Update postgres-cluster Docker tag to v7.4.5

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [freshrss/freshrss](https://freshrss.org/) ([source](https://github.com/FreshRSS/FreshRSS)) | minor | `1.27.1` -> `1.28.0` |

---

### Release Notes

<details>
<summary>FreshRSS/FreshRSS (freshrss/freshrss)</summary>

### [`v1.28.0`](https://github.com/FreshRSS/FreshRSS/blob/HEAD/CHANGELOG.md#2025-12-24-FreshRSS-1280)

[Compare Source](https://github.com/FreshRSS/FreshRSS/compare/1.27.1...1.28.0)

- Features
  - New sorting and filtering by date of *User modified* [#&#8203;7886](https://github.com/FreshRSS/FreshRSS/pull/7886), [#&#8203;8090](https://github.com/FreshRSS/FreshRSS/pull/8090),
    [#&#8203;8105](https://github.com/FreshRSS/FreshRSS/pull/8105), [#&#8203;8118](https://github.com/FreshRSS/FreshRSS/pull/8118), [#&#8203;8130](https://github.com/FreshRSS/FreshRSS/pull/8130)
    - Corresponding search operator, e.g. `userdate:PT1H` for the past hour [#&#8203;8093](https://github.com/FreshRSS/FreshRSS/pull/8093)
    - Allows finding articles marked by the local user as read/unread or starred/unstarred at specific dates for e.g. undo action.
  - New sorting by article length [#&#8203;8119](https://github.com/FreshRSS/FreshRSS/pull/8119)
  - New advanced search form [#&#8203;8103](https://github.com/FreshRSS/FreshRSS/pull/8103), [#&#8203;8122](https://github.com/FreshRSS/FreshRSS/pull/8122), [#&#8203;8226](https://github.com/FreshRSS/FreshRSS/pull/8226)
  - Add compatibility with PCRE word boundary `\b` and `\B` for regex search using PostgreSQL [#&#8203;8141](https://github.com/FreshRSS/FreshRSS/pull/8141)
  - More uniform SQL search and PHP search for accents and case-sensitivity (e.g. for automatically marking as read) [#&#8203;8329](https://github.com/FreshRSS/FreshRSS/pull/8329)
  - New overview of dates with most unread articles [#&#8203;8089](https://github.com/FreshRSS/FreshRSS/pull/8089)
  - Allow marking as read articles older than 1 or 7 days also when sorting by publication date [#&#8203;8163](https://github.com/FreshRSS/FreshRSS/pull/8163)
  - New option to show user labels instead of tags in RSS share [#&#8203;8112](https://github.com/FreshRSS/FreshRSS/pull/8112)
  - Add new feed visibility (priority) *Show in its feed* [#&#8203;7972](https://github.com/FreshRSS/FreshRSS/pull/7972)
  - New ability to share feed visibility through API (implemented by e.g. Capy Reader) [#&#8203;7583](https://github.com/FreshRSS/FreshRSS/pull/7583), [#&#8203;8158](https://github.com/FreshRSS/FreshRSS/pull/8158)
  - Configurable notification timeout [#&#8203;7942](https://github.com/FreshRSS/FreshRSS/pull/7942)
  - OPML export/import of unicity criteria [#&#8203;8243](https://github.com/FreshRSS/FreshRSS/pull/8243)
  - Ensure stable IDs (categories, feeds, labels) during export/import [#&#8203;7988](https://github.com/FreshRSS/FreshRSS/pull/7988)
  - Add username and timestamp to SQLite export from Web UI [#&#8203;8169](https://github.com/FreshRSS/FreshRSS/pull/8169)
  - Add option to apply filter actions to existing articles [#&#8203;7959](https://github.com/FreshRSS/FreshRSS/pull/7959), [#&#8203;8259](https://github.com/FreshRSS/FreshRSS/pull/8259)
  - Support CSS selector `~` *subsequent-sibling* [#&#8203;8154](https://github.com/FreshRSS/FreshRSS/pull/8154)
    - Upstream PR [phpgt/CssXPath#231](https://github.com/phpgt/CssXPath/pull/231)
  - Rework saving of configuration files for more reliability in case of e.g. full disk [#&#8203;8220](https://github.com/FreshRSS/FreshRSS/pull/8220)
  - Web scraping support date format as milliseconds for Unix epoch [#&#8203;8266](https://github.com/FreshRSS/FreshRSS/pull/8266)
  - Allow negative category sort numbers [#&#8203;8330](https://github.com/FreshRSS/FreshRSS/pull/8330)
- Performance
  - Improve SQL speed for updating cached information [#&#8203;6957](https://github.com/FreshRSS/FreshRSS/pull/6957), [#&#8203;8207](https://github.com/FreshRSS/FreshRSS/pull/8207),
    [#&#8203;8255](https://github.com/FreshRSS/FreshRSS/pull/8255), [#&#8203;8254](https://github.com/FreshRSS/FreshRSS/pull/8254), [#&#8203;8255](https://github.com/FreshRSS/FreshRSS/pull/8255)
  - Fix SQL performance issue with MySQL, using an index hint [#&#8203;8211](https://github.com/FreshRSS/FreshRSS/pull/8211)
  - Scaling of user statistics in Web UI and CLI, to help instances with 1k+ users [#&#8203;8277](https://github.com/FreshRSS/FreshRSS/pull/8277)
  - API streaming of large responses for reducing memory consumption and increasing speed [#&#8203;8041](https://github.com/FreshRSS/FreshRSS/pull/8041)
- Security
  - 💥 Move unsafe autologin to an extension [#&#8203;7958](https://github.com/FreshRSS/FreshRSS/pull/7958)
  - Fix some CSRFs [#&#8203;8035](https://github.com/FreshRSS/FreshRSS/pull/8035)
  - Strengthen some crypto (login, tokens, nonces) [#&#8203;8061](https://github.com/FreshRSS/FreshRSS/pull/8061), [#&#8203;8320](https://github.com/FreshRSS/FreshRSS/pull/8320)
  - Create separate HTTP `Retry-After` rules for proxies [#&#8203;8029](https://github.com/FreshRSS/FreshRSS/pull/8029), [#&#8203;8218](https://github.com/FreshRSS/FreshRSS/pull/8218)
  - Add `data:` to CSP in subscription controller [#&#8203;8253](https://github.com/FreshRSS/FreshRSS/pull/8253)
  - Improve anonymous authentication logic [#&#8203;8165](https://github.com/FreshRSS/FreshRSS/pull/8165)
  - Enable GitHub [release immutability](https://github.blog/changelog/2025-10-28-immutable-releases-are-now-generally-available/) [#&#8203;8205](https://github.com/FreshRSS/FreshRSS/issues/8205)
- Bug fixing
  - Exclude local networks for domain-wide HTTP `Retry-After` [#&#8203;8195](https://github.com/FreshRSS/FreshRSS/pull/8195)
  - Fix OpenID Connect with Debian 13 [#&#8203;8032](https://github.com/FreshRSS/FreshRSS/pull/8032)
  - Fix MySQL / MariaDB bug wrongly sorting new articles [#&#8203;8223](https://github.com/FreshRSS/FreshRSS/pull/8223)
  - Fix MySQL / MariaDB database size calculation [#&#8203;8282](https://github.com/FreshRSS/FreshRSS/pull/8282)
  - Fix SQLite bind bug when adding user label [#&#8203;8101](https://github.com/FreshRSS/FreshRSS/pull/8101)
  - Fix SQL auto-update of field `f.kind` to ease migrations from FreshRSS versions older than 1.20.0 [#&#8203;8148](https://github.com/FreshRSS/FreshRSS/pull/8148)
  - Fix search encoding and quoting [#&#8203;8311](https://github.com/FreshRSS/FreshRSS/pull/8311), [#&#8203;8324](https://github.com/FreshRSS/FreshRSS/pull/8324), [#&#8203;8338](https://github.com/FreshRSS/FreshRSS/pull/8338)
  - Fix handling of database unexpected null content (during migrations) [#&#8203;8319](https://github.com/FreshRSS/FreshRSS/pull/8319), [#&#8203;8321](https://github.com/FreshRSS/FreshRSS/pull/8321)
  - Fix drag & drop of user query losing information [#&#8203;8113](https://github.com/FreshRSS/FreshRSS/pull/8113)
  - Fix DOM error while filtering retrieved full content [#&#8203;8132](https://github.com/FreshRSS/FreshRSS/pull/8132), [#&#8203;8161](https://github.com/FreshRSS/FreshRSS/pull/8161)
  - Fix `config.custom.php` during install [#&#8203;8033](https://github.com/FreshRSS/FreshRSS/pull/8033)
  - Fix do not mark important feeds as read from category [#&#8203;8067](https://github.com/FreshRSS/FreshRSS/pull/8067)
  - Fix regression of warnings in Web browser console due to lack of `window.bcrypt` object [#&#8203;8166](https://github.com/FreshRSS/FreshRSS/pull/8166)
  - Fix chart resize regression due to `chart.js` v4 update [#&#8203;8298](https://github.com/FreshRSS/FreshRSS/pull/8298)
  - Fix CLI user creation warning when language is not given [#&#8203;8283](https://github.com/FreshRSS/FreshRSS/pull/8283)
  - Fix merging of custom HTTP headers [#&#8203;8251](https://github.com/FreshRSS/FreshRSS/pull/8251)
  - Fix bug in the case of duplicated mark-as-read filters [#&#8203;8322](https://github.com/FreshRSS/FreshRSS/pull/8322)
- SimplePie
  - Fix support of HTTP trailer headers [#&#8203;7983](https://github.com/FreshRSS/FreshRSS/pull/7983), [simplepie#943](https://github.com/simplepie/simplepie/pull/943)
  - Apply HTTPS policy also on GUIDs and permalinks [#&#8203;8037](https://github.com/FreshRSS/FreshRSS/pull/8037), [simplepie#951](https://github.com/simplepie/simplepie/pull/951)
    - Fix `WordPress.com` HTTP duplicates with WebSub [Automattic/pushpress#16](https://github.com/Automattic/pushpress/pull/16)
  - Implement HTML whitelist for SimplePie sanitizer [#&#8203;7924](https://github.com/FreshRSS/FreshRSS/pull/7924), [simplepie#947](https://github.com/simplepie/simplepie/pull/947)
  - Various upstream contributions [simplepie#940](https://github.com/simplepie/simplepie/pull/940), [simplepie#944](https://github.com/simplepie/simplepie/pull/944)
- Deployment
  - Docker default image updated to Debian 13 Trixie with PHP 8.4.11 and Apache 2.4.65 [#&#8203;8032](https://github.com/FreshRSS/FreshRSS/pull/8032)
  - Docker alternative image updated to Alpine 3.23 with PHP 8.4.15 and Apache 2.4.65 [#&#8203;8285](https://github.com/FreshRSS/FreshRSS/pull/8285)
  - Fix Docker healthcheck `cli/health.php` compatibility with OpenID Connect [#&#8203;8040](https://github.com/FreshRSS/FreshRSS/pull/8040)
  - Improve Docker for compatibility with other base images such as Arch Linux [#&#8203;8299](https://github.com/FreshRSS/FreshRSS/pull/8299)
    - Improve `cli/access-permissions.sh` to detect the correct permission Web group such as `www-data`, `apache`, or `http`
  - Update PostgreSQL volume for Docker [#&#8203;8216](https://github.com/FreshRSS/FreshRSS/pull/8216), [#&#8203;8224](https://github.com/FreshRSS/FreshRSS/pull/8224)
  - Catch lack of `exec()` function for git update [#&#8203;8228](https://github.com/FreshRSS/FreshRSS/pull/8228)
  - Work around `DOMDocument::saveHTML()` scrambling charset encoding in some versions of libxml2 [#&#8203;8296](https://github.com/FreshRSS/FreshRSS/pull/8296)
  - Improve configuration checks for PHP extensions (in Web UI and CLI), including recommending e.g. `php-intl` [#&#8203;8334](https://github.com/FreshRSS/FreshRSS/pull/8334)
- UI
  - New button for toggling sidebar on desktop view [#&#8203;8201](https://github.com/FreshRSS/FreshRSS/pull/8201), [#&#8203;8286](https://github.com/FreshRSS/FreshRSS/pull/8286)
  - Better transitions between groups of articles [#&#8203;8174](https://github.com/FreshRSS/FreshRSS/pull/8174)
  - New links in transitions and jump ⏭ to next transition [#&#8203;8294](https://github.com/FreshRSS/FreshRSS/pull/8294)
  - More visible selected article [#&#8203;8230](https://github.com/FreshRSS/FreshRSS/pull/8230)
  - Show the parsed search query instead of the original user input [#&#8203;8293](https://github.com/FreshRSS/FreshRSS/pull/8293),
    [#&#8203;8306](https://github.com/FreshRSS/FreshRSS/pull/8306), [#&#8203;8341](https://github.com/FreshRSS/FreshRSS/pull/8341)
  - Show search query in the page title [#&#8203;8217](https://github.com/FreshRSS/FreshRSS/pull/8217)
  - Scroll into filtered feed/category on page load in the sidebar [#&#8203;8281](https://github.com/FreshRSS/FreshRSS/pull/8281), [#&#8203;8307](https://github.com/FreshRSS/FreshRSS/pull/8307)
  - Fix autocomplete issues in change password form [#&#8203;7812](https://github.com/FreshRSS/FreshRSS/pull/7812)
  - Fix navigating between read feeds using shortcut <kbd>shift</kbd>+<kbd>j</kbd>/<kbd>k</kbd> [#&#8203;8057](https://github.com/FreshRSS/FreshRSS/pull/8057)
  - Dark background in Web app manifest to avoid white flash when opening [#&#8203;8140](https://github.com/FreshRSS/FreshRSS/pull/8140)
  - Increase button visibility in UI to change theme [#&#8203;8149](https://github.com/FreshRSS/FreshRSS/pull/8149)
  - Replace arrow navigation in theme switcher with `<select>` [#&#8203;8190](https://github.com/FreshRSS/FreshRSS/pull/8190)
  - Improve scroll of article after load of user labels [#&#8203;7962](https://github.com/FreshRSS/FreshRSS/pull/7962)
  - Keep scroll state of page when closing the slider [#&#8203;8295](https://github.com/FreshRSS/FreshRSS/pull/8295), [#&#8203;8301](https://github.com/FreshRSS/FreshRSS/pull/8301)
  - Scroll into filtered feed/category on page load [#&#8203;8281](https://github.com/FreshRSS/FreshRSS/pull/8281)
  - Display sidebar dropdowns above if no space below [#&#8203;8335](https://github.com/FreshRSS/FreshRSS/pull/8335), [#&#8203;8336](https://github.com/FreshRSS/FreshRSS/pull/8336)
  - Use native CSS instead of SCSS [#&#8203;8200](https://github.com/FreshRSS/FreshRSS/pull/8200), [#&#8203;8241](https://github.com/FreshRSS/FreshRSS/pull/8241)
    - Using [CSS nesting](https://developer.mozilla.org/en-US/docs/Web/CSS/Guides/Nesting) and [relative colours](https://developer.mozilla.org/en-US/docs/Web/CSS/Guides/Colors/Using_relative_colors).
  - Various UI and style improvements: [#&#8203;8171](https://github.com/FreshRSS/FreshRSS/pull/8171), [#&#8203;8185](https://github.com/FreshRSS/FreshRSS/pull/8185), [#&#8203;8196](https://github.com/FreshRSS/FreshRSS/pull/8196)
  - JavaScript finalise migration from `Promise` to `async`/`await`: [#&#8203;8182](https://github.com/FreshRSS/FreshRSS/pull/8182)
- API
  - API performance optimisation: streaming of large responses [#&#8203;8041](https://github.com/FreshRSS/FreshRSS/pull/8041)
  - Fever API: Add `with_ids` parameter to mass-change read/unread/saved/unsaved on lists of articles [#&#8203;8312](https://github.com/FreshRSS/FreshRSS/pull/8312)
  - Misc API: better REST error semantics [#&#8203;8232](https://github.com/FreshRSS/FreshRSS/pull/8232)
- Extensions
  - Add support for extension priority [#&#8203;8038](https://github.com/FreshRSS/FreshRSS/pull/8038)
  - Add support for extension compatibility [#&#8203;8081](https://github.com/FreshRSS/FreshRSS/pull/8081)
  - Improve PHP code with hook enums [#&#8203;8036](https://github.com/FreshRSS/FreshRSS/pull/8036)
  - New hook `nav_entries` [#&#8203;8054](https://github.com/FreshRSS/FreshRSS/pull/8054)
  - Rename [Extensions](https://github.com/FreshRSS/Extensions) default branch from *master* to *main* [#&#8203;8194](https://github.com/FreshRSS/FreshRSS/pull/8194)
- I18n
  - Translation status as text in README [#&#8203;7842](https://github.com/FreshRSS/FreshRSS/pull/7842)
  - Add new translate CLI commands `move` [#&#8203;8214](https://github.com/FreshRSS/FreshRSS/pull/8214)
  - Change some regional language codes to comply with RFC 5646 / IETF BCP 47 / ISO 3166 / ISO 639-1 [#&#8203;8065](https://github.com/FreshRSS/FreshRSS/pull/8065)
  - Improve German [#&#8203;8028](https://github.com/FreshRSS/FreshRSS/pull/8028)
  - Improve Greek [#&#8203;8146](https://github.com/FreshRSS/FreshRSS/pull/8146)
  - Improve Finnish [#&#8203;8073](https://github.com/FreshRSS/FreshRSS/pull/8073), [#&#8203;8092](https://github.com/FreshRSS/FreshRSS/pull/8092)
  - Improve Hungarian [#&#8203;8244](https://github.com/FreshRSS/FreshRSS/pull/8244)
  - Improve Italian [#&#8203;8115](https://github.com/FreshRSS/FreshRSS/pull/8115), [#&#8203;8186](https://github.com/FreshRSS/FreshRSS/pull/8186)
  - Improve Polish [#&#8203;8134](https://github.com/FreshRSS/FreshRSS/pull/8134), [#&#8203;8135](https://github.com/FreshRSS/FreshRSS/pull/8135)
  - Improve Russian [#&#8203;8155](https://github.com/FreshRSS/FreshRSS/pull/8155), [#&#8203;8197](https://github.com/FreshRSS/FreshRSS/pull/8197)
  - Improve Simplified Chinese [#&#8203;8308](https://github.com/FreshRSS/FreshRSS/pull/8308), [#&#8203;8313](https://github.com/FreshRSS/FreshRSS/pull/8313)
- Misc.
  - Add code to modify a search expression [#&#8203;8293](https://github.com/FreshRSS/FreshRSS/pull/8293)
  - Remove *Pocket* sharing service [#&#8203;8127](https://github.com/FreshRSS/FreshRSS/pull/8127), [#&#8203;8128](https://github.com/FreshRSS/FreshRSS/pull/8128)
  - Update to PHPMailer 7.0.1 [#&#8203;8048](https://github.com/FreshRSS/FreshRSS/pull/8048), [#&#8203;8180](https://github.com/FreshRSS/FreshRSS/pull/8180), [#&#8203;8272](https://github.com/FreshRSS/FreshRSS/pull/8272)
  - 💥 Housekeeping of `lib_rss.php` with potential breaking changes for some extensions [#&#8203;8193](https://github.com/FreshRSS/FreshRSS/pull/8193),
  - Use native PHP `#[Deprecated]` [#&#8203;8325](https://github.com/FreshRSS/FreshRSS/pull/8325)
  - Improve PHP code [#&#8203;8156](https://github.com/FreshRSS/FreshRSS/pull/8156), [#&#8203;8203](https://github.com/FreshRSS/FreshRSS/pull/8203), [#&#8203;8284](https://github.com/FreshRSS/FreshRSS/pull/8284),
    [#&#8203;8292](https://github.com/FreshRSS/FreshRSS/pull/8292), [#&#8203;8297](https://github.com/FreshRSS/FreshRSS/pull/8297)
  - GitHub Actions: `--no-progress` [#&#8203;8315](https://github.com/FreshRSS/FreshRSS/pull/8315)
  - Update dev dependencies [#&#8203;8043](https://github.com/FreshRSS/FreshRSS/pull/8043), [#&#8203;8044](https://github.com/FreshRSS/FreshRSS/pull/8044),
    [#&#8203;8045](https://github.com/FreshRSS/FreshRSS/pull/8045), [#&#8203;8046](https://github.com/FreshRSS/FreshRSS/pull/8046), [#&#8203;8047](https://github.com/FreshRSS/FreshRSS/pull/8047),
    [#&#8203;8052](https://github.com/FreshRSS/FreshRSS/pull/8052), [#&#8203;8176](https://github.com/FreshRSS/FreshRSS/pull/8176), [#&#8203;8177](https://github.com/FreshRSS/FreshRSS/pull/8177),
    [#&#8203;8178](https://github.com/FreshRSS/FreshRSS/pull/8178), [#&#8203;8179](https://github.com/FreshRSS/FreshRSS/pull/8179), [#&#8203;8210](https://github.com/FreshRSS/FreshRSS/pull/8210),
    [#&#8203;8270](https://github.com/FreshRSS/FreshRSS/pull/8270), [#&#8203;8271](https://github.com/FreshRSS/FreshRSS/pull/8271), [#&#8203;8273](https://github.com/FreshRSS/FreshRSS/pull/8273),
    [#&#8203;8274](https://github.com/FreshRSS/FreshRSS/pull/8274), [#&#8203;8275](https://github.com/FreshRSS/FreshRSS/pull/8275), [#&#8203;8276](https://github.com/FreshRSS/FreshRSS/pull/8276)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi4zOS4xIiwidXBkYXRlZEluVmVyIjoiNDIuMzkuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=-->

Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/2851
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>

clusters/cl01tl/helm/argo-workflows/Chart.lock

@@ -7,6 +7,6 @@ dependencies:
   version: 2.4.19
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.3
-digest: sha256:6de7da41d9317d7942a455226e5eae682f32f1bbb7d0287b9306de847bd56fdb
-generated: "2025-12-22T23:17:37.4042-06:00"
+  version: 7.4.5
+digest: sha256:2cbfdaeceeba1a5bdaa6fb2e9c4d51ea1310878d8c1c122dcfb0614fc2c52fb7
+generated: "2025-12-27T05:20:54.819002674Z"

clusters/cl01tl/helm/argo-workflows/Chart.yaml

@@ -25,7 +25,7 @@ dependencies:
     repository: https://argoproj.github.io/argo-helm
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.3
+    version: 7.4.5
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 # renovate: github=argoproj/argo-workflows

clusters/cl01tl/helm/argocd/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: argo-cd
   repository: https://argoproj.github.io/argo-helm
-  version: 9.1.10
-digest: sha256:4970c90a7ba115a91006f27161b7fbb2e197250a548ab49f0451aab6cbe12d53
-generated: "2025-12-23T23:20:06.41177841Z"
+  version: 9.2.1
+digest: sha256:e2cb7a8af0a0ecef66b2808325c4fa179d1b598b54bedcdd4f144750fd7e65cb
+generated: "2025-12-25T16:01:15.118311807Z"

clusters/cl01tl/helm/argocd/Chart.yaml

@@ -15,7 +15,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: argo-cd
-    version: 9.1.10
+    version: 9.2.1
     repository: https://argoproj.github.io/argo-helm
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 # renovate: github=argoproj/argo-cd

clusters/cl01tl/helm/authentik/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 2.1.4
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.3
+  version: 7.4.5
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.5.0
-digest: sha256:d250e40d77b3010d55c258e264e36de060a6dbdb78fe56bdbfbc427692cfdcc7
-generated: "2025-12-23T16:28:00.416521-06:00"
+digest: sha256:d357b0a8f4351068d9ce7223ffd01a0921202cb2b41669421b8429bc3f7778eb
+generated: "2025-12-27T05:21:13.114814723Z"

clusters/cl01tl/helm/authentik/Chart.yaml

@@ -28,7 +28,7 @@ dependencies:
     version: 2.1.4
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.3
+    version: 7.4.5
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     version: 0.5.0

clusters/cl01tl/helm/blocky/values.yaml

@@ -96,11 +96,9 @@ blocky:
               cl01tl-endpoint                 IN      A       10.232.1.22
               cl01tl-endpoint                 IN      A       10.232.1.23
 
-              cl01tl-gateway                  IN      A       10.232.1.200
-
               traefik-cl01tl                  IN      A       10.232.1.21
               blocky                          IN      A       10.232.1.22
-              plex-lb                         IN      A       10.232.1.23
+              cilium-cl01tl                   IN      A       10.232.1.23
 
               ;; Application Names
               actual                          IN      CNAME   traefik-cl01tl
@@ -115,6 +113,7 @@ blocky:
               ceph                            IN      CNAME   traefik-cl01tl
               code-server                     IN      CNAME   traefik-cl01tl
               ephemera                        IN      CNAME   traefik-cl01tl
+              feishin                         IN      CNAME   traefik-cl01tl
               garage-s3                       IN      CNAME   traefik-cl01tl
               garage-webui                    IN      CNAME   traefik-cl01tl
               gatus                           IN      CNAME   traefik-cl01tl
@@ -125,7 +124,7 @@ blocky:
               home                            IN      CNAME   traefik-cl01tl
               home-assistant                  IN      CNAME   traefik-cl01tl
               home-assistant-code-server      IN      CNAME   traefik-cl01tl
-              hubble                          IN      CNAME   cl01tl-gateway
+              hubble                          IN      CNAME   traefik-cl01tl
               huntarr                         IN      CNAME   traefik-cl01tl
               immich                          IN      CNAME   traefik-cl01tl
               jellyfin                        IN      CNAME   traefik-cl01tl
@@ -137,6 +136,7 @@ blocky:
               listenarr                       IN      CNAME   traefik-cl01tl
               mail                            IN      CNAME   traefik-cl01tl
               n8n                             IN      CNAME   traefik-cl01tl
+              navidrome                       IN      CNAME   traefik-cl01tl
               ntfy                            IN      CNAME   traefik-cl01tl
               objects                         IN      CNAME   traefik-cl01tl
               ollama                          IN      CNAME   traefik-cl01tl
@@ -153,12 +153,14 @@ blocky:
               radarr-4k                       IN      CNAME   traefik-cl01tl
               radarr-anime                    IN      CNAME   traefik-cl01tl
               radarr-standup                  IN      CNAME   traefik-cl01tl
+              rayflume                        IN      CNAME   traefik-cl01tl
               searxng                         IN      CNAME   traefik-cl01tl
               seerr                           IN      CNAME   traefik-cl01tl
               slskd                           IN      CNAME   traefik-cl01tl
               sonarr                          IN      CNAME   traefik-cl01tl
               sonarr-4k                       IN      CNAME   traefik-cl01tl
               sonarr-anime                    IN      CNAME   traefik-cl01tl
+              soulsync                        IN      CNAME   traefik-cl01tl
               stalwart                        IN      CNAME   traefik-cl01tl
               tautulli                        IN      CNAME   traefik-cl01tl
               tdarr                           IN      CNAME   traefik-cl01tl

clusters/cl01tl/helm/cilium/templates/cilium-l2-announcement-policy.yaml

@@ -0,0 +1,19 @@
+apiVersion: "cilium.io/v2alpha1"
+kind: CiliumL2AnnouncementPolicy
+metadata:
+  name: general-l2-policy
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: general-l2-policy
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  nodeSelector:
+    matchExpressions:
+      - key: kubernetes.io/hostname
+        operator: Exists
+  interfaces:
+    - end0
+    - enp6s0
+  externalIPs: true
+  loadBalancerIPs: true

clusters/cl01tl/helm/cilium/templates/gateway.yaml

@@ -1,7 +1,7 @@
 # apiVersion: gateway.networking.k8s.io/v1
 # kind: Gateway
 # metadata:
-#   name: tls-gateway
+#   name: cilium-tls-gateway
 #   namespace: {{ .Release.Namespace }}
 #   labels:
 #     app.kubernetes.io/name: tls-gateway

clusters/cl01tl/helm/cilium/values.yaml

@@ -26,7 +26,7 @@ cilium:
         - SYS_ADMIN
         - SYS_RESOURCE
   l2announcements:
-    enabled: false
+    enabled: true
   bgpControlPlane:
     enabled: false
     secretsNamespace:

clusters/cl01tl/helm/directus/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 2.1.4
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.3
+  version: 7.4.5
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.5.0
-digest: sha256:d9c95b9a697ebe9fb98ebb2a5e2f7058c26b9207742eadcd56f278ff36d00855
-generated: "2025-12-23T16:47:50.269275-06:00"
+digest: sha256:dcfd66bcdcc888dee6ee427265ac1ca32dd542571e84fbd5adc65a76ec5a6955
+generated: "2025-12-27T05:21:30.843719498Z"

clusters/cl01tl/helm/directus/Chart.yaml

@@ -26,7 +26,7 @@ dependencies:
     version: 2.1.4
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.3
+    version: 7.4.5
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     version: 0.5.0

clusters/cl01tl/helm/ephemera/values.yaml

@@ -9,7 +9,7 @@ ephemera:
         main:
           image:
             repository: ghcr.io/orwellianepilogue/ephemera
-            tag: 1.3.1
+            tag: 1.4.1
             pullPolicy: IfNotPresent
           env:
             - name: AA_BASE_URL

clusters/cl01tl/helm/freshrss/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 2.1.4
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.3
+  version: 7.4.5
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.6.0
-digest: sha256:a73351fc38c927eb7fef8c536069b21ca4d99e3ffb193ee64d9b93dbdc728ec4
-generated: "2025-12-23T17:04:20.474187-06:00"
+digest: sha256:7e1313ff23b0114e398d921420b559ee00380ebf188a0e0db7addc76defd2ce7
+generated: "2025-12-27T05:21:45.567109075Z"

clusters/cl01tl/helm/freshrss/Chart.yaml

@@ -26,7 +26,7 @@ dependencies:
     version: 2.1.4
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.3
+    version: 7.4.5
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data

clusters/cl01tl/helm/freshrss/values.yaml

@@ -80,7 +80,7 @@ freshrss:
         main:
           image:
             repository: freshrss/freshrss
-            tag: 1.27.1
+            tag: 1.28.0
             pullPolicy: IfNotPresent
           env:
             - name: PGID

clusters/cl01tl/helm/gatus/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 1.4.4
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.3
+  version: 7.4.5
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.6.0
-digest: sha256:a4f701f64327062a92b491d97728f02367e09412aca46705c1cbd8c2c438d76a
-generated: "2025-12-23T17:10:07.510553-06:00"
+digest: sha256:8ab613e1c9107e1023ba824011e5a1dd4ce535da7430ac48c4515e94303145de
+generated: "2025-12-27T05:21:59.318811204Z"

clusters/cl01tl/helm/gatus/Chart.yaml

@@ -22,7 +22,7 @@ dependencies:
     version: 1.4.4
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.3
+    version: 7.4.5
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data

clusters/cl01tl/helm/gatus/values.yaml

@@ -134,15 +134,21 @@ gatus:
       - name: tubearchivist
         url: https://tubearchivist.alexlebens.net
         <<: *defaults
+      - name: navidrome
+        url: https://navidrome.alexlebens.net
+        <<: *defaults
+      - name: feishin
+        url: https://feishin.alexlebens.net
+        <<: *defaults
+      - name: audiobookshelf
+        url: https://audiobookshelf.alexlebens.net
+        <<: *defaults
       - name: immich
         url: https://immich.alexlebens.net
         <<: *defaults
       - name: photoview
         url: https://photoview.alexlebens.net
         <<: *defaults
-      - name: audiobookshelf
-        url: https://audiobookshelf.alexlebens.net
-        <<: *defaults
       - name: booklore
         url: https://booklore.alexlebens.net
         <<: *defaults
@@ -310,6 +316,12 @@ gatus:
       - name: lidatube
         url: https://lidatube.alexlebens.net
         <<: *defaults
+      - name: rayflume
+        url: https://rayflume.alexlebens.net
+        <<: *defaults
+      - name: soulsync
+        url: https://soulsync.alexlebens.net
+        <<: *defaults
       - name: slskd
         url: https://slskd.alexlebens.net
         <<: *defaults

clusters/cl01tl/helm/gitea/Chart.lock

@@ -13,7 +13,7 @@ dependencies:
   version: 2.1.4
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.3
+  version: 7.4.5
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.5.0
@@ -23,5 +23,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.6.0
-digest: sha256:978756233cbc1b10dedb4bd60568809ab368b0023732dbfeefa81d3c3fa95459
-generated: "2025-12-23T17:13:14.918887-06:00"
+digest: sha256:39e3414e7a68b627a33cd4b2be2c4957f255b156c1446a43b6a81c0c5bc80a22
+generated: "2025-12-27T05:22:18.322463672Z"

clusters/cl01tl/helm/gitea/Chart.yaml

@@ -39,7 +39,7 @@ dependencies:
     version: 2.1.4
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.3
+    version: 7.4.5
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     alias: redis-replication-gitea

clusters/cl01tl/helm/gitea/values.yaml

@@ -1,7 +1,7 @@
 gitea:
   global:
     imageRegistry: registry.hub.docker.com
-  replicaCount: 3
+  replicaCount: 2
   image:
     repository: gitea/gitea
     tag: 1.25.3

clusters/cl01tl/helm/grafana-operator/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 5.21.3
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.3
+  version: 7.4.5
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.5.0
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.5.0
-digest: sha256:cf38a5967c4da4236045746fcd619b4abd655feb4da970a398e282193ddb887e
-generated: "2025-12-23T17:15:11.407801-06:00"
+digest: sha256:0406fb11b050135c944c17c658adfaee487a84b4394f17e72eefe2ac62a5726f
+generated: "2025-12-27T05:22:43.691500875Z"

clusters/cl01tl/helm/grafana-operator/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     repository: https://grafana.github.io/helm-charts
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.3
+    version: 7.4.5
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     alias: redis-replication-unified-alerting

clusters/cl01tl/helm/harbor/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 1.18.1
 - name: postgres-cluster
   repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
-  version: 7.4.3
+  version: 7.4.5
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.5.0
-digest: sha256:8f27e668381e0ce960f2dfcb6bb5b33feb708497b088b6af2a72a5816bc3df6d
-generated: "2025-12-23T17:17:55.749328-06:00"
+digest: sha256:1292d7c6233b48f285cedb81e59299837d4ff6a6845d2bfb08b5753f2c8e3644
+generated: "2025-12-27T05:23:01.528946755Z"

clusters/cl01tl/helm/harbor/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     repository: https://helm.goharbor.io
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.3
+    version: 7.4.5
     repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
   - name: redis-replication
     version: 0.5.0

clusters/cl01tl/helm/homepage/values.yaml

@@ -129,18 +129,6 @@ homepage:
                 maximumFractionDigits: 0
         services.yaml: |
           - Media:
-              - Plex:
-                  icon: sh-plex.webp
-                  description: Media server
-                  href: https://plex.alexlebens.net
-                  siteMonitor: http://plex.plex:32400
-                  statusStyle: dot
-              - Jellyfin:
-                  icon: sh-jellyfin.webp
-                  description: Media server
-                  href: https://jellyfin.alexlebens.net
-                  siteMonitor: http://jellyfin.jellyfin:80
-                  statusStyle: dot
               - Media Requests:
                   icon: sh-overseerr.webp
                   description: Overseerr
@@ -159,12 +147,30 @@ homepage:
                   href: https://yamtrack.alexlebens.net
                   siteMonitor: http://yamtrack.yamtrack:80
                   statusStyle: dot
+              - Movies and TV:
+                  icon: sh-jellyfin.webp
+                  description: Jellyfin
+                  href: https://jellyfin.alexlebens.net
+                  siteMonitor: http://jellyfin.jellyfin:80
+                  statusStyle: dot
               - Youtube Archive:
                   icon: sh-tube-archivist-light.webp
-                  description: TubeAchivist
+                  description: TubeArchivist
                   href: https://tubearchivist.alexlebens.net/login
                   siteMonitor: http://tubearchivist.tubearchivist:80
                   statusStyle: dot
+              - Music:
+                  icon: sh-feishin.webp
+                  description: Feishin
+                  href: https://feishin.alexlebens.net
+                  siteMonitor: http://navidrome-feishin.navidrome:80
+                  statusStyle: dot
+              - Podcasts and Audiobooks:
+                  icon: sh-audiobookshelf.webp
+                  description: Audiobookshelf
+                  href: https://audiobookshelf.alexlebens.net
+                  siteMonitor: http://audiobookshelf.audiobookshelf:80
+                  statusStyle: dot
               - Photos:
                   icon: sh-immich.webp
                   description: Immich
@@ -177,12 +183,6 @@ homepage:
                   href: https://photoview.alexlebens.net
                   siteMonitor: http://photoview.photoview:80
                   statusStyle: dot
-              - Podcasts and Audiobooks:
-                  icon: sh-audiobookshelf.webp
-                  description: Audiobookshelf
-                  href: https://audiobookshelf.alexlebens.net
-                  siteMonitor: http://audiobookshelf.audiobookshelf:80
-                  statusStyle: dot
               - Books:
                   icon: sh-booklore.webp
                   description: Booklore
@@ -661,13 +661,25 @@ homepage:
                     url: http://lidarr.lidarr:80
                     key: {{ "{{HOMEPAGE_VAR_LIDARR_KEY}}" }}
                     fields: ["wanted", "queued", "artists"]
+              - RayFlume:
+                  icon: sh-youtubarr.webp
+                  description: Playlist to Lidarr Import
+                  href: https://rayflume.alexlebens.net
+                  siteMonitor: http://rayflume.rayflume:80
+                  statusStyle: dot
               - LidaTube:
                   icon: sh-lidatube.webp
                   description: Searches for Music
                   href: https://lidatube.alexlebens.net
                   siteMonitor: http://lidatube.lidatube:80
                   statusStyle: dot
-              - Soulseek:
+              - SoulSync:
+                  icon: sh-soulsync.webp
+                  description: Playlist Sync
+                  href: https://soulsync.alexlebens.net
+                  siteMonitor: http://soulsync.soulsync:80
+                  statusStyle: dot
+              - slskd:
                   icon: sh-slskd.webp
                   description: slskd
                   href: https://slskd.alexlebens.net

clusters/cl01tl/helm/immich/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.5.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.3
+  version: 7.4.5
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.6.0
-digest: sha256:49d8343aa4dc006a008cc50eb53ab1f541ff27190f321e2b3870d9a304c81ee2
-generated: "2025-12-23T17:41:46.797956-06:00"
+digest: sha256:7393304ef97a577cf51b475f15847ad6cdd59040d9807c9c69c03f56c8ba69ad
+generated: "2025-12-27T05:23:23.126670234Z"

clusters/cl01tl/helm/immich/Chart.yaml

@@ -20,7 +20,7 @@ dependencies:
     version: 4.5.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.3
+    version: 7.4.5
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     version: 0.5.0

clusters/cl01tl/helm/jellystat/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.5.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.3
+  version: 7.4.5
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.6.0
-digest: sha256:520db247b91a1f121892c8283868f7737b6de01b9928d3af06a3706119c7f373
-generated: "2025-12-23T17:57:17.828908-06:00"
+digest: sha256:665363c59f142ba606826e3a0b862afa8392cc3762e6aa763fead864dc46b735
+generated: "2025-12-27T05:23:42.109002126Z"

clusters/cl01tl/helm/jellystat/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     version: 4.5.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.3
+    version: 7.4.5
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data

clusters/cl01tl/helm/komodo/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.5.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.3
-digest: sha256:982fc8d3fec365d0362f8ea38ecd00dd24d53d373ab3f8ac7b47bd6d6a9e8b2a
-generated: "2025-12-23T18:08:15.003474-06:00"
+  version: 7.4.5
+digest: sha256:6fcdaa177c2ec9174f32b3f780fe5fc01f65796f54e09fe77a4ae21540d2fb5a
+generated: "2025-12-27T05:23:58.292917266Z"

clusters/cl01tl/helm/komodo/Chart.yaml

@@ -23,7 +23,7 @@ dependencies:
     version: 4.5.0
   - name: postgres-cluster
     alias: postgresql-17-fdb-cluster
-    version: 7.4.3
+    version: 7.4.5
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/komodo.png
 # renovate: github=moghtech/komodo

clusters/cl01tl/helm/libation/values.yaml

@@ -16,7 +16,7 @@ libation:
         main:
           image:
             repository: rmcrackan/libation
-            tag: 12.8.2
+            tag: 13.0.0
             pullPolicy: IfNotPresent
           env:
             - name: SLEEP_TIME

clusters/cl01tl/helm/lidarr/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.5.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.3
+  version: 7.4.5
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.6.0
-digest: sha256:33d3f2e45a1c1ff157e715b4aa06498454de33d6f5956a97aaa8281188d2b358
-generated: "2025-12-23T22:25:42.862324-06:00"
+digest: sha256:92f380b5c859c3506972b930dd7b38e6842c1b06a93ae0373089d91a3195d252
+generated: "2025-12-27T05:24:14.864623238Z"

clusters/cl01tl/helm/lidarr/Chart.yaml

@@ -24,7 +24,7 @@ dependencies:
     version: 4.5.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.3
+    version: 7.4.5
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/local-path-provisioner/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: local-path-provisioner
   repository: https://charts.containeroo.ch
-  version: 0.0.33
-digest: sha256:323aa6386161d2f5e2f3122082bc1dc63aeae96d2e02520b8d5dc63f80c3be1c
-generated: "2025-12-01T20:26:30.26287-06:00"
+  version: 0.0.34
+digest: sha256:f4f946897660d5d65eb2a56144d907c0b48c9a72e20d10a73684eaeb0d50cfd3
+generated: "2025-12-26T21:55:29.099967751Z"

clusters/cl01tl/helm/local-path-provisioner/Chart.yaml

@@ -15,7 +15,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: local-path-provisioner
-    version: 0.0.33
+    version: 0.0.34
     repository: https://charts.containeroo.ch
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 # renovate: github=rancher/local-path-provisioner

clusters/cl01tl/helm/local-path-provisioner/values.yaml

@@ -1,7 +1,7 @@
 local-path-provisioner:
   image:
     repository: rancher/local-path-provisioner
-    tag: v0.0.32
+    tag: v0.0.33
   helperImage:
     repository: busybox
     tag: 1.37.0

clusters/cl01tl/helm/mariadb-operator/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 25.10.3
 - name: mariadb-operator-crds
   repository: https://helm.mariadb.com/mariadb-operator
-  version: 25.10.2
-digest: sha256:013c53bbc13fa7b7f3f25d82f3116332e19894a1b1fd796224a4c05f9382645f
-generated: "2025-12-24T18:26:55.204948602Z"
+  version: 25.10.3
+digest: sha256:d32a1fb47160eccd389a71467a954f2eea59cad595db38a74243581af1c9c426
+generated: "2025-12-24T19:28:09.775077014Z"

clusters/cl01tl/helm/mariadb-operator/Chart.yaml

@@ -18,7 +18,7 @@ dependencies:
     version: 25.10.3
     repository: https://helm.mariadb.com/mariadb-operator
   - name: mariadb-operator-crds
-    version: 25.10.2
+    version: 25.10.3
     repository: https://helm.mariadb.com/mariadb-operator
 icon: https://mariadb-operator.github.io/mariadb-operator/assets/mariadb_profile.svg
 # renovate: github=mariadb-operator/mariadb-operator

clusters/cl01tl/helm/matrix-synapse/Chart.lock

@@ -19,7 +19,7 @@ dependencies:
   version: 2.1.4
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.3
+  version: 7.4.5
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.5.0
@@ -38,5 +38,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.6.0
-digest: sha256:0c08af386645d129c9420430b1506c4ac6556ef0155d5a1f86aab2ed5e0e0b85
-generated: "2025-12-23T22:32:15.040072-06:00"
+digest: sha256:cc68d47988db4b32e18d783346a5a0da9c0497e02cb6ac1cc8fe7890615f1e71
+generated: "2025-12-27T05:24:33.225667997Z"

clusters/cl01tl/helm/matrix-synapse/Chart.yaml

@@ -53,7 +53,7 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.3
+    version: 7.4.5
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     alias: redis-replication-matrix-synapse

clusters/cl01tl/helm/n8n/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.5.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.3
+  version: 7.4.5
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.6.0
-digest: sha256:044b0cda285583d8cb792725b75887041f82e5d6906566cd3677d2f67186d7f1
-generated: "2025-12-23T22:38:27.330827-06:00"
+digest: sha256:c55db137b8a25adb1b31dac05709e5ae93a8cf30853e68a415a88ed3032c6fe4
+generated: "2025-12-27T05:24:56.236961172Z"

clusters/cl01tl/helm/n8n/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     version: 4.5.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.3
+    version: 7.4.5
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     version: 0.5.0

clusters/cl01tl/helm/navidrome/Chart.lock

@@ -0,0 +1,9 @@
+dependencies:
+- name: app-template
+  repository: https://bjw-s-labs.github.io/helm-charts/
+  version: 4.5.0
+- name: volsync-target
+  repository: oci://harbor.alexlebens.net/helm-charts
+  version: 0.6.0
+digest: sha256:2d5e357064259b97afb7c8239d6d57da6f59c267a2a530262af9db32d228ae66
+generated: "2025-12-24T14:05:31.844353-06:00"

clusters/cl01tl/helm/navidrome/Chart.yaml

@@ -0,0 +1,27 @@
+apiVersion: v2
+name: navidrome
+version: 1.0.0
+description: Navidrome
+keywords:
+  - navidrome
+  - feishin
+  - music
+home: https://wiki.alexlebens.dev/s/
+sources:
+  - https://github.com/navidrome/navidrome
+  - https://github.com/jeffvli/feishin
+  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
+maintainers:
+  - name: alexlebens
+dependencies:
+  - name: app-template
+    alias: navidrome
+    repository: https://bjw-s-labs.github.io/helm-charts/
+    version: 4.5.0
+  - name: volsync-target
+    alias: volsync-target-data
+    version: 0.6.0
+    repository: oci://harbor.alexlebens.net/helm-charts
+icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/navidrome.png
+# renovate: github=navidrome/navidrome
+appVersion: 1.42.2

clusters/cl01tl/helm/navidrome/templates/persistent-volume-claim.yaml

@@ -0,0 +1,17 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: navidrome-music-nfs-storage
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: navidrome-music-nfs-storage
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  volumeName: navidrome-music-nfs-storage
+  storageClassName: nfs-client
+  accessModes:
+    - ReadWriteMany
+  resources:
+    requests:
+      storage: 1Gi

clusters/cl01tl/helm/navidrome/templates/persistent-volume.yaml

@@ -0,0 +1,23 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: navidrome-music-nfs-storage
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: navidrome-music-nfs-storage
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  persistentVolumeReclaimPolicy: Retain
+  storageClassName: nfs-client
+  capacity:
+    storage: 1Gi
+  accessModes:
+    - ReadWriteMany
+  nfs:
+    path: /volume2/Storage/Music
+    server: synologybond.alexlebens.net
+  mountOptions:
+    - vers=4
+    - minorversion=1
+    - noac

clusters/cl01tl/helm/navidrome/values.yaml

@@ -0,0 +1,155 @@
+navidrome:
+  controllers:
+    main:
+      type: deployment
+      replicas: 1
+      strategy: Recreate
+      revisionHistoryLimit: 3
+      containers:
+        main:
+          image:
+            repository: deluan/navidrome
+            tag: 0.59.0@sha256:4edc8a1de3e042f30b78a478325839f4395177eb8201c27543dccc0eba674f23
+            pullPolicy: IfNotPresent
+          env:
+            - name: ND_MUSICFOLDER
+              value: /music
+            - name: ND_DATAFOLDER
+              value: /data
+            - name: ND_CACHEFOLDER
+              value: /cache
+            - name: ND_BASEURL
+              value: https://navidrome.alexlebens.net
+            - name: ND_ENABLEINSIGHTSCOLLECTOR
+              value: false
+            - name: ND_PROMETHEUS_ENABLED
+              value: true
+          resources:
+            limits:
+              gpu.intel.com/i915: 1
+            requests:
+              gpu.intel.com/i915: 1
+              cpu: 10m
+              memory: 128Mi
+    feishin:
+      type: deployment
+      replicas: 1
+      strategy: Recreate
+      revisionHistoryLimit: 3
+      containers:
+        main:
+          image:
+            repository: ghcr.io/jeffvli/feishin
+            tag: 1.0.1-beta.1@sha256:61239641f23a33f99c2858419b14afb66683f3cd82010363fba92be3993fd894
+            pullPolicy: IfNotPresent
+          env:
+            - name: SERVER_NAME
+              value: talos
+            - name: SERVER_LOCK
+              value: true
+            - name: SERVER_TYPE
+              value: navidrome
+            - name: SERVER_URL
+              value: https://navidrome.alexlebens.net
+  service:
+    main:
+      controller: main
+      ports:
+        http:
+          port: 80
+          targetPort: 4533
+          protocol: HTTP
+    feishin:
+      controller: feishin
+      ports:
+        http:
+          port: 80
+          targetPort: 9180
+          protocol: HTTP
+  serviceMonitor:
+    main:
+      selector:
+        matchLabels:
+          app.kubernetes.io/name: navidrome
+          app.kubernetes.io/instance: navidrome
+          app.kubernetes.io/service: navidrome-main
+      serviceName: '{{ include "bjw-s.common.lib.chart.names.fullname" $ }}'
+      endpoints:
+        - port: http
+          scheme: http
+          path: /metrics
+          interval: 30s
+          scrapeTimeout: 15s
+  route:
+    main:
+      kind: HTTPRoute
+      parentRefs:
+        - group: gateway.networking.k8s.io
+          kind: Gateway
+          name: traefik-gateway
+          namespace: traefik
+      hostnames:
+        - navidrome.alexlebens.net
+      rules:
+        - backendRefs:
+            - group: ''
+              kind: Service
+              name: navidrome-main
+              port: 80
+              weight: 100
+          matches:
+            - path:
+                type: PathPrefix
+                value: /
+    feishin:
+      kind: HTTPRoute
+      parentRefs:
+        - group: gateway.networking.k8s.io
+          kind: Gateway
+          name: traefik-gateway
+          namespace: traefik
+      hostnames:
+        - feishin.alexlebens.net
+      rules:
+        - backendRefs:
+            - group: ''
+              kind: Service
+              name: navidrome-feishin
+              port: 80
+              weight: 100
+          matches:
+            - path:
+                type: PathPrefix
+                value: /
+  persistence:
+    data:
+      forceRename: navidrome-data
+      storageClass: ceph-block
+      accessMode: ReadWriteOnce
+      size: 10Gi
+      advancedMounts:
+        main:
+          main:
+            - path: /data
+              readOnly: false
+    cache:
+      type: emptyDir
+      advancedMounts:
+        main:
+          main:
+            - path: /cache
+              readOnly: false
+    music:
+      existingClaim: navidrome-music-nfs-storage
+      advancedMounts:
+        main:
+          main:
+            - path: /music
+              readOnly: true
+volsync-target-data:
+  pvcTarget: navidrome-data
+  moverSecurityContext:
+    runAsUser: 1000
+    runAsGroup: 1000
+    fsGroup: 1000
+    fsGroupChangePolicy: OnRootMismatch

clusters/cl01tl/helm/ollama/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.5.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.3
+  version: 7.4.5
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.6.0
-digest: sha256:788846f7405c069ceb90e230f73426cedf4b431ec6688cbe610559678edf12f1
-generated: "2025-12-23T22:42:20.843046-06:00"
+digest: sha256:70d58a1820c1f1e5d970636f3db554b3b40dbd6c885954d12ef5c2dd79478129
+generated: "2025-12-27T05:25:15.749003978Z"

clusters/cl01tl/helm/ollama/Chart.yaml

@@ -23,7 +23,7 @@ dependencies:
     version: 4.5.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.3
+    version: 7.4.5
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data

clusters/cl01tl/helm/outline/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 2.1.4
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.3
+  version: 7.4.5
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.5.0
-digest: sha256:ecdd730ac911b6056fcdead064619e60609135197c1292aa55450a4956261cb4
-generated: "2025-12-23T22:55:48.348972-06:00"
+digest: sha256:a60b800f7f762878190f328f77eb731bec1fd0072a15cc092fd380b058e69f39
+generated: "2025-12-27T05:25:38.187543195Z"

clusters/cl01tl/helm/outline/Chart.yaml

@@ -27,7 +27,7 @@ dependencies:
     version: 2.1.4
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.3
+    version: 7.4.5
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     version: 0.5.0

clusters/cl01tl/helm/outline/templates/object-bucket-claim.yaml

@@ -1,30 +1,30 @@
-# apiVersion: objectbucket.io/v1alpha1
-# kind: ObjectBucketClaim
-# metadata:
-#   name: ceph-bucket-outline
-#   labels:
-#     app.kubernetes.io/name: ceph-bucket-outline
-#     app.kubernetes.io/instance: {{ .Release.Name }}
-#     app.kubernetes.io/part-of: {{ .Release.Name }}
-# spec:
-#   generateBucketName: bucket-outline
-#   storageClassName: ceph-bucket
-#   additionalConfig:
-#     bucketPolicy: |
-#         {
-#             "Version": "2012-10-17",
-#             "Statement": [
-#                 {
-#                     "Sid": "VisualEditor",
-#                     "Effect": "Allow",
-#                     "Action": [
-#                         "s3:GetObjectAcl",
-#                         "s3:DeleteObject",
-#                         "s3:PutObject",
-#                         "s3:GetObject",
-#                         "s3:PutObjectAcl"
-#                     ],
-#                     "Resource": "arn:aws:s3:::bucket-outline-630c57e0-d475-4d78-926c-c1c082291d73/*"
-#                 }
-#             ]
-#         }
+apiVersion: objectbucket.io/v1alpha1
+kind: ObjectBucketClaim
+metadata:
+  name: ceph-bucket-outline
+  labels:
+    app.kubernetes.io/name: ceph-bucket-outline
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  generateBucketName: bucket-outline
+  storageClassName: ceph-bucket
+  # additionalConfig:
+  #   bucketPolicy: |
+  #       {
+  #           "Version": "2012-10-17",
+  #           "Statement": [
+  #               {
+  #                   "Sid": "VisualEditor",
+  #                   "Effect": "Allow",
+  #                   "Action": [
+  #                       "s3:GetObjectAcl",
+  #                       "s3:DeleteObject",
+  #                       "s3:PutObject",
+  #                       "s3:GetObject",
+  #                       "s3:PutObjectAcl"
+  #                   ],
+  #                   "Resource": "arn:aws:s3:::bucket-outline-630c57e0-d475-4d78-926c-c1c082291d73/*"
+  #               }
+  #           ]
+  #       }

clusters/cl01tl/helm/photoview/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.5.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.3
-digest: sha256:fb2001e6af484504fc95d004144112cda902383939e3a6873c573132efc9e355
-generated: "2025-12-23T22:58:02.636158-06:00"
+  version: 7.4.5
+digest: sha256:655998003693906fd200030e62709607f83daf8b4e74c69cd5eadfd146c3b46d
+generated: "2025-12-27T05:25:54.956230539Z"

clusters/cl01tl/helm/photoview/Chart.yaml

@@ -20,7 +20,7 @@ dependencies:
     version: 4.5.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.3
+    version: 7.4.5
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/photoview.png
 # renovate: github=photoview/photoview

clusters/cl01tl/helm/plex/values.yaml

@@ -16,8 +16,6 @@ plex:
               value: US/Central
             - name: VERSION
               value: docker
-            - name: PLEX_CLAIM
-              value: claim-XmGK2o9x54PbCzQaqj-J
           resources:
             limits:
               gpu.intel.com/i915: 1
@@ -28,7 +26,6 @@ plex:
   service:
     main:
       controller: main
-      type: LoadBalancer
       ports:
         http:
           port: 32400

clusters/cl01tl/helm/postiz/Chart.lock

@@ -7,7 +7,7 @@ dependencies:
   version: 2.1.4
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.3
+  version: 7.4.5
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.5.0
@@ -17,5 +17,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.6.0
-digest: sha256:d3af2937b13c32137f2ab46422b429519741eb5672c44bed806f23509e25b380
-generated: "2025-12-23T23:01:31.836463-06:00"
+digest: sha256:9339c198584baa25d19202d1fe2c6789914c9c5de4a622eb4317d933dd4d2012
+generated: "2025-12-27T05:26:10.435950822Z"

clusters/cl01tl/helm/postiz/Chart.yaml

@@ -26,7 +26,7 @@ dependencies:
     version: 2.1.4
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.3
+    version: 7.4.5
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     version: 0.5.0

clusters/cl01tl/helm/qbittorrent/values.yaml

@@ -50,6 +50,10 @@ qbittorrent:
             repository: ghcr.io/qdm12/gluetun
             tag: v3.40.4@sha256:e10584de1f82d8999e5e6c3111901d9d56a2eed21151fb96af060f390bbdfba8
             pullPolicy: IfNotPresent
+          lifecycle:
+            postStart:
+              exec:
+                command: ["/bin/sh", "-c", "(ip rule del table 51820; ip -6 rule del table 51820) || true"]
           env:
             - name: VPN_SERVICE_PROVIDER
               value: protonvpn

clusters/cl01tl/helm/radarr-4k/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.5.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.3
+  version: 7.4.5
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.6.0
-digest: sha256:74f58fd7e4e5fd5cbe24e807df87bebca5c8736a7933aad7c83bb236096008b5
-generated: "2025-12-23T23:21:24.369182-06:00"
+digest: sha256:f9e6ca06d71640cfc6c1fd17c822c4ad20c47bcacbebf6c7421e68991b5b6a29
+generated: "2025-12-27T05:26:27.125044086Z"

clusters/cl01tl/helm/radarr-4k/Chart.yaml

@@ -27,7 +27,7 @@ dependencies:
     version: 4.5.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.3
+    version: 7.4.5
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/radarr-anime/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.5.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.3
+  version: 7.4.5
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.6.0
-digest: sha256:8455777f6acc2e2722dfbbca78ebcb92be3d9af998c4ae0106b50625732ae71c
-generated: "2025-12-23T23:24:42.792877-06:00"
+digest: sha256:7823b1c5528a0572a940f0d9ce70fcc5d71a2f99d1af2d44d45dbb6b917b2453
+generated: "2025-12-27T05:26:44.372137992Z"

clusters/cl01tl/helm/radarr-anime/Chart.yaml

@@ -27,7 +27,7 @@ dependencies:
     version: 4.5.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.3
+    version: 7.4.5
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/radarr-standup/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.5.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.3
+  version: 7.4.5
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.6.0
-digest: sha256:348545782b826d70552bdfe3ce3a99e31884aa52bd853bd565713bc6c151208e
-generated: "2025-12-23T23:24:54.644016-06:00"
+digest: sha256:8e3ed5d4805f8c0cb9f5a8fbda78fbfba56cb8eaedfebdc7557108fea2f265da
+generated: "2025-12-27T05:27:00.002628375Z"

clusters/cl01tl/helm/radarr-standup/Chart.yaml

@@ -26,7 +26,7 @@ dependencies:
     version: 4.5.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.3
+    version: 7.4.5
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/radarr/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.5.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.3
+  version: 7.4.5
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.6.0
-digest: sha256:021ce2d1194b098abcf38032a2e4e248c44cd7a1255a808789f98118cb150786
-generated: "2025-12-23T23:21:09.299168-06:00"
+digest: sha256:42860cca1bcb3810a80c8e916617d99cfe60fa40484bd573511b372d4b5a917e
+generated: "2025-12-27T05:27:14.726638078Z"

clusters/cl01tl/helm/radarr/Chart.yaml

@@ -26,7 +26,7 @@ dependencies:
     version: 4.5.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.3
+    version: 7.4.5
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/rayflume/Chart.lock

@@ -0,0 +1,12 @@
+dependencies:
+- name: app-template
+  repository: https://bjw-s-labs.github.io/helm-charts/
+  version: 4.5.0
+- name: redis-replication
+  repository: oci://harbor.alexlebens.net/helm-charts
+  version: 0.5.0
+- name: volsync-target
+  repository: oci://harbor.alexlebens.net/helm-charts
+  version: 0.6.0
+digest: sha256:b6407c3cb6cb6b71d289f73e943111899c8e7711c3141c86774d103014543af2
+generated: "2025-12-25T21:03:03.423717-06:00"

clusters/cl01tl/helm/rayflume/Chart.yaml

@@ -0,0 +1,27 @@
+apiVersion: v2
+name: rayflume
+version: 1.0.0
+description: RayFlume
+keywords:
+  - rayflume
+  - music
+  - lidarr
+home: https://wiki.alexlebens.dev/s/
+sources:
+  - https://gitea.alexlebens.dev/alexlebens/RayFlume
+  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
+maintainers:
+  - name: alexlebens
+dependencies:
+  - name: app-template
+    alias: rayflume
+    repository: https://bjw-s-labs.github.io/helm-charts/
+    version: 4.5.0
+  - name: redis-replication
+    version: 0.5.0
+    repository: oci://harbor.alexlebens.net/helm-charts
+  - name: volsync-target
+    alias: volsync-target-data
+    version: 0.6.0
+    repository: oci://harbor.alexlebens.net/helm-charts
+appVersion: 0.0.3

clusters/cl01tl/helm/rayflume/templates/external-secret.yaml

@@ -0,0 +1,42 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: rayflume-config-secret
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: rayflume-config-secret
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  data:
+    - secretKey: SECRET_KEY
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/rayflume/config
+        metadataPolicy: None
+        property: SECRET_KEY
+    - secretKey: LIDARR_TOKEN
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/rayflume/config
+        metadataPolicy: None
+        property: LIDARR_TOKEN
+    - secretKey: YOUTUBE_API_KEY
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/rayflume/config
+        metadataPolicy: None
+        property: YOUTUBE_API_KEY
+    - secretKey: MB_USER_AGENT
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/rayflume/config
+        metadataPolicy: None
+        property: MB_USER_AGENT

clusters/cl01tl/helm/rayflume/values.yaml

@@ -0,0 +1,96 @@
+rayflume:
+  controllers:
+    main:
+      type: deployment
+      replicas: 1
+      strategy: Recreate
+      revisionHistoryLimit: 3
+      containers:
+        main:
+          image:
+            repository: harbor.alexlebens.net/images/rayflume
+            tag: 0.0.7
+            pullPolicy: IfNotPresent
+          env:
+            - name: DEBUG
+              value: True
+            - name: ALLOWED_HOSTS
+              value: rayflume.alexlebens.net,rayflume.rayflume
+            - name: SECRET_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: rayflume-config-secret
+                  key: SECRET_KEY
+            - name: LIDARR_TOKEN
+              valueFrom:
+                secretKeyRef:
+                  name: rayflume-config-secret
+                  key: LIDARR_TOKEN
+            - name: YOUTUBE_API_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: rayflume-config-secret
+                  key: YOUTUBE_API_KEY
+            - name: MB_USER_AGENT
+              valueFrom:
+                secretKeyRef:
+                  name: rayflume-config-secret
+                  key: MB_USER_AGENT
+            - name: CELERY_BROKER_URL
+              value: redis://redis-replication-rayflume-master.rayflume:6379/0
+            - name: CELERY_RESULT_BACKEND
+              value: redis://redis-replication-rayflume-master.rayflume:6379/0
+          resources:
+            requests:
+              cpu: 10m
+              memory: 64Mi
+  service:
+    main:
+      controller: main
+      ports:
+        http:
+          port: 80
+          targetPort: 80
+          protocol: HTTP
+  route:
+    main:
+      kind: HTTPRoute
+      parentRefs:
+        - group: gateway.networking.k8s.io
+          kind: Gateway
+          name: traefik-gateway
+          namespace: traefik
+      hostnames:
+        - rayflume.alexlebens.net
+      rules:
+        - backendRefs:
+            - group: ''
+              kind: Service
+              name: rayflume
+              port: 80
+              weight: 100
+          matches:
+            - path:
+                type: PathPrefix
+                value: /
+  persistence:
+    data:
+      forceRename: rayflume-data
+      storageClass: ceph-block
+      accessMode: ReadWriteOnce
+      size: 1Gi
+      advancedMounts:
+        main:
+          main:
+            - path: /data
+              readOnly: false
+redis-replication:
+  existingSecret:
+    enabled: false
+  redisReplication:
+    clusterSize: 3
+  redisSentinel:
+    enabled: true
+    clusterSize: 3
+volsync-target-data:
+  pvcTarget: rayflume-data

clusters/cl01tl/helm/roundcube/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.5.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.3
+  version: 7.4.5
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.6.0
-digest: sha256:1d825023fd1e58dd4464bbcf2ecd0063d0ccc8cdf192a328a61328a90f95b2c1
-generated: "2025-12-23T23:33:00.895483-06:00"
+digest: sha256:cdcec80f865469a1d2f92606a9a3b817d4b5221e35aea98f6aa45c2b26e5dee9
+generated: "2025-12-27T05:27:34.650976316Z"

clusters/cl01tl/helm/roundcube/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     version: 4.5.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.3
+    version: 7.4.5
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data

clusters/cl01tl/helm/searxng/values.yaml

@@ -9,7 +9,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:13de9d465bd2d9da6a6718f2a57d96e6e5fa3b8aba3c0bec077a5b7e5f24e4e9
+            tag: latest@sha256:8d98d5c1b678714c3b20dacfab5ea5e3b67f79e50df6d5dbc92ed4f0a964ccbd
             pullPolicy: IfNotPresent
           env:
             - name: SEARXNG_BASE_URL
@@ -39,7 +39,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:13de9d465bd2d9da6a6718f2a57d96e6e5fa3b8aba3c0bec077a5b7e5f24e4e9
+            tag: latest@sha256:8d98d5c1b678714c3b20dacfab5ea5e3b67f79e50df6d5dbc92ed4f0a964ccbd
             pullPolicy: IfNotPresent
           env:
             - name: SEARXNG_BASE_URL
@@ -72,6 +72,10 @@ searxng:
             repository: ghcr.io/qdm12/gluetun
             tag: v3.40.4@sha256:e10584de1f82d8999e5e6c3111901d9d56a2eed21151fb96af060f390bbdfba8
             pullPolicy: IfNotPresent
+          lifecycle:
+            postStart:
+              exec:
+                command: ["/bin/sh", "-c", "(ip rule del table 51820; ip -6 rule del table 51820) || true"]
           env:
             - name: VPN_SERVICE_PROVIDER
               value: protonvpn
@@ -92,6 +96,20 @@ searxng:
               add:
                 - NET_ADMIN
                 - SYS_MODULE
+          probes:
+            liveness:
+              enabled: true
+              custom: true
+              spec:
+                exec:
+                  command:
+                    - /gluetun-entrypoint
+                    - healthcheck
+                failureThreshold: 5
+                initialDelaySeconds: 30
+                periodSeconds: 30
+                successThreshold: 1
+                timeoutSeconds: 15
           resources:
             limits:
               devic.es/tun: "1"

clusters/cl01tl/helm/slskd/values.yaml

@@ -48,6 +48,10 @@ slskd:
             repository: ghcr.io/qdm12/gluetun
             tag: v3.40.4@sha256:e10584de1f82d8999e5e6c3111901d9d56a2eed21151fb96af060f390bbdfba8
             pullPolicy: IfNotPresent
+          lifecycle:
+            postStart:
+              exec:
+                command: ["/bin/sh", "-c", "(ip rule del table 51820; ip -6 rule del table 51820) || true"]
           env:
             - name: VPN_SERVICE_PROVIDER
               value: protonvpn
@@ -74,6 +78,20 @@ slskd:
               add:
                 - NET_ADMIN
                 - SYS_MODULE
+          probes:
+            liveness:
+              enabled: true
+              custom: true
+              spec:
+                exec:
+                  command:
+                    - /gluetun-entrypoint
+                    - healthcheck
+                failureThreshold: 5
+                initialDelaySeconds: 30
+                periodSeconds: 30
+                successThreshold: 1
+                timeoutSeconds: 15
           resources:
             limits:
               devic.es/tun: "1"

clusters/cl01tl/helm/sonarr-4k/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.5.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.3
+  version: 7.4.5
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.6.0
-digest: sha256:27a29ef32a5c80bee9d8d76f7d6b9fe5017ca5d32145db670b2d97351b62cb06
-generated: "2025-12-24T00:06:26.378963-06:00"
+digest: sha256:6a787f736750e62604cd37d17287cea71206aea2196b611e27991e4dca6bd5b1
+generated: "2025-12-27T05:27:49.682440326Z"

clusters/cl01tl/helm/sonarr-4k/Chart.yaml

@@ -27,7 +27,7 @@ dependencies:
     version: 4.5.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.3
+    version: 7.4.5
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/sonarr-anime/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.5.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.3
+  version: 7.4.5
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.6.0
-digest: sha256:324fe0c8c4492572912c50624a47f9350f0eb9471fa93ca24c3d9ce825a562c9
-generated: "2025-12-24T00:06:34.718214-06:00"
+digest: sha256:aeaaf8860099cec48638b71af4d60896d237ee0d2c887a2250a9623380eee533
+generated: "2025-12-27T05:28:04.464125521Z"

clusters/cl01tl/helm/sonarr-anime/Chart.yaml

@@ -26,7 +26,7 @@ dependencies:
     version: 4.5.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.3
+    version: 7.4.5
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/sonarr/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.5.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.3
+  version: 7.4.5
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.6.0
-digest: sha256:4b717a89825e34b7d6ba77d8198c07d82107565325d78b99866d09e3c8974213
-generated: "2025-12-24T00:06:09.13493-06:00"
+digest: sha256:903e4f0aeb73fb808e86218262f254559e9ea1e8d645bb99f0530c9d61e33583
+generated: "2025-12-27T05:28:21.45735886Z"

clusters/cl01tl/helm/sonarr/Chart.yaml

@@ -26,7 +26,7 @@ dependencies:
     version: 4.5.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.3
+    version: 7.4.5
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/soulsync/Chart.lock

@@ -0,0 +1,12 @@
+dependencies:
+- name: app-template
+  repository: https://bjw-s-labs.github.io/helm-charts/
+  version: 4.5.0
+- name: volsync-target
+  repository: oci://harbor.alexlebens.net/helm-charts
+  version: 0.6.0
+- name: volsync-target
+  repository: oci://harbor.alexlebens.net/helm-charts
+  version: 0.6.0
+digest: sha256:60836915fb9a8028b084171ac4228520e9edc9ee6626b257c6d37db723d91f49
+generated: "2025-12-24T15:26:54.904687-06:00"

clusters/cl01tl/helm/soulsync/Chart.yaml

@@ -0,0 +1,29 @@
+apiVersion: v2
+name: soulsync
+version: 1.0.0
+description: SoulSync
+keywords:
+  - soulsync
+  - music
+home: https://wiki.alexlebens.dev/s/
+sources:
+  - https://github.com/Nezreka/SoulSync
+  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
+maintainers:
+  - name: alexlebens
+dependencies:
+  - name: app-template
+    alias: soulsync
+    repository: https://bjw-s-labs.github.io/helm-charts/
+    version: 4.5.0
+  - name: volsync-target
+    alias: volsync-target-config
+    version: 0.6.0
+    repository: oci://harbor.alexlebens.net/helm-charts
+  - name: volsync-target
+    alias: volsync-target-database
+    version: 0.6.0
+    repository: oci://harbor.alexlebens.net/helm-charts
+icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/soulsync.png
+# renovate: github=Nezreka/SoulSync
+appVersion: 1.42.2

clusters/cl01tl/helm/soulsync/templates/external-secret.yaml

@@ -0,0 +1,21 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: soulsync-config-secret
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: soulsync-config-secret
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  data:
+    - secretKey: config.json
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/soulsync/config
+        metadataPolicy: None
+        property: config.json

clusters/cl01tl/helm/soulsync/templates/persistent-volume-claim.yaml

@@ -0,0 +1,36 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: soulsync-music-nfs-storage
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: soulsync-music-nfs-storage
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  volumeName: soulsync-music-nfs-storage
+  storageClassName: nfs-client
+  accessModes:
+    - ReadWriteMany
+  resources:
+    requests:
+      storage: 1Gi
+
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: soulsync-slskd-nfs-storage
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: soulsync-slskd-nfs-storage
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  volumeName: soulsync-slskd-nfs-storage
+  storageClassName: nfs-client
+  accessModes:
+    - ReadWriteMany
+  resources:
+    requests:
+      storage: 1Gi

clusters/cl01tl/helm/soulsync/templates/persistent-volume.yaml

@@ -0,0 +1,48 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: soulsync-music-nfs-storage
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: soulsync-music-nfs-storage
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  persistentVolumeReclaimPolicy: Retain
+  storageClassName: nfs-client
+  capacity:
+    storage: 1Gi
+  accessModes:
+    - ReadWriteMany
+  nfs:
+    path: /volume2/Storage/Music
+    server: synologybond.alexlebens.net
+  mountOptions:
+    - vers=4
+    - minorversion=1
+    - noac
+
+---
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: soulsync-slskd-nfs-storage
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: soulsync-slskd-nfs-storage
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  persistentVolumeReclaimPolicy: Retain
+  storageClassName: nfs-client
+  capacity:
+    storage: 1Gi
+  accessModes:
+    - ReadWriteMany
+  nfs:
+    path: /volume2/Storage/slskd/Downloads
+    server: synologybond.alexlebens.net
+  mountOptions:
+    - vers=4
+    - minorversion=1
+    - noac

clusters/cl01tl/helm/soulsync/values.yaml

@@ -0,0 +1,154 @@
+soulsync:
+  controllers:
+    main:
+      type: deployment
+      replicas: 0
+      strategy: Recreate
+      revisionHistoryLimit: 3
+      initContainers:
+        init-copy-config:
+          image:
+            repository: busybox
+            tag: 1.37.0
+            pullPolicy: IfNotPresent
+          resources:
+            requests:
+              cpu: 10m
+              memory: 128Mi
+          command:
+            - /bin/sh
+            - -ec
+            - |
+              echo ">> Coping files ..."
+              ls /tmp
+              cp -fv /tmp/config.json /app/config/config.json
+              echo ">> Files in config:"
+              ls /app/config
+      containers:
+        main:
+          image:
+            repository: boulderbadgedad/soulsync
+            tag: latest
+            pullPolicy: IfNotPresent
+          env:
+            - name: TZ
+              value: US/Central
+            - name: PUID
+              value: 1000
+            - name: PGID
+              value: 1000
+            - name: FLASK_ENV
+              value: production
+            - name: PYTHONPATH
+              value: /app
+            - name: SOULSYNC_CONFIG_PATH
+              value: /app/config/config.json
+          probes:
+            liveness:
+              enabled: true
+              custom: true
+              spec:
+                exec:
+                  command:
+                  - CMD
+                  - curl
+                  - -f
+                  - http://localhost:8888/
+                failureThreshold: 5
+                initialDelaySeconds: 60
+                periodSeconds: 30
+                successThreshold: 1
+                timeoutSeconds: 10
+          resources:
+            requests:
+              cpu: 100m
+              memory: 512Mi
+  service:
+    main:
+      controller: main
+      ports:
+        http:
+          port: 80
+          targetPort: 8008
+          protocol: HTTP
+  route:
+    main:
+      kind: HTTPRoute
+      parentRefs:
+        - group: gateway.networking.k8s.io
+          kind: Gateway
+          name: traefik-gateway
+          namespace: traefik
+      hostnames:
+        - soulsync.alexlebens.net
+      rules:
+        - backendRefs:
+            - group: ''
+              kind: Service
+              name: soulsync
+              port: 80
+              weight: 100
+          matches:
+            - path:
+                type: PathPrefix
+                value: /
+  persistence:
+    secret:
+      enabled: true
+      type: secret
+      name: soulsync-config-secret
+      advancedMounts:
+        main:
+          init-copy-config:
+            - path: /tmp/config.json
+              readOnly: true
+              mountPropagation: None
+              subPath: config.json
+    config:
+      forceRename: soulsync-config
+      storageClass: ceph-block
+      accessMode: ReadWriteOnce
+      size: 10Gi
+      advancedMounts:
+        main:
+          main:
+            - path: /app/config
+              readOnly: false
+          init-copy-config:
+            - path: /app/config
+              readOnly: false
+    database:
+      forceRename: soulsync-database
+      storageClass: ceph-block
+      accessMode: ReadWriteOnce
+      size: 10Gi
+      advancedMounts:
+        main:
+          main:
+            - path: /app/database
+              readOnly: false
+    downloads:
+      existingClaim: soulsync-slskd-nfs-storage
+      advancedMounts:
+        main:
+          main:
+            - path: /app/downloads
+              readOnly: false
+    transfer:
+      type: emptyDir
+      advancedMounts:
+        main:
+          main:
+            - path: /app/Transfer
+              readOnly: false
+    music:
+      existingClaim: soulsync-music-nfs-storage
+      advancedMounts:
+        main:
+          main:
+            - path: /music
+              readOnly: true
+volsync-target-config:
+  pvcTarget: soulsync-config
+volsync-target-database:
+  pvcTarget: soulsync-database

clusters/cl01tl/helm/stalwart/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.5.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.3
+  version: 7.4.5
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.6.0
-digest: sha256:59240e80c6d9788d12be874dcdb217fda0db62d395023cf2db63c0ea0d8f58a6
-generated: "2025-12-24T00:08:56.236652-06:00"
+digest: sha256:1f4f8b19f3100a594eba4031cc74e7f02f059a12930d034740760ab036906099
+generated: "2025-12-27T05:28:43.424524125Z"

clusters/cl01tl/helm/stalwart/Chart.yaml

@@ -23,7 +23,7 @@ dependencies:
     repository: https://bjw-s-labs.github.io/helm-charts/
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.3
+    version: 7.4.5
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     version: 0.5.0

clusters/cl01tl/helm/trivy/values.yaml

@@ -5,8 +5,8 @@ trivy-operator:
     vulnerabilityScannerEnabled: false
     sbomGenerationEnabled: false
     clusterSbomCacheEnabled: false
-    configAuditScannerEnabled: true
-    rbacAssessmentScannerEnabled: true
+    configAuditScannerEnabled: false
+    rbacAssessmentScannerEnabled: false
     infraAssessmentScannerEnabled: false
     clusterComplianceEnabled: false
   serviceMonitor:

clusters/cl01tl/helm/tubearchivist/values.yaml

@@ -42,6 +42,10 @@ tubearchivist:
             repository: ghcr.io/qdm12/gluetun
             tag: v3.40.4@sha256:e10584de1f82d8999e5e6c3111901d9d56a2eed21151fb96af060f390bbdfba8
             pullPolicy: IfNotPresent
+          lifecycle:
+            postStart:
+              exec:
+                command: ["/bin/sh", "-c", "(ip rule del table 51820; ip -6 rule del table 51820) || true"]
           env:
             - name: VPN_SERVICE_PROVIDER
               value: protonvpn
@@ -72,6 +76,20 @@ tubearchivist:
               add:
                 - NET_ADMIN
                 - SYS_MODULE
+          probes:
+            liveness:
+              enabled: true
+              custom: true
+              spec:
+                exec:
+                  command:
+                    - /gluetun-entrypoint
+                    - healthcheck
+                failureThreshold: 5
+                initialDelaySeconds: 30
+                periodSeconds: 30
+                successThreshold: 1
+                timeoutSeconds: 15
           resources:
             limits:
               devic.es/tun: "1"

clusters/cl01tl/helm/unpoller/values.yaml

@@ -9,7 +9,7 @@ unpoller:
         main:
           image:
             repository: ghcr.io/unpoller/unpoller
-            tag: v2.19.0
+            tag: v2.20.1
             pullPolicy: IfNotPresent
           env:
             - name: UP_UNIFI_CONTROLLER_0_SAVE_ALARMS

clusters/cl01tl/helm/vaultwarden/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 2.1.4
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.3
+  version: 7.4.5
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.6.0
-digest: sha256:3dca1ff68c0594d84b5b066eb9dea6931443c582933650a2ab02a662320b0730
-generated: "2025-12-24T00:23:23.112092-06:00"
+digest: sha256:7bcd7a31b896940b34a357d1e0092683bd07b41fad4126a641b13d8dc3742b47
+generated: "2025-12-27T05:29:02.240533828Z"

clusters/cl01tl/helm/vaultwarden/Chart.yaml

@@ -27,7 +27,7 @@ dependencies:
     version: 2.1.4
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.3
+    version: 7.4.5
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data

clusters/cl01tl/helm/yamtrack/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.5.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.3
+  version: 7.4.5
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.5.0
-digest: sha256:3cac306bd241321e8ef8598eefdf3652097412aeac2c855697b981e8ac15cfe3
-generated: "2025-12-24T00:26:08.737793-06:00"
+digest: sha256:cc37c059328be9281a66a394f81c5887baf8a290dbf7261328bb395f8e378d87
+generated: "2025-12-27T05:29:20.288814071Z"

clusters/cl01tl/helm/yamtrack/Chart.yaml

@@ -22,7 +22,7 @@ dependencies:
     version: 4.5.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.3
+    version: 7.4.5
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     version: 0.5.0

hosts/ps08rp/blocky/config.yml

@@ -71,11 +71,9 @@ customDNS:
     cl01tl-endpoint                 IN      A       10.232.1.22
     cl01tl-endpoint                 IN      A       10.232.1.23
 
-    cl01tl-gateway                  IN      A       10.232.1.200
-
     traefik-cl01tl                  IN      A       10.232.1.21
     blocky                          IN      A       10.232.1.22
-    plex-lb                         IN      A       10.232.1.23
+    cilium-cl01tl                   IN      A       10.232.1.23
 
 
     ;; Application Names
@@ -91,6 +89,7 @@ customDNS:
     ceph                            IN      CNAME   traefik-cl01tl
     code-server                     IN      CNAME   traefik-cl01tl
     ephemera                        IN      CNAME   traefik-cl01tl
+    feishin                         IN      CNAME   traefik-cl01tl
     garage-s3                       IN      CNAME   traefik-cl01tl
     garage-webui                    IN      CNAME   traefik-cl01tl
     gatus                           IN      CNAME   traefik-cl01tl
@@ -101,7 +100,7 @@ customDNS:
     home                            IN      CNAME   traefik-cl01tl
     home-assistant                  IN      CNAME   traefik-cl01tl
     home-assistant-code-server      IN      CNAME   traefik-cl01tl
-    hubble                          IN      CNAME   cl01tl-gateway
+    hubble                          IN      CNAME   traefik-cl01tl
     huntarr                         IN      CNAME   traefik-cl01tl
     immich                          IN      CNAME   traefik-cl01tl
     jellyfin                        IN      CNAME   traefik-cl01tl
@@ -113,6 +112,7 @@ customDNS:
     listenarr                       IN      CNAME   traefik-cl01tl
     mail                            IN      CNAME   traefik-cl01tl
     n8n                             IN      CNAME   traefik-cl01tl
+    navidrome                       IN      CNAME   traefik-cl01tl
     ntfy                            IN      CNAME   traefik-cl01tl
     objects                         IN      CNAME   traefik-cl01tl
     ollama                          IN      CNAME   traefik-cl01tl
@@ -129,12 +129,14 @@ customDNS:
     radarr-4k                       IN      CNAME   traefik-cl01tl
     radarr-anime                    IN      CNAME   traefik-cl01tl
     radarr-standup                  IN      CNAME   traefik-cl01tl
+    rayflume                        IN      CNAME   traefik-cl01tl
     searxng                         IN      CNAME   traefik-cl01tl
     seerr                           IN      CNAME   traefik-cl01tl
     slskd                           IN      CNAME   traefik-cl01tl
     sonarr                          IN      CNAME   traefik-cl01tl
     sonarr-4k                       IN      CNAME   traefik-cl01tl
     sonarr-anime                    IN      CNAME   traefik-cl01tl
+    soulsync                        IN      CNAME   traefik-cl01tl
     stalwart                        IN      CNAME   traefik-cl01tl
     tautulli                        IN      CNAME   traefik-cl01tl
     tdarr                           IN      CNAME   traefik-cl01tl

hosts/ps09rp/blocky/config.yml

@@ -71,11 +71,9 @@ customDNS:
     cl01tl-endpoint                 IN      A       10.232.1.22
     cl01tl-endpoint                 IN      A       10.232.1.23
 
-    cl01tl-gateway                  IN      A       10.232.1.200
-
     traefik-cl01tl                  IN      A       10.232.1.21
     blocky                          IN      A       10.232.1.22
-    plex-lb                         IN      A       10.232.1.23
+    cilium-cl01tl                   IN      A       10.232.1.23
 
 
     ;; Application Names
@@ -91,6 +89,7 @@ customDNS:
     ceph                            IN      CNAME   traefik-cl01tl
     code-server                     IN      CNAME   traefik-cl01tl
     ephemera                        IN      CNAME   traefik-cl01tl
+    feishin                         IN      CNAME   traefik-cl01tl
     garage-s3                       IN      CNAME   traefik-cl01tl
     garage-webui                    IN      CNAME   traefik-cl01tl
     gatus                           IN      CNAME   traefik-cl01tl
@@ -101,7 +100,7 @@ customDNS:
     home                            IN      CNAME   traefik-cl01tl
     home-assistant                  IN      CNAME   traefik-cl01tl
     home-assistant-code-server      IN      CNAME   traefik-cl01tl
-    hubble                          IN      CNAME   cl01tl-gateway
+    hubble                          IN      CNAME   traefik-cl01tl
     huntarr                         IN      CNAME   traefik-cl01tl
     immich                          IN      CNAME   traefik-cl01tl
     jellyfin                        IN      CNAME   traefik-cl01tl
@@ -113,6 +112,7 @@ customDNS:
     listenarr                       IN      CNAME   traefik-cl01tl
     mail                            IN      CNAME   traefik-cl01tl
     n8n                             IN      CNAME   traefik-cl01tl
+    navidrome                       IN      CNAME   traefik-cl01tl
     ntfy                            IN      CNAME   traefik-cl01tl
     objects                         IN      CNAME   traefik-cl01tl
     ollama                          IN      CNAME   traefik-cl01tl
@@ -129,12 +129,14 @@ customDNS:
     radarr-4k                       IN      CNAME   traefik-cl01tl
     radarr-anime                    IN      CNAME   traefik-cl01tl
     radarr-standup                  IN      CNAME   traefik-cl01tl
+    rayflume                        IN      CNAME   traefik-cl01tl
     searxng                         IN      CNAME   traefik-cl01tl
     seerr                           IN      CNAME   traefik-cl01tl
     slskd                           IN      CNAME   traefik-cl01tl
     sonarr                          IN      CNAME   traefik-cl01tl
     sonarr-4k                       IN      CNAME   traefik-cl01tl
     sonarr-anime                    IN      CNAME   traefik-cl01tl
+    soulsync                        IN      CNAME   traefik-cl01tl
     stalwart                        IN      CNAME   traefik-cl01tl
     tautulli                        IN      CNAME   traefik-cl01tl
     tdarr                           IN      CNAME   traefik-cl01tl