chore(deps): update gitea to v1.26.1

Reviewed-on: #6862

.gitea/workflows/renovate.yaml

@@ -13,7 +13,7 @@ on:
 jobs:
   renovate:
     runs-on: ubuntu-js
-    container: ghcr.io/renovatebot/renovate:43.170.18@sha256:976d49d41e750ad97e634e50b3c6cfafebce0176778bf80af9e092d228e744a8
+    container: ghcr.io/renovatebot/renovate:43.176.3@sha256:3c2c772473187db852ab6b0359558cb3c464e8dfccfda832844d9d00f99361bd
     steps:
       - name: Checkout
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6

clusters/cl01tl/helm/cilium/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: cilium
   repository: https://helm.cilium.io/
-  version: 1.18.6
-digest: sha256:8ea328ac238524b5b423e6289f5e25d05ef64e6aa19cfd5de238f1d5dd533e9b
-generated: "2026-02-05T12:00:20.15778-06:00"
+  version: 1.18.9
+digest: sha256:f7d127bed9b2c9154f25ffdc36ef7477ac8c8b12aeb92c5f4c20be5abd49ec11
+generated: "2026-05-10T19:25:36.71023-05:00"

clusters/cl01tl/helm/cilium/Chart.yaml

@@ -14,8 +14,8 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: cilium
-    version: 1.18.6
+    version: 1.18.9
     repository: https://helm.cilium.io/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/cilium.png
 # renovate: datasource=github-releases depName=cilium/cilium
-appVersion: 1.18.6
+appVersion: 1.18.9

clusters/cl01tl/helm/cilium/templates/cilium-load-balancer-ip-pool.yaml

@@ -10,18 +10,3 @@ spec:
   blocks:
     - start: "10.232.1.21"
       stop: "10.232.1.23"
-
----
-apiVersion: cilium.io/v2
-kind: CiliumLoadBalancerIPPool
-metadata:
-  name: bgp-ip-pool
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: bgp-ip-pool
-    {{- include "custom.labels" . | nindent 4 }}
-spec:
-  blocks:
-    - start: "10.232.2.100"
-      stop: "10.232.2.200"
-  disabled: true

clusters/cl01tl/helm/cilium/values.yaml

@@ -25,20 +25,14 @@ cilium:
         - NET_ADMIN
         - SYS_ADMIN
         - SYS_RESOURCE
-  bgpControlPlane:
-    enabled: false
   bpf:
     hostLegacyRouting: true
+    masquerade: false
   devices: end0 enp6s0
   ciliumEndpointSlice:
     enabled: true
   gatewayAPI:
-    enabled: true
-    enableAppProtocol: true
-    enableAlpn: true
-    secretsNamespace:
-      create: false
-      name: kube-system
+    enabled: false
   socketLB:
     enabled: true
     hostNamespaceOnly: true

clusters/cl01tl/helm/dawarich/templates/external-secret.yaml

@@ -50,3 +50,26 @@ spec:
       remoteRef:
         key: /cl01tl/authentik/oidc/dawarich
         property: secret
+
+---
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: dawarich-metrics-credentials
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: dawarich-metrics-credentials
+    {{- include "custom.labels" . | nindent 4 }}
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: openbao
+  data:
+    - secretKey: user
+      remoteRef:
+        key: /cl01tl/dawarich/metrics
+        property: user
+    - secretKey: password
+      remoteRef:
+        key: /cl01tl/dawarich/metrics
+        property: password

clusters/cl01tl/helm/dawarich/values.yaml

@@ -78,6 +78,16 @@ dawarich:
               value: 0.0.0.0
             - name: PROMETHEUS_EXPORTER_PORT
               value: 9394
+            - name: METRICS_USERNAME
+              valueFrom:
+                secretKeyRef:
+                  name: dawarich-metrics-credentials
+                  key: user
+            - name: METRICS_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: dawarich-metrics-credentials
+                  key: password
             - name: SECRET_KEY_BASE
               valueFrom:
                 secretKeyRef:
@@ -193,6 +203,16 @@ dawarich:
               value: 0.0.0.0
             - name: PROMETHEUS_EXPORTER_PORT
               value: 9394
+            - name: METRICS_USERNAME
+              valueFrom:
+                secretKeyRef:
+                  name: dawarich-metrics-credentials
+                  key: user
+            - name: METRICS_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: dawarich-metrics-credentials
+                  key: password
             - name: SECRET_KEY_BASE
               valueFrom:
                 secretKeyRef:
@@ -256,6 +276,13 @@ dawarich:
           interval: 30s
           scrapeTimeout: 15s
           path: /metrics
+          basicAuth:
+            password:
+              name: dawarich-metrics-credentials
+              key: password
+            username:
+              name: dawarich-metrics-credentials
+              key: user
   route:
     main:
       kind: HTTPRoute

clusters/cl01tl/helm/element-web/values.yaml

@@ -2,7 +2,7 @@ element-web:
   replicaCount: 1
   image:
     repository: ghcr.io/element-hq/element-web
-    tag: v1.12.17@sha256:f4a81a24d49a9c5b97e02e77a3013ec799873e500e69041078a28be98e4f1280
+    tag: v1.12.18@sha256:c21772a1eabeededa19be591343f548995e458ec34ba8f27425ae923c10af82e
   defaultServer:
     url: https://matrix.alexlebens.dev
     name: alexlebens.dev

clusters/cl01tl/helm/freshrss/Chart.yaml

@@ -33,4 +33,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/freshrss.png
 # renovate: datasource=github-releases depName=FreshRSS/FreshRSS
-appVersion: 1.28.1
+appVersion: 1.29.0

clusters/cl01tl/helm/freshrss/values.yaml

@@ -8,7 +8,7 @@ freshrss:
         main:
           image:
             repository: freshrss/freshrss
-            tag: 1.28.1@sha256:9100f649f5c946f589f54cdb9be7a65996528f48f691ef90eb262a0e06e5a522
+            tag: 1.29.0@sha256:cca8988d05cd449e1c6c69405971b1e6fc2c2116ceeb45c9fa3fc33837997a75
           env:
             - name: PGID
               value: "568"

clusters/cl01tl/helm/gitea/Chart.yaml

@@ -56,4 +56,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/gitea.png
 # renovate: datasource=github-releases depName=go-gitea/gitea
-appVersion: 1.26.0
+appVersion: 1.26.1

clusters/cl01tl/helm/gitea/values.yaml

@@ -9,7 +9,7 @@ gitea:
       maxUnavailable: 1
   image:
     repository: gitea/gitea
-    tag: 1.25.5
+    tag: 1.26.1
   service:
     http:
       type: ClusterIP

clusters/cl01tl/helm/homepage/values.yaml

@@ -14,7 +14,7 @@ homepage:
         main:
           image:
             repository: ghcr.io/gethomepage/homepage
-            tag: v1.13.0@sha256:690ac1f79e33000c176c2a28229ed00b49b44781e8a63f280a8ece22c161f099
+            tag: v1.13.1@sha256:d8d784e5090111b6e4c56dfd90e272d2953a2094e87349f647165df0fa6c4401
           env:
             - name: HOMEPAGE_ALLOWED_HOSTS
               value: home.alexlebens.net

clusters/cl01tl/helm/jellyfin/values.yaml

@@ -40,7 +40,7 @@ jellyfin:
         exporter:
           image:
             repository: rebelcore/jellyfin-exporter
-            tag: v1.5.0@sha256:37e6d389654180ad9e1661210a48fee71a6dc355a160670235a00329da0dbf80
+            tag: v1.5.1@sha256:a42181c7faf593ce11761916f669bc5b3598e43d2c5b8bd4381934f2df83bbd7
           args:
             - '--jellyfin.address=http://127.0.0.1:8096'
             - '--jellyfin.token=$(TOKEN)'

clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock

@@ -1,15 +1,15 @@
 dependencies:
 - name: kube-prometheus-stack
   repository: oci://ghcr.io/prometheus-community/charts
-  version: 84.5.0
+  version: 85.0.2
 - name: prometheus-operator-crds
   repository: oci://ghcr.io/prometheus-community/charts
-  version: 28.0.1
+  version: 29.0.0
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
   version: 5.0.0
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:393093164e2cc0e94111c86181bcbfb4f605f9eeeb9a1fd1960ba5fc764902ee
-generated: "2026-05-08T02:31:55.970087487Z"
+digest: sha256:8ac7065eceeff40ab6da60d8abd939031cc3e4677c0cfa353cd11a3e1bac25b6
+generated: "2026-05-12T18:05:16.45686921Z"

clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml

@@ -20,10 +20,10 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: kube-prometheus-stack
-    version: 84.5.0
+    version: 85.0.2
     repository: oci://ghcr.io/prometheus-community/charts
   - name: prometheus-operator-crds
-    version: 28.0.1
+    version: 29.0.0
     repository: oci://ghcr.io/prometheus-community/charts
   - name: app-template
     alias: ntfy-alertmanager

clusters/cl01tl/helm/loki/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: loki
   repository: oci://ghcr.io/grafana-community/helm-charts
-  version: 13.6.2
+  version: 13.6.3
 - name: alloy
   repository: https://grafana.github.io/helm-charts
   version: 1.8.1
-digest: sha256:a4e74753a5cc3122473b8bcc984ae5bd7d0d2c05da1e98c8c1d5bb96abb1ada1
-generated: "2026-05-09T01:39:35.695293602Z"
+digest: sha256:2eece1cad7f8e6450a401e337aadd0b3269d2d73ba7b9c44d7992ef701c480c9
+generated: "2026-05-12T12:05:33.215834577Z"

clusters/cl01tl/helm/loki/Chart.yaml

@@ -15,7 +15,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: loki
-    version: 13.6.2
+    version: 13.6.3
     repository: oci://ghcr.io/grafana-community/helm-charts
   - name: alloy
     version: 1.8.1

clusters/cl01tl/helm/music-grabber/Chart.yaml

@@ -24,4 +24,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/music-grabber.png
 # renovate: datasource=docker depName=g33kphr33k/musicgrabber
-appVersion: 2.8.6
+appVersion: 2.8.7

clusters/cl01tl/helm/music-grabber/values.yaml

@@ -12,7 +12,7 @@ music-grabber:
         main:
           image:
             repository: g33kphr33k/musicgrabber
-            tag: 2.8.6@sha256:b35f49f56994e8fb4a7e25844e869d6c2e2e3d7419ecc43bfe70478d051c8301
+            tag: 2.8.7@sha256:7c55042195e93dc66fc9c0335e2e4469b861c2558b82974b674b7f89c0d6e961
           env:
             - name: MUSIC_DIR
               value: /mnt/store/Music Grabber/

clusters/cl01tl/helm/ollama/values.yaml

@@ -110,7 +110,7 @@ ollama:
         main:
           image:
             repository: ghcr.io/open-webui/open-webui
-            tag: v0.9.4@sha256:172e1fe0e89af2a07f42f2b1d943f30c8ddd7b9c2e182f3678b4790cdb83abea
+            tag: v0.9.5@sha256:e045bde3b004cc7f8c319412345eb56c87ea6ac57031534a31ca37ad5424beb3
           env:
             - name: ENV
               value: prod

clusters/cl01tl/helm/plex/values.yaml

@@ -22,7 +22,7 @@ plex:
         main:
           image:
             repository: ghcr.io/linuxserver/plex
-            tag: 1.43.1.10611-1e34174b1-ls304@sha256:c5e295f023b4e92b3ca467626dbc2ba8a9b5e53934810df74d99c14e38ae1857
+            tag: 1.43.1.10611-1e34174b1-ls305@sha256:8d937dd32659bb1defa02d713a3b1cc99919f12aa17a072d588e770a6f1d7d26
           env:
             - name: TZ
               value: America/Chicago

clusters/cl01tl/helm/radarr-4k/Chart.yaml

@@ -33,4 +33,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/radarr-4k.png
 # renovate: datasource=github-releases depName=linuxserver/docker-radarr
-appVersion: 6.1.1.10360-ls301
+appVersion: 6.1.1.10360-ls302

clusters/cl01tl/helm/radarr-4k/values.yaml

@@ -14,7 +14,7 @@ radarr-4k:
         main:
           image:
             repository: ghcr.io/linuxserver/radarr
-            tag: 6.1.1.10360-ls301@sha256:659e5f20500948b1491f31dd85c6f99a43508ce3e46595793e1e15aa955bf6d7
+            tag: 6.1.1.10360-ls302@sha256:15417a594ebda4c660a9fa9748e7199d33e2d17b31bbc5ad7ba2e86f0b414763
           env:
             - name: TZ
               value: America/Chicago

clusters/cl01tl/helm/radarr-anime/Chart.yaml

@@ -33,4 +33,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/radarr-anime.png
 # renovate: datasource=github-releases depName=linuxserver/docker-radarr
-appVersion: 6.1.1.10360-ls301
+appVersion: 6.1.1.10360-ls302

clusters/cl01tl/helm/radarr-anime/values.yaml

@@ -14,7 +14,7 @@ radarr-anime:
         main:
           image:
             repository: ghcr.io/linuxserver/radarr
-            tag: 6.1.1.10360-ls301@sha256:659e5f20500948b1491f31dd85c6f99a43508ce3e46595793e1e15aa955bf6d7
+            tag: 6.1.1.10360-ls302@sha256:15417a594ebda4c660a9fa9748e7199d33e2d17b31bbc5ad7ba2e86f0b414763
           env:
             - name: TZ
               value: America/Chicago

clusters/cl01tl/helm/radarr-standup/Chart.yaml

@@ -33,4 +33,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/radarr.png
 # renovate: datasource=github-releases depName=linuxserver/docker-radarr
-appVersion: 6.1.1.10360-ls301
+appVersion: 6.1.1.10360-ls302

clusters/cl01tl/helm/radarr-standup/values.yaml

@@ -14,7 +14,7 @@ radarr-standup:
         main:
           image:
             repository: ghcr.io/linuxserver/radarr
-            tag: 6.1.1.10360-ls301@sha256:659e5f20500948b1491f31dd85c6f99a43508ce3e46595793e1e15aa955bf6d7
+            tag: 6.1.1.10360-ls302@sha256:15417a594ebda4c660a9fa9748e7199d33e2d17b31bbc5ad7ba2e86f0b414763
           env:
             - name: TZ
               value: America/Chicago

clusters/cl01tl/helm/radarr/Chart.yaml

@@ -33,4 +33,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/radarr.png
 # renovate: datasource=github-releases depName=linuxserver/docker-radarr
-appVersion: 6.1.1.10360-ls301
+appVersion: 6.1.1.10360-ls302

clusters/cl01tl/helm/radarr/values.yaml

@@ -14,7 +14,7 @@ radarr:
         main:
           image:
             repository: ghcr.io/linuxserver/radarr
-            tag: 6.1.1.10360-ls301@sha256:659e5f20500948b1491f31dd85c6f99a43508ce3e46595793e1e15aa955bf6d7
+            tag: 6.1.1.10360-ls302@sha256:15417a594ebda4c660a9fa9748e7199d33e2d17b31bbc5ad7ba2e86f0b414763
           env:
             - name: TZ
               value: America/Chicago

clusters/cl01tl/helm/searxng/values.yaml

@@ -10,7 +10,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:b5d4892daf19736acdefc34a67bb06dd702638beb282e993aeb612e0953c2d54
+            tag: latest@sha256:a7f9188cc7fa8b6b037e0d85709c0dced8f05d0eba84145eb7fe7027a4c00850
           env:
             - name: SEARXNG_BASE_URL
               value: http://searxng-api.searxng:8080
@@ -38,7 +38,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:b5d4892daf19736acdefc34a67bb06dd702638beb282e993aeb612e0953c2d54
+            tag: latest@sha256:a7f9188cc7fa8b6b037e0d85709c0dced8f05d0eba84145eb7fe7027a4c00850
           env:
             - name: SEARXNG_BASE_URL
               value: https://searxng.alexlebens.net/

clusters/cl01tl/helm/site-documentation/values.yaml

@@ -10,7 +10,7 @@ site-documentation:
         main:
           image:
             repository: harbor.alexlebens.net/images/site-documentation
-            tag: 0.29.0@sha256:5b1390542baa3367f7646dcec79b96ce2341f3fd16314017c44046e792121bfa
+            tag: 0.30.0@sha256:cbeb1fa7e311b30e46676ba65961fbc7a7679c8b4971afc275cd1d9466663f65
           resources:
             requests:
               cpu: 10m

clusters/cl01tl/helm/site-profile/values.yaml

@@ -10,7 +10,7 @@ site-profile:
         main:
           image:
             repository: harbor.alexlebens.net/images/site-profile
-            tag: 3.20.1@sha256:b93c69d662380b9aea223198dad59de92fd1106b449920aa9ea3e6653f6cf814
+            tag: 3.20.2@sha256:38dc06984b895fa5efe4ab913990c39c7b603a8daa0bcb06b30d96255be98cc3
           resources:
             requests:
               cpu: 10m

clusters/cl01tl/helm/stack/templates/application.yaml

@@ -68,7 +68,7 @@ spec:
         - .spec.endpoints[]?.relabelings[]?.action
   syncPolicy:
     automated:
-      enabled: true
+      enabled: false
       prune: true
       selfHeal: false
     retry:

clusters/cl01tl/helm/talos/values.yaml

@@ -401,7 +401,7 @@ etcd-defrag:
         main:
           image:
             repository: ghcr.io/siderolabs/talosctl
-            tag: v1.13.0@sha256:cf5be4c584572787eda0f5818404d2380f041b1022ce85454b25d4e01334fba6
+            tag: v1.13.2@sha256:6382e6f6f8b08ab7c5cc9f77446cfd79975fe0055c0a6d73455a9dc6a6c4b98d
           args:
             - etcd
             - defrag
@@ -430,7 +430,7 @@ etcd-defrag:
         main:
           image:
             repository: ghcr.io/siderolabs/talosctl
-            tag: v1.13.0@sha256:cf5be4c584572787eda0f5818404d2380f041b1022ce85454b25d4e01334fba6
+            tag: v1.13.2@sha256:6382e6f6f8b08ab7c5cc9f77446cfd79975fe0055c0a6d73455a9dc6a6c4b98d
           args:
             - etcd
             - defrag
@@ -459,7 +459,7 @@ etcd-defrag:
         main:
           image:
             repository: ghcr.io/siderolabs/talosctl
-            tag: v1.13.0@sha256:cf5be4c584572787eda0f5818404d2380f041b1022ce85454b25d4e01334fba6
+            tag: v1.13.2@sha256:6382e6f6f8b08ab7c5cc9f77446cfd79975fe0055c0a6d73455a9dc6a6c4b98d
           args:
             - etcd
             - defrag

clusters/cl01tl/helm/tdarr/values.yaml

@@ -12,7 +12,7 @@ tdarr:
         main:
           image:
             repository: ghcr.io/haveagitgat/tdarr
-            tag: 2.72.01@sha256:fd9abc79b06a14e4ed0940aade7a92afe734d3188104fa085d5cde3eaf778b2f
+            tag: 2.73.01@sha256:8130752e768bb034167065d6185ba291623486231f708f441452e24416c929b8
           env:
             - name: TZ
               value: America/Chicago
@@ -68,7 +68,7 @@ tdarr:
         main:
           image:
             repository: ghcr.io/haveagitgat/tdarr_node
-            tag: 2.72.01@sha256:3c1ce8bd74c5fe0dc8d345bdd373eb68b9138fbb34478d126646bb04f1522ce5
+            tag: 2.73.01@sha256:8d7fccd5d31a4523b13018b7c4a949c2656158e0abece7a3b04f489b4690af38
           env:
             - name: TZ
               value: America/Chicago

clusters/cl01tl/helm/traefik/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: traefik
   repository: https://traefik.github.io/charts
-  version: 40.0.0
+  version: 40.1.0
 - name: traefik-crds
   repository: https://traefik.github.io/charts
   version: 1.18.0
-digest: sha256:d887af2faf8b07488d6c4c3731337768492292d99edf69040498e24efe5b0a65
-generated: "2026-05-06T23:28:40.081576086Z"
+digest: sha256:d4201b2f39c0e0f091b52c31a479642f1a7db52459b5e8d775df402ab0d301f0
+generated: "2026-05-12T08:08:33.996684287Z"

clusters/cl01tl/helm/traefik/Chart.yaml

@@ -14,7 +14,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: traefik
-    version: 40.0.0
+    version: 40.1.0
     repository: https://traefik.github.io/charts
   - name: traefik-crds
     version: 1.18.0

clusters/cl01tl/helm/whodb/values.yaml

@@ -7,7 +7,7 @@ whodb:
         main:
           image:
             repository: clidey/whodb
-            tag: 0.107.0@sha256:20fb865bd0972bf56600c9e16715a3b5f30fef77defc19d74efcf72218d5f567
+            tag: 0.109.0@sha256:ccb400cb7d0e287d482980dd9df59e36ada7a94cce692af2120d29ca295f3dc4
           env:
             - name: WHODB_OLLAMA_HOST
               value: ollama-server-2.ollama

hosts/pd05wd/invoke-ai/compose.yaml

@@ -1,6 +1,6 @@
 services:
     tailscale-invoke-ai:
-        image: ghcr.io/tailscale/tailscale:v1.96.5
+        image: ghcr.io/tailscale/tailscale:v1.96.5@sha256:dbeff02d2337344b351afac203427218c4d0a06c43fc10a865184063498472a6
         container_name: tailscale-invoke-ai
         cap_add:
             - net_admin
@@ -21,7 +21,7 @@ services:
             - /dev/net/tun:/dev/net/tun
 
     invoke-ai:
-        image: ghcr.io/invoke-ai/invokeai:main-cuda
+        image: ghcr.io/invoke-ai/invokeai:main-cuda@sha256:6d4c2edc3013ce7001008707722620bc7306325c4de59620ac470aa63e80448b
         container_name: stable-diffusion
         environment:
             - INVOKEAI_ROOT=~/invokeai

hosts/pd05wd/ollama/compose.yaml

@@ -1,7 +1,7 @@
 ---
 services:
     tailscale-ollama:
-        image: ghcr.io/tailscale/tailscale:v1.96.5
+        image: ghcr.io/tailscale/tailscale:v1.96.5@sha256:dbeff02d2337344b351afac203427218c4d0a06c43fc10a865184063498472a6
         container_name: tailscale-ollama
         cap_add:
             - net_admin

hosts/pd05wd/stable-diffusion/compose.yaml

@@ -1,7 +1,7 @@
 ---
 services:
     tailscale-stable-diffusion:
-        image: ghcr.io/tailscale/tailscale:v1.96.5
+        image: ghcr.io/tailscale/tailscale:v1.96.5@sha256:dbeff02d2337344b351afac203427218c4d0a06c43fc10a865184063498472a6
         container_name: tailscale-stable-diffusion
         cap_add:
             - net_admin
@@ -22,7 +22,7 @@ services:
             - /dev/net/tun:/dev/net/tun
 
     stable-diffusion:
-        image: ghcr.io/ai-dock/stable-diffusion-webui:latest-cuda
+        image: ghcr.io/ai-dock/stable-diffusion-webui:latest-cuda@sha256:bc4b2b12ac8d030cc5daf25e2c32517709b7c15f59a32685c4c1a14a9606eb42
         container_name: stable-diffusion
         environment:
             - WEBUI_ARGS="--api --listen"

hosts/ps08rp/traefik/compose.yaml

@@ -1,7 +1,7 @@
 ---
 services:
     traefik:
-        image: ghcr.io/traefik/traefik:v3.7.0@sha256:eb328e2c806c53aafbbace6c451fa54d268961261a85452fcf0fb752a30c17be
+        image: ghcr.io/traefik/traefik:v3.7.1@sha256:09d3ef496d61fd830905fce5035c8a9505c2d3849632cffe13e5a43b34526f90
         container_name: traefik
         command:
             - "--global.checkNewVersion=false"

hosts/ps09rp/traefik/compose.yaml

@@ -1,7 +1,7 @@
 ---
 services:
     traefik:
-        image: ghcr.io/traefik/traefik:v3.7.0@sha256:eb328e2c806c53aafbbace6c451fa54d268961261a85452fcf0fb752a30c17be
+        image: ghcr.io/traefik/traefik:v3.7.1@sha256:09d3ef496d61fd830905fce5035c8a9505c2d3849632cffe13e5a43b34526f90
         container_name: traefik
         command:
             - "--global.checkNewVersion=false"

hosts/ps10rp/gitea/compose.yaml

@@ -33,7 +33,7 @@ services:
             - postgresql18:/var/lib/postgresql
 
     gitea:
-        image: gitea/gitea:1.26.0@sha256:af07b88edbb2173d20932f9c75ebcf4e61d7d5c2d6a7ab5cc6b97cba28aea352
+        image: gitea/gitea:1.26.1@sha256:d8667667b4ccbd1f67b86a376bffcc0a17b16cf71309ed04e3918231776d47dd
         container_name: gitea
         depends_on:
             - postgresql

hosts/ps10rp/homepage/compose.yaml

@@ -32,7 +32,7 @@ services:
             - /var/run/docker.sock:/var/run/docker.sock:ro
 
     homepage:
-        image: ghcr.io/gethomepage/homepage:v1.13.0@sha256:690ac1f79e33000c176c2a28229ed00b49b44781e8a63f280a8ece22c161f099
+        image: ghcr.io/gethomepage/homepage:v1.13.1@sha256:d8d784e5090111b6e4c56dfd90e272d2953a2094e87349f647165df0fa6c4401
         container_name: homepage
         labels:
             traefik.enable: true

hosts/ps10rp/traefik/compose.yaml

@@ -20,7 +20,7 @@ services:
             - /dev/net/tun:/dev/net/tun
 
     traefik:
-        image: ghcr.io/traefik/traefik:v3.7.0@sha256:eb328e2c806c53aafbbace6c451fa54d268961261a85452fcf0fb752a30c17be
+        image: ghcr.io/traefik/traefik:v3.7.1@sha256:09d3ef496d61fd830905fce5035c8a9505c2d3849632cffe13e5a43b34526f90
         container_name: traefik
         command:
             - "--global.checkNewVersion=false"