chore(deps): update ghcr.io/linuxserver/bazarr:1.5.4 docker digest to d6492cc (#3543)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/autobrr/qui](https://github.com/autobrr/qui) | minor | `v1.12.0` → `v1.13.0` |

---

### Release Notes

<details>
<summary>autobrr/qui (ghcr.io/autobrr/qui)</summary>

### [`v1.13.0`](https://github.com/autobrr/qui/releases/tag/v1.13.0)

[Compare Source](https://github.com/autobrr/qui/compare/v1.12.0...v1.13.0)

#### Highlights

- Native RSS support for feeds
- Cross-seed upgrades: directory scanning for data-based matching and category affix (prefix/suffix) modes
- Automations improvements: Move action support, uncategorized filter option, hasMissingFiles condition, include-cross-seeds mode, configurable FREE\_SPACE source
- UI improvements: inline pieces progress bar, clickable dashboard error counts, better mobile workflow modal
- Orphan scan safeguards for shared save paths
- External programs: new {comment} placeholder

##### Notable bug fixes:

- More stable sorting for timestamp fields and last\_activity
- Tracker icon fetching reliability and timeout cooldown handling
- Cross-seed matching fixes (anime/pack matching, size mismatch handling, V2 hash recheck)
- Orphan scan ignores .parts files and OS/NAS artifacts
- qBittorrent tracker-down matching improvements and magnet redirect handling

#### Changelog

##### New Features

- [`9acd789`](9acd78916b): feat(automations): add Move action to Automations ([#&#8203;1079](https://github.com/autobrr/qui/issues/1079)) ([@&#8203;Barcode-eng](https://github.com/Barcode-eng))
- [`80aaf22`](80aaf22c7b): feat(automations): add hasMissingfiles condition ([#&#8203;1081](https://github.com/autobrr/qui/issues/1081)) ([@&#8203;jabloink](https://github.com/jabloink))
- [`f942a71`](f942a71635): feat(automations): add import button to empty state ([#&#8203;1111](https://github.com/autobrr/qui/issues/1111)) ([@&#8203;jabloink](https://github.com/jabloink))
- [`6b2831e`](6b2831eb6b): feat(automations): add include-cross-seeds mode with hardlink support, fix free-space projection ([#&#8203;1116](https://github.com/autobrr/qui/issues/1116)) ([@&#8203;Barcode-eng](https://github.com/Barcode-eng))
- [`b152a6a`](b152a6af36): feat(automations): add tooltips to disabled conditions ([#&#8203;1286](https://github.com/autobrr/qui/issues/1286)) ([@&#8203;jabloink](https://github.com/jabloink))
- [`f36eb76`](f36eb76e12): feat(automations): add uncategorized category filter option ([#&#8203;1268](https://github.com/autobrr/qui/issues/1268)) ([@&#8203;aulterego](https://github.com/aulterego))
- [`d7dcb58`](d7dcb589fd): feat(automations): configurable FREE\_SPACE source (qBit or path) ([#&#8203;1181](https://github.com/autobrr/qui/issues/1181)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`d685bee`](d685bee702): feat(backups): add tooltips and restore from lastest button ([#&#8203;1258](https://github.com/autobrr/qui/issues/1258)) ([@&#8203;jabloink](https://github.com/jabloink))
- [`4c5a975`](4c5a975960): feat(crossseed): add category affix with prefix/suffix modes ([#&#8203;1296](https://github.com/autobrr/qui/issues/1296)) ([@&#8203;jabloink](https://github.com/jabloink))
- [`28cd96d`](28cd96da2e): feat(crossseed): add directory scanner for data-based matching ([#&#8203;1203](https://github.com/autobrr/qui/issues/1203)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`fe84eb0`](fe84eb04ad): feat(dirscan): resumable scans with per-run limit ([#&#8203;1274](https://github.com/autobrr/qui/issues/1274)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`1af2a12`](1af2a12658): feat(dockerfile): add bash to Dockerfile ([#&#8203;903](https://github.com/autobrr/qui/issues/903)) ([@&#8203;ryanwalder](https://github.com/ryanwalder))
- [`5c84c3f`](5c84c3f86c): feat(docs): add browser extension links and URL shorteners ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`13c5461`](13c5461f3f): feat(linking): add option to fallback on linking failure ([#&#8203;1056](https://github.com/autobrr/qui/issues/1056)) ([@&#8203;Audionut](https://github.com/Audionut))
- [`5f7031f`](5f7031fe13): feat(orphanscan): protect shared save paths across instances ([#&#8203;1197](https://github.com/autobrr/qui/issues/1197)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`341092d`](341092d5c8): feat(rss): add native rss support ([#&#8203;801](https://github.com/autobrr/qui/issues/801)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`8d2a371`](8d2a371edb): feat(sort): add stable fallback sorting for timestamp fields ([#&#8203;1317](https://github.com/autobrr/qui/issues/1317)) ([@&#8203;aulterego](https://github.com/aulterego))
- [`28cf4ad`](28cf4ad217): feat(torrents): use custom tracker names in table ([#&#8203;1120](https://github.com/autobrr/qui/issues/1120)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`e0d2bb4`](e0d2bb4802): feat(ui): Use 4 column grid for dashboard instances on 2xl screens ([#&#8203;1195](https://github.com/autobrr/qui/issues/1195)) ([@&#8203;ewenjo](https://github.com/ewenjo))
- [`7bc98e1`](7bc98e145c): feat(ui): add inline pieces progress bar visualization ([#&#8203;1050](https://github.com/autobrr/qui/issues/1050)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`0154226`](01542261b5): feat(web): Improve performance for torrents with large file counts ([#&#8203;1252](https://github.com/autobrr/qui/issues/1252)) ([@&#8203;0rkag](https://github.com/0rkag))
- [`a91df70`](a91df70215): feat(web): allow merging trackers into existing groups ([#&#8203;1175](https://github.com/autobrr/qui/issues/1175)) ([@&#8203;jabloink](https://github.com/jabloink))
- [`132c512`](132c512042): feat(web): improve workflow modal mobile ([#&#8203;1302](https://github.com/autobrr/qui/issues/1302)) ([@&#8203;jabloink](https://github.com/jabloink))
- [`a7f59ab`](a7f59abc89): feat(web): make dashboard error counts clickable ([#&#8203;937](https://github.com/autobrr/qui/issues/937)) ([@&#8203;Gykes](https://github.com/Gykes))

##### Bug Fixes

- [`c6f86e2`](c6f86e2a2c): fix(auth): recover cleanly behind upstream SSO ([#&#8203;1142](https://github.com/autobrr/qui/issues/1142)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`0c19899`](0c198990a0): fix(automations): handle -1 value for incomplete torrent completion\_on ([#&#8203;1186](https://github.com/autobrr/qui/issues/1186)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`59a9120`](59a9120d5a): fix(automations): include Move action in `rulesUseCondition` ([#&#8203;1079](https://github.com/autobrr/qui/issues/1079)) ([#&#8203;1287](https://github.com/autobrr/qui/issues/1287)) ([@&#8203;Barcode-eng](https://github.com/Barcode-eng))
- [`618d945`](618d94540d): fix(automations): not being able to enter multiple tags in tag action ([#&#8203;1131](https://github.com/autobrr/qui/issues/1131)) ([@&#8203;Winter](https://github.com/Winter))
- [`bffecbd`](bffecbd8b1): fix(automations): restore preview API and add loading state ([#&#8203;1194](https://github.com/autobrr/qui/issues/1194)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`9b3975b`](9b3975bc3a): fix(automations): speed up delete hardlink-copy expansion ([#&#8203;1187](https://github.com/autobrr/qui/issues/1187)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`1549bcf`](1549bcf762): fix(automations): support qBittorrent global/unlimited limits ([#&#8203;1134](https://github.com/autobrr/qui/issues/1134)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`e31d4aa`](e31d4aae2f): fix(automations): validate local access for hasMissingFiles ([#&#8203;1281](https://github.com/autobrr/qui/issues/1281)) ([@&#8203;jabloink](https://github.com/jabloink))
- [`dba3419`](dba3419f12): fix(crossseed): allow extra files in size mismatch check ([#&#8203;1149](https://github.com/autobrr/qui/issues/1149)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`f7dced6`](f7dced6076): fix(crossseed): correct match type for episode-from-pack cross-seeding ([#&#8203;1250](https://github.com/autobrr/qui/issues/1250)) ([@&#8203;neelmehta247](https://github.com/neelmehta247))
- [`007d87e`](007d87ed3d): fix(crossseed): normalize ampersand to "and" for title matching ([#&#8203;1202](https://github.com/autobrr/qui/issues/1202)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`048c034`](048c034ea1): fix(crossseed): prevent automation search stalls ([#&#8203;1272](https://github.com/autobrr/qui/issues/1272)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`5c48ccb`](5c48ccb38e): fix(crossseed): prevent false cross-seed delete warnings ([#&#8203;1148](https://github.com/autobrr/qui/issues/1148)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`eda0eee`](eda0eeee73): fix(crossseed): reduce false negatives for anime matching ([#&#8203;1243](https://github.com/autobrr/qui/issues/1243)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`8b08b87`](8b08b87707): fix(crossseed): restore reuse matched category option ([#&#8203;1150](https://github.com/autobrr/qui/issues/1150)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`b69682d`](b69682de3c): fix(crossseed): support v2 hashes for recheck ([#&#8203;1237](https://github.com/autobrr/qui/issues/1237)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`8fb16c1`](8fb16c1c87): fix(database): remove noisy stmt cache promotion log ([#&#8203;1307](https://github.com/autobrr/qui/issues/1307)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`c8d068b`](c8d068b5a8): fix(docs): correct autobrr integration documentation ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`c6f4a4a`](c6f4a4a309): fix(docs): use absolute URLs for extension links ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`48510e9`](48510e93ba): fix(instances): auth bypass persistence in instance form ([#&#8203;1219](https://github.com/autobrr/qui/issues/1219)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`0b71b46`](0b71b46fc0): fix(makefile): make fmt target only format changed files ([#&#8203;1200](https://github.com/autobrr/qui/issues/1200)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`1f13b0e`](1f13b0e23b): fix(orphanscan): avoid duplicate inode entries in scans ([#&#8203;1212](https://github.com/autobrr/qui/issues/1212)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`fecfebd`](fecfebdeb3): fix(orphanscan): gate scans until qBittorrent settled ([#&#8203;1193](https://github.com/autobrr/qui/issues/1193)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`77b2fd6`](77b2fd600d): fix(orphanscan): ignore .parts files from qBittorrent partial downloads ([#&#8203;1264](https://github.com/autobrr/qui/issues/1264)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`0f7e646`](0f7e6465d0): fix(orphanscan): ignore OS/NAS/k8s artifacts ([#&#8203;1259](https://github.com/autobrr/qui/issues/1259)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`b55881c`](b55881c2bc): fix(orphanscan): reduce MaxFilesPerRun and fix accordion chevrons ([#&#8203;1095](https://github.com/autobrr/qui/issues/1095)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`0cb682c`](0cb682c9f3): fix(qbittorrent): force sync+retry in BulkAction ([#&#8203;1097](https://github.com/autobrr/qui/issues/1097)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`aba9b7e`](aba9b7e015): fix(qbittorrent): strip URLs before tracker-down pattern matching ([#&#8203;1224](https://github.com/autobrr/qui/issues/1224)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`a60076f`](a60076f1ad): fix(reflinktree): fall back to FICLONERANGE when FICLONE unsupported ([#&#8203;1221](https://github.com/autobrr/qui/issues/1221)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`d79a0db`](d79a0dbb6a): fix(search): handle magnet redirects from indexer downloads ([#&#8203;1211](https://github.com/autobrr/qui/issues/1211)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`1e920c4`](1e920c464c): fix(sort): truncate `last_activity` to 60s for stability ([#&#8203;1318](https://github.com/autobrr/qui/issues/1318)) ([@&#8203;aulterego](https://github.com/aulterego))
- [`931d720`](931d7203b8): fix(torznab): respect per-indexer caps limits ([#&#8203;1265](https://github.com/autobrr/qui/issues/1265)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`6fe91e8`](6fe91e877c): fix(trackericons): apply failure cooldown on timeouts ([#&#8203;1322](https://github.com/autobrr/qui/issues/1322)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`35a50b5`](35a50b52c1): fix(web): add max-height to import workflow dialog ([#&#8203;1207](https://github.com/autobrr/qui/issues/1207)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`5bd2706`](5bd2706f47): fix(web): hide redundant actions dropdown ([#&#8203;1305](https://github.com/autobrr/qui/issues/1305)) ([@&#8203;jabloink](https://github.com/jabloink))
- [`307907f`](307907f299): fix(web): improve Reannounce In column display ([#&#8203;1320](https://github.com/autobrr/qui/issues/1320)) ([@&#8203;soggy-cr0uton](https://github.com/soggy-cr0uton))
- [`7881bdc`](7881bdcd17): fix(web): make Add Instance dialog scrollable on small viewports ([#&#8203;1232](https://github.com/autobrr/qui/issues/1232)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`bec5433`](bec54335b7): fix(web): make dialogs scrollable on small viewports ([#&#8203;1233](https://github.com/autobrr/qui/issues/1233)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`0e47b9e`](0e47b9e9c3): fix(web): prevent nested scroll containers on iOS ([#&#8203;1229](https://github.com/autobrr/qui/issues/1229)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`f2f0616`](f2f0616096): fix(web): redirect already authenticated users to dashboard ([#&#8203;1127](https://github.com/autobrr/qui/issues/1127)) ([@&#8203;burritothief](https://github.com/burritothief))
- [`7a633cf`](7a633cf721): fix(web): toast message when searching then adding cross-seeds ([#&#8203;1290](https://github.com/autobrr/qui/issues/1290)) ([@&#8203;rybertm](https://github.com/rybertm))
- [`da14100`](da141006ef): fix(web): use fixed px for sidebar width instead of rem ([#&#8203;1313](https://github.com/autobrr/qui/issues/1313)) ([@&#8203;soggy-cr0uton](https://github.com/soggy-cr0uton))

##### Other Changes

- [`c93a326`](c93a326df5): chore(deps): bump the golang group across 1 directory with 16 updates ([#&#8203;1261](https://github.com/autobrr/qui/issues/1261)) ([@&#8203;dependabot](https://github.com/dependabot)\[bot])
- [`d3de074`](d3de07497f): chore(docs): clarify tracker pattern necessity in documentation ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`2351097`](23510978ea): chore(lint): Add Linting workflow to CI ([#&#8203;1270](https://github.com/autobrr/qui/issues/1270)) ([@&#8203;Barcode-eng](https://github.com/Barcode-eng))
- [`e8436e3`](e8436e39f9): chore(lint): update linting base branch from main to develop ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`e36afc8`](e36afc8021): chore: add Ko-fi funding and pre-commit config ([#&#8203;1315](https://github.com/autobrr/qui/issues/1315)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`df4375e`](df4375e7ce): chore: update copyright headers to 2025-2026 ([#&#8203;1303](https://github.com/autobrr/qui/issues/1303)) ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`7a6f2d1`](7a6f2d15a6): docs(automations): clarify tag behavior ([#&#8203;1260](https://github.com/autobrr/qui/issues/1260)) ([@&#8203;jabloink](https://github.com/jabloink))
- [`05e2028`](05e20287a8): refactor(build): cross platform building ([#&#8203;1060](https://github.com/autobrr/qui/issues/1060)) ([@&#8203;Audionut](https://github.com/Audionut))
- [`6355f4f`](6355f4f126): refactor(crosssed): require full recheck for disc based content ([#&#8203;1168](https://github.com/autobrr/qui/issues/1168)) ([@&#8203;Audionut](https://github.com/Audionut))
- [`7466a98`](7466a98023): refactor(filesmanager): improve logging messages for orphan cleanup process ([@&#8203;s0up4200](https://github.com/s0up4200))
- [`ad90209`](ad902091ed): refactor(orphan): improve disc based content handling ([#&#8203;1167](https://github.com/autobrr/qui/issues/1167)) ([@&#8203;Audionut](https://github.com/Audionut))
- [`3b85f8a`](3b85f8a17f): refactor(web): use TanStack Query for path autocomplete ([#&#8203;1309](https://github.com/autobrr/qui/issues/1309)) ([@&#8203;soggy-cr0uton](https://github.com/soggy-cr0uton))

**Full Changelog**: <https://github.com/autobrr/qui/compare/v1.12.0...v1.13.0>

#### Docker images

- `docker pull ghcr.io/autobrr/qui:v1.13.0`
- `docker pull ghcr.io/autobrr/qui:latest`

#### What to do next?

- Join our [Discord server](https://discord.autobrr.com/qui)

Thank you for using qui!

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi42OS4yIiwidXBkYXRlZEluVmVyIjoiNDIuNjkuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=-->

Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/3540
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>

.gitea/workflows/render-manifests-dispatch.yaml

@@ -1,6 +1,9 @@
 name: render-manifests-dispatch
 
 on:
+  schedule:
+    - cron: '0 3 * * *'
+
   workflow_dispatch:
 
 env:

clusters/cl01tl/helm/actual/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.5.0
+  version: 4.6.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:4840c828f8fbb695fa06fb959aad415acd12ff0d4930d136783488f16b9f875c
-generated: "2025-12-27T13:29:28.243328-06:00"
+digest: sha256:ff3e2f03e93cdd4593e28b9c8bd5b9ddb25548a20a070b2e202057f216207d03
+generated: "2026-01-16T18:44:37.399172263Z"

clusters/cl01tl/helm/actual/Chart.yaml

@@ -16,11 +16,11 @@ dependencies:
   - name: app-template
     alias: actual
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.5.0
+    version: 4.6.2
   - name: volsync-target
     alias: volsync-target-data
     version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/actual-budget.png
-# renovate: github=actualbudget/actual
-appVersion: 25.12.0
+# renovate: datasource=github-releases depName=actualbudget/actual
+appVersion: 26.1.0

clusters/cl01tl/helm/actual/values.yaml

@@ -9,7 +9,7 @@ actual:
         main:
           image:
             repository: ghcr.io/actualbudget/actual
-            tag: 25.12.0
+            tag: 26.1.0
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -78,7 +78,7 @@ actual:
 volsync-target-data:
   pvcTarget: actual-data
   local:
-    enabled: false
+    enabled: true
     schedule: 0 8 * * *
   remote:
     enabled: false

clusters/cl01tl/helm/argo-workflows/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: argo-workflows
   repository: https://argoproj.github.io/argo-helm
-  version: 0.46.2
+  version: 0.47.1
 - name: argo-events
   repository: https://argoproj.github.io/argo-helm
-  version: 2.4.19
+  version: 2.4.20
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.5
-digest: sha256:2cbfdaeceeba1a5bdaa6fb2e9c4d51ea1310878d8c1c122dcfb0614fc2c52fb7
-generated: "2025-12-27T19:44:54.020935317Z"
+  version: 7.5.0
+digest: sha256:d7b1a201f397588011b17e261f06298a110354958db98be43b9925b40a0e6deb
+generated: "2026-01-23T00:22:35.377575613Z"

clusters/cl01tl/helm/argo-workflows/Chart.yaml

@@ -18,15 +18,15 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: argo-workflows
-    version: 0.46.2
+    version: 0.47.1
     repository: https://argoproj.github.io/argo-helm
   - name: argo-events
-    version: 2.4.19
+    version: 2.4.20
     repository: https://argoproj.github.io/argo-helm
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.5
+    version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
-# renovate: github=argoproj/argo-workflows
-appVersion: v3.7.6
+# renovate: datasource=github-releases depName=argoproj/argo-workflows
+appVersion: v3.7.8

clusters/cl01tl/helm/argocd/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: argo-cd
   repository: https://argoproj.github.io/argo-helm
-  version: 9.2.3
-digest: sha256:b23d6a5b7b9fee9d1807259bfa2dd53d1f4dfbbeba7ec747c41a6ba991dadbba
-generated: "2025-12-28T21:53:37.447568505Z"
+  version: 9.3.6
+digest: sha256:be234810cc46ac3410b0b066f97c53701191085799ae456761e005b3336e48f5
+generated: "2026-01-27T12:02:59.674181021Z"

clusters/cl01tl/helm/argocd/Chart.yaml

@@ -15,8 +15,8 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: argo-cd
-    version: 9.2.3
+    version: 9.3.6
     repository: https://argoproj.github.io/argo-helm
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
-# renovate: github=argoproj/argo-cd
-appVersion: v3.2.1
+# renovate: datasource=github-releases depName=argoproj/argo-cd
+appVersion: v3.2.6

clusters/cl01tl/helm/audiobookshelf/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.5.0
+  version: 4.6.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:75ef1406c49929e118569581946d1baaf9e082a45e3482cb10b9b9ae464eadfb
-generated: "2025-12-27T13:29:36.350679-06:00"
+digest: sha256:c8a988258b26187972a8b69767bf5df502d7e2b12710eb357ac15240d872fd37
+generated: "2026-01-16T18:44:48.982249243Z"

clusters/cl01tl/helm/audiobookshelf/Chart.yaml

@@ -18,7 +18,7 @@ dependencies:
   - name: app-template
     alias: audiobookshelf
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.5.0
+    version: 4.6.2
   - name: volsync-target
     alias: volsync-target-config
     version: 0.7.0
@@ -28,5 +28,5 @@ dependencies:
     version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/audiobookshelf.png
-# renovate: github=advplyr/audiobookshelf
-appVersion: 2.31.0
+# renovate: datasource=github-releases depName=advplyr/audiobookshelf
+appVersion: 2.32.1

clusters/cl01tl/helm/audiobookshelf/values.yaml

@@ -21,7 +21,7 @@ audiobookshelf:
         apprise-api:
           image:
             repository: caronc/apprise
-            tag: 1.3.0
+            tag: v1.3.1
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -124,7 +124,7 @@ audiobookshelf:
 volsync-target-config:
   pvcTarget: audiobookshelf-config
   local:
-    enabled: false
+    enabled: true
     schedule: 2 8 * * *
   remote:
     enabled: false
@@ -134,7 +134,7 @@ volsync-target-config:
 volsync-target-metadata:
   pvcTarget: audiobookshelf-metadata
   local:
-    enabled: false
+    enabled: true
     schedule: 4 8 * * *
   remote:
     enabled: false

clusters/cl01tl/helm/authentik/Chart.lock

@@ -1,15 +1,15 @@
 dependencies:
 - name: authentik
   repository: https://charts.goauthentik.io/
-  version: 2025.10.3
+  version: 2025.12.1
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.4
+  version: 2.1.9
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.5
+  version: 7.5.0
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.5.0
-digest: sha256:d357b0a8f4351068d9ce7223ffd01a0921202cb2b41669421b8429bc3f7778eb
-generated: "2025-12-27T19:45:06.478084011Z"
+  version: 1.0.1
+digest: sha256:137f0f3ecc4c958151badcc661d05f2f08119e3abef0c4b00ed93edc4b4596e4
+generated: "2026-01-23T00:35:33.491000636Z"

clusters/cl01tl/helm/authentik/Chart.yaml

@@ -21,18 +21,18 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: authentik
-    version: 2025.10.3
+    version: 2025.12.1
     repository: https://charts.goauthentik.io/
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.4
+    version: 2.1.9
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.5
+    version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
-    version: 0.5.0
+    version: 1.0.1
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/authentik.png
-# renovate: github=goauthentik/authentik
+# renovate: datasource=github-releases depName=goauthentik/authentik
 appVersion: 2025.10.2

clusters/cl01tl/helm/authentik/values.yaml

@@ -109,7 +109,6 @@ redis-replication:
   existingSecret:
     enabled: false
   redisReplication:
-    clusterSize: 1
-  redisSentinel:
-    enabled: false
     clusterSize: 3
+    sentinel:
+      enabled: true

clusters/cl01tl/helm/backrest/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.5.0
+  version: 4.6.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:26680d49c76f150932d55fac070325d5ed89e635e713f37e1796f0d55775af9e
-generated: "2025-12-27T13:29:41.313658-06:00"
+digest: sha256:18365b7dd3995703aad6928ce22dd1c3b8ffd5f1cccf54b8f1489ad111d13104
+generated: "2026-01-16T18:45:00.087995513Z"

clusters/cl01tl/helm/backrest/Chart.yaml

@@ -16,7 +16,7 @@ dependencies:
   - name: app-template
     alias: backrest
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.5.0
+    version: 4.6.2
   - name: volsync-target
     alias: volsync-target-config
     version: 0.7.0
@@ -26,5 +26,5 @@ dependencies:
     version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/backrest.png
-# renovate: github=garethgeorge/backrest
-appVersion: v1.10.1
+# renovate: datasource=github-releases depName=garethgeorge/backrest
+appVersion: v1.11.1

clusters/cl01tl/helm/backrest/values.yaml

@@ -8,7 +8,7 @@ backrest:
         main:
           image:
             repository: garethgeorge/backrest
-            tag: v1.10.1
+            tag: v1.11.1
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -108,7 +108,7 @@ backrest:
 volsync-target-data:
   pvcTarget: backrest-data
   local:
-    enabled: false
+    enabled: true
     schedule: 6 8 * * *
   remote:
     enabled: false
@@ -118,7 +118,7 @@ volsync-target-data:
 volsync-target-config:
   pvcTarget: backrest-config
   local:
-    enabled: false
+    enabled: true
     schedule: 8 8 * * *
   remote:
     enabled: false

clusters/cl01tl/helm/bazarr/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.5.0
+  version: 4.6.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:9d9d5e30903d7967baaf5c274e9adc8403cce32d91bdd3d1780acffb249f312d
-generated: "2025-12-27T13:29:43.329783-06:00"
+digest: sha256:77d0e82601292b4173d355d18c0de82bb37684a3dc29d7c8af4169308f14de48
+generated: "2026-01-16T18:45:10.855338471Z"

clusters/cl01tl/helm/bazarr/Chart.yaml

@@ -18,11 +18,11 @@ dependencies:
   - name: app-template
     alias: bazarr
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.5.0
+    version: 4.6.2
   - name: volsync-target
     alias: volsync-target-config
     version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/bazarr.png
-# renovate: github=linuxserver/bazarr
-appVersion: 1.5.3
+# renovate: datasource=github-releases depName=morpheus65535/bazarr
+appVersion: 1.5.4

clusters/cl01tl/helm/bazarr/values.yaml

@@ -15,7 +15,7 @@ bazarr:
         main:
           image:
             repository: ghcr.io/linuxserver/bazarr
-            tag: 1.5.3@sha256:001875e61839c8a50743f0bc0fa4da2a55ed8a038b9b5ed0dd2c663dd3d0bfc7
+            tag: 1.5.4@sha256:d6492cc79ca5e12fe617c7285e7ebd60d4e7f0e93ec7faa78338dba91f07a91e
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -84,7 +84,7 @@ volsync-target-config:
     fsGroup: 1000
     fsGroupChangePolicy: OnRootMismatch
   local:
-    enabled: false
+    enabled: true
     schedule: 10 8 * * *
   remote:
     enabled: false

clusters/cl01tl/helm/blocky/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.5.0
+  version: 4.6.2
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.5.0
-digest: sha256:a7840240d52d7c66aa2e542132e32907dd0c48d3051eb15190a209215cbd4dce
-generated: "2025-12-15T20:06:31.995318697Z"
+  version: 1.0.1
+digest: sha256:f3cc9b85524eb1a0c8aec92a87ad4dd1f2f59c5bb3474b569ce188827e40b3d0
+generated: "2026-01-16T18:45:21.852495393Z"

clusters/cl01tl/helm/blocky/Chart.yaml

@@ -16,10 +16,10 @@ dependencies:
   - name: app-template
     alias: blocky
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.5.0
+    version: 4.6.2
   - name: redis-replication
-    version: 0.5.0
+    version: 1.0.1
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/blocky.png
-# renovate: github=0xerr0r/blocky
+# renovate: datasource=github-releases depName=0xerr0r/blocky
 appVersion: v0.28.2

clusters/cl01tl/helm/blocky/values.yaml

@@ -112,7 +112,7 @@ blocky:
               booklore                        IN      CNAME   traefik-cl01tl
               ceph                            IN      CNAME   traefik-cl01tl
               code-server                     IN      CNAME   traefik-cl01tl
-              ephemera                        IN      CNAME   traefik-cl01tl
+              excalidraw                      IN      CNAME   traefik-cl01tl
               feishin                         IN      CNAME   traefik-cl01tl
               garage-s3                       IN      CNAME   traefik-cl01tl
               garage-webui                    IN      CNAME   traefik-cl01tl
@@ -132,8 +132,6 @@ blocky:
               kiwix                           IN      CNAME   traefik-cl01tl
               komodo                          IN      CNAME   traefik-cl01tl
               lidarr                          IN      CNAME   traefik-cl01tl
-              lidatube                        IN      CNAME   traefik-cl01tl
-              listenarr                       IN      CNAME   traefik-cl01tl
               mail                            IN      CNAME   traefik-cl01tl
               navidrome                       IN      CNAME   traefik-cl01tl
               ntfy                            IN      CNAME   traefik-cl01tl
@@ -152,21 +150,20 @@ blocky:
               radarr-4k                       IN      CNAME   traefik-cl01tl
               radarr-anime                    IN      CNAME   traefik-cl01tl
               radarr-standup                  IN      CNAME   traefik-cl01tl
-              rayflume                        IN      CNAME   traefik-cl01tl
               searxng                         IN      CNAME   traefik-cl01tl
               seerr                           IN      CNAME   traefik-cl01tl
+              shelfmark                       IN      CNAME   traefik-cl01tl
               slskd                           IN      CNAME   traefik-cl01tl
               sonarr                          IN      CNAME   traefik-cl01tl
               sonarr-4k                       IN      CNAME   traefik-cl01tl
               sonarr-anime                    IN      CNAME   traefik-cl01tl
-              soulsync                        IN      CNAME   traefik-cl01tl
               stalwart                        IN      CNAME   traefik-cl01tl
-              tautulli                        IN      CNAME   traefik-cl01tl
               tdarr                           IN      CNAME   traefik-cl01tl
               tubearchivist                   IN      CNAME   traefik-cl01tl
               vault                           IN      CNAME   traefik-cl01tl
               whodb                           IN      CNAME   traefik-cl01tl
               yamtrack                        IN      CNAME   traefik-cl01tl
+              yubal-playlist                  IN      CNAME   traefik-cl01tl
 
           blocking:
             denylists:
@@ -182,35 +179,47 @@ blocky:
                 - https://v.firebog.net/hosts/Prigent-Ads.txt
               mal:
                 - https://v.firebog.net/hosts/Prigent-Crypto.txt
-                - https://osint.digitalside.it/Threat-Intel/lists/latestdomains.txt
               pro:
                 - https://raw.githubusercontent.com/hagezi/dns-blocklists/main/wildcard/pro.plus.txt
+              oisd:
+                - https://big.oisd.nl/domainswild
             allowlists:
               sus:
                 - |
                   *.alexlebens.net
                   *.alexlebens.dev
                   *.boreal-beaufort.ts.net
+                  *.discord.com
               ads:
                 - |
                   *.alexlebens.net
                   *.alexlebens.dev
                   *.boreal-beaufort.ts.net
+                  *.discord.com
               priv:
                 - |
                   *.alexlebens.net
                   *.alexlebens.dev
                   *.boreal-beaufort.ts.net
+                  *.discord.com
               mal:
                 - |
                   *.alexlebens.net
                   *.alexlebens.dev
                   *.boreal-beaufort.ts.net
+                  *.discord.com
               pro:
                 - |
                   *.alexlebens.net
                   *.alexlebens.dev
                   *.boreal-beaufort.ts.net
+                  *.discord.com
+              oisd:
+                - |
+                  *.alexlebens.net
+                  *.alexlebens.dev
+                  *.boreal-beaufort.ts.net
+                  *.discord.com
             clientGroupsBlock:
               default:
                 - sus
@@ -218,6 +227,7 @@ blocky:
                 - priv
                 - mal
                 - pro
+                - oisd
             blockType: zeroIp
             blockTTL: 1m
             loading:
@@ -315,9 +325,5 @@ blocky:
               mountPropagation: None
               subPath: config.yml
 redis-replication:
-  existingSecret:
-    enabled: false
   redisReplication:
     clusterSize: 1
-  redisSentinel:
-    enabled: false

clusters/cl01tl/helm/booklore/Chart.lock

@@ -1,15 +1,15 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.5.0
+  version: 4.6.2
 - name: mariadb-cluster
   repository: https://helm.mariadb.com/mariadb-operator
-  version: 25.10.3
+  version: 25.10.4
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:805832fd8df9e1e4435dd2b10c877e0248ca5b3855d4c2faba4ff09c23afb898
-generated: "2025-12-27T13:29:47.00956-06:00"
+digest: sha256:81601af110374e1571481873ace19f7bc694edb917ef35c1fbc623efe147a66d
+generated: "2026-01-16T18:45:33.641059484Z"

clusters/cl01tl/helm/booklore/Chart.yaml

@@ -16,9 +16,9 @@ dependencies:
   - name: app-template
     alias: booklore
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.5.0
+    version: 4.6.2
   - name: mariadb-cluster
-    version: 25.10.3
+    version: 25.10.4
     repository: https://helm.mariadb.com/mariadb-operator
   - name: volsync-target
     alias: volsync-target-config
@@ -29,5 +29,5 @@ dependencies:
     version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/booklore.png
-# renovate: github=booklore-app/BookLore
-appVersion: v1.13.2
+# renovate: datasource=github-releases depName=booklore-app/BookLore
+appVersion: v1.18.5

clusters/cl01tl/helm/booklore/values.yaml

@@ -9,7 +9,7 @@ booklore:
         main:
           image:
             repository: ghcr.io/booklore-app/booklore
-            tag: v1.16.1
+            tag: v1.18.5
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -218,7 +218,7 @@ mariadb-cluster:
 volsync-target-config:
   pvcTarget: booklore-config
   local:
-    enabled: false
+    enabled: true
     schedule: 12 8 * * *
   remote:
     enabled: false

clusters/cl01tl/helm/cert-manager/Chart.yaml

@@ -17,5 +17,5 @@ dependencies:
     version: v1.19.2
     repository: https://charts.jetstack.io
 icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/cert-manager.png
-# renovate: github=cert-manager/cert-manager
+# renovate: datasource=github-releases depName=cert-manager/cert-manager
 appVersion: v1.19.2

clusters/cl01tl/helm/cilium/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: cilium
   repository: https://helm.cilium.io/
-  version: 1.18.5
-digest: sha256:b997853961dca1ed43d32b58b17e6e592581eb555db0b1457b168251cf3aaa45
-generated: "2025-12-17T16:05:05.870297681Z"
+  version: 1.18.6
+digest: sha256:8ea328ac238524b5b423e6289f5e25d05ef64e6aa19cfd5de238f1d5dd533e9b
+generated: "2026-01-14T11:02:31.272963463Z"

clusters/cl01tl/helm/cilium/Chart.yaml

@@ -15,8 +15,8 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: cilium
-    version: 1.18.5
+    version: 1.18.6
     repository: https://helm.cilium.io/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/cilium.png
-# renovate: github=cilium/cilium
-appVersion: 1.18.4
+# renovate: datasource=github-releases depName=cilium/cilium
+appVersion: 1.18.6

clusters/cl01tl/helm/cilium/templates/cilium-l2-announcement-policy.yaml

@@ -1,19 +1,19 @@
-apiVersion: "cilium.io/v2alpha1"
-kind: CiliumL2AnnouncementPolicy
-metadata:
-  name: general-l2-policy
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: general-l2-policy
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  nodeSelector:
-    matchExpressions:
-      - key: kubernetes.io/hostname
-        operator: Exists
-  interfaces:
-    - end0
-    - enp6s0
-  externalIPs: true
-  loadBalancerIPs: true
+# apiVersion: "cilium.io/v2alpha1"
+# kind: CiliumL2AnnouncementPolicy
+# metadata:
+#   name: general-l2-policy
+#   namespace: {{ .Release.Namespace }}
+#   labels:
+#     app.kubernetes.io/name: general-l2-policy
+#     app.kubernetes.io/instance: {{ .Release.Name }}
+#     app.kubernetes.io/part-of: {{ .Release.Name }}
+# spec:
+#   nodeSelector:
+#     matchExpressions:
+#       - key: kubernetes.io/hostname
+#         operator: Exists
+#   interfaces:
+#     - end0
+#     - enp6s0
+#   externalIPs: true
+#   loadBalancerIPs: true

clusters/cl01tl/helm/cilium/values.yaml

@@ -26,7 +26,7 @@ cilium:
         - SYS_ADMIN
         - SYS_RESOURCE
   l2announcements:
-    enabled: true
+    enabled: false
   bgpControlPlane:
     enabled: false
     secretsNamespace:

clusters/cl01tl/helm/cloudnative-pg/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 0.27.0
 - name: plugin-barman-cloud
   repository: https://cloudnative-pg.io/charts/
-  version: 0.3.1
-digest: sha256:14aa30b7bf75571b03bda19af68cd50c1e7908b883351b196a260609a5b85551
-generated: "2025-12-10T19:25:17.952954019Z"
+  version: 0.4.0
+digest: sha256:5e2a32fa5ed8b180ae5e556d65c67eeb3dcf38e2974b0d668eff4ee3c83258ce
+generated: "2025-12-30T21:01:48.755246408Z"

clusters/cl01tl/helm/cloudnative-pg/Chart.yaml

@@ -19,8 +19,8 @@ dependencies:
     version: 0.27.0
     repository: https://cloudnative-pg.io/charts/
   - name: plugin-barman-cloud
-    version: 0.3.1
+    version: 0.4.0
     repository: https://cloudnative-pg.io/charts/
 icon: https://avatars.githubusercontent.com/u/100373852?s=200&v=4
-# renovate: github=cloudnative-pg/cloudnative-pg
+# renovate: datasource=github-releases depName=cloudnative-pg/cloudnative-pg
 appVersion: 1.28.0

clusters/cl01tl/helm/cloudnative-pg/values.yaml

@@ -7,10 +7,10 @@ plugin-barman-cloud:
   image:
     registry: ghcr.io
     repository: cloudnative-pg/plugin-barman-cloud
-    tag: v0.9.0
+    tag: v0.10.0
   sidecarImage:
     registry: ghcr.io
     repository: cloudnative-pg/plugin-barman-cloud-sidecar
-    tag: v0.9.0
+    tag: v0.10.0
   crds:
     create: true

clusters/cl01tl/helm/code-server/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.5.0
+  version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.4
+  version: 2.1.9
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:1deedc65dece8540fd850648bf533da244f9ac8ba48f2133f1f6cac083f5953d
-generated: "2025-12-27T13:29:58.860038-06:00"
+digest: sha256:d243a4062bd69c3e02536dbc8f0da06f8607a373a772bf521fa16ae10df331b7
+generated: "2026-01-17T17:30:30.693066904Z"

clusters/cl01tl/helm/code-server/Chart.yaml

@@ -19,14 +19,14 @@ dependencies:
   - name: app-template
     alias: code-server
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.5.0
+    version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.4
+    version: 2.1.9
   - name: volsync-target
     alias: volsync-target-config
     version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/visual-studio-code.png
-# renovate: github=coder/code-server
-appVersion: 4.106.3
+# renovate: datasource=github-releases depName=linuxserver/docker-code-server
+appVersion: 4.108.1

clusters/cl01tl/helm/code-server/values.yaml

@@ -9,7 +9,7 @@ code-server:
         main:
           image:
             repository: ghcr.io/linuxserver/code-server
-            tag: 4.107.0@sha256:e2ebedc28ab9e2ebe08093cf7e78515f97822956ff7cbac3d86fb0bd9e4b6bca
+            tag: 4.108.1@sha256:e9ed472ff25e12a5ee3562684d073b29e508e472ef54e3558e19bf4ff99ef858
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -76,7 +76,7 @@ volsync-target-config:
     fsGroup: 1000
     fsGroupChangePolicy: OnRootMismatch
   local:
-    enabled: false
+    enabled: true
     schedule: 16 8 * * *
   remote:
     enabled: false

clusters/cl01tl/helm/coredns/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: coredns
   repository: https://coredns.github.io/helm
-  version: 1.45.0
-digest: sha256:cfcb22a7d0bce4d6000800706597ae43faec74255f1deb5cc3279b2d0a81f6c6
-generated: "2025-12-02T17:17:52.206039-06:00"
+  version: 1.45.2
+digest: sha256:36ed42e4273536b6548426b4e0f51b0816d9e8fe52333bce4c61acd8ade607e8
+generated: "2026-01-24T08:01:31.043488615Z"

clusters/cl01tl/helm/coredns/Chart.yaml

@@ -15,8 +15,8 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: coredns
-    version: 1.45.0
+    version: 1.45.2
     repository: https://coredns.github.io/helm
 icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/coredns.png
-# renovate: github=coredns/coredns
-appVersion: v1.13.2
+# renovate: datasource=github-releases depName=coredns/coredns
+appVersion: v1.14.1

clusters/cl01tl/helm/coredns/values.yaml

@@ -1,7 +1,7 @@
 coredns:
   image:
     repository: registry.k8s.io/coredns/coredns
-    tag: v1.13.2
+    tag: v1.14.1
   replicaCount: 3
   resources:
     requests:

clusters/cl01tl/helm/democratic-csi-synology-iscsi/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: democratic-csi
   repository: https://democratic-csi.github.io/charts/
-  version: 0.15.0
-digest: sha256:6fe3d8ad7b990b07ed80a31c75a0a49db8da497c46a956c632615a2093d29d58
-generated: "2025-12-01T20:25:24.972076-06:00"
+  version: 0.15.1
+digest: sha256:e07d76a67023fb523e7d49730330995d0028faba9a4c7c3a6b87c5828921b3c3
+generated: "2026-01-08T20:33:17.610556446Z"

clusters/cl01tl/helm/democratic-csi-synology-iscsi/Chart.yaml

@@ -15,7 +15,7 @@ maintainers:
 dependencies:
   - name: democratic-csi
     repository: https://democratic-csi.github.io/charts/
-    version: 0.15.0
+    version: 0.15.1
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
-# renovate: github=democratic-csi/democratic-csi
+# renovate: datasource=github-releases depName=democratic-csi/democratic-csi
 appVersion: v1.9.4

clusters/cl01tl/helm/descheduler/Chart.yaml

@@ -17,5 +17,5 @@ dependencies:
     version: 0.34.0
     repository: https://kubernetes-sigs.github.io/descheduler/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
-# renovate: github=kubernetes-sigs/descheduler
+# renovate: datasource=github-releases depName=kubernetes-sigs/descheduler
 appVersion: 0.34.0

clusters/cl01tl/helm/directus/Chart.lock

@@ -1,15 +1,15 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.5.0
+  version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.4
+  version: 2.1.9
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.5
+  version: 7.5.0
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.5.0
-digest: sha256:dcfd66bcdcc888dee6ee427265ac1ca32dd542571e84fbd5adc65a76ec5a6955
-generated: "2025-12-27T19:45:16.762640684Z"
+  version: 1.0.1
+digest: sha256:ce9129502867f42fbe07bb3ea32edbe5340fa762b5ee76ac20a8d5c7fb1f39c7
+generated: "2026-01-23T00:35:49.971422373Z"

clusters/cl01tl/helm/directus/Chart.yaml

@@ -20,17 +20,17 @@ dependencies:
   - name: app-template
     alias: directus
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.5.0
+    version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.4
+    version: 2.1.9
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.5
+    version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
-    version: 0.5.0
+    version: 1.0.1
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/directus.png
-# renovate: github=directus/directus
-appVersion: 11.14.0
+# renovate: datasource=github-releases depName=directus/directus
+appVersion: 11.14.1

clusters/cl01tl/helm/directus/values.yaml

@@ -9,7 +9,7 @@ directus:
         main:
           image:
             repository: directus/directus
-            tag: 11.14.0
+            tag: 11.14.1
             pullPolicy: IfNotPresent
           env:
             - name: PUBLIC_URL
@@ -216,7 +216,6 @@ redis-replication:
     name: directus-redis-config
     key: password
   redisReplication:
-    clusterSize: 1
-  redisSentinel:
-    enabled: false
     clusterSize: 3
+    sentinel:
+      enabled: true

clusters/cl01tl/helm/elastic-operator/Chart.yaml

@@ -18,5 +18,5 @@ dependencies:
     version: 3.2.0
     repository: https://helm.elastic.co
 icon: https://helm.elastic.co/icons/eck.png
-# renovate: github=elastic/cloud-on-k8s
+# renovate: datasource=github-releases depName=elastic/cloud-on-k8s
 appVersion: v3.2.0

clusters/cl01tl/helm/element-web/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: element-web
   repository: https://ananace.gitlab.io/charts
-  version: 1.4.26
+  version: 1.4.28
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.4
-digest: sha256:640ff55a95ff9fd12716bc76106d13189867832f905eaa393b5f67553bd8c961
-generated: "2025-12-17T19:05:53.062353-06:00"
+  version: 2.1.9
+digest: sha256:13c8313cef781f8f003d827de514f261a5875377b35a36db438974144c2baf52
+generated: "2026-01-21T21:02:33.179007776Z"

clusters/cl01tl/helm/element-web/Chart.yaml

@@ -17,11 +17,11 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: element-web
-    version: 1.4.26
+    version: 1.4.28
     repository: https://ananace.gitlab.io/charts
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.4
+    version: 2.1.9
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/element.png
-# renovate: github=element-hq/element-web
-appVersion: v1.12.6
+# renovate: datasource=github-releases depName=element-hq/element-web
+appVersion: v1.12.8

clusters/cl01tl/helm/element-web/values.yaml

@@ -2,7 +2,7 @@ element-web:
   replicaCount: 1
   image:
     repository: vectorim/element-web
-    tag: v1.12.7
+    tag: v1.12.8
     pullPolicy: IfNotPresent
   defaultServer:
     url: https://matrix.alexlebens.dev

clusters/cl01tl/helm/ephemera/Chart.yaml

@@ -1,28 +0,0 @@
-apiVersion: v2
-name: ephemera
-version: 1.0.0
-description: ephemera
-keywords:
-  - ephemera
-  - books
-home: https://wiki.alexlebens.dev/
-sources:
-  - https://github.com/OrwellianEpilogue/ephemera
-  - https://github.com/FlareSolverr/FlareSolverr
-  - https://github.com/orwellianepilogue/ephemera/pkgs/container/ephemera
-  - https://github.com/flaresolverr/FlareSolverr/pkgs/container/flaresolverr
-  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: app-template
-    alias: ephemera
-    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.5.0
-  - name: volsync-target
-    alias: volsync-target-config
-    version: 0.7.0
-    repository: oci://harbor.alexlebens.net/helm-charts
-icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ephemera.png
-# renovate: github=OrwellianEpilogue/ephemera
-appVersion: 1.3.1

clusters/cl01tl/helm/ephemera/templates/external-secret.yaml

@@ -1,44 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: ephemera-key-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: ephemera-key-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: key
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/ephemera/config
-        metadataPolicy: None
-        property: key
-
----
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: ephemera-apprise-config
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: ephemera-apprise-config
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: ntfy-url
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/ephemera/config
-        metadataPolicy: None
-        property: ntfy-url

clusters/cl01tl/helm/ephemera/templates/persistent-volume-claim.yaml

@@ -1,17 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: ephemera-import-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: ephemera-import-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  volumeName: ephemera-import-nfs-storage
-  storageClassName: nfs-client
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 1Gi

clusters/cl01tl/helm/ephemera/templates/persistent-volume.yaml

@@ -1,23 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: ephemera-import-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: ephemera-import-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: nfs-client
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  nfs:
-    path: /volume2/Storage/Books Import
-    server: synologybond.alexlebens.net
-  mountOptions:
-    - vers=4
-    - minorversion=1
-    - noac

clusters/cl01tl/helm/ephemera/values.yaml

@@ -1,139 +0,0 @@
-ephemera:
-  controllers:
-    main:
-      type: deployment
-      replicas: 1
-      strategy: Recreate
-      revisionHistoryLimit: 3
-      containers:
-        main:
-          image:
-            repository: ghcr.io/orwellianepilogue/ephemera
-            tag: 1.4.2
-            pullPolicy: IfNotPresent
-          env:
-            - name: AA_BASE_URL
-              value: https://annas-archive.org
-            # - name: AA_API_KEY
-            #   valueFrom:
-            #     secretKeyRef:
-            #       name: ephemera-key-secret
-            #       key: key
-            - name: FLARESOLVERR_URL
-              value: http://127.0.0.1:8191
-            - name: LG_BASE_URL
-              value: https://gen.com
-            - name: PUID
-              value: 0
-            - name: PGID
-              value: 0
-          resources:
-            requests:
-              cpu: 50m
-              memory: 128Mi
-        flaresolverr:
-          image:
-            repository: ghcr.io/flaresolverr/flaresolverr
-            tag: v3.4.6
-            pullPolicy: IfNotPresent
-          env:
-            - name: LOG_LEVEL
-              value: info
-            - name: LOG_HTML
-              value: false
-            - name: CAPTCHA_SOLVER
-              value: none
-            - name: TZ
-              value: America/Chicago
-          resources:
-            requests:
-              cpu: 10m
-              memory: 128Mi
-        apprise-api:
-          image:
-            repository: caronc/apprise
-            tag: 1.3.0
-            pullPolicy: IfNotPresent
-          env:
-            - name: TZ
-              value: US/Central
-            - name: APPRISE_STORAGE_MODE
-              value: memory
-            - name: APPRISE_STATEFUL_MODE
-              value: disabled
-            - name: APPRISE_WORKER_COUNT
-              value: 1
-            - name: APPRISE_STATELESS_URLS
-              valueFrom:
-                secretKeyRef:
-                  name: ephemera-apprise-config
-                  key: ntfy-url
-          resources:
-            requests:
-              cpu: 10m
-              memory: 128Mi
-  service:
-    main:
-      controller: main
-      ports:
-        http:
-          port: 80
-          targetPort: 8286
-          protocol: HTTP
-  route:
-    main:
-      kind: HTTPRoute
-      parentRefs:
-        - group: gateway.networking.k8s.io
-          kind: Gateway
-          name: traefik-gateway
-          namespace: traefik
-      hostnames:
-        - ephemera.alexlebens.net
-      rules:
-        - backendRefs:
-            - group: ''
-              kind: Service
-              name: ephemera
-              port: 80
-              weight: 100
-          matches:
-            - path:
-                type: PathPrefix
-                value: /
-  persistence:
-    config:
-      forceRename: ephemera
-      storageClass: ceph-block
-      accessMode: ReadWriteOnce
-      size: 5Gi
-      retain: true
-      advancedMounts:
-        main:
-          main:
-            - path: /app/data
-              readOnly: false
-    cache:
-      type: emptyDir
-      advancedMounts:
-        main:
-          main:
-            - path: /app/downloads
-              readOnly: false
-    ingest:
-      existingClaim: ephemera-import-nfs-storage
-      advancedMounts:
-        main:
-          main:
-            - path: /app/ingest
-              readOnly: false
-volsync-target-config:
-  pvcTarget: ephemera
-  local:
-    enabled: false
-    schedule: 16 8 * * *
-  remote:
-    enabled: false
-  external:
-    enabled: true
-    schedule: 16 9 * * *

clusters/cl01tl/helm/eraser/Chart.yaml

@@ -17,5 +17,5 @@ dependencies:
     version: 1.4.1
     repository: https://eraser-dev.github.io/eraser/charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
-# renovate: github=eraser-dev/eraser
+# renovate: datasource=github-releases depName=eraser-dev/eraser
 appVersion: v1.4.1

clusters/cl01tl/helm/excalidraw/Chart.lock

@@ -0,0 +1,6 @@
+dependencies:
+- name: app-template
+  repository: https://bjw-s-labs.github.io/helm-charts/
+  version: 4.6.2
+digest: sha256:e05d84dd266b8b456a8bc7f9a2bb3ab01f4ac926efd1a58cf405b0cdab343d3f
+generated: "2026-01-17T18:27:08.062835-06:00"

clusters/cl01tl/helm/excalidraw/Chart.yaml

@@ -0,0 +1,21 @@
+apiVersion: v2
+name: excalidraw
+version: 1.0.0
+description: Excalidraw
+keywords:
+  - excalidraw
+home: https://wiki.alexlebens.dev/
+sources:
+  - https://github.com/excalidraw/excalidraw
+  - https://hub.docker.com/r/excalidraw/excalidraw
+  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
+maintainers:
+  - name: alexlebens
+dependencies:
+  - name: app-template
+    alias: excalidraw
+    repository: https://bjw-s-labs.github.io/helm-charts/
+    version: 4.6.2
+icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/excalidraw.png
+# renovate: datasource=github-releases depName=excalidraw/excalidraw
+appVersion: v0.18.0

clusters/cl01tl/helm/excalidraw/values.yaml

@@ -0,0 +1,51 @@
+excalidraw:
+  controllers:
+    main:
+      type: deployment
+      replicas: 1
+      strategy: Recreate
+      revisionHistoryLimit: 3
+      containers:
+        main:
+          image:
+            repository: excalidraw/excalidraw
+            tag: latest@sha256:3c2513e830bb6e195147c05b34ecf8393d0ba2b1cc86e93b407a5777d6135c6c
+            pullPolicy: IfNotPresent
+          env:
+            - name: NODE_ENV
+              value: production
+            - name: TZ
+              value: America/Chicago
+          resources:
+            requests:
+              cpu: 10m
+              memory: 128Mi
+  service:
+    main:
+      controller: main
+      ports:
+        http:
+          port: 80
+          targetPort: 80
+          protocol: HTTP
+  route:
+    main:
+      kind: HTTPRoute
+      parentRefs:
+        - group: gateway.networking.k8s.io
+          kind: Gateway
+          name: traefik-gateway
+          namespace: traefik
+      hostnames:
+        - excalidraw.alexlebens.net
+      rules:
+        - backendRefs:
+            - group: ''
+              kind: Service
+              name: excalidraw
+              port: 80
+              weight: 100
+          matches:
+            - path:
+                type: PathPrefix
+                value: /

clusters/cl01tl/helm/external-dns/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: external-dns
   repository: https://kubernetes-sigs.github.io/external-dns/
-  version: 1.19.0
-digest: sha256:2216b442cc820ebe561d611fbcca3955d5c94e227a0b3288e5db9f8da7d6ac00
-generated: "2025-12-01T20:25:38.288305-06:00"
+  version: 1.20.0
+digest: sha256:0da4dec408239ea48de1d95fa8ad7701c4fdc0efe67baa8743507c75e62e2a47
+generated: "2026-01-03T23:04:25.142170083Z"

clusters/cl01tl/helm/external-dns/Chart.yaml

@@ -16,8 +16,8 @@ maintainers:
 dependencies:
   - name: external-dns
     alias: external-dns-unifi
-    version: 1.19.0
+    version: 1.20.0
     repository: https://kubernetes-sigs.github.io/external-dns/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
-# renovate: github=kubernetes-sigs/external-dns
+# renovate: datasource=github-releases depName=kubernetes-sigs/external-dns
 appVersion: v0.20.0

clusters/cl01tl/helm/external-dns/values.yaml

@@ -19,7 +19,7 @@ external-dns-unifi:
     webhook:
       image:
         repository: ghcr.io/kashalls/external-dns-unifi-webhook
-        tag: v0.8.0
+        tag: v0.8.1
       env:
         - name: UNIFI_HOST
           value: https://192.168.1.1

clusters/cl01tl/helm/external-secrets/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: external-secrets
   repository: https://charts.external-secrets.io
-  version: 1.2.0
-digest: sha256:6e713c4b50c14d9daf1758d9f169d10a8c7274d2c42490846817b6fb1a3ce558
-generated: "2025-12-20T01:04:35.136580598Z"
+  version: 1.3.1
+digest: sha256:3b10d4cfe0d38cba02fa79a0d7aed6611faeb68408f4ebb05099280a5f585883
+generated: "2026-01-23T20:01:34.461022413Z"

clusters/cl01tl/helm/external-secrets/Chart.yaml

@@ -12,8 +12,8 @@ sources:
   - https://github.com/external-secrets/external-secrets/tree/main/deploy/charts/external-secrets
 dependencies:
   - name: external-secrets
-    version: 1.2.0
+    version: 1.3.1
     repository: https://charts.external-secrets.io
 icon: https://avatars.githubusercontent.com/u/68335991?s=48&v=4
-# renovate: github=external-secrets/external-secrets
-appVersion: v1.1.1
+# renovate: datasource=github-releases depName=external-secrets/external-secrets
+appVersion: v1.3.1

clusters/cl01tl/helm/freshrss/Chart.lock

@@ -1,15 +1,15 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.5.0
+  version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.4
+  version: 2.1.9
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.5
+  version: 7.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:401ccbb7aa034938a79cbe3a4401b24b55a7f072d3a8a2542f079baf29ca3081
-generated: "2025-12-27T19:45:27.260991801Z"
+digest: sha256:6368ad9d3c7a5591b42e25606b0f3f689e27cc3f73fca465f85c4e80e015299b
+generated: "2026-01-23T00:36:10.114799135Z"

clusters/cl01tl/helm/freshrss/Chart.yaml

@@ -20,18 +20,18 @@ dependencies:
   - name: app-template
     alias: freshrss
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.5.0
+    version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.4
+    version: 2.1.9
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.5
+    version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data
     version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/freshrss.png
-# renovate: github=FreshRSS/FreshRSS
-appVersion: 1.27.1
+# renovate: datasource=github-releases depName=FreshRSS/FreshRSS
+appVersion: 1.28.1

clusters/cl01tl/helm/freshrss/values.yaml

@@ -80,7 +80,7 @@ freshrss:
         main:
           image:
             repository: freshrss/freshrss
-            tag: 1.28.0
+            tag: 1.28.1
             pullPolicy: IfNotPresent
           env:
             - name: PGID
@@ -247,7 +247,7 @@ volsync-target-data:
       - 109
       - 65539
   local:
-    enabled: false
+    enabled: true
     schedule: 18 8 * * *
   remote:
     enabled: false

clusters/cl01tl/helm/garage/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.5.0
-digest: sha256:36e920ce6efee3b33b40641652f814c888ae3c50272895ef286fb8236a010924
-generated: "2025-12-27T16:57:42.31991-06:00"
+  version: 4.6.2
+digest: sha256:86536c14fa61870a64540b77f65afae8f4308e41a66eefae7fe85b83bf0df30e
+generated: "2026-01-16T18:46:33.321938614Z"

clusters/cl01tl/helm/garage/Chart.yaml

@@ -17,7 +17,7 @@ dependencies:
   - name: app-template
     alias: garage
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.5.0
+    version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
-# renovate: github=deuxfleurs-org/garage
+# renovate: datasource=github-releases depName=deuxfleurs-org/garage
 appVersion: v2.1.0

clusters/cl01tl/helm/garage/values.yaml

@@ -22,7 +22,7 @@ garage:
         main:
           image:
             repository: dxflrs/garage
-            tag: v2.1.0
+            tag: v2.2.0
             pullPolicy: IfNotPresent
           envFrom:
             - secretRef:
@@ -34,7 +34,7 @@ garage:
         debug:
           image:
             repository: ubuntu
-            tag: resolute-20251208
+            tag: resolute-20260106.1
             pullPolicy: IfNotPresent
           command:
             - "sleep"
@@ -65,7 +65,7 @@ garage:
         main:
           image:
             repository: dxflrs/garage
-            tag: v2.1.0
+            tag: v2.2.0
             pullPolicy: IfNotPresent
           envFrom:
             - secretRef:
@@ -96,7 +96,7 @@ garage:
         main:
           image:
             repository: dxflrs/garage
-            tag: v2.1.0
+            tag: v2.2.0
             pullPolicy: IfNotPresent
           envFrom:
             - secretRef:
@@ -403,20 +403,20 @@ garage:
               readOnly: true
               mountPropagation: None
               subPath: garage-1.toml
-    # db-1:
-    #   forceRename: garage-db-1
-    #   storageClass: ceph-block
-    #   accessMode: ReadWriteOnce
-    #   size: 50Gi
-    #   retain: true
-    #   advancedMounts:
-    #     server-1:
-    #       main:
-    #         - path: /var/lib/garage/meta
-    #           readOnly: false
-    #       debug:
-    #         - path: /var/lib/garage/meta
-    #           readOnly: false
+    db-1:
+      forceRename: garage-db-1
+      storageClass: ceph-block
+      accessMode: ReadWriteOnce
+      size: 50Gi
+      retain: true
+      advancedMounts:
+        server-1:
+          main:
+            - path: /var/lib/garage/meta
+              readOnly: false
+          debug:
+            - path: /var/lib/garage/meta
+              readOnly: false
     db-2:
       forceRename: garage-db-2
       storageClass: ceph-block

clusters/cl01tl/helm/gatus/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: gatus
   repository: https://twin.github.io/helm-charts
-  version: 1.4.4
+  version: 1.4.5
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.5
+  version: 7.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:ee32795b47519463ec6d1219bf4ec16784b1c42d98ae8a330e9650200d11c033
-generated: "2025-12-27T19:45:37.106953505Z"
+digest: sha256:869bee8ae57a4c920ae6495a5fc90feabcbee12647cc7b9beb8b368823ffdbf1
+generated: "2026-01-23T00:36:25.773527504Z"

clusters/cl01tl/helm/gatus/Chart.yaml

@@ -19,15 +19,15 @@ maintainers:
 dependencies:
   - name: gatus
     repository: https://twin.github.io/helm-charts
-    version: 1.4.4
+    version: 1.4.5
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.5
+    version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data
     version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/gatus.png
-# renovate: github=TwiN/gatus
-appVersion: v5.33.0
+# renovate: datasource=github-releases depName=TwiN/gatus
+appVersion: v5.34.0

clusters/cl01tl/helm/gatus/values.yaml

@@ -7,7 +7,7 @@ gatus:
     enabled: true
   image:
     repository: ghcr.io/twin/gatus
-    tag: v5.33.1
+    tag: v5.34.0
   annotations:
     reloader.stakater.com/auto: "true"
   service:
@@ -119,9 +119,6 @@ gatus:
         <<: *defaults
         conditions:
           - "[STATUS] == 401"
-      - name: jellyfin
-        url: https://jellyfin.alexlebens.net
-        <<: *defaults
       - name: overseerr
         url: https://overseerr.alexlebens.net
         <<: *defaults
@@ -131,6 +128,9 @@ gatus:
       - name: yamtrack
         url: https://yamtrack.alexlebens.net
         <<: *defaults
+      - name: jellyfin
+        url: https://jellyfin.alexlebens.net
+        <<: *defaults
       - name: tubearchivist
         url: https://tubearchivist.alexlebens.net
         <<: *defaults
@@ -170,6 +170,9 @@ gatus:
       - name: kiwix
         url: https://kiwix.alexlebens.net
         <<: *defaults
+      - name: excalidraw
+        url: https://excalidraw.alexlebens.net
+        <<: *defaults
       - name: gitea
         url: https://gitea.alexlebens.net
         <<: *defaults
@@ -203,9 +206,6 @@ gatus:
       - name: alertmanager
         url: https://alertmanager.alexlebens.net
         <<: *defaults
-      - name: tautulli
-        url: https://tautulli.alexlebens.net
-        <<: *defaults
       - name: jellystat
         url: https://jellystat.alexlebens.net
         <<: *defaults
@@ -310,23 +310,14 @@ gatus:
       - name: lidarr
         url: https://lidarr.alexlebens.net
         <<: *defaults
-      - name: lidatube
-        url: https://lidatube.alexlebens.net
-        <<: *defaults
-      - name: rayflume
-        url: https://rayflume.alexlebens.net
-        <<: *defaults
-      - name: soulsync
-        url: https://soulsync.alexlebens.net
+      - name: yubal-playlist
+        url: https://yubal-playlist.alexlebens.net
         <<: *defaults
       - name: slskd
         url: https://slskd.alexlebens.net
         <<: *defaults
-      - name: ephemera
-        url: https://ephemera.alexlebens.net
-        <<: *defaults
-      - name: listenarr
-        url: https://listenarr.alexlebens.net
+      - name: shelfmark
+        url: https://shelfmark.alexlebens.net
         <<: *defaults
       - name: www
         url: https://www.alexlebens.dev
@@ -424,7 +415,7 @@ postgres-18-cluster:
 volsync-target-data:
   pvcTarget: gatus
   local:
-    enabled: false
+    enabled: true
     schedule: 22 8 * * *
   remote:
     enabled: false

clusters/cl01tl/helm/generic-device-plugin/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: generic-device-plugin
   repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-  version: 0.20.10
-digest: sha256:bb4fe0fe2e95889b3fbf028e1eff923fcc71d8bd1bc7887eee08010cfb28f4db
-generated: "2025-12-27T23:08:24.592060217Z"
+  version: 0.20.17
+digest: sha256:878766891eee5b4cea332c5eae87fc7fbd7eb7bfea90b408c48666e840b81408
+generated: "2026-01-17T17:39:58.807224966Z"

clusters/cl01tl/helm/generic-device-plugin/Chart.yaml

@@ -15,6 +15,6 @@ maintainers:
 dependencies:
   - name: generic-device-plugin
     repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-    version: 0.20.10
+    version: 0.20.17
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 appVersion: 1.0.0

clusters/cl01tl/helm/gitea/Chart.lock

@@ -1,27 +1,27 @@
 dependencies:
 - name: gitea
   repository: https://dl.gitea.io/charts/
-  version: 12.4.0
+  version: 12.5.0
 - name: gitea-actions
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.2.1
 - name: meilisearch
   repository: https://meilisearch.github.io/meilisearch-kubernetes
-  version: 0.19.0
+  version: 0.24.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.4
+  version: 2.1.9
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.5
+  version: 7.5.0
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.5.0
+  version: 1.0.1
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.5.0
+  version: 1.0.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:c0ea42d1a2fc3712ac0481e0a40330704f0f2d1d290b7d30c36a536f0d0ee384
-generated: "2025-12-27T19:45:48.293310777Z"
+digest: sha256:af0644bab985faff3a41f28672fa60410aca6bc3759296d3218b23e286b36aaf
+generated: "2026-01-26T12:03:18.212345462Z"

clusters/cl01tl/helm/gitea/Chart.yaml

@@ -26,33 +26,33 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: gitea
-    version: 12.4.0
+    version: 12.5.0
     repository: https://dl.gitea.io/charts/
   - name: gitea-actions
     repository: oci://harbor.alexlebens.net/helm-charts
     version: 0.2.1
   - name: meilisearch
-    version: 0.19.0
+    version: 0.24.0
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.4
+    version: 2.1.9
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.5
+    version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     alias: redis-replication-gitea
-    version: 0.5.0
+    version: 1.0.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     alias: redis-replication-renovate
-    version: 0.5.0
+    version: 1.0.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-storage
     version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/gitea.png
-# renovate: github=go-gitea/gitea
-appVersion: 1.25.2
+# renovate: datasource=github-releases depName=go-gitea/gitea
+appVersion: 1.25.4

clusters/cl01tl/helm/gitea/values.yaml

@@ -1,10 +1,10 @@
 gitea:
   global:
     imageRegistry: registry.hub.docker.com
-  replicaCount: 1
+  replicaCount: 3
   image:
     repository: gitea/gitea
-    tag: 1.25.3
+    tag: 1.25.4
   service:
     http:
       type: ClusterIP
@@ -234,9 +234,6 @@ postgres-18-cluster:
       #   backupName: external
 redis-replication-gitea:
   replicationNameOverride: redis-replication-gitea
-  sentinelNameOverride: redis-sentinel-gitea
-  existingSecret:
-    enabled: false
   redisReplication:
     clusterSize: 3
     resources:
@@ -248,17 +245,12 @@ redis-replication-gitea:
         resources:
           requests:
             storage: 10Gi
-  redisSentinel:
-    enabled: true
-    clusterSize: 3
+    sentinel:
+      enabled: true
 redis-replication-renovate:
   replicationNameOverride: redis-replication-renovate
-  existingSecret:
-    enabled: false
   redisReplication:
     clusterSize: 1
-  redisSentinel:
-    enabled: false
 volsync-target-storage:
   pvcTarget: gitea-shared-storage
   moverSecurityContext:

clusters/cl01tl/helm/grafana-operator/Chart.lock

@@ -1,15 +1,15 @@
 dependencies:
 - name: grafana-operator
   repository: https://grafana.github.io/helm-charts
-  version: 5.21.3
+  version: 5.21.4
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.5
+  version: 7.5.0
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.5.0
+  version: 1.0.1
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.5.0
-digest: sha256:0406fb11b050135c944c17c658adfaee487a84b4394f17e72eefe2ac62a5726f
-generated: "2025-12-27T19:46:03.122087467Z"
+  version: 1.0.1
+digest: sha256:bee9dd7a31e5ca1772945764774a0195d8d63cb8b0874654b6d3aa846f4acc9e
+generated: "2026-01-23T00:37:10.262404661Z"

clusters/cl01tl/helm/grafana-operator/Chart.yaml

@@ -17,20 +17,20 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: grafana-operator
-    version: 5.21.3
+    version: 5.21.4
     repository: https://grafana.github.io/helm-charts
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.5
+    version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     alias: redis-replication-unified-alerting
-    version: 0.5.0
+    version: 1.0.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     alias: redis-replication-remote-cache
-    version: 0.5.0
+    version: 1.0.1
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/grafana.png
-# renovate: github=grafana/grafana-operator
-appVersion: v5.20.0
+# renovate: datasource=github-releases depName=grafana/grafana-operator
+appVersion: v5.21.4

clusters/cl01tl/helm/grafana-operator/values.yaml

@@ -56,19 +56,11 @@ postgres-18-cluster:
       #   backupName: external
 redis-replication-unified-alerting:
   replicationNameOverride: redis-replication-unified-alerting
-  sentinelNameOverride: redis-sentinel-unified-alerting
-  existingSecret:
-    enabled: false
   redisReplication:
     clusterSize: 3
-  redisSentinel:
-    enabled: true
-    clusterSize: 3
+    sentinel:
+      enabled: true
 redis-replication-remote-cache:
   replicationNameOverride: redis-replication-remote-cache
-  existingSecret:
-    enabled: false
   redisReplication:
     clusterSize: 1
-  redisSentinel:
-    enabled: false

clusters/cl01tl/helm/harbor/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: harbor
   repository: https://helm.goharbor.io
-  version: 1.18.1
+  version: 1.18.2
 - name: postgres-cluster
   repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
-  version: 7.4.5
+  version: 7.5.0
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.5.0
-digest: sha256:1292d7c6233b48f285cedb81e59299837d4ff6a6845d2bfb08b5753f2c8e3644
-generated: "2025-12-27T19:46:14.927696731Z"
+  version: 1.0.1
+digest: sha256:c07fcad50f390ab70c83beb4640842d0f1d68949a261c8006d596d8ded65a6de
+generated: "2026-01-26T10:03:51.019109245Z"

clusters/cl01tl/helm/harbor/Chart.yaml

@@ -17,15 +17,15 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: harbor
-    version: 1.18.1
+    version: 1.18.2
     repository: https://helm.goharbor.io
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.5
+    version: 7.5.0
     repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
   - name: redis-replication
-    version: 0.5.0
+    version: 1.0.1
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/harbor.png
-# renovate: github=goharbor/harbor
-appVersion: v2.14.1
+# renovate: datasource=github-releases depName=goharbor/harbor
+appVersion: v2.14.2

clusters/cl01tl/helm/harbor/values.yaml

@@ -41,12 +41,12 @@ harbor:
   portal:
     image:
       repository: goharbor/harbor-portal
-      tag: v2.14.1
+      tag: v2.14.2
     replicas: 2
   core:
     image:
       repository: goharbor/harbor-core
-      tag: v2.14.1
+      tag: v2.14.2
     replicas: 2
     existingSecret: harbor-secret
     secretName: harbor-secret
@@ -54,7 +54,7 @@ harbor:
   jobservice:
     image:
       repository: goharbor/harbor-jobservice
-      tag: v2.14.1
+      tag: v2.14.2
     replicas: 2
     jobLoggers:
       - stdout
@@ -63,11 +63,11 @@ harbor:
     registry:
       image:
         repository: goharbor/registry-photon
-        tag: v2.14.1
+        tag: v2.14.2
     controller:
       image:
         repository: goharbor/harbor-registryctl
-        tag: v2.14.1
+        tag: v2.14.2
     existingSecret: harbor-secret
     relativeurls: true
     credentials:
@@ -94,7 +94,7 @@ harbor:
   exporter:
     image:
       repository: goharbor/harbor-exporter
-      tag: v2.14.1
+      tag: v2.14.2
     replicas: 2
 postgres-18-cluster:
   mode: recovery
@@ -139,10 +139,7 @@ postgres-18-cluster:
       #   schedule: "0 0 0 * * *"
       #   backupName: external
 redis-replication:
-  existingSecret:
-    enabled: false
   redisReplication:
-    clusterSize: 1
-  redisSentinel:
-    enabled: false
     clusterSize: 3
+    sentinel:
+      enabled: true

clusters/cl01tl/helm/headlamp/Chart.yaml

@@ -17,5 +17,5 @@ dependencies:
     version: 0.39.0
     repository: https://kubernetes-sigs.github.io/headlamp/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/headlamp.png
-# renovate: github=headlamp-k8s/headlamp
-appVersion: 0.38.0
+# renovate: datasource=github-releases depName=headlamp-k8s/headlamp
+appVersion: v0.39.0

clusters/cl01tl/helm/home-assistant/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.5.0
+  version: 4.6.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:89ed20fc7ce6de8a9f4518ab4cc01e60072ccfe463e024748b382ac8d3fe6ffb
-generated: "2025-12-27T13:30:44.539834-06:00"
+digest: sha256:2ba5b6579e7296d663fd0dcb7dfb4fea67142413801f6fbc4125a0e731b45210
+generated: "2026-01-16T18:46:42.940648748Z"

clusters/cl01tl/helm/home-assistant/Chart.yaml

@@ -18,11 +18,11 @@ dependencies:
   - name: app-template
     alias: home-assistant
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.5.0
+    version: 4.6.2
   - name: volsync-target
     alias: volsync-target-config
     version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/home-assistant.png
-# renovate: github=home-assistant/core
-appVersion: 2025.12.2
+# renovate: datasource=github-releases depName=home-assistant/core
+appVersion: 2026.1.3

clusters/cl01tl/helm/home-assistant/values.yaml

@@ -9,7 +9,7 @@ home-assistant:
         main:
           image:
             repository: ghcr.io/home-assistant/home-assistant
-            tag: 2025.12.4
+            tag: 2026.1.3
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -21,7 +21,7 @@ home-assistant:
         code-server:
           image:
             repository: ghcr.io/linuxserver/code-server
-            tag: 4.107.0@sha256:e2ebedc28ab9e2ebe08093cf7e78515f97822956ff7cbac3d86fb0bd9e4b6bca
+            tag: 4.108.1@sha256:e9ed472ff25e12a5ee3562684d073b29e508e472ef54e3558e19bf4ff99ef858
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -133,7 +133,7 @@ volsync-target-config:
     fsGroup: 1000
     fsGroupChangePolicy: OnRootMismatch
   local:
-    enabled: false
+    enabled: true
     schedule: 24 8 * * *
   remote:
     enabled: false

clusters/cl01tl/helm/homepage-dev/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.5.0
+  version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.4
-digest: sha256:875983aebd62e7454d38c95fcf596bb6beae48db7445a68cae95ea588bbba5a9
-generated: "2025-12-17T19:06:26.918869-06:00"
+  version: 2.1.9
+digest: sha256:3dd7439a8874fcf8b12754907f187149287a2db04c5b9a595d32e6b64a5482db
+generated: "2026-01-17T17:31:46.477375094Z"

clusters/cl01tl/helm/homepage-dev/Chart.yaml

@@ -18,10 +18,10 @@ dependencies:
   - name: app-template
     alias: homepage
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.5.0
+    version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.4
+    version: 2.1.9
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/homepage.png
-# renovate: github=gethomepage/homepage
-appVersion: v1.8.0
+# renovate: datasource=github-releases depName=gethomepage/homepage
+appVersion: v1.9.0

clusters/cl01tl/helm/homepage-dev/values.yaml

@@ -11,7 +11,7 @@ homepage:
         main:
           image:
             repository: ghcr.io/gethomepage/homepage
-            tag: v1.8.0
+            tag: v1.9.0
             pullPolicy: IfNotPresent
           env:
             - name: HOMEPAGE_ALLOWED_HOSTS

clusters/cl01tl/helm/homepage/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.5.0
-digest: sha256:cbaccff17c1d80c4b9637a321d07f41960e66510edb83258254ebbbda08f82df
-generated: "2025-12-05T17:05:23.539922773Z"
+  version: 4.6.2
+digest: sha256:1f6cc724b7c88b5209d893b4b3c914e4064a5450e9bb6ca89ef5642199020f2b
+generated: "2026-01-16T18:47:06.186790637Z"

clusters/cl01tl/helm/homepage/Chart.yaml

@@ -16,7 +16,7 @@ dependencies:
   - name: app-template
     alias: homepage
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.5.0
+    version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/homepage.png
-# renovate: github=gethomepage/homepage
-appVersion: v1.8.0
+# renovate: datasource=github-releases depName=gethomepage/homepage
+appVersion: v1.9.0

clusters/cl01tl/helm/homepage/values.yaml

@@ -15,7 +15,7 @@ homepage:
         main:
           image:
             repository: ghcr.io/gethomepage/homepage
-            tag: v1.8.0
+            tag: v1.9.0
             pullPolicy: IfNotPresent
           env:
             - name: HOMEPAGE_ALLOWED_HOSTS
@@ -281,6 +281,12 @@ homepage:
                   href: https://kiwix.alexlebens.net
                   siteMonitor: http://kiwix.kiwix:80
                   statusStyle: dot
+              - Draw:
+                  icon: sh-excalidraw.webp
+                  description: Excalidraw
+                  href: https://excalidraw.alexlebens.net
+                  siteMonitor: http://excalidraw.excalidraw:80
+                  statusStyle: dot
           - Code:
               - Code (Public):
                   icon: sh-gitea.webp
@@ -388,12 +394,6 @@ homepage:
                         query: prometheus_tsdb_storage_blocks_bytes
                         format:
                           type: bytes
-              - Tautulli:
-                  icon: sh-tautulli.webp
-                  description: Plex Monitoring
-                  href: https://tautulli.alexlebens.net
-                  siteMonitor: http://tautulli.tautulli:80
-                  statusStyle: dot
               - Jellystat:
                   icon: sh-jellystat.webp
                   description: Jellyfin Monitoring
@@ -655,23 +655,11 @@ homepage:
                     url: http://lidarr.lidarr:80
                     key: {{ "{{HOMEPAGE_VAR_LIDARR_KEY}}" }}
                     fields: ["wanted", "queued", "artists"]
-              - RayFlume:
-                  icon: sh-youtubarr.webp
-                  description: Playlist to Lidarr Import
-                  href: https://rayflume.alexlebens.net
-                  siteMonitor: http://rayflume.rayflume:80
-                  statusStyle: dot
-              - LidaTube:
-                  icon: sh-lidatube.webp
-                  description: Searches for Music
-                  href: https://lidatube.alexlebens.net
-                  siteMonitor: http://lidatube.lidatube:80
-                  statusStyle: dot
-              - SoulSync:
-                  icon: sh-soulsync.webp
-                  description: Playlist Sync
-                  href: https://soulsync.alexlebens.net
-                  siteMonitor: http://soulsync.soulsync:80
+              - Yubal Playlist:
+                  icon: sh-yubal.webp
+                  description: Replicate Youtube playlist
+                  href: https://yubal-playlist.alexlebens.net
+                  siteMonitor: http://yubal-playlist.yubal-playlist:80
                   statusStyle: dot
               - slskd:
                   icon: sh-slskd.webp
@@ -680,17 +668,11 @@ homepage:
                   siteMonitor: http://slskd.slskd:5030
                   statusStyle: dot
           - Books:
-              - Ephemera:
-                  icon: sh-ephemera.webp
+              - Shelfmark:
+                  icon: sh-shelfmark.webp
                   description: Books
-                  href: https://ephemera.alexlebens.net
-                  siteMonitor: http://ephemera.ephemera:80
-                  statusStyle: dot
-              - Listenarr:
-                  icon: sh-audiobookrequest.webp
-                  description: Audiobooks
-                  href: https://listenarr.alexlebens.net
-                  siteMonitor: http://listenarr.listenarr:80
+                  href: https://shelfmark.alexlebens.net
+                  siteMonitor: http://shelfmark.shelfmark:80
                   statusStyle: dot
           - Other Homes:
               - Dev:

clusters/cl01tl/helm/huntarr/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.5.0
+  version: 4.6.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:f86c0c4efcba787557a71051409c43793c970244cfbb45b305a3bf612f64bff7
-generated: "2025-12-27T13:30:49.841027-06:00"
+digest: sha256:a3df74f75bbc4aa303a70031732c8727a19d516deb106996c035e30e8ef103c4
+generated: "2026-01-16T18:47:16.606690576Z"

clusters/cl01tl/helm/huntarr/Chart.yaml

@@ -16,11 +16,11 @@ dependencies:
   - name: app-template
     alias: huntarr
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.5.0
+    version: 4.6.2
   - name: volsync-target
     alias: volsync-target-config
     version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/huntarr.png
-# renovate: github=plexguide/Huntarr.io
-appVersion: 8.2.10
+# renovate: datasource=github-releases depName=plexguide/huntarr
+appVersion: 9.0.5

clusters/cl01tl/helm/huntarr/values.yaml

@@ -9,7 +9,7 @@ huntarr:
         main:
           image:
             repository: ghcr.io/plexguide/huntarr
-            tag: 8.2.10
+            tag: 9.0.1
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -61,7 +61,7 @@ huntarr:
 volsync-target-config:
   pvcTarget: huntarr-config
   local:
-    enabled: false
+    enabled: true
     schedule: 26 8 * * *
   remote:
     enabled: false

clusters/cl01tl/helm/immich/Chart.lock

@@ -1,15 +1,15 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.5.0
+  version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.5
+  version: 7.5.0
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.5.0
+  version: 1.0.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:1055a62dcf5b7e6f37ca3acc9cac14eac84b65961a165927ae0600a278701d84
-generated: "2025-12-27T19:46:28.071891757Z"
+digest: sha256:49d6ed0c3e8862d351bd905db5f349448d4bc7e6cef4b43372e1510dea204098
+generated: "2026-01-23T00:37:48.396577782Z"

clusters/cl01tl/helm/immich/Chart.yaml

@@ -17,18 +17,18 @@ dependencies:
   - name: app-template
     alias: immich
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.5.0
+    version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.5
+    version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
-    version: 0.5.0
+    version: 1.0.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data
     version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/immich.png
-# renovate: github=immich-app/immich
-appVersion: v2.3.1
+# renovate: datasource=github-releases depName=immich-app/immich
+appVersion: v2.5.0

clusters/cl01tl/helm/immich/values.yaml

@@ -9,7 +9,7 @@ immich:
         main:
           image:
             repository: ghcr.io/immich-app/immich-server
-            tag: v2.4.1
+            tag: v2.5.0
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -223,13 +223,10 @@ postgres-18-cluster:
       #   backupName: external
 
 redis-replication:
-  existingSecret:
-    enabled: false
   redisReplication:
-    clusterSize: 1
-  redisSentinel:
-    enabled: false
     clusterSize: 3
+    sentinel:
+      enabled: true
 volsync-target-data:
   pvcTarget: immich
   local: