Update ghcr.io/jellyfin/jellyfin Docker tag to v10.11.6 (#3320)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/linuxserver/prowlarr](https://github.com/linuxserver/docker-prowlarr/packages) ([source](https://github.com/linuxserver/docker-prowlarr)) | digest | `67a8aae` → `d3e9307` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi42OS4yIiwidXBkYXRlZEluVmVyIjoiNDIuNjkuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiYXV0b21lcmdlIiwiaW1hZ2UiXX0=-->

Reviewed-on: #3252
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>

clusters/cl01tl/helm/authentik/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 2025.12.1
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
+  version: 2.1.9
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.4.5
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.0.1
-digest: sha256:a473d3cc3e54c917f3d14c96f3de72e81940c82b3fbe6ce316e4d28a7bdcc56d
-generated: "2026-01-16T18:05:21.607549312Z"
+digest: sha256:458e9967330768b68649da4af69773adba3aed1a04316b9e67ef19612381d4b9
+generated: "2026-01-17T17:30:18.453482605Z"

clusters/cl01tl/helm/authentik/Chart.yaml

@@ -25,7 +25,7 @@ dependencies:
     repository: https://charts.goauthentik.io/
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.6
+    version: 2.1.9
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.4.5

clusters/cl01tl/helm/blocky/values.yaml

@@ -113,8 +113,8 @@ blocky:
               ceph                            IN      CNAME   traefik-cl01tl
               code-server                     IN      CNAME   traefik-cl01tl
               ephemera                        IN      CNAME   traefik-cl01tl
+              excalidraw                      IN      CNAME   traefik-cl01tl
               feishin                         IN      CNAME   traefik-cl01tl
-              fladder                         IN      CNAME   traefik-cl01tl
               garage-s3                       IN      CNAME   traefik-cl01tl
               garage-webui                    IN      CNAME   traefik-cl01tl
               gatus                           IN      CNAME   traefik-cl01tl
@@ -134,7 +134,6 @@ blocky:
               komodo                          IN      CNAME   traefik-cl01tl
               lidarr                          IN      CNAME   traefik-cl01tl
               lidatube                        IN      CNAME   traefik-cl01tl
-              listenarr                       IN      CNAME   traefik-cl01tl
               mail                            IN      CNAME   traefik-cl01tl
               navidrome                       IN      CNAME   traefik-cl01tl
               ntfy                            IN      CNAME   traefik-cl01tl
@@ -161,7 +160,6 @@ blocky:
               sonarr-4k                       IN      CNAME   traefik-cl01tl
               sonarr-anime                    IN      CNAME   traefik-cl01tl
               stalwart                        IN      CNAME   traefik-cl01tl
-              tautulli                        IN      CNAME   traefik-cl01tl
               tdarr                           IN      CNAME   traefik-cl01tl
               tubearchivist                   IN      CNAME   traefik-cl01tl
               vault                           IN      CNAME   traefik-cl01tl

clusters/cl01tl/helm/code-server/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
+  version: 2.1.9
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:c988504ea0627250cc060576beac292d3292b012cdcca615a4cbaaf5ee976f02
-generated: "2026-01-16T18:45:47.220901906Z"
+digest: sha256:d243a4062bd69c3e02536dbc8f0da06f8607a373a772bf521fa16ae10df331b7
+generated: "2026-01-17T17:30:30.693066904Z"

clusters/cl01tl/helm/code-server/Chart.yaml

@@ -22,7 +22,7 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.6
+    version: 2.1.9
   - name: volsync-target
     alias: volsync-target-config
     version: 0.7.0

clusters/cl01tl/helm/code-server/values.yaml

@@ -9,7 +9,7 @@ code-server:
         main:
           image:
             repository: ghcr.io/linuxserver/code-server
-            tag: 4.108.0@sha256:982ef207e723fe04d001a9cfe58c545913c8271ae9fd4cb036fa004bfcc33631
+            tag: 4.108.1@sha256:e9ed472ff25e12a5ee3562684d073b29e508e472ef54e3558e19bf4ff99ef858
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/directus/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
+  version: 2.1.9
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.4.5
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.0.1
-digest: sha256:a6c475943e21a16f1978f93b944d952641d0a69aa42022d6ab91c1296d44c3f5
-generated: "2026-01-16T18:45:59.110701786Z"
+digest: sha256:9ae9e0cb222e7ac2fca2bfe5367a4b011b0c83c1a0f98a01342f37fad62c2fe1
+generated: "2026-01-17T17:30:43.212095428Z"

clusters/cl01tl/helm/directus/Chart.yaml

@@ -23,7 +23,7 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.6
+    version: 2.1.9
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.4.5

clusters/cl01tl/helm/element-web/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 1.4.27
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
-digest: sha256:b8b4e36fb88254e7575bd3aff60721fbf44a13af33eff949b6bc011facfcec62
-generated: "2026-01-08T23:02:24.62763032Z"
+  version: 2.1.9
+digest: sha256:ef4b5256d6b405f08f33ec1a2bbda9f8427fcac0c69accd04c19fb4fe1871047
+generated: "2026-01-17T17:30:57.57289288Z"

clusters/cl01tl/helm/element-web/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     repository: https://ananace.gitlab.io/charts
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.6
+    version: 2.1.9
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/element.png
 # renovate: github=element-hq/element-web
 appVersion: v1.12.6

clusters/cl01tl/helm/excalidraw/Chart.lock

@@ -0,0 +1,6 @@
+dependencies:
+- name: app-template
+  repository: https://bjw-s-labs.github.io/helm-charts/
+  version: 4.6.2
+digest: sha256:e05d84dd266b8b456a8bc7f9a2bb3ab01f4ac926efd1a58cf405b0cdab343d3f
+generated: "2026-01-17T18:27:08.062835-06:00"

clusters/cl01tl/helm/excalidraw/Chart.yaml

@@ -0,0 +1,21 @@
+apiVersion: v2
+name: excalidraw
+version: 1.0.0
+description: Excalidraw
+keywords:
+  - excalidraw
+home: https://wiki.alexlebens.dev/
+sources:
+  - https://github.com/excalidraw/excalidraw
+  - https://hub.docker.com/r/excalidraw/excalidraw
+  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
+maintainers:
+  - name: alexlebens
+dependencies:
+  - name: app-template
+    alias: excalidraw
+    repository: https://bjw-s-labs.github.io/helm-charts/
+    version: 4.6.2
+icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/excalidraw.png
+# renovate: github=excalidraw/excalidraw
+appVersion: 0.6.0

clusters/cl01tl/helm/excalidraw/values.yaml

@@ -0,0 +1,51 @@
+excalidraw:
+  controllers:
+    main:
+      type: deployment
+      replicas: 1
+      strategy: Recreate
+      revisionHistoryLimit: 3
+      containers:
+        main:
+          image:
+            repository: excalidraw/excalidraw
+            tag: latest@sha256:3c2513e830bb6e195147c05b34ecf8393d0ba2b1cc86e93b407a5777d6135c6c
+            pullPolicy: IfNotPresent
+          env:
+            - name: NODE_ENV
+              value: production
+            - name: TZ
+              value: America/Chicago
+          resources:
+            requests:
+              cpu: 10m
+              memory: 128Mi
+  service:
+    main:
+      controller: main
+      ports:
+        http:
+          port: 80
+          targetPort: 80
+          protocol: HTTP
+  route:
+    main:
+      kind: HTTPRoute
+      parentRefs:
+        - group: gateway.networking.k8s.io
+          kind: Gateway
+          name: traefik-gateway
+          namespace: traefik
+      hostnames:
+        - excalidraw.alexlebens.net
+      rules:
+        - backendRefs:
+            - group: ''
+              kind: Service
+              name: excalidraw
+              port: 80
+              weight: 100
+          matches:
+            - path:
+                type: PathPrefix
+                value: /

clusters/cl01tl/helm/freshrss/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
+  version: 2.1.9
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.4.5
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:fa0354899549c2bd40310f138126980825046d0d6d71acd7eb7ad121d94f8ccf
-generated: "2026-01-16T18:46:20.598104939Z"
+digest: sha256:ded65efcf83f3c0cd3497839a1beddbc616081c286bdac6f584353813e7c8da8
+generated: "2026-01-17T17:31:12.045290099Z"

clusters/cl01tl/helm/freshrss/Chart.yaml

@@ -23,7 +23,7 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.6
+    version: 2.1.9
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.4.5

clusters/cl01tl/helm/garage/values.yaml

@@ -34,7 +34,7 @@ garage:
         debug:
           image:
             repository: ubuntu
-            tag: resolute-20251208
+            tag: resolute-20260106.1
             pullPolicy: IfNotPresent
           command:
             - "sleep"

clusters/cl01tl/helm/gatus/values.yaml

@@ -131,9 +131,6 @@ gatus:
       - name: jellyfin
         url: https://jellyfin.alexlebens.net
         <<: *defaults
-      - name: fladder
-        url: https://fladder.alexlebens.net
-        <<: *defaults
       - name: tubearchivist
         url: https://tubearchivist.alexlebens.net
         <<: *defaults
@@ -173,6 +170,9 @@ gatus:
       - name: kiwix
         url: https://kiwix.alexlebens.net
         <<: *defaults
+      - name: excalidraw
+        url: https://excalidraw.alexlebens.net
+        <<: *defaults
       - name: gitea
         url: https://gitea.alexlebens.net
         <<: *defaults
@@ -206,9 +206,6 @@ gatus:
       - name: alertmanager
         url: https://alertmanager.alexlebens.net
         <<: *defaults
-      - name: tautulli
-        url: https://tautulli.alexlebens.net
-        <<: *defaults
       - name: jellystat
         url: https://jellystat.alexlebens.net
         <<: *defaults
@@ -325,9 +322,6 @@ gatus:
       - name: shelfmark
         url: https://shelfmark.alexlebens.net
         <<: *defaults
-      - name: listenarr
-        url: https://listenarr.alexlebens.net
-        <<: *defaults
       - name: www
         url: https://www.alexlebens.dev
         <<: *defaults

clusters/cl01tl/helm/generic-device-plugin/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: generic-device-plugin
   repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-  version: 0.20.14
-digest: sha256:fdb8cb0fae6f184b7d0396cf75cbd1ce8611904e4bf7c973ed6dd50e740f90d2
-generated: "2026-01-14T00:04:49.992859554Z"
+  version: 0.20.17
+digest: sha256:878766891eee5b4cea332c5eae87fc7fbd7eb7bfea90b408c48666e840b81408
+generated: "2026-01-17T17:39:58.807224966Z"

clusters/cl01tl/helm/generic-device-plugin/Chart.yaml

@@ -15,6 +15,6 @@ maintainers:
 dependencies:
   - name: generic-device-plugin
     repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-    version: 0.20.14
+    version: 0.20.17
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 appVersion: 1.0.0

clusters/cl01tl/helm/gitea/Chart.lock

@@ -10,7 +10,7 @@ dependencies:
   version: 0.21.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
+  version: 2.1.9
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.4.5
@@ -23,5 +23,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:f38463ec7a583f7f47e76ae53d55d436657b834f70d34695f8347f640202ce46
-generated: "2026-01-15T22:13:17.229320298Z"
+digest: sha256:331279317bf8bb1b1bbdc42beb2a0f9c95c40c78ef90c12d37423c129f2720a3
+generated: "2026-01-17T17:31:27.582829279Z"

clusters/cl01tl/helm/gitea/Chart.yaml

@@ -36,7 +36,7 @@ dependencies:
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.6
+    version: 2.1.9
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.4.5

clusters/cl01tl/helm/home-assistant/values.yaml

@@ -9,7 +9,7 @@ home-assistant:
         main:
           image:
             repository: ghcr.io/home-assistant/home-assistant
-            tag: 2026.1.1
+            tag: 2026.1.2
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -21,7 +21,7 @@ home-assistant:
         code-server:
           image:
             repository: ghcr.io/linuxserver/code-server
-            tag: 4.108.0@sha256:982ef207e723fe04d001a9cfe58c545913c8271ae9fd4cb036fa004bfcc33631
+            tag: 4.108.1@sha256:e9ed472ff25e12a5ee3562684d073b29e508e472ef54e3558e19bf4ff99ef858
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/homepage-dev/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
-digest: sha256:d38a91baca59883b376f95fb9105bb3e38877f38e38c60196f5a44f30953f859
-generated: "2026-01-16T18:46:54.599835994Z"
+  version: 2.1.9
+digest: sha256:3dd7439a8874fcf8b12754907f187149287a2db04c5b9a595d32e6b64a5482db
+generated: "2026-01-17T17:31:46.477375094Z"

clusters/cl01tl/helm/homepage-dev/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.6
+    version: 2.1.9
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/homepage.png
 # renovate: github=gethomepage/homepage
 appVersion: v1.8.0

clusters/cl01tl/helm/homepage/values.yaml

@@ -147,12 +147,6 @@ homepage:
                   href: https://yamtrack.alexlebens.net
                   siteMonitor: http://yamtrack.yamtrack:80
                   statusStyle: dot
-              - Movies and TV (Alt):
-                  icon: sh-fladder.webp
-                  description: Fladder, Jellyfin UI
-                  href: https://fladder.alexlebens.net
-                  siteMonitor: http://fladder.jellyfin:80
-                  statusStyle: dot
               - Movies and TV:
                   icon: sh-jellyfin.webp
                   description: Jellyfin
@@ -287,6 +281,12 @@ homepage:
                   href: https://kiwix.alexlebens.net
                   siteMonitor: http://kiwix.kiwix:80
                   statusStyle: dot
+              - Draw:
+                  icon: sh-excalidraw.webp
+                  description: Excalidraw
+                  href: https://excalidraw.alexlebens.net
+                  siteMonitor: http://excalidraw.excalidraw:80
+                  statusStyle: dot
           - Code:
               - Code (Public):
                   icon: sh-gitea.webp
@@ -394,12 +394,6 @@ homepage:
                         query: prometheus_tsdb_storage_blocks_bytes
                         format:
                           type: bytes
-              - Tautulli:
-                  icon: sh-tautulli.webp
-                  description: Plex Monitoring
-                  href: https://tautulli.alexlebens.net
-                  siteMonitor: http://tautulli.tautulli:80
-                  statusStyle: dot
               - Jellystat:
                   icon: sh-jellystat.webp
                   description: Jellyfin Monitoring
@@ -692,12 +686,6 @@ homepage:
                   href: https://ephemera.alexlebens.net
                   siteMonitor: http://ephemera.ephemera:80
                   statusStyle: dot
-              - Listenarr:
-                  icon: sh-audiobookrequest.webp
-                  description: Audiobooks
-                  href: https://listenarr.alexlebens.net
-                  siteMonitor: http://listenarr.listenarr:80
-                  statusStyle: dot
           - Other Homes:
               - Dev:
                   icon: sh-homepage.webp

clusters/cl01tl/helm/jellyfin/values.yaml

@@ -9,7 +9,7 @@ jellyfin:
         main:
           image:
             repository: ghcr.io/jellyfin/jellyfin
-            tag: 10.11.5
+            tag: 10.11.6
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -39,20 +39,6 @@ jellyfin:
                 secretKeyRef:
                   name: jellyfin-exporter-secret
                   key: token
-    fladder:
-      type: deployment
-      replicas: 1
-      strategy: Recreate
-      revisionHistoryLimit: 3
-      containers:
-        main:
-          image:
-            repository: ghcr.io/donutware/fladder
-            tag: v0.9.0
-            pullPolicy: IfNotPresent
-          env:
-            - name: BASE_URL
-              value: https://jellyfin.alexlebens.net/
   service:
     main:
       forceRename: jellyfin
@@ -66,14 +52,6 @@ jellyfin:
           port: 9594
           targetPort: 9594
           protocol: HTTP
-    fladder:
-      forceRename: fladder
-      controller: fladder
-      ports:
-        http:
-          port: 80
-          targetPort: 80
-          protocol: HTTP
   serviceMonitor:
     main:
       selector:
@@ -108,26 +86,6 @@ jellyfin:
             - path:
                 type: PathPrefix
                 value: /
-    fladder:
-      kind: HTTPRoute
-      parentRefs:
-        - group: gateway.networking.k8s.io
-          kind: Gateway
-          name: traefik-gateway
-          namespace: traefik
-      hostnames:
-        - fladder.alexlebens.net
-      rules:
-        - backendRefs:
-            - group: ''
-              kind: Service
-              name: fladder
-              port: 80
-              weight: 100
-          matches:
-            - path:
-                type: PathPrefix
-                value: /
   persistence:
     config:
       forceRename: jellyfin-config

clusters/cl01tl/helm/karakeep/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 0.21.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
+  version: 2.1.9
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:9a98de83b4829b6cabd34d0f6924b66fc9d13866b67370d2a8ba30b255a45b34
-generated: "2026-01-16T18:48:07.534643037Z"
+digest: sha256:acbdf6d80ff0d516f2006756930c6f299afd83740141231afad3512a06c3c05d
+generated: "2026-01-17T17:32:00.150598962Z"

clusters/cl01tl/helm/karakeep/Chart.yaml

@@ -26,7 +26,7 @@ dependencies:
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.6
+    version: 2.1.9
   - name: volsync-target
     alias: volsync-target-data
     version: 0.7.0

clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: kube-prometheus-stack
   repository: oci://ghcr.io/prometheus-community/charts
-  version: 80.14.3
+  version: 81.0.0
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
   version: 4.6.2
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.0.1
-digest: sha256:44b78effa151c98d809d716ffee355cdd1648e78dd89d3b3f79224856a9d70aa
-generated: "2026-01-16T18:48:42.203404615Z"
+digest: sha256:14197d65a6db43a466933c29b6c78e234dd46514254a2d24814e713ca9f3c919
+generated: "2026-01-16T21:44:02.294108101Z"

clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml

@@ -20,7 +20,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: kube-prometheus-stack
-    version: 80.14.3
+    version: 81.0.0
     repository: oci://ghcr.io/prometheus-community/charts
   - name: app-template
     alias: ntfy-alertmanager

clusters/cl01tl/helm/libation/values.yaml

@@ -35,7 +35,7 @@ libation:
         main:
           image:
             repository: ubuntu
-            tag: resolute-20251208
+            tag: resolute-20260106.1
             pullPolicy: IfNotPresent
           command:
             - "sleep"

clusters/cl01tl/helm/listenarr/Chart.lock

@@ -1,9 +0,0 @@
-dependencies:
-- name: app-template
-  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
-- name: volsync-target
-  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-digest: sha256:3ca3de48695006c4a5bde214ee699677289b6a89ae1a92b6936c5f25d64ad25b
-generated: "2026-01-16T18:49:46.484482035Z"

clusters/cl01tl/helm/listenarr/Chart.yaml

@@ -1,25 +0,0 @@
-apiVersion: v2
-name: listenarr
-version: 1.0.0
-description: Listenarr
-keywords:
-  - listenarr
-  - audiobooks
-home: https://wiki.alexlebens.dev/
-sources:
-  - https://github.com/therobbiedavis/Listenarr
-  - https://hub.docker.com/r/therobbiedavis/listenarr
-  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: app-template
-    alias: listenarr
-    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
-  - name: volsync-target
-    alias: volsync-target-config
-    version: 0.7.0
-    repository: oci://harbor.alexlebens.net/helm-charts
-# renovate: github=therobbiedavis/Listenarr
-appVersion: 0.2.35

clusters/cl01tl/helm/listenarr/templates/persistent-volume-claim.yaml

@@ -1,17 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: listenarr-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: listenarr-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  volumeName: listenarr-nfs-storage
-  storageClassName: nfs-client
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 1Gi

clusters/cl01tl/helm/listenarr/templates/persistent-volume.yaml

@@ -1,23 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: listenarr-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: listenarr-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: nfs-client
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  nfs:
-    path: /volume2/Storage/Audiobooks
-    server: synologybond.alexlebens.net
-  mountOptions:
-    - vers=4
-    - minorversion=1
-    - noac

clusters/cl01tl/helm/listenarr/values.yaml

@@ -1,83 +0,0 @@
-listenarr:
-  controllers:
-    main:
-      type: deployment
-      replicas: 1
-      strategy: Recreate
-      revisionHistoryLimit: 3
-      containers:
-        main:
-          image:
-            repository: therobbiedavis/listenarr
-            tag: canary-0.2.35
-            pullPolicy: IfNotPresent
-          env:
-            - name: LISTENARR_PUBLIC_URL
-              value: https://listenarr.alexlebens.net
-          resources:
-            requests:
-              cpu: 50m
-              memory: 128Mi
-  service:
-    main:
-      controller: main
-      ports:
-        http:
-          port: 80
-          targetPort: 5000
-          protocol: HTTP
-  route:
-    main:
-      kind: HTTPRoute
-      parentRefs:
-        - group: gateway.networking.k8s.io
-          kind: Gateway
-          name: traefik-gateway
-          namespace: traefik
-      hostnames:
-        - listenarr.alexlebens.net
-      rules:
-        - backendRefs:
-            - group: ''
-              kind: Service
-              name: listenarr
-              port: 80
-              weight: 100
-          matches:
-            - path:
-                type: PathPrefix
-                value: /
-  persistence:
-    config:
-      forceRename: listenarr
-      storageClass: ceph-block
-      accessMode: ReadWriteOnce
-      size: 5Gi
-      retain: true
-      advancedMounts:
-        main:
-          main:
-            - path: /app/config
-              readOnly: false
-    media:
-      existingClaim: listenarr-nfs-storage
-      advancedMounts:
-        main:
-          main:
-            - path: /data
-              readOnly: false
-volsync-target-config:
-  pvcTarget: listenarr
-  moverSecurityContext:
-    runAsUser: 1000
-    runAsGroup: 1000
-    fsGroup: 1000
-    fsGroupChangePolicy: OnRootMismatch
-  local:
-    enabled: true
-    schedule: 42 8 * * *
-  remote:
-    enabled: false
-  external:
-    enabled: true
-    schedule: 42 9 * * *

clusters/cl01tl/helm/matrix-synapse/Chart.lock

@@ -13,10 +13,10 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
+  version: 2.1.9
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
+  version: 2.1.9
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.4.5
@@ -38,5 +38,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:eeb21483b2fc2d517039fff51bce1819c9765172eb2d185f67feb133495e8234
-generated: "2026-01-16T18:49:57.823841472Z"
+digest: sha256:5d815aa1bb50fa1b6b85a6edda6017d0a8e3f6c23d804177a845bf206cd2d31b
+generated: "2026-01-17T17:32:18.299163465Z"

clusters/cl01tl/helm/matrix-synapse/Chart.yaml

@@ -45,11 +45,11 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     alias: cloudflared-synapse
-    version: 2.1.6
+    version: 2.1.9
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: cloudflared
     alias: cloudflared-hookshot
-    version: 2.1.6
+    version: 2.1.9
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: postgres-cluster
     alias: postgres-18-cluster

clusters/cl01tl/helm/matrix-synapse/values.yaml

@@ -345,7 +345,7 @@ mautrix-whatsapp:
         main:
           image:
             repository: dock.mau.dev/mautrix/whatsapp
-            tag: v0.2512.0
+            tag: v0.2601.0
             pullPolicy: IfNotPresent
           resources:
             requests:

clusters/cl01tl/helm/ollama/values.yaml

@@ -22,7 +22,7 @@ ollama:
         main:
           image:
             repository: ollama/ollama
-            tag: 0.14.1
+            tag: 0.14.2
             pullPolicy: IfNotPresent
           env:
             - name: OLLAMA_KEEP_ALIVE
@@ -58,7 +58,7 @@ ollama:
         main:
           image:
             repository: ollama/ollama
-            tag: 0.14.1
+            tag: 0.14.2
             pullPolicy: IfNotPresent
           env:
             - name: OLLAMA_KEEP_ALIVE
@@ -94,7 +94,7 @@ ollama:
         main:
           image:
             repository: ollama/ollama
-            tag: 0.14.1
+            tag: 0.14.2
             pullPolicy: IfNotPresent
           env:
             - name: OLLAMA_KEEP_ALIVE

clusters/cl01tl/helm/outline/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
+  version: 2.1.9
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.4.5
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.0.1
-digest: sha256:d2d99fb492e5e8580f5d1871171f8148f41f8afb43cfb6cb4a2cd75dd87a8d85
-generated: "2026-01-16T18:50:55.615098261Z"
+digest: sha256:3959ec0feb588553493636514562a4bd1dea651992da9cca1a598597909173b1
+generated: "2026-01-17T17:32:35.576166942Z"

clusters/cl01tl/helm/outline/Chart.yaml

@@ -24,7 +24,7 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.6
+    version: 2.1.9
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.4.5

clusters/cl01tl/helm/outline/values.yaml

@@ -9,7 +9,7 @@ outline:
         main:
           image:
             repository: outlinewiki/outline
-            tag: 1.2.0
+            tag: 1.3.0
             pullPolicy: IfNotPresent
           env:
             - name: NODE_ENV

clusters/cl01tl/helm/postiz/Chart.lock

@@ -4,7 +4,7 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
+  version: 2.1.9
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.4.5
@@ -17,5 +17,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:7464bbf3277649fb74a2c31b54c8428d97b1ef8049ad08bb85a15fb23eee5118
-generated: "2026-01-16T18:51:40.030862543Z"
+digest: sha256:045adb256c2f942ade106b9cd451a665adf2661a0bfcd5203d8302828cf07dee
+generated: "2026-01-17T17:32:50.110718413Z"

clusters/cl01tl/helm/postiz/Chart.yaml

@@ -23,7 +23,7 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.6
+    version: 2.1.9
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.4.5

clusters/cl01tl/helm/postiz/values.yaml

@@ -9,7 +9,7 @@ postiz:
         main:
           image:
             repository: ghcr.io/gitroomhq/postiz-app
-            tag: v2.12.0
+            tag: v2.12.1
             pullPolicy: IfNotPresent
           env:
             - name: MAIN_URL

clusters/cl01tl/helm/prowlarr/values.yaml

@@ -20,7 +20,7 @@ prowlarr:
         main:
           image:
             repository: ghcr.io/linuxserver/prowlarr
-            tag: 2.3.0@sha256:67a8aaedcfd6989f3030b937a6a07007310b1dfc7ee8df16d2cbfa48d1c1158c
+            tag: 2.3.0@sha256:d3e9307b320b6772749a2cf8fc2712e9e824c4930b034680ad4d08a9e2f25884
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/qbittorrent/templates/config-map.yaml

@@ -190,21 +190,21 @@ data:
       orphaned_dir: /qbittorrent/Orphaned
 
     cat:
+      -< COMPLETED: /mnt/store/Torrent/FINISHED/COMPLETED
+      -< IMPORT: /mnt/store/Torrent/FINISHED/IMPORT
+      -< SAVE: /mnt/store/Torrent/FINISHED/SAVE
+      -< ZIM: /mnt/store/Kiwix
       lidarr: /mnt/store/Torrent/FINISHED/LIDARR
       prowlarr: /mnt/store/Torrent/FINISHED/SAVE
-      radarr: /mnt/store/Torrent/FINISHED/RADARR
       radarr-4k: /mnt/store/Torrent/FINISHED/RADARR4K
       radarr-anime: /mnt/store/Torrent/FINISHED/RADARRANIME
       radarr-standup: /mnt/store/Torrent/FINISHED/RADARRSTANDUP
-      sonarr: /mnt/store/Torrent/FINISHED/SONARR
+      radarr: /mnt/store/Torrent/FINISHED/RADARR
+      shelfmark-audiobooks: /mnt/store/Torrent/FINISHED/SHELFMARKAUDIOBOOKS
+      shelfmark-books: /mnt/store/Torrent/FINISHED/SHELFMARKBOOKS
       sonarr-4k: /mnt/store/Torrent/FINISHED/SONARR4K
       sonarr-anime: /mnt/store/Torrent/FINISHED/SONARRANIME
-      shelfmark-books: /mnt/store/Torrent/FINISHED/SHELFMARKBOOKS
-      shelfmark-audiobooks: /mnt/store/Torrent/FINISHED/SHELFMARKAUDIOBOOKS
-      -< ZIM: /mnt/store/Kiwix
-      -< SAVE: /mnt/store/Torrent/FINISHED/SAVE
-      -< IMPORT: /mnt/store/Torrent/FINISHED/IMPORT
-      -< COMPLETED: /mnt/store/Torrent/FINISHED/COMPLETED
+      sonarr: /mnt/store/Torrent/FINISHED/SONARR
 
     tracker:
       alpharatio.cc:

clusters/cl01tl/helm/qbittorrent/values.yaml

@@ -28,7 +28,7 @@ qbittorrent:
         qbittorrent:
           image:
             repository: ghcr.io/linuxserver/qbittorrent
-            tag: 5.1.4@sha256:95114034a7f74672b76f795f6938921b0ca795f85b59b48691035dc66714f34c
+            tag: 5.1.4@sha256:f430d70c70d1547fded30fbc3181c4750cef354212a5138ab754eba9ba8bd9e1
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/rook-ceph/Chart.lock

@@ -7,6 +7,6 @@ dependencies:
   version: v1.18.9
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
-digest: sha256:fc0c562e0b47bd730251c2ed1ad48f1b0c57dfb730fd161fb905933817ba2c69
-generated: "2026-01-14T21:08:53.897492563Z"
+  version: 2.1.9
+digest: sha256:57aea8e9711bfea8484ad395d5a5ff2a0e4d2a7c962cf9a2c49095f6a721376d
+generated: "2026-01-17T17:33:03.998798829Z"

clusters/cl01tl/helm/rook-ceph/Chart.yaml

@@ -24,7 +24,7 @@ dependencies:
   - name: cloudflared
     alias: cloudflared-rgw
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.6
+    version: 2.1.9
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ceph.png
 # renovate: github=rook/rook
 appVersion: v1.18.8

clusters/cl01tl/helm/searxng/values.yaml

@@ -9,7 +9,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:bc805054d5801d18b9750852e075e599e543eddc2d7962918f0722244d40ea09
+            tag: latest@sha256:445319b907a0e01d0ff5bf8192be396b1c439a47e12675d626ce29af1b439d93
             pullPolicy: IfNotPresent
           env:
             - name: SEARXNG_BASE_URL
@@ -39,7 +39,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:bc805054d5801d18b9750852e075e599e543eddc2d7962918f0722244d40ea09
+            tag: latest@sha256:445319b907a0e01d0ff5bf8192be396b1c439a47e12675d626ce29af1b439d93
             pullPolicy: IfNotPresent
           env:
             - name: SEARXNG_BASE_URL

clusters/cl01tl/helm/seerr/values.yaml

@@ -1,7 +1,7 @@
 seerr-chart:
   image:
     tag: develop
-    sha: f96deeef25cfb7bb0ecaa90f324bf6dfb66a844e8ed38501764f4d982a152280
+    sha: 015bc6dc38244eca572ae34ea717c8f4826c582e124c937e0aa2b92fcb94e4f3
   probes:
     livenessProbe:
       initialDelaySeconds: 60

clusters/cl01tl/helm/shelfmark/Chart.yaml

@@ -17,5 +17,9 @@ dependencies:
     alias: shelfmark
     repository: https://bjw-s-labs.github.io/helm-charts/
     version: 4.6.2
+  - name: volsync-target
+    alias: volsync-target-config
+    version: 0.7.0
+    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/shelfmark.webp
 appVersion: v1.0.1

clusters/cl01tl/helm/shelfmark/templates/persistent-volume-claim.yaml

@@ -15,3 +15,41 @@ spec:
   resources:
     requests:
       storage: 1Gi
+
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: shelfmark-audiobooks-nfs-storage
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: shelfmark-audiobooks-nfs-storage
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  volumeName: shelfmark-audiobooks-nfs-storage
+  storageClassName: nfs-client
+  accessModes:
+    - ReadWriteMany
+  resources:
+    requests:
+      storage: 1Gi
+
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: shelfmark-downloads-nfs-storage
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: shelfmark-downloads-nfs-storage
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  volumeName: shelfmark-downloads-nfs-storage
+  storageClassName: nfs-client
+  accessModes:
+    - ReadWriteMany
+  resources:
+    requests:
+      storage: 1Gi

clusters/cl01tl/helm/shelfmark/templates/persistent-volume.yaml

@@ -21,3 +21,53 @@ spec:
     - vers=4
     - minorversion=1
     - noac
+
+---
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: shelfmark-audiobooks-nfs-storage
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: shelfmark-audiobooks-nfs-storage
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  persistentVolumeReclaimPolicy: Retain
+  storageClassName: nfs-client
+  capacity:
+    storage: 1Gi
+  accessModes:
+    - ReadWriteMany
+  nfs:
+    path: /volume2/Storage/Audiobooks
+    server: synologybond.alexlebens.net
+  mountOptions:
+    - vers=4
+    - minorversion=1
+    - noac
+
+---
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: shelfmark-downloads-nfs-storage
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: shelfmark-downloads-nfs-storage
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  persistentVolumeReclaimPolicy: Retain
+  storageClassName: nfs-client
+  capacity:
+    storage: 1Gi
+  accessModes:
+    - ReadWriteMany
+  nfs:
+    path: /volume2/Storage/Torrent
+    server: synologybond.alexlebens.net
+  mountOptions:
+    - vers=4
+    - minorversion=1
+    - noac

clusters/cl01tl/helm/shelfmark/values.yaml

@@ -14,10 +14,8 @@ shelfmark:
           env:
             - name: FLASK_PORT
               value: 8084
-            - name: INGEST_DIR
-              value: /ingest
             - name: SEARCH_MODE
-              value: direct
+              value: universal
           probes:
             liveness:
               enabled: true
@@ -68,6 +66,7 @@ shelfmark:
                 value: /
   persistence:
     config:
+      forceRename: shelfmark
       storageClass: ceph-block
       accessMode: ReadWriteOnce
       size: 1Gi
@@ -84,13 +83,27 @@ shelfmark:
           main:
             - path: /ingest
               readOnly: false
+    audiobooks:
+      existingClaim: shelfmark-audiobooks-nfs-storage
+      advancedMounts:
+        main:
+          main:
+            - path: /audiobooks
+              readOnly: false
+    downloads:
+      existingClaim: shelfmark-downloads-nfs-storage
+      advancedMounts:
+        main:
+          main:
+            - path: /mnt/store/Torrent
+              readOnly: false
 volsync-target-config:
-  pvcTarget: shelfmark-config
+  pvcTarget: shelfmark
   local:
     enabled: true
-    schedule: 0 8 * * *
+    schedule: 38 11 * * *
   remote:
     enabled: false
   external:
     enabled: true
-    schedule: 0 9 * * *
+    schedule: 38 12 * * *

clusters/cl01tl/helm/shelly-plug/values.yaml

@@ -36,7 +36,7 @@ shelly-plug:
         main:
           image:
             repository: php
-            tag: 8.5.1-apache-bookworm
+            tag: 8.5.2-apache-bookworm
             pullPolicy: IfNotPresent
           env:
             - name: SHELLY_HOSTNAME

clusters/cl01tl/helm/site-documentation/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
-digest: sha256:993713dffe77e7672731ad86c9ba882fa416fe501ae42eba75876c6abbec036c
-generated: "2026-01-16T18:53:55.811317116Z"
+  version: 2.1.9
+digest: sha256:07dc35c2faf680ef104ac0dd9075760d38f13ef84a62ed961134b5edd6d4b4dc
+generated: "2026-01-17T17:33:18.84982234Z"

clusters/cl01tl/helm/site-documentation/Chart.yaml

@@ -22,6 +22,6 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.6
+    version: 2.1.9
 icon: https://d21zlbwtcn424f.cloudfront.net/logo-new-round.png
 appVersion: 0.0.5

clusters/cl01tl/helm/site-profile/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
-digest: sha256:a964308b6deef2504397e857ca580c186d117a3659782a564f363828f2973c37
-generated: "2026-01-16T18:54:06.609655376Z"
+  version: 2.1.9
+digest: sha256:422da3236c2f071ee0e2e36b57a622e1b002c4e8cb67e4c1a01a9cc39aa2bbdf
+generated: "2026-01-17T17:33:32.603049202Z"

clusters/cl01tl/helm/site-profile/Chart.yaml

@@ -22,6 +22,6 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.6
+    version: 2.1.9
 icon: https://d21zlbwtcn424f.cloudfront.net/logo-new-round.png
 appVersion: 2.1.2

clusters/cl01tl/helm/snapshot-controller/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: snapshot-controller
   repository: https://piraeus.io/helm-charts/
-  version: 5.0.0
-digest: sha256:ee120d84037e7878c3ab62c57cd09b90090af340c1d55ea314618f19387cb0ca
-generated: "2026-01-15T23:19:03.949703166Z"
+  version: 5.0.1
+digest: sha256:0d0fd7652c69fc528b62ec644eb890822cf0b1ae5b1fc7f9ca4d86628f7f9656
+generated: "2026-01-16T19:00:12.703316399Z"

clusters/cl01tl/helm/snapshot-controller/Chart.yaml

@@ -15,7 +15,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: snapshot-controller
-    version: 5.0.0
+    version: 5.0.1
     repository: https://piraeus.io/helm-charts/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 # renovate: github=kubernetes-csi/external-snapshotter

clusters/cl01tl/helm/tautulli/Chart.lock

@@ -1,9 +0,0 @@
-dependencies:
-- name: app-template
-  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
-- name: volsync-target
-  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-digest: sha256:50badda5b51f1c82558bee67c3a647bdd356c9b7db06acfeef05501aaaabd911
-generated: "2026-01-16T18:55:22.993941938Z"

clusters/cl01tl/helm/tautulli/Chart.yaml

@@ -1,26 +0,0 @@
-apiVersion: v2
-name: tautulli
-version: 1.0.0
-description: Tautulli
-keywords:
-  - tautulli
-  - plex
-home: https://wiki.alexlebens.dev/s/b2f5d20a-b3c2-4e7a-b550-7b2855264408
-sources:
-  - https://github.com/Tautulli/Tautulli
-  - https://github.com/Tautulli/Tautulli/pkgs/container/tautulli
-  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: app-template
-    alias: tautulli
-    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
-  - name: volsync-target
-    alias: volsync-target-config
-    version: 0.7.0
-    repository: oci://harbor.alexlebens.net/helm-charts
-icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/tautulli.png
-# renovate: github=Tautulli/Tautulli
-appVersion: v2.16.0

clusters/cl01tl/helm/tautulli/values.yaml

@@ -1,179 +0,0 @@
-tautulli:
-  controllers:
-    main:
-      type: deployment
-      annotations:
-        reloader.stakater.com/auto: "true"
-      replicas: 1
-      strategy: Recreate
-      revisionHistoryLimit: 3
-      containers:
-        main:
-          image:
-            repository: ghcr.io/tautulli/tautulli
-            tag: v2.16.0
-            pullPolicy: IfNotPresent
-          env:
-            - name: PUID
-              value: 1001
-            - name: GUID
-              value: 1001
-            - name: TZ
-              value: US/Central
-          resources:
-            requests:
-              cpu: 10m
-              memory: 128Mi
-  configMaps:
-    scripts:
-      enabled: true
-      data:
-        select_tmdb_poster.py: |
-          #!/usr/bin/env python
-          # -*- coding: utf-8 -*-
-
-          '''
-          Description:  Selects the default TMDB poster if no poster is selected
-                        or the current poster is from Gracenote.
-          Author:       /u/SwiftPanda16
-          Requires:     plexapi
-          Usage:
-              * Change the posters for an entire library:
-                  python select_tmdb_poster.py --library "Movies"
-
-              * Change the poster for a specific item:
-                  python select_tmdb_poster.py --rating_key 1234
-
-              * By default locked posters are skipped. To update locked posters:
-                  python select_tmdb_poster.py --library "Movies" --include_locked
-
-          Tautulli script trigger:
-              * Notify on recently added
-          Tautulli script conditions:
-              * Filter which media to select the poster. Examples:
-                  [ Media Type | is | movie ]
-          Tautulli script arguments:
-              * Recently Added:
-                  --rating_key {rating_key}
-          '''
-
-          import argparse
-          import os
-          import plexapi.base
-          from plexapi.server import PlexServer
-          plexapi.base.USER_DONT_RELOAD_FOR_KEYS.add('fields')
-
-
-          # Environmental Variables
-          PLEX_URL = os.getenv('PLEX_URL')
-          PLEX_TOKEN = os.getenv('PLEX_TOKEN')
-
-
-          def select_tmdb_poster_library(library, include_locked=False):
-              for item in library.all(includeGuids=False):
-                  # Only reload for fields
-                  item.reload(**{k: 0 for k, v in item._INCLUDES.items()})
-                  select_tmdb_poster_item(item, include_locked=include_locked)
-
-
-          def select_tmdb_poster_item(item, include_locked=False):
-              if item.isLocked('thumb') and not include_locked:  # PlexAPI 4.5.10
-                  print(f"Locked poster for {item.title}. Skipping.")
-                  return
-
-              posters = item.posters()
-              selected_poster = next((p for p in posters if p.selected), None)
-
-              if selected_poster is None:
-                  print(f"WARNING: No poster selected for {item.title}.")
-              else:
-                  skipping = ' Skipping.' if selected_poster.provider != 'gracenote' else ''
-                  print(f"Poster provider is '{selected_poster.provider}' for {item.title}.{skipping}")
-
-              if posters and (selected_poster is None or selected_poster.provider == 'gracenote'):
-                  # Fallback to first poster if no TMDB posters are available
-                  tmdb_poster = next((p for p in posters if p.provider == 'tmdb'), posters[0])
-                  # Selecting the poster automatically locks it
-                  tmdb_poster.select()
-                  print(f"Selected {tmdb_poster.provider} poster for {item.title}.")
-
-
-          if __name__ == '__main__':
-              parser = argparse.ArgumentParser()
-              parser.add_argument('--rating_key', type=int)
-              parser.add_argument('--library')
-              parser.add_argument('--include_locked', action='store_true')
-              opts = parser.parse_args()
-
-              plex = PlexServer(PLEX_URL, PLEX_TOKEN)
-
-              if opts.rating_key:
-                  item = plex.fetchItem(opts.rating_key)
-                  select_tmdb_poster_item(item, opts.include_locked)
-              elif opts.library:
-                  library = plex.library.section(opts.library)
-                  select_tmdb_poster_library(library, opts.include_locked)
-              else:
-                  print("No --rating_key or --library specified. Exiting.")
-  service:
-    main:
-      controller: main
-      ports:
-        http:
-          port: 80
-          targetPort: 8181
-          protocol: HTTP
-  route:
-    main:
-      kind: HTTPRoute
-      parentRefs:
-        - group: gateway.networking.k8s.io
-          kind: Gateway
-          name: traefik-gateway
-          namespace: traefik
-      hostnames:
-        - tautulli.alexlebens.net
-      rules:
-        - backendRefs:
-            - group: ''
-              kind: Service
-              name: tautulli
-              port: 80
-              weight: 100
-          matches:
-            - path:
-                type: PathPrefix
-                value: /
-  persistence:
-    scripts:
-      enabled: true
-      type: configMap
-      name: tautulli-scripts
-      advancedMounts:
-        main:
-          main:
-            - path: /config/scripts/select_tmdb_poster.py
-              readOnly: true
-              mountPropagation: None
-              subPath: select_tmdb_poster.py
-    config:
-      forceRename: tautulli-config
-      storageClass: ceph-block
-      accessMode: ReadWriteOnce
-      size: 5Gi
-      retain: true
-      advancedMounts:
-        main:
-          main:
-            - path: /config
-              readOnly: false
-volsync-target-config:
-  pvcTarget: tautulli-config
-  local:
-    enabled: true
-    schedule: 34 11 * * *
-  remote:
-    enabled: false
-  external:
-    enabled: true
-    schedule: 34 12 * * *

clusters/cl01tl/helm/vaultwarden/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
+  version: 2.1.9
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.4.5
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:d38a685a6bcecb0267e5fa2de2b7c10929201398c7b1b9a06774e35ee5e9c956
-generated: "2026-01-16T18:56:33.748685848Z"
+digest: sha256:800ed0149e316d8ea264a11e90ba3eb808d3623bc9825ad96dea85353bd0a62f
+generated: "2026-01-17T17:33:46.236030792Z"

clusters/cl01tl/helm/vaultwarden/Chart.yaml

@@ -24,7 +24,7 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.6
+    version: 2.1.9
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.4.5

clusters/cl01tl/helm/yubal-playlist/templates/external-secret.yaml

@@ -34,6 +34,29 @@ spec:
         metadataPolicy: None
         property: password
 
+---
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: yubal-playlist-cookie
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: yubal-playlist-cookie
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  data:
+    - secretKey: cookies.txt
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /youtube/cookie
+        metadataPolicy: None
+        property: cookies
+
 ---
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret

clusters/cl01tl/helm/yubal-playlist/values.yaml

@@ -5,11 +5,28 @@ yubal-playlist:
       replicas: 1
       strategy: Recreate
       revisionHistoryLimit: 3
+      initContainers:
+        init-copy-cookie:
+          image:
+            repository: busybox
+            tag: 1.37.0
+            pullPolicy: IfNotPresent
+          command:
+            - /bin/sh
+            - -ec
+            - |
+              if [ ! -f "/app/ytdlp/cookies.txt" ]; then
+                echo ">> Coping files ..."
+                ls /app/ytdlp
+                cp -fv /app/ytdlp/cookies-ro.txt /app/ytdlp/cookies.txt
+                echo ">> Files in ytdlp:"
+                ls /app/ytdlp
+              fi
       containers:
         main:
           image:
             repository: harbor.alexlebens.net/images/yubal-playlist
-            tag: 0.1.2
+            tag: 0.1.10
             pullPolicy: IfNotPresent
           env:
             - name: YUBAL_TZ
@@ -139,10 +156,27 @@ yubal-playlist:
                 type: PathPrefix
                 value: /
   persistence:
-    cache:
-      type: emptyDir
+    cookie:
+      enabled: true
+      type: secret
+      name: yubal-playlist-cookie
       advancedMounts:
         main:
+          init-copy-cookie:
+            - path: /app/ytdlp/cookies-ro.txt
+              readOnly: true
+              mountPropagation: None
+              subPath: cookies.txt
+    config:
+      storageClass: ceph-block
+      accessMode: ReadWriteOnce
+      size: 1Gi
+      retain: true
+      advancedMounts:
+        main:
+          init-copy-cookie:
+            - path: /app/ytdlp
+              readOnly: false
           main:
             - path: /app/ytdlp
               readOnly: false

hosts/ps08rp/blocky/config.yml

@@ -88,8 +88,8 @@ customDNS:
     ceph                            IN      CNAME   traefik-cl01tl
     code-server                     IN      CNAME   traefik-cl01tl
     ephemera                        IN      CNAME   traefik-cl01tl
+    excalidraw                      IN      CNAME   traefik-cl01tl
     feishin                         IN      CNAME   traefik-cl01tl
-    fladder                         IN      CNAME   traefik-cl01tl
     garage-s3                       IN      CNAME   traefik-cl01tl
     garage-webui                    IN      CNAME   traefik-cl01tl
     gatus                           IN      CNAME   traefik-cl01tl
@@ -109,7 +109,6 @@ customDNS:
     komodo                          IN      CNAME   traefik-cl01tl
     lidarr                          IN      CNAME   traefik-cl01tl
     lidatube                        IN      CNAME   traefik-cl01tl
-    listenarr                       IN      CNAME   traefik-cl01tl
     mail                            IN      CNAME   traefik-cl01tl
     navidrome                       IN      CNAME   traefik-cl01tl
     ntfy                            IN      CNAME   traefik-cl01tl
@@ -136,7 +135,6 @@ customDNS:
     sonarr-4k                       IN      CNAME   traefik-cl01tl
     sonarr-anime                    IN      CNAME   traefik-cl01tl
     stalwart                        IN      CNAME   traefik-cl01tl
-    tautulli                        IN      CNAME   traefik-cl01tl
     tdarr                           IN      CNAME   traefik-cl01tl
     tubearchivist                   IN      CNAME   traefik-cl01tl
     vault                           IN      CNAME   traefik-cl01tl

hosts/ps09rp/blocky/config.yml

@@ -109,8 +109,8 @@ customDNS:
     ceph                            IN      CNAME   traefik-cl01tl
     code-server                     IN      CNAME   traefik-cl01tl
     ephemera                        IN      CNAME   traefik-cl01tl
+    excalidraw                      IN      CNAME   traefik-cl01tl
     feishin                         IN      CNAME   traefik-cl01tl
-    fladder                         IN      CNAME   traefik-cl01tl
     garage-s3                       IN      CNAME   traefik-cl01tl
     garage-webui                    IN      CNAME   traefik-cl01tl
     gatus                           IN      CNAME   traefik-cl01tl
@@ -130,7 +130,6 @@ customDNS:
     komodo                          IN      CNAME   traefik-cl01tl
     lidarr                          IN      CNAME   traefik-cl01tl
     lidatube                        IN      CNAME   traefik-cl01tl
-    listenarr                       IN      CNAME   traefik-cl01tl
     mail                            IN      CNAME   traefik-cl01tl
     navidrome                       IN      CNAME   traefik-cl01tl
     ntfy                            IN      CNAME   traefik-cl01tl
@@ -157,7 +156,6 @@ customDNS:
     sonarr-4k                       IN      CNAME   traefik-cl01tl
     sonarr-anime                    IN      CNAME   traefik-cl01tl
     stalwart                        IN      CNAME   traefik-cl01tl
-    tautulli                        IN      CNAME   traefik-cl01tl
     tdarr                           IN      CNAME   traefik-cl01tl
     tubearchivist                   IN      CNAME   traefik-cl01tl
     vault                           IN      CNAME   traefik-cl01tl