chore(deps): update gitea to v1.26.1

Merge pull request 'chore(deps): update ollama/ollama docker tag to v0.23.0' (#6473 ) from renovate/unified-ollama into main
Reviewed-on: #6473
2026-05-03 15:28:43 +00:00 · 2026-05-03 15:24:42 +00:00 · 2026-05-03 15:20:18 +00:00 · 2026-05-03 15:16:30 +00:00 · 2026-05-03 13:02:53 +00:00 · 2026-05-03 02:58:15 +00:00
209 changed files with 1161 additions and 1018 deletions
--- a/.gitea/workflows/renovate.yaml
+++ b/.gitea/workflows/renovate.yaml
@@ -12,8 +12,8 @@ on:

 jobs:
  renovate:
-    runs-on: ubuntu-latest
-    container: ghcr.io/renovatebot/renovate:43.141.6@sha256:077a2aada1c508923e4e36b68f7efe3ec013a797da8aed352afd98fb0e1b4c60
+    runs-on: ubuntu-js
+    container: ghcr.io/renovatebot/renovate:43.160.6@sha256:ef4afabbfdbddce68c26c843d73f98f65e19e8aabd6c22bee7aa7af5f914a43c
    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
--- a/clusters/cl01tl/helm/actual/Chart.lock
+++ b/clusters/cl01tl/helm/actual/Chart.lock
@@ -4,6 +4,6 @@ dependencies:
  version: 4.6.2
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.0
-digest: sha256:ee1ff98af82f76ddf0b672abf9f4973ae41faff3cd61d81849f496c089cfdbd3
-generated: "2026-04-26T14:57:34.863614-05:00"
+  version: 1.1.1
+digest: sha256:e472c85ad45c6071ccc3a23047927aba42814a931865736e40ad5c16d597ea53
+generated: "2026-04-28T23:30:55.463292642Z"
--- a/clusters/cl01tl/helm/actual/Chart.yaml
+++ b/clusters/cl01tl/helm/actual/Chart.yaml
@@ -20,7 +20,7 @@ dependencies:
    version: 4.6.2
  - name: volsync-target
    alias: volsync-target-data
-    version: 1.0.0
+    version: 1.1.1
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/actual-budget.png
 # renovate: datasource=github-releases depName=actualbudget/actual
--- a/clusters/cl01tl/helm/argocd/Chart.lock
+++ b/clusters/cl01tl/helm/argocd/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: argo-cd
  repository: https://argoproj.github.io/argo-helm
-  version: 9.5.4
-digest: sha256:3d21f3de99812af73615ef0e75f835d41d49b81a840107194b44e06057d7311f
-generated: "2026-04-24T18:07:49.106452954Z"
+  version: 9.5.11
+digest: sha256:78e2094dde7b3d0326da14640dbc012ce6e6e899f23270dc4d9a13b168c1ef89
+generated: "2026-05-02T00:45:16.287556363Z"
--- a/clusters/cl01tl/helm/argocd/Chart.yaml
+++ b/clusters/cl01tl/helm/argocd/Chart.yaml
@@ -13,8 +13,8 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: argo-cd
-    version: 9.5.4
+    version: 9.5.11
    repository: https://argoproj.github.io/argo-helm
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 # renovate: datasource=github-releases depName=argoproj/argo-cd
-appVersion: v3.3.8
+appVersion: v3.3.9
--- a/clusters/cl01tl/helm/argocd/templates/prometheus-rule.yaml
+++ b/clusters/cl01tl/helm/argocd/templates/prometheus-rule.yaml
@@ -0,0 +1,108 @@
+apiVersion: monitoring.coreos.com/v1
+kind: PrometheusRule
+metadata:
+  name: haproxy
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: haproxy
+    {{- include "custom.labels" . | nindent 4 }}
+spec:
+  groups:
+    - name: EmbeddedExporter
+      rules:
+        - alert: HAProxyHighHTTP4xxErrorRateBackend
+          expr: ((sum by (proxy) (rate(haproxy_server_http_responses_total{code="4xx"}[1m])) / sum by (proxy) (rate(haproxy_server_http_responses_total[1m]))) * 100) > 5 and sum by (proxy) (rate(haproxy_server_http_responses_total[1m])) > 0
+          for: 1m
+          labels:
+            severity: critical
+          annotations:
+            summary: HAProxy high HTTP 4xx error rate backend (instance {{ `{{ $labels.instance }}` }})
+            description: "Too many HTTP requests with status 4xx (> 5%) on backend {{ `{{ $labels.proxy }}` }}\n  VALUE = {{ `{{ $value }}` }}\n  LABELS = {{ `{{ $labels }}` }}"
+        - alert: HAProxyHighHTTP5xxErrorRateBackend
+          expr: ((sum by (proxy) (rate(haproxy_server_http_responses_total{code="5xx"}[1m])) / sum by (proxy) (rate(haproxy_server_http_responses_total[1m]))) * 100) > 5 and sum by (proxy) (rate(haproxy_server_http_responses_total[1m])) > 0
+          for: 1m
+          labels:
+            severity: critical
+          annotations:
+            summary: HAProxy high HTTP 5xx error rate backend (instance {{ `{{ $labels.instance }}` }})
+            description: "Too many HTTP requests with status 5xx (> 5%) on backend {{ `{{ $labels.proxy }}` }}\n  VALUE = {{ `{{ $value }}` }}\n  LABELS = {{ `{{ $labels }}` }}"
+        - alert: HAProxyHighHTTP4xxErrorRateServer
+          expr: ((sum by (server) (rate(haproxy_server_http_responses_total{code="4xx"}[1m])) / sum by (server) (rate(haproxy_server_http_responses_total[1m]))) * 100) > 5 and sum by (server) (rate(haproxy_server_http_responses_total[1m])) > 0
+          for: 1m
+          labels:
+            severity: critical
+          annotations:
+            summary: HAProxy high HTTP 4xx error rate server (instance {{ `{{ $labels.instance }}` }})
+            description: "Too many HTTP requests with status 4xx (> 5%) on server {{ `{{ $labels.server }}` }}\n  VALUE = {{ `{{ $value }}` }}\n  LABELS = {{ `{{ $labels }}` }}"
+        - alert: HAProxyHighHTTP5xxErrorRateServer
+          expr: ((sum by (server) (rate(haproxy_server_http_responses_total{code="5xx"}[1m])) / sum by (server) (rate(haproxy_server_http_responses_total[1m]))) * 100) > 5 and sum by (server) (rate(haproxy_server_http_responses_total[1m])) > 0
+          for: 1m
+          labels:
+            severity: critical
+          annotations:
+            summary: HAProxy high HTTP 5xx error rate server (instance {{ `{{ $labels.instance }}` }})
+            description: "Too many HTTP requests with status 5xx (> 5%) on server {{ `{{ $labels.server }}` }}\n  VALUE = {{ `{{ $value }}` }}\n  LABELS = {{ `{{ $labels }}` }}"
+        - alert: HAProxyServerResponseErrors
+          expr: (sum by (server) (rate(haproxy_server_response_errors_total[1m])) / sum by (server) (rate(haproxy_server_http_responses_total[1m]))) * 100 > 5 and sum by (server) (rate(haproxy_server_http_responses_total[1m])) > 0
+          for: 1m
+          labels:
+            severity: critical
+          annotations:
+            summary: HAProxy server response errors (instance {{ `{{ $labels.instance }}` }})
+            description: "Too many response errors to {{ `{{ $labels.server }}` }} server (> 5%).\n  VALUE = {{ `{{ $value }}` }}\n  LABELS = {{ `{{ $labels }}` }}"
+        - alert: HAProxyBackendConnectionErrors
+          expr: (sum by (proxy) (rate(haproxy_backend_connection_errors_total[1m]))) > 100
+          for: 1m
+          labels:
+            severity: critical
+          annotations:
+            summary: HAProxy backend connection errors (instance {{ `{{ $labels.instance }}` }})
+            description: "Too many connection errors to {{ `{{ $labels.proxy }}` }} backend (> 100 req/s). Request throughput may be too high.\n  VALUE = {{ `{{ $value }}` }}\n  LABELS = {{ `{{ $labels }}` }}"
+        - alert: HAProxyServerConnectionErrors
+          expr: (sum by (proxy) (rate(haproxy_server_connection_errors_total[1m]))) > 100
+          for: 0m
+          labels:
+            severity: critical
+          annotations:
+            summary: HAProxy server connection errors (instance {{ `{{ $labels.instance }}` }})
+            description: "Too many connection errors to {{ `{{ $labels.proxy }}` }} (> 100 req/s). Request throughput may be too high.\n  VALUE = {{ `{{ $value }}` }}\n  LABELS = {{ `{{ $labels }}` }}"
+        - alert: HAProxyBackendMaxActiveSession>80%
+          expr: (haproxy_backend_current_sessions / haproxy_backend_limit_sessions * 100) > 80 and haproxy_backend_limit_sessions > 0
+          for: 2m
+          labels:
+            severity: warning
+          annotations:
+            summary: HAProxy backend max active session > 80% (instance {{ `{{ $labels.instance }}` }})
+            description: "Session limit from backend {{ `{{ $labels.proxy }}` }} reached 80% of limit - {{ `{{ $value | printf \"%.2f\"}}` }}%\n  VALUE = {{ `{{ $value }}` }}\n  LABELS = {{ `{{ $labels }}` }}"
+        - alert: HAProxyPendingRequests
+          expr: sum by (proxy) (haproxy_backend_current_queue) > 0
+          for: 2m
+          labels:
+            severity: warning
+          annotations:
+            summary: HAProxy pending requests (instance {{ `{{ $labels.instance }}` }})
+            description: "Some HAProxy requests are pending on {{ `{{ $labels.proxy }}` }} - {{ `{{ $value | printf \"%.2f\"}}` }}\n  VALUE = {{ `{{ $value }}` }}\n  LABELS = {{ `{{ $labels }}` }}"
+        - alert: HAProxyRetryHigh
+          expr: sum by (proxy) (rate(haproxy_backend_retry_warnings_total[1m])) > 10
+          for: 2m
+          labels:
+            severity: warning
+          annotations:
+            summary: HAProxy retry high (instance {{ `{{ $labels.instance }}` }})
+            description: "High rate of retry on {{ `{{ $labels.proxy }}` }} - {{ `{{ $value | printf \"%.2f\"}}` }}\n  VALUE = {{ `{{ $value }}` }}\n  LABELS = {{ `{{ $labels }}` }}"
+        - alert: HAProxyFrontendSecurityBlockedRequests
+          expr: sum by (proxy) (rate(haproxy_frontend_denied_connections_total[2m])) > 10
+          for: 2m
+          labels:
+            severity: warning
+          annotations:
+            summary: HAProxy frontend security blocked requests (instance {{ `{{ $labels.instance }}` }})
+            description: "HAProxy is blocking requests for security reason\n  VALUE = {{ `{{ $value }}` }}\n  LABELS = {{ `{{ $labels }}` }}"
+        - alert: HAProxyServerHealthcheckFailure
+          expr: increase(haproxy_server_check_failures_total[1m]) > 2
+          for: 0m
+          labels:
+            severity: warning
+          annotations:
+            summary: HAProxy server healthcheck failure (instance {{ `{{ $labels.instance }}` }})
+            description: "Some server healthcheck are failing on {{ `{{ $labels.server }}` }} ({{ `{{ $value }}` }} in the last 1m)\n  VALUE = {{ `{{ $value }}` }}\n  LABELS = {{ `{{ $labels }}` }}"
--- a/clusters/cl01tl/helm/argocd/values.yaml
+++ b/clusters/cl01tl/helm/argocd/values.yaml
@@ -103,7 +103,7 @@ argo-cd:
      enabled: true
      image:
        repository: haproxy
-        tag: 3.3.6-alpine@sha256:4f97a2cb7f02fd08402259e74a65ef12fcfa3dff1ef78fddecb5228a17b7f4ad
+        tag: 3.3.8-alpine@sha256:10690acb357180d5214c6fce59e2cefded6cc72b0f7e3febb323fea95b27e349
      resources:
        requests:
          cpu: 5m
--- a/clusters/cl01tl/helm/audiobookshelf/Chart.lock
+++ b/clusters/cl01tl/helm/audiobookshelf/Chart.lock
@@ -4,9 +4,9 @@ dependencies:
  version: 4.6.2
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.0
+  version: 1.1.1
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.0
-digest: sha256:c6af4b1dd96410281d53ff8f63235bc79bd9a1d493d6da097d9e4ff088e09538
-generated: "2026-04-26T14:57:40.219612-05:00"
+  version: 1.1.1
+digest: sha256:2275b211b02253019e5830e0258f936f1494380cc50cea03bc31d75281365dcc
+generated: "2026-04-28T17:54:10.288277-05:00"
--- a/clusters/cl01tl/helm/audiobookshelf/Chart.yaml
+++ b/clusters/cl01tl/helm/audiobookshelf/Chart.yaml
@@ -24,12 +24,12 @@ dependencies:
    version: 4.6.2
  - name: volsync-target
    alias: volsync-target-config
-    version: 1.0.0
+    version: 1.1.1
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-metadata
-    version: 1.0.0
+    version: 1.1.1
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/audiobookshelf.png
 # renovate: datasource=github-releases depName=advplyr/audiobookshelf
-appVersion: 2.33.2
+appVersion: 2.34.0
--- a/clusters/cl01tl/helm/audiobookshelf/values.yaml
+++ b/clusters/cl01tl/helm/audiobookshelf/values.yaml
@@ -12,7 +12,7 @@ audiobookshelf:
        main:
          image:
            repository: ghcr.io/advplyr/audiobookshelf
-            tag: 2.33.2@sha256:a44ed89b3e845faa1f7d353f2cc89b2fcd8011737dd14075fa963cf9468da3a5
+            tag: 2.34.0@sha256:4143292c530f6ac6700afd13360c04f477e4f1a81c1c97c4224b1c7e4330c5c4
          env:
            - name: TZ
              value: America/Chicago
@@ -23,7 +23,7 @@ audiobookshelf:
        apprise-api:
          image:
            repository: ghcr.io/caronc/apprise
-            tag: v1.4.0@sha256:9d97a6b9b42cf6afdf3b5466dbed2a59cd42a4bb777ec6aa57b5f2ee623569eb
+            tag: v1.4.1@sha256:25e0577915c2f06233ae1dce077f05c0fc9ba4f0ea89de5aee18a32b2ee9a75c
          env:
            - name: TZ
              value: America/Chicago
--- a/clusters/cl01tl/helm/authentik/Chart.lock
+++ b/clusters/cl01tl/helm/authentik/Chart.lock
@@ -10,6 +10,6 @@ dependencies:
  version: 7.12.1
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.1
-digest: sha256:d1dbca83e5b63a58a9bf9f2903d1b45bbadca3e8599541367bc61ef2ce938cdb
-generated: "2026-04-24T21:50:21.398658595Z"
+  version: 0.7.0
+digest: sha256:808a2347fadb6a48800c0f7355c422c9ed2ce9f7d1ca3b7d64d62574be98e1f8
+generated: "2026-05-02T01:46:08.112423002Z"
--- a/clusters/cl01tl/helm/authentik/Chart.yaml
+++ b/clusters/cl01tl/helm/authentik/Chart.yaml
@@ -29,7 +29,7 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: valkey
    alias: valkey
-    version: 0.6.1
+    version: 0.7.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/authentik.png
 # renovate: datasource=github-releases depName=goauthentik/authentik
--- a/clusters/cl01tl/helm/backrest/Chart.lock
+++ b/clusters/cl01tl/helm/backrest/Chart.lock
@@ -4,9 +4,9 @@ dependencies:
  version: 4.6.2
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.0
+  version: 1.1.1
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.0
-digest: sha256:4c3010c4ef30f7baaad7564d1fda9bdfe18184fab0e3f47a8a1f4c74e340e557
-generated: "2026-04-24T22:50:23.056323614Z"
+  version: 1.1.1
+digest: sha256:82e85dc79199cc8b75dde412d595621817b3fa2c073c131162d0079a0b63f369
+generated: "2026-04-28T23:31:05.864191451Z"
--- a/clusters/cl01tl/helm/backrest/Chart.yaml
+++ b/clusters/cl01tl/helm/backrest/Chart.yaml
@@ -20,11 +20,11 @@ dependencies:
    version: 4.6.2
  - name: volsync-target
    alias: volsync-target-config
-    version: 1.0.0
+    version: 1.1.1
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-data
-    version: 1.0.0
+    version: 1.1.1
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/backrest.png
 # renovate: datasource=github-releases depName=garethgeorge/backrest
--- a/clusters/cl01tl/helm/bazarr/Chart.lock
+++ b/clusters/cl01tl/helm/bazarr/Chart.lock
@@ -4,6 +4,6 @@ dependencies:
  version: 4.6.2
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.0
-digest: sha256:ee94a588fa517303597c8a6159befdbac00b651afc5c1d7c779b3cb28d3ba8c6
-generated: "2026-04-24T22:50:33.529825344Z"
+  version: 1.1.1
+digest: sha256:9228c387a1b50545d8b348c94ae55b17952d32652ca48d0329c65f4ee651706e
+generated: "2026-04-28T23:31:15.743170757Z"
--- a/clusters/cl01tl/helm/bazarr/Chart.yaml
+++ b/clusters/cl01tl/helm/bazarr/Chart.yaml
@@ -24,7 +24,7 @@ dependencies:
    version: 4.6.2
  - name: volsync-target
    alias: volsync-target-config
-    version: 1.0.0
+    version: 1.1.1
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/bazarr.png
 # renovate: datasource=github-releases depName=linuxserver/docker-bazarr
--- a/clusters/cl01tl/helm/blocky/Chart.lock
+++ b/clusters/cl01tl/helm/blocky/Chart.lock
@@ -4,6 +4,6 @@ dependencies:
  version: 4.6.2
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.1
-digest: sha256:6ed3a7587906fbda581d0091ff2c29a1816b8b0b8ae40add9885e6a68b2b82ae
-generated: "2026-04-13T20:32:34.844998902Z"
+  version: 0.7.0
+digest: sha256:855928ecd442b96a98bbeb9f957951cb70a8ab07e3c45ffd2ab33dcd5bf85a18
+generated: "2026-05-02T01:46:25.970760734Z"
--- a/clusters/cl01tl/helm/blocky/Chart.yaml
+++ b/clusters/cl01tl/helm/blocky/Chart.yaml
@@ -20,7 +20,7 @@ dependencies:
    version: 4.6.2
  - name: valkey
    alias: valkey
-    version: 0.6.1
+    version: 0.7.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/blocky.png
 # renovate: datasource=github-releases depName=0xerr0r/blocky
--- a/clusters/cl01tl/helm/blocky/values.yaml
+++ b/clusters/cl01tl/helm/blocky/values.yaml
@@ -134,7 +134,7 @@ blocky:
              komodo                          IN      CNAME   traefik-cl01tl
              languagetool                    IN      CNAME   traefik-cl01tl
              lidarr                          IN      CNAME   traefik-cl01tl
-              mail                            IN      CNAME   traefik-cl01tl
+              loki                            IN      CNAME   traefik-cl01tl
              medialyze                       IN      CNAME   traefik-cl01tl
              music-grabber                   IN      CNAME   traefik-cl01tl
              navidrome                       IN      CNAME   traefik-cl01tl
@@ -162,7 +162,6 @@ blocky:
              sonarr-4k                       IN      CNAME   traefik-cl01tl
              sonarr-anime                    IN      CNAME   traefik-cl01tl
              sparkyfitness                   IN      CNAME   traefik-cl01tl
-              stalwart                        IN      CNAME   traefik-cl01tl
              tdarr                           IN      CNAME   traefik-cl01tl
              tubearchivist                   IN      CNAME   traefik-cl01tl
              vault                           IN      CNAME   traefik-cl01tl
--- a/clusters/cl01tl/helm/cert-manager/templates/prometheus-rule.yaml
+++ b/clusters/cl01tl/helm/cert-manager/templates/prometheus-rule.yaml
@@ -0,0 +1,44 @@
+apiVersion: monitoring.coreos.com/v1
+kind: PrometheusRule
+metadata:
+  name: cert-manager
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: cert-manager
+    {{- include "custom.labels" . | nindent 4 }}
+spec:
+  groups:
+    - name: EmbeddedExporter
+      rules:
+        - alert: Cert-ManagerAbsent
+          expr: absent(up{job="cert-manager"})
+          for: 10m
+          labels:
+            severity: critical
+          annotations:
+            summary: Cert-Manager absent (instance {{ `{{ $labels.instance }}` }})
+            description: "Cert-Manager has disappeared from Prometheus service discovery. New certificates will not be able to be minted, and existing ones can't be renewed until cert-manager is back.\n  VALUE = {{ `{{ $value }}` }}\n  LABELS = {{ `{{ $labels }}` }}"
+        - alert: Cert-ManagerCertificateExpiringSoon
+          expr: avg by (exported_namespace, namespace, name) (certmanager_certificate_expiration_timestamp_seconds - time()) < (21 * 24 * 3600)
+          for: 1h
+          labels:
+            severity: warning
+          annotations:
+            summary: Cert-Manager certificate expiring soon (instance {{ `{{ $labels.instance }}` }})
+            description: "The certificate {{ `{{ $labels.name }}` }} is expiring in less than 21 days.\n  VALUE = {{ `{{ $value }}` }}\n  LABELS = {{ `{{ $labels }}` }}"
+        - alert: Cert-ManagerCertificateNotReady
+          expr: max by (name, exported_namespace, namespace, condition) (certmanager_certificate_ready_status{condition!="True"} == 1)
+          for: 10m
+          labels:
+            severity: critical
+          annotations:
+            summary: Cert-Manager certificate not ready (instance {{ `{{ $labels.instance }}` }})
+            description: "The certificate {{ `{{ $labels.name }}` }} in namespace {{ `{{ $labels.exported_namespace }}` }} is not ready to serve traffic.\n  VALUE = {{ `{{ $value }}` }}\n  LABELS = {{ `{{ $labels }}` }}"
+        - alert: Cert-ManagerHittingACMERateLimits
+          expr: sum by (host) (rate(certmanager_acme_client_request_count{status="429"}[5m])) > 0
+          for: 5m
+          labels:
+            severity: critical
+          annotations:
+            summary: Cert-Manager hitting ACME rate limits (instance {{ `{{ $labels.instance }}` }})
+            description: "Cert-Manager is being rate-limited by the ACME provider. Certificate issuance and renewal may be blocked for up to a week.\n  VALUE = {{ `{{ $value }}` }}\n  LABELS = {{ `{{ $labels }}` }}"
--- a/clusters/cl01tl/helm/cloudnative-pg/Chart.lock
+++ b/clusters/cl01tl/helm/cloudnative-pg/Chart.lock
@@ -7,9 +7,9 @@ dependencies:
  version: 0.6.0
 - name: rclone-bucket
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.3
+  version: 0.5.0
 - name: rclone-bucket
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.3
-digest: sha256:75d7078b7009082521a1bb8b49141e20b442343dabe7f76f5e7a16a352cfe205
-generated: "2026-04-26T15:36:31.678086-05:00"
+  version: 0.5.0
+digest: sha256:5db4d27087f8a712e7825dc2aac1dc26b6b4e0f9eb11373805be67212bb38e12
+generated: "2026-05-02T01:21:57.977371366Z"
--- a/clusters/cl01tl/helm/cloudnative-pg/Chart.yaml
+++ b/clusters/cl01tl/helm/cloudnative-pg/Chart.yaml
@@ -26,11 +26,11 @@ dependencies:
  - name: rclone-bucket
    alias: rclone-postgres-backups-remote
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.4.3
+    version: 0.5.0
  - name: rclone-bucket
    alias: rclone-postgres-backups-external
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.4.3
+    version: 0.5.0
 icon: https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg.github.io/refs/heads/main/assets/images/hero_image.png
 # renovate: datasource=github-releases depName=cloudnative-pg/cloudnative-pg
 appVersion: 1.29.0
--- a/clusters/cl01tl/helm/cloudnative-pg/values.yaml
+++ b/clusters/cl01tl/helm/cloudnative-pg/values.yaml
@@ -18,7 +18,7 @@ rclone-postgres-backups-remote:
  nameOverride: postgres-backups-remote-rclone
  cronJob:
    suspend: false
-    schedule: 0 1 * * *
+    schedule: 0 6 * * 6
  rclone:
    source:
      bucketName: postgres-backups
@@ -45,7 +45,7 @@ rclone-postgres-backups-external:
  nameOverride: postgres-backups-external-rclone
  cronJob:
    suspend: true
-    schedule: 20 1 * * *
+    schedule: 0 6 * * 6
  rclone:
    source:
      bucketName: openbao-backups
--- a/clusters/cl01tl/helm/coredns/Chart.yaml
+++ b/clusters/cl01tl/helm/coredns/Chart.yaml
@@ -8,6 +8,7 @@ keywords:
 home: https://docs.alexlebens.dev/applications/coredns/
 sources:
  - https://github.com/coredns/coredns
+  - https://explore.ggcr.dev/?repo=registry.k8s.io%2Fcoredns%2Fcoredns
  - https://github.com/coredns/helm
 maintainers:
  - name: alexlebens
--- a/clusters/cl01tl/helm/coredns/values.yaml
+++ b/clusters/cl01tl/helm/coredns/values.yaml
@@ -1,7 +1,7 @@
 coredns:
  image:
-    repository: registry.k8s.io/coredns/coredns
-    tag: v1.14.2@sha256:e7e6440cfd1e919280958f5b5a6ab2b184d385bba774c12ad2a9e1e4183f90d9
+    repository: coredns/coredns
+    tag: v1.14.3@sha256:b21d26b915e10acb5bc78715c1e8b6047ab2675389b2bcc18b3a6499d90e74c0
  replicaCount: 3
  resources:
    limits:
--- a/clusters/cl01tl/helm/dawarich/Chart.lock
+++ b/clusters/cl01tl/helm/dawarich/Chart.lock
@@ -7,15 +7,15 @@ dependencies:
  version: 7.12.1
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.1
+  version: 0.7.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.0
+  version: 1.1.1
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.0
+  version: 1.1.1
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.0
-digest: sha256:675bca89787669fd5b23eb2d4b49a44acee2556044982bb634f678a39cec7db4
-generated: "2026-04-24T22:50:43.987901153Z"
+  version: 1.1.1
+digest: sha256:3cd2af21091719533fb337241480c613ab14b3cb5820af6e386936ddf4243c14
+generated: "2026-05-02T01:46:38.13080627Z"
--- a/clusters/cl01tl/helm/dawarich/Chart.yaml
+++ b/clusters/cl01tl/helm/dawarich/Chart.yaml
@@ -26,20 +26,20 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: valkey
    alias: valkey
-    version: 0.6.1
+    version: 0.7.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-storage
-    version: 1.0.0
+    version: 1.1.1
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-public
-    version: 1.0.0
+    version: 1.1.1
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-watched
-    version: 1.0.0
+    version: 1.1.1
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/dawarich.png
 # renovate: datasource=github-releases depName=Freika/dawarich
-appVersion: 1.6.1
+appVersion: 1.7.3
--- a/clusters/cl01tl/helm/dawarich/templates/external-secret.yaml
+++ b/clusters/cl01tl/helm/dawarich/templates/external-secret.yaml
@@ -15,6 +15,18 @@ spec:
      remoteRef:
        key: /cl01tl/dawarich/key
        property: key
+    - secretKey: otp-primary-key
+      remoteRef:
+        key: /cl01tl/dawarich/key
+        property: otp-primary-key
+    - secretKey: otp-deterministic-key
+      remoteRef:
+        key: /cl01tl/dawarich/key
+        property: otp-deterministic-key
+    - secretKey: otp-derivation-salt
+      remoteRef:
+        key: /cl01tl/dawarich/key
+        property: otp-derivation-salt

 ---
 apiVersion: external-secrets.io/v1
--- a/clusters/cl01tl/helm/dawarich/values.yaml
+++ b/clusters/cl01tl/helm/dawarich/values.yaml
@@ -8,7 +8,7 @@ dawarich:
        main:
          image:
            repository: freikin/dawarich
-            tag: 1.6.1@sha256:a884f69f19ce0f66992f3872d24544d1e587e133b8a003e072711aafc1e02429
+            tag: 1.7.3@sha256:519ea4152381a3f58ae42859f530f5a433073e3f48f196fac3533432642b72b2
          command:
            - "web-entrypoint.sh"
          args:
@@ -83,6 +83,21 @@ dawarich:
                secretKeyRef:
                  name: dawarich-key
                  key: key
+            - name: OTP_ENCRYPTION_PRIMARY_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: dawarich-key
+                  key: otp-primary-key
+            - name: OTP_ENCRYPTION_DETERMINISTIC_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: dawarich-key
+                  key: otp-deterministic-key
+            - name: OTP_ENCRYPTION_KEY_DERIVATION_SALT
+              valueFrom:
+                secretKeyRef:
+                  name: dawarich-key
+                  key: otp-derivation-salt
            - name: RAILS_LOG_TO_STDOUT
              value: true
            - name: SELF_HOSTED
@@ -111,7 +126,7 @@ dawarich:
        sidekiq:
          image:
            repository: freikin/dawarich
-            tag: 1.6.1@sha256:a884f69f19ce0f66992f3872d24544d1e587e133b8a003e072711aafc1e02429
+            tag: 1.7.3@sha256:519ea4152381a3f58ae42859f530f5a433073e3f48f196fac3533432642b72b2
          command:
            - "sidekiq-entrypoint.sh"
          args:
@@ -161,12 +176,12 @@ dawarich:
            - name: OIDC_CLIENT_ID
              valueFrom:
                secretKeyRef:
-                  name: dawarich-oidc-secret
+                  name: dawarich-oidc-authentik
                  key: client
            - name: OIDC_CLIENT_SECRET
              valueFrom:
                secretKeyRef:
-                  name: dawarich-oidc-secret
+                  name: dawarich-oidc-authentik
                  key: secret
            - name: OIDC_PROVIDER_NAME
              value: Authentik
@@ -181,8 +196,23 @@ dawarich:
            - name: SECRET_KEY_BASE
              valueFrom:
                secretKeyRef:
-                  name: dawarich-key-secret
+                  name: dawarich-key
                  key: key
+            - name: OTP_ENCRYPTION_PRIMARY_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: dawarich-key
+                  key: otp-primary-key
+            - name: OTP_ENCRYPTION_DETERMINISTIC_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: dawarich-key
+                  key: otp-deterministic-key
+            - name: OTP_ENCRYPTION_KEY_DERIVATION_SALT
+              valueFrom:
+                secretKeyRef:
+                  name: dawarich-key
+                  key: otp-derivation-salt
            - name: RAILS_LOG_TO_STDOUT
              value: true
            - name: SELF_HOSTED
--- a/clusters/cl01tl/helm/democratic-csi-synology-iscsi/values.yaml
+++ b/clusters/cl01tl/helm/democratic-csi-synology-iscsi/values.yaml
@@ -47,6 +47,8 @@ democratic-csi:
        fsType: ext4
  node:
    hostPID: true
+    rbac:
+      enabled: true
    driver:
      extraEnv:
        - name: ISCSIADM_HOST_STRATEGY
--- a/clusters/cl01tl/helm/directus/Chart.lock
+++ b/clusters/cl01tl/helm/directus/Chart.lock
@@ -7,9 +7,9 @@ dependencies:
  version: 7.12.1
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.1
+  version: 0.7.0
 - name: rclone-bucket
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.3
-digest: sha256:df3b79c6b8868d749d98d232741fef4a26b73894bce3bf4588581340c15fc3da
-generated: "2026-04-26T21:06:27.85398357Z"
+  version: 0.5.0
+digest: sha256:0545b7862144935e861641090f24e1cfb43ba73da7bcbca5013fae6e002e2daa
+generated: "2026-05-02T01:46:52.095684422Z"
--- a/clusters/cl01tl/helm/directus/Chart.yaml
+++ b/clusters/cl01tl/helm/directus/Chart.yaml
@@ -26,12 +26,12 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: valkey
    alias: valkey
-    version: 0.6.1
+    version: 0.7.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: rclone-bucket
    alias: rclone-directus-assets-remote
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.4.3
+    version: 0.5.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/directus.png
 # renovate: datasource=github-releases depName=directus/directus
-appVersion: 11.17.3
+appVersion: 11.17.4
--- a/clusters/cl01tl/helm/directus/values.yaml
+++ b/clusters/cl01tl/helm/directus/values.yaml
@@ -8,7 +8,7 @@ directus:
        main:
          image:
            repository: ghcr.io/directus/directus
-            tag: 11.17.3@sha256:ae6ab737fd04077d295bbefa545cc4aefccc206e3d0120c83812f9b482a8c9a5
+            tag: 11.17.4@sha256:eb326f679ae847c0a776f93b972761dc2ebe84980e0b9d274a6bc31cd62809f7
          env:
            - name: PUBLIC_URL
              value: https://directus.alexlebens.net
@@ -210,10 +210,6 @@ valkey:
      aclUsers:
        default:
          permissions: "~* &* +@all"
-    # No option to configure metrics when auth is enabled
-    # https://github.com/valkey-io/valkey-helm/issues/135
-    metrics:
-      enabled: false
 rclone-directus-assets-remote:
  cronJob:
    suspend: false
--- a/clusters/cl01tl/helm/elastic-operator/values.yaml
+++ b/clusters/cl01tl/helm/elastic-operator/values.yaml
@@ -1,6 +1,5 @@
 eck-operator:
  managedNamespaces:
-    - stalwart
    - tubearchivist
  installCRDs: true
  replicaCount: 2
--- a/clusters/cl01tl/helm/element-web/Chart.lock
+++ b/clusters/cl01tl/helm/element-web/Chart.lock
@@ -1,9 +1,9 @@
 dependencies:
 - name: element-web
  repository: https://ananace.gitlab.io/charts
-  version: 1.4.34
+  version: 1.4.36
 - name: cloudflared
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 2.6.0
-digest: sha256:e988be9f997351a8f658bf5151ec4fb04ae7d877389c9bf01b7331e1a58005ef
-generated: "2026-04-24T21:06:15.882448748Z"
+digest: sha256:36b3f340ee46f20961fdaac41724528c6c3d4b34bf26d97779da7e33087250a1
+generated: "2026-05-03T00:56:23.054212477Z"
--- a/clusters/cl01tl/helm/element-web/Chart.yaml
+++ b/clusters/cl01tl/helm/element-web/Chart.yaml
@@ -15,11 +15,11 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: element-web
-    version: 1.4.34
+    version: 1.4.36
    repository: https://ananace.gitlab.io/charts
  - name: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
    version: 2.6.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/element.png
 # renovate: datasource=github-releases depName=element-hq/element-web
-appVersion: v1.12.15
+appVersion: v1.12.17
--- a/clusters/cl01tl/helm/element-web/values.yaml
+++ b/clusters/cl01tl/helm/element-web/values.yaml
@@ -2,7 +2,7 @@ element-web:
  replicaCount: 1
  image:
    repository: ghcr.io/element-hq/element-web
-    tag: v1.12.15@sha256:c7fa40b5ba3891f8af3ce63da0818f457c1802a9ee4d2f5e46a9df36a2388eed
+    tag: v1.12.17@sha256:f4a81a24d49a9c5b97e02e77a3013ec799873e500e69041078a28be98e4f1280
  defaultServer:
    url: https://matrix.alexlebens.dev
    name: alexlebens.dev
--- a/clusters/cl01tl/helm/eraser/values.yaml
+++ b/clusters/cl01tl/helm/eraser/values.yaml
@@ -48,7 +48,7 @@ eraser-metrics:
        main:
          image:
            repository: ghcr.io/open-telemetry/opentelemetry-collector-releases/opentelemetry-collector
-            tag: 0.150.1@sha256:618f7867e49fdb173d9b46d535b01f82254b0b14beac6ab1f6f2eb8cf62c5d42
+            tag: 0.151.0@sha256:49a12827519134ed72881a64247ea43fbf4bdac50cfa41ceb495fc1c684451e2
          command:
            - /otelcol
            - --config=/conf/otel-collector-config.yaml
--- a/clusters/cl01tl/helm/external-dns/Chart.lock
+++ b/clusters/cl01tl/helm/external-dns/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: external-dns
  repository: https://kubernetes-sigs.github.io/external-dns/
-  version: 1.20.0
-digest: sha256:0da4dec408239ea48de1d95fa8ad7701c4fdc0efe67baa8743507c75e62e2a47
-generated: "2026-01-03T23:04:25.142170083Z"
+  version: 1.21.1
+digest: sha256:c0fc34e2a1fd5a100043c2e22130a3a7910019b655c5e69a50424562f4322f5d
+generated: "2026-05-01T02:29:38.018973854Z"
--- a/clusters/cl01tl/helm/external-dns/Chart.yaml
+++ b/clusters/cl01tl/helm/external-dns/Chart.yaml
@@ -16,7 +16,7 @@ maintainers:
 dependencies:
  - name: external-dns
    alias: external-dns-unifi
-    version: 1.20.0
+    version: 1.21.1
    repository: https://kubernetes-sigs.github.io/external-dns/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 # renovate: datasource=github-releases depName=kubernetes-sigs/external-dns
--- a/clusters/cl01tl/helm/external-secrets/Chart.lock
+++ b/clusters/cl01tl/helm/external-secrets/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: external-secrets
  repository: https://charts.external-secrets.io
-  version: 2.4.0
-digest: sha256:a31b4ba5b5ec296036576c8d7d26f8b42061eec7142817f9ca0c256a457a2ea1
-generated: "2026-04-24T19:03:31.856576444Z"
+  version: 2.4.1
+digest: sha256:f862e1236cdbd9ddea5692ae63f7a05a4dc1f3d60bcae33015237cc0a630c224
+generated: "2026-04-28T18:30:17.998349684Z"
--- a/clusters/cl01tl/helm/external-secrets/Chart.yaml
+++ b/clusters/cl01tl/helm/external-secrets/Chart.yaml
@@ -14,8 +14,8 @@ sources:
 dependencies:
  - name: external-secrets
    alias: external-secrets
-    version: 2.4.0
+    version: 2.4.1
    repository: https://charts.external-secrets.io
 icon: https://raw.githubusercontent.com/external-secrets/external-secrets/refs/heads/main/assets/eso-logo-large.png
 # renovate: datasource=github-releases depName=external-secrets/external-secrets
-appVersion: v2.4.0
+appVersion: v2.4.1
--- a/clusters/cl01tl/helm/external-secrets/values.yaml
+++ b/clusters/cl01tl/helm/external-secrets/values.yaml
@@ -2,7 +2,7 @@ external-secrets:
  replicaCount: 3
  image:
    repository: ghcr.io/external-secrets/external-secrets
-    tag: v2.4.0@sha256:d2b74514f63f5b55360d08351f1fe5af3b1db794a81fa10389abe2ff2999c566
+    tag: v2.4.1@sha256:9440a40b394791a5e93f3f7e1b33399ecbdc0e38273de1d69ed83fe12936fc09
  installCRDs: true
  crds:
    createClusterExternalSecret: true
@@ -29,7 +29,7 @@ external-secrets:
  webhook:
    image:
      repository: ghcr.io/external-secrets/external-secrets
-      tag: v2.4.0@sha256:d2b74514f63f5b55360d08351f1fe5af3b1db794a81fa10389abe2ff2999c566
+      tag: v2.4.1@sha256:9440a40b394791a5e93f3f7e1b33399ecbdc0e38273de1d69ed83fe12936fc09
    resources:
      requests:
        cpu: 1m
@@ -37,7 +37,7 @@ external-secrets:
  certController:
    image:
      repository: ghcr.io/external-secrets/external-secrets
-      tag: v2.4.0@sha256:d2b74514f63f5b55360d08351f1fe5af3b1db794a81fa10389abe2ff2999c566
+      tag: v2.4.1@sha256:9440a40b394791a5e93f3f7e1b33399ecbdc0e38273de1d69ed83fe12936fc09
    resources:
      requests:
        cpu: 1m
--- a/clusters/cl01tl/helm/foldergram/Chart.lock
+++ b/clusters/cl01tl/helm/foldergram/Chart.lock
@@ -7,6 +7,6 @@ dependencies:
  version: 2.6.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.0
-digest: sha256:c42d896ab065b1278e0ae9f297e15ba2165fec99148003bf67f56aa641cf406a
-generated: "2026-04-24T22:50:55.336683873Z"
+  version: 1.1.1
+digest: sha256:942224d5a91527ca20a46363d9c5b165643b11df043c119a315f94931e9e4975
+generated: "2026-04-28T23:31:37.471509638Z"
--- a/clusters/cl01tl/helm/foldergram/Chart.yaml
+++ b/clusters/cl01tl/helm/foldergram/Chart.yaml
@@ -24,7 +24,7 @@ dependencies:
    version: 2.6.0
  - name: volsync-target
    alias: volsync-target-db
-    version: 1.0.0
+    version: 1.1.1
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://raw.githubusercontent.com/foldergram/foldergram/refs/heads/main/client/public/icon-512.png
 # renovate: datasource=github-releases depName=foldergram/foldergram
--- a/clusters/cl01tl/helm/freshrss/Chart.lock
+++ b/clusters/cl01tl/helm/freshrss/Chart.lock
@@ -10,6 +10,6 @@ dependencies:
  version: 7.12.1
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.0
-digest: sha256:ad75160abdeec46eb8cbcfa25ce69cc99c0ec5e73142560df3ef5b1490a2a3f3
-generated: "2026-04-24T22:51:06.194383563Z"
+  version: 1.1.1
+digest: sha256:6b2bae691798ed86c9549dfce0c455015533f00fff92363b58bce61201fbfc8d
+generated: "2026-04-28T23:31:47.227478798Z"
--- a/clusters/cl01tl/helm/freshrss/Chart.yaml
+++ b/clusters/cl01tl/helm/freshrss/Chart.yaml
@@ -29,7 +29,7 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-data
-    version: 1.0.0
+    version: 1.1.1
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/freshrss.png
 # renovate: datasource=github-releases depName=FreshRSS/FreshRSS
--- a/clusters/cl01tl/helm/gatus/Chart.lock
+++ b/clusters/cl01tl/helm/gatus/Chart.lock
@@ -7,6 +7,6 @@ dependencies:
  version: 7.12.1
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.0
-digest: sha256:a1e4ca6f575989ad15501f31842b7b0a505cc7b2fc21d61587b8ae9ad7d39ffc
-generated: "2026-04-24T22:51:17.210954901Z"
+  version: 1.1.1
+digest: sha256:883863a9121ecbd519b19c6ffcfbaf7df0f7273b0877d303ed8922ba07f79c4b
+generated: "2026-04-28T23:31:56.941778354Z"
--- a/clusters/cl01tl/helm/gatus/Chart.yaml
+++ b/clusters/cl01tl/helm/gatus/Chart.yaml
@@ -24,7 +24,7 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-data
-    version: 1.0.0
+    version: 1.1.1
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/gatus.png
 # renovate: datasource=github-releases depName=TwiN/gatus
--- a/clusters/cl01tl/helm/gatus/values.yaml
+++ b/clusters/cl01tl/helm/gatus/values.yaml
@@ -212,12 +212,6 @@ gatus:
      - name: authentik
        url: https://authentik.alexlebens.net
        <<: *defaults
-      - name: roundcube
-        url: https://mail.alexlebens.net
-        <<: *defaults
-      - name: stalwart
-        url: https://stalwart.alexlebens.net
-        <<: *defaults
      - name: ntfy
        url: https://ntfy.alexlebens.net
        <<: *defaults
--- a/clusters/cl01tl/helm/gitea/Chart.lock
+++ b/clusters/cl01tl/helm/gitea/Chart.lock
@@ -16,12 +16,12 @@ dependencies:
  version: 7.12.1
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.1
+  version: 0.7.0
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.1
+  version: 0.7.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.0
-digest: sha256:a90e8908ef9f5349f444e53474692af302999b0ddcfa6d68f24ede9ef55d97e5
-generated: "2026-04-24T22:51:28.783181948Z"
+  version: 1.1.1
+digest: sha256:511ffcd0b9ab17ff7c9dff6fc72a2ef802a51a14a4f03e416acee40fa0d1f12a
+generated: "2026-05-02T01:47:05.386747243Z"
--- a/clusters/cl01tl/helm/gitea/Chart.yaml
+++ b/clusters/cl01tl/helm/gitea/Chart.yaml
@@ -44,16 +44,16 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: valkey
    alias: valkey-gitea
-    version: 0.6.1
+    version: 0.7.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: valkey
    alias: valkey-renovate
-    version: 0.6.1
+    version: 0.7.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-storage
-    version: 1.0.0
+    version: 1.1.1
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/gitea.png
 # renovate: datasource=github-releases depName=go-gitea/gitea
-appVersion: 1.26.0
+appVersion: 1.26.1
--- a/clusters/cl01tl/helm/gitea/templates/prometheus-rule.yaml
+++ b/clusters/cl01tl/helm/gitea/templates/prometheus-rule.yaml
@@ -0,0 +1,28 @@
+apiVersion: monitoring.coreos.com/v1
+kind: PrometheusRule
+metadata:
+  name: meilisearch
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: meilisearch
+    {{- include "custom.labels" . | nindent 4 }}
+spec:
+  groups:
+    - name: EmbeddedExporter
+      rules:
+        - alert: MeilisearchIndexIsEmpty
+          expr: meilisearch_index_docs_count == 0
+          for: 0m
+          labels:
+            severity: warning
+          annotations:
+            summary: Meilisearch index is empty (instance {{ `{{ $labels.instance }}` }})
+            description: "Meilisearch index {{ `{{ $labels.index }}` }} has zero documents\n  VALUE = {{ `{{ $value }}` }}\n  LABELS = {{ `{{ $labels }}` }}"
+        - alert: MeilisearchHttpResponseTime
+          expr: meilisearch_http_response_time_seconds > 0.5
+          for: 0m
+          labels:
+            severity: warning
+          annotations:
+            summary: Meilisearch http response time (instance {{ `{{ $labels.instance }}` }})
+            description: "Meilisearch http response time is too high\n  VALUE = {{ `{{ $value }}` }}\n  LABELS = {{ `{{ $labels }}` }}"
--- a/clusters/cl01tl/helm/gitea/values.yaml
+++ b/clusters/cl01tl/helm/gitea/values.yaml
@@ -9,7 +9,7 @@ gitea:
      maxUnavailable: 1
  image:
    repository: gitea/gitea
-    tag: 1.25.5
+    tag: 1.26.1
  service:
    http:
      type: ClusterIP
@@ -194,7 +194,7 @@ gitea-actions:
      registry: docker.io
      repository: gitea/act_runner
      # renovate: datasource=docker depName=gitea/act_runner
-      tag: 0.4.1@sha256:696a59b51ad3d149521e3beb0229d5fb88f87295e1616f940199793274415b56
+      tag: 0.6.1@sha256:b5c35d6bdbb9bb25e531230bfc7cc663cb751406cbec90a2a891b85fea54de86
      extraVolumeMounts:
        - name: workspace-vol
          mountPath: /workspace
@@ -206,9 +206,8 @@ gitea-actions:
        runner:
          labels:
            - "ubuntu-latest:docker://harbor.alexlebens.net/proxy-hub.docker/gitea/runner-images:ubuntu-24.04"
+            - "ubuntu-latest-slim:docker://harbor.alexlebens.net/proxy-hub.docker/gitea/runner-images:ubuntu-24.04-slim"
            - "ubuntu-js:docker://harbor.alexlebens.net/proxy-ghcr.io/catthehacker/ubuntu:js-24.04"
-            - "ubuntu-24.04:docker://harbor.alexlebens.net/proxy-hub.docker/gitea/runner-images:ubuntu-24.04"
-            - "ubuntu-22.04:docker://harbor.alexlebens.net/proxy-hub.docker/gitea/runner-images:ubuntu-22.04"
    dind:
      registry: docker.io
      repository: docker
@@ -281,10 +280,10 @@ valkey-gitea:
        cpu: 20m
        memory: 1Gi
    dataStorage:
-      requestedSize: 10Gi
+      requestedSize: 20Gi
    replica:
      persistence:
-        size: 10Gi
+        size: 20Gi
 valkey-renovate:
  valkey:
    nameOverride: valkey-renovate
--- a/clusters/cl01tl/helm/grafana-operator/Chart.lock
+++ b/clusters/cl01tl/helm/grafana-operator/Chart.lock
@@ -7,9 +7,9 @@ dependencies:
  version: 7.12.1
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.1
+  version: 0.7.0
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.1
-digest: sha256:fffa0806096edeb2b6a6ceead50427544ef3880a3d135afb4a9c7570d05b2042
-generated: "2026-04-24T21:52:27.743114014Z"
+  version: 0.7.0
+digest: sha256:1abbac7c3dd999e08b60bc86d45bf4d5740c02a078d4ee7145c5379c274e93d3
+generated: "2026-05-02T01:47:25.480915936Z"
--- a/clusters/cl01tl/helm/grafana-operator/Chart.yaml
+++ b/clusters/cl01tl/helm/grafana-operator/Chart.yaml
@@ -24,11 +24,11 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: valkey
    alias: valkey-unified-alerting
-    version: 0.6.1
+    version: 0.7.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: valkey
    alias: valkey-remote-cache
-    version: 0.6.1
+    version: 0.7.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/grafana.png
 # renovate: datasource=github-releases depName=grafana/grafana-operator
--- a/clusters/cl01tl/helm/grimmory/Chart.lock
+++ b/clusters/cl01tl/helm/grimmory/Chart.lock
@@ -7,6 +7,6 @@ dependencies:
  version: 26.3.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.0
-digest: sha256:d09beb99121c26ff41807ad0e04c8603e4b4a898b4da9dabae111b6a117533bd
-generated: "2026-04-24T22:51:44.025287784Z"
+  version: 1.1.1
+digest: sha256:3e1a513297b39105174d3f1d6010ac85526de3d9cf6418ea724599b42e8c0cd9
+generated: "2026-04-28T23:32:22.706602876Z"
--- a/clusters/cl01tl/helm/grimmory/Chart.yaml
+++ b/clusters/cl01tl/helm/grimmory/Chart.yaml
@@ -24,8 +24,8 @@ dependencies:
    repository: https://helm.mariadb.com/mariadb-operator
  - name: volsync-target
    alias: volsync-target-config
-    version: 1.0.0
+    version: 1.1.1
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/grimmory.png
 # renovate: datasource=github-releases depName=grimmory-tools/grimmory
-appVersion: v3.0.2
+appVersion: v3.0.3
--- a/clusters/cl01tl/helm/grimmory/values.yaml
+++ b/clusters/cl01tl/helm/grimmory/values.yaml
@@ -12,7 +12,7 @@ grimmory:
        main:
          image:
            repository: ghcr.io/grimmory-tools/grimmory
-            tag: v3.0.2@sha256:4557a78321add7d70bef7c0b89c2617c8c023246ae39698bc2cbe636f8c97f9b
+            tag: v3.0.3@sha256:a903a2b44c308bd1738b6f7cdb5a2e5a2a1ae23a092f30eb68581e2be1af50cd
          env:
            - name: TZ
              value: America/Chicago
--- a/clusters/cl01tl/helm/harbor/Chart.lock
+++ b/clusters/cl01tl/helm/harbor/Chart.lock
@@ -7,6 +7,6 @@ dependencies:
  version: 7.12.1
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.1
-digest: sha256:b1f69102ef2b48dc219b41a6f92ab26d3fda803877948b3288a3c5ebc8e69d86
-generated: "2026-04-24T21:52:56.225496919Z"
+  version: 0.7.0
+digest: sha256:8ce1125e688aa0f2da0f9f11157b8bab9bbc11aa82d16ed8e7c5141dccb508fd
+generated: "2026-05-02T01:47:39.632625858Z"
--- a/clusters/cl01tl/helm/harbor/Chart.yaml
+++ b/clusters/cl01tl/helm/harbor/Chart.yaml
@@ -24,7 +24,7 @@ dependencies:
    repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
  - name: valkey
    alias: valkey
-    version: 0.6.1
+    version: 0.7.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/harbor.png
 # renovate: datasource=github-releases depName=goharbor/harbor
--- a/clusters/cl01tl/helm/home-assistant/Chart.lock
+++ b/clusters/cl01tl/helm/home-assistant/Chart.lock
@@ -4,6 +4,6 @@ dependencies:
  version: 4.6.2
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.0
-digest: sha256:481ed6b5635e7005687c80bdb4d18e500b45b9a7c58f15b19bd2de77c96ddbd4
-generated: "2026-04-24T22:51:56.321419086Z"
+  version: 1.1.1
+digest: sha256:0c0dd41e2bd0102b956697b2171e223988042072fe61b7b979d4091e76fca9d4
+generated: "2026-04-28T23:32:34.16634307Z"
--- a/clusters/cl01tl/helm/home-assistant/Chart.yaml
+++ b/clusters/cl01tl/helm/home-assistant/Chart.yaml
@@ -20,7 +20,7 @@ dependencies:
    version: 4.6.2
  - name: volsync-target
    alias: volsync-target-config
-    version: 1.0.0
+    version: 1.1.1
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/home-assistant.png
 # renovate: datasource=github-releases depName=home-assistant/core
--- a/clusters/cl01tl/helm/homepage/values.yaml
+++ b/clusters/cl01tl/helm/homepage/values.yaml
@@ -487,24 +487,6 @@ homepage:
                  href: https://authentik.alexlebens.net
                  siteMonitor: http://authentik-server.authentik:80
                  statusStyle: dot
-              - Email Client:
-                  icon: sh-roundcube.webp
-                  description: Roundcube
-                  href: https://mail.alexlebens.net
-                  siteMonitor: http://roundcube.roundcube:80
-                  statusStyle: dot
-              - Email Server:
-                  icon: sh-stalwart.webp
-                  description: Stalwart
-                  href: https://stalwart.alexlebens.net
-                  siteMonitor: http://stalwart.stalwart:80
-                  statusStyle: dot
-                  namespace: stalwart
-                  app: stalwart
-                  podSelector: >-
-                      app.kubernetes.io/instance in (
-                          stalwart
-                      )
              - Notifications:
                  icon: sh-ntfy.webp
                  description: ntfy
--- a/clusters/cl01tl/helm/houndarr/Chart.lock
+++ b/clusters/cl01tl/helm/houndarr/Chart.lock
@@ -4,6 +4,6 @@ dependencies:
  version: 4.6.2
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.0
-digest: sha256:e8d72b23589fc6a8bb05021f7697529b4715d9b25a408dfb9fcb4809ae2f72c2
-generated: "2026-04-24T22:52:07.350582175Z"
+  version: 1.1.1
+digest: sha256:de21eea7c5550645f0f1208758c3a81c6e015b90eae728c0b9740ddfc3f26880
+generated: "2026-04-28T23:32:44.359353393Z"
--- a/clusters/cl01tl/helm/houndarr/Chart.yaml
+++ b/clusters/cl01tl/helm/houndarr/Chart.yaml
@@ -21,8 +21,8 @@ dependencies:
    version: 4.6.2
  - name: volsync-target
    alias: volsync-target-data
-    version: 1.0.0
+    version: 1.1.1
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/houndarr.png
 # renovate: datasource=github-releases depName=av1155/houndarr
-appVersion: v1.9.0
+appVersion: v1.11.0
--- a/clusters/cl01tl/helm/houndarr/values.yaml
+++ b/clusters/cl01tl/helm/houndarr/values.yaml
@@ -8,7 +8,7 @@ houndarr:
        main:
          image:
            repository: ghcr.io/av1155/houndarr
-            tag: v1.9.0@sha256:2a9c9e0de43412f683f00cce6f5d0f3e059b27e50350434ae4029ade720e85a0
+            tag: v1.11.0@sha256:9ca1b3206fac52db23da8e58e1dc973743e0626846fc7600530d5ef413453c19
          env:
            - name: TZ
              value: America/Chicago
--- a/clusters/cl01tl/helm/immich/Chart.lock
+++ b/clusters/cl01tl/helm/immich/Chart.lock
@@ -7,9 +7,9 @@ dependencies:
  version: 7.12.1
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.1
+  version: 0.7.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.0
-digest: sha256:cd1a40aea6636d17bb205c8cc71126892d98ebff18191acdebd330ff6eae9c46
-generated: "2026-04-24T22:52:19.021425151Z"
+  version: 1.1.1
+digest: sha256:a0fdf72de4f4e2a475035e6ece26fe570e548895db02374a08fd4f3481c55dc0
+generated: "2026-05-02T01:47:54.093954603Z"
--- a/clusters/cl01tl/helm/immich/Chart.yaml
+++ b/clusters/cl01tl/helm/immich/Chart.yaml
@@ -25,11 +25,11 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: valkey
    alias: valkey
-    version: 0.6.1
+    version: 0.7.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-data
-    version: 1.0.0
+    version: 1.1.1
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/immich.png
 # renovate: datasource=github-releases depName=immich-app/immich
--- a/clusters/cl01tl/helm/isponsorblocktv/Chart.yaml
+++ b/clusters/cl01tl/helm/isponsorblocktv/Chart.yaml
@@ -19,4 +19,4 @@ dependencies:
    version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/youtube.png
 # renovate: datasource=github-releases depName=dmunozv04/iSponsorBlockTV
-appVersion: v2.7.0
+appVersion: v2.8.1
--- a/clusters/cl01tl/helm/isponsorblocktv/values.yaml
+++ b/clusters/cl01tl/helm/isponsorblocktv/values.yaml
@@ -10,7 +10,7 @@ isponsorblocktv:
        main:
          image:
            repository: ghcr.io/dmunozv04/isponsorblocktv
-            tag: v2.7.0@sha256:ff292ed53c9208ebfa7da3be7084bd863339d545a799bfefed5092396f5e8b4b
+            tag: v2.8.1@sha256:ac35b5d861f437cd5c71d0ccea7c3ed7ea0938ae08cbb6e256de06a236b106f5
          resources:
            requests:
              cpu: 1m
--- a/clusters/cl01tl/helm/jellyfin/Chart.lock
+++ b/clusters/cl01tl/helm/jellyfin/Chart.lock
@@ -7,6 +7,6 @@ dependencies:
  version: 0.32.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.0
-digest: sha256:dbe485a392b36a9045aac6c28df5c10802a8596eef2f695a2d7b562624daa754
-generated: "2026-04-24T22:52:31.690924714Z"
+  version: 1.1.1
+digest: sha256:e087d85b352de607cecf84a09bec368f37dbb63bfcc8c5bc1ebfbe97de121231
+generated: "2026-04-28T23:33:06.05345494Z"
--- a/clusters/cl01tl/helm/jellyfin/Chart.yaml
+++ b/clusters/cl01tl/helm/jellyfin/Chart.yaml
@@ -26,7 +26,7 @@ dependencies:
    repository: https://meilisearch.github.io/meilisearch-kubernetes
  - name: volsync-target
    alias: volsync-target-config
-    version: 1.0.0
+    version: 1.1.1
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/jellyfin.png
 # renovate: datasource=github-releases depName=jellyfin/jellyfin
--- a/clusters/cl01tl/helm/jellyfin/templates/prometheus-rule.yaml
+++ b/clusters/cl01tl/helm/jellyfin/templates/prometheus-rule.yaml
@@ -0,0 +1,28 @@
+apiVersion: monitoring.coreos.com/v1
+kind: PrometheusRule
+metadata:
+  name: meilisearch
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: meilisearch
+    {{- include "custom.labels" . | nindent 4 }}
+spec:
+  groups:
+    - name: EmbeddedExporter
+      rules:
+        - alert: MeilisearchIndexIsEmpty
+          expr: meilisearch_index_docs_count == 0
+          for: 0m
+          labels:
+            severity: warning
+          annotations:
+            summary: Meilisearch index is empty (instance {{ `{{ $labels.instance }}` }})
+            description: "Meilisearch index {{ `{{ $labels.index }}` }} has zero documents\n  VALUE = {{ `{{ $value }}` }}\n  LABELS = {{ `{{ $labels }}` }}"
+        - alert: MeilisearchHttpResponseTime
+          expr: meilisearch_http_response_time_seconds > 0.5
+          for: 0m
+          labels:
+            severity: warning
+          annotations:
+            summary: Meilisearch http response time (instance {{ `{{ $labels.instance }}` }})
+            description: "Meilisearch http response time is too high\n  VALUE = {{ `{{ $value }}` }}\n  LABELS = {{ `{{ $labels }}` }}"
--- a/clusters/cl01tl/helm/jellystat/Chart.lock
+++ b/clusters/cl01tl/helm/jellystat/Chart.lock
@@ -7,6 +7,6 @@ dependencies:
  version: 7.12.1
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.0
-digest: sha256:733c0b935ff897ddb115604f63d03738b47cab712d548b336785893544b7cc04
-generated: "2026-04-24T22:52:44.501898916Z"
+  version: 1.1.1
+digest: sha256:ef0f5d679b6e46d3bbfb37f4b06cba7b8ca98955de2be961366b5b23feda884c
+generated: "2026-04-28T23:33:17.913213442Z"
--- a/clusters/cl01tl/helm/jellystat/Chart.yaml
+++ b/clusters/cl01tl/helm/jellystat/Chart.yaml
@@ -25,7 +25,7 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-data
-    version: 1.0.0
+    version: 1.1.1
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/jellystat.png
 # renovate: datasource=github-releases depName=CyferShepard/Jellystat
--- a/clusters/cl01tl/helm/karakeep/Chart.lock
+++ b/clusters/cl01tl/helm/karakeep/Chart.lock
@@ -10,9 +10,9 @@ dependencies:
  version: 2.6.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.0
+  version: 1.1.1
 - name: rclone-bucket
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.3
-digest: sha256:376ee64d93cc959afc02c5cf5b308bbf12a0b5dfb339a6a853b3243e6033604c
-generated: "2026-04-26T21:07:05.718924873Z"
+  version: 0.5.0
+digest: sha256:399d686a6186e665a804f98a3dca1132d028f6cb9fc458866ec94b09920dbb6f
+generated: "2026-05-02T01:23:08.040832303Z"
--- a/clusters/cl01tl/helm/karakeep/Chart.yaml
+++ b/clusters/cl01tl/helm/karakeep/Chart.yaml
@@ -31,12 +31,12 @@ dependencies:
    version: 2.6.0
  - name: volsync-target
    alias: volsync-target-data
-    version: 1.0.0
+    version: 1.1.1
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: rclone-bucket
    alias: rclone-karakeep-assets-remote
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.4.3
+    version: 0.5.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/karakeep.png
 # renovate: datasource=github-releases depName=karakeep-app/karakeep
 appVersion: 0.31.0
--- a/clusters/cl01tl/helm/karakeep/templates/prometheus-rule.yaml
+++ b/clusters/cl01tl/helm/karakeep/templates/prometheus-rule.yaml
@@ -0,0 +1,28 @@
+apiVersion: monitoring.coreos.com/v1
+kind: PrometheusRule
+metadata:
+  name: meilisearch
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: meilisearch
+    {{- include "custom.labels" . | nindent 4 }}
+spec:
+  groups:
+    - name: EmbeddedExporter
+      rules:
+        - alert: MeilisearchIndexIsEmpty
+          expr: meilisearch_index_docs_count == 0
+          for: 0m
+          labels:
+            severity: warning
+          annotations:
+            summary: Meilisearch index is empty (instance {{ `{{ $labels.instance }}` }})
+            description: "Meilisearch index {{ `{{ $labels.index }}` }} has zero documents\n  VALUE = {{ `{{ $value }}` }}\n  LABELS = {{ `{{ $labels }}` }}"
+        - alert: MeilisearchHttpResponseTime
+          expr: meilisearch_http_response_time_seconds > 0.5
+          for: 0m
+          labels:
+            severity: warning
+          annotations:
+            summary: Meilisearch http response time (instance {{ `{{ $labels.instance }}` }})
+            description: "Meilisearch http response time is too high\n  VALUE = {{ `{{ $value }}` }}\n  LABELS = {{ `{{ $labels }}` }}"
--- a/clusters/cl01tl/helm/komodo/Chart.lock
+++ b/clusters/cl01tl/helm/komodo/Chart.lock
@@ -7,6 +7,6 @@ dependencies:
  version: 7.12.1
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.0
-digest: sha256:5fd317a68abfed5e7bd60a888d1689e8bcf855e6c92181149b06865bbfd2142a
-generated: "2026-04-24T22:53:10.456647793Z"
+  version: 1.1.1
+digest: sha256:275833c68c02ccd34edaf4ccd38b901293c0a2e11e6ae3b7b2c8fdccf58d7b56
+generated: "2026-04-28T23:33:42.286082953Z"
--- a/clusters/cl01tl/helm/komodo/Chart.yaml
+++ b/clusters/cl01tl/helm/komodo/Chart.yaml
@@ -27,7 +27,7 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-keys
-    version: 1.0.0
+    version: 1.1.1
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/komodo.png
 # renovate: datasource=github-releases depName=moghtech/komodo
--- a/clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock
+++ b/clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock
@@ -1,7 +1,7 @@
 dependencies:
 - name: kube-prometheus-stack
  repository: oci://ghcr.io/prometheus-community/charts
-  version: 84.1.1
+  version: 84.5.0
 - name: prometheus-operator-crds
  repository: oci://ghcr.io/prometheus-community/charts
  version: 28.0.1
@@ -10,6 +10,6 @@ dependencies:
  version: 4.6.2
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.1
-digest: sha256:0fe4f0abcce69b28f1cb8ba2add3e66d696c8841136e177d99777685e3d0c058
-generated: "2026-04-26T21:05:21.686448397Z"
+  version: 0.7.0
+digest: sha256:902e19ae8e5818d1ac4c30f804e616e8428b927358e4823ef6e373fdf655cba1
+generated: "2026-05-02T01:48:08.598425992Z"
--- a/clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml
+++ b/clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml
@@ -20,7 +20,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: kube-prometheus-stack
-    version: 84.1.1
+    version: 84.5.0
    repository: oci://ghcr.io/prometheus-community/charts
  - name: prometheus-operator-crds
    version: 28.0.1
@@ -31,7 +31,7 @@ dependencies:
    version: 4.6.2
  - name: valkey
    alias: valkey
-    version: 0.6.1
+    version: 0.7.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/prometheus.png
 # renovate: datasource=github-releases depName=prometheus-operator/prometheus-operator
--- a/clusters/cl01tl/helm/kube-prometheus-stack/values.yaml
+++ b/clusters/cl01tl/helm/kube-prometheus-stack/values.yaml
@@ -98,8 +98,8 @@ kube-prometheus-stack:
            namespace: traefik
    prometheusSpec:
      scrapeInterval: 30s
-      retention: 45d
-      retentionSize: 240GiB
+      retention: 60d
+      retentionSize: 450GiB
      externalUrl: https://prometheus.alexlebens.net
      ruleSelectorNilUsesHelmValues: false
      serviceMonitorSelectorNilUsesHelmValues: false
@@ -112,7 +112,7 @@ kube-prometheus-stack:
            accessModes: ["ReadWriteOnce"]
            resources:
              requests:
-                storage: 250Gi
+                storage: 500Gi
 ntfy-alertmanager:
  global:
    fullnameOverride: ntfy-alertmanager
--- a/clusters/cl01tl/helm/languagetool/Chart.lock
+++ b/clusters/cl01tl/helm/languagetool/Chart.lock
@@ -4,6 +4,6 @@ dependencies:
  version: 4.6.2
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.0
-digest: sha256:f2dcc0a6855355730edf953bdc85ba96e0976e4bb3c1eb36ea7e7b8b875f0993
-generated: "2026-04-24T22:53:22.939567191Z"
+  version: 1.1.1
+digest: sha256:f37d15a563f128c99666136b1f361e81f3756af78321f7a9ac96b9ccf40aba0d
+generated: "2026-04-28T23:33:52.4031148Z"
--- a/clusters/cl01tl/helm/languagetool/Chart.yaml
+++ b/clusters/cl01tl/helm/languagetool/Chart.yaml
@@ -21,7 +21,7 @@ dependencies:
    version: 4.6.2
  - name: volsync-target
    alias: volsync-target-data
-    version: 1.0.0
+    version: 1.1.1
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/languagetool.png
 # renovate: datasource=github-releases depName=Erikvl87/docker-languagetool
--- a/clusters/cl01tl/helm/libation/Chart.lock
+++ b/clusters/cl01tl/helm/libation/Chart.lock
@@ -4,6 +4,6 @@ dependencies:
  version: 4.6.2
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.0
-digest: sha256:cf767b6293e91fd87c0d42578ae26e453c98f3dc394b03a980fc50daccc5e91a
-generated: "2026-04-24T22:53:35.66922158Z"
+  version: 1.1.1
+digest: sha256:f93fec3b053028a5a2398ee3a133031f348c77c7c544608b3cc26f4ac6b0723c
+generated: "2026-04-28T23:34:02.933569166Z"
--- a/clusters/cl01tl/helm/libation/Chart.yaml
+++ b/clusters/cl01tl/helm/libation/Chart.yaml
@@ -22,8 +22,8 @@ dependencies:
    version: 4.6.2
  - name: volsync-target
    alias: volsync-target-config
-    version: 1.0.0
+    version: 1.1.1
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/libation.png
 # renovate: datasource=github-releases depName=rmcrackan/Libation
-appVersion: 13.3.5
+appVersion: 13.3.6
--- a/clusters/cl01tl/helm/libation/values.yaml
+++ b/clusters/cl01tl/helm/libation/values.yaml
@@ -12,7 +12,7 @@ libation:
        main:
          image:
            repository: rmcrackan/libation
-            tag: 13.3.5@sha256:fcfeaa406a3567e3de89d85bf761d17868029c6e8a127922672770cb812b9be8
+            tag: 13.3.6@sha256:54695675b9e838b7448c99f7fa03f5c34e0e35c7d7c82c44663959888be9c1b6
          env:
            - name: SLEEP_TIME
              value: "-1"
--- a/clusters/cl01tl/helm/lidarr/Chart.lock
+++ b/clusters/cl01tl/helm/lidarr/Chart.lock
@@ -7,6 +7,6 @@ dependencies:
  version: 7.12.1
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.0
-digest: sha256:fcabcf8fd610e30a32e891fd226a17ff9546def197e022229060bcad9ce078d5
-generated: "2026-04-24T22:53:46.881913432Z"
+  version: 1.1.1
+digest: sha256:764f22175876a5841fe145fc59cc3c724ada8d827287ac15d414e1d661d2b807
+generated: "2026-04-28T23:34:13.853002968Z"
--- a/clusters/cl01tl/helm/lidarr/Chart.yaml
+++ b/clusters/cl01tl/helm/lidarr/Chart.yaml
@@ -29,7 +29,7 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-config
-    version: 1.0.0
+    version: 1.1.1
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/lidarr.png
 # renovate: datasource=github-releases depName=linuxserver/docker-lidarr
--- a/clusters/cl01tl/helm/loki/Chart.lock
+++ b/clusters/cl01tl/helm/loki/Chart.lock
@@ -1,9 +1,9 @@
 dependencies:
 - name: loki
-  repository: https://grafana.github.io/helm-charts
-  version: 6.55.0
+  repository: oci://ghcr.io/grafana-community/helm-charts
+  version: 13.5.0
 - name: alloy
  repository: https://grafana.github.io/helm-charts
  version: 1.8.0
-digest: sha256:e3c7508c21ed7737f692387ca79a0c001c3393edbedff7b05c60325469a4fb2b
-generated: "2026-04-24T17:01:55.023153925Z"
+digest: sha256:bef475f5b6770e4b582b4499e38417789b2bb59ce0ee93c0390daef780e5728d
+generated: "2026-05-02T19:36:44.416322-05:00"
--- a/clusters/cl01tl/helm/loki/Chart.yaml
+++ b/clusters/cl01tl/helm/loki/Chart.yaml
@@ -9,14 +9,14 @@ home: https://docs.alexlebens.dev/applications/loki/
 sources:
  - https://github.com/grafana/loki
  - https://github.com/grafana/alloy
-  - https://github.com/grafana/loki/tree/main/production/helm/loki
+  - https://github.com/grafana-community/helm-charts/tree/main/charts/loki
  - https://github.com/grafana/alloy/tree/main/operations/helm/charts/alloy
 maintainers:
  - name: alexlebens
 dependencies:
  - name: loki
-    version: 6.55.0
-    repository: https://grafana.github.io/helm-charts
+    version: 13.5.0
+    repository: oci://ghcr.io/grafana-community/helm-charts
  - name: alloy
    version: 1.8.0
    repository: https://grafana.github.io/helm-charts
--- a/clusters/cl01tl/helm/loki/values.yaml
+++ b/clusters/cl01tl/helm/loki/values.yaml
@@ -1,5 +1,5 @@
 loki:
-  deploymentMode: SingleBinary
+  deploymentMode: Monolithic
  loki:
    auth_enabled: false
    limits_config:
@@ -31,8 +31,6 @@ loki:
      pool_config:
        remote_timeout: 10s
      remote_timeout: 10s
-  enterprise:
-    enabled: false
  gateway:
    enabled: true
    resources:
@@ -41,6 +39,18 @@ loki:
        memory: 20Mi
    basicAuth:
      enabled: false
+    route:
+      main:
+        enabled: true
+        apiVersion: gateway.networking.k8s.io/v1
+        kind: HTTPRoute
+        hostnames:
+          - loki.alexlebens.net
+        parentRefs:
+          - group: gateway.networking.k8s.io
+            kind: Gateway
+            name: traefik-gateway
+            namespace: traefik
  singleBinary:
    replicas: 1
    resources:
@@ -48,14 +58,16 @@ loki:
        cpu: 100m
        memory: 800Mi
    persistence:
-      enabled: true
      size: 150Gi
      storageClass: synology-iscsi-delete
  write:
+    enabled: false
    replicas: 0
  read:
+    enabled: false
    replicas: 0
  backend:
+    enabled: false
    replicas: 0
 alloy:
  crds:
--- a/clusters/cl01tl/helm/mariadb-operator/values.yaml
+++ b/clusters/cl01tl/helm/mariadb-operator/values.yaml
@@ -2,7 +2,8 @@ mariadb-operator:
  crds:
    enabled: false
  ha:
-    enabled: true
+    enabled: false
+    replicas: 1
  metrics:
    enabled: true
  pdb:
--- a/clusters/cl01tl/helm/matrix-synapse/Chart.lock
+++ b/clusters/cl01tl/helm/matrix-synapse/Chart.lock
@@ -1,7 +1,7 @@
 dependencies:
 - name: matrix-synapse
  repository: https://ananace.gitlab.io/charts
-  version: 3.12.25
+  version: 3.12.26
 - name: app-template
  repository: https://bjw-s-labs.github.io/helm-charts/
  version: 4.6.2
@@ -22,21 +22,21 @@ dependencies:
  version: 7.12.1
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.1
+  version: 0.7.0
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.1
+  version: 0.7.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.0
+  version: 1.1.1
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.0
+  version: 1.1.1
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.0
+  version: 1.1.1
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.0
-digest: sha256:263754d5c844ddc1b74f9fa06e64760a4fc7a3b5213255c81ed444149793fe10
-generated: "2026-04-24T22:53:58.552457385Z"
+  version: 1.1.1
+digest: sha256:4377d9ff96042ba996b879caf6108260d2eb9d20bccdb26ae7042d96d2772012
+generated: "2026-05-03T01:00:09.899197368Z"
--- a/clusters/cl01tl/helm/matrix-synapse/Chart.yaml
+++ b/clusters/cl01tl/helm/matrix-synapse/Chart.yaml
@@ -26,7 +26,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: matrix-synapse
-    version: 3.12.25
+    version: 3.12.26
    repository: https://ananace.gitlab.io/charts
  - name: app-template
    alias: matrix-hookshot
@@ -54,28 +54,28 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: valkey
    alias: valkey-matrix-synapse
-    version: 0.6.1
+    version: 0.7.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: valkey
    alias: valkey-hookshot
-    version: 0.6.1
+    version: 0.7.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-synapse
-    version: 1.0.0
+    version: 1.1.1
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-hookshot
-    version: 1.0.0
+    version: 1.1.1
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-discord
-    version: 1.0.0
+    version: 1.1.1
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-whatsapp
-    version: 1.0.0
+    version: 1.1.1
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/matrix.png
 # renovate: datasource=github-releases depName=element-hq/synapse
-appVersion: v1.151.0
+appVersion: vv1.152.0
--- a/clusters/cl01tl/helm/matrix-synapse/values.yaml
+++ b/clusters/cl01tl/helm/matrix-synapse/values.yaml
@@ -1,7 +1,7 @@
 matrix-synapse:
  image:
    repository: ghcr.io/element-hq/synapse
-    tag: v1.151.0@sha256:184dc8757daef019b511e7f96fc6e5edfb880fd074d8cf702c7e3aa899d188c8
+    tag: v1.152.0@sha256:6216aaa0a111fedc007002c0e595b2b913dc7bdfc59442d1e04b72912fa23a9c
  serverName: alexlebens.dev
  publicServerName: matrix.alexlebens.dev
  argoCD: true
@@ -445,10 +445,6 @@ valkey-matrix-synapse:
      aclUsers:
        default:
          permissions: "~* &* +@all"
-    # No option to configure metrics when auth is enabled
-    # https://github.com/valkey-io/valkey-helm/issues/135
-    metrics:
-      enabled: false
 valkey-hookshot:
  valkey:
    nameOverride: valkey-hookshot
--- a/clusters/cl01tl/helm/medialyze/Chart.lock
+++ b/clusters/cl01tl/helm/medialyze/Chart.lock
@@ -4,6 +4,6 @@ dependencies:
  version: 4.6.2
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.0
-digest: sha256:9ead931baa8eb7bccb6c5366fb298fd1a2c452ceb9309e2b5f6c7e2569a1bedc
-generated: "2026-04-24T22:54:12.562228272Z"
+  version: 1.1.1
+digest: sha256:9664dab6f824365a48e0e1225488abd6b290a5643e5b26c9339c37a3e06eb23d
+generated: "2026-04-28T23:34:39.124342667Z"
--- a/clusters/cl01tl/helm/medialyze/Chart.yaml
+++ b/clusters/cl01tl/helm/medialyze/Chart.yaml
@@ -20,7 +20,7 @@ dependencies:
    version: 4.6.2
  - name: volsync-target
    alias: volsync-target-data
-    version: 1.0.0
+    version: 1.1.1
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://raw.githubusercontent.com/frederikemmer/MediaLyze/d8f69c0628bac7c047b90f91a66341648029c273/frontend/public/favicon.svg
 # renovate: datasource=github-releases depName=frederikemmer/MediaLyze
--- a/Show More
+++ b/Show More