Merge pull request 'chore(deps): update loki docker tag to v13.6.1' (#6551) from renovate/unified-loki into main

Reviewed-on: #6613

.gitea/workflows/renovate.yaml

@@ -13,7 +13,7 @@ on:
 jobs:
   renovate:
     runs-on: ubuntu-js
-    container: ghcr.io/renovatebot/renovate:43.165.1@sha256:b1e44b4b22ded56a2ccd5f41edb764b8ef62dd537b3b32e60d676b0424e7bc06
+    container: ghcr.io/renovatebot/renovate:43.168.5@sha256:38aac6e29e09288bc3fb3b95ba9445962508a1081013144d5b6ec5a6735707b9
     steps:
       - name: Checkout
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6

clusters/cl01tl/helm/argocd/Chart.yaml

@@ -17,4 +17,4 @@ dependencies:
     repository: https://argoproj.github.io/argo-helm
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 # renovate: datasource=github-releases depName=argoproj/argo-cd
-appVersion: v3.3.9
+appVersion: v3.4.1

clusters/cl01tl/helm/argocd/values.yaml

@@ -91,7 +91,7 @@ argo-cd:
     enabled: true
     image:
       repository: redis
-      tag: 8.6.2-alpine@sha256:81b6f81d6a6c5b9019231a2e8eb10085e3a139a34f833dcc965a8a959b040b72
+      tag: 8.6.3-alpine@sha256:69f2c586c8a7e9cce4ae1ee9bbaf60bc4bb5f4bb3880e4ed022b1fd758a7cab9
     persistentVolume:
       enabled: true
     redis:

clusters/cl01tl/helm/cloudnative-pg/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 0.6.0
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.5.0
+  version: 0.7.0
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.5.0
+  version: 0.7.0
-digest: sha256:5db4d27087f8a712e7825dc2aac1dc26b6b4e0f9eb11373805be67212bb38e12
+digest: sha256:756a06f08b0e8b888049195e02136115f3c3b09dabfb01c934934c9053cfb40b
-generated: "2026-05-02T01:21:57.977371366Z"
+generated: "2026-05-07T01:19:41.214483969Z"

clusters/cl01tl/helm/cloudnative-pg/Chart.yaml

@@ -26,11 +26,11 @@ dependencies:
   - name: rclone-bucket
     alias: rclone-postgres-backups-remote
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.5.0
+    version: 0.7.0
   - name: rclone-bucket
     alias: rclone-postgres-backups-external
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.5.0
+    version: 0.7.0
 icon: https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg.github.io/refs/heads/main/assets/images/hero_image.png
 # renovate: datasource=github-releases depName=cloudnative-pg/cloudnative-pg
 appVersion: 1.29.0

clusters/cl01tl/helm/descheduler/values.yaml

@@ -10,7 +10,7 @@ descheduler:
     requests:
       cpu: 10m
       memory: 50Mi
-  deschedulingInterval: 5m
+  deschedulingInterval: 2m
   replicas: 3
   leaderElection:
     enabled: true
@@ -51,13 +51,13 @@ descheduler:
           - name: LowNodeUtilization
             args:
               thresholds:
-                cpu: 20
+                cpu: 30
-                memory: 20
+                memory: 30
-                pods: 20
+                pods: 30
               targetThresholds:
-                cpu: 50
+                cpu: 45
-                memory: 50
+                memory: 45
-                pods: 60
+                pods: 45
         plugins:
           balance:
             enabled:

clusters/cl01tl/helm/directus/Chart.lock

@@ -10,6 +10,6 @@ dependencies:
   version: 0.7.0
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.5.0
+  version: 0.7.0
-digest: sha256:0545b7862144935e861641090f24e1cfb43ba73da7bcbca5013fae6e002e2daa
+digest: sha256:3dea680a7391a11ea84cb6b81a0fd336590e59b163c7c3f5a11efc57136d8bc2
-generated: "2026-05-02T01:46:52.095684422Z"
+generated: "2026-05-07T01:19:59.656347343Z"

clusters/cl01tl/helm/directus/Chart.yaml

@@ -31,7 +31,7 @@ dependencies:
   - name: rclone-bucket
     alias: rclone-directus-assets-remote
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.5.0
+    version: 0.7.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/directus.png
 # renovate: datasource=github-releases depName=directus/directus
 appVersion: 11.17.4

clusters/cl01tl/helm/elastic-operator/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: eck-operator
   repository: https://helm.elastic.co
-  version: 3.3.2
+  version: 3.4.0
-digest: sha256:ac7a849a6d8244ef56c11f18438c4c76133f92d245228c5a1c8369d42562c177
+digest: sha256:b4787630154471f65ceeb12f65fa24616eab9470e61e089b8e656e42f05f74f1
-generated: "2026-04-01T21:30:02.975920565Z"
+generated: "2026-05-06T19:10:32.416627028Z"

clusters/cl01tl/helm/elastic-operator/Chart.yaml

@@ -14,8 +14,8 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: eck-operator
-    version: 3.3.2
+    version: 3.4.0
     repository: https://helm.elastic.co
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/elastic.png
 # renovate: datasource=github-releases depName=elastic/cloud-on-k8s
-appVersion: v3.3.2
+appVersion: v3.4.0

clusters/cl01tl/helm/excalidraw/values.yaml

@@ -8,7 +8,7 @@ excalidraw:
         main:
           image:
             repository: excalidraw/excalidraw
-            tag: latest@sha256:b6cd04431d88f2756a7c3095cf7970884e8fd6b2800c9445b5a60a5c715bbf0c
+            tag: latest@sha256:f7ee194addd607bf831d2af0f0a34463dd4225e426cf35199ef0b12a803398e9
           env:
             - name: NODE_ENV
               value: production

clusters/cl01tl/helm/harbor/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: harbor
   repository: https://helm.goharbor.io
-  version: 1.18.3
+  version: 1.19.0
 - name: postgres-cluster
   repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
   version: 7.12.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:8ce1125e688aa0f2da0f9f11157b8bab9bbc11aa82d16ed8e7c5141dccb508fd
+digest: sha256:d4582a89bf46e503bf83d266aca5effaeec2554808a9e84cd1460e47f895f3e0
-generated: "2026-05-02T01:47:39.632625858Z"
+generated: "2026-05-07T00:54:42.114366405Z"

clusters/cl01tl/helm/harbor/Chart.yaml

@@ -16,7 +16,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: harbor
-    version: 1.18.3
+    version: 1.19.0
     repository: https://helm.goharbor.io
   - name: postgres-cluster
     alias: postgres-18-cluster

clusters/cl01tl/helm/harbor/values.yaml

@@ -37,12 +37,12 @@ harbor:
   portal:
     image:
       repository: ghcr.io/goharbor/harbor-portal
-      tag: v2.15.0@sha256:541d5fa95bf77240d46a438f86245cdfd6afa6dd7fdd0cf4dd4c905af6a980b1
+      tag: v2.15.1@sha256:ac55161c57a8351807adf8f8def264bdd52667c371d0436beefebdac4341c9e2
     replicas: 2
   core:
     image:
       repository: ghcr.io/goharbor/harbor-core
-      tag: v2.15.0@sha256:32a13f6693a278261e9c9cb7eb606c5e2aa021308ae44fdc73225755048500a8
+      tag: v2.15.1@sha256:887a85b8ea98b76bfc9f715f1a0785bb99f9a1034241513902dd6e95be922a83
     replicas: 2
     existingSecret: harbor-secret
     secretName: harbor-secret
@@ -50,7 +50,7 @@ harbor:
   jobservice:
     image:
       repository: ghcr.io/goharbor/harbor-jobservice
-      tag: v2.15.0@sha256:a22c7cccba4673b26ffb96f5c37971d85d879dd837bc82448e01c0170b68cf28
+      tag: v2.15.1@sha256:0de4fd2ce3a02d3e6591b439e4674ea085885ddf43652b44004cc67eb19dba12
     replicas: 2
     jobLoggers:
       - stdout
@@ -63,7 +63,7 @@ harbor:
     controller:
       image:
         repository: ghcr.io/goharbor/harbor-registryctl
-        tag: v2.15.0@sha256:463172f71d3a1e8d4f9e3b4e687a447f41fbc3126316d8c150dba04a903bbc47
+        tag: v2.15.1@sha256:554147a956989175f63f8d41573d716c6ddf6052acd1749c88c0f99ce6ee2bff
     existingSecret: harbor-secret
     relativeurls: true
     credentials:
@@ -74,7 +74,7 @@ harbor:
     enabled: true
     image:
       repository: ghcr.io/goharbor/trivy-adapter-photon
-      tag: v2.15.0@sha256:6fd6de9cfbbb04cb1d94722cfa01cf71b8994d3f9e7891d3b03a89a7536480ba
+      tag: v2.15.1@sha256:f0c52bed36c083ec4fded26cefab01e4cd58c9354c261cb3156c69f57bb50131
   database:
     type: external
     external:
@@ -90,7 +90,7 @@ harbor:
   exporter:
     image:
       repository: ghcr.io/goharbor/harbor-exporter
-      tag: v2.15.0@sha256:ad065e4e1a0ee900a0bb1a03d57028ed4b51dc04933f5c1cb5c4aee301a72ddb
+      tag: v2.15.1@sha256:372275b6b6abeb571fa7bd5de458e3d75f1a1636503b3c0abe02938f2b285d75
     replicas: 2
 postgres-18-cluster:
   mode: recovery

clusters/cl01tl/helm/home-assistant/Chart.yaml

@@ -24,4 +24,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/home-assistant.png
 # renovate: datasource=github-releases depName=home-assistant/core
-appVersion: 2026.4.4
+appVersion: 2026.5.0

clusters/cl01tl/helm/home-assistant/values.yaml

@@ -12,7 +12,7 @@ home-assistant:
         main:
           image:
             repository: ghcr.io/home-assistant/home-assistant
-            tag: 2026.4.4@sha256:c1e5f0147f4cb51ccb05bb30b62a1269cc1bd48a6274792d3b38a77ab274dfd2
+            tag: 2026.5.0@sha256:8edcb16cff8158e87a3a2b48b3bcca05c30dcea0212eb6a2fe940b6d52ed216a
           env:
             - name: TZ
               value: America/Chicago
@@ -23,7 +23,7 @@ home-assistant:
         code-server:
           image:
             repository: ghcr.io/linuxserver/code-server
-            tag: 4.117.0-ls334@sha256:1f384394d473c43ab6a39b2227ba3aa9c95af648ce3a67e1b4da1969c16c7c0d
+            tag: 4.118.0-ls336@sha256:6e542034343228a692e0b24f12cbcc8ade3650ec1e2c9e195bc291f2bf024e3c
           env:
             - name: TZ
               value: America/Chicago

clusters/cl01tl/helm/karakeep/Chart.lock

@@ -13,6 +13,6 @@ dependencies:
   version: 1.1.1
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.5.0
+  version: 0.7.0
-digest: sha256:399d686a6186e665a804f98a3dca1132d028f6cb9fc458866ec94b09920dbb6f
+digest: sha256:bb424fe9bed824b37aa26d0e72d123fea5f5c3fcae4eaa21a54e087f2b52421a
-generated: "2026-05-02T01:23:08.040832303Z"
+generated: "2026-05-07T01:20:20.489019444Z"

clusters/cl01tl/helm/karakeep/Chart.yaml

@@ -36,7 +36,7 @@ dependencies:
   - name: rclone-bucket
     alias: rclone-karakeep-assets-remote
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.5.0
+    version: 0.7.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/karakeep.png
 # renovate: datasource=github-releases depName=karakeep-app/karakeep
 appVersion: 0.31.0

clusters/cl01tl/helm/libation/Chart.yaml

@@ -26,4 +26,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/libation.png
 # renovate: datasource=github-releases depName=rmcrackan/Libation
-appVersion: 13.3.6
+appVersion: 13.4.1

clusters/cl01tl/helm/libation/values.yaml

@@ -12,7 +12,7 @@ libation:
         main:
           image:
             repository: rmcrackan/libation
-            tag: 13.3.6@sha256:54695675b9e838b7448c99f7fa03f5c34e0e35c7d7c82c44663959888be9c1b6
+            tag: 13.4.1@sha256:41cf509a8a1592c01c37cb4dc0d5a2e0c84faab20ecd8927f6bb3d73b237981b
           env:
             - name: SLEEP_TIME
               value: "-1"

clusters/cl01tl/helm/loki/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: loki
   repository: oci://ghcr.io/grafana-community/helm-charts
-  version: 13.5.0
+  version: 13.6.1
 - name: alloy
   repository: https://grafana.github.io/helm-charts
   version: 1.8.0
-digest: sha256:bef475f5b6770e4b582b4499e38417789b2bb59ce0ee93c0390daef780e5728d
+digest: sha256:227bda1a772cf7bbddd8bbc92b5591685bce413aced347f73a6d8d3aac6afcc5
-generated: "2026-05-02T19:36:44.416322-05:00"
+generated: "2026-05-07T04:06:28.803801385Z"

clusters/cl01tl/helm/loki/Chart.yaml

@@ -15,7 +15,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: loki
-    version: 13.5.0
+    version: 13.6.1
     repository: oci://ghcr.io/grafana-community/helm-charts
   - name: alloy
     version: 1.8.0

clusters/cl01tl/helm/medialyze/values.yaml

@@ -12,7 +12,7 @@ medialyze:
         main:
           image:
             repository: ghcr.io/frederikemmer/medialyze
-            tag: 0.10.1@sha256:4139a6ea9839cb0ff8a1883568d8ae1833ec62eea34a19f777c7e0ac84ff6848
+            tag: 0.10.2@sha256:2ecf2cd277b7f54e0771d8f87fe0f0e10afe5a0c31832d9ba7c6e6f4b7100319
           env:
             - name: HOST_PORT
               value: 8080

clusters/cl01tl/helm/music-grabber/Chart.yaml

@@ -24,4 +24,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/music-grabber.png
 # renovate: datasource=docker depName=g33kphr33k/musicgrabber
-appVersion: 2.8.3
+appVersion: 2.8.4

clusters/cl01tl/helm/music-grabber/values.yaml

@@ -12,7 +12,7 @@ music-grabber:
         main:
           image:
             repository: g33kphr33k/musicgrabber
-            tag: 2.8.3@sha256:f69d46cb5e1aa0ed43df8a337f8ba1076c3233544f13caa5414eb9de4b6e2237
+            tag: 2.8.4@sha256:bf889837c5ddff5cd9bc4162c0e0e52920e4dc3678554f7a87075d50eb1510f7
           env:
             - name: MUSIC_DIR
               value: /mnt/store/Music Grabber/

clusters/cl01tl/helm/ntfy/Chart.lock

@@ -7,6 +7,6 @@ dependencies:
   version: 7.12.1
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.5.0
+  version: 0.7.0
-digest: sha256:7defcecc03024b82d4f1e19b39f0fbe1725b1077e72e1664326ffa0e40e4f27f
+digest: sha256:e770cdcc60422973c2d15f60180d711f4afbcbd2bf2447441ff8d8b11e6911bd
-generated: "2026-05-02T01:23:52.599948616Z"
+generated: "2026-05-07T01:20:45.92882726Z"

clusters/cl01tl/helm/ntfy/Chart.yaml

@@ -25,7 +25,7 @@ dependencies:
   - name: rclone-bucket
     alias: rclone-ntfy-attachments-remote
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.5.0
+    version: 0.7.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ntfy.png
 # renovate: datasource=github-releases depName=binwiederhier/ntfy
 appVersion: 2.22.0

clusters/cl01tl/helm/ollama/Chart.yaml

@@ -31,4 +31,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ollama.png
 # renovate: datasource=github-releases depName=ollama/ollama
-appVersion: 0.23.0
+appVersion: 0.23.1

clusters/cl01tl/helm/ollama/values.yaml

@@ -21,7 +21,7 @@ ollama:
         main:
           image:
             repository: ollama/ollama
-            tag: 0.23.0@sha256:5600a652d1081050f398152127c584222546354491f27fe47ccbc6351bc870bd
+            tag: 0.23.1@sha256:6077dbbd6508dce8973f8b91c30d8026b1279ab0483e15f0dfad469dba676c2f
           env:
             - name: OLLAMA_KEEP_ALIVE
               value: 24h
@@ -55,7 +55,7 @@ ollama:
         main:
           image:
             repository: ollama/ollama
-            tag: 0.23.0@sha256:5600a652d1081050f398152127c584222546354491f27fe47ccbc6351bc870bd
+            tag: 0.23.1@sha256:6077dbbd6508dce8973f8b91c30d8026b1279ab0483e15f0dfad469dba676c2f
           env:
             - name: OLLAMA_KEEP_ALIVE
               value: 24h
@@ -89,7 +89,7 @@ ollama:
         main:
           image:
             repository: ollama/ollama
-            tag: 0.23.0@sha256:5600a652d1081050f398152127c584222546354491f27fe47ccbc6351bc870bd
+            tag: 0.23.1@sha256:6077dbbd6508dce8973f8b91c30d8026b1279ab0483e15f0dfad469dba676c2f
           env:
             - name: OLLAMA_KEEP_ALIVE
               value: 24h

clusters/cl01tl/helm/openbao/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 4.6.2
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.5.0
+  version: 0.7.0
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.5.0
+  version: 0.7.0
-digest: sha256:ba842213ae2aad9eb8311f9316f21597f8b595a86d0fb3f579d61dd400782a0d
+digest: sha256:3ff32c3b9dc70492a0dbabbbe6f51d9b1ffa36b677fb3f8bb6a790b4f9f05b34
-generated: "2026-05-02T01:24:36.047963846Z"
+generated: "2026-05-07T01:21:04.452421645Z"

clusters/cl01tl/helm/openbao/Chart.yaml

@@ -29,11 +29,11 @@ dependencies:
   - name: rclone-bucket
     alias: rclone-openbao-backups-remote
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.5.0
+    version: 0.7.0
   - name: rclone-bucket
     alias: rclone-openbao-backups-external
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.5.0
+    version: 0.7.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/openbao.png
 # renovate: datasource=github-releases depName=openbao/openbao
 appVersion: v2.5.3

clusters/cl01tl/helm/prowlarr/values.yaml

@@ -12,7 +12,7 @@ prowlarr:
         main:
           image:
             repository: ghcr.io/linuxserver/prowlarr
-            tag: 2.3.5.5327-ls144@sha256:b4204e18666179472225935b443a99cf6c66dcb7bbc2d35034427a3851f13135
+            tag: 2.3.5.5327-ls145@sha256:4b52038b7b6452a20c145239fa07d8218d1541d736a96c43aa0a5f60141cab28
           env:
             - name: TZ
               value: America/Chicago

clusters/cl01tl/helm/rclone/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.5.0
+  version: 0.7.0
-digest: sha256:3b046c434d4913304077d8b5f72552f604ea0c0704c1f267981798508a5ef497
+digest: sha256:870599db3a25d2be6c107fed1481aec87a97db4b1fb7ce9668098e89c2877327
-generated: "2026-05-02T01:25:18.948375366Z"
+generated: "2026-05-07T01:21:28.932348257Z"

clusters/cl01tl/helm/rclone/Chart.yaml

@@ -16,7 +16,7 @@ dependencies:
   - name: rclone-bucket
     alias: rclone-web-assets-remote
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.5.0
+    version: 0.7.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/rclone.png
 # renovate: datasource=github-releases depName=rclone/rclone
 appVersion: v1.74.0

clusters/cl01tl/helm/rybbit/values.yaml

@@ -112,7 +112,7 @@ rybbit:
         main:
           image:
             repository: clickhouse/clickhouse-server
-            tag: 26.3.9@sha256:537014a67ce8bf1f5c79c2e2b26fb30b8285a86ffff03875bb14ed17ea35db62
+            tag: 26.4.1@sha256:1688b8976802967d4754307b408d00ee57fe0396b40c6ffc195be228699e4fc2
           env:
             - name: CLICKHOUSE_DB
               value: analytics

clusters/cl01tl/helm/searxng/values.yaml

@@ -10,7 +10,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:308c828d8ff3c9eab4709666a2eeddbad5ab1dcdaed9284d31c7fcfafb16bf65
+            tag: latest@sha256:34d13094b1150bba739e16c95b7334040a524aadb557fbdbc41a42827aae5f8b
           env:
             - name: SEARXNG_BASE_URL
               value: http://searxng-api.searxng:8080
@@ -38,7 +38,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:308c828d8ff3c9eab4709666a2eeddbad5ab1dcdaed9284d31c7fcfafb16bf65
+            tag: latest@sha256:34d13094b1150bba739e16c95b7334040a524aadb557fbdbc41a42827aae5f8b
           env:
             - name: SEARXNG_BASE_URL
               value: https://searxng.alexlebens.net/

clusters/cl01tl/helm/talos/templates/external-secret.yaml

@@ -91,23 +91,23 @@ spec:
   data:
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        key: /digital-ocean/home-infra/talos-backups
+        key: /backblaze/home-infra/talos-backups
         property: AWS_ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        key: /digital-ocean/home-infra/talos-backups
+        key: /backblaze/home-infra/talos-backups
         property: AWS_SECRET_ACCESS_KEY
     - secretKey: AWS_REGION
       remoteRef:
-        key: /digital-ocean/home-infra/talos-backups
+        key: /backblaze/home-infra/talos-backups
         property: AWS_REGION
     - secretKey: BUCKET_NAME
       remoteRef:
-        key: /digital-ocean/home-infra/talos-backups
+        key: /backblaze/home-infra/talos-backups
         property: BUCKET
     - secretKey: BUCKET
       remoteRef:
-        key: /digital-ocean/home-infra/talos-backups
+        key: /backblaze/home-infra/talos-backups
         property: BUCKET_PATH
     - secretKey: AGE_X25519_PUBLIC_KEY
       remoteRef:

clusters/cl01tl/helm/talos/values.yaml

@@ -21,7 +21,7 @@ etcd-backup:
         backup:
           image:
             repository: ghcr.io/siderolabs/talos-backup
-            tag: v0.1.0-beta.3-7-ge8e193c@sha256:d6f98bf2817bb0bd46be49e41251e24d713945a6af6e893529cc17d524187953
+            tag: v0.1.0-beta.3-10-gb9fd478@sha256:7fc186ff37a3137f470082cb609bf1dc3bcece13dd9a6421ec09cfdf4f33ae6c
           command:
             - /talos-backup
           workingDir: /tmp
@@ -109,7 +109,7 @@ etcd-backup:
         backup:
           image:
             repository: ghcr.io/siderolabs/talos-backup
-            tag: v0.1.0-beta.3-7-ge8e193c@sha256:d6f98bf2817bb0bd46be49e41251e24d713945a6af6e893529cc17d524187953
+            tag: v0.1.0-beta.3-10-gb9fd478@sha256:7fc186ff37a3137f470082cb609bf1dc3bcece13dd9a6421ec09cfdf4f33ae6c
           command:
             - /talos-backup
           workingDir: /tmp
@@ -197,7 +197,7 @@ etcd-backup:
         backup:
           image:
             repository: ghcr.io/siderolabs/talos-backup
-            tag: v0.1.0-beta.3-7-ge8e193c@sha256:d6f98bf2817bb0bd46be49e41251e24d713945a6af6e893529cc17d524187953
+            tag: v0.1.0-beta.3-10-gb9fd478@sha256:7fc186ff37a3137f470082cb609bf1dc3bcece13dd9a6421ec09cfdf4f33ae6c
           command:
             - /talos-backup
           workingDir: /tmp
@@ -228,7 +228,7 @@ etcd-backup:
                   name: talos-etcd-backup-external-config
                   key: AWS_REGION
             - name: CUSTOM_S3_ENDPOINT
-              value: https://nyc3.digitaloceanspaces.com
+              value: https://s3.us-east-005.backblazeb2.com
             - name: BUCKET
               valueFrom:
                 secretKeyRef:
@@ -405,7 +405,7 @@ etcd-defrag:
         main:
           image:
             repository: ghcr.io/siderolabs/talosctl
-            tag: v1.12.6@sha256:a027cf02cf74a75eee83ccffa201f3a9455d77e795d092b87cae5e637f143e54
+            tag: v1.13.0@sha256:cf5be4c584572787eda0f5818404d2380f041b1022ce85454b25d4e01334fba6
           args:
             - etcd
             - defrag
@@ -435,7 +435,7 @@ etcd-defrag:
         main:
           image:
             repository: ghcr.io/siderolabs/talosctl
-            tag: v1.12.6@sha256:a027cf02cf74a75eee83ccffa201f3a9455d77e795d092b87cae5e637f143e54
+            tag: v1.13.0@sha256:cf5be4c584572787eda0f5818404d2380f041b1022ce85454b25d4e01334fba6
           args:
             - etcd
             - defrag
@@ -465,7 +465,7 @@ etcd-defrag:
         main:
           image:
             repository: ghcr.io/siderolabs/talosctl
-            tag: v1.12.6@sha256:a027cf02cf74a75eee83ccffa201f3a9455d77e795d092b87cae5e637f143e54
+            tag: v1.13.0@sha256:cf5be4c584572787eda0f5818404d2380f041b1022ce85454b25d4e01334fba6
           args:
             - etcd
             - defrag

clusters/cl01tl/helm/traefik/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: traefik
   repository: https://traefik.github.io/charts
-  version: 39.0.8
+  version: 40.0.0
 - name: traefik-crds
   repository: https://traefik.github.io/charts
-  version: 1.17.0
+  version: 1.18.0
-digest: sha256:93a74b11097a301c811ad03080fd1d6a1c1e695b6794b2c6cff7d61ae98ecc4f
+digest: sha256:d887af2faf8b07488d6c4c3731337768492292d99edf69040498e24efe5b0a65
-generated: "2026-04-24T16:35:47.354173673Z"
+generated: "2026-05-06T23:28:40.081576086Z"

clusters/cl01tl/helm/traefik/Chart.yaml

@@ -14,11 +14,11 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: traefik
-    version: 39.0.8
+    version: 40.0.0
     repository: https://traefik.github.io/charts
   - name: traefik-crds
-    version: 1.17.0
+    version: 1.18.0
     repository: https://traefik.github.io/charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/traefik.png
 # renovate: datasource=github-releases depName=traefik/traefik
-appVersion: v3.6.15
+appVersion: v3.7.0

clusters/cl01tl/helm/traefik/values.yaml

@@ -2,7 +2,7 @@ traefik:
   image:
     registry: docker.io
     repository: traefik
-    tag: v3.6.15@sha256:8cb20d16e01a53d8d7f7696ac2f1af7d200d5c9984d226ce2299731d9eab6d6c
+    tag: v3.7.0@sha256:eb328e2c806c53aafbbace6c451fa54d268961261a85452fcf0fb752a30c17be
   deployment:
     kind: DaemonSet
   ingressClass:

clusters/cl01tl/helm/tubearchivist/templates/elasticsearch.yaml

@@ -8,7 +8,7 @@ metadata:
     {{- include "custom.labels" . | nindent 4 }}
 spec:
   # renovate: datasource=docker depName=elasticsearch
-  version: 9.3.4
+  version: 9.4.0
   auth:
     fileRealm:
       - secretName: tubearchivist-elasticsearch-config

hosts/ps08rp/traefik/compose.yaml

@@ -1,7 +1,7 @@
 ---
 services:
     traefik:
-        image: ghcr.io/traefik/traefik:v3.6.15@sha256:8cb20d16e01a53d8d7f7696ac2f1af7d200d5c9984d226ce2299731d9eab6d6c
+        image: ghcr.io/traefik/traefik:v3.7.0@sha256:eb328e2c806c53aafbbace6c451fa54d268961261a85452fcf0fb752a30c17be
         container_name: traefik
         command:
             - "--global.checkNewVersion=false"

hosts/ps09rp/traefik/compose.yaml

@@ -1,7 +1,7 @@
 ---
 services:
     traefik:
-        image: ghcr.io/traefik/traefik:v3.6.15@sha256:8cb20d16e01a53d8d7f7696ac2f1af7d200d5c9984d226ce2299731d9eab6d6c
+        image: ghcr.io/traefik/traefik:v3.7.0@sha256:eb328e2c806c53aafbbace6c451fa54d268961261a85452fcf0fb752a30c17be
         container_name: traefik
         command:
             - "--global.checkNewVersion=false"

hosts/ps10rp/traefik/compose.yaml

@@ -20,7 +20,7 @@ services:
             - /dev/net/tun:/dev/net/tun
 
     traefik:
-        image: ghcr.io/traefik/traefik:v3.6.15@sha256:8cb20d16e01a53d8d7f7696ac2f1af7d200d5c9984d226ce2299731d9eab6d6c
+        image: ghcr.io/traefik/traefik:v3.7.0@sha256:eb328e2c806c53aafbbace6c451fa54d268961261a85452fcf0fb752a30c17be
         container_name: traefik
         command:
             - "--global.checkNewVersion=false"

renovate.json

@@ -166,17 +166,26 @@
       ],
       "matchPackageNames": [
         "/(^|/|-)(actual)/",
+        "/(^|/|-)(alloy)/",
+        "/(^|/|-)(clickhouse)/",
+        "/(^|/|-)(code-server)/",
+        "/(^|/|-)(home-assistant)/",
         "/(^|/|-)(kube-prometheus-stack)/",
+        "/(^|/|-)(libation|Libation)/",
         "/(^|/|-)(lidarr)/",
+        "/(^|/|-)(loki)/",
         "/(^|/|-)(medialyze|MediaLyze)/",
         "/(^|/|-)(musicgrabber)/",
         "/(^|/|-)(ollama)/",
         "/(^|/|-)(outline)/",
+        "/(^|/|-)(prowlarr)/",
         "/(^|/|-)(qui)/",
         "/(^|/|-)(radarr)/",
         "/(^|/|-)(renovate)/",
         "/(^|/|-)(sonarr)/",
         "/(^|/|-)(tdarr)/",
+        "/(^|/|-)(traefik)/",
+        "/(^|/|-)(valkey)/",
         "/(^|/|-)(yubal)/"
       ],
       "addLabels": [