feat: change icon

Merge pull request 'tmp/paperless-5' (#5562 ) from tmp/paperless-5 into main
Reviewed-on: #5562
2026-04-05 19:07:12 -05:00 · 2026-04-06 00:06:07 +00:00 · 2026-04-06 00:06:07 +00:00 · 2026-04-06 00:06:07 +00:00 · 2026-04-05 23:58:50 +00:00 · 2026-04-05 23:58:50 +00:00
73 changed files with 398 additions and 467 deletions
--- a/.gitea/workflows/renovate.yaml
+++ b/.gitea/workflows/renovate.yaml
@@ -13,7 +13,7 @@ on:
 jobs:
  renovate:
    runs-on: ubuntu-latest
-    container: ghcr.io/renovatebot/renovate:43.104.3@sha256:8248aad190150ce3f1016f9e93b45185679f075c428bca093e724a59f1fd426e
+    container: ghcr.io/renovatebot/renovate:43.104.4@sha256:54369958207b06c85398d8c4dffc70997c89f07546fa0a4703b3774f48f48dab
    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
--- a/clusters/cl01tl/helm/actual/Chart.yaml
+++ b/clusters/cl01tl/helm/actual/Chart.yaml
@@ -24,4 +24,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/actual-budget.png
 # renovate: datasource=github-releases depName=actualbudget/actual
-appVersion: 26.3.0
+appVersion: 26.4.0
--- a/clusters/cl01tl/helm/actual/values.yaml
+++ b/clusters/cl01tl/helm/actual/values.yaml
@@ -8,7 +8,7 @@ actual:
        main:
          image:
            repository: ghcr.io/actualbudget/actual
-            tag: 26.3.0@sha256:eb8bc26f53025e07e464594c12d77c52c4b95840c8dadd9b95c4f0c4660f8ad2
+            tag: 26.4.0@sha256:b0e732e2c41b3dc468a71548e88ef76d3f0c157fc43d15fa05d14ec1c5747e1e
          env:
            - name: ACTUAL_PORT
              value: 5006
--- a/clusters/cl01tl/helm/authentik/Chart.lock
+++ b/clusters/cl01tl/helm/authentik/Chart.lock
@@ -7,9 +7,9 @@ dependencies:
  version: 2.4.0
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.1
+  version: 7.11.2
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.5.0
-digest: sha256:4b90c5af4cc7f37b04284aafd75ddda1241c71acb726932e7e21520b5bf98543
-generated: "2026-03-31T18:36:26.87524-05:00"
+digest: sha256:7302a85008aee7950aa345aa7d64563c1b0da8f07e348ec9709f9438503a41ff
+generated: "2026-04-04T21:00:59.689114-05:00"
--- a/clusters/cl01tl/helm/authentik/Chart.yaml
+++ b/clusters/cl01tl/helm/authentik/Chart.yaml
@@ -25,7 +25,7 @@ dependencies:
    version: 2.4.0
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.11.1
+    version: 7.11.2
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: valkey
    alias: valkey
--- a/clusters/cl01tl/helm/blocky/values.yaml
+++ b/clusters/cl01tl/helm/blocky/values.yaml
@@ -109,6 +109,7 @@ blocky:
              bazarr                          IN      CNAME   traefik-cl01tl
              ceph                            IN      CNAME   traefik-cl01tl
              dawarich                        IN      CNAME   traefik-cl01tl
+              dependency-track                IN      CNAME   traefik-cl01tl
              directus                        IN      CNAME   traefik-cl01tl
              excalidraw                      IN      CNAME   traefik-cl01tl
              feishin                         IN      CNAME   traefik-cl01tl
@@ -142,7 +143,6 @@ blocky:
              ollama                          IN      CNAME   traefik-cl01tl
              omni-tools                      IN      CNAME   traefik-cl01tl
              paperless-ngx                   IN      CNAME   traefik-cl01tl
-              photoview                       IN      CNAME   traefik-cl01tl
              plex                            IN      CNAME   traefik-cl01tl
              postiz                          IN      CNAME   traefik-cl01tl
              prometheus                      IN      CNAME   traefik-cl01tl
--- a/clusters/cl01tl/helm/dawarich/Chart.lock
+++ b/clusters/cl01tl/helm/dawarich/Chart.lock
@@ -4,9 +4,9 @@ dependencies:
  version: 4.6.2
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.1
+  version: 7.11.2
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.5.0
-digest: sha256:1f513bd53430dd0fbba301ab5577aca85e984394dfdca9f615aae944a09c6bc0
-generated: "2026-03-31T18:37:35.858603-05:00"
+digest: sha256:b070640b7006e3ad528193ca784cfbca602994c87afbef4ef4b40a05229cab10
+generated: "2026-04-04T21:01:27.376484-05:00"
--- a/clusters/cl01tl/helm/dawarich/Chart.yaml
+++ b/clusters/cl01tl/helm/dawarich/Chart.yaml
@@ -21,7 +21,7 @@ dependencies:
    version: 4.6.2
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.11.1
+    version: 7.11.2
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: valkey
    alias: valkey
--- a/clusters/cl01tl/helm/dependency-track/Chart.lock
+++ b/clusters/cl01tl/helm/dependency-track/Chart.lock
@@ -0,0 +1,9 @@
+dependencies:
+- name: dependency-track
+  repository: https://dependencytrack.github.io/helm-charts
+  version: 0.44.0
+- name: postgres-cluster
+  repository: oci://harbor.alexlebens.net/helm-charts
+  version: 7.11.2
+digest: sha256:6ea7e8066cce675a02ce76393ee2b0e23300d2f5c72ae64946ae667fc12fde1f
+generated: "2026-04-05T17:32:11.221935-05:00"
--- a/clusters/cl01tl/helm/dependency-track/Chart.yaml
+++ b/clusters/cl01tl/helm/dependency-track/Chart.yaml
@@ -0,0 +1,26 @@
+apiVersion: v2
+name: dependency-track
+version: 1.0.0
+description: Dependency Track
+keywords:
+  - dependency-track
+  - vulnerability-scanner
+home: https://docs.alexlebens.dev/applications/dependency-track/
+sources:
+  - https://github.com/DependencyTrack/dependency-track
+  - https://hub.docker.com/r/dependencytrack/apiserver
+  - https://hub.docker.com/r/dependencytrack/frontend
+  - https://github.com/DependencyTrack/helm-charts/tree/main/charts/dependency-track
+maintainers:
+  - name: alexlebens
+dependencies:
+  - name: dependency-track
+    version: 0.44.0
+    repository: https://dependencytrack.github.io/helm-charts
+  - name: postgres-cluster
+    alias: postgres-18-cluster
+    version: 7.11.2
+    repository: oci://harbor.alexlebens.net/helm-charts
+icon: https://avatars.githubusercontent.com/u/40258585
+# renovate: datasource=github-releases depName=dependency-track
+appVersion: 4.14.1
--- a/clusters/cl01tl/helm/dependency-track/templates/external-secret.yaml
+++ b/clusters/cl01tl/helm/dependency-track/templates/external-secret.yaml
@@ -0,0 +1,42 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: dependency-track-key-secret
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: dependency-track-key-secret
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  data:
+    - secretKey: secret.key
+      remoteRef:
+        key: /cl01tl/dependency-track/key
+        property: key
+
+---
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: dependency-track-oidc-secret
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: dependency-track-oidc-secret
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  data:
+    - secretKey: client
+      remoteRef:
+        key: /authentik/oidc/dependency-track
+        property: client
+    - secretKey: secret
+      remoteRef:
+        key: /authentik/oidc/dependency-track
+        property: secret
--- a/clusters/cl01tl/helm/dependency-track/values.yaml
+++ b/clusters/cl01tl/helm/dependency-track/values.yaml
@@ -0,0 +1,102 @@
+dependency-track:
+  common:
+    secretKey:
+      createSecret: false
+      existingSecretName: dependency-track-key-secret
+  apiServer:
+    image:
+      repository: dependencytrack/apiserver
+      tag: 4.14.1@sha256:2d8813e1ba4ada4aa23087d908c1b5a3ffce39261ead5555c397a1d67c7cbe9d
+    resources:
+      requests:
+        cpu: 100m
+        memory: 100Mi
+      limits:
+        memory: null
+    persistentVolume:
+      enabled: true
+      className: ceph-block
+      size: 5Gi
+    extraEnv:
+      - name: ALPINE_DATABASE_MODE
+        value: external
+      - name: ALPINE_DATABASE_DRIVER
+        value: org.postgresql.Driver
+      - name: ALPINE_DATABASE_URL
+        valueFrom:
+          secretKeyRef:
+            name: dependency-track-postgresql-18-cluster-app
+            key: jdbc-uri
+      - name: ALPINE_DATABASE_USERNAME
+        valueFrom:
+          secretKeyRef:
+            name: dependency-track-postgresql-18-cluster-app
+            key: user
+      - name: ALPINE_DATABASE_PASSWORD
+        valueFrom:
+          secretKeyRef:
+            name: dependency-track-postgresql-18-cluster-app
+            key: password
+      - name: ALPINE_OIDC_ENABLED
+        value: "true"
+      - name: ALPINE_OIDC_CLIENT_ID
+        valueFrom:
+          secretKeyRef:
+            name: dependency-track-oidc-secret
+            key: client
+      - name: ALPINE_OIDC_ISSUER
+        value: https://authentik.alexlebens.net/application/o/dependency-track/
+      - name: ALPINE_OIDC_USERNAME_CLAIM
+        value: preferred_username
+      - name: ALPINE_OIDC_TEAMS_CLAIM
+        value: groups
+      - name: ALPINE_OIDC_USER_PROVISIONING
+        value: "true"
+      - name: ALPINE_OIDC_TEAM_SYNCHRONIZATION
+        value: "true"
+      - name: ALPINE_CORS_ENABLED
+        value: "true"
+      - name: ALPINE_CORS_ALLOW_ORIGIN
+        value: dependency-track.alexlebens.net dependency-track.dependency-track
+    serviceMonitor:
+      enabled: true
+      namespace: dependency-track
+  frontend:
+    image:
+      repository: dependencytrack/frontend
+      tag: 4.14.1@sha256:8217737050b26ea69a6ddd6fe2cb419531a0bae0b903a87a04077a2415fc9f35
+    resources:
+      requests:
+        cpu: 10m
+        memory: 60Mi
+      limits:
+        memory: null
+    apiBaseUrl: dependency-track.alexlebens.net
+  httpRoute:
+    enabled: true
+    hostnames:
+      - dependency-track.alexlebens.net
+    parentRefs:
+      - group: gateway.networking.k8s.io
+        kind: Gateway
+        name: traefik-gateway
+        namespace: traefik
+postgres-18-cluster:
+  mode: standalone
+  recovery:
+    method: objectStore
+    objectStore:
+      index: 1
+  backup:
+    objectStore:
+      - name: garage-local
+        index: 1
+        destinationBucket: postgres-backups
+        externalSecretCredentialPath: /garage/home-infra/postgres-backups
+        isWALArchiver: true
+    scheduledBackups:
+      - name: live-backup
+        suspend: false
+        immediate: true
+        schedule: "0 10 14 * * *"
+        backupName: garage-local
--- a/clusters/cl01tl/helm/directus/Chart.lock
+++ b/clusters/cl01tl/helm/directus/Chart.lock
@@ -4,9 +4,9 @@ dependencies:
  version: 4.6.2
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.1
+  version: 7.11.2
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.5.0
-digest: sha256:116183cdff428293215553b7e60be9aefafbbaaaf64c01f1fc974badd3e0754b
-generated: "2026-03-31T18:37:42.414041-05:00"
+digest: sha256:5fa84b2d82a160c35e002690e4d299275b8136463da9da789be9ca7c6ff998c4
+generated: "2026-04-04T21:01:37.322862-05:00"
--- a/clusters/cl01tl/helm/directus/Chart.yaml
+++ b/clusters/cl01tl/helm/directus/Chart.yaml
@@ -21,7 +21,7 @@ dependencies:
    version: 4.6.2
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.11.1
+    version: 7.11.2
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: valkey
    alias: valkey
--- a/clusters/cl01tl/helm/foldergram/values.yaml
+++ b/clusters/cl01tl/helm/foldergram/values.yaml
@@ -17,7 +17,7 @@ foldergram:
            - name: IMAGE_DETAIL_SOURCE
              value: original
            - name: DERIVATIVE_MODE
-              value: lazy
+              value: eager
            - name: DATA_ROOT
              value: ./data
            - name: GALLERY_ROOT
--- a/clusters/cl01tl/helm/freshrss/Chart.lock
+++ b/clusters/cl01tl/helm/freshrss/Chart.lock
@@ -7,9 +7,9 @@ dependencies:
  version: 2.4.0
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.1
+  version: 7.11.2
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.8.0
-digest: sha256:ebf08159809ef0d69fcb8742b47245c82994b528c2f58e5ed40293555e085ecd
-generated: "2026-03-31T18:37:59.187695-05:00"
+digest: sha256:f709ef2ce041d934faf75dfa31cc86e536aa62ab31ab82584c9751652561744c
+generated: "2026-04-04T21:02:01.689182-05:00"
--- a/clusters/cl01tl/helm/freshrss/Chart.yaml
+++ b/clusters/cl01tl/helm/freshrss/Chart.yaml
@@ -25,7 +25,7 @@ dependencies:
    version: 2.4.0
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.11.1
+    version: 7.11.2
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-data
--- a/clusters/cl01tl/helm/gatus/Chart.lock
+++ b/clusters/cl01tl/helm/gatus/Chart.lock
@@ -4,9 +4,9 @@ dependencies:
  version: 1.5.0
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.1
+  version: 7.11.2
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.8.0
-digest: sha256:1f530794c6d9c4a487d30443dce7ddf556524c7f875c6e5249b135e81528f0c5
-generated: "2026-03-31T19:06:30.871275-05:00"
+digest: sha256:b2a7ef962a91dff4313f66c1d04356f1b2aeefc752d672a9a27ea227db4b8c7d
+generated: "2026-04-04T21:02:09.187828-05:00"
--- a/clusters/cl01tl/helm/gatus/Chart.yaml
+++ b/clusters/cl01tl/helm/gatus/Chart.yaml
@@ -20,7 +20,7 @@ dependencies:
    version: 1.5.0
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.11.1
+    version: 7.11.2
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-data
--- a/clusters/cl01tl/helm/gatus/values.yaml
+++ b/clusters/cl01tl/helm/gatus/values.yaml
@@ -131,9 +131,6 @@ gatus:
      - name: immich
        url: https://immich.alexlebens.net
        <<: *defaults
-      - name: photoview
-        url: https://photoview.alexlebens.net
-        <<: *defaults
      - name: foldergram
        url: https://foldergram.alexlebens.net
        <<: *defaults
@@ -182,6 +179,9 @@ gatus:
      - name: komodo
        url: https://komodo.alexlebens.net
        <<: *defaults
+      - name: dependency-track
+        url: https://dependency-track.alexlebens.net
+        <<: *defaults
      - name: omni-tools
        url: https://omni-tools.alexlebens.net
        <<: *defaults
@@ -353,7 +353,7 @@ gatus:
        <<: *defaults
        group: external
      - name: outline
-        url: https://wiki.alexlebens.dev
+        url: https://outline.alexlebens.dev
        <<: *defaults
        group: external
      - name: vaultwarden
--- a/clusters/cl01tl/helm/generic-device-plugin/Chart.lock
+++ b/clusters/cl01tl/helm/generic-device-plugin/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: generic-device-plugin
  repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-  version: 0.20.27
-digest: sha256:b66a7ab013f5eda47ccf94824796e026642e1abfc051e498957ee0f59743e9fc
-generated: "2026-03-31T21:37:08.823163353Z"
+  version: 0.20.28
+digest: sha256:16e4470b394110a11721fe38a57ad1cfa7c994bca440bfbbc5b3b7a46a79f165
+generated: "2026-04-05T02:12:22.980217268Z"
--- a/clusters/cl01tl/helm/generic-device-plugin/Chart.yaml
+++ b/clusters/cl01tl/helm/generic-device-plugin/Chart.yaml
@@ -14,6 +14,6 @@ maintainers:
 dependencies:
  - name: generic-device-plugin
    repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-    version: 0.20.27
+    version: 0.20.28
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 appVersion: 1.0.0
--- a/clusters/cl01tl/helm/gitea/Chart.lock
+++ b/clusters/cl01tl/helm/gitea/Chart.lock
@@ -13,7 +13,7 @@ dependencies:
  version: 2.4.0
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.10.0
+  version: 7.11.2
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.5.0
@@ -23,5 +23,5 @@ dependencies:
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.8.0
-digest: sha256:a31820970bf7a7e5fa51ff09668238ab5e3b9d4433a71e35d07b779ff632b94c
-generated: "2026-04-01T21:57:18.743604859Z"
+digest: sha256:4dc7ea441a81261a431f917521e528819ab708f6ddb4b3a77412464aecec3598
+generated: "2026-04-04T21:14:18.193631-05:00"
--- a/clusters/cl01tl/helm/gitea/Chart.yaml
+++ b/clusters/cl01tl/helm/gitea/Chart.yaml
@@ -39,7 +39,7 @@ dependencies:
    version: 2.4.0
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.10.0
+    version: 7.11.2
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: valkey
    alias: valkey-gitea
--- a/clusters/cl01tl/helm/gitea/values.yaml
+++ b/clusters/cl01tl/helm/gitea/values.yaml
@@ -245,7 +245,6 @@ postgres-18-cluster:
    resources:
      requests:
        cpu: 100m
-        memory: 150Mi
  recovery:
    method: objectStore
    objectStore:
--- a/clusters/cl01tl/helm/grafana-operator/Chart.lock
+++ b/clusters/cl01tl/helm/grafana-operator/Chart.lock
@@ -4,12 +4,12 @@ dependencies:
  version: 5.22.2
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.1
+  version: 7.11.2
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.5.0
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.5.0
-digest: sha256:1f6bf4f0f24f85d8c362766010e4f42d26458c0412b67afab9b05f2e17eacced
-generated: "2026-03-31T19:12:08.326471-05:00"
+digest: sha256:6c096d1ce729469f12e66b2d0d0c677990d06643ff49401ee8fa69f5ed738e9c
+generated: "2026-04-04T21:02:18.686653-05:00"
--- a/clusters/cl01tl/helm/grafana-operator/Chart.yaml
+++ b/clusters/cl01tl/helm/grafana-operator/Chart.yaml
@@ -20,7 +20,7 @@ dependencies:
    repository: https://grafana.github.io/helm-charts
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.11.1
+    version: 7.11.2
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: valkey
    alias: valkey-unified-alerting
--- a/clusters/cl01tl/helm/grafana-operator/templates/grafana-dashboard.yaml
+++ b/clusters/cl01tl/helm/grafana-operator/templates/grafana-dashboard.yaml
@@ -396,6 +396,44 @@ spec:
  resyncPeriod: 6h
  url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/service/unpoller.json

+---
+apiVersion: grafana.integreatly.org/v1beta1
+kind: GrafanaDashboard
+metadata:
+  name: grafana-dashboard-version-checker-internal
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: grafana-dashboard-version-checker-internal
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  instanceSelector:
+    matchLabels:
+      app: grafana-main
+  contentCacheDuration: 6h
+  folderUID: grafana-folder-service
+  resyncPeriod: 6h
+  url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/service/version-checker-internal.json
+
+---
+apiVersion: grafana.integreatly.org/v1beta1
+kind: GrafanaDashboard
+metadata:
+  name: grafana-dashboard-version-checker
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: grafana-dashboard-version-checker
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  instanceSelector:
+    matchLabels:
+      app: grafana-main
+  contentCacheDuration: 6h
+  folderUID: grafana-folder-service
+  resyncPeriod: 6h
+  url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/service/version-checker.json
+
 ---
 apiVersion: grafana.integreatly.org/v1beta1
 kind: GrafanaDashboard
--- a/clusters/cl01tl/helm/homepage/values.yaml
+++ b/clusters/cl01tl/helm/homepage/values.yaml
@@ -175,12 +175,6 @@ homepage:
                  href: https://immich.alexlebens.net
                  siteMonitor: http://immich.immich:2283
                  statusStyle: dot
-              - Pictures:
-                  icon: sh-photoview.webp
-                  description: Photoview
-                  href: https://photoview.alexlebens.net
-                  siteMonitor: http://photoview.photoview:80
-                  statusStyle: dot
              - Pictures:
                  icon: sh-foldergram.webp
                  description: Foldergram
@@ -202,7 +196,7 @@ homepage:
                  statusStyle: dot
              - Documentation:
                  icon: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/logo-new-round.png
-                  description: Documentation Wiki
+                  description: Homelab Docs
                  href: https://docs.alexlebens.dev
                  siteMonitor: https://docs.alexlebens.dev
                  statusStyle: dot
@@ -230,11 +224,11 @@ homepage:
                  href: https://chat.alexlebens.dev
                  siteMonitor: https://chat.alexlebens.dev
                  statusStyle: dot
-              - Wiki:
+              - Knowledge Base:
                  icon: sh-outline.webp
                  description: Outline
-                  href: https://wiki.alexlebens.dev
-                  siteMonitor: https://wiki.alexlebens.dev
+                  href: https://outline.alexlebens.dev
+                  siteMonitor: https://outline.alexlebens.dev
                  statusStyle: dot
              - Passwords:
                  icon: sh-vaultwarden-light.webp
@@ -303,7 +297,7 @@ homepage:
                  href: https://paperless-ngx.alexlebens.net
                  siteMonitor: http://paperless-ngx.paperless-ngx:80
                  statusStyle: dot
-              - Wiki:
+              - Wikipedia:
                  icon: sh-kiwix-light.webp
                  description: Kiwix
                  href: https://kiwix.alexlebens.net
@@ -381,6 +375,12 @@ homepage:
                      secret: {{ "{{HOMEPAGE_VAR_KOMODO_API_SECRET}}" }}
                      showStacks: true
                      fields: ["running", "down", "unhealthy", "unknown"]
+              - Vulnerability Scanning:
+                  icon: https://raw.githubusercontent.com/DependencyTrack/branding/f77a4ad3b469ff656856ea225f26b1610b89a584/dt-logo-symbol.svg
+                  description: Dependency Track
+                  href: https://dependency-track.alexlebens.net
+                  siteMonitor: http://dependency-track.dependency-track:8080
+                  statusStyle: dot
              - Uptime:
                  icon: sh-gatus.webp
                  description: Gatus
--- a/clusters/cl01tl/helm/immich/Chart.lock
+++ b/clusters/cl01tl/helm/immich/Chart.lock
@@ -4,12 +4,12 @@ dependencies:
  version: 4.6.2
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.1
+  version: 7.11.2
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.5.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.8.0
-digest: sha256:b52be61811b2c4b8f1ac733be19de51e33540589b71337af99fc97727a1894e8
-generated: "2026-04-01T19:49:30.408077-05:00"
+digest: sha256:8b9129d1bbef82d6e0033610da9c25b2b98ce078027d389429cd947c8d22823e
+generated: "2026-04-04T21:02:46.154937-05:00"
--- a/clusters/cl01tl/helm/immich/Chart.yaml
+++ b/clusters/cl01tl/helm/immich/Chart.yaml
@@ -21,7 +21,7 @@ dependencies:
    version: 4.6.2
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.11.1
+    version: 7.11.2
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: valkey
    alias: valkey
--- a/clusters/cl01tl/helm/jellyfin/Chart.yaml
+++ b/clusters/cl01tl/helm/jellyfin/Chart.yaml
@@ -30,4 +30,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/jellyfin.png
 # renovate: datasource=github-releases depName=jellyfin/jellyfin
-appVersion: 10.11.7
+appVersion: 10.11.8
--- a/clusters/cl01tl/helm/jellyfin/values.yaml
+++ b/clusters/cl01tl/helm/jellyfin/values.yaml
@@ -22,7 +22,7 @@ jellyfin:
        main:
          image:
            repository: ghcr.io/jellyfin/jellyfin
-            tag: 10.11.7@sha256:2b93aa3830dcd0aab7185c635e20edef1f8dc5d2e999768baf1724e88c078004
+            tag: 10.11.8@sha256:93227545077893cc9516f28b3adb733b67bc4691f41b6167428a2a0e3220b81c
          env:
            - name: TZ
              value: America/Chicago
@@ -40,7 +40,7 @@ jellyfin:
        exporter:
          image:
            repository: rebelcore/jellyfin-exporter
-            tag: v1.4.0@sha256:dd35d901df663141025670b4b44a62a178b331e9fa084b17016f6fba46343ce9
+            tag: v1.5.0@sha256:37e6d389654180ad9e1661210a48fee71a6dc355a160670235a00329da0dbf80
          args:
            - '--jellyfin.address=http://127.0.0.1:8096'
            - '--jellyfin.token=$(TOKEN)'
--- a/clusters/cl01tl/helm/jellystat/Chart.lock
+++ b/clusters/cl01tl/helm/jellystat/Chart.lock
@@ -4,9 +4,9 @@ dependencies:
  version: 4.6.2
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.1
+  version: 7.11.2
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.8.0
-digest: sha256:a5b2ddd5097971d246b0d1f519ffafb662594d9f84ddc854b8eedf8702d2035f
-generated: "2026-04-01T19:49:45.674314-05:00"
+digest: sha256:4ff8555c97c457923957fac499a0c9469edac8b3dd7ab0fab46f7d4e07e8eff5
+generated: "2026-04-04T21:02:58.694365-05:00"
--- a/clusters/cl01tl/helm/jellystat/Chart.yaml
+++ b/clusters/cl01tl/helm/jellystat/Chart.yaml
@@ -21,7 +21,7 @@ dependencies:
    version: 4.6.2
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.11.1
+    version: 7.11.2
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-data
--- a/clusters/cl01tl/helm/komodo/Chart.lock
+++ b/clusters/cl01tl/helm/komodo/Chart.lock
@@ -4,9 +4,9 @@ dependencies:
  version: 4.6.2
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.1
+  version: 7.11.2
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.8.0
-digest: sha256:9af0fa5ab5e1895e94d64ea5983b5ee58c8b4dd9c5c8ef8021c8c7f950fd54c4
-generated: "2026-04-02T20:28:17.818342-05:00"
+digest: sha256:ed3362c98ab60b195a47d0789f2420e041e907be955cdd122f84e363a00f4c73
+generated: "2026-04-04T21:03:12.459168-05:00"
--- a/clusters/cl01tl/helm/komodo/Chart.yaml
+++ b/clusters/cl01tl/helm/komodo/Chart.yaml
@@ -23,7 +23,7 @@ dependencies:
    version: 4.6.2
  - name: postgres-cluster
    alias: postgresql-17-fdb-cluster
-    version: 7.11.1
+    version: 7.11.2
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-keys
--- a/clusters/cl01tl/helm/lidarr/Chart.lock
+++ b/clusters/cl01tl/helm/lidarr/Chart.lock
@@ -4,9 +4,9 @@ dependencies:
  version: 4.6.2
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.1
+  version: 7.11.2
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.8.0
-digest: sha256:28d9013864be22eb7085fc88a45c0b8a555a582026c779dd72fca4a2e1728d2a
-generated: "2026-04-03T19:30:51.252965-05:00"
+digest: sha256:eaa092df6ae81137c5a62622f9e09495a9bc886ae908202b120969948206d786
+generated: "2026-04-04T21:03:34.837519-05:00"
--- a/clusters/cl01tl/helm/lidarr/Chart.yaml
+++ b/clusters/cl01tl/helm/lidarr/Chart.yaml
@@ -25,7 +25,7 @@ dependencies:
    version: 4.6.2
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.11.1
+    version: 7.11.2
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-config
--- a/clusters/cl01tl/helm/matrix-synapse/Chart.lock
+++ b/clusters/cl01tl/helm/matrix-synapse/Chart.lock
@@ -19,7 +19,7 @@ dependencies:
  version: 2.4.0
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.1
+  version: 7.11.2
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.5.0
@@ -38,5 +38,5 @@ dependencies:
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.8.0
-digest: sha256:70a7f9dc242a1102eafa0b8a5c481954793d3450eea907c7fb5fd86cb81b1bea
-generated: "2026-04-03T21:00:39.545529-05:00"
+digest: sha256:0e8b1b79a98952ed49c87c6da83dcc2eed2aabbd755d9ebf1bdd3090f3ccc44c
+generated: "2026-04-04T21:03:48.737144-05:00"
--- a/clusters/cl01tl/helm/matrix-synapse/Chart.yaml
+++ b/clusters/cl01tl/helm/matrix-synapse/Chart.yaml
@@ -50,7 +50,7 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.11.1
+    version: 7.11.2
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: valkey
    alias: valkey-matrix-synapse
--- a/clusters/cl01tl/helm/matrix-synapse/values.yaml
+++ b/clusters/cl01tl/helm/matrix-synapse/values.yaml
@@ -463,9 +463,6 @@ volsync-target-discord:
    schedule: 40 10 * * *
 volsync-target-whatsapp:
  pvcTarget: mautrix-whatsapp
-  moverSecurityContext:
-    runAsUser: 1337
-    runAsGroup: 1337
  local:
    enabled: true
    schedule: 42 8 * * *
--- a/clusters/cl01tl/helm/music-grabber/Chart.yaml
+++ b/clusters/cl01tl/helm/music-grabber/Chart.yaml
@@ -24,4 +24,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/music-grabber.png
 # renovate: datasource=docker depName=g33kphr33k/musicgrabber
-appVersion: 2.5.5
+appVersion: 2.5.6
--- a/clusters/cl01tl/helm/music-grabber/values.yaml
+++ b/clusters/cl01tl/helm/music-grabber/values.yaml
@@ -12,7 +12,7 @@ music-grabber:
        main:
          image:
            repository: g33kphr33k/musicgrabber
-            tag: 2.5.5@sha256:756ce91653b2f5f17f8f47e5c91f07df5af82162608acdf507e6209a16725373
+            tag: 2.5.6@sha256:457b149917fa0f525c83c08d2cf3a39b4e42c64513b272ecc2d41edcd4cb6c7c
          env:
            - name: MUSIC_DIR
              value: /mnt/store/Music Grabber/
--- a/clusters/cl01tl/helm/navidrome/values.yaml
+++ b/clusters/cl01tl/helm/navidrome/values.yaml
@@ -12,7 +12,7 @@ navidrome:
        main:
          image:
            repository: ghcr.io/navidrome/navidrome
-            tag: 0.61.0@sha256:b14a6acb5cd5ee73f3a13d63d8d68ede82dedb796aa522fbada94769d990cf0b
+            tag: 0.61.1@sha256:1e1660054a856cc09f227d6929252e45a519fdb16004b464dd637f7294ca3ec1
          env:
            - name: ND_MUSICFOLDER
              value: /music
--- a/clusters/cl01tl/helm/ntfy/values.yaml
+++ b/clusters/cl01tl/helm/ntfy/values.yaml
@@ -105,16 +105,6 @@ ntfy:
            - path:
                type: PathPrefix
                value: /
-  persistence:
-    cache:
-      storageClass: ceph-block
-      accessMode: ReadWriteOnce
-      size: 5Gi
-      advancedMounts:
-        main:
-          main:
-            - path: /var/cache/ntfy
-              readOnly: false
 postgres-18-cluster:
  mode: recovery
  recovery:
--- a/clusters/cl01tl/helm/ollama/Chart.lock
+++ b/clusters/cl01tl/helm/ollama/Chart.lock
@@ -4,9 +4,9 @@ dependencies:
  version: 4.6.2
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.10.0
+  version: 7.11.2
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.8.0
-digest: sha256:d0f47712bf5d2bab8136c43f1d5bac41860f067b53c741282a4647ce93a7cd93
-generated: "2026-03-15T20:07:27.179378683Z"
+digest: sha256:440e79999ff635a9c687e92515866b741dc610743753f2d494f3ef523a4746a7
+generated: "2026-04-04T21:04:23.125059-05:00"
--- a/clusters/cl01tl/helm/ollama/Chart.yaml
+++ b/clusters/cl01tl/helm/ollama/Chart.yaml
@@ -5,15 +5,15 @@ description: Ollama
 keywords:
  - ollama
  - ai
-home: https://wiki.alexlebens.dev/s/9f4823e0-8488-4c23-b85e-81ca0ee7ea1a
+home: https://docs.alexlebens.dev/applications/ollama/
 sources:
  - https://github.com/ollama/ollama
  - https://github.com/open-webui/open-webui
-  - https://github.com/cloudnative-pg/cloudnative-pg
  - https://hub.docker.com/r/ollama/ollama
  - https://github.com/open-webui/open-webui/pkgs/container/open-webui
  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/postgres-cluster
+  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/volsync-target
 maintainers:
  - name: alexlebens
 dependencies:
@@ -23,7 +23,7 @@ dependencies:
    version: 4.6.2
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.10.0
+    version: 7.11.2
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-data
@@ -31,4 +31,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ollama.png
 # renovate: datasource=github-releases depName=ollama/ollama
-appVersion: 0.20.0
+appVersion: 0.20.2
--- a/clusters/cl01tl/helm/ollama/templates/external-secret.yaml
+++ b/clusters/cl01tl/helm/ollama/templates/external-secret.yaml
@@ -15,10 +15,7 @@ spec:
  data:
    - secretKey: key
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/ollama/key
-        metadataPolicy: None
        property: key

 ---
@@ -38,15 +35,9 @@ spec:
  data:
    - secretKey: client
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /authentik/oidc/ollama
-        metadataPolicy: None
        property: client
    - secretKey: secret
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /authentik/oidc/ollama
-        metadataPolicy: None
        property: secret
--- a/clusters/cl01tl/helm/ollama/values.yaml
+++ b/clusters/cl01tl/helm/ollama/values.yaml
@@ -4,7 +4,6 @@ ollama:
      type: deployment
      replicas: 1
      strategy: Recreate
-      revisionHistoryLimit: 3
      pod:
        labels:
          ollama-type: server
@@ -22,8 +21,7 @@ ollama:
        main:
          image:
            repository: ollama/ollama
-            tag: 0.20.0
-            pullPolicy: IfNotPresent
+            tag: 0.20.2@sha256:0455f166da85b1d07f694c33ba09278ca649603c0611ba8e46272b16eed7fccd
          env:
            - name: OLLAMA_KEEP_ALIVE
              value: 24h
@@ -33,14 +31,13 @@ ollama:
            limits:
              gpu.intel.com/i915: 1
            requests:
-              cpu: 100m
-              memory: 1Gi
+              cpu: 10m
+              memory: 20Mi
              gpu.intel.com/i915: 1
    server-2:
      type: deployment
      replicas: 1
      strategy: Recreate
-      revisionHistoryLimit: 3
      pod:
        labels:
          ollama-type: server
@@ -58,8 +55,7 @@ ollama:
        main:
          image:
            repository: ollama/ollama
-            tag: 0.20.0
-            pullPolicy: IfNotPresent
+            tag: 0.20.2@sha256:0455f166da85b1d07f694c33ba09278ca649603c0611ba8e46272b16eed7fccd
          env:
            - name: OLLAMA_KEEP_ALIVE
              value: 24h
@@ -69,14 +65,13 @@ ollama:
            limits:
              gpu.intel.com/i915: 1
            requests:
-              cpu: 100m
-              memory: 1Gi
+              cpu: 10m
+              memory: 20Mi
              gpu.intel.com/i915: 1
    server-3:
      type: deployment
      replicas: 1
      strategy: Recreate
-      revisionHistoryLimit: 3
      pod:
        labels:
          ollama-type: server
@@ -94,8 +89,7 @@ ollama:
        main:
          image:
            repository: ollama/ollama
-            tag: 0.20.0
-            pullPolicy: IfNotPresent
+            tag: 0.20.2@sha256:0455f166da85b1d07f694c33ba09278ca649603c0611ba8e46272b16eed7fccd
          env:
            - name: OLLAMA_KEEP_ALIVE
              value: 24h
@@ -105,20 +99,18 @@ ollama:
            limits:
              gpu.intel.com/i915: 1
            requests:
-              cpu: 100m
-              memory: 1Gi
+              cpu: 10m
+              memory: 20Mi
              gpu.intel.com/i915: 1
    web:
      type: deployment
      replicas: 1
      strategy: Recreate
-      revisionHistoryLimit: 3
      containers:
        main:
          image:
            repository: ghcr.io/open-webui/open-webui
-            tag: v0.8.12
-            pullPolicy: IfNotPresent
+            tag: v0.8.12@sha256:8113fa5510020ef05a44afc0c42d33eabeeb2524a996e3e3fb8c437c00f0d792
          env:
            - name: ENV
              value: prod
@@ -165,7 +157,7 @@ ollama:
          resources:
            requests:
              cpu: 10m
-              memory: 1Gi
+              memory: 650Mi
  service:
    server-1:
      controller: server-1
@@ -173,28 +165,24 @@ ollama:
        http:
          port: 11434
          targetPort: 11434
-          protocol: HTTP
    server-2:
      controller: server-2
      ports:
        http:
          port: 11434
          targetPort: 11434
-          protocol: HTTP
    server-3:
      controller: server-3
      ports:
        http:
          port: 11434
          targetPort: 11434
-          protocol: HTTP
    web:
      controller: web
      ports:
        http:
          port: 80
          targetPort: 8080
-          protocol: HTTP
  route:
    main:
      kind: HTTPRoute
@@ -207,11 +195,8 @@ ollama:
        - ollama.alexlebens.net
      rules:
        - backendRefs:
-            - group: ''
-              kind: Service
-              name: ollama-web
+            - name: ollama-web
              port: 80
-              weight: 100
          matches:
            - path:
                type: PathPrefix
@@ -221,7 +206,6 @@ ollama:
      storageClass: ceph-block
      accessMode: ReadWriteOnce
      size: 40Gi
-      retain: true
      advancedMounts:
        server-1:
          main:
@@ -231,7 +215,6 @@ ollama:
      storageClass: ceph-block
      accessMode: ReadWriteOnce
      size: 40Gi
-      retain: true
      advancedMounts:
        server-2:
          main:
@@ -241,7 +224,6 @@ ollama:
      storageClass: ceph-block
      accessMode: ReadWriteOnce
      size: 40Gi
-      retain: true
      advancedMounts:
        server-3:
          main:
@@ -252,7 +234,6 @@ ollama:
      storageClass: ceph-block
      accessMode: ReadWriteOnce
      size: 5Gi
-      retain: true
      advancedMounts:
        web:
          main:
@@ -272,35 +253,12 @@ postgres-18-cluster:
        destinationBucket: postgres-backups
        externalSecretCredentialPath: /garage/home-infra/postgres-backups
        isWALArchiver: true
-      # - name: garage-remote
-      #   index: 1
-      #   destinationBucket: postgres-backups
-      #   externalSecretCredentialPath: /garage/home-infra/postgres-backups
-      #   retentionPolicy: "90d"
-      #   data:
-      #     compression: bzip2
-      # - name: external
-      #   index: 1
-      #   endpointURL: https://nyc3.digitaloceanspaces.com
-      #   destinationBucket: postgres-backups-ce540ddf106d186bbddca68a
-      #   externalSecretCredentialPath: /garage/home-infra/postgres-backups
-      #   isWALArchiver: false
    scheduledBackups:
      - name: live-backup
        suspend: false
        immediate: true
        schedule: "0 5 15 * * *"
        backupName: garage-local
-      # - name: weekly-backup
-      #   suspend: true
-      #   immediate: true
-      #   schedule: "0 0 4 * * SAT"
-      #   backupName: garage-remote
-      # - name: daily-backup
-      #   suspend: true
-      #   immediate: true
-      #   schedule: "0 0 0 * * *"
-      #   backupName: external
 volsync-target-data:
  pvcTarget: ollama-web-data
  moverSecurityContext:
--- a/clusters/cl01tl/helm/omni-tools/Chart.yaml
+++ b/clusters/cl01tl/helm/omni-tools/Chart.yaml
@@ -4,7 +4,7 @@ version: 1.0.0
 description: OmniTools
 keywords:
  - omni-tools
-home: https://wiki.alexlebens.dev/s/8820cd36-dcf6-4ddf-8b2f-584271628a54
+home: https://docs.alexlebens.dev/applications/omni-tools/
 sources:
  - https://github.com/iib0011/omni-tools
  - https://hub.docker.com/r/iib0011/omni-tools
--- a/clusters/cl01tl/helm/omni-tools/values.yaml
+++ b/clusters/cl01tl/helm/omni-tools/values.yaml
@@ -4,17 +4,15 @@ omni-tools:
      type: deployment
      replicas: 1
      strategy: Recreate
-      revisionHistoryLimit: 3
      containers:
        main:
          image:
            repository: iib0011/omni-tools
-            tag: 0.6.0
-            pullPolicy: IfNotPresent
+            tag: 0.6.0@sha256:ceb5acc317daf387634f7f212cefe4722fd1243ad1cba74203f25254195b6c69
          resources:
            requests:
-              cpu: 50m
-              memory: 512Mi
+              cpu: 10m
+              memory: 10Mi
  service:
    main:
      controller: main
@@ -22,7 +20,6 @@ omni-tools:
        http:
          port: 80
          targetPort: 80
-          protocol: HTTP
  route:
    main:
      kind: HTTPRoute
@@ -35,11 +32,8 @@ omni-tools:
        - omni-tools.alexlebens.net
      rules:
        - backendRefs:
-            - group: ''
-              kind: Service
-              name: omni-tools
+            - name: omni-tools
              port: 80
-              weight: 100
          matches:
            - path:
                type: PathPrefix
--- a/clusters/cl01tl/helm/outline/Chart.lock
+++ b/clusters/cl01tl/helm/outline/Chart.lock
@@ -7,12 +7,12 @@ dependencies:
  version: 2.4.0
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.10.0
+  version: 7.11.2
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.0
+  version: 0.5.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.8.0
-digest: sha256:02780454fad48c10e95851e73e45e8a98091596d9dce8ada9e361e7212e581df
-generated: "2026-03-15T20:07:38.818063491Z"
+digest: sha256:9e8ec16e175ae5aa778a7bd2e785d56dea98d025b7a818fe76d9959680f117b1
+generated: "2026-04-04T20:56:43.600438-05:00"
--- a/clusters/cl01tl/helm/outline/Chart.yaml
+++ b/clusters/cl01tl/helm/outline/Chart.yaml
@@ -4,17 +4,16 @@ version: 1.0.0
 description: Outline
 keywords:
  - outline
-  - wiki
-  - documentation
-home: https://wiki.alexlebens.dev/s/c530c2b9-82b7-44df-b7ef-870c8b29242f
+  - knowledge-base
+home: https://docs.alexlebens.dev/applications/outline/
 sources:
  - https://github.com/outline/outline
-  - https://github.com/cloudflare/cloudflared
-  - https://github.com/cloudnative-pg/cloudnative-pg
  - https://hub.docker.com/r/outlinewiki/outline
  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/cloudflared
  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/postgres-cluster
+  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/valkey
+  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/volsync-target
 maintainers:
  - name: alexlebens
 dependencies:
@@ -27,11 +26,11 @@ dependencies:
    version: 2.4.0
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.10.0
+    version: 7.11.2
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: valkey
    alias: valkey
-    version: 0.4.0
+    version: 0.5.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-data
--- a/clusters/cl01tl/helm/outline/templates/external-secret.yaml
+++ b/clusters/cl01tl/helm/outline/templates/external-secret.yaml
@@ -14,17 +14,11 @@ spec:
  data:
    - secretKey: secret-key
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/outline/key
-        metadataPolicy: None
        property: secret-key
    - secretKey: utils-key
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/outline/key
-        metadataPolicy: None
        property: utils-key

 ---
@@ -44,15 +38,9 @@ spec:
  data:
    - secretKey: client
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /authentik/oidc/outline
-        metadataPolicy: None
        property: client
    - secretKey: secret
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /authentik/oidc/outline
-        metadataPolicy: None
        property: secret
--- a/clusters/cl01tl/helm/outline/values.yaml
+++ b/clusters/cl01tl/helm/outline/values.yaml
@@ -4,7 +4,6 @@ outline:
      type: deployment
      replicas: 1
      strategy: Recreate
-      revisionHistoryLimit: 3
      pod:
        securityContext:
          fsGroup: 1001
@@ -12,13 +11,12 @@ outline:
        main:
          image:
            repository: outlinewiki/outline
-            tag: 1.6.1
-            pullPolicy: IfNotPresent
+            tag: 1.6.1@sha256:a750f764080ce28d4a7393176011c8e2e4170b41689a8f6d91327dadf4904eb6
          env:
            - name: NODE_ENV
              value: production
            - name: URL
-              value: https://wiki.alexlebens.dev
+              value: https://outline.alexlebens.dev
            - name: PORT
              value: 3000
            - name: SECRET_KEY
@@ -113,7 +111,7 @@ outline:
          resources:
            requests:
              cpu: 10m
-              memory: 512Mi
+              memory: 500Mi
  service:
    main:
      controller: main
@@ -121,14 +119,12 @@ outline:
        http:
          port: 3000
          targetPort: 3000
-          protocol: HTTP
  persistence:
    data:
      forceRename: outline-data
      storageClass: ceph-block
      accessMode: ReadWriteOnce
      size: 5Gi
-      retain: true
      advancedMounts:
        main:
          main:
@@ -147,35 +143,12 @@ postgres-18-cluster:
        destinationBucket: postgres-backups
        externalSecretCredentialPath: /garage/home-infra/postgres-backups
        isWALArchiver: true
-      # - name: garage-remote
-      #   index: 1
-      #   destinationBucket: postgres-backups
-      #   externalSecretCredentialPath: /garage/home-infra/postgres-backups
-      #   retentionPolicy: "90d"
-      #   data:
-      #     compression: bzip2
-      # - name: external
-      #   index: 1
-      #   endpointURL: https://nyc3.digitaloceanspaces.com
-      #   destinationBucket: postgres-backups-ce540ddf106d186bbddca68a
-      #   externalSecretCredentialPath: /garage/home-infra/postgres-backups
-      #   isWALArchiver: false
    scheduledBackups:
      - name: live-backup
        suspend: false
        immediate: true
        schedule: "0 10 15 * * *"
        backupName: garage-local
-      # - name: weekly-backup
-      #   suspend: true
-      #   immediate: true
-      #   schedule: "0 0 4 * * SAT"
-      #   backupName: garage-remote
-      # - name: daily-backup
-      #   suspend: true
-      #   immediate: true
-      #   schedule: "0 0 0 * * *"
-      #   backupName: external
 volsync-target-data:
  pvcTarget: outline-data
  moverSecurityContext:
--- a/clusters/cl01tl/helm/paperless-ngx/values.yaml
+++ b/clusters/cl01tl/helm/paperless-ngx/values.yaml
@@ -49,7 +49,7 @@ paperless-ngx:
            - name: PAPERLESS_URL
              value: https://paperless-ngx.alexlebens.net
            - name: PAPERLESS_ALLOWED_HOSTS
-              value: paperless-ngx.alexlebens.net, paperless-ngx.paperless-ngx
+              value: paperless-ngx.paperless-ngx
            - name: PAPERLESS_ADMIN_USER
              valueFrom:
                secretKeyRef:
@@ -79,8 +79,8 @@ paperless-ngx:
              value: America/Chicago
          resources:
            requests:
-              cpu: 1m
-              memory: 100Mi
+              cpu: 10m
+              memory: 600Mi
        gotenberg:
          image:
            repository: gotenberg/gotenberg
--- a/clusters/cl01tl/helm/photoview/Chart.lock
+++ b/clusters/cl01tl/helm/photoview/Chart.lock
@@ -1,9 +0,0 @@
-dependencies:
- name: app-template
-  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
- name: postgres-cluster
-  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.10.0
-digest: sha256:fe266f506edd672979091e0ad12379d6ad7dddd2c982e196e602dcda268d6f76
-generated: "2026-03-15T20:07:52.831926834Z"
--- a/clusters/cl01tl/helm/photoview/Chart.yaml
+++ b/clusters/cl01tl/helm/photoview/Chart.yaml
@@ -1,27 +0,0 @@
-apiVersion: v2
-name: photoview
-version: 1.0.0
-description: Photoview
-keywords:
-  - photoview
-  - pictures
-home: https://wiki.alexlebens.dev/s/f519a435-8388-4503-a9f9-401bdb424151
-sources:
-  - https://github.com/photoview/photoview
-  - https://github.com/cloudnative-pg/cloudnative-pg
-  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/postgres-cluster
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: app-template
-    alias: photoview
-    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
-  - name: postgres-cluster
-    alias: postgres-18-cluster
-    version: 7.10.0
-    repository: oci://harbor.alexlebens.net/helm-charts
-icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/photoview.png
-# renovate: datasource=github-releases depName=photoview/photoview
-appVersion: 2.4.0
--- a/clusters/cl01tl/helm/photoview/templates/persistent-volume-claim.yaml
+++ b/clusters/cl01tl/helm/photoview/templates/persistent-volume-claim.yaml
@@ -1,17 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: photoview-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: photoview-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  volumeName: photoview-nfs-storage
-  storageClassName: nfs-client
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 1Gi
--- a/clusters/cl01tl/helm/photoview/templates/persistent-volume.yaml
+++ b/clusters/cl01tl/helm/photoview/templates/persistent-volume.yaml
@@ -1,23 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: photoview-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: photoview-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: nfs-client
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  nfs:
-    path: /volume2/Storage/Pictures
-    server: synologybond.alexlebens.net
-  mountOptions:
-    - vers=4
-    - minorversion=1
-    - noac
--- a/clusters/cl01tl/helm/photoview/values.yaml
+++ b/clusters/cl01tl/helm/photoview/values.yaml
@@ -1,137 +0,0 @@
-photoview:
-  controllers:
-    main:
-      type: deployment
-      replicas: 1
-      strategy: Recreate
-      revisionHistoryLimit: 3
-      initContainers:
-        init-chmod-data:
-          securityContext:
-            runAsUser: 0
-          image:
-            repository: busybox
-            tag: 1.37.0
-            pullPolicy: IfNotPresent
-          command:
-            - /bin/sh
-            - -ec
-            - |
-              /bin/chown -R 999:999 /app/cache
-          resources:
-            requests:
-              cpu: 100m
-              memory: 128Mi
-      containers:
-        main:
-          image:
-            repository: photoview/photoview
-            tag: 2.4.0
-            pullPolicy: IfNotPresent
-          env:
-            - name: PHOTOVIEW_DATABASE_DRIVER
-              value: postgres
-            - name: PHOTOVIEW_POSTGRES_URL
-              valueFrom:
-                secretKeyRef:
-                  name: photoview-postgresql-18-cluster-app
-                  key: uri
-            - name: PHOTOVIEW_MEDIA_CACHE
-              value: /app/cache
-          resources:
-            requests:
-              cpu: 10m
-              memory: 512Mi
-  service:
-    main:
-      controller: main
-      ports:
-        http:
-          port: 80
-          targetPort: 80
-          protocol: HTTP
-  route:
-    main:
-      kind: HTTPRoute
-      parentRefs:
-        - group: gateway.networking.k8s.io
-          kind: Gateway
-          name: traefik-gateway
-          namespace: traefik
-      hostnames:
-        - photoview.alexlebens.net
-      rules:
-        - backendRefs:
-            - group: ''
-              kind: Service
-              name: photoview
-              port: 80
-              weight: 100
-          matches:
-            - path:
-                type: PathPrefix
-                value: /
-  persistence:
-    cache:
-      forceRename: photoview-cache
-      storageClass: ceph-block
-      accessMode: ReadWriteOnce
-      size: 10Gi
-      retain: false
-      advancedMounts:
-        main:
-          init-chmod-data:
-            - path: /app/cache
-              readOnly: false
-          main:
-            - path: /app/cache
-              readOnly: false
-    media:
-      existingClaim: photoview-nfs-storage
-      advancedMounts:
-        main:
-          main:
-            - path: /photos
-              readOnly: true
-postgres-18-cluster:
-  mode: recovery
-  recovery:
-    method: objectStore
-    objectStore:
-      index: 1
-  backup:
-    objectStore:
-      - name: garage-local
-        index: 1
-        destinationBucket: postgres-backups
-        externalSecretCredentialPath: /garage/home-infra/postgres-backups
-        isWALArchiver: true
-      # - name: garage-remote
-      #   index: 1
-      #   destinationBucket: postgres-backups
-      #   externalSecretCredentialPath: /garage/home-infra/postgres-backups
-      #   retentionPolicy: "90d"
-      #   data:
-      #     compression: bzip2
-      # - name: external
-      #   index: 1
-      #   endpointURL: https://nyc3.digitaloceanspaces.com
-      #   destinationBucket: postgres-backups-ce540ddf106d186bbddca68a
-      #   externalSecretCredentialPath: /garage/home-infra/postgres-backups
-      #   isWALArchiver: false
-    scheduledBackups:
-      - name: live-backup
-        suspend: false
-        immediate: true
-        schedule: "0 15 15 * * *"
-        backupName: garage-local
-      # - name: weekly-backup
-      #   suspend: true
-      #   immediate: true
-      #   schedule: "0 0 4 * * SAT"
-      #   backupName: garage-remote
-      # - name: daily-backup
-      #   suspend: true
-      #   immediate: true
-      #   schedule: "0 0 0 * * *"
-      #   backupName: external
--- a/clusters/cl01tl/helm/plex/Chart.yaml
+++ b/clusters/cl01tl/helm/plex/Chart.yaml
@@ -4,10 +4,8 @@ version: 1.0.0
 description: Plex
 keywords:
  - plex
-  - tv shows
-  - movies
-  - live tv
-home: https://wiki.alexlebens.dev/s/e2833eed-f991-4b00-9fa0-5d7f403a8183
+  - media
+home: https://docs.alexlebens.dev/applications/plex/
 sources:
  - https://www.plex.tv/
  - https://github.com/linuxserver/docker-plex
@@ -22,4 +20,4 @@ dependencies:
    version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/plex.png
 # renovate: datasource=github-releases depName=linuxserver/docker-plex
-appVersion: 1.42.2
+appVersion: 1.43.0.10492-121068a07-ls298
--- a/clusters/cl01tl/helm/plex/values.yaml
+++ b/clusters/cl01tl/helm/plex/values.yaml
@@ -4,8 +4,10 @@ plex:
      type: deployment
      replicas: 1
      strategy: Recreate
-      revisionHistoryLimit: 3
      pod:
+        securityContext:
+          fsGroup: 1000
+          fsGroupChangePolicy: OnRootMismatch
        affinity:
          podAntiAffinity:
            requiredDuringSchedulingIgnoredDuringExecution:
@@ -20,11 +22,10 @@ plex:
        main:
          image:
            repository: ghcr.io/linuxserver/plex
-            tag: 1.43.0@sha256:a27f1ce1e1d14cd3627ed217f042bf8de0f796ed274fb27b2dc971ae22a64b95
-            pullPolicy: IfNotPresent
+            tag: 1.43.0.10492-121068a07-ls298@sha256:cbd631f9a972a1c453953a9192c1781dd7d2084db075a1bee78a3cc6387fb103
          env:
            - name: TZ
-              value: US/Central
+              value: America/Chicago
            - name: VERSION
              value: docker
          resources:
@@ -32,8 +33,8 @@ plex:
              gpu.intel.com/i915: 1
            requests:
              gpu.intel.com/i915: 1
-              cpu: 10m
-              memory: 512Mi
+              cpu: 100m
+              memory: 250Mi
  service:
    main:
      controller: main
@@ -42,7 +43,6 @@ plex:
        http:
          port: 32400
          targetPort: 32400
-          protocol: HTTP
  route:
    main:
      kind: HTTPRoute
@@ -55,11 +55,8 @@ plex:
        - plex.alexlebens.net
      rules:
        - backendRefs:
-            - group: ''
-              kind: Service
-              name: plex
+            - name: plex
              port: 32400
-              weight: 100
          matches:
            - path:
                type: PathPrefix
--- a/clusters/cl01tl/helm/searxng/values.yaml
+++ b/clusters/cl01tl/helm/searxng/values.yaml
@@ -9,7 +9,7 @@ searxng:
        main:
          image:
            repository: searxng/searxng
-            tag: latest@sha256:054395b06d5afc43b8d0f51b65257290896779bdd8a1fdc7075dda52461585e1
+            tag: latest@sha256:4da2820fd56920bf05303183b2f3a8c8cce18fcbcd88526cae31bc039b2d4dd1
            pullPolicy: IfNotPresent
          env:
            - name: SEARXNG_BASE_URL
@@ -39,7 +39,7 @@ searxng:
        main:
          image:
            repository: searxng/searxng
-            tag: latest@sha256:054395b06d5afc43b8d0f51b65257290896779bdd8a1fdc7075dda52461585e1
+            tag: latest@sha256:4da2820fd56920bf05303183b2f3a8c8cce18fcbcd88526cae31bc039b2d4dd1
            pullPolicy: IfNotPresent
          env:
            - name: SEARXNG_BASE_URL
--- a/clusters/cl01tl/helm/site-documentation/values.yaml
+++ b/clusters/cl01tl/helm/site-documentation/values.yaml
@@ -11,7 +11,7 @@ site-documentation:
        main:
          image:
            repository: harbor.alexlebens.net/images/site-documentation
-            tag: 0.16.0
+            tag: 0.18.0
            pullPolicy: IfNotPresent
          resources:
            requests:
--- a/clusters/cl01tl/helm/version-checker/Chart.lock
+++ b/clusters/cl01tl/helm/version-checker/Chart.lock
@@ -0,0 +1,6 @@
+dependencies:
+- name: version-checker
+  repository: https://charts.jetstack.io
+  version: v0.10.0
+digest: sha256:2bcc64d0fbaf7b40b95118203ed913fee3de0a8fe6a2b909868651f1524a5ad7
+generated: "2026-04-05T18:37:45.250923-05:00"
--- a/clusters/cl01tl/helm/version-checker/Chart.yaml
+++ b/clusters/cl01tl/helm/version-checker/Chart.yaml
@@ -0,0 +1,21 @@
+apiVersion: v2
+name: version-checker
+version: 1.0.0
+description: Version Checker
+keywords:
+  - version-checker
+  - update-tracker
+home: https://docs.alexlebens.dev/applications/version-checker/
+sources:
+  - https://github.com/jetstack/version-checker
+  - https://quay.io/repository/jetstack/version-checker?tab=tags
+  - https://github.com/jetstack/version-checker/tree/main/deploy/charts/version-checker
+maintainers:
+  - name: alexlebens
+dependencies:
+  - name: version-checker
+    repository: https://charts.jetstack.io
+    version: v0.10.0
+icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/omnitools.png
+# renovate: datasource=github-releases depName=jetstack/version-checker
+appVersion: v0.10.0
--- a/clusters/cl01tl/helm/version-checker/values.yaml
+++ b/clusters/cl01tl/helm/version-checker/values.yaml
@@ -0,0 +1,17 @@
+version-checker:
+  image:
+    repository: quay.io/jetstack/version-checker
+    tag: v0.10.0@sha256:ea7a85422684479d0e51a41efc8edb12bed8f43aa89ab59dfea45aa92b2e8c8d
+  selfhosted:
+    - name: Harbor
+      host: http://harbor-registry.harbor:5000
+    - name: Gitea
+      host: http://gitea-http.gitea:3000
+  resources:
+    requests:
+      cpu: 1m
+      memory: 40Mi
+  prometheus:
+    enabled: true
+    replicas: 1
+    serviceAccountName: version-checker-prometheus
--- a/hosts/ps08rp/blocky/config.yml
+++ b/hosts/ps08rp/blocky/config.yml
@@ -86,6 +86,7 @@ customDNS:
    bazarr                          IN      CNAME   traefik-cl01tl
    ceph                            IN      CNAME   traefik-cl01tl
    dawarich                        IN      CNAME   traefik-cl01tl
+    dependency-track                IN      CNAME   traefik-cl01tl
    directus                        IN      CNAME   traefik-cl01tl
    excalidraw                      IN      CNAME   traefik-cl01tl
    feishin                         IN      CNAME   traefik-cl01tl
@@ -119,7 +120,6 @@ customDNS:
    ollama                          IN      CNAME   traefik-cl01tl
    omni-tools                      IN      CNAME   traefik-cl01tl
    paperless-ngx                   IN      CNAME   traefik-cl01tl
-    photoview                       IN      CNAME   traefik-cl01tl
    plex                            IN      CNAME   traefik-cl01tl
    postiz                          IN      CNAME   traefik-cl01tl
    prometheus                      IN      CNAME   traefik-cl01tl
--- a/hosts/ps09rp/blocky/config.yml
+++ b/hosts/ps09rp/blocky/config.yml
@@ -107,6 +107,7 @@ customDNS:
    bazarr                          IN      CNAME   traefik-cl01tl
    ceph                            IN      CNAME   traefik-cl01tl
    dawarich                        IN      CNAME   traefik-cl01tl
+    dependency-track                IN      CNAME   traefik-cl01tl
    directus                        IN      CNAME   traefik-cl01tl
    excalidraw                      IN      CNAME   traefik-cl01tl
    feishin                         IN      CNAME   traefik-cl01tl
@@ -140,7 +141,6 @@ customDNS:
    ollama                          IN      CNAME   traefik-cl01tl
    omni-tools                      IN      CNAME   traefik-cl01tl
    paperless-ngx                   IN      CNAME   traefik-cl01tl
-    photoview                       IN      CNAME   traefik-cl01tl
    plex                            IN      CNAME   traefik-cl01tl
    postiz                          IN      CNAME   traefik-cl01tl
    prometheus                      IN      CNAME   traefik-cl01tl
--- a/hosts/ps10rp/cloudflare-ddns/compose.yaml
+++ b/hosts/ps10rp/cloudflare-ddns/compose.yaml
@@ -1,7 +1,7 @@
 ---
 services:
    cloudflare-ddns:
-        image: favonia/cloudflare-ddns:1.16.1@sha256:d9eb06b9ddb1ef121334095645e2b55ac208ea1ef1f363a201a255aa8a9798cc
+        image: favonia/cloudflare-ddns:1.16.2@sha256:bc53b40b13c8b2a84e9b93c21f65fcd7d574b741014fb93912eb9efd93015aa2
        container_name: cloudflare-ddns
        cap_drop:
            - all
--- a/renovate.json
+++ b/renovate.json
@@ -10,7 +10,6 @@
  "prHourlyLimit": 0,
  "prConcurrentLimit": 0,
  "pinDigests": true,
-  "minimumReleaseAgeBehaviour": "timestamp-optional",
  "baseBranchPatterns": [
    "main"
  ],
@@ -22,7 +21,7 @@
        "/(^|/)Chart\\.yaml$/"
      ],
      "matchStrings": [
-        "#\\s*renovate:\\s*datasource=(?<datasource>\\S+)\\s+depName=(?<depName>\\S+)(?:\\s+versioning=(?<versioning>\\S+))?\\s+appVersion:\\s*[\"']?(?<currentValue>[^\\s\"']+)[\"']?"
+        "#\\s*renovate:\\s*datasource=(?<datasource>\\S+)\\s+depName=(?<depName>\\S+)(?:\\s+versioning=(?<versioning>\\S+))?\\s+appVersion:\\s*[\"']?v?(?<currentValue>[^\\s\"']+)[\"']?"
      ],
      "versioningTemplate": "{{#if versioning}}{{{versioning}}}{{else}}semver-coerced{{/if}}"
    },
@@ -103,7 +102,7 @@
    },
    {
      "description": "Versioning for LinuxServer images",
-      "versioning": "regex:^v?(?<major>\\d+)\\.(?<minor>\\d+)\\.(?<patch>\\d+)-ls(?<revision>\\d+)$",
+      "versioning": "regex:^v?(?<major>\\d+)\\.(?<minor>\\d+)\\.(?<patch>\\d+)(?:\\.(?<build>\\d+))?(?:-[a-zA-Z0-9]+)*-ls(?<revision>\\d+)$",
      "matchPackageNames": [
        "/^linuxserver//",
        "/^ghcr\\.io/linuxserver//",
Author	SHA1	Message	Date
Alex Lebens	5687cba5a8	feat: change icon All checks were successful lint-test-helm / lint-helm (push) Successful in 54s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 16m24s Details	2026-04-05 19:07:12 -05:00
Alex Lebens	ac05310358	Merge pull request 'tmp/paperless-5' (#5562 ) from tmp/paperless-5 into main Some checks failed lint-test-helm / lint-helm (push) Successful in 44s Details lint-test-helm / validate-kubeconform (push) Has been cancelled Details renovate / renovate (push) Has been cancelled Details Reviewed-on: #5562	2026-04-06 00:06:07 +00:00
Alex Lebens	5632b2f4a3	feat: change allowed hosts	2026-04-06 00:06:07 +00:00
Alex Lebens	7acdde9448	ci: reconfigure	2026-04-06 00:06:07 +00:00
Alex Lebens	7830f1a48a	Merge pull request 'feat: remove initdb command' (#5561 ) from tmp/dep-track-3 into main All checks were successful lint-test-helm / lint-helm (push) Successful in 31s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 12m46s Details Reviewed-on: #5561	2026-04-05 23:58:50 +00:00
Alex Lebens	699df31f07	feat: remove initdb command	2026-04-05 23:58:50 +00:00
Alex Lebens	c7b6caa542	Merge pull request 'tmp/version' (#5560 ) from tmp/version into main Some checks failed renovate / renovate (push) Failing after 1s Details lint-test-helm / lint-helm (push) Successful in 41s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details Reviewed-on: #5560	2026-04-05 23:57:24 +00:00
Alex Lebens	0b1f3d39be	feat: add dashboards	2026-04-05 23:57:24 +00:00
Alex Lebens	b4fbfcc816	feat: add version checker	2026-04-05 23:57:24 +00:00
Alex Lebens	ddd23a4cbf	Merge pull request 'fix: wrong env' (#5559 ) from tmp/dep-track-2 into main All checks were successful lint-test-helm / lint-helm (push) Successful in 34s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 9m40s Details Reviewed-on: #5559	2026-04-05 23:34:08 +00:00
Alex Lebens	1eb0307a4e	fix: wrong env	2026-04-05 23:34:08 +00:00
Alex Lebens	d0aefca7e6	Merge pull request 'tmp/foldergram' (#5557 ) from tmp/foldergram into main All checks were successful lint-test-helm / lint-helm (push) Successful in 26s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 7m24s Details Reviewed-on: #5557	2026-04-05 22:56:04 +00:00
Alex Lebens	aa443b4ba1	feat: set to eager	2026-04-05 22:56:04 +00:00
Alex Lebens	79b3fa802c	Merge pull request 'fix: remove context' (#5556 ) from tmp/mau-fix into main Some checks failed lint-test-helm / lint-helm (push) Successful in 19s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Has been cancelled Details Reviewed-on: #5556	2026-04-05 22:53:05 +00:00
Alex Lebens	26dc7b4bb4	fix: remove context All checks were successful lint-test-helm / lint-helm (pull_request) Successful in 24s Details lint-test-helm / validate-kubeconform (pull_request) Successful in 37s Details render-manifests / render-manifests (pull_request) Successful in 51s Details	2026-04-05 17:49:04 -05:00
Alex Lebens	53b0242a1b	Merge pull request 'feat: add dep-track' (#5554 ) from tmp/dep-track into main All checks were successful lint-test-helm / lint-helm (push) Successful in 19s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details lint-test-docker / lint-docker-compose (push) Successful in 40s Details renovate / renovate (push) Successful in 5m37s Details Reviewed-on: #5554	2026-04-05 22:46:23 +00:00
Alex Lebens	2efbd78ee9	fix: set bool to string	2026-04-05 22:46:23 +00:00
Alex Lebens	25f753b1a6	feat: add dep-track	2026-04-05 22:46:23 +00:00
Renovate Bot	27d6e6746a	Merge pull request 'Update jellyfin to v10.11.8' (#5552 ) from renovate/unified-jellyfin into main All checks were successful lint-test-helm / lint-helm (push) Successful in 23s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 5m56s Details	2026-04-05 22:03:08 +00:00
Renovate Bot	92d0857de1	Update jellyfin to v10.11.8 Some checks are pending renovate/stability-days Updates have not met minimum release age requirement Details lint-test-helm / lint-helm (pull_request) Successful in 25s Details lint-test-helm / validate-kubeconform (pull_request) Successful in 30s Details render-manifests / render-manifests (pull_request) Successful in 1m12s Details	2026-04-05 22:02:50 +00:00
Renovate Bot	6830bb1e5a	Merge pull request 'Update ollama to v0.20.2' (#5550 ) from renovate/unified-ollama into main All checks were successful lint-test-helm / lint-helm (push) Successful in 22s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 2m44s Details	2026-04-05 19:35:51 +00:00
Renovate Bot	f3d5649677	Update ollama to v0.20.2 Some checks are pending renovate/stability-days Updates have not met minimum release age requirement Details lint-test-helm / lint-helm (pull_request) Successful in 19s Details lint-test-helm / validate-kubeconform (pull_request) Has been skipped Details render-manifests / render-manifests (pull_request) Successful in 1m14s Details	2026-04-05 19:35:35 +00:00
Renovate Bot	9f38b21222	Merge pull request 'Update ghcr.io/renovatebot/renovate Docker tag to v43.104.4' (#5549 ) from renovate/unified-renovate into main Some checks failed renovate / renovate (push) Has been cancelled Details	2026-04-05 19:27:22 +00:00
Renovate Bot	a4beb6a2d6	Update ghcr.io/renovatebot/renovate Docker tag to v43.104.4 Some checks are pending renovate/stability-days Updates have not met minimum release age requirement Details	2026-04-05 19:26:51 +00:00
Alex Lebens	4cb5318ebd	Merge pull request 'Update actual to v26.4.0' (#5547 ) from renovate/unified-actual into main Some checks failed lint-test-helm / lint-helm (push) Successful in 24s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Has been cancelled Details Reviewed-on: #5547	2026-04-05 19:25:00 +00:00
Renovate Bot	ee084fd37d	Update actual to v26.4.0 All checks were successful lint-test-helm / lint-helm (pull_request) Successful in 31s Details lint-test-helm / validate-kubeconform (pull_request) Successful in 16s Details render-manifests / render-manifests (pull_request) Successful in 34s Details	2026-04-05 18:03:31 +00:00
Renovate Bot	dc9d325de3	Merge pull request 'Update g33kphr33k/musicgrabber Docker tag to v2.5.6' (#5545 ) from renovate/unified-musicgrabber into main All checks were successful lint-test-helm / lint-helm (push) Successful in 32s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 3m11s Details	2026-04-05 16:50:47 +00:00
Renovate Bot	fe9c6e7eb4	Update g33kphr33k/musicgrabber Docker tag to v2.5.6 Some checks are pending renovate/stability-days Updates have not met minimum release age requirement Details lint-test-helm / lint-helm (pull_request) Successful in 22s Details lint-test-helm / validate-kubeconform (pull_request) Successful in 17s Details render-manifests / render-manifests (pull_request) Successful in 55s Details	2026-04-05 16:50:17 +00:00
Alex Lebens	9b4e1e8f44	Merge pull request 'Update rebelcore/jellyfin-exporter Docker tag to v1.5.0' (#5543 ) from renovate/unified-jellyfin-exporter into main All checks were successful lint-test-helm / lint-helm (push) Successful in 1m40s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 9m1s Details Reviewed-on: #5543	2026-04-05 15:57:08 +00:00
Renovate Bot	9f6bbb8b3e	Update rebelcore/jellyfin-exporter Docker tag to v1.5.0 Some checks failed lint-test-helm / lint-helm (pull_request) Successful in 29s Details lint-test-helm / validate-kubeconform (pull_request) Failing after 58s Details render-manifests / render-manifests (pull_request) Successful in 1m55s Details	2026-04-05 15:55:47 +00:00
Alex Lebens	5b595a9766	Merge pull request 'Update harbor.alexlebens.net/images/site-documentation Docker tag to v0.18.0' (#5542 ) from renovate/unified-site-documentation into main All checks were successful lint-test-helm / lint-helm (push) Successful in 20s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 7m21s Details Reviewed-on: #5542	2026-04-05 15:49:37 +00:00
Renovate Bot	299fffa814	Update harbor.alexlebens.net/images/site-documentation Docker tag to v0.18.0 All checks were successful lint-test-helm / lint-helm (pull_request) Successful in 18s Details lint-test-helm / validate-kubeconform (pull_request) Successful in 18s Details render-manifests / render-manifests (pull_request) Successful in 59s Details	2026-04-05 03:24:59 +00:00
Alex Lebens	160401677d	Merge pull request 'fix: wrong value' (#5540 ) from tmp/ollama-fix into main All checks were successful lint-test-helm / lint-helm (push) Successful in 19s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 4m12s Details render-manifests / render-manifests (push) Successful in 10m42s Details Reviewed-on: #5540	2026-04-05 03:21:44 +00:00
Alex Lebens	a804cf284c	fix: wrong value All checks were successful lint-test-helm / lint-helm (pull_request) Successful in 21s Details lint-test-helm / validate-kubeconform (pull_request) Successful in 27s Details render-manifests / render-manifests (pull_request) Successful in 36s Details	2026-04-04 22:19:41 -05:00
Alex Lebens	d6bce62c37	Merge pull request 'feat: refactor apps' (#5536 ) from tmp/refactor-28 into main Some checks failed renovate / renovate (push) Failing after 4s Details lint-test-helm / lint-helm (push) Successful in 22s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details Reviewed-on: #5536	2026-04-05 03:04:32 +00:00
Alex Lebens	3610e8f46e	feat: refactor apps	2026-04-05 03:04:32 +00:00
Renovate Bot	1bbf82c7b4	Merge pull request 'Update searxng/searxng:latest Docker digest to 4da2820' (#5537 ) from renovate/unified-searxng into main All checks were successful lint-test-helm / lint-helm (push) Successful in 57s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 2m3s Details	2026-04-05 02:40:43 +00:00
Renovate Bot	acc12cf335	Update searxng/searxng:latest Docker digest to 4da2820 All checks were successful lint-test-helm / lint-helm (pull_request) Successful in 48s Details lint-test-helm / validate-kubeconform (pull_request) Has been skipped Details render-manifests / render-manifests (pull_request) Successful in 1m23s Details	2026-04-05 02:40:19 +00:00
Alex Lebens	277c06b2e2	ci: reconfigure Some checks failed renovate / renovate (push) Has been cancelled Details	2026-04-04 21:36:58 -05:00
Alex Lebens	a3aa44d3ef	Merge pull request 'feat: remove photoview' (#5534 ) from tmp/remove-photo into main Some checks failed renovate / renovate (push) Has been cancelled Details lint-test-docker / lint-docker-compose (push) Successful in 1m3s Details lint-test-helm / lint-helm (push) Successful in 1m11s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details Reviewed-on: #5534	2026-04-05 02:35:58 +00:00
Alex Lebens	29f7f777c8	feat: remove photoview Some checks failed lint-test-docker / lint-docker-compose (pull_request) Successful in 1m12s Details lint-test-helm / lint-helm (pull_request) Successful in 1m33s Details lint-test-helm / validate-kubeconform (pull_request) Failing after 48s Details render-manifests / render-manifests (pull_request) Successful in 1m47s Details	2026-04-04 21:26:18 -05:00
Alex Lebens	f6c8b58986	Merge pull request 'feat: refactor apps' (#5530 ) from tmp/refactor-27 into main All checks were successful lint-test-helm / lint-helm (push) Successful in 3m46s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 9m47s Details Reviewed-on: #5530	2026-04-05 02:21:49 +00:00
Alex Lebens	4abfd0ab3c	feat: update lock	2026-04-05 02:21:49 +00:00
Alex Lebens	2e43c96267	feat: refactor apps	2026-04-05 02:21:49 +00:00
Renovate Bot	c1d6d5d692	Merge pull request 'Update Helm release generic-device-plugin to v0.20.28' (#5531 ) from renovate/unified-generic-device-plugin into main Some checks failed lint-test-helm / lint-helm (push) Successful in 45s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Has been cancelled Details	2026-04-05 02:12:45 +00:00
Renovate Bot	e952e4878d	Update Helm release generic-device-plugin to v0.20.28 Some checks are pending renovate/stability-days Updates have not met minimum release age requirement Details lint-test-helm / lint-helm (pull_request) Successful in 45s Details lint-test-helm / validate-kubeconform (pull_request) Has been skipped Details render-manifests / render-manifests (pull_request) Successful in 1m12s Details	2026-04-05 02:12:31 +00:00
Alex Lebens	c90cdef8e9	ci: reconfigure Some checks failed renovate / renovate (push) Has been cancelled Details	2026-04-04 21:08:41 -05:00
Renovate Bot	02634a1aed	Merge pull request 'Update favonia/cloudflare-ddns Docker tag to v1.16.2' (#5529 ) from renovate/unified-cloudflare-ddns into main Some checks failed renovate / renovate (push) Has been cancelled Details lint-test-docker / lint-docker-compose (push) Successful in 3m9s Details	2026-04-05 02:08:07 +00:00
Renovate Bot	9ed10e54b3	Update favonia/cloudflare-ddns Docker tag to v1.16.2 Some checks are pending renovate/stability-days Updates have not met minimum release age requirement Details lint-test-docker / lint-docker-compose (pull_request) Successful in 46s Details	2026-04-05 02:07:30 +00:00
Renovate Bot	cc14eab9ba	Merge pull request 'Update ghcr.io/navidrome/navidrome Docker tag to v0.61.1' (#5527 ) from renovate/unified-navidrome into main Some checks failed lint-test-helm / lint-helm (push) Successful in 41s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Has been cancelled Details	2026-04-05 02:03:41 +00:00
Renovate Bot	8ad987f1ab	Update ghcr.io/navidrome/navidrome Docker tag to v0.61.1 All checks were successful renovate/stability-days Updates have met minimum release age requirement Details lint-test-helm / lint-helm (pull_request) Successful in 44s Details lint-test-helm / validate-kubeconform (pull_request) Has been skipped Details render-manifests / render-manifests (pull_request) Successful in 2m5s Details	2026-04-05 02:03:17 +00:00
Alex Lebens	e78eb5557b	Merge pull request 'Update harbor.alexlebens.net/images/site-documentation Docker tag to v0.17.0' (#5523 ) from renovate/unified-site-documentation into main All checks were successful lint-test-helm / lint-helm (push) Successful in 38s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 16m37s Details Reviewed-on: #5523	2026-04-05 01:49:20 +00:00
Renovate Bot	2c346c0aea	Update harbor.alexlebens.net/images/site-documentation Docker tag to v0.17.0 All checks were successful lint-test-helm / lint-helm (pull_request) Successful in 41s Details lint-test-helm / validate-kubeconform (pull_request) Successful in 43s Details render-manifests / render-manifests (pull_request) Successful in 1m9s Details	2026-04-05 01:47:07 +00:00
Alex Lebens	2ba00b49be	Merge pull request 'feat: remove old pvc' (#5524 ) from tmp/ntfy-5 into main Some checks failed lint-test-helm / lint-helm (push) Successful in 45s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Has been cancelled Details Reviewed-on: #5524	2026-04-05 01:43:35 +00:00
Alex Lebens	af9d28bb75	feat: remove old pvc All checks were successful lint-test-helm / lint-helm (pull_request) Successful in 58s Details lint-test-helm / validate-kubeconform (pull_request) Successful in 41s Details render-manifests / render-manifests (pull_request) Successful in 3m16s Details	2026-04-04 20:29:18 -05:00
Alex Lebens	83dd21c92d	Merge pull request 'feat: enable ntfy with postgres' (#5521 ) from tmp/ntfy-4 into main All checks were successful lint-test-helm / lint-helm (push) Successful in 58s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 17m16s Details Reviewed-on: #5521	2026-04-05 01:20:25 +00:00
Alex Lebens	f92c97c441	feat: merge Some checks failed lint-test-helm / lint-helm (pull_request) Successful in 1m5s Details lint-test-helm / validate-kubeconform (pull_request) Has been skipped Details render-manifests / render-manifests (pull_request) Failing after 1m41s Details	2026-04-04 20:19:46 -05:00
Alex Lebens	fc96de7cd4	feat: merge	2026-04-04 20:19:46 -05:00
Alex Lebens	a1e52095a9	feat: merge	2026-04-04 20:19:40 -05:00
Renovate Bot	e4768b3b7c	Merge pull request 'Update ubuntu Docker tag to resolute-20260312' (#5519 ) from renovate/unified-ubuntu into main All checks were successful lint-test-helm / lint-helm (push) Successful in 44s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 3m34s Details	2026-04-05 01:01:52 +00:00
Renovate Bot	1eb4268ffe	Update ubuntu Docker tag to resolute-20260312 Some checks failed renovate/stability-days Updates have met minimum release age requirement Details lint-test-helm / lint-helm (pull_request) Successful in 54s Details lint-test-helm / validate-kubeconform (pull_request) Has been skipped Details render-manifests / render-manifests (pull_request) Failing after 2m6s Details	2026-04-05 01:01:28 +00:00