Merge pull request 'chore(deps): update ghcr.io/renovatebot/renovate docker tag to v43.176.6' (#6937) from renovate/unified-renovate into main

Reviewed-on: #6932

.gitea/workflows/renovate.yaml

@@ -13,7 +13,7 @@ on:
 jobs:
   renovate:
     runs-on: ubuntu-js
-    container: ghcr.io/renovatebot/renovate:43.170.18@sha256:976d49d41e750ad97e634e50b3c6cfafebce0176778bf80af9e092d228e744a8
+    container: ghcr.io/renovatebot/renovate:43.176.6@sha256:bc8a17f1077955d36e808d098d7494c4c75c70caa7aac8ee77fb2024ad20229e
     steps:
       - name: Checkout
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6

clusters/cl01tl/helm/argocd/Chart.yaml

@@ -17,4 +17,4 @@ dependencies:
     repository: https://argoproj.github.io/argo-helm
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 # renovate: datasource=github-releases depName=argoproj/argo-cd
-appVersion: v3.4.1
+appVersion: v3.4.2

clusters/cl01tl/helm/argocd/values.yaml

@@ -103,7 +103,7 @@ argo-cd:
       enabled: true
       image:
         repository: haproxy
-        tag: 3.3.9-alpine@sha256:9d05c0d68ede409faf4855a8f40d7bfc54833a83bfd02d9344d09b5d27f79155
+        tag: 3.3.10-alpine@sha256:3201152205e9d02557ab3c8ecfcf0d378126eec0a5d1b0950ea22af31ee10bf2
       resources:
         requests:
           cpu: 5m

clusters/cl01tl/helm/authentik/Chart.lock

@@ -1,7 +1,7 @@
 dependencies:
 - name: authentik
   repository: https://charts.goauthentik.io/
-  version: 2026.2.2
+  version: 2026.2.3
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 3.2.2
@@ -11,5 +11,5 @@ dependencies:
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:340c981f2958295a952b124bc2f14f6d655901dd3e32f90dc9cefe1685195cff
+digest: sha256:f690cd3742371fda919b728b2b65071eb301d8bef6bbcf013e5eb3998d1e66b6
-generated: "2026-05-08T22:56:30.727245582Z"
+generated: "2026-05-13T00:09:37.476993903Z"

clusters/cl01tl/helm/authentik/Chart.yaml

@@ -18,7 +18,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: authentik
-    version: 2026.2.2
+    version: 2026.2.3
     repository: https://charts.goauthentik.io/
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts

clusters/cl01tl/helm/cilium/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: cilium
   repository: https://helm.cilium.io/
-  version: 1.18.6
+  version: 1.18.9
-digest: sha256:8ea328ac238524b5b423e6289f5e25d05ef64e6aa19cfd5de238f1d5dd533e9b
+digest: sha256:f7d127bed9b2c9154f25ffdc36ef7477ac8c8b12aeb92c5f4c20be5abd49ec11
-generated: "2026-02-05T12:00:20.15778-06:00"
+generated: "2026-05-10T19:25:36.71023-05:00"

clusters/cl01tl/helm/cilium/Chart.yaml

@@ -14,8 +14,8 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: cilium
-    version: 1.18.6
+    version: 1.18.9
     repository: https://helm.cilium.io/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/cilium.png
 # renovate: datasource=github-releases depName=cilium/cilium
-appVersion: 1.18.6
+appVersion: 1.18.9

clusters/cl01tl/helm/cilium/templates/cilium-load-balancer-ip-pool.yaml

@@ -10,18 +10,3 @@ spec:
   blocks:
     - start: "10.232.1.21"
       stop: "10.232.1.23"
-
----
-apiVersion: cilium.io/v2
-kind: CiliumLoadBalancerIPPool
-metadata:
-  name: bgp-ip-pool
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: bgp-ip-pool
-    {{- include "custom.labels" . | nindent 4 }}
-spec:
-  blocks:
-    - start: "10.232.2.100"
-      stop: "10.232.2.200"
-  disabled: true

clusters/cl01tl/helm/cilium/values.yaml

@@ -25,20 +25,14 @@ cilium:
         - NET_ADMIN
         - SYS_ADMIN
         - SYS_RESOURCE
-  bgpControlPlane:
-    enabled: false
   bpf:
     hostLegacyRouting: true
+    masquerade: false
   devices: end0 enp6s0
   ciliumEndpointSlice:
     enabled: true
   gatewayAPI:
-    enabled: true
+    enabled: false
-    enableAppProtocol: true
-    enableAlpn: true
-    secretsNamespace:
-      create: false
-      name: kube-system
   socketLB:
     enabled: true
     hostNamespaceOnly: true

clusters/cl01tl/helm/cloudnative-pg/Chart.lock

@@ -1,7 +1,7 @@
 dependencies:
 - name: cloudnative-pg
   repository: https://cloudnative-pg.io/charts/
-  version: 0.28.0
+  version: 0.28.2
 - name: plugin-barman-cloud
   repository: https://cloudnative-pg.io/charts/
   version: 0.6.0
@@ -11,5 +11,5 @@ dependencies:
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.11.3
-digest: sha256:3f9cc2b51d4f30e63162b06d886415b78e37945946f8e6db642b1e94f9a917a0
+digest: sha256:a08719a82de76d62cddfec163dbc9feecfbea83ab406f3750d25d4deaf586f0c
-generated: "2026-05-09T02:54:37.702578041Z"
+generated: "2026-05-13T00:10:14.309341878Z"

clusters/cl01tl/helm/cloudnative-pg/Chart.yaml

@@ -18,7 +18,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: cloudnative-pg
-    version: 0.28.0
+    version: 0.28.2
     repository: https://cloudnative-pg.io/charts/
   - name: plugin-barman-cloud
     version: 0.6.0

clusters/cl01tl/helm/dawarich/templates/external-secret.yaml

@@ -50,3 +50,26 @@ spec:
       remoteRef:
         key: /cl01tl/authentik/oidc/dawarich
         property: secret
+
+---
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: dawarich-metrics-credentials
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: dawarich-metrics-credentials
+    {{- include "custom.labels" . | nindent 4 }}
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: openbao
+  data:
+    - secretKey: user
+      remoteRef:
+        key: /cl01tl/dawarich/metrics
+        property: user
+    - secretKey: password
+      remoteRef:
+        key: /cl01tl/dawarich/metrics
+        property: password

clusters/cl01tl/helm/dawarich/values.yaml

@@ -78,6 +78,16 @@ dawarich:
               value: 0.0.0.0
             - name: PROMETHEUS_EXPORTER_PORT
               value: 9394
+            - name: METRICS_USERNAME
+              valueFrom:
+                secretKeyRef:
+                  name: dawarich-metrics-credentials
+                  key: user
+            - name: METRICS_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: dawarich-metrics-credentials
+                  key: password
             - name: SECRET_KEY_BASE
               valueFrom:
                 secretKeyRef:
@@ -193,6 +203,16 @@ dawarich:
               value: 0.0.0.0
             - name: PROMETHEUS_EXPORTER_PORT
               value: 9394
+            - name: METRICS_USERNAME
+              valueFrom:
+                secretKeyRef:
+                  name: dawarich-metrics-credentials
+                  key: user
+            - name: METRICS_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: dawarich-metrics-credentials
+                  key: password
             - name: SECRET_KEY_BASE
               valueFrom:
                 secretKeyRef:
@@ -256,6 +276,13 @@ dawarich:
           interval: 30s
           scrapeTimeout: 15s
           path: /metrics
+          basicAuth:
+            password:
+              name: dawarich-metrics-credentials
+              key: password
+            username:
+              name: dawarich-metrics-credentials
+              key: user
   route:
     main:
       kind: HTTPRoute

clusters/cl01tl/helm/element-web/values.yaml

@@ -2,7 +2,7 @@ element-web:
   replicaCount: 1
   image:
     repository: ghcr.io/element-hq/element-web
-    tag: v1.12.17@sha256:f4a81a24d49a9c5b97e02e77a3013ec799873e500e69041078a28be98e4f1280
+    tag: v1.12.18@sha256:c21772a1eabeededa19be591343f548995e458ec34ba8f27425ae923c10af82e
   defaultServer:
     url: https://matrix.alexlebens.dev
     name: alexlebens.dev

clusters/cl01tl/helm/eraser/values.yaml

@@ -50,7 +50,7 @@ eraser-metrics:
         main:
           image:
             repository: ghcr.io/open-telemetry/opentelemetry-collector-releases/opentelemetry-collector
-            tag: 0.151.0@sha256:49a12827519134ed72881a64247ea43fbf4bdac50cfa41ceb495fc1c684451e2
+            tag: 0.152.0@sha256:f358f8028c6eb44f765444de1c8899b4f97d7ba54be5264a8753f2c182bc5757
           command:
             - /otelcol
             - --config=/conf/otel-collector-config.yaml

clusters/cl01tl/helm/freshrss/Chart.yaml

@@ -33,4 +33,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/freshrss.png
 # renovate: datasource=github-releases depName=FreshRSS/FreshRSS
-appVersion: 1.28.1
+appVersion: 1.29.0

clusters/cl01tl/helm/freshrss/values.yaml

@@ -8,7 +8,7 @@ freshrss:
         main:
           image:
             repository: freshrss/freshrss
-            tag: 1.28.1@sha256:9100f649f5c946f589f54cdb9be7a65996528f48f691ef90eb262a0e06e5a522
+            tag: 1.29.0@sha256:cca8988d05cd449e1c6c69405971b1e6fc2c2116ceeb45c9fa3fc33837997a75
           env:
             - name: PGID
               value: "568"

clusters/cl01tl/helm/generic-device-plugin/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: generic-device-plugin
   repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-  version: 0.21.2
+  version: 0.21.3
-digest: sha256:711b3c3b3433e0358609b98a2fedad17fea5ecb34d07c18a61393756b03f2cb5
+digest: sha256:2122d1fdfa7e596323caae612325eebbdb0337f6d2a290c3a0ce8f4c3fbbbbd5
-generated: "2026-05-08T22:23:52.971515743Z"
+generated: "2026-05-13T00:11:06.857277817Z"

clusters/cl01tl/helm/generic-device-plugin/Chart.yaml

@@ -14,6 +14,6 @@ maintainers:
 dependencies:
   - name: generic-device-plugin
     repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-    version: 0.21.2
+    version: 0.21.3
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 appVersion: 1.0.0

clusters/cl01tl/helm/homepage/Chart.yaml

@@ -19,4 +19,4 @@ dependencies:
     version: 5.0.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/homepage.png
 # renovate: datasource=github-releases depName=gethomepage/homepage
-appVersion: v1.13.0
+appVersion: v1.13.1

clusters/cl01tl/helm/homepage/values.yaml

@@ -14,7 +14,7 @@ homepage:
         main:
           image:
             repository: ghcr.io/gethomepage/homepage
-            tag: v1.13.0@sha256:690ac1f79e33000c176c2a28229ed00b49b44781e8a63f280a8ece22c161f099
+            tag: v1.13.1@sha256:d8d784e5090111b6e4c56dfd90e272d2953a2094e87349f647165df0fa6c4401
           env:
             - name: HOMEPAGE_ALLOWED_HOSTS
               value: home.alexlebens.net
@@ -268,10 +268,10 @@ homepage:
                   siteMonitor: http://ollama-web.ollama:80
                   statusStyle: dot
               - AI Image:
-                  icon: https://user-images.githubusercontent.com/36368048/196280761-1535f413-a91e-4b6a-af6a-b890f8ae204c.png
+                  icon: sh-invoke-ai.webp
-                  description: Stable Diffusion
+                  description: Invoke AI
-                  href: https://stable-diffusion-pd05wd.boreal-beaufort.ts.net
+                  href: https://invoke-ai-pd05wd.boreal-beaufort.ts.net/app
-                  siteMonitor: https://stable-diffusion-pd05wd.boreal-beaufort.ts.net
+                  siteMonitor: https://invoke-ai-pd05wd.boreal-beaufort.ts.net
                   statusStyle: dot
               - Search:
                   icon: sh-searxng.webp

clusters/cl01tl/helm/jellyfin/values.yaml

@@ -40,7 +40,7 @@ jellyfin:
         exporter:
           image:
             repository: rebelcore/jellyfin-exporter
-            tag: v1.5.0@sha256:37e6d389654180ad9e1661210a48fee71a6dc355a160670235a00329da0dbf80
+            tag: v1.5.1@sha256:a42181c7faf593ce11761916f669bc5b3598e43d2c5b8bd4381934f2df83bbd7
           args:
             - '--jellyfin.address=http://127.0.0.1:8096'
             - '--jellyfin.token=$(TOKEN)'

clusters/cl01tl/helm/karakeep/values.yaml

@@ -85,9 +85,9 @@ karakeep:
             - name: OLLAMA_KEEP_ALIVE
               value: 5m
             - name: INFERENCE_TEXT_MODEL
-              value: gemma3:4b
+              value: gemma4:e4b
             - name: INFERENCE_IMAGE_MODEL
-              value: granite3.2-vision:2b
+              value: gemma4:e4b
             - name: EMBEDDING_TEXT_MODEL
               value: mxbai-embed-large
             - name: INFERENCE_JOB_TIMEOUT_SEC

clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock

@@ -1,15 +1,15 @@
 dependencies:
 - name: kube-prometheus-stack
   repository: oci://ghcr.io/prometheus-community/charts
-  version: 84.5.0
+  version: 85.0.2
 - name: prometheus-operator-crds
   repository: oci://ghcr.io/prometheus-community/charts
-  version: 28.0.1
+  version: 29.0.0
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
   version: 5.0.0
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:393093164e2cc0e94111c86181bcbfb4f605f9eeeb9a1fd1960ba5fc764902ee
+digest: sha256:8ac7065eceeff40ab6da60d8abd939031cc3e4677c0cfa353cd11a3e1bac25b6
-generated: "2026-05-08T02:31:55.970087487Z"
+generated: "2026-05-12T18:05:16.45686921Z"

clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml

@@ -20,10 +20,10 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: kube-prometheus-stack
-    version: 84.5.0
+    version: 85.0.2
     repository: oci://ghcr.io/prometheus-community/charts
   - name: prometheus-operator-crds
-    version: 28.0.1
+    version: 29.0.0
     repository: oci://ghcr.io/prometheus-community/charts
   - name: app-template
     alias: ntfy-alertmanager

clusters/cl01tl/helm/loki/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: loki
   repository: oci://ghcr.io/grafana-community/helm-charts
-  version: 13.6.2
+  version: 13.7.0
 - name: alloy
   repository: https://grafana.github.io/helm-charts
   version: 1.8.1
-digest: sha256:a4e74753a5cc3122473b8bcc984ae5bd7d0d2c05da1e98c8c1d5bb96abb1ada1
+digest: sha256:c49b85512c241272342cc2629d2ca612c89028db10a16f4ac84608e41226c282
-generated: "2026-05-09T01:39:35.695293602Z"
+generated: "2026-05-13T02:04:04.472006106Z"

clusters/cl01tl/helm/loki/Chart.yaml

@@ -15,7 +15,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: loki
-    version: 13.6.2
+    version: 13.7.0
     repository: oci://ghcr.io/grafana-community/helm-charts
   - name: alloy
     version: 1.8.1

clusters/cl01tl/helm/medialyze/Chart.yaml

@@ -24,4 +24,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://raw.githubusercontent.com/frederikemmer/MediaLyze/d8f69c0628bac7c047b90f91a66341648029c273/frontend/public/favicon.svg
 # renovate: datasource=github-releases depName=frederikemmer/MediaLyze
-appVersion: 0.10.4
+appVersion: 0.11.0

clusters/cl01tl/helm/medialyze/values.yaml

@@ -12,7 +12,7 @@ medialyze:
         main:
           image:
             repository: ghcr.io/frederikemmer/medialyze
-            tag: 0.10.4@sha256:d5d7b670a8d46a8093f897e2675f93f54c5229e003ca8a136a9fed67702d1c92
+            tag: 0.11.0@sha256:9c900b398ddab3e96729738186c7c50690567b38a119851570db59d606176043
           env:
             - name: HOST_PORT
               value: 8080

clusters/cl01tl/helm/music-grabber/Chart.yaml

@@ -24,4 +24,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/music-grabber.png
 # renovate: datasource=docker depName=g33kphr33k/musicgrabber
-appVersion: 2.8.6
+appVersion: 2.8.8

clusters/cl01tl/helm/music-grabber/values.yaml

@@ -12,7 +12,7 @@ music-grabber:
         main:
           image:
             repository: g33kphr33k/musicgrabber
-            tag: 2.8.6@sha256:b35f49f56994e8fb4a7e25844e869d6c2e2e3d7419ecc43bfe70478d051c8301
+            tag: 2.8.8@sha256:72dd1056fab07c873276c854bea08b8ef07bb54b8fbe0413047d8701d2abc146
           env:
             - name: MUSIC_DIR
               value: /mnt/store/Music Grabber/

clusters/cl01tl/helm/ollama/values.yaml

@@ -21,7 +21,7 @@ ollama:
         main:
           image:
             repository: ollama/ollama
-            tag: 0.23.2@sha256:d00473cb58f0082c07cd6ed0d326a8a86f443ab69c51f8fc2b1a41687d45c661
+            tag: 0.23.3@sha256:9b519ed11930ba9a3c6123f8546b8f553e247ea6ce58739a4878f913996e7a67
           env:
             - name: OLLAMA_KEEP_ALIVE
               value: 24h
@@ -55,7 +55,7 @@ ollama:
         main:
           image:
             repository: ollama/ollama
-            tag: 0.23.2@sha256:d00473cb58f0082c07cd6ed0d326a8a86f443ab69c51f8fc2b1a41687d45c661
+            tag: 0.23.3@sha256:9b519ed11930ba9a3c6123f8546b8f553e247ea6ce58739a4878f913996e7a67
           env:
             - name: OLLAMA_KEEP_ALIVE
               value: 24h
@@ -89,7 +89,7 @@ ollama:
         main:
           image:
             repository: ollama/ollama
-            tag: 0.23.2@sha256:d00473cb58f0082c07cd6ed0d326a8a86f443ab69c51f8fc2b1a41687d45c661
+            tag: 0.23.3@sha256:9b519ed11930ba9a3c6123f8546b8f553e247ea6ce58739a4878f913996e7a67
           env:
             - name: OLLAMA_KEEP_ALIVE
               value: 24h
@@ -110,7 +110,7 @@ ollama:
         main:
           image:
             repository: ghcr.io/open-webui/open-webui
-            tag: v0.9.4@sha256:172e1fe0e89af2a07f42f2b1d943f30c8ddd7b9c2e182f3678b4790cdb83abea
+            tag: v0.9.5@sha256:e045bde3b004cc7f8c319412345eb56c87ea6ac57031534a31ca37ad5424beb3
           env:
             - name: ENV
               value: prod

clusters/cl01tl/helm/plex/Chart.yaml

@@ -20,4 +20,4 @@ dependencies:
     version: 5.0.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/plex.png
 # renovate: datasource=github-releases depName=linuxserver/docker-plex
-appVersion: 1.43.1.10611-1e34174b1-ls304
+appVersion: 1.43.1.10611-1e34174b1-ls305

clusters/cl01tl/helm/plex/values.yaml

@@ -22,7 +22,7 @@ plex:
         main:
           image:
             repository: ghcr.io/linuxserver/plex
-            tag: 1.43.1.10611-1e34174b1-ls304@sha256:c5e295f023b4e92b3ca467626dbc2ba8a9b5e53934810df74d99c14e38ae1857
+            tag: 1.43.1.10611-1e34174b1-ls305@sha256:8d937dd32659bb1defa02d713a3b1cc99919f12aa17a072d588e770a6f1d7d26
           env:
             - name: TZ
               value: America/Chicago

clusters/cl01tl/helm/radarr-4k/Chart.yaml

@@ -33,4 +33,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/radarr-4k.png
 # renovate: datasource=github-releases depName=linuxserver/docker-radarr
-appVersion: 6.1.1.10360-ls301
+appVersion: 6.1.1.10360-ls302

clusters/cl01tl/helm/radarr-4k/values.yaml

@@ -14,7 +14,7 @@ radarr-4k:
         main:
           image:
             repository: ghcr.io/linuxserver/radarr
-            tag: 6.1.1.10360-ls301@sha256:659e5f20500948b1491f31dd85c6f99a43508ce3e46595793e1e15aa955bf6d7
+            tag: 6.1.1.10360-ls302@sha256:15417a594ebda4c660a9fa9748e7199d33e2d17b31bbc5ad7ba2e86f0b414763
           env:
             - name: TZ
               value: America/Chicago

clusters/cl01tl/helm/radarr-anime/Chart.yaml

@@ -33,4 +33,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/radarr-anime.png
 # renovate: datasource=github-releases depName=linuxserver/docker-radarr
-appVersion: 6.1.1.10360-ls301
+appVersion: 6.1.1.10360-ls302

clusters/cl01tl/helm/radarr-anime/values.yaml

@@ -14,7 +14,7 @@ radarr-anime:
         main:
           image:
             repository: ghcr.io/linuxserver/radarr
-            tag: 6.1.1.10360-ls301@sha256:659e5f20500948b1491f31dd85c6f99a43508ce3e46595793e1e15aa955bf6d7
+            tag: 6.1.1.10360-ls302@sha256:15417a594ebda4c660a9fa9748e7199d33e2d17b31bbc5ad7ba2e86f0b414763
           env:
             - name: TZ
               value: America/Chicago

clusters/cl01tl/helm/radarr-standup/Chart.yaml

@@ -33,4 +33,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/radarr.png
 # renovate: datasource=github-releases depName=linuxserver/docker-radarr
-appVersion: 6.1.1.10360-ls301
+appVersion: 6.1.1.10360-ls302

clusters/cl01tl/helm/radarr-standup/values.yaml

@@ -14,7 +14,7 @@ radarr-standup:
         main:
           image:
             repository: ghcr.io/linuxserver/radarr
-            tag: 6.1.1.10360-ls301@sha256:659e5f20500948b1491f31dd85c6f99a43508ce3e46595793e1e15aa955bf6d7
+            tag: 6.1.1.10360-ls302@sha256:15417a594ebda4c660a9fa9748e7199d33e2d17b31bbc5ad7ba2e86f0b414763
           env:
             - name: TZ
               value: America/Chicago

clusters/cl01tl/helm/radarr/Chart.yaml

@@ -33,4 +33,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/radarr.png
 # renovate: datasource=github-releases depName=linuxserver/docker-radarr
-appVersion: 6.1.1.10360-ls301
+appVersion: 6.1.1.10360-ls302

clusters/cl01tl/helm/radarr/values.yaml

@@ -14,7 +14,7 @@ radarr:
         main:
           image:
             repository: ghcr.io/linuxserver/radarr
-            tag: 6.1.1.10360-ls301@sha256:659e5f20500948b1491f31dd85c6f99a43508ce3e46595793e1e15aa955bf6d7
+            tag: 6.1.1.10360-ls302@sha256:15417a594ebda4c660a9fa9748e7199d33e2d17b31bbc5ad7ba2e86f0b414763
           env:
             - name: TZ
               value: America/Chicago

clusters/cl01tl/helm/searxng/values.yaml

@@ -10,7 +10,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:b5d4892daf19736acdefc34a67bb06dd702638beb282e993aeb612e0953c2d54
+            tag: latest@sha256:a7f9188cc7fa8b6b037e0d85709c0dced8f05d0eba84145eb7fe7027a4c00850
           env:
             - name: SEARXNG_BASE_URL
               value: http://searxng-api.searxng:8080
@@ -38,7 +38,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:b5d4892daf19736acdefc34a67bb06dd702638beb282e993aeb612e0953c2d54
+            tag: latest@sha256:a7f9188cc7fa8b6b037e0d85709c0dced8f05d0eba84145eb7fe7027a4c00850
           env:
             - name: SEARXNG_BASE_URL
               value: https://searxng.alexlebens.net/

clusters/cl01tl/helm/shelfmark/Chart.yaml

@@ -24,4 +24,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/shelfmark.png
 # renovate: datasource=github-releases depName=calibrain/shelfmark
-appVersion: v1.2.3
+appVersion: v1.3.0

clusters/cl01tl/helm/shelfmark/values.yaml

@@ -12,7 +12,7 @@ shelfmark:
         main:
           image:
             repository: ghcr.io/calibrain/shelfmark
-            tag: v1.2.3@sha256:bd6cb4bfa14a917e76945c22ed2c376d64cf7fdb74632435db713d42ca597b20
+            tag: v1.3.0@sha256:e891eda444b261da48a839db652034bce4e20ac09c167f14adf939dedf96b572
           env:
             - name: FLASK_PORT
               value: 8084

clusters/cl01tl/helm/site-documentation/values.yaml

@@ -10,7 +10,7 @@ site-documentation:
         main:
           image:
             repository: harbor.alexlebens.net/images/site-documentation
-            tag: 0.29.0@sha256:5b1390542baa3367f7646dcec79b96ce2341f3fd16314017c44046e792121bfa
+            tag: 0.31.0@sha256:9e819b8b2d18437080fed5bbe9a2b42e0abdd457dcdd0e894ff98a728e056062
           resources:
             requests:
               cpu: 10m

clusters/cl01tl/helm/site-profile/values.yaml

@@ -10,7 +10,7 @@ site-profile:
         main:
           image:
             repository: harbor.alexlebens.net/images/site-profile
-            tag: 3.20.1@sha256:b93c69d662380b9aea223198dad59de92fd1106b449920aa9ea3e6653f6cf814
+            tag: 3.20.2@sha256:38dc06984b895fa5efe4ab913990c39c7b603a8daa0bcb06b30d96255be98cc3
           resources:
             requests:
               cpu: 10m

clusters/cl01tl/helm/stack/templates/application.yaml

@@ -68,7 +68,7 @@ spec:
         - .spec.endpoints[]?.relabelings[]?.action
   syncPolicy:
     automated:
-      enabled: true
+      enabled: false
       prune: true
       selfHeal: false
     retry:

clusters/cl01tl/helm/tailscale-operator/templates/service.yaml

@@ -116,3 +116,18 @@ metadata:
 spec:
   externalName: placeholder
   type: ExternalName
+
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: invoke-ai-pd05wd
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: invoke-ai-pd05wd
+    {{- include "custom.labels" . | nindent 4 }}
+  annotations:
+    tailscale.com/tailnet-fqdn: invoke-ai-pd05wd.boreal-beaufort.ts.net
+spec:
+  externalName: placeholder
+  type: ExternalName

clusters/cl01tl/helm/talos/values.yaml

@@ -401,7 +401,7 @@ etcd-defrag:
         main:
           image:
             repository: ghcr.io/siderolabs/talosctl
-            tag: v1.13.0@sha256:cf5be4c584572787eda0f5818404d2380f041b1022ce85454b25d4e01334fba6
+            tag: v1.13.2@sha256:6382e6f6f8b08ab7c5cc9f77446cfd79975fe0055c0a6d73455a9dc6a6c4b98d
           args:
             - etcd
             - defrag
@@ -430,7 +430,7 @@ etcd-defrag:
         main:
           image:
             repository: ghcr.io/siderolabs/talosctl
-            tag: v1.13.0@sha256:cf5be4c584572787eda0f5818404d2380f041b1022ce85454b25d4e01334fba6
+            tag: v1.13.2@sha256:6382e6f6f8b08ab7c5cc9f77446cfd79975fe0055c0a6d73455a9dc6a6c4b98d
           args:
             - etcd
             - defrag
@@ -459,7 +459,7 @@ etcd-defrag:
         main:
           image:
             repository: ghcr.io/siderolabs/talosctl
-            tag: v1.13.0@sha256:cf5be4c584572787eda0f5818404d2380f041b1022ce85454b25d4e01334fba6
+            tag: v1.13.2@sha256:6382e6f6f8b08ab7c5cc9f77446cfd79975fe0055c0a6d73455a9dc6a6c4b98d
           args:
             - etcd
             - defrag

clusters/cl01tl/helm/tdarr/values.yaml

@@ -12,7 +12,7 @@ tdarr:
         main:
           image:
             repository: ghcr.io/haveagitgat/tdarr
-            tag: 2.72.01@sha256:fd9abc79b06a14e4ed0940aade7a92afe734d3188104fa085d5cde3eaf778b2f
+            tag: 2.73.01@sha256:8130752e768bb034167065d6185ba291623486231f708f441452e24416c929b8
           env:
             - name: TZ
               value: America/Chicago
@@ -68,7 +68,7 @@ tdarr:
         main:
           image:
             repository: ghcr.io/haveagitgat/tdarr_node
-            tag: 2.72.01@sha256:3c1ce8bd74c5fe0dc8d345bdd373eb68b9138fbb34478d126646bb04f1522ce5
+            tag: 2.73.01@sha256:8d7fccd5d31a4523b13018b7c4a949c2656158e0abece7a3b04f489b4690af38
           env:
             - name: TZ
               value: America/Chicago

clusters/cl01tl/helm/traefik/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: traefik
   repository: https://traefik.github.io/charts
-  version: 40.0.0
+  version: 40.1.0
 - name: traefik-crds
   repository: https://traefik.github.io/charts
   version: 1.18.0
-digest: sha256:d887af2faf8b07488d6c4c3731337768492292d99edf69040498e24efe5b0a65
+digest: sha256:d4201b2f39c0e0f091b52c31a479642f1a7db52459b5e8d775df402ab0d301f0
-generated: "2026-05-06T23:28:40.081576086Z"
+generated: "2026-05-12T08:08:33.996684287Z"

clusters/cl01tl/helm/traefik/Chart.yaml

@@ -14,11 +14,11 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: traefik
-    version: 40.0.0
+    version: 40.1.0
     repository: https://traefik.github.io/charts
   - name: traefik-crds
     version: 1.18.0
     repository: https://traefik.github.io/charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/traefik.png
 # renovate: datasource=github-releases depName=traefik/traefik
-appVersion: v3.7.0
+appVersion: v3.7.1

clusters/cl01tl/helm/traefik/values.yaml

@@ -2,7 +2,7 @@ traefik:
   image:
     registry: docker.io
     repository: traefik
-    tag: v3.7.0@sha256:eb328e2c806c53aafbbace6c451fa54d268961261a85452fcf0fb752a30c17be
+    tag: v3.7.1@sha256:09d3ef496d61fd830905fce5035c8a9505c2d3849632cffe13e5a43b34526f90
   deployment:
     kind: DaemonSet
   ingressClass:

clusters/cl01tl/helm/tubearchivist/templates/elasticsearch.yaml

@@ -8,7 +8,7 @@ metadata:
     {{- include "custom.labels" . | nindent 4 }}
 spec:
   # renovate: datasource=docker depName=elasticsearch
-  version: 9.4.0
+  version: 9.4.1
   auth:
     fileRealm:
       - secretName: tubearchivist-elasticsearch-config

clusters/cl01tl/helm/unpoller/Chart.yaml

@@ -20,4 +20,4 @@ dependencies:
     version: 5.0.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/ubiquiti-unifi.png
 # renovate: datasource=github-releases depName=unpoller/unpoller
-appVersion: v3.1.2
+appVersion: v3.2.0

clusters/cl01tl/helm/unpoller/values.yaml

@@ -8,7 +8,7 @@ unpoller:
         main:
           image:
             repository: ghcr.io/unpoller/unpoller
-            tag: v3.1.2@sha256:d63bd939ea46cbf76f3a5d21c668426202a389ebaa89e200c4906712f9b8dd22
+            tag: v3.2.0@sha256:bf7bdcc59fcdaa4699687007aa3ec24ddb3c9d9521f392d8c7aa2bea1bdb781a
           env:
             - name: UP_UNIFI_CONTROLLER_0_SAVE_ALARMS
               value: 'true'

clusters/cl01tl/helm/whodb/values.yaml

@@ -7,7 +7,7 @@ whodb:
         main:
           image:
             repository: clidey/whodb
-            tag: 0.107.0@sha256:20fb865bd0972bf56600c9e16715a3b5f30fef77defc19d74efcf72218d5f567
+            tag: 0.109.0@sha256:ccb400cb7d0e287d482980dd9df59e36ada7a94cce692af2120d29ca295f3dc4
           env:
             - name: WHODB_OLLAMA_HOST
               value: ollama-server-2.ollama

hosts/pd05wd/invoke-ai/compose.yaml

@@ -1,6 +1,6 @@
 services:
     tailscale-invoke-ai:
-        image: ghcr.io/tailscale/tailscale:v1.96.5
+        image: ghcr.io/tailscale/tailscale:v1.96.5@sha256:dbeff02d2337344b351afac203427218c4d0a06c43fc10a865184063498472a6
         container_name: tailscale-invoke-ai
         cap_add:
             - net_admin
@@ -21,7 +21,7 @@ services:
             - /dev/net/tun:/dev/net/tun
 
     invoke-ai:
-        image: ghcr.io/invoke-ai/invokeai:main-cuda
+        image: ghcr.io/invoke-ai/invokeai:main-cuda@sha256:6d4c2edc3013ce7001008707722620bc7306325c4de59620ac470aa63e80448b
         container_name: stable-diffusion
         environment:
             - INVOKEAI_ROOT=~/invokeai

hosts/pd05wd/ollama/compose.yaml

@@ -1,7 +1,7 @@
 ---
 services:
     tailscale-ollama:
-        image: ghcr.io/tailscale/tailscale:v1.96.5
+        image: ghcr.io/tailscale/tailscale:v1.96.5@sha256:dbeff02d2337344b351afac203427218c4d0a06c43fc10a865184063498472a6
         container_name: tailscale-ollama
         cap_add:
             - net_admin
@@ -20,7 +20,7 @@ services:
             - /dev/net/tun:/dev/net/tun
 
     ollama:
-        image: ollama/ollama:0.23.2
+        image: ollama/ollama:0.23.3@sha256:9b519ed11930ba9a3c6123f8546b8f553e247ea6ce58739a4878f913996e7a67
         container_name: ollama
         environment:
             - OLLAMA_KEEP_ALIVE=24h

hosts/pd05wd/stable-diffusion/compose.yaml

@@ -1,7 +1,7 @@
 ---
 services:
     tailscale-stable-diffusion:
-        image: ghcr.io/tailscale/tailscale:v1.96.5
+        image: ghcr.io/tailscale/tailscale:v1.96.5@sha256:dbeff02d2337344b351afac203427218c4d0a06c43fc10a865184063498472a6
         container_name: tailscale-stable-diffusion
         cap_add:
             - net_admin
@@ -22,7 +22,7 @@ services:
             - /dev/net/tun:/dev/net/tun
 
     stable-diffusion:
-        image: ghcr.io/ai-dock/stable-diffusion-webui:latest-cuda
+        image: ghcr.io/ai-dock/stable-diffusion-webui:latest-cuda@sha256:bc4b2b12ac8d030cc5daf25e2c32517709b7c15f59a32685c4c1a14a9606eb42
         container_name: stable-diffusion
         environment:
             - WEBUI_ARGS="--api --listen"

hosts/ps08rp/traefik/compose.yaml

@@ -1,7 +1,7 @@
 ---
 services:
     traefik:
-        image: ghcr.io/traefik/traefik:v3.7.0@sha256:eb328e2c806c53aafbbace6c451fa54d268961261a85452fcf0fb752a30c17be
+        image: ghcr.io/traefik/traefik:v3.7.1@sha256:09d3ef496d61fd830905fce5035c8a9505c2d3849632cffe13e5a43b34526f90
         container_name: traefik
         command:
             - "--global.checkNewVersion=false"

hosts/ps09rp/traefik/compose.yaml

@@ -1,7 +1,7 @@
 ---
 services:
     traefik:
-        image: ghcr.io/traefik/traefik:v3.7.0@sha256:eb328e2c806c53aafbbace6c451fa54d268961261a85452fcf0fb752a30c17be
+        image: ghcr.io/traefik/traefik:v3.7.1@sha256:09d3ef496d61fd830905fce5035c8a9505c2d3849632cffe13e5a43b34526f90
         container_name: traefik
         command:
             - "--global.checkNewVersion=false"

hosts/ps10rp/homepage/compose.yaml

@@ -32,7 +32,7 @@ services:
             - /var/run/docker.sock:/var/run/docker.sock:ro
 
     homepage:
-        image: ghcr.io/gethomepage/homepage:v1.13.0@sha256:690ac1f79e33000c176c2a28229ed00b49b44781e8a63f280a8ece22c161f099
+        image: ghcr.io/gethomepage/homepage:v1.13.1@sha256:d8d784e5090111b6e4c56dfd90e272d2953a2094e87349f647165df0fa6c4401
         container_name: homepage
         labels:
             traefik.enable: true

hosts/ps10rp/traefik/compose.yaml

@@ -20,7 +20,7 @@ services:
             - /dev/net/tun:/dev/net/tun
 
     traefik:
-        image: ghcr.io/traefik/traefik:v3.7.0@sha256:eb328e2c806c53aafbbace6c451fa54d268961261a85452fcf0fb752a30c17be
+        image: ghcr.io/traefik/traefik:v3.7.1@sha256:09d3ef496d61fd830905fce5035c8a9505c2d3849632cffe13e5a43b34526f90
         container_name: traefik
         command:
             - "--global.checkNewVersion=false"