Update docker.io/postgres Docker tag to v18

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [loki](https://grafana.github.io/helm-charts) ([source](https://github.com/grafana/helm-charts)) | minor | `6.44.0` -> `6.46.0` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNTUuNCIsInVwZGF0ZWRJblZlciI6IjQyLjUuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiY2hhcnQiXX0=-->

Reviewed-on: #1930
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>

clusters/cl01tl/applications/booklore/templates/external-secret.yaml

@@ -81,10 +81,10 @@ spec:
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
-  name: booklore-mariadb-cluster-backup-secret
+  name: booklore-mariadb-cluster-backup-secret-external
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: booklore-mariadb-cluster-backup-secret
+    app.kubernetes.io/name: booklore-mariadb-cluster-backup-secret-external
     app.kubernetes.io/instance: {{ .Release.Name }}
     app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
@@ -92,17 +92,47 @@ spec:
     kind: ClusterSecretStore
     name: vault
   data:
-    - secretKey: access-key-id
+    - secretKey: access
       remoteRef:
         conversionStrategy: Default
         decodingStrategy: None
         key: /digital-ocean/home-infra/mariadb-backups
         metadataPolicy: None
         property: access
-    - secretKey: secret-access-key
+    - secretKey: secret
       remoteRef:
         conversionStrategy: Default
         decodingStrategy: None
         key: /digital-ocean/home-infra/mariadb-backups
         metadataPolicy: None
         property: secret
+
+---
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: booklore-mariadb-cluster-backup-secret-garage
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: booklore-mariadb-cluster-backup-secret-garage
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  data:
+    - secretKey: access
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/mariadb-backups
+        metadataPolicy: None
+        property: access
+    - secretKey: secret
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/mariadb-backups
+        metadataPolicy: None
+        property: secret

clusters/cl01tl/applications/booklore/values.yaml

@@ -15,7 +15,7 @@ booklore:
             - name: TZ
               value: America/Chicago
             - name: DATABASE_URL
-              value: jdbc:mariadb://booklore-mariadb-cluster-primary.mariadb:3306/booklore
+              value: jdbc:mariadb://booklore-mariadb-cluster-primary.booklore:3306/booklore
             - name: DATABASE_USERNAME
               value: booklore
             - name: DATABASE_PASSWORD
@@ -86,7 +86,7 @@ mariadb-cluster:
       passwordSecretKeyRef:
         name: booklore-database-secret
         key: password
-      host: "%"
+      host: '%'
       cleanupPolicy: Delete
       requeueInterval: 10h
       retryInterval: 30s
@@ -98,26 +98,48 @@ mariadb-cluster:
       table: "*"
       username: booklore
       grantOption: true
-      host: "%"
+      host: '%'
       cleanupPolicy: Delete
       requeueInterval: 10h
       retryInterval: 30s
-  backups:
-    - name: backup
+  physicalBackups:
+    - name: backup-external
       schedule:
-        cron: "0 0 * * *"
+        cron: "0 0 * * 0"
         suspend: false
+        immediate: true
       compression: gzip
-      maxRetention: 720h # 30 days
+      maxRetention: 720h
       storage:
         s3:
           bucket: mariadb-backups-b230a2f5aecf080a4b372c08
-          prefix: cl01tl
-          endpoint: https://nyc3.digitaloceanspaces.com
-          region:  us-east-1
+          prefix: cl01tl/booklore
+          endpoint: nyc3.digitaloceanspaces.com
+          region: us-east-1
           accessKeyIdSecretKeyRef:
-            name: booklore-mariadb-cluster-backup-secret
-            key: access-key-id
+            name: booklore-mariadb-cluster-backup-secret-external
+            key: access
           secretAccessKeySecretKeyRef:
-            name: booklore-mariadb-cluster-backup-secret
-            key: secret-access-key
+            name: booklore-mariadb-cluster-backup-secret-external
+            key: secret
+          tls:
+            enabled: true
+    - name: backup-garage
+      schedule:
+        cron: "0 0 * * *"
+        suspend: false
+        immediate: true
+      compression: gzip
+      maxRetention: 360h
+      storage:
+        s3:
+          bucket: mariadb-backups
+          prefix: cl01tl/booklore
+          endpoint: garage-main.garage:3900
+          region: us-east-1
+          accessKeyIdSecretKeyRef:
+            name: booklore-mariadb-cluster-backup-secret-garage
+            key: access
+          secretAccessKeySecretKeyRef:
+            name: booklore-mariadb-cluster-backup-secret-garage
+            key: secret

clusters/cl01tl/applications/calibre-web-automated/values.yaml

@@ -55,7 +55,7 @@ calibre-web-automated:
         bypass:
           image:
             repository: ghcr.io/sarperavci/cloudflarebypassforscraping
-            tag: latest@sha256:15675e4e5cb65c69de52edb491b1b82d76f815250745a0d4cebd91e5e53a87f8
+            tag: latest@sha256:f113570afd4924f10338890571a75e662d5d1b7deed7696ac40f7e063688eb48
             pullPolicy: IfNotPresent
           resources:
             requests:

clusters/cl01tl/applications/homepage/values.yaml

@@ -45,7 +45,7 @@ homepage:
           color: zinc
           background:
             image: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/background.jpg
-            brightness: 60
+            brightness: 50
           theme: dark
           disableCollapse: true
           layout:
@@ -693,13 +693,13 @@ homepage:
                   siteMonitor: http://ephemera.ephemera:80
                   statusStyle: dot
               - CWA Downloader:
-                  icon: sh-calibre.webp
+                  icon: sh-cwa-book-downloader.webp
                   description: Books
                   href: https://calibre-downloader.alexlebens.net
                   siteMonitor: http://calibre-web-automated-downloader.calibre-web-automated:8084
                   statusStyle: dot
               - Listenarr:
-                  icon: sh-listenarr.webp
+                  icon: sh-audiobookrequest.webp
                   description: Audiobooks
                   href: https://listenarr.alexlebens.net
                   siteMonitor: http://listenarr.listenarr:80

clusters/cl01tl/applications/listenarr/values.yaml

@@ -43,4 +43,4 @@ listenarr:
         main:
           main:
             - path: /data
-              readOnly: true
+              readOnly: false

clusters/cl01tl/applications/outline/values.yaml

@@ -9,7 +9,7 @@ outline:
         main:
           image:
             repository: outlinewiki/outline
-            tag: 1.0.1
+            tag: 1.1.0
             pullPolicy: IfNotPresent
           env:
             - name: NODE_ENV

clusters/cl01tl/applications/searxng/values.yaml

@@ -9,7 +9,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:d5a54dde3968851d6a15f394bd1d64e0ac5e440e6b21c73bddf215dfcd82fe16
+            tag: latest@sha256:91da34403fc1d2c7ac23d1459af87870d87810b7d50b0c6a4585ab78846cb534
             pullPolicy: IfNotPresent
           env:
             - name: SEARXNG_BASE_URL
@@ -43,7 +43,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:d5a54dde3968851d6a15f394bd1d64e0ac5e440e6b21c73bddf215dfcd82fe16
+            tag: latest@sha256:91da34403fc1d2c7ac23d1459af87870d87810b7d50b0c6a4585ab78846cb534
             pullPolicy: IfNotPresent
           env:
             - name: SEARXNG_BASE_URL

clusters/cl01tl/platform/ntfy/values.yaml

@@ -9,7 +9,7 @@ ntfy:
         main:
           image:
             repository: binwiederhier/ntfy
-            tag: v2.14.0
+            tag: v2.15.0
             pullPolicy: IfNotPresent
           args: ["serve"]
           env:

clusters/cl01tl/storage/whodb/values.yaml

@@ -8,7 +8,7 @@ whodb:
         main:
           image:
             repository: clidey/whodb
-            tag: 0.74.0
+            tag: 0.75.0
             pullPolicy: IfNotPresent
           env:
             - name: WHODB_OLLAMA_HOST

hosts/ps10rp/gitea/compose.yaml

@@ -19,7 +19,7 @@ services:
             - /dev/net/tun:/dev/net/tun
 
     postgresql:
-        image: docker.io/postgres:17.7-alpine3.21
+        image: docker.io/postgres:18.1-alpine3.21
         container_name: gitea-postgres
         env_file:
             - .env