enable local

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/karakeep-app/karakeep](https://github.com/karakeep-app/karakeep) | minor | `0.29.3` → `0.30.0` |

---

### Release Notes

<details>
<summary>karakeep-app/karakeep (ghcr.io/karakeep-app/karakeep)</summary>

### [`v0.30.0`](https://github.com/karakeep-app/karakeep/releases/tag/v0.30.0): 0.30.0

[Compare Source](https://github.com/karakeep-app/karakeep/compare/v0.29.3...v0.30.0)

### 0.30.0 (New year release 🎁)

Welcome to the 0.30.0 release of Karakeep and happy new year! This release comes with "2025 wrapped" (a bit late), PDF archives, new reader settings, avatars, reddit crawling improvements, and more! Huge thanks to our contributors for this release [@&#8203;esimkowitz](https://github.com/esimkowitz), [@&#8203;Moondragon85](https://github.com/Moondragon85), [@&#8203;rzxczxc](https://github.com/rzxczxc), [@&#8203;colado](https://github.com/colado), [@&#8203;Yeraze](https://github.com/Yeraze), [@&#8203;eriktews](https://github.com/eriktews) and everyone who shipped code, triaged bugs, or shared feedback for this release.

> If you enjoy using Karakeep, consider supporting the project [here ☕️](https://buymeacoffee.com/mbassem) or via GitHub [here](https://github.com/sponsors/MohamedBassem).

<a href="https://www.buymeacoffee.com/mbassem" target="_blank"><img src="https://cdn.buymeacoffee.com/buttons/v2/default-yellow.png" alt="Buy Me A Coffee" width="auto" height="50" ></a>

And in case you missed it, we now have a ☁️ managed offering ☁️ for those who don't want to self-host. We're in public beta now and you can signup [here](https://cloud.karakeep.app) 🎉.

### New Features 🚀

- 2025 Wrapped is here to celebrate your year in Karakeep ([#&#8203;2322](https://github.com/karakeep-app/karakeep/issues/2322)).
- PDF archives
  - Archive bookmarks as PDFs, generated automatically during crawling or on-demand ([#&#8203;2309](https://github.com/karakeep-app/karakeep/issues/2309)).
  - Set `CRAWLER_STORE_PDF=true` to enable auto PDF archiving.
- Unified reader settings (font, size, etc) across all devices with per-device overrides ([#&#8203;2230](https://github.com/karakeep-app/karakeep/issues/2230)). By [@&#8203;esimkowitz](https://github.com/esimkowitz)!
- Better metadata extraction:
  - Reddit posts should now be crawled correctly, and banners should be fetched more reliably.
  - Fixed YouTube thumbnail and author extraction.
  - Fixed Amazon product image extraction (where it was sometimes showing the prime logo) ([#&#8203;2204](https://github.com/karakeep-app/karakeep/issues/2204), [#&#8203;2108](https://github.com/karakeep-app/karakeep/issues/2108)). By [@&#8203;Yeraze](https://github.com/Yeraze)
- Upload custom user avatars for more personal profiles ([#&#8203;2296](https://github.com/karakeep-app/karakeep/issues/2296)).
- AI Setting customization:
  - Customize tag styling (case, separators, language) per user. It's highly recommended to set the tag style for more consistent tags ([#&#8203;2312](https://github.com/karakeep-app/karakeep/issues/2312)).
  - Per-user toggles to disable auto-tagging and/or auto-summarization ([#&#8203;2275](https://github.com/karakeep-app/karakeep/issues/2275)).
- Others:
  - Import libraries from Matter with full export support ([#&#8203;2245](https://github.com/karakeep-app/karakeep/issues/2245)). By [@&#8203;Moondragon85](https://github.com/Moondragon85)
  - Bulk remove bookmarks from lists ([#&#8203;2279](https://github.com/karakeep-app/karakeep/issues/2279)).
  - Add a new rule condition to rule engine: "URL Does Not Contain" ([#&#8203;2280](https://github.com/karakeep-app/karakeep/issues/2280)).
  - Configure an OpenAI proxy via `OPENAI_PROXY_URL` ([#&#8203;2231](https://github.com/karakeep-app/karakeep/issues/2231)). By [@&#8203;rzxczxc](https://github.com/rzxczxc)
  - Added `is:broken` search qualifier to show links that failed crawling ([#&#8203;2225](https://github.com/karakeep-app/karakeep/issues/2225)).
  - Edit list now in the mobile app ([#&#8203;2310](https://github.com/karakeep-app/karakeep/issues/2310)). By [@&#8203;colado](https://github.com/colado)

### UX Improvements ✨

- Our docs got a facelift! The docs got some styling, the pages got re-organized and we now have a "Using Karakeep" section that explains some of the core concepts of Karakeep.
- Replace bookmark banners and download attachments directly from the drop down menu ([#&#8203;2328](https://github.com/karakeep-app/karakeep/issues/2328)).
- Sidebar scrollbar looks cleaner, and pending list invites show as a badge in the sidebar.
- Bookmark edit dialog now includes notes.
- Bookmark owner avatars now show up in collaborative lists.
- Mobile UI/UX improvements:
  - Fixed title on mobile to be at most 2 lines long.
  - Mobile settings screens should now feel more native ([#&#8203;2307](https://github.com/karakeep-app/karakeep/issues/2307)).
  - OLED-friendly colors in the Android app matching the colors of the ios app ([#&#8203;1958](https://github.com/karakeep-app/karakeep/issues/1958)).
  - Toasts on iOS now appear correctly above the open modals ([#&#8203;2320](https://github.com/karakeep-app/karakeep/issues/2320)). By [@&#8203;colado](https://github.com/colado)
  - Shared lists now appear in a dedicated subsection on mobile.
  - Adding a bookmark to a list now shows a spinner during loading ([#&#8203;2283](https://github.com/karakeep-app/karakeep/issues/2283)).
  - Server version now appears in mobile settings ([#&#8203;2276](https://github.com/karakeep-app/karakeep/issues/2276)).
  - Fixed the confusing "tick button" beside the server address during login.

### Fixes 🔧

- Fixed missing db indicies that was causing slow bookmark queries ([#&#8203;2246](https://github.com/karakeep-app/karakeep/issues/2246), [#&#8203;2287](https://github.com/karakeep-app/karakeep/issues/2287)).
- Improved Ollama summaries by using the generate endpoint ([#&#8203;2324](https://github.com/karakeep-app/karakeep/issues/2324)). By [@&#8203;eriktews](https://github.com/eriktews)
- Fixed HTML bookmark imports failing on empty folder names ([#&#8203;2300](https://github.com/karakeep-app/karakeep/issues/2300)).
- Fixed non-link bookmarks stuck in pending summarization ([#&#8203;1605](https://github.com/karakeep-app/karakeep/issues/1605)).
- Improved tagging prompts and error-page detection.
- Reject spoofed content types on file uploads.
- Preserve failure counts when rescheduling rate-limited domains ([#&#8203;2303](https://github.com/karakeep-app/karakeep/issues/2303)).
- Fixed duplicate backdrop buttons in reader view ([#&#8203;2234](https://github.com/karakeep-app/karakeep/issues/2234)). By [@&#8203;colado](https://github.com/colado)
- RSS feed fetching is now spread over the hour ([#&#8203;2227](https://github.com/karakeep-app/karakeep/issues/2227)).
- Asset preprocessing worker timeout is now configurable ([`91784cd`](https://github.com/karakeep-app/karakeep/commit/91784cd2)).
- Fixed bypassing email verification in apiKey.exchange.
- Added limits on number of rss feeds and webhooks per user configurable by admins.
- Fixed a bug where failed crawling leave bookmarks as pending tagging in the admin dashboard.

### For Developers 🛠️

- OpenTelemetry integration with OTLP exporter ([#&#8203;2318](https://github.com/karakeep-app/karakeep/issues/2318), [#&#8203;2321](https://github.com/karakeep-app/karakeep/issues/2321)).
- CLI can list users for admins.
- We're now defaulting to Node.js 24 (the current LTS).
- Breaking: In bookmark APIs `includeContent` now defaults to `false`. This change was announced a couple months ago, and is taking effect in this release.

### Community Projects 💡

- Karakeep integration for Home Assistant ([#&#8203;2196](https://github.com/karakeep-app/karakeep/issues/2196)) by [@&#8203;sli-cka](https://github.com/sli-cka). Get it from [here](https://github.com/sli-cka/karakeep-homeassistant).

### Screenshots 📸

#### Wrapped 2025

![karakeep-wrapped-2025](https://github.com/user-attachments/assets/0e1e3d25-c827-4974-8f0a-9b7b4a75f859)

#### Reader Settings

![https://github.com/user-attachments/assets/4d81cb80-f9b8-43f2-998a-736f18e33038](https://github.com/user-attachments/assets/4d81cb80-f9b8-43f2-998a-736f18e33038).

##### AI Settings

![https://github.com/user-attachments/assets/48032bf6-5413-44ee-9c3b-ac7b385aeccf](https://github.com/user-attachments/assets/48032bf6-5413-44ee-9c3b-ac7b385aeccf)

### Upgrading 📦

To upgrade:

- If you're using `KARAKEEP_VERSION=release`, run `docker compose pull && docker compose up -d`.
- If you're pinning it to a specific version, bump the version and then run `docker compose pull && docker compose up -d`.

### All Commits

- i18n: fix en\_US translation - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`d472a3a`](https://github.com/karakeep-app/karakeep/commit/d472a3a1)
- fix: fix wrapped feature to only show bookmarks in 2025 - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`4077e28`](https://github.com/karakeep-app/karakeep/commit/4077e286)
- i18n: Sync weblate translations - Weblate in [`401ea6a`](https://github.com/karakeep-app/karakeep/commit/401ea6a9)
- chore: drop the experimental tag from the rule engine - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`bf9d610`](https://github.com/karakeep-app/karakeep/commit/bf9d6105)
- fix: show a toast during banner upload - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`9555f40`](https://github.com/karakeep-app/karakeep/commit/9555f409)
- fix: don't switch the bookmark back to pending on recrawl - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`79400d0`](https://github.com/karakeep-app/karakeep/commit/79400d04)
- fix: use the Ollama generate endpoint instead of chat ([#&#8203;2324](https://github.com/karakeep-app/karakeep/issues/2324)) - [@&#8203;eriktews](https://github.com/eriktews) in [`e8c79f2`](https://github.com/karakeep-app/karakeep/commit/e8c79f29)
- feat: add replace banner and attachment download ([#&#8203;2328](https://github.com/karakeep-app/karakeep/issues/2328)) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`3d652ee`](https://github.com/karakeep-app/karakeep/commit/3d652eee)
- feat: Add bulk remove from list ([#&#8203;2279](https://github.com/karakeep-app/karakeep/issues/2279)) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`7a76216`](https://github.com/karakeep-app/karakeep/commit/7a76216e)
- feat: add "URL Does Not Contain" condition to rule engine ([#&#8203;2280](https://github.com/karakeep-app/karakeep/issues/2280)) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`b20ba9c`](https://github.com/karakeep-app/karakeep/commit/b20ba9cf)
- feat: 2025 wrapped ([#&#8203;2322](https://github.com/karakeep-app/karakeep/issues/2322)) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`a0b4a26`](https://github.com/karakeep-app/karakeep/commit/a0b4a26a)
- chore: worker tracing ([#&#8203;2321](https://github.com/karakeep-app/karakeep/issues/2321)) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`7ab7db8`](https://github.com/karakeep-app/karakeep/commit/7ab7db8e)
- feat(landing): add corporate pricing - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`d852ee1`](https://github.com/karakeep-app/karakeep/commit/d852ee1a)
- fix(mobile): mobile modal UI issues ([#&#8203;2320](https://github.com/karakeep-app/karakeep/issues/2320)) - [@&#8203;colado](https://github.com/colado) in [`a43d375`](https://github.com/karakeep-app/karakeep/commit/a43d375f)
- ci: fix tests - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`9d6b128`](https://github.com/karakeep-app/karakeep/commit/9d6b1282)
- feat: change default for tag style to be title case with spaces - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`9098a5a`](https://github.com/karakeep-app/karakeep/commit/9098a5a6)
- fix: more tagging tweaks - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`c1cbaa8`](https://github.com/karakeep-app/karakeep/commit/c1cbaa8a)
- build: fix broken CI - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`a5ce977`](https://github.com/karakeep-app/karakeep/commit/a5ce977d)
- fix: change prompt to better recognize error pages - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`f5a5c14`](https://github.com/karakeep-app/karakeep/commit/f5a5c14e)
- refactor: reduce duplication in compare-models tool - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`f00287e`](https://github.com/karakeep-app/karakeep/commit/f00287ed)
- chore: add tracing for email functions - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`ba8d84a`](https://github.com/karakeep-app/karakeep/commit/ba8d84a5)
- feat(mobile): create new list edit screen ([#&#8203;2310](https://github.com/karakeep-app/karakeep/issues/2310)) - [@&#8203;colado](https://github.com/colado) in [`30fa06f`](https://github.com/karakeep-app/karakeep/commit/30fa06fe)
- feat: Add open telemetry ([#&#8203;2318](https://github.com/karakeep-app/karakeep/issues/2318)) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`5537fe8`](https://github.com/karakeep-app/karakeep/commit/5537fe85)
- fix: reset tagging status on crawl failure  ([#&#8203;2316](https://github.com/karakeep-app/karakeep/issues/2316)) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`f7920bd`](https://github.com/karakeep-app/karakeep/commit/f7920bdc)
- feat: add the ability to specify a different changelog version - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`1082076`](https://github.com/karakeep-app/karakeep/commit/10820761)
- fix: remove duplicate mobile backdrop button in reader view ([#&#8203;2234](https://github.com/karakeep-app/karakeep/issues/2234)) - [@&#8203;esimkowitz](https://github.com/esimkowitz) in [`3f44e31`](https://github.com/karakeep-app/karakeep/commit/3f44e319)
- fix(landing): fix cloud banner on mobile - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`23f2853`](https://github.com/karakeep-app/karakeep/commit/23f28530)
- refactor: add suspense boundary in sidebar layout - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`3c3d868`](https://github.com/karakeep-app/karakeep/commit/3c3d8685)
- feat(mobile): make the settings menu look more native ([#&#8203;2307](https://github.com/karakeep-app/karakeep/issues/2307)) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`6ee48ff`](https://github.com/karakeep-app/karakeep/commit/6ee48ffb)
- feat(web): better looking scrollbar in the sidebar - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`f7523a2`](https://github.com/karakeep-app/karakeep/commit/f7523a21)
- feat(mobile): use oled friendly colors for android app. fixes [#&#8203;1958](https://github.com/karakeep-app/karakeep/issues/1958) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`e800d74`](https://github.com/karakeep-app/karakeep/commit/e800d744)
- refactor: migrate toasts to sonner - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`173fb99`](https://github.com/karakeep-app/karakeep/commit/173fb99a)
- feat: add customizable tag styles ([#&#8203;2312](https://github.com/karakeep-app/karakeep/issues/2312)) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`af3010a`](https://github.com/karakeep-app/karakeep/commit/af3010ab)
- feat: add Matter import support ([#&#8203;2245](https://github.com/karakeep-app/karakeep/issues/2245)) - [@&#8203;Moondragon85](https://github.com/Moondragon85) in [`93630ce`](https://github.com/karakeep-app/karakeep/commit/93630ce8)
- feat: support archiving as pdf ([#&#8203;2309](https://github.com/karakeep-app/karakeep/issues/2309)) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`267db79`](https://github.com/karakeep-app/karakeep/commit/267db791)
- feat: add OPENAI\_PROXY\_URL configuration and support for proxy in OpenAI client ([#&#8203;2231](https://github.com/karakeep-app/karakeep/issues/2231)) - [@&#8203;rzxczxc](https://github.com/rzxczxc) in [`bb6b742`](https://github.com/karakeep-app/karakeep/commit/bb6b742a)
- fix(tests): fix the asset upload tests - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`e82694d`](https://github.com/karakeep-app/karakeep/commit/e82694de)
- fix: reject spoofed content types on uploads - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`2dbdf76`](https://github.com/karakeep-app/karakeep/commit/2dbdf76c)
- deps: upgrade tesseract to v7 - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`347793a`](https://github.com/karakeep-app/karakeep/commit/347793ad)
- feat(landing): announce cloud public beta in landing page - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`c3b2326`](https://github.com/karakeep-app/karakeep/commit/c3b2326c)
- chore: add a tool for comparing perf of different models - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`1dfa5d1`](https://github.com/karakeep-app/karakeep/commit/1dfa5d12)
- feat: add notes to the bookmark edit dialog - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`ecb7a71`](https://github.com/karakeep-app/karakeep/commit/ecb7a710)
- fix(restate): change journal retention for services to 3d - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`0efffdc`](https://github.com/karakeep-app/karakeep/commit/0efffdcc)
- fix(cli): migrate bookmark source in migration command - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`65cfa87`](https://github.com/karakeep-app/karakeep/commit/65cfa871)
- fix: preserve failure count when rescheduling rate limited domains ([#&#8203;2303](https://github.com/karakeep-app/karakeep/issues/2303)) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`ddd4b57`](https://github.com/karakeep-app/karakeep/commit/ddd4b578)
- feat: show bookmark owner icon in shared lists ([#&#8203;2277](https://github.com/karakeep-app/karakeep/issues/2277)) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`ef27670`](https://github.com/karakeep-app/karakeep/commit/ef27670f)
- fix: make avatars public - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`f7d3462`](https://github.com/karakeep-app/karakeep/commit/f7d34627)
- refactor: move assets to their own model ([#&#8203;2301](https://github.com/karakeep-app/karakeep/issues/2301)) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`013ca67`](https://github.com/karakeep-app/karakeep/commit/013ca67c)
- feat: add support for user avatars ([#&#8203;2296](https://github.com/karakeep-app/karakeep/issues/2296)) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`314c363`](https://github.com/karakeep-app/karakeep/commit/314c363e)
- fix: handle empty folder names in HTML bookmark imports ([#&#8203;2300](https://github.com/karakeep-app/karakeep/issues/2300)) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`3408e6e`](https://github.com/karakeep-app/karakeep/commit/3408e6e4)
- feat: add a warning about viewing archives inline. fixes [#&#8203;2286](https://github.com/karakeep-app/karakeep/issues/2286) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`e336513`](https://github.com/karakeep-app/karakeep/commit/e336513f)
- fix(tests): fix the user setting tests - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`258bebe`](https://github.com/karakeep-app/karakeep/commit/258bebe0)
- feat: Add user settings to disable auto tagging/summarization ([#&#8203;2275](https://github.com/karakeep-app/karakeep/issues/2275)) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`0bdba54`](https://github.com/karakeep-app/karakeep/commit/0bdba54b)
- feat(mobile): Convert server address editing to modal in mobile app ([#&#8203;2290](https://github.com/karakeep-app/karakeep/issues/2290)) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`ece68ed`](https://github.com/karakeep-app/karakeep/commit/ece68ed0)
- fix: check quota usage instead bookmark transaction - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`ca4bfa4`](https://github.com/karakeep-app/karakeep/commit/ca4bfa4c)
- fix: optimize tagging db queries ([#&#8203;2287](https://github.com/karakeep-app/karakeep/issues/2287)) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`e18dc4c`](https://github.com/karakeep-app/karakeep/commit/e18dc4c9)
- docs: shuffle some docs around - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`4762da1`](https://github.com/karakeep-app/karakeep/commit/4762da12)
- docs: add RSS feeds integration documentation ([#&#8203;2288](https://github.com/karakeep-app/karakeep/issues/2288)) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`903aa5e`](https://github.com/karakeep-app/karakeep/commit/903aa5e9)
- feat(restate): Add a var to control whether to expose core services or not - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`dc8ab86`](https://github.com/karakeep-app/karakeep/commit/dc8ab862)
- feat: add more restate semaphore controls - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`58eb6c0`](https://github.com/karakeep-app/karakeep/commit/58eb6c00)
- feat(mobile): Show shared lists under a subsection - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`837dea5`](https://github.com/karakeep-app/karakeep/commit/837dea5e)
- fix(mobile): Fix title line clamp to 2 lines - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`15cfa13`](https://github.com/karakeep-app/karakeep/commit/15cfa137)
- fix(mobile): Add loading spinner to mobile list button ([#&#8203;2283](https://github.com/karakeep-app/karakeep/issues/2283)) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`7b98c52`](https://github.com/karakeep-app/karakeep/commit/7b98c52a)
- feat: add server version display to mobile app settings ([#&#8203;2276](https://github.com/karakeep-app/karakeep/issues/2276)) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`bd969b3`](https://github.com/karakeep-app/karakeep/commit/bd969b34)
- fix: add authentication checks to settings layout ([#&#8203;2274](https://github.com/karakeep-app/karakeep/issues/2274)) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`e53f3ae`](https://github.com/karakeep-app/karakeep/commit/e53f3ae5)
- fix: only trigger search autocomplete on first search char - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`92e352f`](https://github.com/karakeep-app/karakeep/commit/92e352f3)
- feat(landing): remove waitlist link. fixes [#&#8203;2270](https://github.com/karakeep-app/karakeep/issues/2270) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`e842c5a`](https://github.com/karakeep-app/karakeep/commit/e842c5a7)
- fix: don't fail the script if the user karakeep already exists. fixes [#&#8203;2242](https://github.com/karakeep-app/karakeep/issues/2242) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`e78e512`](https://github.com/karakeep-app/karakeep/commit/e78e5129)
- fix: collapse reader settings by default - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`3955f91`](https://github.com/karakeep-app/karakeep/commit/3955f91a)
- docs: Add icons beside category names - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`9021822`](https://github.com/karakeep-app/karakeep/commit/9021822a)
- Revert "fix: fix restate service to return control to restate service on timeout" - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`510174d`](https://github.com/karakeep-app/karakeep/commit/510174db)
- feat: Add unified reader settings with local overrides ([#&#8203;2230](https://github.com/karakeep-app/karakeep/issues/2230)) - [@&#8203;esimkowitz](https://github.com/esimkowitz) in [`7f4202a`](https://github.com/karakeep-app/karakeep/commit/7f4202af)
- fix: fix restate service to return control to restate service on timeout - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`6db14ac`](https://github.com/karakeep-app/karakeep/commit/6db14ac4)
- fix: non-link bookmarks where stuck in pending summarization. Fixes [#&#8203;1605](https://github.com/karakeep-app/karakeep/issues/1605) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`d735711`](https://github.com/karakeep-app/karakeep/commit/d7357118)
- fix: move trpc error logging inside the dev check - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`0b65e5a`](https://github.com/karakeep-app/karakeep/commit/0b65e5a4)
- fix: Fix Amazon product image extraction on amazon.com URLs ([#&#8203;2108](https://github.com/karakeep-app/karakeep/issues/2108)) - [@&#8203;Yeraze](https://github.com/Yeraze) in [`b319635`](https://github.com/karakeep-app/karakeep/commit/b3196354)
- feat: use reddit API for metadata extraction. Fixes [#&#8203;1853](https://github.com/karakeep-app/karakeep/issues/1853) [#&#8203;1883](https://github.com/karakeep-app/karakeep/issues/1883) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`f5c32d9`](https://github.com/karakeep-app/karakeep/commit/f5c32d94)
- fix: use GET requests for the content type request - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`d6dd8eb`](https://github.com/karakeep-app/karakeep/commit/d6dd8ebd)
- docs: fix sidebar on mobile - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`f111cba`](https://github.com/karakeep-app/karakeep/commit/f111cba9)
- feat: Add limits on number of rss feeds and webhooks per user - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`74df8bd`](https://github.com/karakeep-app/karakeep/commit/74df8bd7)
- release(cli): Bump CLI version to 0.29.1 - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`697c853`](https://github.com/karakeep-app/karakeep/commit/697c853a)
- readme: some readme updates - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`1ebc721`](https://github.com/karakeep-app/karakeep/commit/1ebc721c)
- docs: Update screenshots in docs - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`c6cf418`](https://github.com/karakeep-app/karakeep/commit/c6cf4188)
- docs: Adding user guides - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`04b9c29`](https://github.com/karakeep-app/karakeep/commit/04b9c291)
- docs: drop docs for old versions - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`fecb007`](https://github.com/karakeep-app/karakeep/commit/fecb0079)
- docs: restructure the docs - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`af69f63`](https://github.com/karakeep-app/karakeep/commit/af69f637)
- docs: restyle the docs - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`b434440`](https://github.com/karakeep-app/karakeep/commit/b4344401)
- ci: run CI with node 24 - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`2bdba53`](https://github.com/karakeep-app/karakeep/commit/2bdba536)
- deps: Upgrade to nodejs 24 - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`480abce`](https://github.com/karakeep-app/karakeep/commit/480abce4)
- fix!: changing default for includeContent to be false in the API - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`1369ad0`](https://github.com/karakeep-app/karakeep/commit/1369ad01)
- deps: Upgrade nextjs to 15.3.8 - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`80278ec`](https://github.com/karakeep-app/karakeep/commit/80278ecf)
- deps: Upgrade nextjs to 15.3.7 - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`74bdc18`](https://github.com/karakeep-app/karakeep/commit/74bdc186)
- fix: add more indicies for faster bookmark queries ([#&#8203;2246](https://github.com/karakeep-app/karakeep/issues/2246)) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`683083f`](https://github.com/karakeep-app/karakeep/commit/683083f4)
- feat: make asset preprocessing worker timeout configurable - [@&#8203;Claude](https://github.com/Claude) in [`91784cd`](https://github.com/karakeep-app/karakeep/commit/91784cd2)
- fix: Add cache control header on asset endpoints - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`3e8cc74`](https://github.com/karakeep-app/karakeep/commit/3e8cc745)
- chore: Allowing multi user benchmarks and adding more coverage - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`265b677`](https://github.com/karakeep-app/karakeep/commit/265b6773)
- feat(cli): Add ability to list users for the admin in the CLI - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`69a756a`](https://github.com/karakeep-app/karakeep/commit/69a756aa)
- fix: fix correctly accounting for text bookmark in import sessions. [#&#8203;2208](https://github.com/karakeep-app/karakeep/issues/2208) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`6886385`](https://github.com/karakeep-app/karakeep/commit/6886385c)
- fix: check import quota before importing bookmarks ([#&#8203;2232](https://github.com/karakeep-app/karakeep/issues/2232)) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`20d3761`](https://github.com/karakeep-app/karakeep/commit/20d3761c)
- build: fix typecheck error in query explainer - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`b6c2dad`](https://github.com/karakeep-app/karakeep/commit/b6c2dadd)
- fix: migrate to metascraper-x from metascraper-twitter - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`c6f93b3`](https://github.com/karakeep-app/karakeep/commit/c6f93b3b)
- feat: add is:broken search qualifier for broken links ([#&#8203;2225](https://github.com/karakeep-app/karakeep/issues/2225)) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`1f43f23`](https://github.com/karakeep-app/karakeep/commit/1f43f232)
- feat: spread feed fetch scheduling deterministically over the hour ([#&#8203;2227](https://github.com/karakeep-app/karakeep/issues/2227)) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`13a090c`](https://github.com/karakeep-app/karakeep/commit/13a090c4)
- fix: better extraction for youtube thumbnails. [#&#8203;2204](https://github.com/karakeep-app/karakeep/issues/2204) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`e3cc546`](https://github.com/karakeep-app/karakeep/commit/e3cc5463)
- fix: remove queue triggers outside of updateTags transaction - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`cf2a12c`](https://github.com/karakeep-app/karakeep/commit/cf2a12c8)
- chore: add benchmarks ([#&#8203;2229](https://github.com/karakeep-app/karakeep/issues/2229)) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`6180c66`](https://github.com/karakeep-app/karakeep/commit/6180c662)
- build: dont update latest tags on release - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`de98873`](https://github.com/karakeep-app/karakeep/commit/de98873a)
- deps: Upgrade nextjs to 15.3.6 - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`20081a3`](https://github.com/karakeep-app/karakeep/commit/20081a3a)
- feat: add a notification badge for list invitations - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`3c6b8e9`](https://github.com/karakeep-app/karakeep/commit/3c6b8e97)
- docs: add karakeep integration for Home Assistant ([#&#8203;2196](https://github.com/karakeep-app/karakeep/issues/2196)) - [@&#8203;sli-cka](https://github.com/sli-cka) in [`9a33938`](https://github.com/karakeep-app/karakeep/commit/9a339385)
- fix: regen turnstile token on signup resubmission - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`9257b53`](https://github.com/karakeep-app/karakeep/commit/9257b534)
- feat(landing): Add more features to the homepage - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`9a6d36f`](https://github.com/karakeep-app/karakeep/commit/9a6d36f2)
- ci: run arm docker image builds on arm machines - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`3421246`](https://github.com/karakeep-app/karakeep/commit/3421246d)
- ci: parallelize the docker workflow for platforms - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`2e88961`](https://github.com/karakeep-app/karakeep/commit/2e889617)
- fix: reenable idempotency key for search indexing - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`2ef751e`](https://github.com/karakeep-app/karakeep/commit/2ef751ef)
- fix: fix bypass email verification in apiKey.exchange - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`e4f434e`](https://github.com/karakeep-app/karakeep/commit/e4f434e7)
- readme: add collaborative lists to the list of features - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`d6d319d`](https://github.com/karakeep-app/karakeep/commit/d6d319d3)
- fix: Add restate queued idempotency ([#&#8203;2169](https://github.com/karakeep-app/karakeep/issues/2169)) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`a71b950`](https://github.com/karakeep-app/karakeep/commit/a71b9505)
- feat: add support for turnstile on signup - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`b12c1c3`](https://github.com/karakeep-app/karakeep/commit/b12c1c3a)
- build: fix npm trusted publishing - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`4898b6b`](https://github.com/karakeep-app/karakeep/commit/4898b6be)
- release: cli, mcp and sdk - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`28d6750`](https://github.com/karakeep-app/karakeep/commit/28d6750e)
- release(extension): Release version 1.2.8 - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`fdea086`](https://github.com/karakeep-app/karakeep/commit/fdea0861)
- release(mobile): Bump mobile version to 1.8.3 - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`8da5b59`](https://github.com/karakeep-app/karakeep/commit/8da5b598)
- release(docs): release the 0.29 docs - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`97c386a`](https://github.com/karakeep-app/karakeep/commit/97c386a4)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi42Ni45IiwidXBkYXRlZEluVmVyIjoiNDIuNjYuOSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=-->

Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/3022
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>

.gitea/workflows/render-manifests-dispatch.yaml

@@ -1,6 +1,9 @@
 name: render-manifests-dispatch
 
 on:
+  schedule:
+    - cron: '0 3 * * *'
+
   workflow_dispatch:
 
 env:

clusters/cl01tl/helm/actual/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
-digest: sha256:09dae69cd64556ed0b8ce2d8afe304720af3a71f64610ee6c70219572ccfdf5e
-generated: "2025-12-18T02:42:53.481944952Z"
+  version: 0.7.0
+digest: sha256:4840c828f8fbb695fa06fb959aad415acd12ff0d4930d136783488f16b9f875c
+generated: "2025-12-27T13:29:28.243328-06:00"

clusters/cl01tl/helm/actual/Chart.yaml

@@ -19,7 +19,7 @@ dependencies:
     version: 4.5.0
   - name: volsync-target
     alias: volsync-target-data
-    version: 0.6.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/actual-budget.png
 # renovate: github=actualbudget/actual

clusters/cl01tl/helm/actual/values.yaml

@@ -77,3 +77,11 @@ actual:
               readOnly: false
 volsync-target-data:
   pvcTarget: actual-data
+  local:
+    enabled: true
+    schedule: 0 8 * * *
+  remote:
+    enabled: false
+  external:
+    enabled: true
+    schedule: 0 9 * * *

clusters/cl01tl/helm/argo-workflows/Chart.lock

@@ -7,6 +7,6 @@ dependencies:
   version: 2.4.19
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.3
-digest: sha256:6de7da41d9317d7942a455226e5eae682f32f1bbb7d0287b9306de847bd56fdb
-generated: "2025-12-22T23:17:37.4042-06:00"
+  version: 7.4.5
+digest: sha256:2cbfdaeceeba1a5bdaa6fb2e9c4d51ea1310878d8c1c122dcfb0614fc2c52fb7
+generated: "2025-12-27T19:44:54.020935317Z"

clusters/cl01tl/helm/argo-workflows/Chart.yaml

@@ -25,7 +25,7 @@ dependencies:
     repository: https://argoproj.github.io/argo-helm
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.3
+    version: 7.4.5
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 # renovate: github=argoproj/argo-workflows

clusters/cl01tl/helm/argocd/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: argo-cd
   repository: https://argoproj.github.io/argo-helm
-  version: 9.1.10
-digest: sha256:4970c90a7ba115a91006f27161b7fbb2e197250a548ab49f0451aab6cbe12d53
-generated: "2025-12-23T23:20:06.41177841Z"
+  version: 9.2.3
+digest: sha256:b23d6a5b7b9fee9d1807259bfa2dd53d1f4dfbbeba7ec747c41a6ba991dadbba
+generated: "2025-12-28T21:53:37.447568505Z"

clusters/cl01tl/helm/argocd/Chart.yaml

@@ -15,7 +15,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: argo-cd
-    version: 9.1.10
+    version: 9.2.3
     repository: https://argoproj.github.io/argo-helm
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 # renovate: github=argoproj/argo-cd

clusters/cl01tl/helm/audiobookshelf/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
+  version: 0.7.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
-digest: sha256:67571554c39c1acdb1cd286024e7bdc0d7c94f0c4bfff5bf5fb225817f495616
-generated: "2025-12-18T02:43:02.876706511Z"
+  version: 0.7.0
+digest: sha256:75ef1406c49929e118569581946d1baaf9e082a45e3482cb10b9b9ae464eadfb
+generated: "2025-12-27T13:29:36.350679-06:00"

clusters/cl01tl/helm/audiobookshelf/Chart.yaml

@@ -21,11 +21,11 @@ dependencies:
     version: 4.5.0
   - name: volsync-target
     alias: volsync-target-config
-    version: 0.6.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-metadata
-    version: 0.6.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/audiobookshelf.png
 # renovate: github=advplyr/audiobookshelf

clusters/cl01tl/helm/audiobookshelf/values.yaml

@@ -123,5 +123,21 @@ audiobookshelf:
               readOnly: false
 volsync-target-config:
   pvcTarget: audiobookshelf-config
+  local:
+    enabled: true
+    schedule: 2 8 * * *
+  remote:
+    enabled: false
+  external:
+    enabled: true
+    schedule: 2 9 * * *
 volsync-target-metadata:
   pvcTarget: audiobookshelf-metadata
+  local:
+    enabled: true
+    schedule: 4 8 * * *
+  remote:
+    enabled: false
+  external:
+    enabled: true
+    schedule: 4 9 * * *

clusters/cl01tl/helm/authentik/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 2.1.4
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.3
+  version: 7.4.5
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.5.0
-digest: sha256:d250e40d77b3010d55c258e264e36de060a6dbdb78fe56bdbfbc427692cfdcc7
-generated: "2025-12-23T16:28:00.416521-06:00"
+digest: sha256:d357b0a8f4351068d9ce7223ffd01a0921202cb2b41669421b8429bc3f7778eb
+generated: "2025-12-27T19:45:06.478084011Z"

clusters/cl01tl/helm/authentik/Chart.yaml

@@ -28,7 +28,7 @@ dependencies:
     version: 2.1.4
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.3
+    version: 7.4.5
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     version: 0.5.0

clusters/cl01tl/helm/backrest/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
+  version: 0.7.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
-digest: sha256:ba31d044402f9da6705f64d21a0947730a37526fce047891162cfd2b21b8d08a
-generated: "2025-12-18T02:43:14.604382042Z"
+  version: 0.7.0
+digest: sha256:26680d49c76f150932d55fac070325d5ed89e635e713f37e1796f0d55775af9e
+generated: "2025-12-27T13:29:41.313658-06:00"

clusters/cl01tl/helm/backrest/Chart.yaml

@@ -19,11 +19,11 @@ dependencies:
     version: 4.5.0
   - name: volsync-target
     alias: volsync-target-config
-    version: 0.6.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data
-    version: 0.6.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/backrest.png
 # renovate: github=garethgeorge/backrest

clusters/cl01tl/helm/backrest/values.yaml

@@ -107,5 +107,21 @@ backrest:
               readOnly: true
 volsync-target-data:
   pvcTarget: backrest-data
+  local:
+    enabled: true
+    schedule: 6 8 * * *
+  remote:
+    enabled: false
+  external:
+    enabled: true
+    schedule: 6 9 * * *
 volsync-target-config:
   pvcTarget: backrest-config
+  local:
+    enabled: true
+    schedule: 8 8 * * *
+  remote:
+    enabled: false
+  external:
+    enabled: true
+    schedule: 8 9 * * *

clusters/cl01tl/helm/bazarr/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
-digest: sha256:20237b7a0548ae3458b4765e01aef39b5e072da5390305eb7815b086eef4983a
-generated: "2025-12-18T02:43:26.844170003Z"
+  version: 0.7.0
+digest: sha256:9d9d5e30903d7967baaf5c274e9adc8403cce32d91bdd3d1780acffb249f312d
+generated: "2025-12-27T13:29:43.329783-06:00"

clusters/cl01tl/helm/bazarr/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     version: 4.5.0
   - name: volsync-target
     alias: volsync-target-config
-    version: 0.6.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/bazarr.png
 # renovate: github=linuxserver/bazarr

clusters/cl01tl/helm/bazarr/values.yaml

@@ -83,3 +83,11 @@ volsync-target-config:
     runAsGroup: 1000
     fsGroup: 1000
     fsGroupChangePolicy: OnRootMismatch
+  local:
+    enabled: true
+    schedule: 10 8 * * *
+  remote:
+    enabled: false
+  external:
+    enabled: true
+    schedule: 10 9 * * *

clusters/cl01tl/helm/blocky/values.yaml

@@ -96,11 +96,9 @@ blocky:
               cl01tl-endpoint                 IN      A       10.232.1.22
               cl01tl-endpoint                 IN      A       10.232.1.23
 
-              cl01tl-gateway                  IN      A       10.232.1.200
-
               traefik-cl01tl                  IN      A       10.232.1.21
               blocky                          IN      A       10.232.1.22
-              plex-lb                         IN      A       10.232.1.23
+              cilium-cl01tl                   IN      A       10.232.1.23
 
               ;; Application Names
               actual                          IN      CNAME   traefik-cl01tl
@@ -115,6 +113,7 @@ blocky:
               ceph                            IN      CNAME   traefik-cl01tl
               code-server                     IN      CNAME   traefik-cl01tl
               ephemera                        IN      CNAME   traefik-cl01tl
+              feishin                         IN      CNAME   traefik-cl01tl
               garage-s3                       IN      CNAME   traefik-cl01tl
               garage-webui                    IN      CNAME   traefik-cl01tl
               gatus                           IN      CNAME   traefik-cl01tl
@@ -125,7 +124,7 @@ blocky:
               home                            IN      CNAME   traefik-cl01tl
               home-assistant                  IN      CNAME   traefik-cl01tl
               home-assistant-code-server      IN      CNAME   traefik-cl01tl
-              hubble                          IN      CNAME   cl01tl-gateway
+              hubble                          IN      CNAME   traefik-cl01tl
               huntarr                         IN      CNAME   traefik-cl01tl
               immich                          IN      CNAME   traefik-cl01tl
               jellyfin                        IN      CNAME   traefik-cl01tl
@@ -136,7 +135,7 @@ blocky:
               lidatube                        IN      CNAME   traefik-cl01tl
               listenarr                       IN      CNAME   traefik-cl01tl
               mail                            IN      CNAME   traefik-cl01tl
-              n8n                             IN      CNAME   traefik-cl01tl
+              navidrome                       IN      CNAME   traefik-cl01tl
               ntfy                            IN      CNAME   traefik-cl01tl
               objects                         IN      CNAME   traefik-cl01tl
               ollama                          IN      CNAME   traefik-cl01tl
@@ -153,6 +152,7 @@ blocky:
               radarr-4k                       IN      CNAME   traefik-cl01tl
               radarr-anime                    IN      CNAME   traefik-cl01tl
               radarr-standup                  IN      CNAME   traefik-cl01tl
+              rayflume                        IN      CNAME   traefik-cl01tl
               searxng                         IN      CNAME   traefik-cl01tl
               seerr                           IN      CNAME   traefik-cl01tl
               slskd                           IN      CNAME   traefik-cl01tl
@@ -317,6 +317,6 @@ redis-replication:
   existingSecret:
     enabled: false
   redisReplication:
-    clusterSize: 3
+    clusterSize: 1
   redisSentinel:
     enabled: false

clusters/cl01tl/helm/booklore/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.5.0
 - name: mariadb-cluster
   repository: https://helm.mariadb.com/mariadb-operator
-  version: 25.10.2
+  version: 25.10.3
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
+  version: 0.7.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
-digest: sha256:bc29fb12a2a7fde74e243be7ee4c22f4de82cdb6867ab95ddbd47e1d755b8a82
-generated: "2025-12-18T02:43:39.236584539Z"
+  version: 0.7.0
+digest: sha256:805832fd8df9e1e4435dd2b10c877e0248ca5b3855d4c2faba4ff09c23afb898
+generated: "2025-12-27T13:29:47.00956-06:00"

clusters/cl01tl/helm/booklore/Chart.yaml

@@ -22,11 +22,11 @@ dependencies:
     repository: https://helm.mariadb.com/mariadb-operator
   - name: volsync-target
     alias: volsync-target-config
-    version: 0.6.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data
-    version: 0.6.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/booklore.png
 # renovate: github=booklore-app/BookLore

clusters/cl01tl/helm/booklore/values.yaml

@@ -9,7 +9,7 @@ booklore:
         main:
           image:
             repository: ghcr.io/booklore-app/booklore
-            tag: v1.15.0
+            tag: v1.16.2
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -108,6 +108,21 @@ mariadb-cluster:
     replicas: 3
     galera:
       enabled: true
+    bootstrapFrom:
+      s3:
+        bucket: mariadb-backups-b230a2f5aecf080a4b372c08
+        prefix: cl01tl/booklore
+        endpoint: nyc3.digitaloceanspaces.com
+        region: us-east-1
+        accessKeyIdSecretKeyRef:
+          name: booklore-mariadb-cluster-backup-secret-external
+          key: access
+        secretAccessKeySecretKeyRef:
+          name: booklore-mariadb-cluster-backup-secret-external
+          key: secret
+        tls:
+          enabled: true
+      backupContentType: Physical
   databases:
     - name: booklore
       characterSet: utf8
@@ -202,14 +217,28 @@ mariadb-cluster:
             key: secret
 volsync-target-config:
   pvcTarget: booklore-config
+  local:
+    enabled: true
+    schedule: 12 8 * * *
+  remote:
+    enabled: false
+  external:
+    enabled: true
+    schedule: 12 9 * * *
 volsync-target-data:
   pvcTarget: booklore-data
   local:
+    enabled: true
+    schedule: 14 8 * * *
     restic:
       cacheCapacity: 10Gi
   remote:
+    enabled: true
+    schedule: 14 10 * * *
     restic:
       cacheCapacity: 10Gi
   external:
+    enabled: true
+    schedule: 14 9 * * *
     restic:
       cacheCapacity: 10Gi

clusters/cl01tl/helm/cilium/templates/cilium-l2-announcement-policy.yaml

@@ -0,0 +1,19 @@
+# apiVersion: "cilium.io/v2alpha1"
+# kind: CiliumL2AnnouncementPolicy
+# metadata:
+#   name: general-l2-policy
+#   namespace: {{ .Release.Namespace }}
+#   labels:
+#     app.kubernetes.io/name: general-l2-policy
+#     app.kubernetes.io/instance: {{ .Release.Name }}
+#     app.kubernetes.io/part-of: {{ .Release.Name }}
+# spec:
+#   nodeSelector:
+#     matchExpressions:
+#       - key: kubernetes.io/hostname
+#         operator: Exists
+#   interfaces:
+#     - end0
+#     - enp6s0
+#   externalIPs: true
+#   loadBalancerIPs: true

clusters/cl01tl/helm/cilium/templates/gateway.yaml

@@ -1,7 +1,7 @@
 # apiVersion: gateway.networking.k8s.io/v1
 # kind: Gateway
 # metadata:
-#   name: tls-gateway
+#   name: cilium-tls-gateway
 #   namespace: {{ .Release.Namespace }}
 #   labels:
 #     app.kubernetes.io/name: tls-gateway

clusters/cl01tl/helm/cloudnative-pg/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 0.27.0
 - name: plugin-barman-cloud
   repository: https://cloudnative-pg.io/charts/
-  version: 0.3.1
-digest: sha256:14aa30b7bf75571b03bda19af68cd50c1e7908b883351b196a260609a5b85551
-generated: "2025-12-10T19:25:17.952954019Z"
+  version: 0.4.0
+digest: sha256:5e2a32fa5ed8b180ae5e556d65c67eeb3dcf38e2974b0d668eff4ee3c83258ce
+generated: "2025-12-30T21:01:48.755246408Z"

clusters/cl01tl/helm/cloudnative-pg/Chart.yaml

@@ -19,7 +19,7 @@ dependencies:
     version: 0.27.0
     repository: https://cloudnative-pg.io/charts/
   - name: plugin-barman-cloud
-    version: 0.3.1
+    version: 0.4.0
     repository: https://cloudnative-pg.io/charts/
 icon: https://avatars.githubusercontent.com/u/100373852?s=200&v=4
 # renovate: github=cloudnative-pg/cloudnative-pg

clusters/cl01tl/helm/cloudnative-pg/values.yaml

@@ -7,10 +7,10 @@ plugin-barman-cloud:
   image:
     registry: ghcr.io
     repository: cloudnative-pg/plugin-barman-cloud
-    tag: v0.9.0
+    tag: v0.10.0
   sidecarImage:
     registry: ghcr.io
     repository: cloudnative-pg/plugin-barman-cloud-sidecar
-    tag: v0.9.0
+    tag: v0.10.0
   crds:
     create: true

clusters/cl01tl/helm/code-server/Chart.lock

@@ -7,6 +7,6 @@ dependencies:
   version: 2.1.4
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
-digest: sha256:8f24ac0aa7245c517cd68f4e9fb97de110620922b9bbdf3270e83aa4ad201324
-generated: "2025-12-18T02:43:53.325443712Z"
+  version: 0.7.0
+digest: sha256:1deedc65dece8540fd850648bf533da244f9ac8ba48f2133f1f6cac083f5953d
+generated: "2025-12-27T13:29:58.860038-06:00"

clusters/cl01tl/helm/code-server/Chart.yaml

@@ -25,7 +25,7 @@ dependencies:
     version: 2.1.4
   - name: volsync-target
     alias: volsync-target-config
-    version: 0.6.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/visual-studio-code.png
 # renovate: github=coder/code-server

clusters/cl01tl/helm/code-server/values.yaml

@@ -9,7 +9,7 @@ code-server:
         main:
           image:
             repository: ghcr.io/linuxserver/code-server
-            tag: 4.107.0@sha256:0d48d3a48b7db214556bea453ed371f0d295130fb5c3d43534aedb41627446f2
+            tag: 4.107.0@sha256:e2ebedc28ab9e2ebe08093cf7e78515f97822956ff7cbac3d86fb0bd9e4b6bca
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -75,3 +75,11 @@ volsync-target-config:
     runAsGroup: 1000
     fsGroup: 1000
     fsGroupChangePolicy: OnRootMismatch
+  local:
+    enabled: true
+    schedule: 16 8 * * *
+  remote:
+    enabled: false
+  external:
+    enabled: true
+    schedule: 16 9 * * *

clusters/cl01tl/helm/directus/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 2.1.4
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.3
+  version: 7.4.5
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.5.0
-digest: sha256:d9c95b9a697ebe9fb98ebb2a5e2f7058c26b9207742eadcd56f278ff36d00855
-generated: "2025-12-23T16:47:50.269275-06:00"
+digest: sha256:dcfd66bcdcc888dee6ee427265ac1ca32dd542571e84fbd5adc65a76ec5a6955
+generated: "2025-12-27T19:45:16.762640684Z"

clusters/cl01tl/helm/directus/Chart.yaml

@@ -26,7 +26,7 @@ dependencies:
     version: 2.1.4
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.3
+    version: 7.4.5
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     version: 0.5.0

clusters/cl01tl/helm/ephemera/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
-digest: sha256:c6d6edb1e46805147b2b8bc9371e807113480c9a97687c5a856cf7b64a204cbd
-generated: "2025-12-18T02:44:09.319124495Z"
+  version: 0.7.0
+digest: sha256:3b32ded75846bcee3e9fb892663173485da0dcd351ccc3a0337432f5d2da2e66
+generated: "2025-12-27T13:30:15.119299-06:00"

clusters/cl01tl/helm/ephemera/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     version: 4.5.0
   - name: volsync-target
     alias: volsync-target-config
-    version: 0.6.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ephemera.png
 # renovate: github=OrwellianEpilogue/ephemera

clusters/cl01tl/helm/ephemera/values.yaml

@@ -9,7 +9,7 @@ ephemera:
         main:
           image:
             repository: ghcr.io/orwellianepilogue/ephemera
-            tag: 1.3.1
+            tag: 1.4.2
             pullPolicy: IfNotPresent
           env:
             - name: AA_BASE_URL
@@ -129,3 +129,11 @@ ephemera:
               readOnly: false
 volsync-target-config:
   pvcTarget: ephemera
+  local:
+    enabled: true
+    schedule: 16 8 * * *
+  remote:
+    enabled: false
+  external:
+    enabled: true
+    schedule: 16 9 * * *

clusters/cl01tl/helm/external-dns/values.yaml

@@ -19,7 +19,7 @@ external-dns-unifi:
     webhook:
       image:
         repository: ghcr.io/kashalls/external-dns-unifi-webhook
-        tag: v0.7.0
+        tag: v0.8.0
       env:
         - name: UNIFI_HOST
           value: https://192.168.1.1

clusters/cl01tl/helm/freshrss/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 2.1.4
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.3
+  version: 7.4.5
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
-digest: sha256:a73351fc38c927eb7fef8c536069b21ca4d99e3ffb193ee64d9b93dbdc728ec4
-generated: "2025-12-23T17:04:20.474187-06:00"
+  version: 0.7.0
+digest: sha256:401ccbb7aa034938a79cbe3a4401b24b55a7f072d3a8a2542f079baf29ca3081
+generated: "2025-12-27T19:45:27.260991801Z"

clusters/cl01tl/helm/freshrss/Chart.yaml

@@ -26,11 +26,11 @@ dependencies:
     version: 2.1.4
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.3
+    version: 7.4.5
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data
-    version: 0.6.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/freshrss.png
 # renovate: github=FreshRSS/FreshRSS

clusters/cl01tl/helm/freshrss/values.yaml

@@ -80,7 +80,7 @@ freshrss:
         main:
           image:
             repository: freshrss/freshrss
-            tag: 1.27.1
+            tag: 1.28.0
             pullPolicy: IfNotPresent
           env:
             - name: PGID
@@ -246,3 +246,11 @@ volsync-target-data:
       - 100
       - 109
       - 65539
+  local:
+    enabled: true
+    schedule: 18 8 * * *
+  remote:
+    enabled: false
+  external:
+    enabled: true
+    schedule: 18 9 * * *

clusters/cl01tl/helm/garage/Chart.lock

@@ -2,8 +2,5 @@ dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
   version: 4.5.0
-- name: volsync-target
-  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
-digest: sha256:61c919869d56032bfa09b2e159a6b2dd2a43debf34968be2d66cf2211100a2c5
-generated: "2025-12-18T02:44:33.509296082Z"
+digest: sha256:36e920ce6efee3b33b40641652f814c888ae3c50272895ef286fb8236a010924
+generated: "2025-12-27T16:57:42.31991-06:00"

clusters/cl01tl/helm/garage/Chart.yaml

@@ -18,10 +18,6 @@ dependencies:
     alias: garage
     repository: https://bjw-s-labs.github.io/helm-charts/
     version: 4.5.0
-  - name: volsync-target
-    alias: volsync-target-db
-    version: 0.6.0
-    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 # renovate: github=deuxfleurs-org/garage
 appVersion: v2.1.0

clusters/cl01tl/helm/garage/values.yaml

@@ -1,10 +1,97 @@
 garage:
   controllers:
-    main:
+    server-1:
       type: deployment
       replicas: 1
       strategy: Recreate
       revisionHistoryLimit: 3
+      pod:
+        labels:
+          garage-type: server
+        affinity:
+          podAntiAffinity:
+              requiredDuringSchedulingIgnoredDuringExecution:
+                - labelSelector:
+                    matchExpressions:
+                      - key: garage-type
+                        operator: In
+                        values:
+                          - server
+                  topologyKey: kubernetes.io/hostname
+      containers:
+        main:
+          image:
+            repository: dxflrs/garage
+            tag: v2.1.0
+            pullPolicy: IfNotPresent
+          envFrom:
+            - secretRef:
+                name: garage-token-secret
+          resources:
+            requests:
+              cpu: 10m
+              memory: 128Mi
+        debug:
+          image:
+            repository: ubuntu
+            tag: resolute-20251208
+            pullPolicy: IfNotPresent
+          command:
+            - "sleep"
+            - "infinity"
+          resources:
+            requests:
+              cpu: 10m
+              memory: 32Mi
+    server-2:
+      type: deployment
+      replicas: 1
+      strategy: Recreate
+      revisionHistoryLimit: 3
+      pod:
+        labels:
+          garage-type: server
+        affinity:
+          podAntiAffinity:
+              requiredDuringSchedulingIgnoredDuringExecution:
+                - labelSelector:
+                    matchExpressions:
+                      - key: garage-type
+                        operator: In
+                        values:
+                          - server
+                  topologyKey: kubernetes.io/hostname
+      containers:
+        main:
+          image:
+            repository: dxflrs/garage
+            tag: v2.1.0
+            pullPolicy: IfNotPresent
+          envFrom:
+            - secretRef:
+                name: garage-token-secret
+          resources:
+            requests:
+              cpu: 10m
+              memory: 128Mi
+    server-3:
+      type: deployment
+      replicas: 1
+      strategy: Recreate
+      revisionHistoryLimit: 3
+      pod:
+        labels:
+          garage-type: server
+        affinity:
+          podAntiAffinity:
+              requiredDuringSchedulingIgnoredDuringExecution:
+                - labelSelector:
+                    matchExpressions:
+                      - key: garage-type
+                        operator: In
+                        values:
+                          - server
+                  topologyKey: kubernetes.io/hostname
       containers:
         main:
           image:
@@ -47,8 +134,8 @@ garage:
     config:
       enabled: true
       data:
-        garage.toml: |
-          replication_factor = 1
+        garage-1.toml: |
+          replication_factor = 3
 
           metadata_dir = "/var/lib/garage/meta"
           data_dir = "/var/lib/garage/data"
@@ -61,7 +148,67 @@ garage:
           compression_level = 3
 
           rpc_bind_addr = "[::]:3901"
-          rpc_public_addr = "127.0.0.1:3901"
+          rpc_public_addr = "garage-1:3901"
+
+          allow_world_readable_secrets = false
+
+          [s3_api]
+          s3_region = "us-east-1"
+          api_bind_addr = "[::]:3900"
+          root_domain = ".garage-s3.alexlebens.net"
+
+          [s3_web]
+          bind_addr = "[::]:3902"
+          root_domain = ".garage-s3.alexlebens.net"
+
+          [admin]
+          api_bind_addr = "[::]:3903"
+          metrics_require_token = true
+        garage-2.toml: |
+          replication_factor = 3
+
+          metadata_dir = "/var/lib/garage/meta"
+          data_dir = "/var/lib/garage/data"
+          metadata_snapshots_dir = "/var/lib/garage/snapshots"
+
+          db_engine = "lmdb"
+
+          metadata_auto_snapshot_interval = "6h"
+
+          compression_level = 3
+
+          rpc_bind_addr = "[::]:3901"
+          rpc_public_addr = "garage-2:3901"
+
+          allow_world_readable_secrets = false
+
+          [s3_api]
+          s3_region = "us-east-1"
+          api_bind_addr = "[::]:3900"
+          root_domain = ".garage-s3.alexlebens.net"
+
+          [s3_web]
+          bind_addr = "[::]:3902"
+          root_domain = ".garage-s3.alexlebens.net"
+
+          [admin]
+          api_bind_addr = "[::]:3903"
+          metrics_require_token = true
+        garage-3.toml: |
+          replication_factor = 3
+
+          metadata_dir = "/var/lib/garage/meta"
+          data_dir = "/var/lib/garage/data"
+          metadata_snapshots_dir = "/var/lib/garage/snapshots"
+
+          db_engine = "lmdb"
+
+          metadata_auto_snapshot_interval = "6h"
+
+          compression_level = 3
+
+          rpc_bind_addr = "[::]:3901"
+          rpc_public_addr = "garage-3:3901"
 
           allow_world_readable_secrets = false
 
@@ -78,8 +225,69 @@ garage:
           api_bind_addr = "[::]:3903"
           metrics_require_token = true
   service:
-    main:
-      controller: main
+    garage-main:
+      forceRename: garage-main
+      controller: server-2
+      ports:
+        s3:
+          port: 3900
+          targetPort: 3900
+          protocol: HTTP
+        rpc:
+          port: 3901
+          targetPort: 3901
+          protocol: HTTP
+        web:
+          port: 3902
+          targetPort: 3902
+          protocol : HTTP
+        admin:
+          port: 3903
+          targetPort: 3903
+          protocol: HTTP
+    server-1:
+      forceRename: garage-1
+      controller: server-1
+      ports:
+        s3:
+          port: 3900
+          targetPort: 3900
+          protocol: HTTP
+        rpc:
+          port: 3901
+          targetPort: 3901
+          protocol: HTTP
+        web:
+          port: 3902
+          targetPort: 3902
+          protocol: HTTP
+        admin:
+          port: 3903
+          targetPort: 3903
+          protocol: HTTP
+    server-2:
+      forceRename: garage-2
+      controller: server-2
+      ports:
+        s3:
+          port: 3900
+          targetPort: 3900
+          protocol: HTTP
+        rpc:
+          port: 3901
+          targetPort: 3901
+          protocol: HTTP
+        web:
+          port: 3902
+          targetPort: 3902
+          protocol: HTTP
+        admin:
+          port: 3903
+          targetPort: 3903
+          protocol: HTTP
+    server-3:
+      forceRename: garage-3
+      controller: server-3
       ports:
         s3:
           port: 3900
@@ -166,55 +374,115 @@ garage:
       type: configMap
       name: garage
       advancedMounts:
-        main:
+        server-1:
           main:
             - path: /etc/garage.toml
               readOnly: true
               mountPropagation: None
-              subPath: garage.toml
+              subPath: garage-1.toml
+          debug:
+            - path: /etc/garage.toml
+              readOnly: true
+              mountPropagation: None
+              subPath: garage-1.toml
+        server-2:
+          main:
+            - path: /etc/garage.toml
+              readOnly: true
+              mountPropagation: None
+              subPath: garage-2.toml
+        server-3:
+          main:
+            - path: /etc/garage.toml
+              readOnly: true
+              mountPropagation: None
+              subPath: garage-3.toml
         webui:
           main:
             - path: /etc/garage.toml
               readOnly: true
               mountPropagation: None
-              subPath: garage.toml
-    db:
-      forceRename: garage-db
+              subPath: garage-1.toml
+    db-1:
+      forceRename: garage-db-1
       storageClass: ceph-block
       accessMode: ReadWriteOnce
       size: 50Gi
       retain: true
       advancedMounts:
-        main:
+        server-1:
           main:
             - path: /var/lib/garage/meta
               readOnly: false
-    data:
+          debug:
+            - path: /var/lib/garage/meta
+              readOnly: false
+    db-2:
+      forceRename: garage-db-2
+      storageClass: ceph-block
+      accessMode: ReadWriteOnce
+      size: 50Gi
+      retain: true
+      advancedMounts:
+        server-2:
+          main:
+            - path: /var/lib/garage/meta
+              readOnly: false
+    db-3:
+      forceRename: garage-db-3
+      storageClass: ceph-block
+      accessMode: ReadWriteOnce
+      size: 50Gi
+      retain: true
+      advancedMounts:
+        server-3:
+          main:
+            - path: /var/lib/garage/meta
+              readOnly: false
+    data-1:
+      forceRename: garage-data
       storageClass: synology-iscsi-delete
       accessMode: ReadWriteOnce
       size: 800Gi
       retain: true
       advancedMounts:
-        main:
+        server-1:
+          main:
+            - path: /var/lib/garage/data
+              readOnly: false
+          debug:
+            - path: /var/lib/garage/data
+              readOnly: false
+    data-2:
+      forceRename: garage-data-2
+      storageClass: synology-iscsi-delete
+      accessMode: ReadWriteOnce
+      size: 800Gi
+      retain: true
+      advancedMounts:
+        server-2:
+          main:
+            - path: /var/lib/garage/data
+              readOnly: false
+    data-3:
+      forceRename: garage-data-3
+      storageClass: synology-iscsi-delete
+      accessMode: ReadWriteOnce
+      size: 800Gi
+      retain: true
+      advancedMounts:
+        server-3:
           main:
             - path: /var/lib/garage/data
               readOnly: false
     snapshots:
+      forceRename: garage-snapshots
       storageClass: synology-iscsi-delete
       accessMode: ReadWriteOnce
       size: 50Gi
       retain: true
       advancedMounts:
-        main:
+        server-1:
           main:
             - path: /var/lib/garage/snapshots
               readOnly: false
-volsync-target-db:
-  pvcTarget: garage-db
-  local:
-    enabled: false
-  remote:
-    restic:
-      cacheCapacity: 10Gi
-  external:
-    enabled: false

clusters/cl01tl/helm/gatus/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 1.4.4
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.3
+  version: 7.4.5
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
-digest: sha256:a4f701f64327062a92b491d97728f02367e09412aca46705c1cbd8c2c438d76a
-generated: "2025-12-23T17:10:07.510553-06:00"
+  version: 0.7.0
+digest: sha256:ee32795b47519463ec6d1219bf4ec16784b1c42d98ae8a330e9650200d11c033
+generated: "2025-12-27T19:45:37.106953505Z"

clusters/cl01tl/helm/gatus/Chart.yaml

@@ -22,11 +22,11 @@ dependencies:
     version: 1.4.4
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.3
+    version: 7.4.5
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data
-    version: 0.6.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/gatus.png
 # renovate: github=TwiN/gatus

clusters/cl01tl/helm/gatus/values.yaml

@@ -134,15 +134,21 @@ gatus:
       - name: tubearchivist
         url: https://tubearchivist.alexlebens.net
         <<: *defaults
+      - name: navidrome
+        url: https://navidrome.alexlebens.net
+        <<: *defaults
+      - name: feishin
+        url: https://feishin.alexlebens.net
+        <<: *defaults
+      - name: audiobookshelf
+        url: https://audiobookshelf.alexlebens.net
+        <<: *defaults
       - name: immich
         url: https://immich.alexlebens.net
         <<: *defaults
       - name: photoview
         url: https://photoview.alexlebens.net
         <<: *defaults
-      - name: audiobookshelf
-        url: https://audiobookshelf.alexlebens.net
-        <<: *defaults
       - name: booklore
         url: https://booklore.alexlebens.net
         <<: *defaults
@@ -179,9 +185,6 @@ gatus:
       - name: argo-workflows
         url: https://argo-workflows.alexlebens.net
         <<: *defaults
-      - name: n8n
-        url: https://n8n.alexlebens.net
-        <<: *defaults
       - name: omni-tools
         url: https://omni-tools.alexlebens.net
         <<: *defaults
@@ -310,6 +313,9 @@ gatus:
       - name: lidatube
         url: https://lidatube.alexlebens.net
         <<: *defaults
+      - name: rayflume
+        url: https://rayflume.alexlebens.net
+        <<: *defaults
       - name: slskd
         url: https://slskd.alexlebens.net
         <<: *defaults
@@ -414,3 +420,11 @@ postgres-18-cluster:
       #   backupName: external
 volsync-target-data:
   pvcTarget: gatus
+  local:
+    enabled: true
+    schedule: 22 8 * * *
+  remote:
+    enabled: false
+  external:
+    enabled: true
+    schedule: 22 9 * * *

clusters/cl01tl/helm/generic-device-plugin/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: generic-device-plugin
   repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-  version: 0.20.9
-digest: sha256:bb46a35e02e0b430423cc47f9a44f3eff3c6075d379705e1f36ecd3e61468238
-generated: "2025-12-24T00:10:27.950467391Z"
+  version: 0.20.11
+digest: sha256:638754658519c268ac93bef8dec82332cded8e99b734ef61db45ee63e4b7c6ce
+generated: "2025-12-30T22:23:45.633280279Z"

clusters/cl01tl/helm/generic-device-plugin/Chart.yaml

@@ -15,6 +15,6 @@ maintainers:
 dependencies:
   - name: generic-device-plugin
     repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-    version: 0.20.9
+    version: 0.20.11
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 appVersion: 1.0.0

clusters/cl01tl/helm/gitea/Chart.lock

@@ -7,13 +7,13 @@ dependencies:
   version: 0.2.1
 - name: meilisearch
   repository: https://meilisearch.github.io/meilisearch-kubernetes
-  version: 0.19.0
+  version: 0.20.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.1.4
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.3
+  version: 7.4.5
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.5.0
@@ -22,6 +22,6 @@ dependencies:
   version: 0.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
-digest: sha256:978756233cbc1b10dedb4bd60568809ab368b0023732dbfeefa81d3c3fa95459
-generated: "2025-12-23T17:13:14.918887-06:00"
+  version: 0.7.0
+digest: sha256:6636f6ead8089c19ad702fb58170d942e11150fdda9470f1b97f4f8fa533d00e
+generated: "2025-12-30T16:03:12.004386065Z"

clusters/cl01tl/helm/gitea/Chart.yaml

@@ -32,14 +32,14 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
     version: 0.2.1
   - name: meilisearch
-    version: 0.19.0
+    version: 0.20.0
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
     version: 2.1.4
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.3
+    version: 7.4.5
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     alias: redis-replication-gitea
@@ -51,7 +51,7 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-storage
-    version: 0.6.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/gitea.png
 # renovate: github=go-gitea/gitea

clusters/cl01tl/helm/gitea/values.yaml

@@ -1,7 +1,7 @@
 gitea:
   global:
     imageRegistry: registry.hub.docker.com
-  replicaCount: 3
+  replicaCount: 1
   image:
     repository: gitea/gitea
     tag: 1.25.3

clusters/cl01tl/helm/grafana-operator/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 5.21.3
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.3
+  version: 7.4.5
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.5.0
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.5.0
-digest: sha256:cf38a5967c4da4236045746fcd619b4abd655feb4da970a398e282193ddb887e
-generated: "2025-12-23T17:15:11.407801-06:00"
+digest: sha256:0406fb11b050135c944c17c658adfaee487a84b4394f17e72eefe2ac62a5726f
+generated: "2025-12-27T19:46:03.122087467Z"

clusters/cl01tl/helm/grafana-operator/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     repository: https://grafana.github.io/helm-charts
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.3
+    version: 7.4.5
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     alias: redis-replication-unified-alerting

clusters/cl01tl/helm/grafana-operator/values.yaml

@@ -17,11 +17,11 @@ postgres-18-cluster:
   recovery:
     method: objectStore
     objectStore:
-      index: 1
+      index: 2
   backup:
     objectStore:
       - name: garage-local
-        index: 1
+        index: 2
         destinationBucket: postgres-backups
         externalSecretCredentialPath: /garage/home-infra/postgres-backups
         isWALArchiver: true

clusters/cl01tl/helm/harbor/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 1.18.1
 - name: postgres-cluster
   repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
-  version: 7.4.3
+  version: 7.4.5
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.5.0
-digest: sha256:8f27e668381e0ce960f2dfcb6bb5b33feb708497b088b6af2a72a5816bc3df6d
-generated: "2025-12-23T17:17:55.749328-06:00"
+digest: sha256:1292d7c6233b48f285cedb81e59299837d4ff6a6845d2bfb08b5753f2c8e3644
+generated: "2025-12-27T19:46:14.927696731Z"

clusters/cl01tl/helm/harbor/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     repository: https://helm.goharbor.io
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.3
+    version: 7.4.5
     repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
   - name: redis-replication
     version: 0.5.0

clusters/cl01tl/helm/home-assistant/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
-digest: sha256:626ca9cabfd6d48e3b5895b32d35c7764dde4569127241ce75117801b9b83170
-generated: "2025-12-18T02:45:13.984217826Z"
+  version: 0.7.0
+digest: sha256:89ed20fc7ce6de8a9f4518ab4cc01e60072ccfe463e024748b382ac8d3fe6ffb
+generated: "2025-12-27T13:30:44.539834-06:00"

clusters/cl01tl/helm/home-assistant/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     version: 4.5.0
   - name: volsync-target
     alias: volsync-target-config
-    version: 0.6.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/home-assistant.png
 # renovate: github=home-assistant/core

clusters/cl01tl/helm/home-assistant/values.yaml

@@ -9,7 +9,7 @@ home-assistant:
         main:
           image:
             repository: ghcr.io/home-assistant/home-assistant
-            tag: 2025.12.4
+            tag: 2025.12.5
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -21,7 +21,7 @@ home-assistant:
         code-server:
           image:
             repository: ghcr.io/linuxserver/code-server
-            tag: 4.107.0@sha256:0d48d3a48b7db214556bea453ed371f0d295130fb5c3d43534aedb41627446f2
+            tag: 4.107.0@sha256:e2ebedc28ab9e2ebe08093cf7e78515f97822956ff7cbac3d86fb0bd9e4b6bca
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -132,3 +132,11 @@ volsync-target-config:
     runAsGroup: 1000
     fsGroup: 1000
     fsGroupChangePolicy: OnRootMismatch
+  local:
+    enabled: true
+    schedule: 24 8 * * *
+  remote:
+    enabled: false
+  external:
+    enabled: true
+    schedule: 24 9 * * *

clusters/cl01tl/helm/homepage/values.yaml

@@ -129,18 +129,6 @@ homepage:
                 maximumFractionDigits: 0
         services.yaml: |
           - Media:
-              - Plex:
-                  icon: sh-plex.webp
-                  description: Media server
-                  href: https://plex.alexlebens.net
-                  siteMonitor: http://plex.plex:32400
-                  statusStyle: dot
-              - Jellyfin:
-                  icon: sh-jellyfin.webp
-                  description: Media server
-                  href: https://jellyfin.alexlebens.net
-                  siteMonitor: http://jellyfin.jellyfin:80
-                  statusStyle: dot
               - Media Requests:
                   icon: sh-overseerr.webp
                   description: Overseerr
@@ -159,12 +147,30 @@ homepage:
                   href: https://yamtrack.alexlebens.net
                   siteMonitor: http://yamtrack.yamtrack:80
                   statusStyle: dot
+              - Movies and TV:
+                  icon: sh-jellyfin.webp
+                  description: Jellyfin
+                  href: https://jellyfin.alexlebens.net
+                  siteMonitor: http://jellyfin.jellyfin:80
+                  statusStyle: dot
               - Youtube Archive:
                   icon: sh-tube-archivist-light.webp
-                  description: TubeAchivist
+                  description: TubeArchivist
                   href: https://tubearchivist.alexlebens.net/login
                   siteMonitor: http://tubearchivist.tubearchivist:80
                   statusStyle: dot
+              - Music:
+                  icon: sh-feishin.webp
+                  description: Feishin
+                  href: https://feishin.alexlebens.net
+                  siteMonitor: http://navidrome-feishin.navidrome:80
+                  statusStyle: dot
+              - Podcasts and Audiobooks:
+                  icon: sh-audiobookshelf.webp
+                  description: Audiobookshelf
+                  href: https://audiobookshelf.alexlebens.net
+                  siteMonitor: http://audiobookshelf.audiobookshelf:80
+                  statusStyle: dot
               - Photos:
                   icon: sh-immich.webp
                   description: Immich
@@ -177,12 +183,6 @@ homepage:
                   href: https://photoview.alexlebens.net
                   siteMonitor: http://photoview.photoview:80
                   statusStyle: dot
-              - Podcasts and Audiobooks:
-                  icon: sh-audiobookshelf.webp
-                  description: Audiobookshelf
-                  href: https://audiobookshelf.alexlebens.net
-                  siteMonitor: http://audiobookshelf.audiobookshelf:80
-                  statusStyle: dot
               - Books:
                   icon: sh-booklore.webp
                   description: Booklore
@@ -331,12 +331,6 @@ homepage:
                   href: https://argo-workflows.alexlebens.net
                   siteMonitor: http://argo-workflows-server.argo-workflows:2746
                   statusStyle: dot
-              - API Workflows:
-                  icon: sh-n8n.webp
-                  description: n8n
-                  href: https://n8n.alexlebens.net
-                  siteMonitor: http://n8n-main.n8n:80
-                  statusStyle: dot
               - Uptime:
                   icon: sh-gatus.webp
                   description: Gatus
@@ -661,13 +655,19 @@ homepage:
                     url: http://lidarr.lidarr:80
                     key: {{ "{{HOMEPAGE_VAR_LIDARR_KEY}}" }}
                     fields: ["wanted", "queued", "artists"]
+              - RayFlume:
+                  icon: sh-youtubarr.webp
+                  description: Playlist to Lidarr Import
+                  href: https://rayflume.alexlebens.net
+                  siteMonitor: http://rayflume.rayflume:80
+                  statusStyle: dot
               - LidaTube:
                   icon: sh-lidatube.webp
                   description: Searches for Music
                   href: https://lidatube.alexlebens.net
                   siteMonitor: http://lidatube.lidatube:80
                   statusStyle: dot
-              - Soulseek:
+              - slskd:
                   icon: sh-slskd.webp
                   description: slskd
                   href: https://slskd.alexlebens.net

clusters/cl01tl/helm/huntarr/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
-digest: sha256:5df38c1b38d310e20b905a22a6224849c4c806ce8b31688cd8caa16e286d5cd3
-generated: "2025-12-18T02:45:24.918485555Z"
+  version: 0.7.0
+digest: sha256:f86c0c4efcba787557a71051409c43793c970244cfbb45b305a3bf612f64bff7
+generated: "2025-12-27T13:30:49.841027-06:00"

clusters/cl01tl/helm/huntarr/Chart.yaml

@@ -19,7 +19,7 @@ dependencies:
     version: 4.5.0
   - name: volsync-target
     alias: volsync-target-config
-    version: 0.6.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/huntarr.png
 # renovate: github=plexguide/Huntarr.io

clusters/cl01tl/helm/huntarr/values.yaml

@@ -60,3 +60,11 @@ huntarr:
               readOnly: false
 volsync-target-config:
   pvcTarget: huntarr-config
+  local:
+    enabled: true
+    schedule: 26 8 * * *
+  remote:
+    enabled: false
+  external:
+    enabled: true
+    schedule: 26 9 * * *

clusters/cl01tl/helm/immich/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.5.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.3
+  version: 7.4.5
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
-digest: sha256:49d8343aa4dc006a008cc50eb53ab1f541ff27190f321e2b3870d9a304c81ee2
-generated: "2025-12-23T17:41:46.797956-06:00"
+  version: 0.7.0
+digest: sha256:1055a62dcf5b7e6f37ca3acc9cac14eac84b65961a165927ae0600a278701d84
+generated: "2025-12-27T19:46:28.071891757Z"

clusters/cl01tl/helm/immich/Chart.yaml

@@ -20,14 +20,14 @@ dependencies:
     version: 4.5.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.3
+    version: 7.4.5
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     version: 0.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data
-    version: 0.6.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/immich.png
 # renovate: github=immich-app/immich

clusters/cl01tl/helm/immich/values.yaml

@@ -233,11 +233,17 @@ redis-replication:
 volsync-target-data:
   pvcTarget: immich
   local:
+    enabled: true
+    schedule: 28 8 * * *
     restic:
       cacheCapacity: 10Gi
   remote:
+    enabled: true
+    schedule: 28 10 * * *
     restic:
       cacheCapacity: 10Gi
   external:
+    enabled: true
+    schedule: 28 9 * * *
     restic:
       cacheCapacity: 10Gi

clusters/cl01tl/helm/jellyfin/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.5.0
 - name: meilisearch
   repository: https://meilisearch.github.io/meilisearch-kubernetes
-  version: 0.19.0
+  version: 0.20.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
-digest: sha256:47ce0fd90e4f659ccb73539935eb8fcd2a9cfd0a85f792851903fa2677ca2dbb
-generated: "2025-12-23T22:03:27.681556-06:00"
+  version: 0.7.0
+digest: sha256:20665aefeaea3e853d5c977cdce05089a87c6d83e43aa946a088f43bcc7eebf9
+generated: "2025-12-30T16:03:25.803286869Z"

clusters/cl01tl/helm/jellyfin/Chart.yaml

@@ -25,11 +25,11 @@ dependencies:
     repository: https://bjw-s-labs.github.io/helm-charts/
     version: 4.5.0
   - name: meilisearch
-    version: 0.19.0
+    version: 0.20.0
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: volsync-target
     alias: volsync-target-config
-    version: 0.6.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/jellyfin.png
 # renovate: github=jellyfin/jellyfin

clusters/cl01tl/helm/jellyfin/values.yaml

@@ -142,11 +142,15 @@ meilisearch:
 volsync-target-config:
   pvcTarget: jellyfin-config
   local:
+    enabled: true
+    schedule: 30 8 * * *
     restic:
       cacheCapacity: 10Gi
   remote:
     restic:
       cacheCapacity: 10Gi
   external:
+    enabled: true
+    schedule: 30 9 * * *
     restic:
       cacheCapacity: 10Gi

clusters/cl01tl/helm/jellystat/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.5.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.3
+  version: 7.4.5
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
-digest: sha256:520db247b91a1f121892c8283868f7737b6de01b9928d3af06a3706119c7f373
-generated: "2025-12-23T17:57:17.828908-06:00"
+  version: 0.7.0
+digest: sha256:4c40456788d4858e5ea21fef3ea0f0b5a3cb8fd9de05360c79845b94d67f61e4
+generated: "2025-12-27T19:46:39.315528285Z"

clusters/cl01tl/helm/jellystat/Chart.yaml

@@ -21,11 +21,11 @@ dependencies:
     version: 4.5.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.3
+    version: 7.4.5
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data
-    version: 0.6.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/jellystat.png
 # renovate: github=CyferShepard/Jellystat

clusters/cl01tl/helm/jellystat/values.yaml

@@ -141,6 +141,13 @@ postgres-18-cluster:
       #   immediate: true
       #   schedule: "0 0 0 * * *"
       #   backupName: external
-
 volsync-target-data:
   pvcTarget: jellystat-data
+  local:
+    enabled: true
+    schedule: 32 8 * * *
+  remote:
+    enabled: false
+  external:
+    enabled: true
+    schedule: 32 9 * * *

clusters/cl01tl/helm/karakeep/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.5.0
 - name: meilisearch
   repository: https://meilisearch.github.io/meilisearch-kubernetes
-  version: 0.19.0
+  version: 0.20.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.1.4
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
-digest: sha256:68db68d55b6dba608a8e86457eb122b9278e9fc3153129f4fa30cc685eee85f0
-generated: "2025-12-18T02:46:05.710950531Z"
+  version: 0.7.0
+digest: sha256:d65ca3de6fd1095c4dfe2515ed84c4705495c0725773ec95ea49331a38721785
+generated: "2025-12-30T16:03:37.441539588Z"

clusters/cl01tl/helm/karakeep/Chart.yaml

@@ -22,14 +22,14 @@ dependencies:
     repository: https://bjw-s-labs.github.io/helm-charts/
     version: 4.5.0
   - name: meilisearch
-    version: 0.19.0
+    version: 0.20.0
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
     version: 2.1.4
   - name: volsync-target
     alias: volsync-target-data
-    version: 0.6.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/webp/karakeep.webp
 # renovate: github=karakeep-app/karakeep

clusters/cl01tl/helm/karakeep/values.yaml

@@ -9,7 +9,7 @@ karakeep:
         main:
           image:
             repository: ghcr.io/karakeep-app/karakeep
-            tag: 0.29.3
+            tag: 0.30.0
             pullPolicy: IfNotPresent
           env:
             - name: DATA_DIR
@@ -170,3 +170,11 @@ meilisearch:
     enabled: true
 volsync-target-data:
   pvcTarget: karakeep
+  local:
+    enabled: true
+    schedule: 34 8 * * *
+  remote:
+    enabled: false
+  external:
+    enabled: true
+    schedule: 34 9 * * *

clusters/cl01tl/helm/komodo/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.5.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.3
-digest: sha256:982fc8d3fec365d0362f8ea38ecd00dd24d53d373ab3f8ac7b47bd6d6a9e8b2a
-generated: "2025-12-23T18:08:15.003474-06:00"
+  version: 7.4.5
+digest: sha256:6fcdaa177c2ec9174f32b3f780fe5fc01f65796f54e09fe77a4ae21540d2fb5a
+generated: "2025-12-27T19:46:51.089023495Z"

clusters/cl01tl/helm/komodo/Chart.yaml

@@ -23,7 +23,7 @@ dependencies:
     version: 4.5.0
   - name: postgres-cluster
     alias: postgresql-17-fdb-cluster
-    version: 7.4.3
+    version: 7.4.5
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/komodo.png
 # renovate: github=moghtech/komodo

clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: kube-prometheus-stack
   repository: oci://ghcr.io/prometheus-community/charts
-  version: 80.6.0
+  version: 80.9.1
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
   version: 4.5.0
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.5.0
-digest: sha256:6f046a936f1d732a44113eb0b7e54330a4261042179f37f4c94fccc9f20ee511
-generated: "2025-12-20T01:04:57.413744271Z"
+digest: sha256:91fcf8234e006b8e412e15ddd159ef3450a51bfdb6866a1ea2759741f78b70cd
+generated: "2025-12-30T22:24:25.338726593Z"

clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml

@@ -20,7 +20,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: kube-prometheus-stack
-    version: 80.6.0
+    version: 80.9.1
     repository: oci://ghcr.io/prometheus-community/charts
   - name: app-template
     alias: ntfy-alertmanager

clusters/cl01tl/helm/libation/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
-digest: sha256:aebb132f7d046cc08fc7c16cad3d7efdabb5a42c2ec86f4f8a2679fcf56652f0
-generated: "2025-12-18T02:46:17.443356445Z"
+  version: 0.7.0
+digest: sha256:21c605c3a1308796b1a9248d9d82f07b95c199a13088573bcfbfee9482beec6d
+generated: "2025-12-27T13:31:16.344123-06:00"

clusters/cl01tl/helm/libation/Chart.yaml

@@ -20,7 +20,7 @@ dependencies:
     version: 4.5.0
   - name: volsync-target
     alias: volsync-target-config
-    version: 0.6.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/libation.png
 # renovate: github=rmcrackan/Libation

clusters/cl01tl/helm/libation/values.yaml

@@ -60,5 +60,24 @@ libation:
           main:
             - path: /config
               readOnly: false
+    audiobooks:
+      existingClaim: libation-nfs-storage
+      advancedMounts:
+        main:
+          main:
+            - path: /data
+              readOnly: false
+        debug:
+          main:
+            - path: /data
+              readOnly: false
 volsync-target-config:
   pvcTarget: libation
+  local:
+    enabled: true
+    schedule: 36 8 * * *
+  remote:
+    enabled: false
+  external:
+    enabled: true
+    schedule: 36 9 * * *

clusters/cl01tl/helm/lidarr/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.5.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.3
+  version: 7.4.5
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
-digest: sha256:33d3f2e45a1c1ff157e715b4aa06498454de33d6f5956a97aaa8281188d2b358
-generated: "2025-12-23T22:25:42.862324-06:00"
+  version: 0.7.0
+digest: sha256:56327921df27afd527e05386206149a90d71a2c3592049be6c62209eba00bc98
+generated: "2025-12-27T19:47:02.001545454Z"

clusters/cl01tl/helm/lidarr/Chart.yaml

@@ -24,11 +24,11 @@ dependencies:
     version: 4.5.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.3
+    version: 7.4.5
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config
-    version: 0.6.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/lidarr.png
 # renovate: github=linuxserver/lidarr

clusters/cl01tl/helm/lidarr/values.yaml

@@ -170,3 +170,11 @@ volsync-target-config:
     runAsGroup: 1000
     fsGroup: 1000
     fsGroupChangePolicy: OnRootMismatch
+  local:
+    enabled: true
+    schedule: 38 8 * * *
+  remote:
+    enabled: false
+  external:
+    enabled: true
+    schedule: 38 9 * * *

clusters/cl01tl/helm/lidatube/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
-digest: sha256:4e550c4829f2754a00951d71ea2029705201d60c66256119f6f66f57b4be9455
-generated: "2025-12-18T02:46:37.051923133Z"
+  version: 0.7.0
+digest: sha256:6bc6bec57cbc0955f169b0caf22dac5ece3a5a09766178686256641016a56597
+generated: "2025-12-27T13:31:20.276455-06:00"

clusters/cl01tl/helm/lidatube/Chart.yaml

@@ -20,7 +20,7 @@ dependencies:
     version: 4.5.0
   - name: volsync-target
     alias: volsync-target-config
-    version: 0.6.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/lidatube.png
 # renovate: github=TheWicklowWolf/LidaTube

clusters/cl01tl/helm/lidatube/values.yaml

@@ -92,3 +92,11 @@ volsync-target-config:
     runAsGroup: 1000
     fsGroup: 1000
     fsGroupChangePolicy: OnRootMismatch
+  local:
+    enabled: true
+    schedule: 40 8 * * *
+  remote:
+    enabled: false
+  external:
+    enabled: true
+    schedule: 40 9 * * *

clusters/cl01tl/helm/listenarr/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
-digest: sha256:1d68f43b8a9bf2df9cee5e46491aa33245d7996ef6adff76e42f14463b03eb59
-generated: "2025-12-18T02:46:46.724653757Z"
+  version: 0.7.0
+digest: sha256:b6010b40a08e00cc0b51f305830b984b274564d52bb4c832651dae805a7248a8
+generated: "2025-12-27T13:31:22.118032-06:00"

clusters/cl01tl/helm/listenarr/Chart.yaml

@@ -19,7 +19,7 @@ dependencies:
     version: 4.5.0
   - name: volsync-target
     alias: volsync-target-config
-    version: 0.6.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 # renovate: github=therobbiedavis/Listenarr
 appVersion: 0.2.35

clusters/cl01tl/helm/listenarr/values.yaml

@@ -73,3 +73,11 @@ volsync-target-config:
     runAsGroup: 1000
     fsGroup: 1000
     fsGroupChangePolicy: OnRootMismatch
+  local:
+    enabled: true
+    schedule: 42 8 * * *
+  remote:
+    enabled: false
+  external:
+    enabled: true
+    schedule: 42 9 * * *

clusters/cl01tl/helm/local-path-provisioner/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: local-path-provisioner
   repository: https://charts.containeroo.ch
-  version: 0.0.33
-digest: sha256:323aa6386161d2f5e2f3122082bc1dc63aeae96d2e02520b8d5dc63f80c3be1c
-generated: "2025-12-01T20:26:30.26287-06:00"
+  version: 0.0.34
+digest: sha256:f4f946897660d5d65eb2a56144d907c0b48c9a72e20d10a73684eaeb0d50cfd3
+generated: "2025-12-26T21:55:29.099967751Z"

clusters/cl01tl/helm/local-path-provisioner/Chart.yaml

@@ -15,7 +15,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: local-path-provisioner
-    version: 0.0.33
+    version: 0.0.34
     repository: https://charts.containeroo.ch
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 # renovate: github=rancher/local-path-provisioner

clusters/cl01tl/helm/local-path-provisioner/values.yaml

@@ -1,7 +1,7 @@
 local-path-provisioner:
   image:
     repository: rancher/local-path-provisioner
-    tag: v0.0.32
+    tag: v0.0.33
   helperImage:
     repository: busybox
     tag: 1.37.0
@@ -13,26 +13,16 @@ local-path-provisioner:
     reclaimPolicy: Delete
     volumeBindingMode: WaitForFirstConsumer
   nodePathMap:
-    - node: talos-2di-ktg
+    - node: DEFAULT_PATH_FOR_NON_LISTED_NODES
       paths:
-        - /var/local-path-provisioner
-    - node: talos-9vs-6hh
-      paths:
-        - /var/local-path-provisioner
-    - node: talos-aoq-hpv
-      paths:
-        - /var/local-path-provisioner
+        - /var/mnt/local-storage
   affinity:
     nodeAffinity:
       requiredDuringSchedulingIgnoredDuringExecution:
         nodeSelectorTerms:
           - matchExpressions:
-            - key: kubernetes.io/hostname
-              operator: In
-              values:
-                - talos-2di-ktg
-                - talos-9vs-6hh
-                - talos-aoq-hpv
+              - key: node-role.kubernetes.io/local-storage-node
+                operator: Exists
   configmap:
     name: local-path-config
     setup: |-

clusters/cl01tl/helm/loki/Chart.lock

@@ -2,8 +2,8 @@ dependencies:
 - name: loki
   repository: https://grafana.github.io/helm-charts
   version: 6.49.0
-- name: promtail
+- name: alloy
   repository: https://grafana.github.io/helm-charts
-  version: 6.17.1
-digest: sha256:56aa7fd5ac7a16617b60e4a3f501aeeec1bdfbb3d67a41b45f33d3a4cbbed07e
-generated: "2025-12-14T20:36:23.645088704Z"
+  version: 1.5.1
+digest: sha256:f67da7cd3bea0b23c88a2e1a6f912444d7adcc7cacd690f5dcdf5b4ea7e660bc
+generated: "2025-12-27T18:21:05.367034-06:00"

clusters/cl01tl/helm/loki/Chart.yaml

@@ -18,8 +18,8 @@ dependencies:
   - name: loki
     version: 6.49.0
     repository: https://grafana.github.io/helm-charts
-  - name: promtail
-    version: 6.17.1
+  - name: alloy
+    version: 1.5.1
     repository: https://grafana.github.io/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/loki.png
 # renovate: github=grafana/loki

clusters/cl01tl/helm/loki/values.yaml

@@ -50,15 +50,78 @@ loki:
     replicas: 0
   backend:
     replicas: 0
-promtail:
-  service:
-    labels:
-      promtail: 3.0.0
+alloy:
+  crds:
+    create: true
+  alloy:
+    configMap:
+      create: true
+      content: |
+        logging {
+          level = "debug"
+          format = "logfmt"
+        }
+        discovery.kubernetes "pods" {
+          role = "pod"
+        }
+        discovery.relabel "pods" {
+          targets = discovery.kubernetes.pods.targets
+
+          rule {
+            source_labels = ["__meta_kubernetes_namespace"]
+            target_label = "namespace"
+            action = "replace"
+          }
+          rule {
+            source_labels = ["__meta_kubernetes_pod_label_app_kubernetes_io_name"]
+            target_label = "app"
+            action = "replace"
+          }
+          rule {
+            source_labels = ["__meta_kubernetes_pod_container_name"]
+            target_label = "container"
+            action = "replace"
+          }
+          rule {
+            source_labels = ["__meta_kubernetes_pod_name"]
+            target_label = "pod"
+            action = "replace"
+          }
+        }
+        loki.source.kubernetes "pods" {
+          targets    = discovery.relabel.pods.output
+          forward_to = [loki.process.process.receiver]
+        }
+        loki.process "process" {
+          forward_to = [loki.write.loki.receiver]
+
+          stage.drop {
+            older_than          = "1h"
+            drop_counter_reason = "too old"
+          }
+          stage.match {
+            selector = "{instance=~\".*\"}"
+            stage.json {
+              expressions = {
+                level = "\"level\"",
+              }
+            }
+            stage.labels {
+              values = {
+                level = "level",
+              }
+            }
+          }
+          stage.label_drop {
+            values = [ "service_name" ]
+          }
+        }
+        loki.write "loki" {
+          endpoint {
+            url = "http://loki-gateway.loki.svc.cluster.local:80/loki/api/v1/push"
+          }
+        }
+  controller:
+    type: 'daemonset'
   serviceMonitor:
     enabled: true
-    prometheusRule:
-      enabled: false
-  config:
-    clients:
-      - url: http://loki-gateway.loki.svc.cluster.local:80/loki/api/v1/push
-        tenant_id: 1

clusters/cl01tl/helm/mariadb-operator/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 25.10.3
 - name: mariadb-operator-crds
   repository: https://helm.mariadb.com/mariadb-operator
-  version: 25.10.2
-digest: sha256:013c53bbc13fa7b7f3f25d82f3116332e19894a1b1fd796224a4c05f9382645f
-generated: "2025-12-24T18:26:55.204948602Z"
+  version: 25.10.3
+digest: sha256:d32a1fb47160eccd389a71467a954f2eea59cad595db38a74243581af1c9c426
+generated: "2025-12-24T19:28:09.775077014Z"

clusters/cl01tl/helm/mariadb-operator/Chart.yaml

@@ -18,7 +18,7 @@ dependencies:
     version: 25.10.3
     repository: https://helm.mariadb.com/mariadb-operator
   - name: mariadb-operator-crds
-    version: 25.10.2
+    version: 25.10.3
     repository: https://helm.mariadb.com/mariadb-operator
 icon: https://mariadb-operator.github.io/mariadb-operator/assets/mariadb_profile.svg
 # renovate: github=mariadb-operator/mariadb-operator

clusters/cl01tl/helm/matrix-synapse/Chart.lock

@@ -19,7 +19,7 @@ dependencies:
   version: 2.1.4
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.3
+  version: 7.4.5
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.5.0
@@ -28,15 +28,15 @@ dependencies:
   version: 0.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
+  version: 0.7.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
+  version: 0.7.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
+  version: 0.7.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
-digest: sha256:0c08af386645d129c9420430b1506c4ac6556ef0155d5a1f86aab2ed5e0e0b85
-generated: "2025-12-23T22:32:15.040072-06:00"
+  version: 0.7.0
+digest: sha256:a2eed4dbe5dbe456d38e67d8b312873a6520b558e599b511664fa93eb92cb3d1
+generated: "2025-12-27T19:47:13.888596032Z"