chore(deps): update vault to v2

Merge pull request 'chore(deps): update searxng/searxng:latest docker digest to 9d797e9' (#6021 ) from renovate/unified-searxng into main
chore(deps): update searxng/searxng:latest docker digest to 9d797e9
2026-04-17 06:06:19 +00:00 · 2026-04-17 06:03:30 +00:00 · 2026-04-17 06:03:07 +00:00 · 2026-04-17 01:35:07 +00:00 · 2026-04-16 20:33:17 -05:00 · 2026-04-17 00:32:48 +00:00
11 changed files with 30 additions and 14 deletions
--- a/clusters/cl01tl/helm/garage/Chart.yaml
+++ b/clusters/cl01tl/helm/garage/Chart.yaml
@@ -21,4 +21,4 @@ dependencies:
    version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/garage.png
 # renovate: datasource=docker depName=dxflrs/garage
-appVersion: v2.2.0
+appVersion: v2.3.0
--- a/clusters/cl01tl/helm/garage/values.yaml
+++ b/clusters/cl01tl/helm/garage/values.yaml
@@ -50,7 +50,7 @@ garage:
        main:
          image:
            repository: dxflrs/garage
-            tag: v2.2.0@sha256:45a61ce3f7c9c24fc23d9ed2b09b27ed560ab87b34605d175d5c588f539c24e4
+            tag: v2.3.0@sha256:866bd13ed2038ba7e7190e840482bc27234c4afaf77be8cfa439ae088c1e4690
          envFrom:
            - secretRef:
                name: garage-token-secret
@@ -79,7 +79,7 @@ garage:
        main:
          image:
            repository: dxflrs/garage
-            tag: v2.2.0@sha256:45a61ce3f7c9c24fc23d9ed2b09b27ed560ab87b34605d175d5c588f539c24e4
+            tag: v2.3.0@sha256:866bd13ed2038ba7e7190e840482bc27234c4afaf77be8cfa439ae088c1e4690
          envFrom:
            - secretRef:
                name: garage-token-secret
--- a/clusters/cl01tl/helm/houndarr/Chart.yaml
+++ b/clusters/cl01tl/helm/houndarr/Chart.yaml
@@ -25,4 +25,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/houndarr.png
 # renovate: datasource=github-releases depName=av1155/houndarr
-appVersion: v1.7.0
+appVersion: v1.8.0
--- a/clusters/cl01tl/helm/houndarr/values.yaml
+++ b/clusters/cl01tl/helm/houndarr/values.yaml
@@ -8,7 +8,7 @@ houndarr:
        main:
          image:
            repository: ghcr.io/av1155/houndarr
-            tag: v1.7.0@sha256:8ae2a8b86497cbc54d11591c12220f3be3319039c2bdd0c8b041b2b7c2fd7943
+            tag: v1.8.0@sha256:6d213dadb625e0cebdd6e28358e2815f9ceccf133bb5469b6bc837cf1a70c9e2
          env:
            - name: TZ
              value: America/Chicago
--- a/clusters/cl01tl/helm/matrix-synapse/values.yaml
+++ b/clusters/cl01tl/helm/matrix-synapse/values.yaml
@@ -332,7 +332,7 @@ mautrix-whatsapp:
        main:
          image:
            repository: dock.mau.dev/mautrix/whatsapp
-            tag: v0.2603.0@sha256:b49009312361d9ea0d7090716fd09f2323f477b32bd119648c6ca2d558a3e236
+            tag: v0.2604.0@sha256:9f28c04c746af9fe8e93163489dae0f4191626e2ca02a9302df62afbeefc9eba
          resources:
            requests:
              cpu: 1m
--- a/clusters/cl01tl/helm/openbao/values.yaml
+++ b/clusters/cl01tl/helm/openbao/values.yaml
@@ -25,6 +25,15 @@ openbao:
            kind: Gateway
            name: traefik-gateway
            namespace: traefik
+      httpRoute:
+        enabled: true
+        hosts:
+          - bao.alexlebens.net
+        parentRefs:
+          - group: gateway.networking.k8s.io
+            kind: Gateway
+            name: traefik-gateway
+            namespace: traefik
    authDelegator:
      enabled: true
    livenessProbe:
@@ -68,6 +77,13 @@ openbao:
            }
          }

+          audit "file" "to-stdout" {
+            options {
+              file_path = "/openbao/audit/openbao_audit.log"
+              log_raw = "true"
+            }
+          }
+
          service_registration "kubernetes" {}

          telemetry {
@@ -125,7 +141,7 @@ openbao:
      s3Bucket: openbao-backups
      s3Uri: s3://openbao-backups
      s3ExpireDays: "30"
-      s3cmdExtraFlag: "-v"
+      s3cmdExtraFlag: "-v --no-ssl"
      baoAuthPath: kubernetes
      baoRole: bao-snapshot
 unseal:
--- a/clusters/cl01tl/helm/searxng/values.yaml
+++ b/clusters/cl01tl/helm/searxng/values.yaml
@@ -8,7 +8,7 @@ searxng:
        main:
          image:
            repository: searxng/searxng
-            tag: latest@sha256:222b4c11534e0bd9b5ed80081680094a1d663413cbe1d142e184515c4035fc23
+            tag: latest@sha256:9d797e94a9e96bfe82a0b2c33d9de98b6518e756265ffe83f31845afbf3e5d98
          env:
            - name: SEARXNG_BASE_URL
              value: http://searxng-api.searxng:8080
@@ -36,7 +36,7 @@ searxng:
        main:
          image:
            repository: searxng/searxng
-            tag: latest@sha256:222b4c11534e0bd9b5ed80081680094a1d663413cbe1d142e184515c4035fc23
+            tag: latest@sha256:9d797e94a9e96bfe82a0b2c33d9de98b6518e756265ffe83f31845afbf3e5d98
          env:
            - name: SEARXNG_BASE_URL
              value: https://searxng.alexlebens.net/
--- a/clusters/cl01tl/helm/site-documentation/values.yaml
+++ b/clusters/cl01tl/helm/site-documentation/values.yaml
@@ -10,7 +10,7 @@ site-documentation:
        main:
          image:
            repository: harbor.alexlebens.net/images/site-documentation
-            tag: 0.25.0@sha256:1509b20e703617ce8e6fc78fa599a56c09be178541adc82da406632f9af15d97
+            tag: 0.26.0@sha256:fbd3167788a75a637aef0be6ef32bef685ce4af59f45e955cc6eb57ed8b1fd87
          resources:
            requests:
              cpu: 10m
--- a/clusters/cl01tl/helm/vault/Chart.yaml
+++ b/clusters/cl01tl/helm/vault/Chart.yaml
@@ -31,4 +31,4 @@ dependencies:
    version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/hashicorp-vault.png
 # renovate: datasource=github-releases depName=hashicorp/vault
-appVersion: 1.21.4
+appVersion: 2.0.0
--- a/clusters/cl01tl/helm/vault/values.yaml
+++ b/clusters/cl01tl/helm/vault/values.yaml
@@ -8,7 +8,7 @@ vault:
    enabled: true
    image:
      repository: hashicorp/vault
-      tag: 1.21.4@sha256:4e33b126a59c0c333b76fb4e894722462659a6bec7c48c9ee8cea56fccfd2569
+      tag: 2.0.0@sha256:e40c741ed95bb271425e3e6ca6c222d620cf8682f6f7a1b1e7c9d49d0aba484b
    updateStrategyType: RollingUpdate
    logLevel: debug
    logFormat: standard
@@ -111,7 +111,7 @@ snapshot:
        snapshot:
          image:
            repository: hashicorp/vault
-            tag: 1.21.4@sha256:4e33b126a59c0c333b76fb4e894722462659a6bec7c48c9ee8cea56fccfd2569
+            tag: 2.0.0@sha256:e40c741ed95bb271425e3e6ca6c222d620cf8682f6f7a1b1e7c9d49d0aba484b
          command:
            - /bin/ash
          args:
--- a/hosts/ps10rp/garage/compose.yaml
+++ b/hosts/ps10rp/garage/compose.yaml
@@ -39,7 +39,7 @@ services:
            - /dev/net/tun:/dev/net/tun

    garage:
-        image: dxflrs/garage:v2.2.0@sha256:45a61ce3f7c9c24fc23d9ed2b09b27ed560ab87b34605d175d5c588f539c24e4
+        image: dxflrs/garage:v2.3.0@sha256:866bd13ed2038ba7e7190e840482bc27234c4afaf77be8cfa439ae088c1e4690
        container_name: garage
        env_file:
            - .env
Author	SHA1	Message	Date
Renovate Bot	5c0e122027	chore(deps): update vault to v2 All checks were successful lint-test-helm / lint-helm (pull_request) Successful in 37s Details lint-test-helm / validate-kubeconform (pull_request) Successful in 51s Details	2026-04-17 06:06:19 +00:00
Renovate Bot	9716aab3c6	Merge pull request 'chore(deps): update searxng/searxng:latest docker digest to 9d797e9' (#6021 ) from renovate/unified-searxng into main All checks were successful lint-test-helm / lint-helm (push) Successful in 21s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 3m59s Details	2026-04-17 06:03:30 +00:00
Renovate Bot	6e58b89efb	chore(deps): update searxng/searxng:latest docker digest to 9d797e9 All checks were successful lint-test-helm / lint-helm (pull_request) Successful in 27s Details lint-test-helm / validate-kubeconform (pull_request) Successful in 20s Details render-manifests / render-manifests (pull_request) Successful in 1m8s Details	2026-04-17 06:03:07 +00:00
Alex Lebens	25db09f40e	Merge pull request 'feat: change audit' (#6018 ) from tmp/openbao-6 into main All checks were successful lint-test-helm / lint-helm (push) Successful in 21s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 2m57s Details Reviewed-on: #6018	2026-04-17 01:35:07 +00:00
Alex Lebens	fbcc18babb	feat: change audit All checks were successful lint-test-helm / lint-helm (pull_request) Successful in 23s Details lint-test-helm / validate-kubeconform (pull_request) Successful in 27s Details render-manifests / render-manifests (pull_request) Successful in 1m5s Details	2026-04-16 20:33:17 -05:00
Alex Lebens	51e4d0dfe8	Merge pull request 'feat: change flags' (#6016 ) from tmp/openbao-5 into main All checks were successful lint-test-helm / lint-helm (push) Successful in 26s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 2m7s Details Reviewed-on: #6016	2026-04-17 00:32:48 +00:00
Alex Lebens	5ceb85fff0	feat: change flags All checks were successful lint-test-helm / lint-helm (pull_request) Successful in 30s Details lint-test-helm / validate-kubeconform (pull_request) Successful in 30s Details render-manifests / render-manifests (pull_request) Successful in 1m7s Details	2026-04-16 19:31:05 -05:00
Alex Lebens	5dd6d5087f	Merge pull request 'feat: add audit to config' (#6015 ) from tmp/openbao-4 into main All checks were successful lint-test-helm / lint-helm (push) Successful in 1m4s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 2m51s Details Reviewed-on: #6015	2026-04-17 00:17:49 +00:00
Alex Lebens	eb2e076b60	feat: add audit to config	2026-04-17 00:17:49 +00:00
Alex Lebens	e5d49c29a6	Merge pull request 'feat: switch to httproute' (#6013 ) from tmp/openbao-3 into main All checks were successful lint-test-helm / lint-helm (push) Successful in 37s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 4m38s Details Reviewed-on: #6013	2026-04-16 23:58:48 +00:00
Alex Lebens	c703ad6f1b	feat: switch to httproute All checks were successful lint-test-helm / lint-helm (pull_request) Successful in 30s Details lint-test-helm / validate-kubeconform (pull_request) Successful in 27s Details render-manifests / render-manifests (pull_request) Successful in 1m12s Details	2026-04-16 18:55:03 -05:00
Alex Lebens	5692754466	Merge pull request 'chore(deps): update harbor.alexlebens.net/images/site-documentation docker tag to v0.26.0' (#6010 ) from renovate/unified-site-documentation into main All checks were successful lint-test-helm / lint-helm (push) Successful in 21s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 2m50s Details Reviewed-on: #6010	2026-04-16 22:07:30 +00:00
Renovate Bot	7199c265e7	chore(deps): update harbor.alexlebens.net/images/site-documentation docker tag to v0.26.0	2026-04-16 22:07:30 +00:00
Alex Lebens	35fa1ecb7e	Merge pull request 'chore(deps): update houndarr to v1.8.0' (#6011 ) from renovate/unified-houndarr into main Some checks failed lint-test-helm / lint-helm (push) Successful in 44s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Has been cancelled Details Reviewed-on: #6011	2026-04-16 22:05:36 +00:00
Renovate Bot	8504fe8f8b	chore(deps): update houndarr to v1.8.0 All checks were successful lint-test-helm / lint-helm (pull_request) Successful in 3m1s Details lint-test-helm / validate-kubeconform (pull_request) Successful in 25s Details render-manifests / render-manifests (pull_request) Successful in 1m29s Details	2026-04-16 21:25:28 +00:00
Alex Lebens	d0353a599d	Merge pull request 'chore(deps): update dxflrs/garage docker tag to v2.3.0' (#6007 ) from renovate/unified-garage into main All checks were successful lint-test-docker / lint-docker-compose (push) Successful in 6m31s Details lint-test-helm / lint-helm (push) Successful in 15m5s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 4m49s Details Reviewed-on: #6007	2026-04-16 21:19:21 +00:00
Renovate Bot	f38f9db7f1	chore(deps): update dxflrs/garage docker tag to v2.3.0 All checks were successful lint-test-docker / lint-docker-compose (pull_request) Successful in 43s Details lint-test-helm / lint-helm (pull_request) Successful in 1m38s Details lint-test-helm / validate-kubeconform (pull_request) Successful in 21s Details render-manifests / render-manifests (pull_request) Successful in 16m12s Details	2026-04-16 21:02:05 +00:00
Alex Lebens	2303acc664	Merge pull request 'chore(deps): update dock.mau.dev/mautrix/whatsapp docker tag to v0.2604.0' (#5995 ) from renovate/unified-whatsapp into main All checks were successful lint-test-helm / lint-helm (push) Successful in 30s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 3m19s Details Reviewed-on: #5995	2026-04-16 20:59:05 +00:00
Renovate Bot	c743c2160b	chore(deps): update dock.mau.dev/mautrix/whatsapp docker tag to v0.2604.0 All checks were successful lint-test-helm / lint-helm (pull_request) Successful in 33s Details lint-test-helm / validate-kubeconform (pull_request) Successful in 33s Details render-manifests / render-manifests (pull_request) Successful in 1m12s Details	2026-04-16 20:51:10 +00:00