Update php Docker tag to v8.5.2 (#3303)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| dock.mau.dev/mautrix/whatsapp | minor | `v0.2512.0` → `v0.2601.0` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi42OS4yIiwidXBkYXRlZEluVmVyIjoiNDIuNjkuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=-->

Reviewed-on: #3250
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>

clusters/cl01tl/helm/authentik/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 2025.12.1
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
+  version: 2.1.9
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.4.5
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.0.1
-digest: sha256:a473d3cc3e54c917f3d14c96f3de72e81940c82b3fbe6ce316e4d28a7bdcc56d
+digest: sha256:458e9967330768b68649da4af69773adba3aed1a04316b9e67ef19612381d4b9
-generated: "2026-01-16T18:05:21.607549312Z"
+generated: "2026-01-17T17:30:18.453482605Z"

clusters/cl01tl/helm/authentik/Chart.yaml

@@ -25,7 +25,7 @@ dependencies:
     repository: https://charts.goauthentik.io/
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.6
+    version: 2.1.9
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.4.5

clusters/cl01tl/helm/code-server/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
+  version: 2.1.9
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:c988504ea0627250cc060576beac292d3292b012cdcca615a4cbaaf5ee976f02
+digest: sha256:d243a4062bd69c3e02536dbc8f0da06f8607a373a772bf521fa16ae10df331b7
-generated: "2026-01-16T18:45:47.220901906Z"
+generated: "2026-01-17T17:30:30.693066904Z"

clusters/cl01tl/helm/code-server/Chart.yaml

@@ -22,7 +22,7 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.6
+    version: 2.1.9
   - name: volsync-target
     alias: volsync-target-config
     version: 0.7.0

clusters/cl01tl/helm/code-server/values.yaml

@@ -9,7 +9,7 @@ code-server:
         main:
           image:
             repository: ghcr.io/linuxserver/code-server
-            tag: 4.108.0@sha256:982ef207e723fe04d001a9cfe58c545913c8271ae9fd4cb036fa004bfcc33631
+            tag: 4.108.1@sha256:e9ed472ff25e12a5ee3562684d073b29e508e472ef54e3558e19bf4ff99ef858
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/directus/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
+  version: 2.1.9
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.4.5
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.0.1
-digest: sha256:a6c475943e21a16f1978f93b944d952641d0a69aa42022d6ab91c1296d44c3f5
+digest: sha256:9ae9e0cb222e7ac2fca2bfe5367a4b011b0c83c1a0f98a01342f37fad62c2fe1
-generated: "2026-01-16T18:45:59.110701786Z"
+generated: "2026-01-17T17:30:43.212095428Z"

clusters/cl01tl/helm/directus/Chart.yaml

@@ -23,7 +23,7 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.6
+    version: 2.1.9
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.4.5

clusters/cl01tl/helm/element-web/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 1.4.27
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
+  version: 2.1.9
-digest: sha256:b8b4e36fb88254e7575bd3aff60721fbf44a13af33eff949b6bc011facfcec62
+digest: sha256:ef4b5256d6b405f08f33ec1a2bbda9f8427fcac0c69accd04c19fb4fe1871047
-generated: "2026-01-08T23:02:24.62763032Z"
+generated: "2026-01-17T17:30:57.57289288Z"

clusters/cl01tl/helm/element-web/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     repository: https://ananace.gitlab.io/charts
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.6
+    version: 2.1.9
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/element.png
 # renovate: github=element-hq/element-web
 appVersion: v1.12.6

clusters/cl01tl/helm/freshrss/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
+  version: 2.1.9
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.4.5
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:fa0354899549c2bd40310f138126980825046d0d6d71acd7eb7ad121d94f8ccf
+digest: sha256:ded65efcf83f3c0cd3497839a1beddbc616081c286bdac6f584353813e7c8da8
-generated: "2026-01-16T18:46:20.598104939Z"
+generated: "2026-01-17T17:31:12.045290099Z"

clusters/cl01tl/helm/freshrss/Chart.yaml

@@ -23,7 +23,7 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.6
+    version: 2.1.9
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.4.5

clusters/cl01tl/helm/generic-device-plugin/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: generic-device-plugin
   repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-  version: 0.20.14
+  version: 0.20.17
-digest: sha256:fdb8cb0fae6f184b7d0396cf75cbd1ce8611904e4bf7c973ed6dd50e740f90d2
+digest: sha256:878766891eee5b4cea332c5eae87fc7fbd7eb7bfea90b408c48666e840b81408
-generated: "2026-01-14T00:04:49.992859554Z"
+generated: "2026-01-17T17:39:58.807224966Z"

clusters/cl01tl/helm/generic-device-plugin/Chart.yaml

@@ -15,6 +15,6 @@ maintainers:
 dependencies:
   - name: generic-device-plugin
     repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-    version: 0.20.14
+    version: 0.20.17
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 appVersion: 1.0.0

clusters/cl01tl/helm/gitea/Chart.lock

@@ -10,7 +10,7 @@ dependencies:
   version: 0.21.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
+  version: 2.1.9
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.4.5
@@ -23,5 +23,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:f38463ec7a583f7f47e76ae53d55d436657b834f70d34695f8347f640202ce46
+digest: sha256:331279317bf8bb1b1bbdc42beb2a0f9c95c40c78ef90c12d37423c129f2720a3
-generated: "2026-01-15T22:13:17.229320298Z"
+generated: "2026-01-17T17:31:27.582829279Z"

clusters/cl01tl/helm/gitea/Chart.yaml

@@ -36,7 +36,7 @@ dependencies:
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.6
+    version: 2.1.9
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.4.5

clusters/cl01tl/helm/home-assistant/values.yaml

@@ -9,7 +9,7 @@ home-assistant:
         main:
           image:
             repository: ghcr.io/home-assistant/home-assistant
-            tag: 2026.1.1
+            tag: 2026.1.2
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -21,7 +21,7 @@ home-assistant:
         code-server:
           image:
             repository: ghcr.io/linuxserver/code-server
-            tag: 4.108.0@sha256:982ef207e723fe04d001a9cfe58c545913c8271ae9fd4cb036fa004bfcc33631
+            tag: 4.108.1@sha256:e9ed472ff25e12a5ee3562684d073b29e508e472ef54e3558e19bf4ff99ef858
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/homepage-dev/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
+  version: 2.1.9
-digest: sha256:d38a91baca59883b376f95fb9105bb3e38877f38e38c60196f5a44f30953f859
+digest: sha256:3dd7439a8874fcf8b12754907f187149287a2db04c5b9a595d32e6b64a5482db
-generated: "2026-01-16T18:46:54.599835994Z"
+generated: "2026-01-17T17:31:46.477375094Z"

clusters/cl01tl/helm/homepage-dev/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.6
+    version: 2.1.9
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/homepage.png
 # renovate: github=gethomepage/homepage
 appVersion: v1.8.0

clusters/cl01tl/helm/karakeep/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 0.21.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
+  version: 2.1.9
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:9a98de83b4829b6cabd34d0f6924b66fc9d13866b67370d2a8ba30b255a45b34
+digest: sha256:acbdf6d80ff0d516f2006756930c6f299afd83740141231afad3512a06c3c05d
-generated: "2026-01-16T18:48:07.534643037Z"
+generated: "2026-01-17T17:32:00.150598962Z"

clusters/cl01tl/helm/karakeep/Chart.yaml

@@ -26,7 +26,7 @@ dependencies:
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.6
+    version: 2.1.9
   - name: volsync-target
     alias: volsync-target-data
     version: 0.7.0

clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock

@@ -9,4 +9,4 @@ dependencies:
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.0.1
 digest: sha256:14197d65a6db43a466933c29b6c78e234dd46514254a2d24814e713ca9f3c919
-generated: "2026-01-16T20:04:39.787763915Z"
+generated: "2026-01-16T21:44:02.294108101Z"

clusters/cl01tl/helm/matrix-synapse/Chart.lock

@@ -13,10 +13,10 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
+  version: 2.1.9
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
+  version: 2.1.9
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.4.5
@@ -38,5 +38,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:eeb21483b2fc2d517039fff51bce1819c9765172eb2d185f67feb133495e8234
+digest: sha256:5d815aa1bb50fa1b6b85a6edda6017d0a8e3f6c23d804177a845bf206cd2d31b
-generated: "2026-01-16T18:49:57.823841472Z"
+generated: "2026-01-17T17:32:18.299163465Z"

clusters/cl01tl/helm/matrix-synapse/Chart.yaml

@@ -45,11 +45,11 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     alias: cloudflared-synapse
-    version: 2.1.6
+    version: 2.1.9
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: cloudflared
     alias: cloudflared-hookshot
-    version: 2.1.6
+    version: 2.1.9
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: postgres-cluster
     alias: postgres-18-cluster

clusters/cl01tl/helm/matrix-synapse/values.yaml

@@ -345,7 +345,7 @@ mautrix-whatsapp:
         main:
           image:
             repository: dock.mau.dev/mautrix/whatsapp
-            tag: v0.2512.0
+            tag: v0.2601.0
             pullPolicy: IfNotPresent
           resources:
             requests:

clusters/cl01tl/helm/outline/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
+  version: 2.1.9
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.4.5
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.0.1
-digest: sha256:d2d99fb492e5e8580f5d1871171f8148f41f8afb43cfb6cb4a2cd75dd87a8d85
+digest: sha256:3959ec0feb588553493636514562a4bd1dea651992da9cca1a598597909173b1
-generated: "2026-01-16T18:50:55.615098261Z"
+generated: "2026-01-17T17:32:35.576166942Z"

clusters/cl01tl/helm/outline/Chart.yaml

@@ -24,7 +24,7 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.6
+    version: 2.1.9
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.4.5

clusters/cl01tl/helm/outline/values.yaml

@@ -9,7 +9,7 @@ outline:
         main:
           image:
             repository: outlinewiki/outline
-            tag: 1.2.0
+            tag: 1.3.0
             pullPolicy: IfNotPresent
           env:
             - name: NODE_ENV

clusters/cl01tl/helm/postiz/Chart.lock

@@ -4,7 +4,7 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
+  version: 2.1.9
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.4.5
@@ -17,5 +17,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:7464bbf3277649fb74a2c31b54c8428d97b1ef8049ad08bb85a15fb23eee5118
+digest: sha256:045adb256c2f942ade106b9cd451a665adf2661a0bfcd5203d8302828cf07dee
-generated: "2026-01-16T18:51:40.030862543Z"
+generated: "2026-01-17T17:32:50.110718413Z"

clusters/cl01tl/helm/postiz/Chart.yaml

@@ -23,7 +23,7 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.6
+    version: 2.1.9
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.4.5

clusters/cl01tl/helm/postiz/values.yaml

@@ -9,7 +9,7 @@ postiz:
         main:
           image:
             repository: ghcr.io/gitroomhq/postiz-app
-            tag: v2.12.0
+            tag: v2.12.1
             pullPolicy: IfNotPresent
           env:
             - name: MAIN_URL

clusters/cl01tl/helm/rook-ceph/Chart.lock

@@ -7,6 +7,6 @@ dependencies:
   version: v1.18.9
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
+  version: 2.1.9
-digest: sha256:fc0c562e0b47bd730251c2ed1ad48f1b0c57dfb730fd161fb905933817ba2c69
+digest: sha256:57aea8e9711bfea8484ad395d5a5ff2a0e4d2a7c962cf9a2c49095f6a721376d
-generated: "2026-01-14T21:08:53.897492563Z"
+generated: "2026-01-17T17:33:03.998798829Z"

clusters/cl01tl/helm/rook-ceph/Chart.yaml

@@ -24,7 +24,7 @@ dependencies:
   - name: cloudflared
     alias: cloudflared-rgw
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.6
+    version: 2.1.9
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ceph.png
 # renovate: github=rook/rook
 appVersion: v1.18.8

clusters/cl01tl/helm/seerr/values.yaml

@@ -1,7 +1,7 @@
 seerr-chart:
   image:
     tag: develop
-    sha: f96deeef25cfb7bb0ecaa90f324bf6dfb66a844e8ed38501764f4d982a152280
+    sha: 015bc6dc38244eca572ae34ea717c8f4826c582e124c937e0aa2b92fcb94e4f3
   probes:
     livenessProbe:
       initialDelaySeconds: 60

clusters/cl01tl/helm/shelly-plug/values.yaml

@@ -36,7 +36,7 @@ shelly-plug:
         main:
           image:
             repository: php
-            tag: 8.5.1-apache-bookworm
+            tag: 8.5.2-apache-bookworm
             pullPolicy: IfNotPresent
           env:
             - name: SHELLY_HOSTNAME

clusters/cl01tl/helm/site-documentation/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
+  version: 2.1.9
-digest: sha256:993713dffe77e7672731ad86c9ba882fa416fe501ae42eba75876c6abbec036c
+digest: sha256:07dc35c2faf680ef104ac0dd9075760d38f13ef84a62ed961134b5edd6d4b4dc
-generated: "2026-01-16T18:53:55.811317116Z"
+generated: "2026-01-17T17:33:18.84982234Z"

clusters/cl01tl/helm/site-documentation/Chart.yaml

@@ -22,6 +22,6 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.6
+    version: 2.1.9
 icon: https://d21zlbwtcn424f.cloudfront.net/logo-new-round.png
 appVersion: 0.0.5

clusters/cl01tl/helm/site-profile/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
+  version: 2.1.9
-digest: sha256:a964308b6deef2504397e857ca580c186d117a3659782a564f363828f2973c37
+digest: sha256:422da3236c2f071ee0e2e36b57a622e1b002c4e8cb67e4c1a01a9cc39aa2bbdf
-generated: "2026-01-16T18:54:06.609655376Z"
+generated: "2026-01-17T17:33:32.603049202Z"

clusters/cl01tl/helm/site-profile/Chart.yaml

@@ -22,6 +22,6 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.6
+    version: 2.1.9
 icon: https://d21zlbwtcn424f.cloudfront.net/logo-new-round.png
 appVersion: 2.1.2

clusters/cl01tl/helm/vaultwarden/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
+  version: 2.1.9
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.4.5
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:d38a685a6bcecb0267e5fa2de2b7c10929201398c7b1b9a06774e35ee5e9c956
+digest: sha256:800ed0149e316d8ea264a11e90ba3eb808d3623bc9825ad96dea85353bd0a62f
-generated: "2026-01-16T18:56:33.748685848Z"
+generated: "2026-01-17T17:33:46.236030792Z"

clusters/cl01tl/helm/vaultwarden/Chart.yaml

@@ -24,7 +24,7 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.6
+    version: 2.1.9
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.4.5

clusters/cl01tl/helm/yubal-playlist/templates/external-secret.yaml

@@ -34,6 +34,29 @@ spec:
         metadataPolicy: None
         property: password
 
+---
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: yubal-playlist-cookie
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: yubal-playlist-cookie
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  data:
+    - secretKey: cookies.txt
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /youtube/cookie
+        metadataPolicy: None
+        property: cookies
+
 ---
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret

clusters/cl01tl/helm/yubal-playlist/values.yaml

@@ -5,11 +5,28 @@ yubal-playlist:
       replicas: 1
       strategy: Recreate
       revisionHistoryLimit: 3
+      initContainers:
+        init-copy-cookie:
+          image:
+            repository: busybox
+            tag: 1.37.0
+            pullPolicy: IfNotPresent
+          command:
+            - /bin/sh
+            - -ec
+            - |
+              if [ ! -f "/app/ytdlp/cookies.txt" ]; then
+                echo ">> Coping files ..."
+                ls /app/ytdlp
+                cp -fv /app/ytdlp/cookies-ro.txt /app/ytdlp/cookies.txt
+                echo ">> Files in ytdlp:"
+                ls /app/ytdlp
+              fi
       containers:
         main:
           image:
             repository: harbor.alexlebens.net/images/yubal-playlist
-            tag: 0.1.4
+            tag: 0.1.10
             pullPolicy: IfNotPresent
           env:
             - name: YUBAL_TZ
@@ -139,10 +156,27 @@ yubal-playlist:
                 type: PathPrefix
                 value: /
   persistence:
-    cache:
+    cookie:
-      type: emptyDir
+      enabled: true
+      type: secret
+      name: yubal-playlist-cookie
       advancedMounts:
         main:
+          init-copy-cookie:
+            - path: /app/ytdlp/cookies-ro.txt
+              readOnly: true
+              mountPropagation: None
+              subPath: cookies.txt
+    config:
+      storageClass: ceph-block
+      accessMode: ReadWriteOnce
+      size: 1Gi
+      retain: true
+      advancedMounts:
+        main:
+          init-copy-cookie:
+            - path: /app/ytdlp
+              readOnly: false
           main:
             - path: /app/ytdlp
               readOnly: false