )
 
-          echo ">> Merging PR with ID: ${PR_ID}"
+          echo ">> Merging PR with ID: ${PR_NUMBER}"
           echo ">> With Endpoint of:"
           echo "$API_ENDPOINT"
           echo ">> With Payload of:"

.gitea/workflows/render-manifests-dispatch.yaml

@@ -67,13 +67,13 @@ jobs:
 
           if [ -n "${RENDER_DIR}" ]; then
             echo ">> Directories to Render:"
-            echo "$(echo "${RENDER_DIR[@]}" | sort -u)"
+            echo "$(echo "${RENDER_DIR}" | sort -u)"
 
             echo "----"
 
             echo "changes-detected=true" >> $GITEA_OUTPUT
             echo "render-dir<<EOF" >> $GITEA_OUTPUT
-            echo "$(echo "${RENDER_DIR[@]}" | sort -u)" >> $GITEA_OUTPUT
+            echo "$(echo "${RENDER_DIR}" | sort -u)" >> $GITEA_OUTPUT
             echo "EOF" >> $GITEA_OUTPUT
           else
             echo "changes-detected=false" >> $GITEA_OUTPUT
@@ -176,7 +176,7 @@ jobs:
 
               echo ""
               echo ">> Formating rendered template ..."
-              echo "$TEMPLATE" | yq 'select(. != null)' | yq -s '"'"$OUTPUT_FOLDER"'" + .kind + "-" + .metadata.name + ".yaml"'
+              echo "$TEMPLATE" | yq '... comments=""' | yq 'select(. != null)' | yq -s '"'"$OUTPUT_FOLDER"'" + .kind + "-" + .metadata.name + ".yaml"'
 
               echo ""
               echo ">> Manifests for $chart_name rendered to $OUTPUT_FOLDER"
@@ -197,11 +197,11 @@ jobs:
         run: |
           cd ${MANIFEST_DIR}
 
-          git status --porcelain
+          GIT_CHANGES=$(git status --porcelain)
 
-          if git status --porcelain | grep -q . ; then
+          if [ -n "$GIT_CHANGES" ]; then
             echo ">> Changes detected"
-            # git status --porcelain
+            git status --porcelain
             echo "changes-detected=true" >> $GITEA_OUTPUT
 
           else

.gitea/workflows/render-manifests-merge.yaml

@@ -77,6 +77,7 @@ jobs:
             echo "$GIT_DIFF"
             for path in $GIT_DIFF; do
               RENDER_DIR+=$(echo "$path" | awk -F '/' '{print $4}')
+              RENDER_DIR+=$(echo " ")
             done
 
           else
@@ -86,13 +87,13 @@ jobs:
 
           if [ -n "${RENDER_DIR}" ]; then
             echo ">> Directories to Render:"
-            echo "$(echo "${RENDER_DIR[@]}" | sort -u)"
+            echo "$(echo "${RENDER_DIR}" | sort -u)"
 
             echo "----"
 
             echo "changes-detected=true" >> $GITEA_OUTPUT
             echo "render-dir<<EOF" >> $GITEA_OUTPUT
-            echo "$(echo "${RENDER_DIR[@]}" | sort -u)" >> $GITEA_OUTPUT
+            echo "$(echo "${RENDER_DIR}" | sort -u)" >> $GITEA_OUTPUT
             echo "EOF" >> $GITEA_OUTPUT
           else
             echo "changes-detected=false" >> $GITEA_OUTPUT
@@ -195,7 +196,7 @@ jobs:
 
               echo ""
               echo ">> Formating rendered template ..."
-              echo "$TEMPLATE" | yq 'select(. != null)' | yq -s '"'"$OUTPUT_FOLDER"'" + .kind + "-" + .metadata.name + ".yaml"'
+              echo "$TEMPLATE" | yq '... comments=""' | yq 'select(. != null)' | yq -s '"'"$OUTPUT_FOLDER"'" + .kind + "-" + .metadata.name + ".yaml"'
 
               echo ""
               echo ">> Manifests for $chart_name rendered to $OUTPUT_FOLDER"
@@ -216,13 +217,16 @@ jobs:
         run: |
           cd ${MANIFEST_DIR}
 
-          if git status --porcelain | grep -q .; then
+          GIT_CHANGES=$(git status --porcelain)
+
+          if [ -n "$GIT_CHANGES" ]; then
             echo ">> Changes detected"
             git status --porcelain
             echo "changes-detected=true" >> $GITEA_OUTPUT
+
           else
             echo ">> No changes detected, skipping PR creation"
-            exit 0
+
           fi
 
           echo "----"

.gitea/workflows/render-manifests-push.yaml

@@ -75,6 +75,7 @@ jobs:
             echo "$GIT_DIFF"
             for path in $GIT_DIFF; do
               RENDER_DIR+=$(echo "$path" | awk -F '/' '{print $4}')
+              RENDER_DIR+=$(echo " ")
             done
 
           else
@@ -84,13 +85,13 @@ jobs:
 
           if [ -n "${RENDER_DIR}" ]; then
             echo ">> Directories to Render:"
-            echo "$(echo "${RENDER_DIR[@]}" | sort -u)"
+            echo "$(echo "${RENDER_DIR}" | sort -u)"
 
             echo "----"
 
             echo "changes-detected=true" >> $GITEA_OUTPUT
             echo "render-dir<<EOF" >> $GITEA_OUTPUT
-            echo "$(echo "${RENDER_DIR[@]}" | sort -u)" >> $GITEA_OUTPUT
+            echo "$(echo "${RENDER_DIR}" | sort -u)" >> $GITEA_OUTPUT
             echo "EOF" >> $GITEA_OUTPUT
           else
             echo "changes-detected=false" >> $GITEA_OUTPUT
@@ -193,7 +194,7 @@ jobs:
 
               echo ""
               echo ">> Formating rendered template ..."
-              echo "$TEMPLATE" | yq 'select(. != null)' | yq -s '"'"$OUTPUT_FOLDER"'" + .kind + "-" + .metadata.name + ".yaml"'
+              echo "$TEMPLATE" | yq '... comments=""' | yq 'select(. != null)' | yq -s '"'"$OUTPUT_FOLDER"'" + .kind + "-" + .metadata.name + ".yaml"'
 
               echo ""
               echo ">> Manifests for $chart_name rendered to $OUTPUT_FOLDER"
@@ -214,13 +215,16 @@ jobs:
         run: |
           cd ${MANIFEST_DIR}
 
-          if git status --porcelain | grep -q .; then
+          GIT_CHANGES=$(git status --porcelain)
+
+          if [ -n "$GIT_CHANGES" ]; then
             echo ">> Changes detected"
             git status --porcelain
             echo "changes-detected=true" >> $GITEA_OUTPUT
+
           else
             echo ">> No changes detected, skipping PR creation"
-            exit 0
+
           fi
 
           echo "----"

clusters/cl01tl/helm/actual/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.4.0
-digest: sha256:b5d823171e1b4dc1d3856f782f0c67cbb5d49e4fa170df2f21b06303c7aff7f5
-generated: "2025-11-30T21:05:19.732832-06:00"
+  version: 4.5.0
+digest: sha256:926b8da839684072fd79954aff0c9852c2ff3b618b0fa35177bdec8e2dff4986
+generated: "2025-12-05T17:02:01.15162583Z"

clusters/cl01tl/helm/actual/Chart.yaml

@@ -16,6 +16,6 @@ dependencies:
   - name: app-template
     alias: actual
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.5.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/actual-budget.png
 appVersion: 25.11.0

clusters/cl01tl/helm/argo-workflows/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 0.46.1
 - name: argo-events
   repository: https://argoproj.github.io/argo-helm
-  version: 2.4.18
+  version: 2.4.19
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 6.16.1
-digest: sha256:6cc24f6ce2b7f67c2eeab9bb6f64ebfedc082a2e809fc1f03f691f99a3006143
-generated: "2025-12-04T01:01:06.532396136Z"
+digest: sha256:1f98e04526d7b61fa9ee690c46542bcc2ae6b69bf7619e1107a1592386de9bf2
+generated: "2025-12-07T03:02:14.909953853Z"

clusters/cl01tl/helm/argo-workflows/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     version: 0.46.1
     repository: https://argoproj.github.io/argo-helm
   - name: argo-events
-    version: 2.4.18
+    version: 2.4.19
     repository: https://argoproj.github.io/argo-helm
   - name: postgres-cluster
     alias: postgres-17-cluster

clusters/cl01tl/helm/argocd/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: argo-cd
   repository: https://argoproj.github.io/argo-helm
-  version: 9.1.5
-digest: sha256:07f7f6d369af426cdd213ddbc58373a4e5b4f54724efd4612662d7da0315232d
-generated: "2025-12-02T21:27:41.876154-06:00"
+  version: 9.1.6
+digest: sha256:488b8e826e7cc7179f154c1b7555e2cec78b69becb9f8cdbe4937b3546d87e5d
+generated: "2025-12-05T04:02:40.060511766Z"

clusters/cl01tl/helm/argocd/Chart.yaml

@@ -15,7 +15,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: argo-cd
-    version: 9.1.5
+    version: 9.1.6
     repository: https://argoproj.github.io/argo-helm
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 appVersion: 3.0.0

clusters/cl01tl/helm/argocd/values.yaml

@@ -60,7 +60,7 @@ argo-cd:
     enabled: true
     auth: false
   redisSecretInit:
-    enabled: true
+    enabled: false
   server:
     replicas: 2
     extensions:
@@ -279,7 +279,7 @@ argo-cd:
         - description: Application has degraded
           send:
             - app-health-degraded
-          when: app.status.health.status == 'Degraded' and time.Now().Sub(time.Parse(app.status.health.lastTransitionTime).Minutes() >= 15
+          when: app.status.health.status == 'Degraded'
       trigger.on-sync-failed: |
         - description: Application syncing has failed
           send:

clusters/cl01tl/helm/audiobookshelf/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.4.0
-digest: sha256:f3a9990542f24965fadad0b5493059b78cdc3fae91c8214577fa6f41ca5f7de3
-generated: "2025-11-30T21:05:21.317114-06:00"
+  version: 4.5.0
+digest: sha256:977ed15091e9ed30d647a626214701d22f3a8a5232a900e33f753cc7e090042f
+generated: "2025-12-05T17:02:13.674405673Z"

clusters/cl01tl/helm/audiobookshelf/Chart.yaml

@@ -18,6 +18,6 @@ dependencies:
   - name: app-template
     alias: audiobookshelf
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.5.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/audiobookshelf.png
 appVersion: 2.21.0

clusters/cl01tl/helm/authentik/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 2025.10.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.23.1
+  version: 1.23.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 6.16.1
-digest: sha256:c3bafb322ca02710c8f325fefef20678957a8c6fd86894e44e5e318997e5cb80
-generated: "2025-12-03T23:59:57.54998859Z"
+digest: sha256:e6ea05d8bdb96164bc19da117078b5101f329ad5f1b461fa02f198bef45454f3
+generated: "2025-12-07T02:54:01.695741198Z"

clusters/cl01tl/helm/authentik/Chart.yaml

@@ -26,7 +26,7 @@ dependencies:
   - name: cloudflared
     alias: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.23.1
+    version: 1.23.2
   - name: postgres-cluster
     alias: postgres-17-cluster
     version: 6.16.1

clusters/cl01tl/helm/backrest/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.4.0
-digest: sha256:aa797b99d6d8b7aafe142811938408b7f234df6d429a7e076196337cc63876cb
-generated: "2025-12-01T20:25:09.888407-06:00"
+  version: 4.5.0
+digest: sha256:6e6f20320a485b57288a6febae1b7623076059c370f88b7fbe92460fc4047db3
+generated: "2025-12-05T17:02:26.599646463Z"

clusters/cl01tl/helm/backrest/Chart.yaml

@@ -16,6 +16,6 @@ dependencies:
   - name: app-template
     alias: backrest
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.5.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/backrest.png
 appVersion: v1.10.1

clusters/cl01tl/helm/bazarr/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.4.0
-digest: sha256:c6f6d1f2fb9fedf54094920737a6f0bd1a2ab89f0a4122966ca98f6c9d3f11fa
-generated: "2025-11-30T21:05:22.694344-06:00"
+  version: 4.5.0
+digest: sha256:54c88d51b4067dec5b22623957970b64092bf3f417fabb58277f6bc3e01eca20
+generated: "2025-12-05T17:02:40.843820962Z"

clusters/cl01tl/helm/bazarr/Chart.yaml

@@ -18,6 +18,6 @@ dependencies:
   - name: app-template
     alias: bazarr
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.5.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/bazarr.png
 appVersion: 1.5.2

clusters/cl01tl/helm/blocky/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.4.0
-digest: sha256:0009729bcf7f1941401b767fd4ae952b7a8d44f80053090b4a9224de912a14ef
-generated: "2025-12-01T20:25:13.511406-06:00"
+  version: 4.5.0
+digest: sha256:b8516161886b87344848ad2b3bdafbd66da61ca8ffc5e9a5ebed462f205c9912
+generated: "2025-12-05T17:02:59.562863413Z"

clusters/cl01tl/helm/blocky/Chart.yaml

@@ -16,6 +16,6 @@ dependencies:
   - name: app-template
     alias: blocky
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.5.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/blocky.png
 appVersion: v0.25

clusters/cl01tl/helm/booklore/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.4.0
+  version: 4.5.0
 - name: mariadb-cluster
   repository: https://helm.mariadb.com/mariadb-operator
   version: 25.10.2
-digest: sha256:264725306c1d1f38140293c0820abdc7e8aa4f39764b4d91e20200705ce2ec91
-generated: "2025-11-30T21:05:24.649316-06:00"
+digest: sha256:58d978bd46c61285b06acc6d9a40404d8059f2df7b953dea13c528b35350d0a8
+generated: "2025-12-05T17:03:15.7199669Z"

clusters/cl01tl/helm/booklore/Chart.yaml

@@ -16,7 +16,7 @@ dependencies:
   - name: app-template
     alias: booklore
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.5.0
   - name: mariadb-cluster
     version: 25.10.2
     repository: https://helm.mariadb.com/mariadb-operator

clusters/cl01tl/helm/booklore/values.yaml

@@ -9,7 +9,7 @@ booklore:
         main:
           image:
             repository: ghcr.io/booklore-app/booklore
-            tag: v1.13.1
+            tag: v1.13.2
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/code-server/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.4.0
+  version: 4.5.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.23.1
-digest: sha256:dd687a71edc2f7f03cba6d5f3e3221e2bb5172ed4c00659e327c79da5c01e89f
-generated: "2025-12-03T06:02:20.44367742Z"
+  version: 1.23.2
+digest: sha256:3cf78630cd7670e1157a87fc7ccbeca248ef4ced8a3170e69140ea3e1b0ff564
+generated: "2025-12-07T02:54:11.675097664Z"

clusters/cl01tl/helm/code-server/Chart.yaml

@@ -19,10 +19,10 @@ dependencies:
   - name: app-template
     alias: code-server
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.5.0
   - name: cloudflared
     alias: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.23.1
+    version: 1.23.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/visual-studio-code.png
 appVersion: 4.100.2

clusters/cl01tl/helm/descheduler/values.yaml

@@ -39,16 +39,27 @@ descheduler:
           - name: RemovePodsViolatingNodeTaints
           - name: RemovePodsViolatingInterPodAntiAffinity
           - name: RemovePodsViolatingTopologySpreadConstraint
+          - name: "HighNodeUtilization"
+            args:
+              thresholds:
+                cpu : 80
+                memory: 80
+                pods: 90
+              evictableNamespaces:
+                exclude:
+                  - "kube-system"
+              evictionModes:
+                - "OnlyThresholdingResources"
           - name: LowNodeUtilization
             args:
               thresholds:
-                cpu: 20
-                memory: 20
-                pods: 20
+                cpu: 30
+                memory: 30
+                pods: 50
               targetThresholds:
                 cpu: 60
-                memory: 60
-                pods: 60
+                memory: 40
+                pods: 80
         plugins:
           balance:
             enabled:

clusters/cl01tl/helm/directus/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.4.0
+  version: 4.5.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.23.1
+  version: 1.23.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 6.16.1
-digest: sha256:0bb36c0da68b901a005703e354f3f00f65c60ec3d1eddc2d08fa190062076944
-generated: "2025-12-04T00:00:11.07185823Z"
+digest: sha256:73ab37385c3d0ec2db83a3640bc03b08ddd06fd015e1b7138e49bc8c3be9382e
+generated: "2025-12-07T02:54:20.639142398Z"

clusters/cl01tl/helm/directus/Chart.yaml

@@ -20,11 +20,11 @@ dependencies:
   - name: app-template
     alias: directus
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.5.0
   - name: cloudflared
     alias: cloudflared-directus
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.23.1
+    version: 1.23.2
   - name: postgres-cluster
     alias: postgres-17-cluster
     version: 6.16.1

clusters/cl01tl/helm/element-web/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 1.4.26
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.23.1
-digest: sha256:601cbb43296add7470b663f64b7bc18a2220d3cfff7bef397f72174929d9ff76
-generated: "2025-12-03T23:41:18.74872215Z"
+  version: 1.23.2
+digest: sha256:f9196cbede894c6da6ecedd9ae05d3f1fd0e20304eca8ca38c18334a923b2235
+generated: "2025-12-07T02:54:29.895481505Z"

clusters/cl01tl/helm/element-web/Chart.yaml

@@ -22,6 +22,6 @@ dependencies:
   - name: cloudflared
     alias: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.23.1
+    version: 1.23.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/element.png
 appVersion: v1.11.100

clusters/cl01tl/helm/ephemera/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.4.0
-digest: sha256:9900009eb6415344d8c5387371a0052259092d92f34c21774f6a6abe9f11f43e
-generated: "2025-11-30T21:05:32.524168-06:00"
+  version: 4.5.0
+digest: sha256:b08b2d3923734ba8844754727803a4b4e1de2ad418c3f755ccd64927266c1b5c
+generated: "2025-12-05T17:04:04.30013278Z"

clusters/cl01tl/helm/ephemera/Chart.yaml

@@ -18,6 +18,6 @@ dependencies:
   - name: app-template
     alias: ephemera
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.5.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ephemera.png
 appVersion: 1.3.1

clusters/cl01tl/helm/external-secrets/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: external-secrets
   repository: https://charts.external-secrets.io
-  version: 1.1.0
-digest: sha256:543c98c4f4014f91b05c823444d87990dcdcd9710a0e5ccd953c5dc4e70006ee
-generated: "2025-12-01T20:25:40.642486-06:00"
+  version: 1.1.1
+digest: sha256:d346563864c95c4ca3fe5f04f6b292e417069d171f5866b5af0fe84277481493
+generated: "2025-12-06T18:01:23.564488208Z"

clusters/cl01tl/helm/external-secrets/Chart.yaml

@@ -12,7 +12,7 @@ sources:
   - https://github.com/external-secrets/external-secrets/tree/main/deploy/charts/external-secrets
 dependencies:
   - name: external-secrets
-    version: 1.1.0
+    version: 1.1.1
     repository: https://charts.external-secrets.io
 icon: https://avatars.githubusercontent.com/u/68335991?s=48&v=4
 appVersion: 0.17.0

clusters/cl01tl/helm/freshrss/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.4.0
+  version: 4.5.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.23.1
+  version: 1.23.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 6.16.1
-digest: sha256:e4d7c431d7c88cf31d53d611b4fe901fb68c11a2666e48d38ac40feb45b904b5
-generated: "2025-12-04T00:00:29.398819751Z"
+digest: sha256:d4b26fd1608a0c767c6ebb226173cef133ed53f45098851713121e429bc614a1
+generated: "2025-12-07T02:54:39.594902963Z"

clusters/cl01tl/helm/freshrss/Chart.yaml

@@ -20,11 +20,11 @@ dependencies:
   - name: app-template
     alias: freshrss
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.5.0
   - name: cloudflared
     alias: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.23.1
+    version: 1.23.2
   - name: postgres-cluster
     alias: postgres-17-cluster
     version: 6.16.1

clusters/cl01tl/helm/garage/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.4.0
-digest: sha256:7977708d7681e8d5cbc066bcda4241144b0c8b5b590be89a394740df167c90da
-generated: "2025-12-01T20:25:44.910074-06:00"
+  version: 4.5.0
+digest: sha256:36e920ce6efee3b33b40641652f814c888ae3c50272895ef286fb8236a010924
+generated: "2025-12-05T17:04:29.153093714Z"

clusters/cl01tl/helm/garage/Chart.yaml

@@ -17,6 +17,6 @@ dependencies:
   - name: app-template
     alias: garage
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.5.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 appVersion: v2.1.0

clusters/cl01tl/helm/gatus/values.yaml

@@ -140,6 +140,9 @@ gatus:
       - name: audiobookshelf
         url: https://audiobookshelf.alexlebens.net
         <<: *defaults
+      - name: booklore
+        url: https://booklore.alexlebens.net
+        <<: *defaults
       - name: home-assistant
         url: https://home-assistant.alexlebens.net
         <<: *defaults
@@ -176,6 +179,11 @@ gatus:
       - name: n8n
         url: https://n8n.alexlebens.net
         <<: *defaults
+      - name: kronic
+        url: https://kronic.alexlebens.net
+        <<: *defaults
+        conditions:
+          - "[STATUS] == 401"
       - name: omni-tools
         url: https://omni-tools.alexlebens.net
         <<: *defaults
@@ -245,6 +253,9 @@ gatus:
       - name: ceph
         url: https://ceph.alexlebens.net
         <<: *defaults
+      - name: garage
+        url: https://garage-webui.alexlebens.net
+        <<: *defaults
       - name: pgadmin
         url: https://pgadmin.alexlebens.net
         <<: *defaults
@@ -254,6 +265,29 @@ gatus:
       - name: vault
         url: https://vault.alexlebens.net
         <<: *defaults
+      - name: backrest
+        url: https://backrest.alexlebens.net
+        <<: *defaults
+      - name: qui
+        url: https://qui.alexlebens.net
+        <<: *defaults
+      - name: qbittorrent
+        url: https://qbittorrent.alexlebens.net
+        <<: *defaults
+      - name: prowlarr
+        url: https://prowlarr.alexlebens.net
+        <<: *defaults
+      - name: huntarr
+        url: https://huntarr.alexlebens.net
+        <<: *defaults
+      - name: bazarr
+        url: https://bazarr.alexlebens.net
+        <<: *defaults
+        conditions:
+          - "[STATUS] == 401"
+      - name: tdarr
+        url: https://tdarr.alexlebens.net
+        <<: *defaults
       - name: sonarr
         url: https://sonarr.alexlebens.net
         <<: *defaults
@@ -284,25 +318,11 @@ gatus:
       - name: slskd
         url: https://slskd.alexlebens.net
         <<: *defaults
-      - name: qui
-        url: https://qui.alexlebens.net
+      - name: ephemera
+        url: https://ephemera.alexlebens.net
         <<: *defaults
-      - name: qbittorrent
-        url: https://qbittorrent.alexlebens.net
-        <<: *defaults
-      - name: prowlarr
-        url: https://prowlarr.alexlebens.net
-        <<: *defaults
-      - name: bazarr
-        url: https://bazarr.alexlebens.net
-        <<: *defaults
-        conditions:
-          - "[STATUS] == 401"
-      - name: huntarr
-        url: https://huntarr.alexlebens.net
-        <<: *defaults
-      - name: tdarr
-        url: https://tdarr.alexlebens.net
+      - name: listenarr
+        url: https://listenarr.alexlebens.net
         <<: *defaults
       - name: www
         url: https://www.alexlebens.dev
@@ -347,24 +367,14 @@ gatus:
         url: https://codeserver.alexlebens.dev
         <<: *defaults
         group: external
+      - name: authentik
+        url: https://auth.alexlebens.dev
+        <<: *defaults
+        group: external
       - name: public homepage
         url: https://home.alexlebens.dev
         <<: *defaults
         group: external
-      - name: discord
-        group: public
-        url: https://discord.com/app
-        conditions:
-          - "[STATUS] == 200"
-          - "[RESPONSE_TIME] < 400"
-        interval: 10s
-      - name: reddit
-        group: public
-        url: https://reddit.com
-        conditions:
-          - "[STATUS] == 200"
-          - "[RESPONSE_TIME] < 400"
-        interval: 10s
 postgres-17-cluster:
   mode: recovery
   cluster:

clusters/cl01tl/helm/generic-device-plugin/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: generic-device-plugin
   repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-  version: 0.20.3
-digest: sha256:70771f4cfa2fa64d06b94cd60f51b1ae36da429232017954d77e675e1df39a56
-generated: "2025-12-03T00:32:22.249565107Z"
+  version: 0.20.4
+digest: sha256:4aa24e57233783f99d3de453f997ff4dddecaea729ab09b78745ee89ffa0e4a8
+generated: "2025-12-06T01:01:30.343689275Z"

clusters/cl01tl/helm/generic-device-plugin/Chart.yaml

@@ -15,6 +15,6 @@ maintainers:
 dependencies:
   - name: generic-device-plugin
     repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-    version: 0.20.3
+    version: 0.20.4
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 appVersion: 1.0.0

clusters/cl01tl/helm/gitea/Chart.lock

@@ -7,15 +7,15 @@ dependencies:
   version: 0.2.1
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.4.0
+  version: 4.5.0
 - name: meilisearch
   repository: https://meilisearch.github.io/meilisearch-kubernetes
   version: 0.17.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.23.1
+  version: 1.23.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 6.16.1
-digest: sha256:b753b6ab3bced4892f4a4662b4c353f1f59345e42f155aef06124e72b3e72468
-generated: "2025-12-04T00:01:03.661689761Z"
+digest: sha256:392636c97a9be96f21c70f9b53559398aa15e67a0cae551041ee64f23088b59a
+generated: "2025-12-07T02:54:49.861996743Z"

clusters/cl01tl/helm/gitea/Chart.yaml

@@ -34,14 +34,14 @@ dependencies:
   - name: app-template
     alias: backup
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.5.0
   - name: meilisearch
     version: 0.17.2
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: cloudflared
     alias: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.23.1
+    version: 1.23.2
   - name: postgres-cluster
     alias: postgres-17-cluster
     version: 6.16.1

clusters/cl01tl/helm/gitea/templates/service-monitor.yaml

@@ -12,8 +12,6 @@ spec:
     matchLabels:
       app.kubernetes.io/name: gitea
       app.kubernetes.io/instance: {{ .Release.Name }}
-    matchExpressions:
-      - { key: app.kubernetes.io/controller, operator: NotIn, values: [backup] }
   endpoints:
     - port: http
 

clusters/cl01tl/helm/gitea/values.yaml

@@ -174,6 +174,9 @@ gitea-actions:
 backup:
   global:
     fullnameOverride: gitea-backup
+    labels:
+      app.kubernetes.io/instance: gitea-backup
+      app.kubernetes.io/name: gitea-backup
   controllers:
     backup:
       type: cronjob

clusters/cl01tl/helm/headlamp/values.yaml

@@ -26,6 +26,9 @@ headlamp:
         - name: trivy
           source: https://artifacthub.io/packages/headlamp/headlamp-trivy/headlamp_trivy
           version: 0.3.1
+        - name: external-secrets-operator
+          source: https://artifacthub.io/packages/headlamp/external-secrets-operator-headlamp-plugin/external-secrets-operator
+          version: 0.1.0-beta7
       installOptions:
-        parallel: true
-        maxConcurrent: 2
+        parallel: false
+        maxConcurrent: 1

clusters/cl01tl/helm/home-assistant/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.4.0
-digest: sha256:ae6008e107c25dc25e6f595f783d137273207aeb06a8ece9fbba0d895cc0d729
-generated: "2025-11-30T21:07:04.566378-06:00"
+  version: 4.5.0
+digest: sha256:a1961e446ba4361fa5d7ae31260c2ce472f27d0d2de2170cc8303586ef5c33ac
+generated: "2025-12-05T17:04:59.022729608Z"

clusters/cl01tl/helm/home-assistant/Chart.yaml

@@ -18,6 +18,6 @@ dependencies:
   - name: app-template
     alias: home-assistant
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.5.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/home-assistant.png
 appVersion: 2025.5.2

clusters/cl01tl/helm/home-assistant/values.yaml

@@ -9,7 +9,7 @@ home-assistant:
         main:
           image:
             repository: ghcr.io/home-assistant/home-assistant
-            tag: 2025.12.0
+            tag: 2025.12.1
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/homepage-dev/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.4.0
+  version: 4.5.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.23.1
-digest: sha256:30b7ad7125b89026f6832679e083f746ef69424e6f1d3dce0cb4304f215ea375
-generated: "2025-12-03T06:03:31.055093376Z"
+  version: 1.23.2
+digest: sha256:fbfdebf734560044cfe5d2c4771b63cbcabc121d13c44b751f914877b5bdc83f
+generated: "2025-12-07T02:55:01.91141803Z"

clusters/cl01tl/helm/homepage-dev/Chart.yaml

@@ -18,10 +18,10 @@ dependencies:
   - name: app-template
     alias: homepage
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.5.0
   - name: cloudflared
     alias: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.23.1
+    version: 1.23.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/homepage.png
 appVersion: v1.2.0

clusters/cl01tl/helm/homepage/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.4.0
-digest: sha256:fe69d34709d7f0c3674453013c0e76d6064531134404de8f4e72fb509b98bcb0
-generated: "2025-11-30T21:07:05.997919-06:00"
+  version: 4.5.0
+digest: sha256:cbaccff17c1d80c4b9637a321d07f41960e66510edb83258254ebbbda08f82df
+generated: "2025-12-05T17:05:23.539922773Z"

clusters/cl01tl/helm/homepage/Chart.yaml

@@ -16,6 +16,6 @@ dependencies:
   - name: app-template
     alias: homepage
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.5.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/homepage.png
 appVersion: v1.2.0

clusters/cl01tl/helm/huntarr/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.4.0
-digest: sha256:23e60d425ef97edda213f29628f29adca4b82dd68c75f764fd83fd865acd8c70
-generated: "2025-11-30T21:07:08.851326-06:00"
+  version: 4.5.0
+digest: sha256:44805f836d7cfcd7511616ad0d93da02b3e6cfdb58d823f6dcf17b17bb47d3a1
+generated: "2025-12-05T17:05:35.445002111Z"

clusters/cl01tl/helm/huntarr/Chart.yaml

@@ -16,6 +16,6 @@ dependencies:
   - name: app-template
     alias: huntarr
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.5.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/huntarr.png
 appVersion: 7.0.0

clusters/cl01tl/helm/immich/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.4.0
+  version: 4.5.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 6.16.1
-digest: sha256:65d33f10a17d25234358734184d3bc637209a12dc5f2122a594efdb02df15b41
-generated: "2025-12-04T00:01:45.803341058Z"
+digest: sha256:fa72554b2aeb7710212e3cbff3f7d080d04ee205c4cee95f27f5e12cdeab78a9
+generated: "2025-12-05T17:05:47.565602786Z"

clusters/cl01tl/helm/immich/Chart.yaml

@@ -17,7 +17,7 @@ dependencies:
   - name: app-template
     alias: immich
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.5.0
   - name: postgres-cluster
     alias: postgres-17-cluster
     version: 6.16.1

clusters/cl01tl/helm/jellyfin/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.4.0
-digest: sha256:5394000890e1bcc83f94b138c148c591f6a091850e734acbd6e1e7d053469f38
-generated: "2025-11-30T21:07:11.924605-06:00"
+  version: 4.5.0
+digest: sha256:042995f7609eaf4036fa416dcdf60e9c7f3fb90a5614322f4e2f6cce17c236ff
+generated: "2025-12-05T17:05:59.576358789Z"

clusters/cl01tl/helm/jellyfin/Chart.yaml

@@ -20,6 +20,6 @@ dependencies:
   - name: app-template
     alias: jellyfin
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.5.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/jellyfin.png
 appVersion: 10.10.7

clusters/cl01tl/helm/jellystat/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.4.0
+  version: 4.5.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 6.16.1
-digest: sha256:d22093f32435743617e91c5e1453d6c9ce6846362925c96d5edd0500a2e9f53d
-generated: "2025-12-04T00:01:59.998640158Z"
+digest: sha256:6c8b6a56bcdad0ea3f8e998c28642deaf449a7a37aea8ba9616d88fcc6d2bc14
+generated: "2025-12-05T17:06:11.6747146Z"

clusters/cl01tl/helm/jellystat/Chart.yaml

@@ -18,7 +18,7 @@ dependencies:
   - name: app-template
     alias: jellystat
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.5.0
   - name: postgres-cluster
     alias: postgres-17-cluster
     version: 6.16.1

clusters/cl01tl/helm/karakeep/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.4.0
+  version: 4.5.0
 - name: meilisearch
   repository: https://meilisearch.github.io/meilisearch-kubernetes
   version: 0.17.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.23.1
-digest: sha256:c11fe08d5b2f088016d3752960cc7e8cb8cae040f77cf74975e24afcf349805c
-generated: "2025-12-03T23:42:04.01972761Z"
+  version: 1.23.2
+digest: sha256:c291962defb9fb8614db91ea3eef795b2bdf82e0364595a27cbd335e7f9a3179
+generated: "2025-12-07T02:55:11.250839916Z"

clusters/cl01tl/helm/karakeep/Chart.yaml

@@ -20,13 +20,13 @@ dependencies:
   - name: app-template
     alias: karakeep
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.5.0
   - name: meilisearch
     version: 0.17.2
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: cloudflared
     alias: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.23.1
+    version: 1.23.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/webp/karakeep.webp
 appVersion: 0.26.0

clusters/cl01tl/helm/kiwix/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.4.0
-digest: sha256:c49d66e1174d093c845498c6b88409b23f3392a93d00f8e029636a10080fc72d
-generated: "2025-11-30T21:07:17.110714-06:00"
+  version: 4.5.0
+digest: sha256:b44499c1cfa91da49eee310dbcedbe116628620c97666b0cde0f976be5638764
+generated: "2025-12-05T17:06:40.903530445Z"

clusters/cl01tl/helm/kiwix/Chart.yaml

@@ -16,6 +16,6 @@ dependencies:
   - name: app-template
     alias: kiwix
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.5.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kiwix-dark.png
 appVersion: 3.7.0

clusters/cl01tl/helm/komodo/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.4.0
+  version: 4.5.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 6.16.1
-digest: sha256:21c6f653942386f953fb2165351464a4cc08a64ba4c441896c23295635b1e93b
-generated: "2025-12-04T00:02:13.463643682Z"
+digest: sha256:39fd05347cf1189a1cafbbbed8531de082dc4fa989ec46f0ecab661c307d89ac
+generated: "2025-12-05T17:06:55.655563589Z"

clusters/cl01tl/helm/komodo/Chart.yaml

@@ -20,7 +20,7 @@ dependencies:
   - name: app-template
     alias: komodo
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.5.0
   - name: postgres-cluster
     alias: postgresql-17-fdb-cluster
     version: 6.16.1

clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: kube-prometheus-stack
   repository: oci://ghcr.io/prometheus-community/charts
-  version: 79.11.0
+  version: 79.12.0
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.4.0
-digest: sha256:d2539cec03ef75627d94ff85e55349d3c8c71de0227b4eb1caf3344869b91ae9
-generated: "2025-12-03T06:21:52.770404462Z"
+  version: 4.5.0
+digest: sha256:e7edbec86ffbb16885333a6e1eeffec5c336bed8c161c52165949987eca4392d
+generated: "2025-12-05T21:30:48.985834989Z"

clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml

@@ -19,11 +19,11 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: kube-prometheus-stack
-    version: 79.11.0
+    version: 79.12.0
     repository: oci://ghcr.io/prometheus-community/charts
   - name: app-template
     alias: ntfy-alertmanager
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.5.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/prometheus.png
 appVersion: v0.82.0

clusters/cl01tl/helm/kubelet-serving-cert-approver/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.4.0
-digest: sha256:3a7aa84837ff6fe008d5eb3b39aeafa0abb7be470db2b6aac78e190365a75c0c
-generated: "2025-12-02T17:18:28.155875-06:00"
+  version: 4.5.0
+digest: sha256:e4b65e3b2aa2c8906e1cbcf9ce6ed9d651fe379504e6e1f43e08d3cf401960f8
+generated: "2025-12-05T17:07:21.271934421Z"

clusters/cl01tl/helm/kubelet-serving-cert-approver/Chart.yaml

@@ -17,6 +17,6 @@ dependencies:
   - name: app-template
     alias: kubelet-serving-cert-approver
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.5.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 appVersion: 0.10.0

clusters/cl01tl/helm/kubelet-serving-cert-approver/values.yaml

@@ -38,7 +38,7 @@ kubelet-serving-cert-approver:
         main:
           image:
             repository: ghcr.io/alex1989hu/kubelet-serving-cert-approver
-            tag: 0.10.0
+            tag: 0.10.1
             pullPolicy: Always
           args:
             - serve

clusters/cl01tl/helm/kubernetes-cloudflare-ddns/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.4.0
-digest: sha256:78bc8a78724746e0fd60ad691ef3813db7987956351513986eddb609a9f55caf
-generated: "2025-12-01T20:26:22.770276-06:00"
+  version: 4.5.0
+digest: sha256:0c451621f21d5e2842f0d4883036c29509158bfe4b89936afc2a48f32e6e1a11
+generated: "2025-12-05T17:07:36.357616534Z"

clusters/cl01tl/helm/kubernetes-cloudflare-ddns/Chart.yaml

@@ -18,6 +18,6 @@ dependencies:
   - name: app-template
     alias: kubernetes-cloudflare-ddns
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.5.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/cloudflare.png
 appVersion: v2.0.0

clusters/cl01tl/helm/libation/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.4.0
-digest: sha256:ce61ef8a0f6fe0f17472f5c03d505be7ba7077f2d9211d43e743798622e15bca
-generated: "2025-11-30T21:07:18.443736-06:00"
+  version: 4.5.0
+digest: sha256:8b61638d4899377aae8f43d87bb4421ee5db7c66060ef80ee5e312b67fa9c893
+generated: "2025-12-05T17:07:48.196480722Z"

clusters/cl01tl/helm/libation/Chart.yaml

@@ -17,6 +17,6 @@ dependencies:
   - name: app-template
     alias: libation
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.5.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/libation.png
 appVersion: 12.4.3

clusters/cl01tl/helm/libation/values.yaml

@@ -16,7 +16,7 @@ libation:
         main:
           image:
             repository: rmcrackan/libation
-            tag: 12.8.0
+            tag: 12.8.1
             pullPolicy: IfNotPresent
           env:
             - name: SLEEP_TIME

clusters/cl01tl/helm/lidarr/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.4.0
+  version: 4.5.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 6.16.1
-digest: sha256:d5f01022bab45b50149c74d1aedcc636cad649d92bfeb1e5b4c32d0b20428d4a
-generated: "2025-12-04T00:02:27.103752082Z"
+digest: sha256:e13dd5117332240d6a3127ebd18ebc478014b87291b7807e48471980c439fd16
+generated: "2025-12-05T17:07:59.963348904Z"

clusters/cl01tl/helm/lidarr/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
   - name: app-template
     alias: lidarr
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.5.0
   - name: postgres-cluster
     alias: postgres-17-cluster
     version: 6.16.1

clusters/cl01tl/helm/lidatube/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.4.0
-digest: sha256:ad00ef6a3bd12d2a6a167838ec3922aeb386e2a9efd260f4f8cce8964e5bf7b5
-generated: "2025-11-30T21:07:21.451781-06:00"
+  version: 4.5.0
+digest: sha256:486139f48e88e912593a7ee18973bc4872a6ddc4881fcfa933558f5a7749503b
+generated: "2025-12-05T17:08:12.627557611Z"

clusters/cl01tl/helm/lidatube/Chart.yaml

@@ -17,6 +17,6 @@ dependencies:
   - name: app-template
     alias: lidatube
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.5.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/lidatube.png
 appVersion: 0.2.22

clusters/cl01tl/helm/listenarr/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.4.0
-digest: sha256:8cd26f322d08777301e6c080ca9faa09a2fabda5c3f8bba6536d67496149ae4b
-generated: "2025-11-30T21:07:22.794237-06:00"
+  version: 4.5.0
+digest: sha256:1f215356d77b524ae23c0bb178d48fd2d602d9224dd7459658628903ff5b6e4c
+generated: "2025-12-05T17:08:24.614701742Z"

clusters/cl01tl/helm/listenarr/Chart.yaml

@@ -16,5 +16,5 @@ dependencies:
   - name: app-template
     alias: listenarr
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.5.0
 appVersion: 0.2.35

clusters/cl01tl/helm/matrix-synapse/Chart.lock

@@ -4,15 +4,15 @@ dependencies:
   version: 3.12.16
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.4.0
+  version: 4.5.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.23.1
+  version: 1.23.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.23.1
+  version: 1.23.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 6.16.1
-digest: sha256:1bf6e5f4693930d4f0ee8753eae5afee055894f01ddbefbae969bf834c8cad99
-generated: "2025-12-04T00:02:43.058364936Z"
+digest: sha256:a90f6deb880962f642cac44608c3741af25c109464a62c9faf2f4552bfd2b920
+generated: "2025-12-07T02:55:22.440509182Z"

clusters/cl01tl/helm/matrix-synapse/Chart.yaml

@@ -33,7 +33,7 @@ dependencies:
     repository: https://ananace.gitlab.io/charts
   - name: app-template
     alias: matrix-hookshot
-    version: 4.4.0
+    version: 4.5.0
     repository: https://bjw-s-labs.github.io/helm-charts/
   # - name: app-template
   #   alias: mautrix-discord
@@ -45,11 +45,11 @@ dependencies:
   #   version: 4.0.1
   - name: cloudflared
     alias: cloudflared-synapse
-    version: 1.23.1
+    version: 1.23.2
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: cloudflared
     alias: cloudflared-hookshot
-    version: 1.23.1
+    version: 1.23.2
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: postgres-cluster
     alias: postgres-17-cluster

clusters/cl01tl/helm/n8n/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.4.0
+  version: 4.5.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 6.16.1
-digest: sha256:e1dfc9657a3d926d9ba82f3bab3a56c9b737e9d43470c84167914b658c659ea3
-generated: "2025-12-04T00:03:06.662631361Z"
+digest: sha256:f28f03e897568059ef8ae80658a2c4365bd8a5c8f70d474cbcd83a16b613b0a3
+generated: "2025-12-05T17:08:54.133157468Z"

clusters/cl01tl/helm/n8n/Chart.yaml

@@ -18,7 +18,7 @@ dependencies:
   - name: app-template
     alias: n8n
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.5.0
   - name: postgres-cluster
     alias: postgres-17-cluster
     version: 6.16.1

clusters/cl01tl/helm/n8n/values.yaml

@@ -9,7 +9,7 @@ n8n:
         main:
           image:
             repository: ghcr.io/n8n-io/n8n
-            tag: 1.123.1
+            tag: 1.123.3
             pullPolicy: IfNotPresent
           env:
             - name: GENERIC_TIMEZONE
@@ -93,7 +93,7 @@ n8n:
         main:
           image:
             repository: ghcr.io/n8n-io/n8n
-            tag: 1.123.1
+            tag: 1.123.3
             pullPolicy: IfNotPresent
           command:
             - n8n
@@ -188,7 +188,7 @@ n8n:
         main:
           image:
             repository: ghcr.io/n8n-io/n8n
-            tag: 1.123.1
+            tag: 1.123.3
             pullPolicy: IfNotPresent
           command:
             - n8n

clusters/cl01tl/helm/ntfy/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.4.0
-digest: sha256:f33a3c215120b358ff86b84ad1e183e6bf46606715d9c59fbb2661fa68f4f661
-generated: "2025-12-01T20:26:45.731335-06:00"
+  version: 4.5.0
+digest: sha256:43255b355a463c0742141b11cf7f8f1dec77d383a2c8df0453b4955a4e99a29b
+generated: "2025-12-05T17:09:07.310474906Z"

clusters/cl01tl/helm/ntfy/Chart.yaml

@@ -17,6 +17,6 @@ dependencies:
   - name: app-template
     alias: ntfy
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.5.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ntfy.png
 appVersion: 2.11.0

clusters/cl01tl/helm/ollama/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.4.0
+  version: 4.5.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 6.16.1
-digest: sha256:acb3614df881e62f4e0c9ae21a09353cfd731beae376bba0461f834abb84b070
-generated: "2025-12-04T00:03:18.892421017Z"
+digest: sha256:bc32b8354d476d19aae88c19cccf94ae87cb43dc23cff38c261b1784f3774e75
+generated: "2025-12-05T17:09:19.594547529Z"

clusters/cl01tl/helm/ollama/Chart.yaml

@@ -20,7 +20,7 @@ dependencies:
   - name: app-template
     alias: ollama
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.5.0
   - name: postgres-cluster
     alias: postgres-17-cluster
     version: 6.16.1

clusters/cl01tl/helm/omni-tools/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.4.0
-digest: sha256:2742827fee3fb1d07cd96db1ae82dbf206d24dd5d326ba2702508de42e3dccb2
-generated: "2025-11-30T21:07:24.477661-06:00"
+  version: 4.5.0
+digest: sha256:357cecaeffea1ca1fc074e02c37fc9f75401b99004eaefddebf4d3b341ccea41
+generated: "2025-12-05T17:09:32.271705845Z"

clusters/cl01tl/helm/omni-tools/Chart.yaml

@@ -15,6 +15,6 @@ dependencies:
   - name: app-template
     alias: omni-tools
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.5.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/omnitools.png
 appVersion: 0.4.0

clusters/cl01tl/helm/outline/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.4.0
+  version: 4.5.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.23.1
+  version: 1.23.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 6.16.1
-digest: sha256:fdf82a6c450624d70404817e92d96626b87ee5c011215ca3c15338c6c3d9b181
-generated: "2025-12-04T00:03:31.441035529Z"
+digest: sha256:6ef789f9db4ad00ce2178a138c3c39a4e90eaef1e4244f52282bc0cb3094f4f5
+generated: "2025-12-07T02:55:32.91116723Z"

clusters/cl01tl/helm/outline/Chart.yaml

@@ -21,11 +21,11 @@ dependencies:
   - name: app-template
     alias: outline
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.5.0
   - name: cloudflared
     alias: cloudflared-outline
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.23.1
+    version: 1.23.2
   - name: postgres-cluster
     alias: postgres-17-cluster
     version: 6.16.1

clusters/cl01tl/helm/overseerr/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.4.0
-digest: sha256:9d2b5e1862aa2d9336884874aba6a11624a26b2fb0f98329b0b90f3426d61c4d
-generated: "2025-11-30T21:07:27.498925-06:00"
+  version: 4.5.0
+digest: sha256:3a9b033f8dfc4f284b0ac69e80a84e58c80c4c3197b49ae96d07f4175f510cf4
+generated: "2025-12-05T17:09:56.094860975Z"