Merge pull request 'chore(deps): update ghcr.io/renovatebot/renovate docker tag to v43.170.16' (#6784) from renovate/unified-renovate into main

Reviewed-on: #6645

.gitea/workflows/renovate.yaml

@@ -13,7 +13,7 @@ on:
 jobs:
   renovate:
     runs-on: ubuntu-js
-    container: ghcr.io/renovatebot/renovate:43.169.3@sha256:8545351921176f15250454ec6a634d97e6f2b4ee6182507226daadba13180334
+    container: ghcr.io/renovatebot/renovate:43.170.16@sha256:bf74fcafa911ea494120edad9bee9ad424cf667fda6a4575eb531deb207f4049
     steps:
       - name: Checkout
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6

clusters/cl01tl/helm/actual/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 5.0.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.1.1
+  version: 2.0.0
-digest: sha256:e472c85ad45c6071ccc3a23047927aba42814a931865736e40ad5c16d597ea53
+digest: sha256:9468b3406ab0d91bf44a1a940eca8648782f3519d0c683d21b33e16c258c9175
-generated: "2026-04-28T23:30:55.463292642Z"
+generated: "2026-05-07T21:23:05.56246-05:00"

clusters/cl01tl/helm/actual/Chart.yaml

@@ -17,11 +17,11 @@ dependencies:
   - name: app-template
     alias: actual
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 5.0.0
   - name: volsync-target
     alias: volsync-target-data
-    version: 1.1.1
+    version: 2.0.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/actual-budget.png
 # renovate: datasource=github-releases depName=actualbudget/actual
-appVersion: 26.5.0
+appVersion: 26.5.2

clusters/cl01tl/helm/actual/values.yaml

@@ -8,7 +8,7 @@ actual:
         main:
           image:
             repository: ghcr.io/actualbudget/actual
-            tag: 26.5.0@sha256:b733ae30c70a66dc4d03577526e53575a0c04eab4f3ab6ace30934776251058c
+            tag: 26.5.2@sha256:1aeeb3985db55556e716dec25e08f6ce09308c2571b65cddbc6746ee6d5e0d45
           env:
             - name: ACTUAL_PORT
               value: 5006
@@ -75,7 +75,7 @@ volsync-target-data:
     schedule: 0 8 * * *
   remote:
     enabled: true
-    schedule: 0 9 * * *
+    schedule: 0 10 * * 0
   external:
     enabled: true
-    schedule: 0 10 * * *
+    schedule: 0 9 * * 0

clusters/cl01tl/helm/argocd/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: argo-cd
   repository: https://argoproj.github.io/argo-helm
-  version: 9.5.11
+  version: 9.5.13
-digest: sha256:78e2094dde7b3d0326da14640dbc012ce6e6e899f23270dc4d9a13b168c1ef89
+digest: sha256:4b54dedfc74732ff96b509ae0454e8e7df9466c7ede3c67bab9afbae6a2a0a21
-generated: "2026-05-02T00:45:16.287556363Z"
+generated: "2026-05-08T20:45:26.802180802Z"

clusters/cl01tl/helm/argocd/Chart.yaml

@@ -13,7 +13,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: argo-cd
-    version: 9.5.12
+    version: 9.5.13
     repository: https://argoproj.github.io/argo-helm
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 # renovate: datasource=github-releases depName=argoproj/argo-cd

clusters/cl01tl/helm/argocd/values.yaml

@@ -103,7 +103,7 @@ argo-cd:
       enabled: true
       image:
         repository: haproxy
-        tag: 3.3.8-alpine@sha256:10690acb357180d5214c6fce59e2cefded6cc72b0f7e3febb323fea95b27e349
+        tag: 3.3.9-alpine@sha256:9d05c0d68ede409faf4855a8f40d7bfc54833a83bfd02d9344d09b5d27f79155
       resources:
         requests:
           cpu: 5m

clusters/cl01tl/helm/audiobookshelf/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 5.0.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.1.1
+  version: 2.0.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.1.1
+  version: 2.0.0
-digest: sha256:2275b211b02253019e5830e0258f936f1494380cc50cea03bc31d75281365dcc
+digest: sha256:57c3cc8da25c1dfc8684c5f20f804ce4642abee25cb317097ce6bd17f8bb0504
-generated: "2026-04-28T17:54:10.288277-05:00"
+generated: "2026-05-07T21:23:15.021738-05:00"

clusters/cl01tl/helm/audiobookshelf/Chart.yaml

@@ -21,14 +21,14 @@ dependencies:
   - name: app-template
     alias: audiobookshelf
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 5.0.0
   - name: volsync-target
     alias: volsync-target-config
-    version: 1.1.1
+    version: 2.0.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-metadata
-    version: 1.1.1
+    version: 2.0.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/audiobookshelf.png
 # renovate: datasource=github-releases depName=advplyr/audiobookshelf

clusters/cl01tl/helm/audiobookshelf/values.yaml

@@ -129,21 +129,21 @@ volsync-target-config:
   pvcTarget: audiobookshelf-config
   local:
     enabled: true
-    schedule: 2 8 * * *
+    schedule: 5 8 * * *
   remote:
     enabled: true
-    schedule: 2 9 * * *
+    schedule: 5 10 * * 0
   external:
     enabled: true
-    schedule: 2 10 * * *
+    schedule: 5 9 * * 0
 volsync-target-metadata:
   pvcTarget: audiobookshelf-metadata
   local:
     enabled: true
-    schedule: 4 8 * * *
+    schedule: 10 8 * * *
   remote:
     enabled: true
-    schedule: 4 9 * * *
+    schedule: 10 10 * * 0
   external:
     enabled: true
-    schedule: 4 10 * * *
+    schedule: 10 9 * * 0

clusters/cl01tl/helm/authentik/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 2026.2.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.6.0
+  version: 3.2.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.12.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
+  version: 0.8.0
-digest: sha256:808a2347fadb6a48800c0f7355c422c9ed2ce9f7d1ca3b7d64d62574be98e1f8
+digest: sha256:340c981f2958295a952b124bc2f14f6d655901dd3e32f90dc9cefe1685195cff
-generated: "2026-05-02T01:46:08.112423002Z"
+generated: "2026-05-08T22:56:30.727245582Z"

clusters/cl01tl/helm/authentik/Chart.yaml

@@ -22,14 +22,14 @@ dependencies:
     repository: https://charts.goauthentik.io/
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.6.0
+    version: 3.2.2
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.12.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
-    version: 0.7.0
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/authentik.png
 # renovate: datasource=github-releases depName=goauthentik/authentik

clusters/cl01tl/helm/backrest/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 5.0.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.1.1
+  version: 2.0.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.1.1
+  version: 2.0.0
-digest: sha256:82e85dc79199cc8b75dde412d595621817b3fa2c073c131162d0079a0b63f369
+digest: sha256:440dd48f7cb11c3f84c4543fd51dedeea511b29a96571cefdf3d42ddb988554f
-generated: "2026-04-28T23:31:05.864191451Z"
+generated: "2026-05-08T20:52:47.164685-05:00"

clusters/cl01tl/helm/backrest/Chart.yaml

@@ -17,14 +17,14 @@ dependencies:
   - name: app-template
     alias: backrest
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 5.0.0
   - name: volsync-target
     alias: volsync-target-config
-    version: 1.1.1
+    version: 2.0.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data
-    version: 1.1.1
+    version: 2.0.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/backrest.png
 # renovate: datasource=github-releases depName=garethgeorge/backrest

clusters/cl01tl/helm/backrest/values.yaml

@@ -115,21 +115,21 @@ volsync-target-data:
   pvcTarget: backrest-data
   local:
     enabled: true
-    schedule: 6 8 * * *
+    schedule: 15 8 * * *
   remote:
     enabled: true
-    schedule: 6 9 * * *
+    schedule: 15 10 * * 0
   external:
     enabled: true
-    schedule: 6 10 * * *
+    schedule: 15 9 * * 0
 volsync-target-config:
   pvcTarget: backrest-config
   local:
     enabled: true
-    schedule: 8 8 * * *
+    schedule: 20 8 * * *
   remote:
     enabled: true
-    schedule: 8 9 * * *
+    schedule: 20 10 * * 0
   external:
     enabled: true
-    schedule: 8 10 * * *
+    schedule: 20 9 * * 0

clusters/cl01tl/helm/bazarr/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 5.0.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.1.1
+  version: 2.0.0
-digest: sha256:9228c387a1b50545d8b348c94ae55b17952d32652ca48d0329c65f4ee651706e
+digest: sha256:a792d16034f5d4f2a94833480ba8700366c9b64d50443934e15033c349a28e81
-generated: "2026-04-28T23:31:15.743170757Z"
+generated: "2026-05-08T20:52:50.463541-05:00"

clusters/cl01tl/helm/bazarr/Chart.yaml

@@ -21,10 +21,10 @@ dependencies:
   - name: app-template
     alias: bazarr
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 5.0.0
   - name: volsync-target
     alias: volsync-target-config
-    version: 1.1.1
+    version: 2.0.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/bazarr.png
 # renovate: datasource=github-releases depName=linuxserver/docker-bazarr

clusters/cl01tl/helm/bazarr/values.yaml

@@ -112,10 +112,10 @@ volsync-target-config:
     fsGroupChangePolicy: OnRootMismatch
   local:
     enabled: true
-    schedule: 10 8 * * *
+    schedule: 25 8 * * *
   remote:
     enabled: true
-    schedule: 10 9 * * *
+    schedule: 25 10 * * 0
   external:
     enabled: true
-    schedule: 10 10 * * *
+    schedule: 25 9 * * 0

clusters/cl01tl/helm/blocky/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 5.0.0
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
+  version: 0.8.0
-digest: sha256:855928ecd442b96a98bbeb9f957951cb70a8ab07e3c45ffd2ab33dcd5bf85a18
+digest: sha256:c1b8be978ecda2e495eb0a65c62f1794edd1de5c47e288abb8b53b65be4353ac
-generated: "2026-05-02T01:46:25.970760734Z"
+generated: "2026-05-08T02:30:25.905416473Z"

clusters/cl01tl/helm/blocky/Chart.yaml

@@ -17,10 +17,10 @@ dependencies:
   - name: app-template
     alias: blocky
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 5.0.0
   - name: valkey
     alias: valkey
-    version: 0.7.0
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/blocky.png
 # renovate: datasource=github-releases depName=0xerr0r/blocky

clusters/cl01tl/helm/cloudnative-pg/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 0.6.0
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
+  version: 0.11.3
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
+  version: 0.11.3
-digest: sha256:756a06f08b0e8b888049195e02136115f3c3b09dabfb01c934934c9053cfb40b
+digest: sha256:3f9cc2b51d4f30e63162b06d886415b78e37945946f8e6db642b1e94f9a917a0
-generated: "2026-05-07T01:19:41.214483969Z"
+generated: "2026-05-09T02:54:37.702578041Z"

clusters/cl01tl/helm/cloudnative-pg/Chart.yaml

@@ -26,11 +26,11 @@ dependencies:
   - name: rclone-bucket
     alias: rclone-postgres-backups-remote
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.7.0
+    version: 0.11.3
   - name: rclone-bucket
     alias: rclone-postgres-backups-external
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.7.0
+    version: 0.11.3
 icon: https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg.github.io/refs/heads/main/assets/images/hero_image.png
 # renovate: datasource=github-releases depName=cloudnative-pg/cloudnative-pg
-appVersion: 1.29.0
+appVersion: 1.29.1

clusters/cl01tl/helm/dawarich/Chart.lock

@@ -1,21 +1,21 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 5.0.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.12.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
+  version: 0.8.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.1.1
+  version: 2.0.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.1.1
+  version: 2.0.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.1.1
+  version: 2.0.0
-digest: sha256:3cd2af21091719533fb337241480c613ab14b3cb5820af6e386936ddf4243c14
+digest: sha256:0d0edd3f24d5ae14aa81d31cea6ea065527e4220644235d479b7b079ac5484d8
-generated: "2026-05-02T01:46:38.13080627Z"
+generated: "2026-05-08T20:53:11.730706-05:00"

clusters/cl01tl/helm/dawarich/Chart.yaml

@@ -19,26 +19,26 @@ dependencies:
   - name: app-template
     alias: dawarich
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 5.0.0
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.12.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
-    version: 0.7.0
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-storage
-    version: 1.1.1
+    version: 2.0.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-public
-    version: 1.1.1
+    version: 2.0.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-watched
-    version: 1.1.1
+    version: 2.0.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/dawarich.png
 # renovate: datasource=github-releases depName=Freika/dawarich

clusters/cl01tl/helm/dawarich/values.yaml

@@ -347,32 +347,32 @@ volsync-target-storage:
   pvcTarget: dawarich-storage
   local:
     enabled: true
-    schedule: 6 8 * * *
+    schedule: 30 8 * * *
   remote:
     enabled: true
-    schedule: 6 9 * * *
+    schedule: 30 10 * * 0
   external:
     enabled: true
-    schedule: 6 10 * * *
+    schedule: 30 9 * * 0
 volsync-target-public:
   pvcTarget: dawarich-public
   local:
     enabled: true
-    schedule: 8 8 * * *
+    schedule: 35 8 * * *
   remote:
     enabled: true
-    schedule: 8 9 * * *
+    schedule: 35 10 * * 0
   external:
     enabled: true
-    schedule: 8 10 * * *
+    schedule: 35 9 * * 0
 volsync-target-watched:
   pvcTarget: dawarich-watched
   local:
     enabled: true
-    schedule: 8 8 * * *
+    schedule: 40 8 * * *
   remote:
     enabled: true
-    schedule: 8 9 * * *
+    schedule: 40 10 * * 0
   external:
     enabled: true
-    schedule: 8 10 * * *
+    schedule: 40 9 * * 0

clusters/cl01tl/helm/directus/Chart.lock

@@ -1,18 +1,18 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 5.0.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.12.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
+  version: 0.8.0
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
+  version: 0.11.3
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
+  version: 0.11.3
-digest: sha256:5be9eefefbda2ebe4b33dd0e0684f3688781de408bb666113e3b44e6e6b606dc
+digest: sha256:6051301e1205014989b92b460b771fb45418199a52f575fc3bd984796e7c7a82
-generated: "2026-05-07T15:08:44.150931-05:00"
+generated: "2026-05-09T02:54:59.609475776Z"

clusters/cl01tl/helm/directus/Chart.yaml

@@ -19,23 +19,23 @@ dependencies:
   - name: app-template
     alias: directus
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 5.0.0
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.12.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
-    version: 0.7.0
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: rclone-bucket
     alias: rclone-directus-assets-remote
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.7.0
+    version: 0.11.3
   - name: rclone-bucket
     alias: rclone-directus-assets-external
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.7.0
+    version: 0.11.3
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/directus.png
 # renovate: datasource=github-releases depName=directus/directus
 appVersion: 11.17.4

clusters/cl01tl/helm/element-web/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 1.4.36
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.6.0
+  version: 3.2.2
-digest: sha256:36b3f340ee46f20961fdaac41724528c6c3d4b34bf26d97779da7e33087250a1
+digest: sha256:a30fa9f1c69652d0ea4c2e12cba7a21df544e60c20d25c88e66f6f3de3e1ab83
-generated: "2026-05-03T00:56:23.054212477Z"
+generated: "2026-05-08T22:56:45.533196593Z"

clusters/cl01tl/helm/element-web/Chart.yaml

@@ -19,7 +19,7 @@ dependencies:
     repository: https://ananace.gitlab.io/charts
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.6.0
+    version: 3.2.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/element.png
 # renovate: datasource=github-releases depName=element-hq/element-web
 appVersion: v1.12.17

clusters/cl01tl/helm/eraser/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 1.4.1
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 5.0.0
-digest: sha256:8414813d3d9d195b16ef7ebf814f7095a16413f4b0e579fcb37738000624f68c
+digest: sha256:b510fa700aade3c4ff5d8cacd8099c6f52d958aff97d436d4fe63abde2200439
-generated: "2026-04-08T21:39:05.689756-05:00"
+generated: "2026-05-07T20:44:14.408868308Z"

clusters/cl01tl/helm/eraser/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
   - name: app-template
     alias: eraser-metrics
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 5.0.0
 icon: https://raw.githubusercontent.com/eraser-dev/eraser/refs/heads/main/images/eraser-logo-color-1c.png
 # renovate: datasource=github-releases depName=eraser-dev/eraser
 appVersion: v1.4.1

clusters/cl01tl/helm/eraser/templates/namespace.yaml

@@ -0,0 +1,10 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: {{ .Release.Namespace }}
+    {{- include "custom.labels" . | nindent 4 }}
+    pod-security.kubernetes.io/audit: privileged
+    pod-security.kubernetes.io/enforce: privileged
+    pod-security.kubernetes.io/warn: privileged

clusters/cl01tl/helm/eraser/values.yaml

@@ -44,6 +44,8 @@ eraser-metrics:
       type: deployment
       replicas: 1
       strategy: Recreate
+      serviceAccount:
+        name: eraser-metrics
       containers:
         main:
           image:
@@ -83,6 +85,9 @@ eraser-metrics:
                   - otlp
                 exporters:
                   - prometheus
+  serviceAccount:
+    eraser:
+      enabled: true
   service:
     main:
       controller: main

clusters/cl01tl/helm/excalidraw/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 5.0.0
-digest: sha256:e05d84dd266b8b456a8bc7f9a2bb3ab01f4ac926efd1a58cf405b0cdab343d3f
+digest: sha256:297d4f45c64ccbaac66c103774e97bacde3f249cab40afef06c0c1106b62ab79
-generated: "2026-01-17T18:27:08.062835-06:00"
+generated: "2026-05-07T20:44:26.213030206Z"

clusters/cl01tl/helm/excalidraw/Chart.yaml

@@ -16,7 +16,7 @@ dependencies:
   - name: app-template
     alias: excalidraw
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 5.0.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/excalidraw.png
 # renovate: datasource=github-releases depName=excalidraw/excalidraw
 appVersion: v0.18.1

clusters/cl01tl/helm/foldergram/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 5.0.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.6.0
+  version: 3.2.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.1.1
+  version: 2.0.0
-digest: sha256:942224d5a91527ca20a46363d9c5b165643b11df043c119a315f94931e9e4975
+digest: sha256:2ad0cb505a0ad6dcfcc34aa7ac3bf675669983caa71dfee3f3a0868dfd5917c8
-generated: "2026-04-28T23:31:37.471509638Z"
+generated: "2026-05-08T20:53:44.939991-05:00"

clusters/cl01tl/helm/foldergram/Chart.yaml

@@ -18,13 +18,13 @@ dependencies:
   - name: app-template
     alias: foldergram
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 5.0.0
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.6.0
+    version: 3.2.2
   - name: volsync-target
     alias: volsync-target-db
-    version: 1.1.1
+    version: 2.0.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://raw.githubusercontent.com/foldergram/foldergram/refs/heads/main/client/public/icon-512.png
 # renovate: datasource=github-releases depName=foldergram/foldergram

clusters/cl01tl/helm/foldergram/values.yaml

@@ -87,10 +87,10 @@ volsync-target-db:
   pvcTarget: foldergram-db
   local:
     enabled: true
-    schedule: 46 11 * * *
+    schedule: 0 8 * * *
   remote:
     enabled: true
-    schedule: 46 12 * * *
+    schedule: 0 10 * * 1
   external:
     enabled: true
-    schedule: 46 13 * * *
+    schedule: 0 9 * * 1

clusters/cl01tl/helm/freshrss/Chart.lock

@@ -1,15 +1,15 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 5.0.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.6.0
+  version: 3.2.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.12.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.1.1
+  version: 2.0.0
-digest: sha256:6b2bae691798ed86c9549dfce0c455015533f00fff92363b58bce61201fbfc8d
+digest: sha256:1ad2ebba1ab013fb1eb7301517787ffd7841ed3e5b464da65283917bb9f18d94
-generated: "2026-04-28T23:31:47.227478798Z"
+generated: "2026-05-08T20:53:48.242974-05:00"

clusters/cl01tl/helm/freshrss/Chart.yaml

@@ -19,17 +19,17 @@ dependencies:
   - name: app-template
     alias: freshrss
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 5.0.0
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.6.0
+    version: 3.2.2
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.12.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data
-    version: 1.1.1
+    version: 2.0.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/freshrss.png
 # renovate: datasource=github-releases depName=FreshRSS/FreshRSS

clusters/cl01tl/helm/freshrss/values.yaml

@@ -126,10 +126,10 @@ volsync-target-data:
     fsGroupChangePolicy: OnRootMismatch
   local:
     enabled: true
-    schedule: 18 8 * * *
+    schedule: 5 8 * * *
   remote:
     enabled: true
-    schedule: 18 9 * * *
+    schedule: 5 10 * * 1
   external:
     enabled: true
-    schedule: 18 10 * * *
+    schedule: 5 9 * * 1

clusters/cl01tl/helm/garage/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 5.0.0
-digest: sha256:86536c14fa61870a64540b77f65afae8f4308e41a66eefae7fe85b83bf0df30e
+digest: sha256:925129100b32d9daf71142dc3fc42914cc26d40581a523c574c81ec79e2a0fc6
-generated: "2026-01-16T18:46:33.321938614Z"
+generated: "2026-05-07T20:44:57.951189479Z"

clusters/cl01tl/helm/garage/Chart.yaml

@@ -18,7 +18,7 @@ dependencies:
   - name: app-template
     alias: garage
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 5.0.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/garage.png
 # renovate: datasource=docker depName=dxflrs/garage
 appVersion: v2.3.0

clusters/cl01tl/helm/gatus/Chart.lock

@@ -7,6 +7,6 @@ dependencies:
   version: 7.12.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.1.1
+  version: 2.0.0
-digest: sha256:883863a9121ecbd519b19c6ffcfbaf7df0f7273b0877d303ed8922ba07f79c4b
+digest: sha256:25d95b64934fb0fe59914f82b752de38979929342c0a8dad1be77e4a1b2ed93f
-generated: "2026-04-28T23:31:56.941778354Z"
+generated: "2026-05-08T20:53:54.376296-05:00"

clusters/cl01tl/helm/gatus/Chart.yaml

@@ -24,7 +24,7 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data
-    version: 1.1.1
+    version: 2.0.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/gatus.png
 # renovate: datasource=github-releases depName=TwiN/gatus

clusters/cl01tl/helm/gatus/values.yaml

@@ -412,10 +412,10 @@ volsync-target-data:
   pvcTarget: gatus
   local:
     enabled: true
-    schedule: 20 8 * * *
+    schedule: 15 8 * * *
   remote:
     enabled: true
-    schedule: 20 9 * * *
+    schedule: 15 10 * * 1
   external:
     enabled: true
-    schedule: 20 10 * * *
+    schedule: 15 9 * * 1

clusters/cl01tl/helm/generic-device-plugin/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: generic-device-plugin
   repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-  version: 0.20.33
+  version: 0.21.2
-digest: sha256:c08407bfa5509e7805760023be163f2597ff41af1183a9b258413230e907d830
+digest: sha256:711b3c3b3433e0358609b98a2fedad17fea5ecb34d07c18a61393756b03f2cb5
-generated: "2026-05-07T19:57:30.083273789Z"
+generated: "2026-05-08T22:23:52.971515743Z"

clusters/cl01tl/helm/generic-device-plugin/Chart.yaml

@@ -14,6 +14,6 @@ maintainers:
 dependencies:
   - name: generic-device-plugin
     repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-    version: 0.20.33
+    version: 0.21.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 appVersion: 1.0.0

clusters/cl01tl/helm/gitea/Chart.lock

@@ -10,18 +10,18 @@ dependencies:
   version: 0.32.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.6.0
+  version: 3.2.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.12.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
+  version: 0.8.0
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
+  version: 0.8.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.1.1
+  version: 2.0.0
-digest: sha256:511ffcd0b9ab17ff7c9dff6fc72a2ef802a51a14a4f03e416acee40fa0d1f12a
+digest: sha256:9041a1e7404b01fa42825616a239d886aebcd753528b8b2868ef125e042c9dde
-generated: "2026-05-02T01:47:05.386747243Z"
+generated: "2026-05-08T20:54:01.685912-05:00"

clusters/cl01tl/helm/gitea/Chart.yaml

@@ -37,22 +37,22 @@ dependencies:
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.6.0
+    version: 3.2.2
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.12.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey-gitea
-    version: 0.7.0
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey-renovate
-    version: 0.7.0
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-storage
-    version: 1.1.1
+    version: 2.0.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/gitea.png
 # renovate: datasource=github-releases depName=go-gitea/gitea

clusters/cl01tl/helm/gitea/values.yaml

@@ -212,7 +212,7 @@ gitea-actions:
       registry: docker.io
       repository: docker
       # renovate: datasource=docker depName=docker
-      tag: 29.4.1-dind@sha256:c77e5d7912f9b137cc67051fdc2991d8f5ae22c55ddf532bb836dcb693a04940
+      tag: 29.4.3-dind@sha256:685b91dca8eab7de1dce1c303dbb7a763e4082d6a60db10968adf3295fbd2495
       extraVolumeMounts:
         - name: docker-vol
           mountPath: /var/lib/docker

clusters/cl01tl/helm/grafana-operator/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 7.12.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
+  version: 0.8.0
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
+  version: 0.8.0
-digest: sha256:1abbac7c3dd999e08b60bc86d45bf4d5740c02a078d4ee7145c5379c274e93d3
+digest: sha256:a8553690c0fa8cbb9b6707388c3bcc11f2f38314d6512b1b9b2467f862cca4d9
-generated: "2026-05-02T01:47:25.480915936Z"
+generated: "2026-05-08T02:31:18.145858152Z"

clusters/cl01tl/helm/grafana-operator/Chart.yaml

@@ -24,11 +24,11 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey-unified-alerting
-    version: 0.7.0
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey-remote-cache
-    version: 0.7.0
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/grafana.png
 # renovate: datasource=github-releases depName=grafana/grafana-operator

clusters/cl01tl/helm/grafana-operator/templates/grafana-dashboard.yaml

@@ -195,6 +195,24 @@ spec:
   resyncPeriod: 6h
   url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/service/cert-manager.json
 
+---
+apiVersion: grafana.integreatly.org/v1beta1
+kind: GrafanaDashboard
+metadata:
+  name: grafana-dashboard-cloudflare-tunnels
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: grafana-dashboard-cloudflare-tunnels
+    {{- include "custom.labels" . | nindent 4 }}
+spec:
+  instanceSelector:
+    matchLabels:
+      app: grafana-main
+  contentCacheDuration: 6h
+  folderUID: grafana-folder-service
+  resyncPeriod: 6h
+  url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/service/cloudflare-tunnels.json
+
 ---
 apiVersion: grafana.integreatly.org/v1beta1
 kind: GrafanaDashboard
@@ -411,24 +429,6 @@ spec:
   resyncPeriod: 6h
   url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/service/unpoller.json
 
----
-apiVersion: grafana.integreatly.org/v1beta1
-kind: GrafanaDashboard
-metadata:
-  name: grafana-dashboard-version-checker-internal
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: grafana-dashboard-version-checker-internal
-    {{- include "custom.labels" . | nindent 4 }}
-spec:
-  instanceSelector:
-    matchLabels:
-      app: grafana-main
-  contentCacheDuration: 6h
-  folderUID: grafana-folder-service
-  resyncPeriod: 6h
-  url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/service/version-checker-internal.json
-
 ---
 apiVersion: grafana.integreatly.org/v1beta1
 kind: GrafanaDashboard
@@ -573,6 +573,24 @@ spec:
   resyncPeriod: 6h
   url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/platform/qbittorrent.json
 
+---
+apiVersion: grafana.integreatly.org/v1beta1
+kind: GrafanaDashboard
+metadata:
+  name: grafana-dashboard-rclone
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: grafana-dashboard-rclone
+    {{- include "custom.labels" . | nindent 4 }}
+spec:
+  instanceSelector:
+    matchLabels:
+      app: grafana-main
+  contentCacheDuration: 6h
+  folderUID: grafana-folder-platform
+  resyncPeriod: 6h
+  url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/platform/rclone.json
+
 ---
 apiVersion: grafana.integreatly.org/v1beta1
 kind: GrafanaDashboard

clusters/cl01tl/helm/grimmory/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 5.0.0
 - name: mariadb-cluster
   repository: https://helm.mariadb.com/mariadb-operator
   version: 26.3.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.1.1
+  version: 2.0.0
-digest: sha256:3e1a513297b39105174d3f1d6010ac85526de3d9cf6418ea724599b42e8c0cd9
+digest: sha256:27ac7e85baa400d8bf3ae2d7fa84bef1cb4f240043b34b6b6316d8fe4bf88851
-generated: "2026-04-28T23:32:22.706602876Z"
+generated: "2026-05-08T20:54:16.639097-05:00"

clusters/cl01tl/helm/grimmory/Chart.yaml

@@ -18,13 +18,13 @@ dependencies:
   - name: app-template
     alias: grimmory
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 5.0.0
   - name: mariadb-cluster
     version: 26.3.0
     repository: https://helm.mariadb.com/mariadb-operator
   - name: volsync-target
     alias: volsync-target-config
-    version: 1.1.1
+    version: 2.0.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/grimmory.png
 # renovate: datasource=github-releases depName=grimmory-tools/grimmory

clusters/cl01tl/helm/grimmory/values.yaml

@@ -220,10 +220,10 @@ volsync-target-config:
     fsGroupChangePolicy: OnRootMismatch
   local:
     enabled: true
-    schedule: 12 8 * * *
+    schedule: 20 8 * * *
   remote:
     enabled: true
-    schedule: 12 9 * * *
+    schedule: 20 10 * * 1
   external:
     enabled: true
-    schedule: 12 10 * * *
+    schedule: 20 9 * * 1

clusters/cl01tl/helm/harbor/Chart.lock

@@ -7,6 +7,6 @@ dependencies:
   version: 7.12.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
+  version: 0.8.0
-digest: sha256:d4582a89bf46e503bf83d266aca5effaeec2554808a9e84cd1460e47f895f3e0
+digest: sha256:4ef3c0544281466cf714f5c6410309d4e090463d7f9a5750cd954c520abb0a40
-generated: "2026-05-07T00:54:42.114366405Z"
+generated: "2026-05-08T02:31:31.873945824Z"

clusters/cl01tl/helm/harbor/Chart.yaml

@@ -24,8 +24,8 @@ dependencies:
     repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
   - name: valkey
     alias: valkey
-    version: 0.7.0
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/harbor.png
 # renovate: datasource=github-releases depName=goharbor/harbor
-appVersion: v2.15.0
+appVersion: v2.15.1

clusters/cl01tl/helm/home-assistant/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 5.0.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.1.1
+  version: 2.0.0
-digest: sha256:0c0dd41e2bd0102b956697b2171e223988042072fe61b7b979d4091e76fca9d4
+digest: sha256:89add90994b0d2fe2f54bd69d273fd3091f72171876f0e8c9d5921424a75eeb9
-generated: "2026-04-28T23:32:34.16634307Z"
+generated: "2026-05-08T20:54:29.67904-05:00"

clusters/cl01tl/helm/home-assistant/Chart.yaml

@@ -17,11 +17,11 @@ dependencies:
   - name: app-template
     alias: home-assistant
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 5.0.0
   - name: volsync-target
     alias: volsync-target-config
-    version: 1.1.1
+    version: 2.0.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/home-assistant.png
 # renovate: datasource=github-releases depName=home-assistant/core
-appVersion: 2026.5.0
+appVersion: 2026.5.1

clusters/cl01tl/helm/home-assistant/values.yaml

@@ -12,7 +12,7 @@ home-assistant:
         main:
           image:
             repository: ghcr.io/home-assistant/home-assistant
-            tag: 2026.5.0@sha256:8edcb16cff8158e87a3a2b48b3bcca05c30dcea0212eb6a2fe940b6d52ed216a
+            tag: 2026.5.1@sha256:d4fbec16196d5c8bedf32647f0ca7165f654d92a2e81f35a373508d3226cb867
           env:
             - name: TZ
               value: America/Chicago
@@ -121,10 +121,10 @@ volsync-target-config:
     fsGroupChangePolicy: OnRootMismatch
   local:
     enabled: true
-    schedule: 22 8 * * *
+    schedule: 25 8 * * *
   remote:
     enabled: true
-    schedule: 22 9 * * *
+    schedule: 25 10 * * 1
   external:
     enabled: true
-    schedule: 22 10 * * *
+    schedule: 25 9 * * 1

clusters/cl01tl/helm/homepage/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 5.0.0
-digest: sha256:1f6cc724b7c88b5209d893b4b3c914e4064a5450e9bb6ca89ef5642199020f2b
+digest: sha256:81785552a943df54d09164776a170a007573e38ab96b00872bb22030079076e9
-generated: "2026-01-16T18:47:06.186790637Z"
+generated: "2026-05-07T20:45:33.699577658Z"

clusters/cl01tl/helm/homepage/Chart.yaml

@@ -16,7 +16,7 @@ dependencies:
   - name: app-template
     alias: homepage
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 5.0.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/homepage.png
 # renovate: datasource=github-releases depName=gethomepage/homepage
-appVersion: v1.12.3
+appVersion: v1.13.0

clusters/cl01tl/helm/homepage/values.yaml

@@ -8,15 +8,13 @@ homepage:
       strategy: Recreate
       annotations:
         reloader.stakater.com/auto: "true"
-      serviceAccount:
-        name: homepage
       pod:
         automountServiceAccountToken: true
       containers:
         main:
           image:
             repository: ghcr.io/gethomepage/homepage
-            tag: v1.12.3@sha256:cc84f2f5eb3c7734353701ccbaa24ed02dacb0d119114e50e4251e2005f3990a
+            tag: v1.13.0@sha256:690ac1f79e33000c176c2a28229ed00b49b44781e8a63f280a8ece22c161f099
           env:
             - name: HOMEPAGE_ALLOWED_HOSTS
               value: home.alexlebens.net
@@ -27,10 +25,6 @@ homepage:
             requests:
               cpu: 1m
               memory: 128Mi
-  serviceAccount:
-    homepage:
-      enabled: true
-      staticToken: true
   configMaps:
     config:
       enabled: true
@@ -885,9 +879,9 @@ homepage:
               - Github:
                   - abbr: GH
                     href: https://github.com/alexlebens
-              - Digital Ocean:
+              - Backblaze:
-                  - abbr: DO
+                  - abbr: BB
-                    href: https://www.digitalocean.com/
+                    href: https://secure.backblaze.com
               - Cloudflare:
                   - abbr: CF
                     href: https://dash.cloudflare.com/b76e303258b84076ee01fd0f515c0768
@@ -897,9 +891,6 @@ homepage:
               - ProtonVPN:
                   - abbr: PV
                     href: https://account.protonvpn.com/
-              - AirVPN:
-                  - abbr: AV
-                    href: https://airvpn.org/
               - Unifi:
                   - abbr: UF
                     href: https://unifi.ui.com/

clusters/cl01tl/helm/houndarr/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 5.0.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.1.1
-digest: sha256:de21eea7c5550645f0f1208758c3a81c6e015b90eae728c0b9740ddfc3f26880
+digest: sha256:fd6ff9a15f699ed14d82f2fd80bcd648135de49e2a04d32ff42e17ffa019efc5
-generated: "2026-04-28T23:32:44.359353393Z"
+generated: "2026-05-07T20:45:43.485504217Z"

clusters/cl01tl/helm/houndarr/Chart.yaml

@@ -18,10 +18,10 @@ dependencies:
   - name: app-template
     alias: houndarr
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 5.0.0
   - name: volsync-target
     alias: volsync-target-data
-    version: 1.1.1
+    version: 2.0.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/houndarr.png
 # renovate: datasource=github-releases depName=av1155/houndarr

clusters/cl01tl/helm/houndarr/values.yaml

@@ -69,10 +69,10 @@ volsync-target-data:
     fsGroupChangePolicy: OnRootMismatch
   local:
     enabled: true
-    schedule: 40 11 * * *
+    schedule: 30 8 * * *
   remote:
     enabled: true
-    schedule: 40 12 * * *
+    schedule: 30 10 * * 1
   external:
     enabled: true
-    schedule: 40 14 * * *
+    schedule: 30 9 * * 1

clusters/cl01tl/helm/immich/Chart.lock

@@ -1,15 +1,15 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 5.0.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.12.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
+  version: 0.8.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.1.1
-digest: sha256:a0fdf72de4f4e2a475035e6ece26fe570e548895db02374a08fd4f3481c55dc0
+digest: sha256:54593b7d1b9c544acac44b853d249197a116d34af0222ff1356d20f3bd8d395b
-generated: "2026-05-02T01:47:54.093954603Z"
+generated: "2026-05-08T02:31:45.038219756Z"

clusters/cl01tl/helm/immich/Chart.yaml

@@ -18,18 +18,18 @@ dependencies:
   - name: app-template
     alias: immich
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 5.0.0
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.12.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
-    version: 0.7.0
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data
-    version: 1.1.1
+    version: 2.0.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/immich.png
 # renovate: datasource=github-releases depName=immich-app/immich

clusters/cl01tl/helm/immich/values.yaml

@@ -4,8 +4,8 @@ immich:
       type: deployment
       replicas: 1
       strategy: Recreate
-      serviceAccount:
+      pod:
-        name: immich
+        automountServiceAccountToken: true
       containers:
         main:
           image:
@@ -88,10 +88,6 @@ immich:
               gpu.intel.com/i915: 1
               cpu: 10m
               memory: 500Mi
-  serviceAccount:
-    immich:
-      enabled: true
-      staticToken: true
   service:
     main:
       controller: main
@@ -204,16 +200,16 @@ volsync-target-data:
   pvcTarget: immich
   local:
     enabled: true
-    schedule: 24 8 * * *
+    schedule: 35 8 * * *
     restic:
       cacheCapacity: 10Gi
   remote:
     enabled: true
-    schedule: 24 9 * * *
+    schedule: 35 10 * * 1
     restic:
       cacheCapacity: 10Gi
   external:
     enabled: true
-    schedule: 24 10 * * *
+    schedule: 35 9 * * 1
     restic:
       cacheCapacity: 10Gi

clusters/cl01tl/helm/isponsorblocktv/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 5.0.0
-digest: sha256:65da71c32b4576a11e590f059d97dae22137448cb71049258d018cf5b7bb4a92
+digest: sha256:61c0d967c3f1f6e12fc8effa4add37ba7b307f680280f8e5ff2cb772cfc73213
-generated: "2026-04-26T14:59:16.326539-05:00"
+generated: "2026-05-07T20:46:03.870794632Z"

clusters/cl01tl/helm/isponsorblocktv/Chart.yaml

@@ -16,7 +16,7 @@ dependencies:
   - name: app-template
     alias: isponsorblocktv
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 5.0.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/youtube.png
 # renovate: datasource=github-releases depName=dmunozv04/iSponsorBlockTV
 appVersion: v2.8.1

clusters/cl01tl/helm/isponsorblocktv/values.yaml

@@ -4,8 +4,8 @@ isponsorblocktv:
       type: deployment
       replicas: 1
       strategy: Recreate
-      serviceAccount:
+      pod:
-        name: isponsorblocktv
+        automountServiceAccountToken: true
       containers:
         main:
           image:
@@ -15,10 +15,6 @@ isponsorblocktv:
             requests:
               cpu: 1m
               memory: 20Mi
-  serviceAccount:
-    isponsorblocktv:
-      enabled: true
-      staticToken: true
   persistence:
     config:
       type: custom

clusters/cl01tl/helm/jellyfin/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 5.0.0
 - name: meilisearch
   repository: https://meilisearch.github.io/meilisearch-kubernetes
   version: 0.32.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.1.1
-digest: sha256:e087d85b352de607cecf84a09bec368f37dbb63bfcc8c5bc1ebfbe97de121231
+digest: sha256:6b056268814206f3f20cefbbc2738fe1c80d9779b9e7da93ded7182aad7b5314
-generated: "2026-04-28T23:33:06.05345494Z"
+generated: "2026-05-07T20:46:14.100864595Z"

clusters/cl01tl/helm/jellyfin/Chart.yaml

@@ -20,13 +20,13 @@ dependencies:
   - name: app-template
     alias: jellyfin
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 5.0.0
   - name: meilisearch
     version: 0.32.0
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: volsync-target
     alias: volsync-target-config
-    version: 1.1.1
+    version: 2.0.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/jellyfin.png
 # renovate: datasource=github-releases depName=jellyfin/jellyfin

clusters/cl01tl/helm/jellyfin/values.yaml

@@ -148,16 +148,16 @@ volsync-target-config:
   pvcTarget: jellyfin-config
   local:
     enabled: true
-    schedule: 26 8 * * *
+    schedule: 40 8 * * *
     restic:
       cacheCapacity: 10Gi
   remote:
     enabled: true
-    schedule: 26 9 * * *
+    schedule: 40 10 * * 1
     restic:
       cacheCapacity: 10Gi
   external:
     enabled: true
-    schedule: 26 10 * * *
+    schedule: 40 9 * * 1
     restic:
       cacheCapacity: 10Gi

clusters/cl01tl/helm/jellystat/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 5.0.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.12.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.1.1
-digest: sha256:ef0f5d679b6e46d3bbfb37f4b06cba7b8ca98955de2be961366b5b23feda884c
+digest: sha256:b0e37301973eb2307d95642e1b4949d7c65ae35a7aa9fc654141d7965cd0b9ef
-generated: "2026-04-28T23:33:17.913213442Z"
+generated: "2026-05-07T20:46:25.887979086Z"

clusters/cl01tl/helm/jellystat/Chart.yaml

@@ -18,7 +18,7 @@ dependencies:
   - name: app-template
     alias: jellystat
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 5.0.0
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.12.1

clusters/cl01tl/helm/karakeep/Chart.lock

@@ -1,21 +1,21 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 5.0.0
 - name: meilisearch
   repository: https://meilisearch.github.io/meilisearch-kubernetes
   version: 0.32.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.6.0
+  version: 3.2.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.1.1
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
+  version: 0.11.3
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
+  version: 0.11.3
-digest: sha256:be0234cbbed7e9cd59ceaa9f0c8f4478cbd572867a8766f45840ec6d79a6a6aa
+digest: sha256:959b0f0c6bd71c97029a88de39dd4f008e841a9bd36acc51b89b4598dddc6acc
-generated: "2026-05-07T15:09:58.731382-05:00"
+generated: "2026-05-09T02:55:21.329163624Z"

clusters/cl01tl/helm/karakeep/Chart.yaml

@@ -22,13 +22,13 @@ dependencies:
   - name: app-template
     alias: karakeep
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 5.0.0
   - name: meilisearch
     version: 0.32.0
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.6.0
+    version: 3.2.2
   - name: volsync-target
     alias: volsync-target-data
     version: 1.1.1
@@ -36,11 +36,11 @@ dependencies:
   - name: rclone-bucket
     alias: rclone-karakeep-assets-remote
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.7.0
+    version: 0.11.3
   - name: rclone-bucket
     alias: rclone-karakeep-assets-external
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.7.0
+    version: 0.11.3
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/karakeep.png
 # renovate: datasource=github-releases depName=karakeep-app/karakeep
-appVersion: 0.31.0
+appVersion: 0.32.0

clusters/cl01tl/helm/karakeep/values.yaml

@@ -8,7 +8,7 @@ karakeep:
         main:
           image:
             repository: ghcr.io/karakeep-app/karakeep
-            tag: 0.31.0@sha256:20754dbdafb11dfe288bbb1c2342a7855081b08ea069e86fcf2d4a2d945d3653
+            tag: 0.32.0@sha256:64d6a9bbf2d37b5c808cf06b5d87f1f1c7846fdd3844724145a9741aeb06fd31
           env:
             - name: DATA_DIR
               value: /data

clusters/cl01tl/helm/kiwix/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 5.0.0
-digest: sha256:aab81291201585c1169bd5d160768441b7c26670a78bcbefca6a781be0924576
+digest: sha256:c2ea7bdfa94d5489a0ace86b807949d3cfb0d436ce49a78bcbde0c6f1798608b
-generated: "2026-01-16T18:48:20.708363828Z"
+generated: "2026-05-07T20:46:50.166598682Z"

clusters/cl01tl/helm/kiwix/Chart.yaml

@@ -16,7 +16,7 @@ dependencies:
   - name: app-template
     alias: kiwix
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 5.0.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kiwix-dark.png
 # renovate: datasource=github-releases depName=kiwix/kiwix-tools
 appVersion: 3.8.2

clusters/cl01tl/helm/komodo/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 5.0.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.12.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.1.1
-digest: sha256:275833c68c02ccd34edaf4ccd38b901293c0a2e11e6ae3b7b2c8fdccf58d7b56
+digest: sha256:65b4d31895d55b8259d21be845762fb6f8d8a098f93d1e14bde5e60522a24441
-generated: "2026-04-28T23:33:42.286082953Z"
+generated: "2026-05-07T20:46:59.818064183Z"

clusters/cl01tl/helm/komodo/Chart.yaml

@@ -20,7 +20,7 @@ dependencies:
   - name: app-template
     alias: komodo
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 5.0.0
   - name: postgres-cluster
     alias: postgresql-17-fdb-cluster
     version: 7.12.1
@@ -31,4 +31,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/komodo.png
 # renovate: datasource=github-releases depName=moghtech/komodo
-appVersion: v2.1.2
+appVersion: v2.2.0

clusters/cl01tl/helm/komodo/values.yaml

@@ -8,7 +8,7 @@ komodo:
         main:
           image:
             repository: ghcr.io/moghtech/komodo-core
-            tag: 2.1.2@sha256:8a7dbba232e4e49797bb412be5f78207c89fcf22cc2727b38631ae30f7518a4c
+            tag: 2.2.0@sha256:833880ca8b1a6c1c133efb07e8633525bf63094b4faa72700cf52f60fd69e6c6
           env:
             - name: COMPOSE_LOGGING_DRIVER
               value: local

clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 28.0.1
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 5.0.0
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
+  version: 0.8.0
-digest: sha256:902e19ae8e5818d1ac4c30f804e616e8428b927358e4823ef6e373fdf655cba1
+digest: sha256:393093164e2cc0e94111c86181bcbfb4f605f9eeeb9a1fd1960ba5fc764902ee
-generated: "2026-05-02T01:48:08.598425992Z"
+generated: "2026-05-08T02:31:55.970087487Z"

clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml

@@ -28,10 +28,10 @@ dependencies:
   - name: app-template
     alias: ntfy-alertmanager
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 5.0.0
   - name: valkey
     alias: valkey
-    version: 0.7.0
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/prometheus.png
 # renovate: datasource=github-releases depName=prometheus-operator/prometheus-operator

clusters/cl01tl/helm/kube-prometheus-stack/values.yaml

@@ -121,6 +121,8 @@ ntfy-alertmanager:
       type: deployment
       replicas: 1
       strategy: Recreate
+      pod:
+        automountServiceAccountToken: true
       serviceAccount:
         name: ntfy-alertmanager
       containers:
@@ -128,10 +130,6 @@ ntfy-alertmanager:
           image:
             repository: xenrox/ntfy-alertmanager
             tag: 1.0.0@sha256:81788c7905774b7b0b2ed6833b2bc4826a90a42e4b738706edcedd5f489e7a73
-  serviceAccount:
-    ntfy-alertmanager:
-      enabled: true
-      staticToken: true
   service:
     main:
       controller: main

clusters/cl01tl/helm/kubelet-serving-cert-approver/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 5.0.0
-digest: sha256:c0c65eaac1dfcc33b70a59d12319dee96ccd28cdd9fb201cd091f1802b0b2892
+digest: sha256:f646d2de1a56914cc1b94a661a869e7f89579f0000bbc79078801b757925931a
-generated: "2026-01-16T18:48:53.976469964Z"
+generated: "2026-05-07T20:47:20.425067929Z"

clusters/cl01tl/helm/kubelet-serving-cert-approver/Chart.yaml

@@ -16,7 +16,7 @@ dependencies:
   - name: app-template
     alias: kubelet-serving-cert-approver
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 5.0.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 # renovate: datasource=github-releases depName=alex1989hu/kubelet-serving-cert-approver
 appVersion: 0.10.3

clusters/cl01tl/helm/kubelet-serving-cert-approver/values.yaml

@@ -29,8 +29,6 @@ kubelet-serving-cert-approver:
       type: deployment
       replicas: 1
       strategy: Recreate
-      serviceAccount:
-        name: kubelet-serving-cert-approver
       pod:
         automountServiceAccountToken: true
       containers:
@@ -57,10 +55,6 @@ kubelet-serving-cert-approver:
             privileged: false
             readOnlyRootFilesystem: true
             runAsNonRoot: true
-  serviceAccount:
-    kubelet-serving-cert-approver:
-      enabled: true
-      staticToken: true
   service:
     main:
       controller: main

clusters/cl01tl/helm/kubernetes-cloudflare-ddns/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 5.0.0
-digest: sha256:6cba91672ca98d62208b3ff7cb1b7ffaaf44140bb3a54196c80126a82a0d2430
+digest: sha256:f79a24fbe6769992af0f7c5034713b564f91208497da193265fbce5aac8fb637
-generated: "2026-01-16T18:49:04.125289391Z"
+generated: "2026-05-07T20:47:30.731469034Z"

clusters/cl01tl/helm/kubernetes-cloudflare-ddns/Chart.yaml

@@ -17,7 +17,7 @@ dependencies:
   - name: app-template
     alias: kubernetes-cloudflare-ddns
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 5.0.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/cloudflare.png
 # renovate: datasource=github-releases depName=kubitodev/kubernetes-cloudflare-ddns
 appVersion: v2.0.0

clusters/cl01tl/helm/languagetool/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 5.0.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.1.1
-digest: sha256:f37d15a563f128c99666136b1f361e81f3756af78321f7a9ac96b9ccf40aba0d
+digest: sha256:9f1dda1fed46c9ab91366860c9fae0cd3aea96e69b0c59076192da56ba1ba450
-generated: "2026-04-28T23:33:52.4031148Z"
+generated: "2026-05-07T20:47:41.192438777Z"

clusters/cl01tl/helm/languagetool/Chart.yaml

@@ -18,7 +18,7 @@ dependencies:
   - name: app-template
     alias: languagetool
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 5.0.0
   - name: volsync-target
     alias: volsync-target-data
     version: 1.1.1

clusters/cl01tl/helm/libation/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 5.0.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.1.1
-digest: sha256:f93fec3b053028a5a2398ee3a133031f348c77c7c544608b3cc26f4ac6b0723c
+digest: sha256:51eaf628acb021169bbad4243fdc24f27c5ffeddbeda080146149a5a3a89c851
-generated: "2026-04-28T23:34:02.933569166Z"
+generated: "2026-05-07T20:47:51.79683243Z"

clusters/cl01tl/helm/libation/Chart.yaml

@@ -19,7 +19,7 @@ dependencies:
   - name: app-template
     alias: libation
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 5.0.0
   - name: volsync-target
     alias: volsync-target-config
     version: 1.1.1

clusters/cl01tl/helm/libation/values.yaml

@@ -30,7 +30,7 @@ libation:
         main:
           image:
             repository: ubuntu
-            tag: resolute-20260413@sha256:5e275723f82c67e387ba9e3c24baa0abdcb268917f276a0561c97bef9450d0b4
+            tag: resolute-20260421@sha256:f3d28607ddd78734bb7f71f117f3c6706c666b8b76cbff7c9ff6e5718d46ff64
           command:
             - "sleep"
             - "infinity"