chore(deps): update g33kphr33k/musicgrabber docker tag to v2.8.9

Reviewed-on: #7128

.gitea/workflows/lint-test-helm.yaml

@@ -343,6 +343,7 @@ jobs:
 
             helm dependency build "${CHART_PATH}" --skip-refresh
 
+            set -o pipefail
             if ! helm template "${DIR}" "${CHART_PATH}" --include-crds --namespace default --api-versions "gateway.networking.k8s.io/v1/HTTPRoute,monitoring.coreos.com/v1,monitoring.coreos.com/v1/ServiceMonitor" | \
               kubeconform \
                 ${SCHEMA_LOCATIONS} \

.gitea/workflows/render-manifests.yaml

@@ -250,6 +250,8 @@ jobs:
 
           echo ">> Rendering Manifests ..."
 
+          EXIT_CODE=0
+
           render_chart() {
             local DIR="$1"
             local CHART_PATH="${MAIN_DIR}/clusters/${CLUSTER}/helm/${DIR}"
@@ -283,10 +285,17 @@ jobs:
 
               echo ">> Formating rendered template ..."
               local TEMPLATE
-              TEMPLATE=$(helm template "${CHART_NAME}" ./ --namespace "${NAMESPACE}" --include-crds --dry-run=server --api-versions "gateway.networking.k8s.io/v1/HTTPRoute,monitoring.coreos.com/v1,monitoring.coreos.com/v1/ServiceMonitor")
+              if ! TEMPLATE=$(helm template "${CHART_NAME}" ./ --namespace "${NAMESPACE}" --include-crds --dry-run=server --api-versions "gateway.networking.k8s.io/v1/HTTPRoute,monitoring.coreos.com/v1,monitoring.coreos.com/v1/ServiceMonitor"); then
+                echo "${DIR}" > "${MAIN_DIR}/.failed_chart_${DIR}"
+                return 1
+              fi
 
               # Format and split rendered template
-              echo "${TEMPLATE}" | yq '... comments=""' | yq 'select(. != null)' | yq -s '"'"${OUTPUT_FOLDER}"'" + .kind + "-" + .metadata.name + ".yaml"'
+              set -o pipefail
+              if ! echo "${TEMPLATE}" | yq '... comments=""' | yq 'select(. != null)' | yq -s '"'"${OUTPUT_FOLDER}"'" + .kind + "-" + .metadata.name + ".yaml"'; then
+                echo "${DIR}" > "${MAIN_DIR}/.failed_chart_${DIR}"
+                return 1
+              fi
 
               # Strip comments again to ensure formatting correctness
               for file in "$OUTPUT_FOLDER"/*; do
@@ -316,9 +325,16 @@ jobs:
 
           done | xargs -P 5 -I {} bash -c 'OUT=$(render_chart "$@" 2>&1); printf "%s\n" "$OUT"' _ {}
 
+          if ls .failed_chart_* 1> /dev/null 2>&1; then
+            EXIT_CODE=1
+            rm -f .failed_chart_*
+          fi
+
           echo ""
           echo "----"
 
+          exit $EXIT_CODE
+
       - name: Check for Changes
         id: check-changes
         if: steps.check-dir-changes.outputs.changes-detected == 'true'

.gitea/workflows/renovate.yaml

@@ -13,7 +13,7 @@ on:
 jobs:
   renovate:
     runs-on: ubuntu-js
-    container: ghcr.io/renovatebot/renovate:43.182.0@sha256:65ce1e535036b87e93ac8b20300d562e5da492c0aad3d20cc74c9d036ee56cf7
+    container: ghcr.io/renovatebot/renovate:43.185.1@sha256:6bcd209d6a3e87769376430c24c853f1eefb770c9c0ed273dc985785158223c5
     steps:
       - name: Checkout
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6

clusters/cl01tl/helm/audiobookshelf/Chart.yaml

@@ -32,4 +32,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/audiobookshelf.png
 # renovate: datasource=github-releases depName=advplyr/audiobookshelf
-appVersion: 2.34.0
+appVersion: 2.35.0

clusters/cl01tl/helm/audiobookshelf/values.yaml

@@ -12,7 +12,7 @@ audiobookshelf:
         main:
           image:
             repository: ghcr.io/advplyr/audiobookshelf
-            tag: 2.34.0@sha256:4143292c530f6ac6700afd13360c04f477e4f1a81c1c97c4224b1c7e4330c5c4
+            tag: 2.35.0@sha256:89276ff2e0b3d2f07dd334b641f27a34ab7f02e1047c60b7b8a30126cb0813a5
           env:
             - name: TZ
               value: America/Chicago

clusters/cl01tl/helm/authentik/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 2026.2.3
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 3.3.0
+  version: 3.3.1
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.12.1
+  version: 7.15.0
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:cb3b3745cbfc4ef138a43fb617e27022a220acee177a30ca02e4f78509ca5c3f
-generated: "2026-05-14T14:04:28.583181759Z"
+digest: sha256:df192f903f1bcb7c8882b65b697ab457301c8eced1fdebc56580e4a76039910e
+generated: "2026-05-18T19:56:17.91252-05:00"

clusters/cl01tl/helm/authentik/Chart.yaml

@@ -22,10 +22,10 @@ dependencies:
     repository: https://charts.goauthentik.io/
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 3.3.0
+    version: 3.3.1
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.12.1
+    version: 7.15.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey

clusters/cl01tl/helm/authentik/values.yaml

@@ -77,10 +77,6 @@ authentik:
       enabled: true
 postgres-18-cluster:
   mode: recovery
-  cluster:
-    resources:
-      requests:
-        memory: 150Mi
   recovery:
     method: objectStore
     objectStore:

clusters/cl01tl/helm/blocky/Chart.yaml

@@ -24,4 +24,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/blocky.png
 # renovate: datasource=github-releases depName=0xerr0r/blocky
-appVersion: v0.29.0
+appVersion: v0.30.0

clusters/cl01tl/helm/blocky/values.yaml

@@ -8,7 +8,7 @@ blocky:
         main:
           image:
             repository: ghcr.io/0xerr0r/blocky
-            tag: v0.29.0@sha256:a6d99f323d3036a99a3767a52ad612f4d8f3f31167492bfc14d4ea57b24cdfd0
+            tag: v0.30.0@sha256:d9f15eddffedded40797406349012cbd5966ef99c286b13321e7a76efddb9bdc
           env:
             - name: TZ
               value: America/Chicago

clusters/cl01tl/helm/cloudnative-pg/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 0.6.0
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.11.3
+  version: 0.11.4
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.11.3
-digest: sha256:a08719a82de76d62cddfec163dbc9feecfbea83ab406f3750d25d4deaf586f0c
-generated: "2026-05-13T00:10:14.309341878Z"
+  version: 0.11.4
+digest: sha256:35ff1bb60552f176dab2055a17c0e8880cc6b6c7bfa6c64415a1eec421f8723f
+generated: "2026-05-18T02:14:30.999705779Z"

clusters/cl01tl/helm/cloudnative-pg/Chart.yaml

@@ -26,11 +26,11 @@ dependencies:
   - name: rclone-bucket
     alias: rclone-postgres-backups-remote
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.11.3
+    version: 0.11.4
   - name: rclone-bucket
     alias: rclone-postgres-backups-external
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.11.3
+    version: 0.11.4
 icon: https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg.github.io/refs/heads/main/assets/images/hero_image.png
 # renovate: datasource=github-releases depName=cloudnative-pg/cloudnative-pg
 appVersion: 1.29.1

clusters/cl01tl/helm/cloudnative-pg/values.yaml

@@ -53,7 +53,7 @@ rclone-postgres-backups-external:
       bucketName: postgres-backups-775957147abfbc73
   prune:
     enabled: true
-    ageToPrune: 45d
+    ageToPrune: 14d
     include: "/cl01tl/*/*/*/base/**"
     exclude: "**/walls/**"
   secret:

clusters/cl01tl/helm/dawarich/Chart.lock

@@ -4,7 +4,7 @@ dependencies:
   version: 5.0.1
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.12.1
+  version: 7.15.0
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
@@ -17,5 +17,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
-digest: sha256:9cee1f95659261182052fb1e48c74052cca5b346c39d61ca99c20eeb1e6ce8ae
-generated: "2026-05-15T00:29:26.90725275Z"
+digest: sha256:2463c5c7f9d43539f2f0bda9a59ce391d6c45e328b8a7cbfeae2991128983978
+generated: "2026-05-18T19:56:49.128641-05:00"

clusters/cl01tl/helm/dawarich/Chart.yaml

@@ -22,7 +22,7 @@ dependencies:
     version: 5.0.1
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.12.1
+    version: 7.15.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey

clusters/cl01tl/helm/directus/Chart.lock

@@ -4,15 +4,15 @@ dependencies:
   version: 5.0.1
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.12.1
+  version: 7.14.0
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.11.3
+  version: 0.11.4
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.11.3
-digest: sha256:80a6b37486f2ac7f189cf41b08e731f8a34df37e1af916c3eb49a5dc68939df0
-generated: "2026-05-15T00:29:39.148310428Z"
+  version: 0.11.4
+digest: sha256:ee36358884f42e30159b24f877b4201ce937855919c49bfda64fe3c26315ea1a
+generated: "2026-05-18T20:31:09.50641-05:00"

clusters/cl01tl/helm/directus/Chart.yaml

@@ -22,7 +22,7 @@ dependencies:
     version: 5.0.1
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.12.1
+    version: 7.14.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
@@ -31,11 +31,11 @@ dependencies:
   - name: rclone-bucket
     alias: rclone-directus-assets-remote
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.11.3
+    version: 0.11.4
   - name: rclone-bucket
     alias: rclone-directus-assets-external
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.11.3
+    version: 0.11.4
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/directus.png
 # renovate: datasource=github-releases depName=directus/directus
 appVersion: 11.17.4

clusters/cl01tl/helm/element-web/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 1.4.36
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 3.3.0
-digest: sha256:ede4fbfd1808fcb8e6e8394ceb469603ada10d789b551e3b9885825244ee33d9
-generated: "2026-05-14T14:04:44.871143485Z"
+  version: 3.3.1
+digest: sha256:37a41dfedd352f4122d78d17f4f3b7a703055553c45983bca0aa377cdd599fa2
+generated: "2026-05-18T02:02:39.83645496Z"

clusters/cl01tl/helm/element-web/Chart.yaml

@@ -19,7 +19,7 @@ dependencies:
     repository: https://ananace.gitlab.io/charts
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 3.3.0
+    version: 3.3.1
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/element.png
 # renovate: datasource=github-releases depName=element-hq/element-web
 appVersion: v1.12.18

clusters/cl01tl/helm/foldergram/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 5.0.1
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 3.3.0
+  version: 3.3.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
-digest: sha256:1d30d0c1899bb32faa2c6ab3f5039682c596432f6b41d153191f211c745f637d
-generated: "2026-05-15T00:30:27.088686555Z"
+digest: sha256:5637258c6907d062d327578a8b4f6a97112446f2f1ef2f1085e9317baba49310
+generated: "2026-05-18T02:02:50.886833918Z"

clusters/cl01tl/helm/foldergram/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     version: 5.0.1
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 3.3.0
+    version: 3.3.1
   - name: volsync-target
     alias: volsync-target-db
     version: 2.0.0

clusters/cl01tl/helm/freshrss/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 5.0.1
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 3.3.0
+  version: 3.3.1
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.12.1
+  version: 7.14.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
-digest: sha256:76585c8fec2e77f3ee5e9eecfcf2bd9c058cada91aed57afd977e00d3ce64a3c
-generated: "2026-05-15T00:30:43.314740702Z"
+digest: sha256:4b1d1c052b4096e93f4ef51cb828ce52fb31f36ecef01e99560cf7054945b87b
+generated: "2026-05-18T20:31:38.014042-05:00"

clusters/cl01tl/helm/freshrss/Chart.yaml

@@ -22,10 +22,10 @@ dependencies:
     version: 5.0.1
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 3.3.0
+    version: 3.3.1
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.12.1
+    version: 7.14.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data

clusters/cl01tl/helm/gatus/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 1.5.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.12.1
+  version: 7.14.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
-digest: sha256:25d95b64934fb0fe59914f82b752de38979929342c0a8dad1be77e4a1b2ed93f
-generated: "2026-05-08T20:53:54.376296-05:00"
+digest: sha256:5390a96241bf265309bb90c1723c4c0bc23818457b95801ead35d24a7db7da0a
+generated: "2026-05-18T20:31:46.358371-05:00"

clusters/cl01tl/helm/gatus/Chart.yaml

@@ -20,7 +20,7 @@ dependencies:
     version: 1.5.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.12.1
+    version: 7.14.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data

clusters/cl01tl/helm/gitea/Chart.lock

@@ -1,7 +1,7 @@
 dependencies:
 - name: gitea
   repository: https://dl.gitea.com/charts/
-  version: 12.5.3
+  version: 12.6.0
 - name: actions
   repository: https://dl.gitea.com/charts/
   version: 0.1.0
@@ -10,10 +10,10 @@ dependencies:
   version: 0.32.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 3.3.0
+  version: 3.3.1
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.12.1
+  version: 7.15.0
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
@@ -23,5 +23,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
-digest: sha256:d4f3ba631c0a2e0b6b57bda23544f32a25dee0e0b4b8a7be2dc7f648704b6d92
-generated: "2026-05-14T14:05:30.803843042Z"
+digest: sha256:34bef18e6f56091f1a9822dd243cda4b17ba07783d4c8635165e5ada2dcaa4ad
+generated: "2026-05-18T19:57:53.546712-05:00"

clusters/cl01tl/helm/gitea/Chart.yaml

@@ -26,7 +26,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: gitea
-    version: 12.5.3
+    version: 12.6.0
     repository: https://dl.gitea.com/charts/
   - name: actions
     alias: gitea-actions
@@ -37,10 +37,10 @@ dependencies:
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 3.3.0
+    version: 3.3.1
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.12.1
+    version: 7.15.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey-gitea
@@ -56,4 +56,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/gitea.png
 # renovate: datasource=github-releases depName=go-gitea/gitea
-appVersion: 1.26.0
+appVersion: 1.26.1

clusters/cl01tl/helm/gitea/values.yaml

@@ -9,7 +9,7 @@ gitea:
       maxUnavailable: 1
   image:
     repository: gitea/gitea
-    tag: 1.25.5
+    tag: 1.26.1
   service:
     http:
       type: ClusterIP
@@ -255,7 +255,11 @@ postgres-18-cluster:
   cluster:
     resources:
       requests:
+        memory: 2Gi
         cpu: 100m
+    postgresql:
+      parameters:
+        shared_buffers: 2GB
   recovery:
     method: objectStore
     objectStore:

clusters/cl01tl/helm/grafana-operator/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 5.22.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.12.1
+  version: 7.14.0
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:a8553690c0fa8cbb9b6707388c3bcc11f2f38314d6512b1b9b2467f862cca4d9
-generated: "2026-05-08T02:31:18.145858152Z"
+digest: sha256:29c74a246e9dedd6a8025258742d55397352a4497f7dace1939479df5f04f655
+generated: "2026-05-18T20:32:00.941162-05:00"

clusters/cl01tl/helm/grafana-operator/Chart.yaml

@@ -20,7 +20,7 @@ dependencies:
     repository: https://grafana.github.io/helm-charts
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.12.1
+    version: 7.14.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey-unified-alerting

clusters/cl01tl/helm/harbor/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 1.19.0
 - name: postgres-cluster
   repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
-  version: 7.12.1
+  version: 7.14.0
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:4ef3c0544281466cf714f5c6410309d4e090463d7f9a5750cd954c520abb0a40
-generated: "2026-05-08T02:31:31.873945824Z"
+digest: sha256:91c317e8e462d93d99ab0c44bf54f0a9be74a9a7d24f414bd543a5d784c32d80
+generated: "2026-05-18T20:32:11.043152-05:00"

clusters/cl01tl/helm/harbor/Chart.yaml

@@ -20,7 +20,7 @@ dependencies:
     repository: https://helm.goharbor.io
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.12.1
+    version: 7.14.0
     repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
   - name: valkey
     alias: valkey

clusters/cl01tl/helm/home-assistant/values.yaml

@@ -12,7 +12,7 @@ home-assistant:
         main:
           image:
             repository: ghcr.io/home-assistant/home-assistant
-            tag: 2026.5.2@sha256:f0baa7922ecec7790c40c41baf08ab218b6ab8db5f96dc03b03a0ae33d987c3d
+            tag: 2026.5.3@sha256:ff875078181a0383bf3fca9f061be12d6180896dbd531de04e094e25505b0bb9
           env:
             - name: TZ
               value: America/Chicago

clusters/cl01tl/helm/immich/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 5.0.1
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.12.1
+  version: 7.15.0
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
-digest: sha256:7b856b2333dd7def586b6edbb8998848ca4518064006a30daf08f0009f4c9f2d
-generated: "2026-05-15T00:31:49.494723872Z"
+digest: sha256:0ebe80fdc1e7b70d1d7714f4f73ddf9ac5ffdb6ecd75cb7304cc55af062328be
+generated: "2026-05-18T19:58:31.087625-05:00"

clusters/cl01tl/helm/immich/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     version: 5.0.1
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.12.1
+    version: 7.15.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey

clusters/cl01tl/helm/immich/values.yaml

@@ -167,10 +167,8 @@ postgres-18-cluster:
   cluster:
     image:
       repository: ghcr.io/tensorchord/cloudnative-vectorchord
-      tag: 18.0-0.5.3
+      tag: 18.3-1.1.1
     postgresql:
-      parameters:
-        shared_buffers: 256MB
       shared_preload_libraries:
         - "vchord.so"
     initdb:

clusters/cl01tl/helm/jellystat/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 5.0.1
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.12.1
+  version: 7.14.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
-digest: sha256:806dd1a34ca2a7a866ec2a57f11340b33b3e59f463e48a193482a5457e7ac933
-generated: "2026-05-15T00:32:29.254975258Z"
+digest: sha256:812227e8fa2f460951269456137f664c5ee87045b08f93ff559af5e10de9d4a9
+generated: "2026-05-18T20:32:42.585899-05:00"

clusters/cl01tl/helm/jellystat/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     version: 5.0.1
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.12.1
+    version: 7.14.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data

clusters/cl01tl/helm/karakeep/Chart.lock

@@ -7,15 +7,15 @@ dependencies:
   version: 0.32.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 3.3.0
+  version: 3.3.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.11.3
+  version: 0.11.4
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.11.3
-digest: sha256:5c8f8a7df54e88d548ec74716346114b9b1b451fa218cef155e8944ee03749f0
-generated: "2026-05-15T00:32:42.867507912Z"
+  version: 0.11.4
+digest: sha256:3610dac0450402003fb81ee6b21167526b97ae90f4cb060649ed555d0003cb45
+generated: "2026-05-18T02:15:00.671974648Z"

clusters/cl01tl/helm/karakeep/Chart.yaml

@@ -28,7 +28,7 @@ dependencies:
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 3.3.0
+    version: 3.3.1
   - name: volsync-target
     alias: volsync-target-data
     version: 2.0.0
@@ -36,11 +36,11 @@ dependencies:
   - name: rclone-bucket
     alias: rclone-karakeep-assets-remote
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.11.3
+    version: 0.11.4
   - name: rclone-bucket
     alias: rclone-karakeep-assets-external
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.11.3
+    version: 0.11.4
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/karakeep.png
 # renovate: datasource=github-releases depName=karakeep-app/karakeep
 appVersion: 0.32.0

clusters/cl01tl/helm/komodo/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 5.0.1
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.12.1
+  version: 7.15.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
-digest: sha256:d3a0b00f23203008ced90645ec49e968b777acc42b58afd0a5cbfb2a64294f2b
-generated: "2026-05-15T00:33:10.57907774Z"
+digest: sha256:31cc26b2ebd4c249165621445a389c136ecff8d1f95b88d8f0fe1631be395b4c
+generated: "2026-05-18T19:59:09.154172-05:00"

clusters/cl01tl/helm/komodo/Chart.yaml

@@ -23,7 +23,7 @@ dependencies:
     version: 5.0.1
   - name: postgres-cluster
     alias: postgresql-17-fdb-cluster
-    version: 7.12.1
+    version: 7.15.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-keys

clusters/cl01tl/helm/komodo/values.yaml

@@ -10,8 +10,6 @@ komodo:
             repository: ghcr.io/moghtech/komodo-core
             tag: 2.2.0@sha256:833880ca8b1a6c1c133efb07e8633525bf63094b4faa72700cf52f60fd69e6c6
           env:
-            - name: COMPOSE_LOGGING_DRIVER
-              value: local
             - name: KOMODO_HOST
               value: https://komodo.alexlebens.net
             - name: KOMODO_TITLE
@@ -22,9 +20,13 @@ komodo:
                   name: komodo-secret
                   key: passkey
             - name: KOMODO_MONITORING_INTERVAL
-              value: 15-sec
-            - name: KOMODO_RESOURCE_POLL_INTERVAL
               value: 5-min
+            - name: KOMODO_RESOURCE_POLL_INTERVAL
+              value: 3-hr
+            - name: KOMODO_KEEP_STATS_FOR_DAYS
+              value: 3
+            - name: KOMODO_KEEP_ALERTS_FOR_DAYS
+              value: 3
             - name: KOMODO_PASSKEY
               valueFrom:
                 secretKeyRef:
@@ -184,9 +186,6 @@ postgresql-17-fdb-cluster:
         documentdb.enableBypassDocumentValidation: "true"
         documentdb.enableUserCrud: "true"
         documentdb.maxUserLimit: "100"
-        shared_buffers: 128MB
-        max_slot_wal_keep_size: 2000MB
-        hot_standby_feedback: "on"
       pg_hba:
         - host ferretDB postgres localhost trust
         - host ferretDB ferret localhost trust

clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock

@@ -1,7 +1,7 @@
 dependencies:
 - name: kube-prometheus-stack
   repository: oci://ghcr.io/prometheus-community/charts
-  version: 85.1.2
+  version: 85.1.3
 - name: prometheus-operator-crds
   repository: oci://ghcr.io/prometheus-community/charts
   version: 29.0.0
@@ -11,5 +11,5 @@ dependencies:
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:7c7504aaf6283c681f6ce8d044d4a2d61669f3237c33f434f955ad96b072fe9a
-generated: "2026-05-16T19:05:00.763646788Z"
+digest: sha256:67a7c994af3e36ed3668123a1c5add5144e5460149dce40e7686e71c79c5123a
+generated: "2026-05-17T15:05:47.249164073Z"

clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml

@@ -20,7 +20,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: kube-prometheus-stack
-    version: 85.1.2
+    version: 85.1.3
     repository: oci://ghcr.io/prometheus-community/charts
   - name: prometheus-operator-crds
     version: 29.0.0

clusters/cl01tl/helm/lidarr/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 5.0.1
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.12.1
+  version: 7.14.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
-digest: sha256:ba4a75e31604e46836a46fcbfe8d24a084ca50e5eb42cf4e8357df6357fed89e
-generated: "2026-05-15T00:34:25.221434141Z"
+digest: sha256:5bf53673759af944b8b612bb582a78849138536131bcc28967930fc181e1f0d7
+generated: "2026-05-18T20:33:11.83252-05:00"

clusters/cl01tl/helm/lidarr/Chart.yaml

@@ -25,7 +25,7 @@ dependencies:
     version: 5.0.1
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.12.1
+    version: 7.14.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/matrix-synapse/Chart.lock

@@ -13,13 +13,13 @@ dependencies:
   version: 5.0.1
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 3.3.0
+  version: 3.3.1
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 3.3.0
+  version: 3.3.1
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.12.1
+  version: 7.14.0
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
@@ -38,5 +38,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
-digest: sha256:e163e6e890b0b801d7a5080760e6e4ee3d861243897c40b9d394eeb52271c992
-generated: "2026-05-15T00:34:39.182329589Z"
+digest: sha256:280828df104118ddbe6b18397faa5b08af9d4012dfbd257bc205018834dca006
+generated: "2026-05-18T20:33:28.387868-05:00"

clusters/cl01tl/helm/matrix-synapse/Chart.yaml

@@ -42,15 +42,15 @@ dependencies:
     version: 5.0.1
   - name: cloudflared
     alias: cloudflared-synapse
-    version: 3.3.0
+    version: 3.3.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: cloudflared
     alias: cloudflared-hookshot
-    version: 3.3.0
+    version: 3.3.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.12.1
+    version: 7.14.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey-matrix-synapse

clusters/cl01tl/helm/medialyze/Chart.yaml

@@ -24,4 +24,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://raw.githubusercontent.com/frederikemmer/MediaLyze/d8f69c0628bac7c047b90f91a66341648029c273/frontend/public/favicon.svg
 # renovate: datasource=github-releases depName=frederikemmer/MediaLyze
-appVersion: 0.11.0
+appVersion: 0.11.1

clusters/cl01tl/helm/medialyze/values.yaml

@@ -12,7 +12,7 @@ medialyze:
         main:
           image:
             repository: ghcr.io/frederikemmer/medialyze
-            tag: 0.11.1@sha256:9be0ac02eac5315e18645fae049f9859f3357b4e771cd2a759b5df1c6cc32d63
+            tag: 0.11.2@sha256:696494d76fe6013cabc85838a115221cfec14e72b5f86df1d22710c302c17313
           env:
             - name: HOST_PORT
               value: 8080

clusters/cl01tl/helm/music-grabber/Chart.yaml

@@ -24,4 +24,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/music-grabber.png
 # renovate: datasource=docker depName=g33kphr33k/musicgrabber
-appVersion: 2.8.8
+appVersion: 2.8.9

clusters/cl01tl/helm/music-grabber/values.yaml

@@ -12,7 +12,7 @@ music-grabber:
         main:
           image:
             repository: g33kphr33k/musicgrabber
-            tag: 2.8.8@sha256:72dd1056fab07c873276c854bea08b8ef07bb54b8fbe0413047d8701d2abc146
+            tag: 2.8.9@sha256:022e3f751607ae008fe4ea539810199923cfd74eee10ffa372c71f897481beb6
           env:
             - name: MUSIC_DIR
               value: /mnt/store/Music Grabber/

clusters/cl01tl/helm/ntfy/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 5.0.1
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.12.1
+  version: 7.14.0
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.11.3
-digest: sha256:04c797f44a1d1ecc471ff3c16ce64fa9849b4c92ce412fdb23ad010ae2a0650a
-generated: "2026-05-15T00:35:28.412982026Z"
+  version: 0.11.4
+digest: sha256:d3bf29dfa3fe670ebb16a6b6eec49d523850281a88da35921f93d51242e8135d
+generated: "2026-05-18T20:33:50.533086-05:00"

clusters/cl01tl/helm/ntfy/Chart.yaml

@@ -20,12 +20,12 @@ dependencies:
     version: 5.0.1
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.12.1
+    version: 7.14.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: rclone-bucket
     alias: rclone-ntfy-attachments-remote
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.11.3
+    version: 0.11.4
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ntfy.png
 # renovate: datasource=github-releases depName=binwiederhier/ntfy
-appVersion: 2.22.0
+appVersion: 2.23.0

clusters/cl01tl/helm/ntfy/values.yaml

@@ -8,7 +8,7 @@ ntfy:
         main:
           image:
             repository: binwiederhier/ntfy
-            tag: v2.22.0@sha256:d8b3408c75d5ae78e03339af6103e7e6195e56573eea6f1ad34bb4dc4f44f340
+            tag: v2.23.0@sha256:b32b4221a64ec2e7c000f0782b2feef24022e1a09a24e531640f4cbba6cfa1e6
           args: ["serve"]
           env:
             - name: TZ

clusters/cl01tl/helm/ollama/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 5.0.1
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.12.1
+  version: 7.14.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
-digest: sha256:2c533d1a0a7491926f75ee040e8afda7632092f17db134b041722fdddf93c022
-generated: "2026-05-15T00:35:39.637548335Z"
+digest: sha256:0211159b5872af51f138fbd2d5fe0d843710f971206be98a2933f3c76a34748d
+generated: "2026-05-18T20:33:53.879043-05:00"

clusters/cl01tl/helm/ollama/Chart.yaml

@@ -23,7 +23,7 @@ dependencies:
     version: 5.0.1
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.12.1
+    version: 7.14.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data

clusters/cl01tl/helm/openbao/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 5.0.1
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.11.3
+  version: 0.11.4
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.11.3
-digest: sha256:5b4009e2a16eed583be361bc160327986552498f29800ffe6f5aaa9f994fde4d
-generated: "2026-05-15T00:36:00.495035101Z"
+  version: 0.11.4
+digest: sha256:bd0ab8f854917701e69215e81bc77899d0365908998d658aba02de4afaffd889
+generated: "2026-05-18T02:15:31.062887311Z"

clusters/cl01tl/helm/openbao/Chart.yaml

@@ -29,11 +29,11 @@ dependencies:
   - name: rclone-bucket
     alias: rclone-openbao-backups-remote
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.11.3
+    version: 0.11.4
   - name: rclone-bucket
     alias: rclone-openbao-backups-external
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.11.3
+    version: 0.11.4
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/openbao.png
 # renovate: datasource=github-releases depName=openbao/openbao
 appVersion: v2.5.3

clusters/cl01tl/helm/outline/Chart.lock

@@ -4,15 +4,15 @@ dependencies:
   version: 5.0.1
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 3.3.0
+  version: 3.3.1
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.12.1
+  version: 7.14.0
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
-digest: sha256:280313acd89b86f56c6216dccad63d222b54effc4d45e4c9d178b0dc66b6d103
-generated: "2026-05-15T00:36:13.502589844Z"
+digest: sha256:ab7402ba6a7f1a4e0f0625e31ae66b0f8a11200632b412a57a0353efd45c9d4a
+generated: "2026-05-18T20:34:04.070564-05:00"

clusters/cl01tl/helm/outline/Chart.yaml

@@ -23,10 +23,10 @@ dependencies:
     version: 5.0.1
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 3.3.0
+    version: 3.3.1
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.12.1
+    version: 7.14.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey

clusters/cl01tl/helm/paperless-ngx/Chart.lock

@@ -4,7 +4,7 @@ dependencies:
   version: 5.0.1
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.12.1
+  version: 7.14.0
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
@@ -20,5 +20,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
-digest: sha256:064ed6c68d680d98bd33ef41faf6808d4fd5d3f1e2862310cc3c5cac80b905b2
-generated: "2026-05-15T00:36:26.245671952Z"
+digest: sha256:4605ea22803024f06323e18ab5baabe31cd48d2078fe4b0e536c2732bb3d8229
+generated: "2026-05-18T20:34:07.556536-05:00"

clusters/cl01tl/helm/paperless-ngx/Chart.yaml

@@ -24,7 +24,7 @@ dependencies:
     version: 5.0.1
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.12.1
+    version: 7.14.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey

clusters/cl01tl/helm/plex/values.yaml

@@ -22,7 +22,7 @@ plex:
         main:
           image:
             repository: ghcr.io/linuxserver/plex
-            tag: 1.43.1.10611-1e34174b1-ls305@sha256:8d937dd32659bb1defa02d713a3b1cc99919f12aa17a072d588e770a6f1d7d26
+            tag: 1.43.1.10611-1e34174b1-ls306@sha256:11e99f0bc8844470733a351cf2b4e454f7bfa37c7f38b43846d465906fea360b
           env:
             - name: TZ
               value: America/Chicago

clusters/cl01tl/helm/postiz/Chart.lock

@@ -7,10 +7,10 @@ dependencies:
   version: 1.2.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 3.3.0
+  version: 3.3.1
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.12.1
+  version: 7.14.0
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
@@ -20,5 +20,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
-digest: sha256:ededf5084bb931828d75824153f923d4b0868f8774e921b0132702153687d54a
-generated: "2026-05-15T00:36:54.47715173Z"
+digest: sha256:528436c0adab5a251f4eef5f8ae392fac6df1fa5ea4af9bf0ea199804a638d96
+generated: "2026-05-18T20:34:14.144546-05:00"

clusters/cl01tl/helm/postiz/Chart.yaml

@@ -32,10 +32,10 @@ dependencies:
     version: 1.2.0
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 3.3.0
+    version: 3.3.1
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.12.1
+    version: 7.14.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey

clusters/cl01tl/helm/qbittorrent/values.yaml

@@ -32,6 +32,62 @@ qbittorrent:
             - |
               sysctl -w net.ipv4.ip_forward=1;
               sysctl -w net.ipv6.conf.all.disable_ipv6=1
+        gluetun:
+          restartPolicy: Always
+          image:
+            repository: ghcr.io/qdm12/gluetun
+            tag: latest@sha256:725d3e51091dde4ca43e3e3f26e2e6d3d0ccc66821e92d505c3da04958f7d472
+          lifecycle:
+            postStart:
+              exec:
+                command: ["/bin/sh", "-c", "(ip rule del table 51820; ip -6 rule del table 51820) || true"]
+          env:
+            - name: VPN_SERVICE_PROVIDER
+              value: protonvpn
+            - name: VPN_TYPE
+              value: wireguard
+            - name: WIREGUARD_PRIVATE_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: protonvpn-wireguard-conf
+                  key: private-key
+            - name: FIREWALL_OUTBOUND_SUBNETS
+              value: 127.0.0.0/8,192.168.1.0/24,10.244.0.0/16,10.96.0.0/12
+            - name: FIREWALL_INPUT_PORTS
+              value: 8080,9022
+            - name: VPN_PORT_FORWARDING
+              value: "on"
+            - name: VPN_PORT_FORWARDING_UP_COMMAND
+              value: '/bin/sh -c "/gluetun/update.sh {{ printf "{{PORT}}" }}"'
+            - name: PORT_FORWARD_ONLY
+              value: "on"
+            - name: BLOCK_MALICIOUS
+              value: "off"
+          securityContext:
+            privileged: True
+            capabilities:
+              add:
+                - NET_ADMIN
+                - SYS_MODULE
+          probes:
+            readiness:
+              enabled: true
+              custom: true
+              spec:
+                exec:
+                  command:
+                    - /gluetun-entrypoint
+                    - healthcheck
+                failureThreshold: 5
+                initialDelaySeconds: 30
+                periodSeconds: 30
+                successThreshold: 1
+                timeoutSeconds: 15
+          resources:
+            limits:
+              devic.es/tun: "1"
+            requests:
+              devic.es/tun: "1"
       containers:
         qbittorrent:
           image:
@@ -52,65 +108,6 @@ qbittorrent:
             requests:
               cpu: 500m
               memory: 1Gi
-        gluetun:
-          image:
-            repository: ghcr.io/qdm12/gluetun
-            tag: latest@sha256:725d3e51091dde4ca43e3e3f26e2e6d3d0ccc66821e92d505c3da04958f7d472
-          lifecycle:
-            postStart:
-              exec:
-                command: ["/bin/sh", "-c", "(ip rule del table 51820; ip -6 rule del table 51820) || true"]
-          env:
-            - name: VPN_SERVICE_PROVIDER
-              value: protonvpn
-            - name: VPN_TYPE
-              value: wireguard
-            - name: WIREGUARD_PRIVATE_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: protonvpn-wireguard-conf
-                  key: private-key
-            - name: FIREWALL_OUTBOUND_SUBNETS
-              value: 192.168.1.0/24,10.244.0.0/16,10.96.0.0/16
-            - name: FIREWALL_INPUT_PORTS
-              value: 8080,9022
-            - name: VPN_PORT_FORWARDING
-              value: "on"
-            - name: VPN_PORT_FORWARDING_UP_COMMAND
-              value: '/bin/sh -c "/gluetun/update.sh {{ printf "{{PORTS}}" }}"'
-            - name: DNS_UPSTREAM_RESOLVER_TYPE
-              value: dot
-            - name: BLOCK_MALICIOUS
-              value: "off"
-            - name: HTTPPROXY
-              value: "off"
-            - name: SHADOWSOCKS
-              value: "off"
-          securityContext:
-            privileged: True
-            capabilities:
-              add:
-                - NET_ADMIN
-                - SYS_MODULE
-          probes:
-            liveness:
-              enabled: true
-              custom: true
-              spec:
-                exec:
-                  command:
-                    - /gluetun-entrypoint
-                    - healthcheck
-                failureThreshold: 5
-                initialDelaySeconds: 30
-                periodSeconds: 30
-                successThreshold: 1
-                timeoutSeconds: 15
-          resources:
-            limits:
-              devic.es/tun: "1"
-            requests:
-              devic.es/tun: "1"
         exporter:
           image:
             repository: esanchezm/prometheus-qbittorrent-exporter
@@ -146,7 +143,7 @@ qbittorrent:
         qbit-manage:
           image:
             repository: ghcr.io/stuffanthings/qbit_manage
-            tag: v4.7.0@sha256:8786f2efc6fb8e26281f09bf6c5d0004e2d2420fd4781af0aed123ae01558e21
+            tag: v4.7.1@sha256:56e1eeec5582e202e82479b42b588e3807ececca25716f91c7a29f5c597c55d0
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/radarr-4k/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 5.0.1
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.12.1
+  version: 7.14.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
-digest: sha256:99068851e900c502d01771821c787c8bc3a2dd5dabdd3f69a8a322b07e3ae78c
-generated: "2026-05-15T00:37:35.588935648Z"
+digest: sha256:cbabcde561f6626cb89417564951fc78ab47b4395af7b28f99ce5eebbf50f3cf
+generated: "2026-05-18T20:34:27.801973-05:00"

clusters/cl01tl/helm/radarr-4k/Chart.yaml

@@ -25,7 +25,7 @@ dependencies:
     version: 5.0.1
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.12.1
+    version: 7.14.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/radarr-4k/values.yaml

@@ -14,7 +14,7 @@ radarr-4k:
         main:
           image:
             repository: ghcr.io/linuxserver/radarr
-            tag: 6.1.1.10360-ls302@sha256:15417a594ebda4c660a9fa9748e7199d33e2d17b31bbc5ad7ba2e86f0b414763
+            tag: 6.1.1.10360-ls303@sha256:079e48870584baf2a3e7e43e7ba6d3c834555931851a59c82c51cc792d285caf
           env:
             - name: TZ
               value: America/Chicago

clusters/cl01tl/helm/radarr-anime/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 5.0.1
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.12.1
+  version: 7.14.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
-digest: sha256:842777cc18312a40f595bc3300c4ba201d7cfcdd60479035713cd9b368f36579
-generated: "2026-05-15T00:37:47.584243235Z"
+digest: sha256:16288e01b902e48380fa17cc29a5ffc2e2acd733aa649b65fae96e1b8311af69
+generated: "2026-05-18T20:34:31.237543-05:00"

clusters/cl01tl/helm/radarr-anime/Chart.yaml

@@ -25,7 +25,7 @@ dependencies:
     version: 5.0.1
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.12.1
+    version: 7.14.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/radarr-anime/values.yaml

@@ -14,7 +14,7 @@ radarr-anime:
         main:
           image:
             repository: ghcr.io/linuxserver/radarr
-            tag: 6.1.1.10360-ls302@sha256:15417a594ebda4c660a9fa9748e7199d33e2d17b31bbc5ad7ba2e86f0b414763
+            tag: 6.1.1.10360-ls303@sha256:079e48870584baf2a3e7e43e7ba6d3c834555931851a59c82c51cc792d285caf
           env:
             - name: TZ
               value: America/Chicago

clusters/cl01tl/helm/radarr-standup/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 5.0.1
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.12.1
+  version: 7.14.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
-digest: sha256:cc0122fb915433eac0ad9e5f7d4072458377d69a735ded5ccac6db98213afb9b
-generated: "2026-05-15T00:37:58.154035469Z"
+digest: sha256:deddd5410c96b6e8df201f51223a53c6120c6555e96bbfc9853835c3debab7c9
+generated: "2026-05-18T20:34:34.466628-05:00"

clusters/cl01tl/helm/radarr-standup/Chart.yaml

@@ -25,7 +25,7 @@ dependencies:
     version: 5.0.1
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.12.1
+    version: 7.14.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/radarr-standup/values.yaml

@@ -14,7 +14,7 @@ radarr-standup:
         main:
           image:
             repository: ghcr.io/linuxserver/radarr
-            tag: 6.1.1.10360-ls302@sha256:15417a594ebda4c660a9fa9748e7199d33e2d17b31bbc5ad7ba2e86f0b414763
+            tag: 6.1.1.10360-ls303@sha256:079e48870584baf2a3e7e43e7ba6d3c834555931851a59c82c51cc792d285caf
           env:
             - name: TZ
               value: America/Chicago

clusters/cl01tl/helm/radarr/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 5.0.1
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.12.1
+  version: 7.14.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
-digest: sha256:941d08acf9b3d26ccd7f9291c095d2506436473108488395c1f6190c34a8f858
-generated: "2026-05-15T00:38:08.869203676Z"
+digest: sha256:6cf60113f2e95c0032e15f9264255986d776d13f6cc3eb1561824dbbcd218b13
+generated: "2026-05-18T20:34:24.820818-05:00"

clusters/cl01tl/helm/radarr/Chart.yaml

@@ -25,7 +25,7 @@ dependencies:
     version: 5.0.1
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.12.1
+    version: 7.14.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/radarr/values.yaml

@@ -14,7 +14,7 @@ radarr:
         main:
           image:
             repository: ghcr.io/linuxserver/radarr
-            tag: 6.1.1.10360-ls302@sha256:15417a594ebda4c660a9fa9748e7199d33e2d17b31bbc5ad7ba2e86f0b414763
+            tag: 6.1.1.10360-ls303@sha256:079e48870584baf2a3e7e43e7ba6d3c834555931851a59c82c51cc792d285caf
           env:
             - name: TZ
               value: America/Chicago

clusters/cl01tl/helm/rclone/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.11.3
+  version: 0.11.4
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.11.3
-digest: sha256:441a247b3b3b6b489eb42ddb5c8ddef0e865018e7a5b78fb8c95b54aedc7a003
-generated: "2026-05-09T02:56:20.465925553Z"
+  version: 0.11.4
+digest: sha256:969c9e9adfb8fb63b048fceaf70c8bf4d83c5d6a05d0e03ee569eaeec6c32609
+generated: "2026-05-18T02:15:47.654776785Z"

clusters/cl01tl/helm/rclone/Chart.yaml

@@ -16,11 +16,11 @@ dependencies:
   - name: rclone-bucket
     alias: rclone-web-assets-local
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.11.3
+    version: 0.11.4
   - name: rclone-bucket
     alias: rclone-web-assets-remote
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.11.3
+    version: 0.11.4
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/rclone.png
 # renovate: datasource=github-releases depName=rclone/rclone
 appVersion: v1.74.1

clusters/cl01tl/helm/rybbit/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 5.0.1
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 3.3.0
+  version: 3.3.1
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.12.1
+  version: 7.14.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
-digest: sha256:5159d866fc3dcf98b1f7e3e8c4897649fc144d09f5a03d679ef7c58e26255f49
-generated: "2026-05-15T00:38:19.300788708Z"
+digest: sha256:d60a5df6b3cfed1417bd291e54d4bc8ac7a162a327d25fd27f106bd268a48f0a
+generated: "2026-05-18T20:34:48.702096-05:00"

clusters/cl01tl/helm/rybbit/Chart.yaml

@@ -24,10 +24,10 @@ dependencies:
     version: 5.0.1
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 3.3.0
+    version: 3.3.1
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.12.1
+    version: 7.14.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-clickhouse-data

clusters/cl01tl/helm/searxng/values.yaml

@@ -10,7 +10,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:1257de7cdc8d7dbab304eddf150047398ca8f90f7265099921e98e0e0eebc067
+            tag: latest@sha256:25ff3c045548971d12726e54bea4564b8ec3bedb3d6951aecdefd01caf840974
           env:
             - name: SEARXNG_BASE_URL
               value: http://searxng-api.searxng:8080
@@ -38,7 +38,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:1257de7cdc8d7dbab304eddf150047398ca8f90f7265099921e98e0e0eebc067
+            tag: latest@sha256:25ff3c045548971d12726e54bea4564b8ec3bedb3d6951aecdefd01caf840974
           env:
             - name: SEARXNG_BASE_URL
               value: https://searxng.alexlebens.net/

clusters/cl01tl/helm/site-documentation/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 5.0.1
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 3.3.0
-digest: sha256:e0f9d9df5b696b96cfaffe9b8b745383cec94568f54f01ccd4686fb214343045
-generated: "2026-05-15T00:39:16.583350208Z"
+  version: 3.3.1
+digest: sha256:ad0d2ba9c2a3425dcaa70eaf44ada90bbd9a14f3c07cb60e7dadbcb041d9d803
+generated: "2026-05-18T02:04:36.312492543Z"

clusters/cl01tl/helm/site-documentation/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     version: 5.0.1
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 3.3.0
+    version: 3.3.1
 icon: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/logo-new-round.svg
 # renovate: datasource=gitea-releases registryUrl=https://gitea.alexlebens.dev depName=alexlebens/site-documentation
 appVersion: 0.20.0

clusters/cl01tl/helm/site-profile/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 5.0.1
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 3.3.0
-digest: sha256:6cbe4ce4cbe0c9a7f6d018ebafa5dccc76060934c1ae386b2366de245a41b71f
-generated: "2026-05-15T00:39:29.720604489Z"
+  version: 3.3.1
+digest: sha256:1ad8bce2f551471ca18afa9d6aea8da36572de00b0bac54b9df2c278fb27e08e
+generated: "2026-05-18T02:04:47.177748207Z"

clusters/cl01tl/helm/site-profile/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     version: 5.0.1
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 3.3.0
+    version: 3.3.1
 icon: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/logo-new-round.svg
 # renovate: datasource=gitea-releases registryUrl=https://gitea.alexlebens.dev depName=alexlebens/site-profile
 appVersion: 3.16.1

clusters/cl01tl/helm/site-saralebens/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 5.0.1
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 3.3.0
-digest: sha256:8bb9fda1b3e54e32772432fef349e9fd4c6677e365ad44286c9411ad5724133e
-generated: "2026-05-15T00:39:44.343644231Z"
+  version: 3.3.1
+digest: sha256:0a9dbcf4834c9d7e9e63ed55f82f2bc521c2e852dd55fcfaae3f66e7540ef9b7
+generated: "2026-05-18T02:04:57.965320002Z"

clusters/cl01tl/helm/site-saralebens/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     version: 5.0.1
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 3.3.0
+    version: 3.3.1
 icon: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/logo-new-round.svg
 # renovate: datasource=gitea-releases registryUrl=https://gitea.alexlebens.dev depName=alexlebens/site-saralebens
 appVersion: 0.20.0

clusters/cl01tl/helm/slskd/values.yaml

@@ -33,6 +33,56 @@ slskd:
             - |
               sysctl -w net.ipv4.ip_forward=1;
               sysctl -w net.ipv6.conf.all.disable_ipv6=1
+        gluetun:
+          restartPolicy: Always
+          image:
+            repository: ghcr.io/qdm12/gluetun
+            tag: v3.41.1@sha256:1a5bf4b4820a879cdf8d93d7ef0d2d963af56670c9ebff8981860b6804ebc8ab
+          lifecycle:
+            postStart:
+              exec:
+                command: ["/bin/sh", "-c", "(ip rule del table 51820; ip -6 rule del table 51820) || true"]
+          env:
+            - name: VPN_SERVICE_PROVIDER
+              value: protonvpn
+            - name: VPN_TYPE
+              value: wireguard
+            - name: WIREGUARD_PRIVATE_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: protonvpn-wireguard-conf
+                  key: private-key
+            - name: FIREWALL_OUTBOUND_SUBNETS
+              value: 127.0.0.0/8,192.168.1.0/24,10.244.0.0/16,10.96.0.0/12
+            - name: FIREWALL_INPUT_PORTS
+              value: 5030
+            - name: BLOCK_MALICIOUS
+              value: "off"
+          securityContext:
+            privileged: true
+            capabilities:
+              add:
+                - NET_ADMIN
+                - SYS_MODULE
+          probes:
+            readiness:
+              enabled: true
+              custom: true
+              spec:
+                exec:
+                  command:
+                    - /gluetun-entrypoint
+                    - healthcheck
+                failureThreshold: 5
+                initialDelaySeconds: 30
+                periodSeconds: 30
+                successThreshold: 1
+                timeoutSeconds: 15
+          resources:
+            limits:
+              devic.es/tun: "1"
+            requests:
+              devic.es/tun: "1"
       containers:
         main:
           image:
@@ -53,61 +103,6 @@ slskd:
             requests:
               cpu: 100m
               memory: 330Mi
-        gluetun:
-          image:
-            repository: ghcr.io/qdm12/gluetun
-            tag: v3.41.1@sha256:1a5bf4b4820a879cdf8d93d7ef0d2d963af56670c9ebff8981860b6804ebc8ab
-          lifecycle:
-            postStart:
-              exec:
-                command: ["/bin/sh", "-c", "(ip rule del table 51820; ip -6 rule del table 51820) || true"]
-          env:
-            - name: VPN_SERVICE_PROVIDER
-              value: protonvpn
-            - name: VPN_TYPE
-              value: wireguard
-            - name: WIREGUARD_PRIVATE_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: protonvpn-wireguard-conf
-                  key: private-key
-            - name: FIREWALL_OUTBOUND_SUBNETS
-              value: 192.168.1.0/24,10.0.0.0/8
-            - name: FIREWALL_INPUT_PORTS
-              value: 5030,50300
-            - name: DNS_UPSTREAM_RESOLVER_TYPE
-              value: dot
-            - name: BLOCK_MALICIOUS
-              value: "off"
-            - name: HTTPPROXY
-              value: "off"
-            - name: SHADOWSOCKS
-              value: "off"
-          securityContext:
-            privileged: true
-            capabilities:
-              add:
-                - NET_ADMIN
-                - SYS_MODULE
-          probes:
-            liveness:
-              enabled: true
-              custom: true
-              spec:
-                exec:
-                  command:
-                    - /gluetun-entrypoint
-                    - healthcheck
-                failureThreshold: 5
-                initialDelaySeconds: 30
-                periodSeconds: 30
-                successThreshold: 1
-                timeoutSeconds: 15
-          resources:
-            limits:
-              devic.es/tun: "1"
-            requests:
-              devic.es/tun: "1"
   service:
     main:
       controller: main

clusters/cl01tl/helm/sonarr-4k/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 5.0.1
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.12.1
+  version: 7.14.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
-digest: sha256:deb9c6be5edc5b80a17485ab8e8a36869c7fa05db87663fb350583b277aa0b6a
-generated: "2026-05-15T00:40:12.142676047Z"
+digest: sha256:ea687f4a046c3db4be92e44e8bba887f845512d7fdfcbebaec4ba8a8a67af5c4
+generated: "2026-05-18T20:35:29.158812-05:00"

clusters/cl01tl/helm/sonarr-4k/Chart.yaml

@@ -25,7 +25,7 @@ dependencies:
     version: 5.0.1
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.12.1
+    version: 7.14.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/sonarr-anime/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 5.0.1
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.12.1
+  version: 7.14.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
-digest: sha256:7f69212a6f7441dbce5e8f8e4785aec83ccd2688acfd0b3440cb3acb33d19f10
-generated: "2026-05-15T00:40:25.501189942Z"
+digest: sha256:6cb3b338dc181ce8b119c95199d83d4d4134391a694b0938bb27cfae2e6392a5
+generated: "2026-05-18T20:35:32.286241-05:00"

clusters/cl01tl/helm/sonarr-anime/Chart.yaml

@@ -25,7 +25,7 @@ dependencies:
     version: 5.0.1
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.12.1
+    version: 7.14.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/sonarr/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 5.0.1
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.12.1
+  version: 7.14.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
-digest: sha256:780e2d249423f17173ff2fa181e52fc23591ecb76e3d2559e751e9c98177c4f3
-generated: "2026-05-15T00:40:39.678894285Z"
+digest: sha256:b0d0d0562f27b077ff7167031b721ab57e01d6ae043a77cf71f59e20ce7b6ada
+generated: "2026-05-18T20:35:25.868212-05:00"

clusters/cl01tl/helm/sonarr/Chart.yaml

@@ -25,7 +25,7 @@ dependencies:
     version: 5.0.1
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.12.1
+    version: 7.14.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/sparkyfitness/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 0.16.5-7
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.12.1
+  version: 7.14.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
-digest: sha256:ac9b84552e0bedd8fa65839150aad9cddabfca8323a235ee827ae60370a6da50
-generated: "2026-05-09T20:34:30.696678-05:00"
+digest: sha256:e1015cb52a88dee0833b3bfb06596e71a4b581427f98eb98ab41f4fa825f5203
+generated: "2026-05-18T20:35:35.488617-05:00"

clusters/cl01tl/helm/sparkyfitness/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     repository: oci://ghcr.io/codewithcj/charts
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.12.1
+    version: 7.14.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-backup