writeable

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [loki](https://grafana.github.io/helm-charts) ([source](https://github.com/grafana/helm-charts)) | minor | `6.44.0` -> `6.46.0` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNTUuNCIsInVwZGF0ZWRJblZlciI6IjQyLjUuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiY2hhcnQiXX0=-->

Reviewed-on: #1930
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>

clusters/cl01tl/applications/booklore/templates/external-secret.yaml

@@ -81,10 +81,10 @@ spec:
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
-  name: booklore-mariadb-cluster-backup-secret
+  name: booklore-mariadb-cluster-backup-secret-external
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: booklore-mariadb-cluster-backup-secret
+    app.kubernetes.io/name: booklore-mariadb-cluster-backup-secret-external
     app.kubernetes.io/instance: {{ .Release.Name }}
     app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
@@ -92,17 +92,47 @@ spec:
     kind: ClusterSecretStore
     name: vault
   data:
-    - secretKey: access-key-id
+    - secretKey: access
       remoteRef:
         conversionStrategy: Default
         decodingStrategy: None
         key: /digital-ocean/home-infra/mariadb-backups
         metadataPolicy: None
         property: access
-    - secretKey: secret-access-key
+    - secretKey: secret
       remoteRef:
         conversionStrategy: Default
         decodingStrategy: None
         key: /digital-ocean/home-infra/mariadb-backups
         metadataPolicy: None
         property: secret
+
+---
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: booklore-mariadb-cluster-backup-secret-garage
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: booklore-mariadb-cluster-backup-secret-garage
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  data:
+    - secretKey: access
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/mariadb-backups
+        metadataPolicy: None
+        property: access
+    - secretKey: secret
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/mariadb-backups
+        metadataPolicy: None
+        property: secret

clusters/cl01tl/applications/booklore/values.yaml

@@ -102,22 +102,44 @@ mariadb-cluster:
       cleanupPolicy: Delete
       requeueInterval: 10h
       retryInterval: 30s
-  backups:
-    - name: backup
+  physicalBackups:
+    - name: backup-external
       schedule:
-        cron: "0 0 * * *"
-        suspend: true
+        cron: "0 0 * * 0"
+        suspend: false
+        immediate: true
       compression: gzip
-      maxRetention: 720h # 30 days
+      maxRetention: 720h
       storage:
         s3:
           bucket: mariadb-backups-b230a2f5aecf080a4b372c08
-          prefix: cl01tl
-          endpoint: https://nyc3.digitaloceanspaces.com
-          region:  us-east-1
+          prefix: cl01tl/booklore
+          endpoint: nyc3.digitaloceanspaces.com
+          region: us-east-1
           accessKeyIdSecretKeyRef:
-            name: booklore-mariadb-cluster-backup-secret
-            key: access-key-id
+            name: booklore-mariadb-cluster-backup-secret-external
+            key: access
           secretAccessKeySecretKeyRef:
-            name: booklore-mariadb-cluster-backup-secret
-            key: secret-access-key
+            name: booklore-mariadb-cluster-backup-secret-external
+            key: secret
+          tls:
+            enabled: true
+    - name: backup-garage
+      schedule:
+        cron: "0 0 * * *"
+        suspend: false
+        immediate: true
+      compression: gzip
+      maxRetention: 360h
+      storage:
+        s3:
+          bucket: mariadb-backups
+          prefix: cl01tl/booklore
+          endpoint: garage-main.garage:3900
+          region: us-east-1
+          accessKeyIdSecretKeyRef:
+            name: booklore-mariadb-cluster-backup-secret-garage
+            key: access
+          secretAccessKeySecretKeyRef:
+            name: booklore-mariadb-cluster-backup-secret-garage
+            key: secret

clusters/cl01tl/applications/calibre-web-automated/values.yaml

@@ -55,7 +55,7 @@ calibre-web-automated:
         bypass:
           image:
             repository: ghcr.io/sarperavci/cloudflarebypassforscraping
-            tag: latest@sha256:fcf09fa6015156efcabee2d74974e9985f8c9e2ed5693e523f222a9ce52dacfa
+            tag: latest@sha256:f113570afd4924f10338890571a75e662d5d1b7deed7696ac40f7e063688eb48
             pullPolicy: IfNotPresent
           resources:
             requests:

clusters/cl01tl/applications/listenarr/values.yaml

@@ -43,4 +43,4 @@ listenarr:
         main:
           main:
             - path: /data
-              readOnly: true
+              readOnly: false

clusters/cl01tl/applications/outline/values.yaml

@@ -9,7 +9,7 @@ outline:
         main:
           image:
             repository: outlinewiki/outline
-            tag: 1.0.1
+            tag: 1.1.0
             pullPolicy: IfNotPresent
           env:
             - name: NODE_ENV

clusters/cl01tl/monitoring/loki/Chart.yaml

@@ -16,7 +16,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: loki
-    version: 6.44.0
+    version: 6.46.0
     repository: https://grafana.github.io/helm-charts
   - name: promtail
     version: 6.17.1

clusters/cl01tl/platform/ntfy/values.yaml

@@ -9,7 +9,7 @@ ntfy:
         main:
           image:
             repository: binwiederhier/ntfy
-            tag: v2.14.0
+            tag: v2.15.0
             pullPolicy: IfNotPresent
           args: ["serve"]
           env: