Update Helm release postgres-cluster to v6

clusters/cl01tl/applications/directus/Chart.yaml

@@ -32,7 +32,7 @@ dependencies:
     version: 1.15.0
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/directus.png
 appVersion: 11.7.2

clusters/cl01tl/applications/freshrss/Chart.yaml

@@ -27,7 +27,7 @@ dependencies:
     version: 1.15.0
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/freshrss.png
 appVersion: 1.26.2

clusters/cl01tl/applications/immich/Chart.yaml

@@ -25,7 +25,7 @@ dependencies:
     repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
   - name: postgres-cluster
     alias: postgres-16-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/immich.png
 appVersion: v1.132.3

clusters/cl01tl/applications/jellystat/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     version: 4.0.1
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/jellystat.png
 appVersion: 1.1.6

clusters/cl01tl/applications/lidarr/Chart.yaml

@@ -24,7 +24,7 @@ dependencies:
     version: 4.0.1
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/lidarr.png
 appVersion: 2.11.2

clusters/cl01tl/applications/outline/Chart.yaml

@@ -33,7 +33,7 @@ dependencies:
     version: 1.15.0
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/outline.png
 appVersion: 0.84.0

clusters/cl01tl/applications/photoview/Chart.yaml

@@ -20,7 +20,7 @@ dependencies:
     version: 4.0.1
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/photoview.png
 appVersion: 2.4.0

clusters/cl01tl/applications/postiz/Chart.yaml

@@ -31,7 +31,7 @@ dependencies:
     version: 1.15.0
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/postiz.png
 appVersion: v1.43.3

clusters/cl01tl/applications/radarr-4k/Chart.yaml

@@ -27,7 +27,7 @@ dependencies:
     version: 4.0.1
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/radarr-4k.png
 appVersion: 5.22.4

clusters/cl01tl/applications/radarr-anime/Chart.yaml

@@ -27,7 +27,7 @@ dependencies:
     version: 4.0.1
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/radarr-anime.png
 appVersion: 5.22.4

clusters/cl01tl/applications/radarr-standup/Chart.yaml

@@ -26,7 +26,7 @@ dependencies:
     version: 4.0.1
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/radarr.png
 appVersion: 5.22.4

clusters/cl01tl/applications/radarr/Chart.yaml

@@ -26,7 +26,7 @@ dependencies:
     version: 4.0.1
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/radarr.png
 appVersion: 5.22.4

clusters/cl01tl/applications/roundcube/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     version: 4.0.1
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/roundcube.png
 appVersion: 1.6.10

clusters/cl01tl/applications/sonarr-4k/Chart.yaml

@@ -27,7 +27,7 @@ dependencies:
     version: 4.0.1
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/sonarr.png
 appVersion: 4.0.14

clusters/cl01tl/applications/sonarr-anime/Chart.yaml

@@ -26,7 +26,7 @@ dependencies:
     version: 4.0.1
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/sonarr.png
 appVersion: 4.0.14

clusters/cl01tl/applications/sonarr/Chart.yaml

@@ -26,7 +26,7 @@ dependencies:
     version: 4.0.1
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/sonarr.png
 appVersion: 4.0.14

clusters/cl01tl/applications/vaultwarden/Chart.yaml

@@ -28,7 +28,7 @@ dependencies:
     version: 1.15.0
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/vaultwarden.png
 appVersion: 1.33.2

clusters/cl01tl/applications/yamtrack/Chart.yaml

@@ -27,7 +27,7 @@ dependencies:
     repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/yamtrack.png
 appVersion: 0.22.7

clusters/cl01tl/management/argo-workflows/Chart.yaml

@@ -25,7 +25,7 @@ dependencies:
     repository: https://argoproj.github.io/argo-helm
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 appVersion: v3.6.7

clusters/cl01tl/management/komodo/Chart.yaml

@@ -23,7 +23,7 @@ dependencies:
     version: 4.0.1
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/komodo.png
 appVersion: v1.17.5

clusters/cl01tl/monitoring/gatus/Chart.yaml

@@ -22,7 +22,7 @@ dependencies:
     version: 1.2.0
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/gatus.png
 appVersion: v5.12.0

clusters/cl01tl/monitoring/grafana-operator/Chart.yaml

@@ -29,7 +29,7 @@ dependencies:
     repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/grafana.png
 appVersion: v5.18.0

clusters/cl01tl/platform/authentik/Chart.yaml

@@ -29,7 +29,7 @@ dependencies:
     version: 1.15.0
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/authentik.png
 appVersion: 2025.4.1

clusters/cl01tl/platform/gitea/Chart.yaml

@@ -54,7 +54,7 @@ dependencies:
     version: 1.15.0
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/gitea.png
 appVersion: 1.23.7

clusters/cl01tl/platform/matrix-synapse/Chart.yaml

@@ -63,7 +63,7 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/matrix.png
 appVersion: 1.129.0

clusters/cl01tl/platform/n8n/Chart.yaml

@@ -26,7 +26,7 @@ dependencies:
     repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/n8n.png
 appVersion: 1.93.0

clusters/cl01tl/platform/ollama/Chart.yaml

@@ -23,7 +23,7 @@ dependencies:
     version: 4.0.1
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ollama.png
 appVersion: 0.7.0

clusters/cl01tl/platform/stalwart/Chart.yaml

@@ -32,7 +32,7 @@ dependencies:
     repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/stalwart-mail-server.png
 appVersion: v0.11.8

clusters/cl01tl/services/harbor/Chart.yaml

@@ -26,7 +26,7 @@ dependencies:
     repository: oci://registry-1.docker.io/bitnamicharts
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: http://gitea-http.gitea:3000/api/packages/alexlebens/helm
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/harbor.png
 appVersion: v2.13.0

clusters/cl01tl/services/harbor/templates/external-secret.yaml

@@ -26,41 +26,113 @@ spec:
         key: /cl01tl/harbor/config
         metadataPolicy: None
         property: secretKey
+    - secretKey: CSRF_KEY
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/harbor/core
+        metadataPolicy: None
+        property: CSRF_KEY
     - secretKey: secret
       remoteRef:
         conversionStrategy: Default
         decodingStrategy: None
-        key: /cl01tl/harbor/config
+        key: /cl01tl/harbor/core
         metadataPolicy: None
         property: secret
+    - secretKey: tls.crt
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/harbor/core
+        metadataPolicy: None
+        property: tls.crt
+    - secretKey: tls.key
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/harbor/core
+        metadataPolicy: None
+        property: tls.key
     - secretKey: JOBSERVICE_SECRET
       remoteRef:
         conversionStrategy: Default
         decodingStrategy: None
-        key: /cl01tl/harbor/config
+        key: /cl01tl/harbor/jobservice
         metadataPolicy: None
-        property: jobservice-secret
+        property: JOBSERVICE_SECRET
     - secretKey: REGISTRY_HTTP_SECRET
       remoteRef:
         conversionStrategy: Default
         decodingStrategy: None
-        key: /cl01tl/harbor/config
+        key: /cl01tl/harbor/registry
         metadataPolicy: None
-        property: registry-http-secret
-    - secretKey: REGISTRY_PASSWD
+        property: REGISTRY_HTTP_SECRET
+    - secretKey: REGISTRY_REDIS_PASSWORD
       remoteRef:
         conversionStrategy: Default
         decodingStrategy: None
-        key: /cl01tl/harbor/config
+        key: /cl01tl/harbor/registry
         metadataPolicy: None
-        property: registry-password
+        property: REGISTRY_REDIS_PASSWORD
     - secretKey: REGISTRY_HTPASSWD
       remoteRef:
         conversionStrategy: Default
         decodingStrategy: None
-        key: /cl01tl/harbor/config
+        key: /cl01tl/harbor/registry
         metadataPolicy: None
-        property: registry-ht-password
+        property: REGISTRY_HTPASSWD
+    - secretKey: REGISTRY_CREDENTIAL_PASSWORD
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/harbor/registry
+        metadataPolicy: None
+        property: REGISTRY_CREDENTIAL_PASSWORD
+    - secretKey: REGISTRY_PASSWD
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/harbor/registry
+        metadataPolicy: None
+        property: REGISTRY_CREDENTIAL_PASSWORD
+
+---
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: harbor-nginx-secret
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: harbor-nginx-secret
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  data:
+    - secretKey: ca.crt
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/harbor/nginx
+        metadataPolicy: None
+        property: ca.crt
+    - secretKey: tls.crt
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/harbor/nginx
+        metadataPolicy: None
+        property: tls.crt
+    - secretKey: tls.key
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/harbor/nginx
+        metadataPolicy: None
+        property: tls.key
 
 ---
 apiVersion: external-secrets.io/v1

clusters/cl01tl/services/harbor/values.yaml

@@ -45,17 +45,18 @@ harbor:
     image:
       repository: goharbor/harbor-core
       tag: v2.13.1
-    replicas: 3
-    # existingSecret: harbor-secret
+    replicas: 2
+    existingSecret: harbor-secret
+    secretName: harbor-secret
+    existingXsrfSecret: harbor-secret
   jobservice:
     image:
       repository: goharbor/harbor-jobservice
       tag: v2.13.1
-    replicas: 3
+    replicas: 2
     jobLoggers:
       - stdout
-    # existingSecret: harbor-secret
-    # existingSecretKey: JOBSERVICE_SECRET
+    existingSecret: harbor-secret
   registry:
     registry:
       image:
@@ -65,16 +66,10 @@ harbor:
       image:
         repository: goharbor/harbor-registryctl
         tag: v2.13.1
-    # existingSecret: harbor-secret
-    # existingSecretKey: REGISTRY_HTTP_SECRET
-    # relativeurls: true
-    # credentials:
-    #   existingSecret: harbor-secret
-    # upload_purging:
-    #   enabled: true
-    #   age: 168h
-    #   interval: 24h
-    #   dryrun: false
+    existingSecret: harbor-secret
+    relativeurls: true
+    credentials:
+      existingSecret: harbor-secret
   trivy:
     enabled: true
   database: