Update searxng/searxng:latest Docker digest to 472dd0c (#3032)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/karakeep-app/karakeep](https://github.com/karakeep-app/karakeep) | minor | `0.29.3` → `0.30.0` |

---

### Release Notes

<details>
<summary>karakeep-app/karakeep (ghcr.io/karakeep-app/karakeep)</summary>

### [`v0.30.0`](https://github.com/karakeep-app/karakeep/releases/tag/v0.30.0): 0.30.0

[Compare Source](https://github.com/karakeep-app/karakeep/compare/v0.29.3...v0.30.0)

### 0.30.0 (New year release 🎁)

Welcome to the 0.30.0 release of Karakeep and happy new year! This release comes with "2025 wrapped" (a bit late), PDF archives, new reader settings, avatars, reddit crawling improvements, and more! Huge thanks to our contributors for this release [@&#8203;esimkowitz](https://github.com/esimkowitz), [@&#8203;Moondragon85](https://github.com/Moondragon85), [@&#8203;rzxczxc](https://github.com/rzxczxc), [@&#8203;colado](https://github.com/colado), [@&#8203;Yeraze](https://github.com/Yeraze), [@&#8203;eriktews](https://github.com/eriktews) and everyone who shipped code, triaged bugs, or shared feedback for this release.

> If you enjoy using Karakeep, consider supporting the project [here ☕️](https://buymeacoffee.com/mbassem) or via GitHub [here](https://github.com/sponsors/MohamedBassem).

<a href="https://www.buymeacoffee.com/mbassem" target="_blank"><img src="https://cdn.buymeacoffee.com/buttons/v2/default-yellow.png" alt="Buy Me A Coffee" width="auto" height="50" ></a>

And in case you missed it, we now have a ☁️ managed offering ☁️ for those who don't want to self-host. We're in public beta now and you can signup [here](https://cloud.karakeep.app) 🎉.

### New Features 🚀

- 2025 Wrapped is here to celebrate your year in Karakeep ([#&#8203;2322](https://github.com/karakeep-app/karakeep/issues/2322)).
- PDF archives
  - Archive bookmarks as PDFs, generated automatically during crawling or on-demand ([#&#8203;2309](https://github.com/karakeep-app/karakeep/issues/2309)).
  - Set `CRAWLER_STORE_PDF=true` to enable auto PDF archiving.
- Unified reader settings (font, size, etc) across all devices with per-device overrides ([#&#8203;2230](https://github.com/karakeep-app/karakeep/issues/2230)). By [@&#8203;esimkowitz](https://github.com/esimkowitz)!
- Better metadata extraction:
  - Reddit posts should now be crawled correctly, and banners should be fetched more reliably.
  - Fixed YouTube thumbnail and author extraction.
  - Fixed Amazon product image extraction (where it was sometimes showing the prime logo) ([#&#8203;2204](https://github.com/karakeep-app/karakeep/issues/2204), [#&#8203;2108](https://github.com/karakeep-app/karakeep/issues/2108)). By [@&#8203;Yeraze](https://github.com/Yeraze)
- Upload custom user avatars for more personal profiles ([#&#8203;2296](https://github.com/karakeep-app/karakeep/issues/2296)).
- AI Setting customization:
  - Customize tag styling (case, separators, language) per user. It's highly recommended to set the tag style for more consistent tags ([#&#8203;2312](https://github.com/karakeep-app/karakeep/issues/2312)).
  - Per-user toggles to disable auto-tagging and/or auto-summarization ([#&#8203;2275](https://github.com/karakeep-app/karakeep/issues/2275)).
- Others:
  - Import libraries from Matter with full export support ([#&#8203;2245](https://github.com/karakeep-app/karakeep/issues/2245)). By [@&#8203;Moondragon85](https://github.com/Moondragon85)
  - Bulk remove bookmarks from lists ([#&#8203;2279](https://github.com/karakeep-app/karakeep/issues/2279)).
  - Add a new rule condition to rule engine: "URL Does Not Contain" ([#&#8203;2280](https://github.com/karakeep-app/karakeep/issues/2280)).
  - Configure an OpenAI proxy via `OPENAI_PROXY_URL` ([#&#8203;2231](https://github.com/karakeep-app/karakeep/issues/2231)). By [@&#8203;rzxczxc](https://github.com/rzxczxc)
  - Added `is:broken` search qualifier to show links that failed crawling ([#&#8203;2225](https://github.com/karakeep-app/karakeep/issues/2225)).
  - Edit list now in the mobile app ([#&#8203;2310](https://github.com/karakeep-app/karakeep/issues/2310)). By [@&#8203;colado](https://github.com/colado)

### UX Improvements ✨

- Our docs got a facelift! The docs got some styling, the pages got re-organized and we now have a "Using Karakeep" section that explains some of the core concepts of Karakeep.
- Replace bookmark banners and download attachments directly from the drop down menu ([#&#8203;2328](https://github.com/karakeep-app/karakeep/issues/2328)).
- Sidebar scrollbar looks cleaner, and pending list invites show as a badge in the sidebar.
- Bookmark edit dialog now includes notes.
- Bookmark owner avatars now show up in collaborative lists.
- Mobile UI/UX improvements:
  - Fixed title on mobile to be at most 2 lines long.
  - Mobile settings screens should now feel more native ([#&#8203;2307](https://github.com/karakeep-app/karakeep/issues/2307)).
  - OLED-friendly colors in the Android app matching the colors of the ios app ([#&#8203;1958](https://github.com/karakeep-app/karakeep/issues/1958)).
  - Toasts on iOS now appear correctly above the open modals ([#&#8203;2320](https://github.com/karakeep-app/karakeep/issues/2320)). By [@&#8203;colado](https://github.com/colado)
  - Shared lists now appear in a dedicated subsection on mobile.
  - Adding a bookmark to a list now shows a spinner during loading ([#&#8203;2283](https://github.com/karakeep-app/karakeep/issues/2283)).
  - Server version now appears in mobile settings ([#&#8203;2276](https://github.com/karakeep-app/karakeep/issues/2276)).
  - Fixed the confusing "tick button" beside the server address during login.

### Fixes 🔧

- Fixed missing db indicies that was causing slow bookmark queries ([#&#8203;2246](https://github.com/karakeep-app/karakeep/issues/2246), [#&#8203;2287](https://github.com/karakeep-app/karakeep/issues/2287)).
- Improved Ollama summaries by using the generate endpoint ([#&#8203;2324](https://github.com/karakeep-app/karakeep/issues/2324)). By [@&#8203;eriktews](https://github.com/eriktews)
- Fixed HTML bookmark imports failing on empty folder names ([#&#8203;2300](https://github.com/karakeep-app/karakeep/issues/2300)).
- Fixed non-link bookmarks stuck in pending summarization ([#&#8203;1605](https://github.com/karakeep-app/karakeep/issues/1605)).
- Improved tagging prompts and error-page detection.
- Reject spoofed content types on file uploads.
- Preserve failure counts when rescheduling rate-limited domains ([#&#8203;2303](https://github.com/karakeep-app/karakeep/issues/2303)).
- Fixed duplicate backdrop buttons in reader view ([#&#8203;2234](https://github.com/karakeep-app/karakeep/issues/2234)). By [@&#8203;colado](https://github.com/colado)
- RSS feed fetching is now spread over the hour ([#&#8203;2227](https://github.com/karakeep-app/karakeep/issues/2227)).
- Asset preprocessing worker timeout is now configurable ([`91784cd`](https://github.com/karakeep-app/karakeep/commit/91784cd2)).
- Fixed bypassing email verification in apiKey.exchange.
- Added limits on number of rss feeds and webhooks per user configurable by admins.
- Fixed a bug where failed crawling leave bookmarks as pending tagging in the admin dashboard.

### For Developers 🛠️

- OpenTelemetry integration with OTLP exporter ([#&#8203;2318](https://github.com/karakeep-app/karakeep/issues/2318), [#&#8203;2321](https://github.com/karakeep-app/karakeep/issues/2321)).
- CLI can list users for admins.
- We're now defaulting to Node.js 24 (the current LTS).
- Breaking: In bookmark APIs `includeContent` now defaults to `false`. This change was announced a couple months ago, and is taking effect in this release.

### Community Projects 💡

- Karakeep integration for Home Assistant ([#&#8203;2196](https://github.com/karakeep-app/karakeep/issues/2196)) by [@&#8203;sli-cka](https://github.com/sli-cka). Get it from [here](https://github.com/sli-cka/karakeep-homeassistant).

### Screenshots 📸

#### Wrapped 2025

![karakeep-wrapped-2025](https://github.com/user-attachments/assets/0e1e3d25-c827-4974-8f0a-9b7b4a75f859)

#### Reader Settings

![https://github.com/user-attachments/assets/4d81cb80-f9b8-43f2-998a-736f18e33038](https://github.com/user-attachments/assets/4d81cb80-f9b8-43f2-998a-736f18e33038).

##### AI Settings

![https://github.com/user-attachments/assets/48032bf6-5413-44ee-9c3b-ac7b385aeccf](https://github.com/user-attachments/assets/48032bf6-5413-44ee-9c3b-ac7b385aeccf)

### Upgrading 📦

To upgrade:

- If you're using `KARAKEEP_VERSION=release`, run `docker compose pull && docker compose up -d`.
- If you're pinning it to a specific version, bump the version and then run `docker compose pull && docker compose up -d`.

### All Commits

- i18n: fix en\_US translation - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`d472a3a`](https://github.com/karakeep-app/karakeep/commit/d472a3a1)
- fix: fix wrapped feature to only show bookmarks in 2025 - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`4077e28`](https://github.com/karakeep-app/karakeep/commit/4077e286)
- i18n: Sync weblate translations - Weblate in [`401ea6a`](https://github.com/karakeep-app/karakeep/commit/401ea6a9)
- chore: drop the experimental tag from the rule engine - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`bf9d610`](https://github.com/karakeep-app/karakeep/commit/bf9d6105)
- fix: show a toast during banner upload - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`9555f40`](https://github.com/karakeep-app/karakeep/commit/9555f409)
- fix: don't switch the bookmark back to pending on recrawl - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`79400d0`](https://github.com/karakeep-app/karakeep/commit/79400d04)
- fix: use the Ollama generate endpoint instead of chat ([#&#8203;2324](https://github.com/karakeep-app/karakeep/issues/2324)) - [@&#8203;eriktews](https://github.com/eriktews) in [`e8c79f2`](https://github.com/karakeep-app/karakeep/commit/e8c79f29)
- feat: add replace banner and attachment download ([#&#8203;2328](https://github.com/karakeep-app/karakeep/issues/2328)) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`3d652ee`](https://github.com/karakeep-app/karakeep/commit/3d652eee)
- feat: Add bulk remove from list ([#&#8203;2279](https://github.com/karakeep-app/karakeep/issues/2279)) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`7a76216`](https://github.com/karakeep-app/karakeep/commit/7a76216e)
- feat: add "URL Does Not Contain" condition to rule engine ([#&#8203;2280](https://github.com/karakeep-app/karakeep/issues/2280)) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`b20ba9c`](https://github.com/karakeep-app/karakeep/commit/b20ba9cf)
- feat: 2025 wrapped ([#&#8203;2322](https://github.com/karakeep-app/karakeep/issues/2322)) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`a0b4a26`](https://github.com/karakeep-app/karakeep/commit/a0b4a26a)
- chore: worker tracing ([#&#8203;2321](https://github.com/karakeep-app/karakeep/issues/2321)) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`7ab7db8`](https://github.com/karakeep-app/karakeep/commit/7ab7db8e)
- feat(landing): add corporate pricing - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`d852ee1`](https://github.com/karakeep-app/karakeep/commit/d852ee1a)
- fix(mobile): mobile modal UI issues ([#&#8203;2320](https://github.com/karakeep-app/karakeep/issues/2320)) - [@&#8203;colado](https://github.com/colado) in [`a43d375`](https://github.com/karakeep-app/karakeep/commit/a43d375f)
- ci: fix tests - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`9d6b128`](https://github.com/karakeep-app/karakeep/commit/9d6b1282)
- feat: change default for tag style to be title case with spaces - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`9098a5a`](https://github.com/karakeep-app/karakeep/commit/9098a5a6)
- fix: more tagging tweaks - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`c1cbaa8`](https://github.com/karakeep-app/karakeep/commit/c1cbaa8a)
- build: fix broken CI - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`a5ce977`](https://github.com/karakeep-app/karakeep/commit/a5ce977d)
- fix: change prompt to better recognize error pages - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`f5a5c14`](https://github.com/karakeep-app/karakeep/commit/f5a5c14e)
- refactor: reduce duplication in compare-models tool - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`f00287e`](https://github.com/karakeep-app/karakeep/commit/f00287ed)
- chore: add tracing for email functions - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`ba8d84a`](https://github.com/karakeep-app/karakeep/commit/ba8d84a5)
- feat(mobile): create new list edit screen ([#&#8203;2310](https://github.com/karakeep-app/karakeep/issues/2310)) - [@&#8203;colado](https://github.com/colado) in [`30fa06f`](https://github.com/karakeep-app/karakeep/commit/30fa06fe)
- feat: Add open telemetry ([#&#8203;2318](https://github.com/karakeep-app/karakeep/issues/2318)) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`5537fe8`](https://github.com/karakeep-app/karakeep/commit/5537fe85)
- fix: reset tagging status on crawl failure  ([#&#8203;2316](https://github.com/karakeep-app/karakeep/issues/2316)) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`f7920bd`](https://github.com/karakeep-app/karakeep/commit/f7920bdc)
- feat: add the ability to specify a different changelog version - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`1082076`](https://github.com/karakeep-app/karakeep/commit/10820761)
- fix: remove duplicate mobile backdrop button in reader view ([#&#8203;2234](https://github.com/karakeep-app/karakeep/issues/2234)) - [@&#8203;esimkowitz](https://github.com/esimkowitz) in [`3f44e31`](https://github.com/karakeep-app/karakeep/commit/3f44e319)
- fix(landing): fix cloud banner on mobile - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`23f2853`](https://github.com/karakeep-app/karakeep/commit/23f28530)
- refactor: add suspense boundary in sidebar layout - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`3c3d868`](https://github.com/karakeep-app/karakeep/commit/3c3d8685)
- feat(mobile): make the settings menu look more native ([#&#8203;2307](https://github.com/karakeep-app/karakeep/issues/2307)) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`6ee48ff`](https://github.com/karakeep-app/karakeep/commit/6ee48ffb)
- feat(web): better looking scrollbar in the sidebar - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`f7523a2`](https://github.com/karakeep-app/karakeep/commit/f7523a21)
- feat(mobile): use oled friendly colors for android app. fixes [#&#8203;1958](https://github.com/karakeep-app/karakeep/issues/1958) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`e800d74`](https://github.com/karakeep-app/karakeep/commit/e800d744)
- refactor: migrate toasts to sonner - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`173fb99`](https://github.com/karakeep-app/karakeep/commit/173fb99a)
- feat: add customizable tag styles ([#&#8203;2312](https://github.com/karakeep-app/karakeep/issues/2312)) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`af3010a`](https://github.com/karakeep-app/karakeep/commit/af3010ab)
- feat: add Matter import support ([#&#8203;2245](https://github.com/karakeep-app/karakeep/issues/2245)) - [@&#8203;Moondragon85](https://github.com/Moondragon85) in [`93630ce`](https://github.com/karakeep-app/karakeep/commit/93630ce8)
- feat: support archiving as pdf ([#&#8203;2309](https://github.com/karakeep-app/karakeep/issues/2309)) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`267db79`](https://github.com/karakeep-app/karakeep/commit/267db791)
- feat: add OPENAI\_PROXY\_URL configuration and support for proxy in OpenAI client ([#&#8203;2231](https://github.com/karakeep-app/karakeep/issues/2231)) - [@&#8203;rzxczxc](https://github.com/rzxczxc) in [`bb6b742`](https://github.com/karakeep-app/karakeep/commit/bb6b742a)
- fix(tests): fix the asset upload tests - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`e82694d`](https://github.com/karakeep-app/karakeep/commit/e82694de)
- fix: reject spoofed content types on uploads - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`2dbdf76`](https://github.com/karakeep-app/karakeep/commit/2dbdf76c)
- deps: upgrade tesseract to v7 - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`347793a`](https://github.com/karakeep-app/karakeep/commit/347793ad)
- feat(landing): announce cloud public beta in landing page - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`c3b2326`](https://github.com/karakeep-app/karakeep/commit/c3b2326c)
- chore: add a tool for comparing perf of different models - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`1dfa5d1`](https://github.com/karakeep-app/karakeep/commit/1dfa5d12)
- feat: add notes to the bookmark edit dialog - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`ecb7a71`](https://github.com/karakeep-app/karakeep/commit/ecb7a710)
- fix(restate): change journal retention for services to 3d - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`0efffdc`](https://github.com/karakeep-app/karakeep/commit/0efffdcc)
- fix(cli): migrate bookmark source in migration command - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`65cfa87`](https://github.com/karakeep-app/karakeep/commit/65cfa871)
- fix: preserve failure count when rescheduling rate limited domains ([#&#8203;2303](https://github.com/karakeep-app/karakeep/issues/2303)) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`ddd4b57`](https://github.com/karakeep-app/karakeep/commit/ddd4b578)
- feat: show bookmark owner icon in shared lists ([#&#8203;2277](https://github.com/karakeep-app/karakeep/issues/2277)) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`ef27670`](https://github.com/karakeep-app/karakeep/commit/ef27670f)
- fix: make avatars public - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`f7d3462`](https://github.com/karakeep-app/karakeep/commit/f7d34627)
- refactor: move assets to their own model ([#&#8203;2301](https://github.com/karakeep-app/karakeep/issues/2301)) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`013ca67`](https://github.com/karakeep-app/karakeep/commit/013ca67c)
- feat: add support for user avatars ([#&#8203;2296](https://github.com/karakeep-app/karakeep/issues/2296)) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`314c363`](https://github.com/karakeep-app/karakeep/commit/314c363e)
- fix: handle empty folder names in HTML bookmark imports ([#&#8203;2300](https://github.com/karakeep-app/karakeep/issues/2300)) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`3408e6e`](https://github.com/karakeep-app/karakeep/commit/3408e6e4)
- feat: add a warning about viewing archives inline. fixes [#&#8203;2286](https://github.com/karakeep-app/karakeep/issues/2286) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`e336513`](https://github.com/karakeep-app/karakeep/commit/e336513f)
- fix(tests): fix the user setting tests - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`258bebe`](https://github.com/karakeep-app/karakeep/commit/258bebe0)
- feat: Add user settings to disable auto tagging/summarization ([#&#8203;2275](https://github.com/karakeep-app/karakeep/issues/2275)) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`0bdba54`](https://github.com/karakeep-app/karakeep/commit/0bdba54b)
- feat(mobile): Convert server address editing to modal in mobile app ([#&#8203;2290](https://github.com/karakeep-app/karakeep/issues/2290)) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`ece68ed`](https://github.com/karakeep-app/karakeep/commit/ece68ed0)
- fix: check quota usage instead bookmark transaction - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`ca4bfa4`](https://github.com/karakeep-app/karakeep/commit/ca4bfa4c)
- fix: optimize tagging db queries ([#&#8203;2287](https://github.com/karakeep-app/karakeep/issues/2287)) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`e18dc4c`](https://github.com/karakeep-app/karakeep/commit/e18dc4c9)
- docs: shuffle some docs around - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`4762da1`](https://github.com/karakeep-app/karakeep/commit/4762da12)
- docs: add RSS feeds integration documentation ([#&#8203;2288](https://github.com/karakeep-app/karakeep/issues/2288)) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`903aa5e`](https://github.com/karakeep-app/karakeep/commit/903aa5e9)
- feat(restate): Add a var to control whether to expose core services or not - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`dc8ab86`](https://github.com/karakeep-app/karakeep/commit/dc8ab862)
- feat: add more restate semaphore controls - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`58eb6c0`](https://github.com/karakeep-app/karakeep/commit/58eb6c00)
- feat(mobile): Show shared lists under a subsection - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`837dea5`](https://github.com/karakeep-app/karakeep/commit/837dea5e)
- fix(mobile): Fix title line clamp to 2 lines - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`15cfa13`](https://github.com/karakeep-app/karakeep/commit/15cfa137)
- fix(mobile): Add loading spinner to mobile list button ([#&#8203;2283](https://github.com/karakeep-app/karakeep/issues/2283)) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`7b98c52`](https://github.com/karakeep-app/karakeep/commit/7b98c52a)
- feat: add server version display to mobile app settings ([#&#8203;2276](https://github.com/karakeep-app/karakeep/issues/2276)) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`bd969b3`](https://github.com/karakeep-app/karakeep/commit/bd969b34)
- fix: add authentication checks to settings layout ([#&#8203;2274](https://github.com/karakeep-app/karakeep/issues/2274)) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`e53f3ae`](https://github.com/karakeep-app/karakeep/commit/e53f3ae5)
- fix: only trigger search autocomplete on first search char - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`92e352f`](https://github.com/karakeep-app/karakeep/commit/92e352f3)
- feat(landing): remove waitlist link. fixes [#&#8203;2270](https://github.com/karakeep-app/karakeep/issues/2270) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`e842c5a`](https://github.com/karakeep-app/karakeep/commit/e842c5a7)
- fix: don't fail the script if the user karakeep already exists. fixes [#&#8203;2242](https://github.com/karakeep-app/karakeep/issues/2242) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`e78e512`](https://github.com/karakeep-app/karakeep/commit/e78e5129)
- fix: collapse reader settings by default - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`3955f91`](https://github.com/karakeep-app/karakeep/commit/3955f91a)
- docs: Add icons beside category names - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`9021822`](https://github.com/karakeep-app/karakeep/commit/9021822a)
- Revert "fix: fix restate service to return control to restate service on timeout" - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`510174d`](https://github.com/karakeep-app/karakeep/commit/510174db)
- feat: Add unified reader settings with local overrides ([#&#8203;2230](https://github.com/karakeep-app/karakeep/issues/2230)) - [@&#8203;esimkowitz](https://github.com/esimkowitz) in [`7f4202a`](https://github.com/karakeep-app/karakeep/commit/7f4202af)
- fix: fix restate service to return control to restate service on timeout - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`6db14ac`](https://github.com/karakeep-app/karakeep/commit/6db14ac4)
- fix: non-link bookmarks where stuck in pending summarization. Fixes [#&#8203;1605](https://github.com/karakeep-app/karakeep/issues/1605) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`d735711`](https://github.com/karakeep-app/karakeep/commit/d7357118)
- fix: move trpc error logging inside the dev check - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`0b65e5a`](https://github.com/karakeep-app/karakeep/commit/0b65e5a4)
- fix: Fix Amazon product image extraction on amazon.com URLs ([#&#8203;2108](https://github.com/karakeep-app/karakeep/issues/2108)) - [@&#8203;Yeraze](https://github.com/Yeraze) in [`b319635`](https://github.com/karakeep-app/karakeep/commit/b3196354)
- feat: use reddit API for metadata extraction. Fixes [#&#8203;1853](https://github.com/karakeep-app/karakeep/issues/1853) [#&#8203;1883](https://github.com/karakeep-app/karakeep/issues/1883) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`f5c32d9`](https://github.com/karakeep-app/karakeep/commit/f5c32d94)
- fix: use GET requests for the content type request - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`d6dd8eb`](https://github.com/karakeep-app/karakeep/commit/d6dd8ebd)
- docs: fix sidebar on mobile - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`f111cba`](https://github.com/karakeep-app/karakeep/commit/f111cba9)
- feat: Add limits on number of rss feeds and webhooks per user - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`74df8bd`](https://github.com/karakeep-app/karakeep/commit/74df8bd7)
- release(cli): Bump CLI version to 0.29.1 - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`697c853`](https://github.com/karakeep-app/karakeep/commit/697c853a)
- readme: some readme updates - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`1ebc721`](https://github.com/karakeep-app/karakeep/commit/1ebc721c)
- docs: Update screenshots in docs - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`c6cf418`](https://github.com/karakeep-app/karakeep/commit/c6cf4188)
- docs: Adding user guides - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`04b9c29`](https://github.com/karakeep-app/karakeep/commit/04b9c291)
- docs: drop docs for old versions - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`fecb007`](https://github.com/karakeep-app/karakeep/commit/fecb0079)
- docs: restructure the docs - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`af69f63`](https://github.com/karakeep-app/karakeep/commit/af69f637)
- docs: restyle the docs - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`b434440`](https://github.com/karakeep-app/karakeep/commit/b4344401)
- ci: run CI with node 24 - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`2bdba53`](https://github.com/karakeep-app/karakeep/commit/2bdba536)
- deps: Upgrade to nodejs 24 - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`480abce`](https://github.com/karakeep-app/karakeep/commit/480abce4)
- fix!: changing default for includeContent to be false in the API - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`1369ad0`](https://github.com/karakeep-app/karakeep/commit/1369ad01)
- deps: Upgrade nextjs to 15.3.8 - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`80278ec`](https://github.com/karakeep-app/karakeep/commit/80278ecf)
- deps: Upgrade nextjs to 15.3.7 - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`74bdc18`](https://github.com/karakeep-app/karakeep/commit/74bdc186)
- fix: add more indicies for faster bookmark queries ([#&#8203;2246](https://github.com/karakeep-app/karakeep/issues/2246)) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`683083f`](https://github.com/karakeep-app/karakeep/commit/683083f4)
- feat: make asset preprocessing worker timeout configurable - [@&#8203;Claude](https://github.com/Claude) in [`91784cd`](https://github.com/karakeep-app/karakeep/commit/91784cd2)
- fix: Add cache control header on asset endpoints - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`3e8cc74`](https://github.com/karakeep-app/karakeep/commit/3e8cc745)
- chore: Allowing multi user benchmarks and adding more coverage - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`265b677`](https://github.com/karakeep-app/karakeep/commit/265b6773)
- feat(cli): Add ability to list users for the admin in the CLI - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`69a756a`](https://github.com/karakeep-app/karakeep/commit/69a756aa)
- fix: fix correctly accounting for text bookmark in import sessions. [#&#8203;2208](https://github.com/karakeep-app/karakeep/issues/2208) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`6886385`](https://github.com/karakeep-app/karakeep/commit/6886385c)
- fix: check import quota before importing bookmarks ([#&#8203;2232](https://github.com/karakeep-app/karakeep/issues/2232)) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`20d3761`](https://github.com/karakeep-app/karakeep/commit/20d3761c)
- build: fix typecheck error in query explainer - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`b6c2dad`](https://github.com/karakeep-app/karakeep/commit/b6c2dadd)
- fix: migrate to metascraper-x from metascraper-twitter - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`c6f93b3`](https://github.com/karakeep-app/karakeep/commit/c6f93b3b)
- feat: add is:broken search qualifier for broken links ([#&#8203;2225](https://github.com/karakeep-app/karakeep/issues/2225)) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`1f43f23`](https://github.com/karakeep-app/karakeep/commit/1f43f232)
- feat: spread feed fetch scheduling deterministically over the hour ([#&#8203;2227](https://github.com/karakeep-app/karakeep/issues/2227)) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`13a090c`](https://github.com/karakeep-app/karakeep/commit/13a090c4)
- fix: better extraction for youtube thumbnails. [#&#8203;2204](https://github.com/karakeep-app/karakeep/issues/2204) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`e3cc546`](https://github.com/karakeep-app/karakeep/commit/e3cc5463)
- fix: remove queue triggers outside of updateTags transaction - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`cf2a12c`](https://github.com/karakeep-app/karakeep/commit/cf2a12c8)
- chore: add benchmarks ([#&#8203;2229](https://github.com/karakeep-app/karakeep/issues/2229)) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`6180c66`](https://github.com/karakeep-app/karakeep/commit/6180c662)
- build: dont update latest tags on release - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`de98873`](https://github.com/karakeep-app/karakeep/commit/de98873a)
- deps: Upgrade nextjs to 15.3.6 - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`20081a3`](https://github.com/karakeep-app/karakeep/commit/20081a3a)
- feat: add a notification badge for list invitations - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`3c6b8e9`](https://github.com/karakeep-app/karakeep/commit/3c6b8e97)
- docs: add karakeep integration for Home Assistant ([#&#8203;2196](https://github.com/karakeep-app/karakeep/issues/2196)) - [@&#8203;sli-cka](https://github.com/sli-cka) in [`9a33938`](https://github.com/karakeep-app/karakeep/commit/9a339385)
- fix: regen turnstile token on signup resubmission - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`9257b53`](https://github.com/karakeep-app/karakeep/commit/9257b534)
- feat(landing): Add more features to the homepage - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`9a6d36f`](https://github.com/karakeep-app/karakeep/commit/9a6d36f2)
- ci: run arm docker image builds on arm machines - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`3421246`](https://github.com/karakeep-app/karakeep/commit/3421246d)
- ci: parallelize the docker workflow for platforms - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`2e88961`](https://github.com/karakeep-app/karakeep/commit/2e889617)
- fix: reenable idempotency key for search indexing - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`2ef751e`](https://github.com/karakeep-app/karakeep/commit/2ef751ef)
- fix: fix bypass email verification in apiKey.exchange - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`e4f434e`](https://github.com/karakeep-app/karakeep/commit/e4f434e7)
- readme: add collaborative lists to the list of features - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`d6d319d`](https://github.com/karakeep-app/karakeep/commit/d6d319d3)
- fix: Add restate queued idempotency ([#&#8203;2169](https://github.com/karakeep-app/karakeep/issues/2169)) - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`a71b950`](https://github.com/karakeep-app/karakeep/commit/a71b9505)
- feat: add support for turnstile on signup - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`b12c1c3`](https://github.com/karakeep-app/karakeep/commit/b12c1c3a)
- build: fix npm trusted publishing - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`4898b6b`](https://github.com/karakeep-app/karakeep/commit/4898b6be)
- release: cli, mcp and sdk - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`28d6750`](https://github.com/karakeep-app/karakeep/commit/28d6750e)
- release(extension): Release version 1.2.8 - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`fdea086`](https://github.com/karakeep-app/karakeep/commit/fdea0861)
- release(mobile): Bump mobile version to 1.8.3 - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`8da5b59`](https://github.com/karakeep-app/karakeep/commit/8da5b598)
- release(docs): release the 0.29 docs - [@&#8203;MohamedBassem](https://github.com/MohamedBassem) in [`97c386a`](https://github.com/karakeep-app/karakeep/commit/97c386a4)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi42Ni45IiwidXBkYXRlZEluVmVyIjoiNDIuNjYuOSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=-->

Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/3022
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>

.gitea/workflows/render-manifests-dispatch.yaml

@@ -1,6 +1,9 @@
 name: render-manifests-dispatch
 
 on:
+  schedule:
+    - cron: '0 3 * * *'
+
   workflow_dispatch:
 
 env:

clusters/cl01tl/helm/actual/values.yaml

@@ -78,7 +78,7 @@ actual:
 volsync-target-data:
   pvcTarget: actual-data
   local:
-    enabled: false
+    enabled: true
     schedule: 0 8 * * *
   remote:
     enabled: false

clusters/cl01tl/helm/argocd/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: argo-cd
   repository: https://argoproj.github.io/argo-helm
-  version: 9.2.2
-digest: sha256:f2ac58995d33d7240087fe7d7618bfbc24b424b1d65ce0e85b297de0223fcdd1
-generated: "2025-12-27T19:43:02.217321931Z"
+  version: 9.2.3
+digest: sha256:b23d6a5b7b9fee9d1807259bfa2dd53d1f4dfbbeba7ec747c41a6ba991dadbba
+generated: "2025-12-28T21:53:37.447568505Z"

clusters/cl01tl/helm/argocd/Chart.yaml

@@ -15,7 +15,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: argo-cd
-    version: 9.2.2
+    version: 9.2.3
     repository: https://argoproj.github.io/argo-helm
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 # renovate: github=argoproj/argo-cd

clusters/cl01tl/helm/audiobookshelf/values.yaml

@@ -124,7 +124,7 @@ audiobookshelf:
 volsync-target-config:
   pvcTarget: audiobookshelf-config
   local:
-    enabled: false
+    enabled: true
     schedule: 2 8 * * *
   remote:
     enabled: false
@@ -134,7 +134,7 @@ volsync-target-config:
 volsync-target-metadata:
   pvcTarget: audiobookshelf-metadata
   local:
-    enabled: false
+    enabled: true
     schedule: 4 8 * * *
   remote:
     enabled: false

clusters/cl01tl/helm/authentik/values.yaml

@@ -109,7 +109,7 @@ redis-replication:
   existingSecret:
     enabled: false
   redisReplication:
-    clusterSize: 1
-  redisSentinel:
-    enabled: false
+    clusterSize: 3
+  redisSentinel:
+    enabled: true
     clusterSize: 3

clusters/cl01tl/helm/backrest/values.yaml

@@ -108,7 +108,7 @@ backrest:
 volsync-target-data:
   pvcTarget: backrest-data
   local:
-    enabled: false
+    enabled: true
     schedule: 6 8 * * *
   remote:
     enabled: false
@@ -118,7 +118,7 @@ volsync-target-data:
 volsync-target-config:
   pvcTarget: backrest-config
   local:
-    enabled: false
+    enabled: true
     schedule: 8 8 * * *
   remote:
     enabled: false

clusters/cl01tl/helm/bazarr/values.yaml

@@ -84,7 +84,7 @@ volsync-target-config:
     fsGroup: 1000
     fsGroupChangePolicy: OnRootMismatch
   local:
-    enabled: false
+    enabled: true
     schedule: 10 8 * * *
   remote:
     enabled: false

clusters/cl01tl/helm/blocky/values.yaml

@@ -159,7 +159,6 @@ blocky:
               sonarr                          IN      CNAME   traefik-cl01tl
               sonarr-4k                       IN      CNAME   traefik-cl01tl
               sonarr-anime                    IN      CNAME   traefik-cl01tl
-              soulsync                        IN      CNAME   traefik-cl01tl
               stalwart                        IN      CNAME   traefik-cl01tl
               tautulli                        IN      CNAME   traefik-cl01tl
               tdarr                           IN      CNAME   traefik-cl01tl

clusters/cl01tl/helm/booklore/values.yaml

@@ -9,7 +9,7 @@ booklore:
         main:
           image:
             repository: ghcr.io/booklore-app/booklore
-            tag: v1.15.0
+            tag: v1.16.2
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -218,7 +218,7 @@ mariadb-cluster:
 volsync-target-config:
   pvcTarget: booklore-config
   local:
-    enabled: false
+    enabled: true
     schedule: 12 8 * * *
   remote:
     enabled: false

clusters/cl01tl/helm/cilium/templates/cilium-l2-announcement-policy.yaml

@@ -1,19 +1,19 @@
-apiVersion: "cilium.io/v2alpha1"
-kind: CiliumL2AnnouncementPolicy
-metadata:
-  name: general-l2-policy
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: general-l2-policy
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  nodeSelector:
-    matchExpressions:
-      - key: kubernetes.io/hostname
-        operator: Exists
-  interfaces:
-    - end0
-    - enp6s0
-  externalIPs: true
-  loadBalancerIPs: true
+# apiVersion: "cilium.io/v2alpha1"
+# kind: CiliumL2AnnouncementPolicy
+# metadata:
+#   name: general-l2-policy
+#   namespace: {{ .Release.Namespace }}
+#   labels:
+#     app.kubernetes.io/name: general-l2-policy
+#     app.kubernetes.io/instance: {{ .Release.Name }}
+#     app.kubernetes.io/part-of: {{ .Release.Name }}
+# spec:
+#   nodeSelector:
+#     matchExpressions:
+#       - key: kubernetes.io/hostname
+#         operator: Exists
+#   interfaces:
+#     - end0
+#     - enp6s0
+#   externalIPs: true
+#   loadBalancerIPs: true

clusters/cl01tl/helm/cilium/values.yaml

@@ -26,7 +26,7 @@ cilium:
         - SYS_ADMIN
         - SYS_RESOURCE
   l2announcements:
-    enabled: true
+    enabled: false
   bgpControlPlane:
     enabled: false
     secretsNamespace:

clusters/cl01tl/helm/cloudnative-pg/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 0.27.0
 - name: plugin-barman-cloud
   repository: https://cloudnative-pg.io/charts/
-  version: 0.3.1
-digest: sha256:14aa30b7bf75571b03bda19af68cd50c1e7908b883351b196a260609a5b85551
-generated: "2025-12-10T19:25:17.952954019Z"
+  version: 0.4.0
+digest: sha256:5e2a32fa5ed8b180ae5e556d65c67eeb3dcf38e2974b0d668eff4ee3c83258ce
+generated: "2025-12-30T21:01:48.755246408Z"

clusters/cl01tl/helm/cloudnative-pg/Chart.yaml

@@ -19,7 +19,7 @@ dependencies:
     version: 0.27.0
     repository: https://cloudnative-pg.io/charts/
   - name: plugin-barman-cloud
-    version: 0.3.1
+    version: 0.4.0
     repository: https://cloudnative-pg.io/charts/
 icon: https://avatars.githubusercontent.com/u/100373852?s=200&v=4
 # renovate: github=cloudnative-pg/cloudnative-pg

clusters/cl01tl/helm/cloudnative-pg/values.yaml

@@ -7,10 +7,10 @@ plugin-barman-cloud:
   image:
     registry: ghcr.io
     repository: cloudnative-pg/plugin-barman-cloud
-    tag: v0.9.0
+    tag: v0.10.0
   sidecarImage:
     registry: ghcr.io
     repository: cloudnative-pg/plugin-barman-cloud-sidecar
-    tag: v0.9.0
+    tag: v0.10.0
   crds:
     create: true

clusters/cl01tl/helm/code-server/values.yaml

@@ -76,7 +76,7 @@ volsync-target-config:
     fsGroup: 1000
     fsGroupChangePolicy: OnRootMismatch
   local:
-    enabled: false
+    enabled: true
     schedule: 16 8 * * *
   remote:
     enabled: false

clusters/cl01tl/helm/directus/values.yaml

@@ -216,7 +216,7 @@ redis-replication:
     name: directus-redis-config
     key: password
   redisReplication:
-    clusterSize: 1
-  redisSentinel:
-    enabled: false
+    clusterSize: 3
+  redisSentinel:
+    enabled: true
     clusterSize: 3

clusters/cl01tl/helm/ephemera/values.yaml

@@ -9,7 +9,7 @@ ephemera:
         main:
           image:
             repository: ghcr.io/orwellianepilogue/ephemera
-            tag: 1.4.1
+            tag: 1.4.2
             pullPolicy: IfNotPresent
           env:
             - name: AA_BASE_URL
@@ -130,7 +130,7 @@ ephemera:
 volsync-target-config:
   pvcTarget: ephemera
   local:
-    enabled: false
+    enabled: true
     schedule: 16 8 * * *
   remote:
     enabled: false

clusters/cl01tl/helm/external-dns/values.yaml

@@ -19,7 +19,7 @@ external-dns-unifi:
     webhook:
       image:
         repository: ghcr.io/kashalls/external-dns-unifi-webhook
-        tag: v0.7.0
+        tag: v0.8.0
       env:
         - name: UNIFI_HOST
           value: https://192.168.1.1

clusters/cl01tl/helm/freshrss/values.yaml

@@ -247,7 +247,7 @@ volsync-target-data:
       - 109
       - 65539
   local:
-    enabled: false
+    enabled: true
     schedule: 18 8 * * *
   remote:
     enabled: false

clusters/cl01tl/helm/garage/values.yaml

@@ -403,20 +403,20 @@ garage:
               readOnly: true
               mountPropagation: None
               subPath: garage-1.toml
-    # db-1:
-    #   forceRename: garage-db-1
-    #   storageClass: ceph-block
-    #   accessMode: ReadWriteOnce
-    #   size: 50Gi
-    #   retain: true
-    #   advancedMounts:
-    #     server-1:
-    #       main:
-    #         - path: /var/lib/garage/meta
-    #           readOnly: false
-    #       debug:
-    #         - path: /var/lib/garage/meta
-    #           readOnly: false
+    db-1:
+      forceRename: garage-db-1
+      storageClass: ceph-block
+      accessMode: ReadWriteOnce
+      size: 50Gi
+      retain: true
+      advancedMounts:
+        server-1:
+          main:
+            - path: /var/lib/garage/meta
+              readOnly: false
+          debug:
+            - path: /var/lib/garage/meta
+              readOnly: false
     db-2:
       forceRename: garage-db-2
       storageClass: ceph-block

clusters/cl01tl/helm/gatus/values.yaml

@@ -316,9 +316,6 @@ gatus:
       - name: rayflume
         url: https://rayflume.alexlebens.net
         <<: *defaults
-      - name: soulsync
-        url: https://soulsync.alexlebens.net
-        <<: *defaults
       - name: slskd
         url: https://slskd.alexlebens.net
         <<: *defaults
@@ -424,7 +421,7 @@ postgres-18-cluster:
 volsync-target-data:
   pvcTarget: gatus
   local:
-    enabled: false
+    enabled: true
     schedule: 22 8 * * *
   remote:
     enabled: false

clusters/cl01tl/helm/generic-device-plugin/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: generic-device-plugin
   repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-  version: 0.20.10
-digest: sha256:bb4fe0fe2e95889b3fbf028e1eff923fcc71d8bd1bc7887eee08010cfb28f4db
-generated: "2025-12-27T23:08:24.592060217Z"
+  version: 0.20.11
+digest: sha256:638754658519c268ac93bef8dec82332cded8e99b734ef61db45ee63e4b7c6ce
+generated: "2025-12-30T22:23:45.633280279Z"

clusters/cl01tl/helm/generic-device-plugin/Chart.yaml

@@ -15,6 +15,6 @@ maintainers:
 dependencies:
   - name: generic-device-plugin
     repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-    version: 0.20.10
+    version: 0.20.11
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 appVersion: 1.0.0

clusters/cl01tl/helm/gitea/Chart.lock

@@ -7,7 +7,7 @@ dependencies:
   version: 0.2.1
 - name: meilisearch
   repository: https://meilisearch.github.io/meilisearch-kubernetes
-  version: 0.19.0
+  version: 0.20.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.1.4
@@ -23,5 +23,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:c0ea42d1a2fc3712ac0481e0a40330704f0f2d1d290b7d30c36a536f0d0ee384
-generated: "2025-12-27T19:45:48.293310777Z"
+digest: sha256:6636f6ead8089c19ad702fb58170d942e11150fdda9470f1b97f4f8fa533d00e
+generated: "2025-12-30T16:03:12.004386065Z"

clusters/cl01tl/helm/gitea/Chart.yaml

@@ -32,7 +32,7 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
     version: 0.2.1
   - name: meilisearch
-    version: 0.19.0
+    version: 0.20.0
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts

clusters/cl01tl/helm/gitea/values.yaml

@@ -1,7 +1,7 @@
 gitea:
   global:
     imageRegistry: registry.hub.docker.com
-  replicaCount: 2
+  replicaCount: 1
   image:
     repository: gitea/gitea
     tag: 1.25.3

clusters/cl01tl/helm/grafana-operator/values.yaml

@@ -17,11 +17,11 @@ postgres-18-cluster:
   recovery:
     method: objectStore
     objectStore:
-      index: 1
+      index: 2
   backup:
     objectStore:
       - name: garage-local
-        index: 1
+        index: 2
         destinationBucket: postgres-backups
         externalSecretCredentialPath: /garage/home-infra/postgres-backups
         isWALArchiver: true

clusters/cl01tl/helm/harbor/values.yaml

@@ -142,7 +142,7 @@ redis-replication:
   existingSecret:
     enabled: false
   redisReplication:
-    clusterSize: 1
-  redisSentinel:
-    enabled: false
+    clusterSize: 3
+  redisSentinel:
+    enabled: true
     clusterSize: 3

clusters/cl01tl/helm/home-assistant/values.yaml

@@ -9,7 +9,7 @@ home-assistant:
         main:
           image:
             repository: ghcr.io/home-assistant/home-assistant
-            tag: 2025.12.4
+            tag: 2025.12.5
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -133,7 +133,7 @@ volsync-target-config:
     fsGroup: 1000
     fsGroupChangePolicy: OnRootMismatch
   local:
-    enabled: false
+    enabled: true
     schedule: 24 8 * * *
   remote:
     enabled: false

clusters/cl01tl/helm/homepage/values.yaml

@@ -667,12 +667,6 @@ homepage:
                   href: https://lidatube.alexlebens.net
                   siteMonitor: http://lidatube.lidatube:80
                   statusStyle: dot
-              - SoulSync:
-                  icon: sh-soulsync.webp
-                  description: Playlist Sync
-                  href: https://soulsync.alexlebens.net
-                  siteMonitor: http://soulsync.soulsync:80
-                  statusStyle: dot
               - slskd:
                   icon: sh-slskd.webp
                   description: slskd

clusters/cl01tl/helm/huntarr/values.yaml

@@ -61,7 +61,7 @@ huntarr:
 volsync-target-config:
   pvcTarget: huntarr-config
   local:
-    enabled: false
+    enabled: true
     schedule: 26 8 * * *
   remote:
     enabled: false

clusters/cl01tl/helm/immich/values.yaml

@@ -226,9 +226,9 @@ redis-replication:
   existingSecret:
     enabled: false
   redisReplication:
-    clusterSize: 1
+    clusterSize: 3
   redisSentinel:
-    enabled: false
+    enabled: true
     clusterSize: 3
 volsync-target-data:
   pvcTarget: immich

clusters/cl01tl/helm/jellyfin/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.5.0
 - name: meilisearch
   repository: https://meilisearch.github.io/meilisearch-kubernetes
-  version: 0.19.0
+  version: 0.20.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:dc914dfc86c2b638fae6f580418dafebcddb09a25e6f534f89983fb592196245
-generated: "2025-12-27T13:30:57.814394-06:00"
+digest: sha256:20665aefeaea3e853d5c977cdce05089a87c6d83e43aa946a088f43bcc7eebf9
+generated: "2025-12-30T16:03:25.803286869Z"

clusters/cl01tl/helm/jellyfin/Chart.yaml

@@ -25,7 +25,7 @@ dependencies:
     repository: https://bjw-s-labs.github.io/helm-charts/
     version: 4.5.0
   - name: meilisearch
-    version: 0.19.0
+    version: 0.20.0
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/jellyfin/values.yaml

@@ -142,7 +142,7 @@ meilisearch:
 volsync-target-config:
   pvcTarget: jellyfin-config
   local:
-    enabled: false
+    enabled: true
     schedule: 30 8 * * *
     restic:
       cacheCapacity: 10Gi

clusters/cl01tl/helm/jellystat/values.yaml

@@ -144,7 +144,7 @@ postgres-18-cluster:
 volsync-target-data:
   pvcTarget: jellystat-data
   local:
-    enabled: false
+    enabled: true
     schedule: 32 8 * * *
   remote:
     enabled: false

clusters/cl01tl/helm/karakeep/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.5.0
 - name: meilisearch
   repository: https://meilisearch.github.io/meilisearch-kubernetes
-  version: 0.19.0
+  version: 0.20.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.1.4
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:e750d8cab228de94d920f80137981e24e795d97040e92dd4cf0d80e463b2bd19
-generated: "2025-12-27T13:31:02.732529-06:00"
+digest: sha256:d65ca3de6fd1095c4dfe2515ed84c4705495c0725773ec95ea49331a38721785
+generated: "2025-12-30T16:03:37.441539588Z"

clusters/cl01tl/helm/karakeep/Chart.yaml

@@ -22,7 +22,7 @@ dependencies:
     repository: https://bjw-s-labs.github.io/helm-charts/
     version: 4.5.0
   - name: meilisearch
-    version: 0.19.0
+    version: 0.20.0
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts

clusters/cl01tl/helm/karakeep/values.yaml

@@ -9,7 +9,7 @@ karakeep:
         main:
           image:
             repository: ghcr.io/karakeep-app/karakeep
-            tag: 0.29.3
+            tag: 0.30.0
             pullPolicy: IfNotPresent
           env:
             - name: DATA_DIR
@@ -171,7 +171,7 @@ meilisearch:
 volsync-target-data:
   pvcTarget: karakeep
   local:
-    enabled: false
+    enabled: true
     schedule: 34 8 * * *
   remote:
     enabled: false

clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: kube-prometheus-stack
   repository: oci://ghcr.io/prometheus-community/charts
-  version: 80.6.0
+  version: 80.9.1
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
   version: 4.5.0
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.5.0
-digest: sha256:6f046a936f1d732a44113eb0b7e54330a4261042179f37f4c94fccc9f20ee511
-generated: "2025-12-20T01:04:57.413744271Z"
+digest: sha256:91fcf8234e006b8e412e15ddd159ef3450a51bfdb6866a1ea2759741f78b70cd
+generated: "2025-12-30T22:24:25.338726593Z"

clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml

@@ -20,7 +20,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: kube-prometheus-stack
-    version: 80.6.0
+    version: 80.9.1
     repository: oci://ghcr.io/prometheus-community/charts
   - name: app-template
     alias: ntfy-alertmanager

clusters/cl01tl/helm/kube-prometheus-stack/values.yaml

@@ -174,12 +174,12 @@ redis-replication:
   existingSecret:
     enabled: false
   redisReplication:
-    clusterSize: 1
+    clusterSize: 3
     volumeClaimTemplate:
       spec:
         resources:
           requests:
             storage: 10Gi
   redisSentinel:
-    enabled: false
+    enabled: true
     clusterSize: 3

clusters/cl01tl/helm/libation/values.yaml

@@ -60,10 +60,21 @@ libation:
           main:
             - path: /config
               readOnly: false
+    audiobooks:
+      existingClaim: libation-nfs-storage
+      advancedMounts:
+        main:
+          main:
+            - path: /data
+              readOnly: false
+        debug:
+          main:
+            - path: /data
+              readOnly: false
 volsync-target-config:
   pvcTarget: libation
   local:
-    enabled: false
+    enabled: true
     schedule: 36 8 * * *
   remote:
     enabled: false

clusters/cl01tl/helm/lidarr/values.yaml

@@ -171,7 +171,7 @@ volsync-target-config:
     fsGroup: 1000
     fsGroupChangePolicy: OnRootMismatch
   local:
-    enabled: false
+    enabled: true
     schedule: 38 8 * * *
   remote:
     enabled: false

clusters/cl01tl/helm/lidatube/values.yaml

@@ -93,7 +93,7 @@ volsync-target-config:
     fsGroup: 1000
     fsGroupChangePolicy: OnRootMismatch
   local:
-    enabled: false
+    enabled: true
     schedule: 40 8 * * *
   remote:
     enabled: false

clusters/cl01tl/helm/listenarr/values.yaml

@@ -74,7 +74,7 @@ volsync-target-config:
     fsGroup: 1000
     fsGroupChangePolicy: OnRootMismatch
   local:
-    enabled: false
+    enabled: true
     schedule: 42 8 * * *
   remote:
     enabled: false

clusters/cl01tl/helm/local-path-provisioner/values.yaml

@@ -13,26 +13,16 @@ local-path-provisioner:
     reclaimPolicy: Delete
     volumeBindingMode: WaitForFirstConsumer
   nodePathMap:
-    - node: talos-2di-ktg
+    - node: DEFAULT_PATH_FOR_NON_LISTED_NODES
       paths:
-        - /var/local-path-provisioner
-    - node: talos-9vs-6hh
-      paths:
-        - /var/local-path-provisioner
-    - node: talos-aoq-hpv
-      paths:
-        - /var/local-path-provisioner
+        - /var/mnt/local-storage
   affinity:
     nodeAffinity:
       requiredDuringSchedulingIgnoredDuringExecution:
         nodeSelectorTerms:
           - matchExpressions:
-            - key: kubernetes.io/hostname
-              operator: In
-              values:
-                - talos-2di-ktg
-                - talos-9vs-6hh
-                - talos-aoq-hpv
+              - key: node-role.kubernetes.io/local-storage-node
+                operator: Exists
   configmap:
     name: local-path-config
     setup: |-

clusters/cl01tl/helm/matrix-synapse/values.yaml

@@ -478,7 +478,7 @@ redis-replication-hookshot:
 volsync-target-synapse:
   pvcTarget: matrix-synapse
   local:
-    enabled: false
+    enabled: true
     schedule: 44 8 * * *
   remote:
     enabled: false
@@ -488,7 +488,7 @@ volsync-target-synapse:
 volsync-target-hookshot:
   pvcTarget: matrix-hookshot
   local:
-    enabled: false
+    enabled: true
     schedule: 46 8 * * *
   remote:
     enabled: false
@@ -501,7 +501,7 @@ volsync-target-discord:
     runAsUser: 1337
     runAsGroup: 1337
   local:
-    enabled: false
+    enabled: true
     schedule: 48 8 * * *
   remote:
     enabled: false
@@ -514,7 +514,7 @@ volsync-target-whatsapp:
     runAsUser: 1337
     runAsGroup: 1337
   local:
-    enabled: false
+    enabled: true
     schedule: 50 8 * * *
   remote:
     enabled: false

clusters/cl01tl/helm/navidrome/templates/persistent-volume-claim.yaml

@@ -15,3 +15,22 @@ spec:
   resources:
     requests:
       storage: 1Gi
+
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: navidrome-music-youtube-nfs-storage
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: navidrome-music-youtube-nfs-storage
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  volumeName: navidrome-music-youtube-nfs-storage
+  storageClassName: nfs-client
+  accessModes:
+    - ReadWriteMany
+  resources:
+    requests:
+      storage: 1Gi

clusters/cl01tl/helm/navidrome/templates/persistent-volume.yaml

@@ -21,3 +21,28 @@ spec:
     - vers=4
     - minorversion=1
     - noac
+
+---
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: navidrome-music-youtube-nfs-storage
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: navidrome-music-youtube-nfs-storage
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  persistentVolumeReclaimPolicy: Retain
+  storageClassName: nfs-client
+  capacity:
+    storage: 1Gi
+  accessModes:
+    - ReadWriteMany
+  nfs:
+    path: /volume2/Storage/Music Youtube/
+    server: synologybond.alexlebens.net
+  mountOptions:
+    - vers=4
+    - minorversion=1
+    - noac

clusters/cl01tl/helm/navidrome/values.yaml

@@ -146,6 +146,13 @@ navidrome:
           main:
             - path: /music
               readOnly: true
+    music-youtube:
+      existingClaim: navidrome-music-youtube-nfs-storage
+      advancedMounts:
+        main:
+          main:
+            - path: /music-youtube
+              readOnly: true
 volsync-target-data:
   pvcTarget: navidrome-data
   moverSecurityContext:
@@ -154,7 +161,7 @@ volsync-target-data:
     fsGroup: 1000
     fsGroupChangePolicy: OnRootMismatch
   local:
-    enabled: false
+    enabled: true
     schedule: 52 8 * * *
   remote:
     enabled: false

clusters/cl01tl/helm/ollama/values.yaml

@@ -307,7 +307,7 @@ volsync-target-data:
     runAsUser: 1337
     runAsGroup: 1337
   local:
-    enabled: false
+    enabled: true
     schedule: 54 8 * * *
   remote:
     enabled: false

clusters/cl01tl/helm/outline/values.yaml

@@ -188,7 +188,7 @@ redis-replication:
   existingSecret:
     enabled: false
   redisReplication:
-    clusterSize: 1
-  redisSentinel:
-    enabled: false
+    clusterSize: 3
+  redisSentinel:
+    enabled: true
     clusterSize: 3

clusters/cl01tl/helm/postiz/values.yaml

@@ -9,7 +9,7 @@ postiz:
         main:
           image:
             repository: ghcr.io/gitroomhq/postiz-app
-            tag: v2.10.1
+            tag: v2.11.3
             pullPolicy: IfNotPresent
           env:
             - name: MAIN_URL
@@ -173,14 +173,14 @@ redis-replication:
     name: postiz-redis-config
     key: password
   redisReplication:
-    clusterSize: 1
+    clusterSize: 3
   redisSentinel:
-    enabled: false
+    enabled: true
     clusterSize: 3
 volsync-target-config:
   pvcTarget: postiz-config
   local:
-    enabled: false
+    enabled: true
     schedule: 56 8 * * *
   remote:
     enabled: false
@@ -190,7 +190,7 @@ volsync-target-config:
 volsync-target-upload:
   pvcTarget: postiz-uploads
   local:
-    enabled: false
+    enabled: true
     schedule: 58 8 * * *
   remote:
     enabled: false

clusters/cl01tl/helm/prowlarr/values.yaml

@@ -83,7 +83,7 @@ volsync-target-config:
       - 109
       - 65539
   local:
-    enabled: false
+    enabled: true
     schedule: 0 11 * * *
   remote:
     enabled: false

clusters/cl01tl/helm/qbittorrent/values.yaml

@@ -437,7 +437,7 @@ volsync-target-config:
     fsGroup: 1000
     fsGroupChangePolicy: OnRootMismatch
   local:
-    enabled: false
+    enabled: true
     schedule: 2 11 * * *
     restic:
       copyMethod: Snapshot
@@ -458,7 +458,7 @@ volsync-target-config:
 volsync-target-qbit-manage-config:
   pvcTarget: qbittorrent-qbit-manage-config-data
   local:
-    enabled: false
+    enabled: true
     schedule: 4 11 * * *
   remote:
     enabled: false
@@ -468,7 +468,7 @@ volsync-target-qbit-manage-config:
 volsync-target-qui-config:
   pvcTarget: qbittorrent-qui-config-data
   local:
-    enabled: false
+    enabled: true
     schedule: 6 11 * * *
   remote:
     enabled: false

clusters/cl01tl/helm/radarr-4k/values.yaml

@@ -171,7 +171,7 @@ volsync-target-config:
     fsGroup: 1000
     fsGroupChangePolicy: OnRootMismatch
   local:
-    enabled: false
+    enabled: true
     schedule: 10 11 * * *
   remote:
     enabled: false

clusters/cl01tl/helm/radarr-anime/values.yaml

@@ -169,7 +169,7 @@ volsync-target-config:
     fsGroup: 1000
     fsGroupChangePolicy: OnRootMismatch
   local:
-    enabled: false
+    enabled: true
     schedule: 12 11 * * *
   remote:
     enabled: false

clusters/cl01tl/helm/radarr-standup/values.yaml

@@ -169,7 +169,7 @@ volsync-target-config:
     fsGroup: 1000
     fsGroupChangePolicy: OnRootMismatch
   local:
-    enabled: false
+    enabled: true
     schedule: 14 11 * * *
   remote:
     enabled: false

clusters/cl01tl/helm/radarr/values.yaml

@@ -171,7 +171,7 @@ volsync-target-config:
     fsGroup: 1000
     fsGroupChangePolicy: OnRootMismatch
   local:
-    enabled: false
+    enabled: true
     schedule: 8 11 * * *
   remote:
     enabled: false

clusters/cl01tl/helm/rayflume/Chart.yaml

@@ -24,4 +24,4 @@ dependencies:
     alias: volsync-target-data
     version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
-appVersion: 0.0.3
+appVersion: 0.0.9

clusters/cl01tl/helm/rayflume/values.yaml

@@ -9,7 +9,7 @@ rayflume:
         main:
           image:
             repository: harbor.alexlebens.net/images/rayflume
-            tag: 0.0.7
+            tag: 0.0.9
             pullPolicy: IfNotPresent
           env:
             - name: DEBUG
@@ -95,7 +95,7 @@ redis-replication:
 volsync-target-data:
   pvcTarget: rayflume-data
   local:
-    enabled: false
+    enabled: true
     schedule: 16 11 * * *
   remote:
     enabled: false

clusters/cl01tl/helm/rook-ceph/values.yaml

@@ -85,7 +85,8 @@ rook-ceph-cluster:
           cpu: 100m
           memory: 128Mi
     storage:
-      deviceFilter: sda
+      useAllDevices: false
+      devicePathFilter: "/dev/disk/by-partlabel/r-csi-disk"
       config:
         osdsPerDevice: "1"
     csi:

clusters/cl01tl/helm/roundcube/values.yaml

@@ -271,7 +271,7 @@ postgres-18-cluster:
 volsync-target-data:
   pvcTarget: roundcube-data
   local:
-    enabled: false
+    enabled: true
     schedule: 16 11 * * *
   remote:
     enabled: false

clusters/cl01tl/helm/searxng/values.yaml

@@ -9,7 +9,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:8d98d5c1b678714c3b20dacfab5ea5e3b67f79e50df6d5dbc92ed4f0a964ccbd
+            tag: latest@sha256:472dd0c84b8e2a05bca773b4a430b9fc9e4e92cd4fa0afaa223efab925ab752a
             pullPolicy: IfNotPresent
           env:
             - name: SEARXNG_BASE_URL
@@ -39,7 +39,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:8d98d5c1b678714c3b20dacfab5ea5e3b67f79e50df6d5dbc92ed4f0a964ccbd
+            tag: latest@sha256:472dd0c84b8e2a05bca773b4a430b9fc9e4e92cd4fa0afaa223efab925ab752a
             pullPolicy: IfNotPresent
           env:
             - name: SEARXNG_BASE_URL
@@ -220,7 +220,7 @@ searxng:
 volsync-target-data:
   pvcTarget: searxng-browser-data
   local:
-    enabled: false
+    enabled: true
     schedule: 18 11 * * *
   remote:
     enabled: false

clusters/cl01tl/helm/seerr/values.yaml

@@ -32,7 +32,7 @@ seerr-chart:
 volsync-target-config:
   pvcTarget: seerr-seerr-chart-config
   local:
-    enabled: false
+    enabled: true
     schedule: 20 11 * * *
   remote:
     enabled: false

clusters/cl01tl/helm/site-documentation/values.yaml

@@ -11,7 +11,7 @@ site-documentation:
         main:
           image:
             repository: harbor.alexlebens.net/images/site-documentation
-            tag: 0.0.5
+            tag: 0.0.7
             pullPolicy: IfNotPresent
           resources:
             requests:

clusters/cl01tl/helm/site-profile/values.yaml

@@ -11,7 +11,7 @@ site-profile:
         main:
           image:
             repository: harbor.alexlebens.net/images/site-profile
-            tag: 2.1.2
+            tag: 2.1.4
             pullPolicy: IfNotPresent
           resources:
             requests:

clusters/cl01tl/helm/sonarr-4k/values.yaml

@@ -169,7 +169,7 @@ volsync-target-config:
     fsGroup: 1000
     fsGroupChangePolicy: OnRootMismatch
   local:
-    enabled: false
+    enabled: true
     schedule: 24 11 * * *
   remote:
     enabled: false

clusters/cl01tl/helm/sonarr-anime/values.yaml

@@ -169,7 +169,7 @@ volsync-target-config:
     fsGroup: 1000
     fsGroupChangePolicy: OnRootMismatch
   local:
-    enabled: false
+    enabled: true
     schedule: 26 11 * * *
   remote:
     enabled: false

clusters/cl01tl/helm/sonarr/values.yaml

@@ -169,7 +169,7 @@ volsync-target-config:
     fsGroup: 1000
     fsGroupChangePolicy: OnRootMismatch
   local:
-    enabled: false
+    enabled: true
     schedule: 22 11 * * *
   remote:
     enabled: false

clusters/cl01tl/helm/soulsync/Chart.lock

@@ -1,12 +0,0 @@
-dependencies:
-- name: app-template
-  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.5.0
-- name: volsync-target
-  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-- name: volsync-target
-  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-digest: sha256:3f2befd8dc0c7cc73090a5e1648d200a757dbc3e58f7735940fc11b172ada4f9
-generated: "2025-12-27T13:32:51.138317-06:00"

clusters/cl01tl/helm/soulsync/Chart.yaml

@@ -1,29 +0,0 @@
-apiVersion: v2
-name: soulsync
-version: 1.0.0
-description: SoulSync
-keywords:
-  - soulsync
-  - music
-home: https://wiki.alexlebens.dev/s/
-sources:
-  - https://github.com/Nezreka/SoulSync
-  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: app-template
-    alias: soulsync
-    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.5.0
-  - name: volsync-target
-    alias: volsync-target-config
-    version: 0.7.0
-    repository: oci://harbor.alexlebens.net/helm-charts
-  - name: volsync-target
-    alias: volsync-target-database
-    version: 0.7.0
-    repository: oci://harbor.alexlebens.net/helm-charts
-icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/soulsync.png
-# renovate: github=Nezreka/SoulSync
-appVersion: 1.42.2

clusters/cl01tl/helm/soulsync/templates/persistent-volume-claim.yaml

@@ -1,36 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: soulsync-music-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: soulsync-music-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  volumeName: soulsync-music-nfs-storage
-  storageClassName: nfs-client
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 1Gi
-
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: soulsync-slskd-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: soulsync-slskd-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  volumeName: soulsync-slskd-nfs-storage
-  storageClassName: nfs-client
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 1Gi

clusters/cl01tl/helm/soulsync/templates/persistent-volume.yaml

@@ -1,48 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: soulsync-music-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: soulsync-music-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: nfs-client
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  nfs:
-    path: /volume2/Storage/Music
-    server: synologybond.alexlebens.net
-  mountOptions:
-    - vers=4
-    - minorversion=1
-    - noac
-
----
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: soulsync-slskd-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: soulsync-slskd-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: nfs-client
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  nfs:
-    path: /volume2/Storage/slskd/Downloads
-    server: synologybond.alexlebens.net
-  mountOptions:
-    - vers=4
-    - minorversion=1
-    - noac

clusters/cl01tl/helm/soulsync/values.yaml

@@ -1,170 +0,0 @@
-soulsync:
-  controllers:
-    main:
-      type: deployment
-      replicas: 0
-      strategy: Recreate
-      revisionHistoryLimit: 3
-      initContainers:
-        init-copy-config:
-          image:
-            repository: busybox
-            tag: 1.37.0
-            pullPolicy: IfNotPresent
-          resources:
-            requests:
-              cpu: 10m
-              memory: 128Mi
-          command:
-            - /bin/sh
-            - -ec
-            - |
-              echo ">> Coping files ..."
-              ls /tmp
-              cp -fv /tmp/config.json /app/config/config.json
-              echo ">> Files in config:"
-              ls /app/config
-      containers:
-        main:
-          image:
-            repository: boulderbadgedad/soulsync
-            tag: latest
-            pullPolicy: IfNotPresent
-          env:
-            - name: TZ
-              value: US/Central
-            - name: PUID
-              value: 1000
-            - name: PGID
-              value: 1000
-            - name: FLASK_ENV
-              value: production
-            - name: PYTHONPATH
-              value: /app
-            - name: SOULSYNC_CONFIG_PATH
-              value: /app/config/config.json
-          probes:
-            liveness:
-              enabled: true
-              custom: true
-              spec:
-                exec:
-                  command:
-                  - CMD
-                  - curl
-                  - -f
-                  - http://localhost:8888/
-                failureThreshold: 5
-                initialDelaySeconds: 60
-                periodSeconds: 30
-                successThreshold: 1
-                timeoutSeconds: 10
-          resources:
-            requests:
-              cpu: 100m
-              memory: 512Mi
-  service:
-    main:
-      controller: main
-      ports:
-        http:
-          port: 80
-          targetPort: 8008
-          protocol: HTTP
-  route:
-    main:
-      kind: HTTPRoute
-      parentRefs:
-        - group: gateway.networking.k8s.io
-          kind: Gateway
-          name: traefik-gateway
-          namespace: traefik
-      hostnames:
-        - soulsync.alexlebens.net
-      rules:
-        - backendRefs:
-            - group: ''
-              kind: Service
-              name: soulsync
-              port: 80
-              weight: 100
-          matches:
-            - path:
-                type: PathPrefix
-                value: /
-  persistence:
-    secret:
-      enabled: true
-      type: secret
-      name: soulsync-config-secret
-      advancedMounts:
-        main:
-          init-copy-config:
-            - path: /tmp/config.json
-              readOnly: true
-              mountPropagation: None
-              subPath: config.json
-    config:
-      forceRename: soulsync-config
-      storageClass: ceph-block
-      accessMode: ReadWriteOnce
-      size: 10Gi
-      advancedMounts:
-        main:
-          main:
-            - path: /app/config
-              readOnly: false
-          init-copy-config:
-            - path: /app/config
-              readOnly: false
-    database:
-      forceRename: soulsync-database
-      storageClass: ceph-block
-      accessMode: ReadWriteOnce
-      size: 10Gi
-      advancedMounts:
-        main:
-          main:
-            - path: /app/database
-              readOnly: false
-    downloads:
-      existingClaim: soulsync-slskd-nfs-storage
-      advancedMounts:
-        main:
-          main:
-            - path: /app/downloads
-              readOnly: false
-    transfer:
-      type: emptyDir
-      advancedMounts:
-        main:
-          main:
-            - path: /app/Transfer
-              readOnly: false
-    music:
-      existingClaim: soulsync-music-nfs-storage
-      advancedMounts:
-        main:
-          main:
-            - path: /music
-              readOnly: true
-volsync-target-config:
-  pvcTarget: soulsync-config
-  local:
-    enabled: false
-    schedule: 28 11 * * *
-  remote:
-    enabled: false
-  external:
-    enabled: true
-    schedule: 28 12 * * *
-volsync-target-database:
-  pvcTarget: soulsync-database
-  local:
-    enabled: false
-    schedule: 30 11 * * *
-  remote:
-    enabled: false
-  external:
-    enabled: true
-    schedule: 30 12 * * *

clusters/cl01tl/helm/stalwart/values.yaml

@@ -9,7 +9,7 @@ stalwart:
         main:
           image:
             repository: stalwartlabs/stalwart
-            tag: v0.15.2
+            tag: v0.15.3
             pullPolicy: IfNotPresent
           resources:
             requests:
@@ -118,14 +118,14 @@ redis-replication:
   existingSecret:
     enabled: false
   redisReplication:
-    clusterSize: 1
+    clusterSize: 3
   redisSentinel:
-    enabled: false
+    enabled: true
     clusterSize: 3
 volsync-target-config:
   pvcTarget: stalwart-config
   local:
-    enabled: false
+    enabled: true
     schedule: 32 11 * * *
   remote:
     enabled: false

clusters/cl01tl/helm/talos/values.yaml

@@ -69,7 +69,7 @@ etcd-backup:
         s3-prune:
           image:
             repository: d3fk/s3cmd
-            tag: latest@sha256:64a23903ee1b156ae7d795efc756b68ad802bce695f5608343edadba3dea1dc1
+            tag: latest@sha256:8aeb104edaba11f086506024b22d543a0771e0b01cd50243043002e2d61c2f71
             pullPolicy: IfNotPresent
           command:
             - /bin/sh
@@ -155,7 +155,7 @@ etcd-backup:
         s3-prune:
           image:
             repository: d3fk/s3cmd
-            tag: latest@sha256:64a23903ee1b156ae7d795efc756b68ad802bce695f5608343edadba3dea1dc1
+            tag: latest@sha256:8aeb104edaba11f086506024b22d543a0771e0b01cd50243043002e2d61c2f71
             pullPolicy: IfNotPresent
           command:
             - /bin/sh
@@ -241,7 +241,7 @@ etcd-backup:
         s3-prune:
           image:
             repository: d3fk/s3cmd
-            tag: latest@sha256:64a23903ee1b156ae7d795efc756b68ad802bce695f5608343edadba3dea1dc1
+            tag: latest@sha256:8aeb104edaba11f086506024b22d543a0771e0b01cd50243043002e2d61c2f71
             pullPolicy: IfNotPresent
           command:
             - /bin/sh
@@ -405,7 +405,7 @@ etcd-defrag:
         main:
           image:
             repository: ghcr.io/siderolabs/talosctl
-            tag: v1.11.6
+            tag: v1.12.0
             pullPolicy: IfNotPresent
           args:
             - etcd
@@ -438,7 +438,7 @@ etcd-defrag:
         main:
           image:
             repository: ghcr.io/siderolabs/talosctl
-            tag: v1.11.6
+            tag: v1.12.0
             pullPolicy: IfNotPresent
           args:
             - etcd
@@ -471,7 +471,7 @@ etcd-defrag:
         main:
           image:
             repository: ghcr.io/siderolabs/talosctl
-            tag: v1.11.6
+            tag: v1.12.0
             pullPolicy: IfNotPresent
           args:
             - etcd

clusters/cl01tl/helm/tautulli/values.yaml

@@ -170,7 +170,7 @@ tautulli:
 volsync-target-config:
   pvcTarget: tautulli-config
   local:
-    enabled: false
+    enabled: true
     schedule: 34 11 * * *
   remote:
     enabled: false

clusters/cl01tl/helm/tdarr/values.yaml

@@ -180,7 +180,7 @@ tdarr-exporter:
 volsync-target-config:
   pvcTarget: tdarr-config
   local:
-    enabled: false
+    enabled: true
     schedule: 36 11 * * *
   remote:
     enabled: false
@@ -190,7 +190,7 @@ volsync-target-config:
 volsync-target-server:
   pvcTarget: tdarr-server
   local:
-    enabled: false
+    enabled: true
     schedule: 38 11 * * *
   remote:
     enabled: false

clusters/cl01tl/helm/tubearchivist/values.yaml

@@ -148,7 +148,7 @@ redis-replication:
   existingSecret:
     enabled: false
   redisReplication:
-    clusterSize: 1
+    clusterSize: 3
     resources:
       requests:
         cpu: 200m
@@ -159,5 +159,5 @@ redis-replication:
           requests:
             storage: 10Gi
   redisSentinel:
-    enabled: false
+    enabled: true
     clusterSize: 3

clusters/cl01tl/helm/unpoller/values.yaml

@@ -9,7 +9,7 @@ unpoller:
         main:
           image:
             repository: ghcr.io/unpoller/unpoller
-            tag: v2.20.1
+            tag: v2.21.0
             pullPolicy: IfNotPresent
           env:
             - name: UP_UNIFI_CONTROLLER_0_SAVE_ALARMS

clusters/cl01tl/helm/vault/values.yaml

@@ -187,7 +187,7 @@ snapshot:
         s3-backup-local:
           image:
             repository: d3fk/s3cmd
-            tag: latest@sha256:64a23903ee1b156ae7d795efc756b68ad802bce695f5608343edadba3dea1dc1
+            tag: latest@sha256:8aeb104edaba11f086506024b22d543a0771e0b01cd50243043002e2d61c2f71
             pullPolicy: IfNotPresent
           command:
             - /bin/sh
@@ -208,7 +208,7 @@ snapshot:
         s3-backup-remote:
           image:
             repository: d3fk/s3cmd
-            tag: latest@sha256:64a23903ee1b156ae7d795efc756b68ad802bce695f5608343edadba3dea1dc1
+            tag: latest@sha256:8aeb104edaba11f086506024b22d543a0771e0b01cd50243043002e2d61c2f71
             pullPolicy: IfNotPresent
           command:
             - /bin/sh
@@ -229,7 +229,7 @@ snapshot:
         s3-backup-external:
           image:
             repository: d3fk/s3cmd
-            tag: latest@sha256:64a23903ee1b156ae7d795efc756b68ad802bce695f5608343edadba3dea1dc1
+            tag: latest@sha256:8aeb104edaba11f086506024b22d543a0771e0b01cd50243043002e2d61c2f71
             pullPolicy: IfNotPresent
           command:
             - /bin/sh

clusters/cl01tl/helm/vaultwarden/templates/external-secret.yaml

@@ -1,10 +1,10 @@
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
-  name: soulsync-config-secret
+  name: vaultwarden-oidc-secret
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: soulsync-config-secret
+    app.kubernetes.io/name: vaultwarden-oidc-secret
     app.kubernetes.io/instance: {{ .Release.Name }}
     app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
@@ -12,10 +12,17 @@ spec:
     kind: ClusterSecretStore
     name: vault
   data:
-    - secretKey: config.json
+    - secretKey: client
       remoteRef:
         conversionStrategy: Default
         decodingStrategy: None
-        key: /cl01tl/soulsync/config
+        key: /authentik/oidc/vaultwarden
         metadataPolicy: None
-        property: config.json
+        property: client
+    - secretKey: secret
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /authentik/oidc/vaultwarden
+        metadataPolicy: None
+        property: secret

clusters/cl01tl/helm/vaultwarden/values.yaml

@@ -9,7 +9,7 @@ vaultwarden:
         main:
           image:
             repository: vaultwarden/server
-            tag: 1.35.0
+            tag: 1.35.1
             pullPolicy: IfNotPresent
           env:
             - name: DOMAIN
@@ -23,6 +23,24 @@ vaultwarden:
                 secretKeyRef:
                   name: vaultwarden-postgresql-18-cluster-app
                   key: uri
+            - name: SSO_ENABLED
+              value: true
+            - name: SSO_SIGNUPS_MATCH_EMAIL
+              value: true
+            - name: SSO_AUTHORITY
+              value: https://auth.alexlebens.dev/application/o/vaultwarden/
+            - name: SSO_SCOPES
+              value: "email profile offline_access"
+            - name: SSO_CLIENT_ID
+              valueFrom:
+                secretKeyRef:
+                  name: vaultwarden-oidc-secret
+                  key: client
+            - name: SSO_CLIENT_SECRET
+              valueFrom:
+                secretKeyRef:
+                  name: vaultwarden-oidc-secret
+                  key: secret
           resources:
             requests:
               cpu: 10m

clusters/cl01tl/helm/whodb/values.yaml

@@ -8,7 +8,7 @@ whodb:
         main:
           image:
             repository: clidey/whodb
-            tag: 0.86.0
+            tag: 0.87.0
             pullPolicy: IfNotPresent
           env:
             - name: WHODB_OLLAMA_HOST

clusters/cl01tl/helm/yamtrack/values.yaml

@@ -9,7 +9,7 @@ yamtrack:
         main:
           image:
             repository: ghcr.io/fuzzygrim/yamtrack
-            tag: 0.24.9
+            tag: 0.24.11
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -136,7 +136,7 @@ redis-replication:
   existingSecret:
     enabled: false
   redisReplication:
-    clusterSize: 1
-  redisSentinel:
-    enabled: false
+    clusterSize: 3
+  redisSentinel:
+    enabled: true
     clusterSize: 3

clusters/cl01tl/helm/ytdl-sub/Chart.yaml

@@ -0,0 +1,22 @@
+apiVersion: v2
+name: ytdl-sub
+version: 1.0.0
+description: ytdl-sub
+keywords:
+  - ytdl-sub
+  - music
+  - youtube
+home: https://wiki.alexlebens.dev/s/
+sources:
+  - https://github.com/jmbannon/ytdl-sub
+  - https://github.com/jmbannon/ytdl-sub/pkgs/container/ytdl-sub
+  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
+maintainers:
+  - name: alexlebens
+dependencies:
+  - name: app-template
+    alias: ytdl-sub
+    repository: https://bjw-s-labs.github.io/helm-charts/
+    version: 4.5.0
+# renovate: github=jmbannon/ytdl-sub
+appVersion: 2025.12.26

clusters/cl01tl/helm/ytdl-sub/templates/persistent-volume-claim.yaml

@@ -0,0 +1,17 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: ytdl-sub-nfs-storage
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: ytdl-sub-nfs-storage
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  volumeName: ytdl-sub-nfs-storage
+  storageClassName: nfs-client
+  accessModes:
+    - ReadWriteMany
+  resources:
+    requests:
+      storage: 1Gi

clusters/cl01tl/helm/ytdl-sub/templates/persistent-volume.yaml

@@ -0,0 +1,23 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: ytdl-sub-nfs-storage
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: ytdl-sub-nfs-storage
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  persistentVolumeReclaimPolicy: Retain
+  storageClassName: nfs-client
+  capacity:
+    storage: 1Gi
+  accessModes:
+    - ReadWriteMany
+  nfs:
+    path: /volume2/Storage/Music Youtube/
+    server: synologybond.alexlebens.net
+  mountOptions:
+    - vers=4
+    - minorversion=1
+    - noac

clusters/cl01tl/helm/ytdl-sub/values.yaml

@@ -0,0 +1,81 @@
+ytdl-sub:
+  controllers:
+    main:
+      type: cronjob
+      cronjob:
+        suspend: false
+        concurrencyPolicy: Forbid
+        timeZone: US/Central
+        schedule: 12 0 * * *
+        startingDeadlineSeconds: 90
+        successfulJobsHistory: 1
+        failedJobsHistory: 1
+        backoffLimit: 3
+        parallelism: 1
+      containers:
+        main:
+          image:
+            repository: ghcr.io/jmbannon/ytdl-sub
+            tag: 2025.12.30
+            pullPolicy: IfNotPresent
+          command:
+            - ytdl-sub
+            - -c
+            - /config/config.yaml
+            - sub
+          env:
+            - name: TZ
+              value: America/Chicago
+            - name: CRON_RUN_ON_START
+              value: false
+          resources:
+            requests:
+              cpu: 10m
+              memory: 128Mi
+  configMaps:
+    config:
+      enabled: true
+      data:
+        config.yaml: |
+          configuration:
+            working_directory: /cache
+        subscriptions.yaml: |
+          __preset__:
+            embed_thumbnail: True
+            square_thumbnail: True
+            overrides:
+              music_directory: /music
+          YouTube Releases | Max MP3 Quality:
+            = YouTube:
+              "Music Saved": "https://www.youtube.com/playlist?list=PLtiOoYqxYXtKK3fMya_xhqK0Wit0i10Gy&si=8wNBH-kGT9Nx0XBK"
+
+  persistence:
+    config:
+      enabled: true
+      type: configMap
+      name: ytdl-sub
+      advancedMounts:
+        main:
+          main:
+            - path: /config/config.yaml
+              readOnly: true
+              mountPropagation: None
+              subPath: config.yaml
+            - path: /config/subscriptions.yaml
+              readOnly: true
+              mountPropagation: None
+              subPath: subscriptions.yaml
+    cache:
+      type: emptyDir
+      advancedMounts:
+        main:
+          main:
+            - path: /cache
+              readOnly: false
+    music:
+      existingClaim: ytdl-sub-nfs-storage
+      advancedMounts:
+        main:
+          main:
+            - path: /music
+              readOnly: false

hosts/ps08rp/blocky/config.yml

@@ -135,7 +135,6 @@ customDNS:
     sonarr                          IN      CNAME   traefik-cl01tl
     sonarr-4k                       IN      CNAME   traefik-cl01tl
     sonarr-anime                    IN      CNAME   traefik-cl01tl
-    soulsync                        IN      CNAME   traefik-cl01tl
     stalwart                        IN      CNAME   traefik-cl01tl
     tautulli                        IN      CNAME   traefik-cl01tl
     tdarr                           IN      CNAME   traefik-cl01tl

hosts/ps08rp/traefik/compose.yaml

@@ -1,7 +1,7 @@
 ---
 services:
     traefik:
-        image: ghcr.io/traefik/traefik:v3.6.5
+        image: ghcr.io/traefik/traefik:v3.6.6
         container_name: traefik
         command:
             - "--global.checkNewVersion=false"

hosts/ps09rp/blocky/config.yml

@@ -135,7 +135,6 @@ customDNS:
     sonarr                          IN      CNAME   traefik-cl01tl
     sonarr-4k                       IN      CNAME   traefik-cl01tl
     sonarr-anime                    IN      CNAME   traefik-cl01tl
-    soulsync                        IN      CNAME   traefik-cl01tl
     stalwart                        IN      CNAME   traefik-cl01tl
     tautulli                        IN      CNAME   traefik-cl01tl
     tdarr                           IN      CNAME   traefik-cl01tl

hosts/ps09rp/traefik/compose.yaml

@@ -1,7 +1,7 @@
 ---
 services:
     traefik:
-        image: ghcr.io/traefik/traefik:v3.6.5
+        image: ghcr.io/traefik/traefik:v3.6.6
         container_name: traefik
         command:
             - "--global.checkNewVersion=false"

hosts/ps10rp/traefik/compose.yaml

@@ -20,7 +20,7 @@ services:
             - /dev/net/tun:/dev/net/tun
 
     traefik:
-        image: ghcr.io/traefik/traefik:v3.6.5
+        image: ghcr.io/traefik/traefik:v3.6.6
         container_name: traefik
         command:
             - "--global.checkNewVersion=false"

renovate.json

@@ -18,8 +18,7 @@
       "addLabels": [
         "chart"
       ],
-      "automerge": false,
-      "minimumReleaseAge": "1 days"
+      "automerge": false
     },
     {
       "description": "Automerge chart patches",
@@ -59,8 +58,7 @@
       "addLabels": [
         "image"
       ],
-      "automerge": false,
-      "minimumReleaseAge": "1 days"
+      "automerge": false
     },
     {
       "description": "Automerge image patches",