Update ghcr.io/linuxserver/qbittorrent Docker tag to v5.1.2

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [eck-operator](https://github.com/elastic/cloud-on-k8s) | minor | `3.0.0` -> `3.1.0` |

---

### Release Notes

<details>
<summary>elastic/cloud-on-k8s (eck-operator)</summary>

### [`v3.1.0`](https://github.com/elastic/cloud-on-k8s/releases/tag/v3.1.0)

[Compare Source](https://github.com/elastic/cloud-on-k8s/compare/v3.0.0...v3.1.0)

### Elastic Cloud on Kubernetes 3.1.0

- [Quickstart guide](https://www.elastic.co/docs/deploy-manage/deploy/cloud-on-k8s#eck-quickstart)

##### Release Highlights

- It is now possible to propagate metadata from the parent custom resource to the child resources created by the operator. If you add labels or annotations on an Elasticsearch, Kibana, or Agent resource, for example, these can be automatically propagated to the Pods, Services, and other resources created by the operator. Refer to the [Propagate Labels and Annotations](https://www.elastic.co/docs/deploy-manage/deploy/cloud-on-k8s/propagate-labels-annotations.md) page for examples and more details.
- To reduce the attack surface and improve overall security UBI images are now based on the UBI micro base image.

##### Features and enhancements

- UBI: Use micro image instead of minimal [#&#8203;8704](https://github.com/elastic/cloud-on-k8s/pull/8704)
- Propagate metadata to children [#&#8203;8673](https://github.com/elastic/cloud-on-k8s/pull/8673) (issue: [#&#8203;2652](https://github.com/elastic/cloud-on-k8s/issues/2652))
- Allow advanced configuration for fleet-managed Elastic Agents [#&#8203;8623](https://github.com/elastic/cloud-on-k8s/pull/8623) (issue: [#&#8203;8619](https://github.com/elastic/cloud-on-k8s/issues/8619))

##### Fixes

- Set owner on service account Secret, update it when application is recreated [#&#8203;8716](https://github.com/elastic/cloud-on-k8s/pull/8716)
- fix: Cannot disable TLS in Logstash [#&#8203;8706](https://github.com/elastic/cloud-on-k8s/pull/8706) (issue: [#&#8203;8600](https://github.com/elastic/cloud-on-k8s/issues/8600))
- Move from deprecated container input to filestream [#&#8203;8679](https://github.com/elastic/cloud-on-k8s/pull/8679) (issue: [#&#8203;8667](https://github.com/elastic/cloud-on-k8s/issues/8667))
- Add automated workaround for 9.0.0 maps issue [#&#8203;8665](https://github.com/elastic/cloud-on-k8s/pull/8665) (issue: [#&#8203;8655](https://github.com/elastic/cloud-on-k8s/issues/8655))
- Bump go.mod to v3 [#&#8203;8609](https://github.com/elastic/cloud-on-k8s/pull/8609)
- Helm: Add support for missing `remoteClusterServer` value [#&#8203;8612](https://github.com/elastic/cloud-on-k8s/pull/8612)

##### Documentation improvements

- \[Helm] Fix examples/logstash/basic-eck.yaml [#&#8203;8695](https://github.com/elastic/cloud-on-k8s/pull/8695)

##### Miscellaneous

- Update Go version to 1.24.5 [#&#8203;8745](https://github.com/elastic/cloud-on-k8s/pull/8745)
- chore(deps): update registry.access.redhat.com/ubi9/ubi-micro docker tag to v9.6-1750858477 [#&#8203;8711](https://github.com/elastic/cloud-on-k8s/pull/8711)
- fix(deps): update k8s to v0.33.2 [#&#8203;8699](https://github.com/elastic/cloud-on-k8s/pull/8699)
- fix(deps): update module cloud.google.com/go/storage to v1.52.0 [#&#8203;8629](https://github.com/elastic/cloud-on-k8s/pull/8629)
- fix(deps): update module github.com/go-git/go-git/v5 to v5.16.0 [#&#8203;8631](https://github.com/elastic/cloud-on-k8s/pull/8631)
- fix(deps): update module github.com/google/go-containerregistry to v0.20.6 [#&#8203;8672](https://github.com/elastic/cloud-on-k8s/pull/8672)
- fix(deps): update module github.com/magiconair/properties to v1.8.10 [#&#8203;8625](https://github.com/elastic/cloud-on-k8s/pull/8625)
- fix(deps): update module github.com/prometheus/common to v0.63.0 [#&#8203;8569](https://github.com/elastic/cloud-on-k8s/pull/8569)
- fix(deps): update module github.com/spf13/viper to v1.20.1 [#&#8203;8570](https://github.com/elastic/cloud-on-k8s/pull/8570)
- fix(deps): update module google.golang.org/api to v0.227.0 [#&#8203;8529](https://github.com/elastic/cloud-on-k8s/pull/8529)
- fix(deps): update module helm.sh/helm/v3 to 3.17.3 [#&#8203;8598](https://github.com/elastic/cloud-on-k8s/pull/8598)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xLjMiLCJ1cGRhdGVkSW5WZXIiOiI0MS4xLjMiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImNoYXJ0Il19-->

Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/1057
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>

.gitea/workflows/process-pull-requests.yaml

@@ -1,35 +0,0 @@
-name: process-pull-requests
-
-on:
-  schedule:
-    - cron: '@daily'
-
-jobs:
-  process-pull-requests:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout Python Script
-        uses: actions/checkout@v4
-        with:
-          repository: alexlebens/workflow-scripts
-          ref: main
-          token: ${{ secrets.BOT_TOKEN }}
-          path: scripts
-
-      - name: Set up Python
-        uses: actions/setup-python@v5
-        with:
-          python-version: '3.13'
-
-      - name: Install dependencies
-        run: pip install requests
-
-      - name: Run Script
-        env:
-          INSTANCE_URL: ${{ vars.INSTANCE_URL }}
-          REPOSITORY: ${{ gitea.repository }}
-          TOKEN: ${{ secrets.BOT_TOKEN }}
-          STALE_DAYS: 3
-          STALE_TAG: 16
-          REQUIRED_TAG: 15
-        run: python ./scripts/scripts/process-pull-requests.py

.gitea/workflows/process-repository.yaml

@@ -1,11 +1,11 @@
-name: process-issues
+name: process-repository
 
 on:
   schedule:
-    - cron: '@daily'
+    - cron: "@daily"
 
 jobs:
-  process-issues:
+  process-repository:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Python Script
@@ -14,22 +14,27 @@ jobs:
           repository: alexlebens/workflow-scripts
           ref: main
           token: ${{ secrets.BOT_TOKEN }}
-          path: scripts
+          path: workflow-scripts
 
       - name: Set up Python
         uses: actions/setup-python@v5
         with:
-          python-version: '3.13'
+          python-version: "3.13"
 
       - name: Install dependencies
-        run: pip install requests
+        run: pip install requests immutabledict
 
       - name: Run Script
         env:
           INSTANCE_URL: ${{ vars.INSTANCE_URL }}
+          OWNER: ${{ gitea.owner }}
           REPOSITORY: ${{ gitea.repository }}
           TOKEN: ${{ secrets.BOT_TOKEN }}
-          STALE_DAYS: 3
+          LOG_LEVEL: DEBUG
-          STALE_TAG: 16
+          ISSUE_STALE_DAYS: 3
-          EXCLUDE_TAG: 20
+          ISSUE_STALE_TAG: 16
-        run: python ./scripts/scripts/process-issues.py
+          ISSUE_EXCLUDE_TAG: 20
+          PULL_REQUEST_STALE_DAYS: 3
+          PULL_REQUEST_STALE_TAG: 16
+          PULL_REQUEST_REQUIRED_TAG: 15
+        run: python ./workflow-scripts/process-repository.py

clusters/cl01tl/applications/actual/Chart.yaml

@@ -16,6 +16,6 @@ dependencies:
   - name: app-template
     alias: actual
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.1.2
+    version: 4.2.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/actual-budget.png
 appVersion: v25.5.0

clusters/cl01tl/applications/audiobookshelf/Chart.yaml

@@ -18,6 +18,6 @@ dependencies:
   - name: app-template
     alias: audiobookshelf
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.1.2
+    version: 4.2.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/audiobookshelf.png
 appVersion: 2.21.0

clusters/cl01tl/applications/audiobookshelf/values.yaml

@@ -9,7 +9,7 @@ audiobookshelf:
         main:
           image:
             repository: ghcr.io/advplyr/audiobookshelf
-            tag: 2.26.0
+            tag: 2.26.3
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/applications/bazarr/Chart.yaml

@@ -18,6 +18,6 @@ dependencies:
   - name: app-template
     alias: bazarr
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.1.2
+    version: 4.2.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/bazarr.png
 appVersion: 1.5.2

clusters/cl01tl/applications/bazarr/values.yaml

@@ -15,7 +15,7 @@ bazarr:
         main:
           image:
             repository: ghcr.io/linuxserver/bazarr
-            tag: 1.5.2@sha256:a848b8a1d9e3b2553157ceb72cd3fc6ae2b34e71bcece24561b0944fb7922b46
+            tag: 1.5.2@sha256:911483a9ec04de93e60e649a101eabab5d7c143bcb14fcddb32161d34016e11b
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/applications/calibre-web-automated/Chart.yaml

@@ -16,6 +16,6 @@ dependencies:
   - name: app-template
     alias: calibre-web-automated
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.1.2
+    version: 4.2.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/calibre-web.png
 appVersion: V3.0.4

clusters/cl01tl/applications/calibre-web-automated/values.yaml

@@ -31,7 +31,7 @@ calibre-web-automated:
         main:
           image:
             repository: ghcr.io/calibrain/calibre-web-automated-book-downloader
-            tag: latest@sha256:914a9e80b1c5b81b0e17a7d82ad1d1e22b0050164a739131203831123c60baf7
+            tag: latest@sha256:7d01e56bfb0f0f150f89da59e4ec5627c4dc53d48d5ff5283e7e10877c737f8c
             pullPolicy: IfNotPresent
           env:
             - name: FLASK_PORT

clusters/cl01tl/applications/code-server/Chart.yaml

@@ -19,7 +19,7 @@ dependencies:
   - name: app-template
     alias: code-server
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.1.2
+    version: 4.2.0
   - name: cloudflared
     alias: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts

clusters/cl01tl/applications/code-server/values.yaml

@@ -9,7 +9,7 @@ code-server:
         main:
           image:
             repository: ghcr.io/linuxserver/code-server
-            tag: 4.101.2@sha256:e95165de246ed30656081fc9a517b6ceccc00a2232b8455a996faab42c252f5e
+            tag: 4.102.2@sha256:e93e459877c47affef393e81dd6bcd591af96363c0e96748aed4980b6d12de24
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/applications/directus/Chart.yaml

@@ -8,12 +8,10 @@ keywords:
 home: https://wiki.alexlebens.dev/s/c2d242de-dcaa-4801-86a2-c4761dc8bf9b
 sources:
   - https://github.com/directus/directus
-  - https://github.com/valkey-io/valkey
   - https://github.com/cloudflare/cloudflared
   - https://github.com/cloudnative-pg/cloudnative-pg
   - https://hub.docker.com/r/directus/directus
   - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-  - https://github.com/bitnami/charts/tree/main/bitnami/valkey
   - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/cloudflared
   - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/postgres-cluster
 maintainers:
@@ -22,10 +20,7 @@ dependencies:
   - name: app-template
     alias: directus
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.1.2
+    version: 4.2.0
-  - name: valkey
-    version: 3.0.20
-    repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
   - name: cloudflared
     alias: cloudflared-directus
     repository: oci://harbor.alexlebens.net/helm-charts

clusters/cl01tl/applications/directus/templates/external-secret.yaml

@@ -68,10 +68,10 @@ spec:
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
-  name: directus-valkey-config
+  name: directus-redis-config
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: directus-valkey-config
+    app.kubernetes.io/name: directus-redis-config
     app.kubernetes.io/instance: {{ .Release.Name }}
     app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
@@ -83,14 +83,14 @@ spec:
       remoteRef:
         conversionStrategy: Default
         decodingStrategy: None
-        key: /cl01tl/directus/valkey
+        key: /cl01tl/directus/redis
         metadataPolicy: None
         property: user
     - secretKey: password
       remoteRef:
         conversionStrategy: Default
         decodingStrategy: None
-        key: /cl01tl/directus/valkey
+        key: /cl01tl/directus/redis
         metadataPolicy: None
         property: password
 

clusters/cl01tl/applications/directus/templates/redis-replication.yaml

@@ -0,0 +1,35 @@
+apiVersion: redis.redis.opstreelabs.in/v1beta2
+kind: RedisReplication
+metadata:
+  name: redis-replication-directus
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: redis-replication-directus
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  clusterSize: 3
+  podSecurityContext:
+    runAsUser: 1000
+    fsGroup: 1000
+  kubernetesConfig:
+    image: quay.io/opstree/redis:v8.0.3
+    imagePullPolicy: IfNotPresent
+    redisSecret:
+      name: directus-redis-config
+      key: password
+    resources:
+      requests:
+        cpu: 50m
+        memory: 128Mi
+  storage:
+    volumeClaimTemplate:
+      spec:
+        storageClassName: ceph-block
+        accessModes: ["ReadWriteOnce"]
+        resources:
+          requests:
+            storage: 1Gi
+  redisExporter:
+    enabled: true
+    image: quay.io/opstree/redis-exporter:v1.48.0

clusters/cl01tl/applications/directus/templates/service-monitor.yaml

@@ -20,3 +20,24 @@ spec:
       bearerTokenSecret:
         name: directus-metric-token
         key: metric-token
+
+---
+apiVersion: monitoring.coreos.com/v1
+kind: ServiceMonitor
+metadata:
+  name: redis-replication-directus
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: redis-replication-directus
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+    redis-operator: "true"
+    env: production
+spec:
+  selector:
+    matchLabels:
+      redis_setup_type: replication
+  endpoints:
+    - port: redis-exporter
+      interval: 30s
+      scrapeTimeout: 10s

clusters/cl01tl/applications/directus/values.yaml

@@ -66,18 +66,18 @@ directus:
             - name: REDIS_ENABLED
               value: true
             - name: REDIS_HOST
-              value: directus-valkey-primary
+              value: redis-replication-directus-master
             - name: REDIS_PORT
               value: 6379
             - name: REDIS_USERNAME
               valueFrom:
                 secretKeyRef:
-                  name: directus-valkey-config
+                  name: directus-redis-config
                   key: user
             - name: REDIS_PASSWORD
               valueFrom:
                 secretKeyRef:
-                  name: directus-valkey-config
+                  name: directus-redis-config
                   key: password
             - name: STORAGE_LOCATIONS
               value: s3
@@ -149,30 +149,6 @@ directus:
           port: 80
           targetPort: 8055
           protocol: TCP
-valkey:
-  architecture: replication
-  auth:
-    enabled: true
-    existingSecret: directus-valkey-config
-    existingSecretPasswordKey: password
-    usePasswordFiles: false
-  primary:
-    resources:
-      requests:
-        cpu: 100m
-        memory: 64Mi
-    persistence:
-      enabled: true
-      size: 1Gi
-  replica:
-    replicaCount: 1
-    resources:
-      requests:
-        cpu: 100m
-        memory: 64Mi
-    persistence:
-      enabled: true
-      size: 1Gi
 cloudflared-directus:
   name: cloudflared-directus
   existingSecretName: directus-cloudflared-secret

clusters/cl01tl/applications/eigenfocus/Chart.yaml

@@ -16,6 +16,6 @@ dependencies:
   - name: app-template
     alias: eigenfocus
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.1.2
+    version: 4.2.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/eigenfocus.png
 appVersion: 1.1.0

clusters/cl01tl/applications/element-web/Chart.yaml

@@ -17,7 +17,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: element-web
-    version: 1.4.15
+    version: 1.4.16
     repository: https://ananace.gitlab.io/charts
   - name: cloudflared
     alias: cloudflared

clusters/cl01tl/applications/element-web/values.yaml

@@ -2,7 +2,7 @@ element-web:
   replicaCount: 1
   image:
     repository: vectorim/element-web
-    tag: v1.11.105
+    tag: v1.11.107
     pullPolicy: IfNotPresent
   defaultServer:
     url: https://matrix.alexlebens.dev
@@ -12,8 +12,8 @@ element-web:
     disable_3pid_login: true
     brand: "Alex Lebens"
     branding:
-      welcome_background_url: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/background-4.jpg
+      welcome_background_url: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/background-5.png
-      auth_header_logo_url: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/icon_white.png
+      auth_header_logo_url: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/logo-new-round.png
     sso_redirect_options:
       immediate: true
     default_theme: dark

clusters/cl01tl/applications/freshrss/Chart.yaml

@@ -20,7 +20,7 @@ dependencies:
   - name: app-template
     alias: freshrss
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.1.2
+    version: 4.2.0
   - name: cloudflared
     alias: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts

clusters/cl01tl/applications/freshrss/values.yaml

@@ -11,7 +11,7 @@ freshrss:
             runAsUser: 0
           image:
             repository: alpine
-            tag: 3.22.0
+            tag: 3.22.1
             pullPolicy: IfNotPresent
           command:
             - /bin/sh
@@ -35,7 +35,7 @@ freshrss:
             runAsUser: 0
           image:
             repository: alpine
-            tag: 3.22.0
+            tag: 3.22.1
             pullPolicy: IfNotPresent
           command:
             - /bin/sh
@@ -49,7 +49,29 @@ freshrss:
               git checkout;
               rm -rf /var/www/FreshRSS/extensions/xExtension-ImageProxy
               cp -r xExtension-ImageProxy /var/www/FreshRSS/extensions
-              chown -R 568:568 /var/www/FreshRSS/extensions/xExtension-YouTubeChannel2RssFeed
+              chown -R 568:568 /var/www/FreshRSS/extensions/xExtension-ImageProxy
+          resources:
+            requests:
+              cpu: 10m
+              memory: 128Mi
+        init-download-extension-3:
+          securityContext:
+            runAsUser: 0
+          image:
+            repository: alpine
+            tag: 3.22.1
+            pullPolicy: IfNotPresent
+          command:
+            - /bin/sh
+            - -ec
+            - |
+              cd /tmp;
+              wget https://github.com/zimmra/xExtension-karakeep-button/archive/refs/tags/v1.1.tar.gz;
+              tar -xvzf *.tar.gz;
+              rm -rf /var/www/FreshRSS/extensions/xExtension-karakeep-button
+              mkdir /var/www/FreshRSS/extensions/xExtension-karakeep-button
+              cp -r /tmp/xExtension-karakeep-button-*/* /var/www/FreshRSS/extensions/xExtension-karakeep-button
+              chown -R 568:568 /var/www/FreshRSS/extensions/xExtension-karakeep-button
           resources:
             requests:
               cpu: 10m
@@ -163,6 +185,9 @@ freshrss:
           init-download-extension-2:
             - path: /var/www/FreshRSS/extensions
               readOnly: false
+          init-download-extension-3:
+            - path: /var/www/FreshRSS/extensions
+              readOnly: false
           main:
             - path: /var/www/FreshRSS/extensions
               readOnly: false

clusters/cl01tl/applications/home-assistant/Chart.yaml

@@ -18,6 +18,6 @@ dependencies:
   - name: app-template
     alias: home-assistant
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.1.2
+    version: 4.2.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/home-assistant.png
 appVersion: 2025.5.2

clusters/cl01tl/applications/home-assistant/values.yaml

@@ -9,7 +9,7 @@ home-assistant:
         main:
           image:
             repository: ghcr.io/home-assistant/home-assistant
-            tag: 2025.7.1
+            tag: 2025.7.4
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -21,7 +21,7 @@ home-assistant:
         code-server:
           image:
             repository: ghcr.io/linuxserver/code-server
-            tag: 4.101.2@sha256:e95165de246ed30656081fc9a517b6ceccc00a2232b8455a996faab42c252f5e
+            tag: 4.102.2@sha256:e93e459877c47affef393e81dd6bcd591af96363c0e96748aed4980b6d12de24
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/applications/homepage-dev/Chart.yaml

@@ -18,7 +18,7 @@ dependencies:
   - name: app-template
     alias: homepage
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.1.2
+    version: 4.2.0
   - name: cloudflared
     alias: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts

clusters/cl01tl/applications/homepage-dev/values.yaml

@@ -11,7 +11,7 @@ homepage:
         main:
           image:
             repository: ghcr.io/gethomepage/homepage
-            tag: v1.3.2
+            tag: v1.4.0
             pullPolicy: IfNotPresent
           env:
             - name: HOMEPAGE_ALLOWED_HOSTS
@@ -27,18 +27,18 @@ homepage:
         docker.yaml: ""
         kubernetes.yaml: ""
         settings.yaml: |
-          favicon: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/icon_white.png
+          favicon: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/logo-new-round.svg
           headerStyle: clean
           hideVersion: true
           color: zinc
           background:
-            image: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/background-4.jpg
+            image: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/background-5.png
             brightness: 50
           theme: dark
           disableCollapse: true
         widgets.yaml: |
           - logo:
-              icon: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/icon_white.png
+              icon: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/logo-new-round.png
           - datetime:
               text_size: xl
               format:
@@ -75,7 +75,7 @@ homepage:
                   siteMonitor: https://codeserver.alexlebens.dev
                   statusStyle: dot
               - Site:
-                  icon: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/icon_white.png
+                  icon: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/logo-new-round.png
                   description: Profile Website
                   href: https://www.alexlebens.dev
                   siteMonitor: https://www.alexlebens.dev

clusters/cl01tl/applications/homepage/Chart.yaml

@@ -16,6 +16,6 @@ dependencies:
   - name: app-template
     alias: homepage
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.1.2
+    version: 4.2.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/homepage.png
 appVersion: v1.2.0

clusters/cl01tl/applications/homepage/values.yaml

@@ -15,7 +15,7 @@ homepage:
         main:
           image:
             repository: ghcr.io/gethomepage/homepage
-            tag: v1.3.2
+            tag: v1.4.0
             pullPolicy: IfNotPresent
           env:
             - name: HOMEPAGE_ALLOWED_HOSTS
@@ -39,12 +39,12 @@ homepage:
         kubernetes.yaml: |
           mode: cluster
         settings.yaml: |
-          favicon: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/icon_white.png
+          favicon: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/logo-new-round.svg
           headerStyle: clean
           hideVersion: true
           color: zinc
           background:
-            image: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/background-4.jpg
+            image: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/background-5.png
             brightness: 50
           theme: dark
           disableCollapse: true
@@ -99,7 +99,7 @@ homepage:
                 icon: mdi-cloud-#ffffff
         widgets.yaml: |
           - logo:
-              icon: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/icon_white.png
+              icon: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/logo-new-round.png
           - kubernetes:
               cluster:
                 show: true
@@ -182,7 +182,7 @@ homepage:
                   statusStyle: dot
           - Public:
               - Site:
-                  icon: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/icon_white.png
+                  icon: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/logo-new-round.png
                   description: Profile Website
                   href: https://www.alexlebens.dev
                   siteMonitor: https://www.alexlebens.dev

clusters/cl01tl/applications/huntarr/Chart.yaml

@@ -16,6 +16,6 @@ dependencies:
   - name: app-template
     alias: huntarr
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.1.2
+    version: 4.2.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/huntarr.png
 appVersion: 7.0.0

clusters/cl01tl/applications/huntarr/values.yaml

@@ -9,7 +9,7 @@ huntarr:
         main:
           image:
             repository: ghcr.io/plexguide/huntarr
-            tag: 8.1.11
+            tag: 8.1.15
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/applications/immich/Chart.yaml

@@ -8,10 +8,8 @@ keywords:
 home: https://wiki.alexlebens.dev/s/9377ae08-2041-4b6d-bc2b-61a4f5e8faae
 sources:
   - https://github.com/immich-app/immich
-  - https://github.com/valkey-io/valkey
   - https://github.com/cloudnative-pg/cloudnative-pg
   - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-  - https://github.com/bitnami/charts/tree/main/bitnami/valkey
   - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/postgres-cluster
 maintainers:
   - name: alexlebens
@@ -19,10 +17,7 @@ dependencies:
   - name: app-template
     alias: immich
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.1.2
+    version: 4.2.0
-  - name: valkey
-    version: 3.0.20
-    repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
   - name: postgres-cluster
     alias: postgres-16-cluster
     version: 5.1.0

clusters/cl01tl/applications/immich/templates/redis-replication.yaml

@@ -0,0 +1,32 @@
+apiVersion: redis.redis.opstreelabs.in/v1beta2
+kind: RedisReplication
+metadata:
+  name: redis-replication-immich
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: redis-replication-immich
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  clusterSize: 3
+  podSecurityContext:
+    runAsUser: 1000
+    fsGroup: 1000
+  kubernetesConfig:
+    image: quay.io/opstree/redis:v8.0.3
+    imagePullPolicy: IfNotPresent
+    resources:
+      requests:
+        cpu: 50m
+        memory: 128Mi
+  storage:
+    volumeClaimTemplate:
+      spec:
+        storageClassName: ceph-block
+        accessModes: ["ReadWriteOnce"]
+        resources:
+          requests:
+            storage: 1Gi
+  redisExporter:
+    enabled: true
+    image: quay.io/opstree/redis-exporter:v1.48.0

clusters/cl01tl/applications/immich/templates/service-monitor.yaml

@@ -21,3 +21,24 @@ spec:
       interval: 3m
       scrapeTimeout: 1m
       path: /metrics
+
+---
+apiVersion: monitoring.coreos.com/v1
+kind: ServiceMonitor
+metadata:
+  name: redis-replication-immich
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: redis-replication-immich
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+    redis-operator: "true"
+    env: production
+spec:
+  selector:
+    matchLabels:
+      redis_setup_type: replication
+  endpoints:
+    - port: redis-exporter
+      interval: 30s
+      scrapeTimeout: 10s

clusters/cl01tl/applications/immich/values.yaml

@@ -21,7 +21,7 @@ immich:
             - name: IMMICH_MACHINE_LEARNING_URL
               value: http://immich-machine-learning.immich:3003
             - name: REDIS_HOSTNAME
-              value: immich-valkey-primary
+              value: redis-replication-immich-master
             - name: DB_VECTOR_EXTENSION
               value: pgvecto.rs
             - name: DB_HOSTNAME
@@ -188,28 +188,6 @@ immich:
           main:
             - path: /usr/src/app/upload
               readOnly: false
-valkey:
-  architecture: replication
-  auth:
-    enabled: false
-    usePasswordFiles: false
-  primary:
-    resources:
-      requests:
-        cpu: 100m
-        memory: 64Mi
-    persistence:
-      enabled: true
-      size: 1Gi
-  replica:
-    replicaCount: 1
-    resources:
-      requests:
-        cpu: 100m
-        memory: 64Mi
-    persistence:
-      enabled: true
-      size: 1Gi
 postgres-16-cluster:
   # Tensorchord
   #--- https://github.com/immich-app/immich/discussions/9060

clusters/cl01tl/applications/jellyfin/Chart.yaml

@@ -20,6 +20,6 @@ dependencies:
   - name: app-template
     alias: jellyfin
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.1.2
+    version: 4.2.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/jellyfin.png
 appVersion: 10.10.7

clusters/cl01tl/applications/jellystat/Chart.yaml

@@ -18,7 +18,7 @@ dependencies:
   - name: app-template
     alias: jellystat
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.1.2
+    version: 4.2.0
   - name: postgres-cluster
     alias: postgres-17-cluster
     version: 5.1.0

clusters/cl01tl/applications/karakeep/Chart.yaml

@@ -1,9 +1,8 @@
 apiVersion: v2
-name: hoarder
+name: karakeep
 version: 1.0.0
 description: Karakeep
 keywords:
-  - hoarder
   - karakeep
   - bookmarks
 home: https://wiki.alexlebens.dev/s/f8177591-8253-4e21-82d5-a556f0aeafad
@@ -19,9 +18,9 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: app-template
-    alias: hoarder
+    alias: karakeep
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.1.2
+    version: 4.2.0
   - name: meilisearch
     version: 0.14.0
     repository: https://meilisearch.github.io/meilisearch-kubernetes
@@ -30,4 +29,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
     version: 1.18.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/webp/karakeep.webp
-appVersion: 0.24.1
+appVersion: 0.26.0

clusters/cl01tl/applications/karakeep/templates/external-secret.yaml

@@ -19,6 +19,13 @@ spec:
         key: /cl01tl/karakeep/key
         metadataPolicy: None
         property: key
+    - secretKey: prometheus-token
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/karakeep/key
+        metadataPolicy: None
+        property: prometheus-token
 
 ---
 apiVersion: external-secrets.io/v1
@@ -100,10 +107,10 @@ spec:
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
-  name: hoarder-data-backup-secret
+  name: karakeep-data-backup-secret
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: hoarder-data-backup-secret
+    app.kubernetes.io/name: karakeep-data-backup-secret
     app.kubernetes.io/instance: {{ .Release.Name }}
     app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
@@ -115,7 +122,7 @@ spec:
       mergePolicy: Merge
       engineVersion: v2
       data:
-        RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/hoarder/hoarder-data"
+        RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/karakeep/karakeep-data"
   data:
     - secretKey: BUCKET_ENDPOINT
       remoteRef:

clusters/cl01tl/applications/karakeep/templates/object-bucket-claim.yaml

@@ -0,0 +1,11 @@
+apiVersion: objectbucket.io/v1alpha1
+kind: ObjectBucketClaim
+metadata:
+  name: ceph-bucket-karakeep
+  labels:
+    app.kubernetes.io/name: ceph-bucket-karakeep
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  generateBucketName: bucket-karakeep
+  storageClassName: ceph-bucket

clusters/cl01tl/applications/karakeep/templates/replication-source.yaml

@@ -1,19 +1,19 @@
 apiVersion: volsync.backube/v1alpha1
 kind: ReplicationSource
 metadata:
-  name: hoarder-data-backup-source
+  name: karakeep-data-backup-source
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: hoarder-data-backup-source
+    app.kubernetes.io/name: karakeep-data-backup-source
     app.kubernetes.io/instance: {{ .Release.Name }}
     app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
-  sourcePVC: hoarder-data
+  sourcePVC: karakeep-data
   trigger:
     schedule: 0 4 * * *
   restic:
     pruneIntervalDays: 7
-    repository: hoarder-data-backup-secret
+    repository: karakeep-data-backup-secret
     retain:
       hourly: 1
       daily: 3

clusters/cl01tl/applications/karakeep/templates/service-monitor.yaml

@@ -0,0 +1,23 @@
+apiVersion: monitoring.coreos.com/v1
+kind: ServiceMonitor
+metadata:
+  name: karakeep
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: karakeep
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  endpoints:
+    - port: http
+      interval: 30s
+      scrapeTimeout: 15s
+      path: /api/metrics
+      authorization:
+        credentials:
+          key: prometheus-token
+          name: karakeep-key-secret
+  selector:
+    matchLabels:
+      app.kubernetes.io/name: karakeep
+      app.kubernetes.io/instance: {{ .Release.Name }}

clusters/cl01tl/applications/karakeep/values.yaml

@@ -1,4 +1,4 @@
-hoarder:
+karakeep:
   controllers:
     main:
       type: deployment
@@ -9,11 +9,13 @@ hoarder:
         main:
           image:
             repository: ghcr.io/karakeep-app/karakeep
-            tag: 0.25.0
+            tag: 0.26.0
             pullPolicy: IfNotPresent
           env:
             - name: DATA_DIR
               value: /data
+            - name: DB_WAL_MODE
+              value: true
             - name: NEXTAUTH_URL
               value: https://karakeep.alexlebens.dev/
             - name: NEXTAUTH_SECRET
@@ -21,15 +23,41 @@ hoarder:
                 secretKeyRef:
                   name: karakeep-key-secret
                   key: key
+            - name: PROMETHEUS_AUTH_TOKEN
+              valueFrom:
+                secretKeyRef:
+                  name: karakeep-key-secret
+                  key: prometheus-token
+            - name: ASSET_STORE_S3_ENDPOINT
+              value: http://rook-ceph-rgw-ceph-objectstore.rook-ceph.svc:80
+            - name: ASSET_STORE_S3_REGION
+              value: us-east-1
+            - name: ASSET_STORE_S3_BUCKET
+              valueFrom:
+                configMapKeyRef:
+                  name: ceph-bucket-karakeep
+                  key: BUCKET_NAME
+            - name: ASSET_STORE_S3_ACCESS_KEY_ID
+              valueFrom:
+                secretKeyRef:
+                  name: ceph-bucket-karakeep
+                  key: AWS_ACCESS_KEY_ID
+            - name: ASSET_STORE_S3_SECRET_ACCESS_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: ceph-bucket-karakeep
+                  key: AWS_SECRET_ACCESS_KEY
+            - name: ASSET_STORE_S3_FORCE_PATH_STYLE
+              value: true
             - name: MEILI_ADDR
-              value: http://hoarder-meilisearch.hoarder:7700
+              value: http://karakeep-meilisearch.karakeep:7700
             - name: MEILI_MASTER_KEY
               valueFrom:
                 secretKeyRef:
                   name: karakeep-meilisearch-master-key-secret
                   key: MEILI_MASTER_KEY
             - name: BROWSER_WEB_URL
-              value: http://hoarder.hoarder:9222
+              value: http://karakeep.karakeep:9222
             - name: DISABLE_SIGNUPS
               value: false
             - name: OAUTH_PROVIDER_NAME
@@ -49,13 +77,13 @@ hoarder:
                   name: karakeep-oidc-secret
                   key: AUTHENTIK_CLIENT_SECRET
             - name: OLLAMA_BASE_URL
-              value: http://ollama-server-1.ollama:11434
+              value: http://ollama-server-3.ollama:11434
             - name: OLLAMA_KEEP_ALIVE
               value: 5m
             - name: INFERENCE_TEXT_MODEL
-              value: llama3.1:8b
+              value: gemma3:4b
             - name: INFERENCE_IMAGE_MODEL
-              value: llama3.2-vision:11b
+              value: granite3.2-vision:2b
             - name: EMBEDDING_TEXT_MODEL
               value: mxbai-embed-large
             - name: INFERENCE_JOB_TIMEOUT_SEC
@@ -94,7 +122,6 @@ hoarder:
           protocol: HTTP
   persistence:
     data:
-      forceRename: hoarder-data
       storageClass: ceph-block
       accessMode: ReadWriteOnce
       size: 10Gi

clusters/cl01tl/applications/kiwix/Chart.yaml

@@ -16,6 +16,6 @@ dependencies:
   - name: app-template
     alias: kiwix
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.1.2
+    version: 4.2.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kiwix-dark.png
 appVersion: 3.7.0

clusters/cl01tl/applications/libation/Chart.yaml

@@ -17,6 +17,6 @@ dependencies:
   - name: app-template
     alias: libation
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.1.2
+    version: 4.2.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/libation.png
 appVersion: 12.4.3

clusters/cl01tl/applications/libation/values.yaml

@@ -16,7 +16,7 @@ libation:
         main:
           image:
             repository: rmcrackan/libation
-            tag: 12.4.5
+            tag: 12.4.11
             pullPolicy: IfNotPresent
           env:
             - name: SLEEP_TIME

clusters/cl01tl/applications/lidarr/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
   - name: app-template
     alias: lidarr
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.1.2
+    version: 4.2.0
   - name: postgres-cluster
     alias: postgres-17-cluster
     version: 5.1.0

clusters/cl01tl/applications/lidarr/values.yaml

@@ -15,7 +15,7 @@ lidarr:
         main:
           image:
             repository: ghcr.io/linuxserver/lidarr
-            tag: 2.12.4@sha256:b1daebbda8ee180e509bb726378b0dd7816ac29eef43a8e85f6071be4d4e6904
+            tag: 2.12.4@sha256:2231bc5581589de7c5373b19f7f16e1a5bfa48c5a365ca9b928e232b4c985dce
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/applications/lidatube/Chart.yaml

@@ -17,6 +17,6 @@ dependencies:
   - name: app-template
     alias: lidatube
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.1.2
+    version: 4.2.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/lidatube.png
 appVersion: 0.2.22

clusters/cl01tl/applications/lidatube/values.yaml

@@ -13,7 +13,7 @@ lidatube:
         main:
           image:
             repository: thewicklowwolf/lidatube
-            tag: 0.2.29
+            tag: 0.2.30
             pullPolicy: IfNotPresent
           env:
             - name: PUID

clusters/cl01tl/applications/omni-tools/Chart.yaml

@@ -15,6 +15,6 @@ dependencies:
   - name: app-template
     alias: omni-tools
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.1.2
+    version: 4.2.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/omnitools.png
 appVersion: 0.4.0

clusters/cl01tl/applications/outline/Chart.yaml

@@ -9,12 +9,10 @@ keywords:
 home: https://wiki.alexlebens.dev/s/c530c2b9-82b7-44df-b7ef-870c8b29242f
 sources:
   - https://github.com/outline/outline
-  - https://github.com/valkey-io/valkey
   - https://github.com/cloudflare/cloudflared
   - https://github.com/cloudnative-pg/cloudnative-pg
   - https://hub.docker.com/r/outlinewiki/outline
   - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-  - https://github.com/bitnami/charts/tree/main/bitnami/valkey
   - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/cloudflared
   - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/postgres-cluster
 maintainers:
@@ -23,10 +21,7 @@ dependencies:
   - name: app-template
     alias: outline
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.1.2
+    version: 4.2.0
-  - name: valkey
-    version: 3.0.20
-    repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
   - name: cloudflared
     alias: cloudflared-outline
     repository: oci://harbor.alexlebens.net/helm-charts

clusters/cl01tl/applications/outline/templates/redis-replication.yaml

@@ -0,0 +1,32 @@
+apiVersion: redis.redis.opstreelabs.in/v1beta2
+kind: RedisReplication
+metadata:
+  name: redis-replication-outline
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: redis-replication-outline
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  clusterSize: 3
+  podSecurityContext:
+    runAsUser: 1000
+    fsGroup: 1000
+  kubernetesConfig:
+    image: quay.io/opstree/redis:v8.0.3
+    imagePullPolicy: IfNotPresent
+    resources:
+      requests:
+        cpu: 50m
+        memory: 128Mi
+  storage:
+    volumeClaimTemplate:
+      spec:
+        storageClassName: ceph-block
+        accessModes: ["ReadWriteOnce"]
+        resources:
+          requests:
+            storage: 1Gi
+  redisExporter:
+    enabled: true
+    image: quay.io/opstree/redis-exporter:v1.48.0

clusters/cl01tl/applications/outline/templates/service-monitor.yaml

@@ -0,0 +1,19 @@
+apiVersion: monitoring.coreos.com/v1
+kind: ServiceMonitor
+metadata:
+  name: redis-replication-outline
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: redis-replication-outline
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+    redis-operator: "true"
+    env: production
+spec:
+  selector:
+    matchLabels:
+      redis_setup_type: replication
+  endpoints:
+    - port: redis-exporter
+      interval: 30s
+      scrapeTimeout: 10s

clusters/cl01tl/applications/outline/values.yaml

@@ -64,7 +64,7 @@ outline:
             - name: PGSSLMODE
               value: disable
             - name: REDIS_URL
-              value: redis://outline-valkey-primary.outline:6379
+              value: redis://redis-replication-outline-master.outline:6379
             - name: FILE_STORAGE
               value: s3
             - name: AWS_ACCESS_KEY_ID
@@ -142,28 +142,6 @@ outline:
           port: 3000
           targetPort: 3000
           protocol: HTTP
-valkey:
-  architecture: replication
-  auth:
-    enabled: false
-    usePasswordFiles: false
-  primary:
-    resources:
-      requests:
-        cpu: 100m
-        memory: 64Mi
-    persistence:
-      enabled: true
-      size: 1Gi
-  replica:
-    replicaCount: 1
-    resources:
-      requests:
-        cpu: 100m
-        memory: 64Mi
-    persistence:
-      enabled: true
-      size: 1Gi
 cloudflared-outline:
   existingSecretName: outline-cloudflared-secret
   name: cloudflared-outline

clusters/cl01tl/applications/overseerr/Chart.yaml

@@ -16,6 +16,6 @@ maintainers:
 dependencies:
   - name: app-template
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.1.2
+    version: 4.2.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/overseerr.png
 appVersion: 1.34.0

clusters/cl01tl/applications/photoview/Chart.yaml

@@ -17,7 +17,7 @@ dependencies:
   - name: app-template
     alias: photoview
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.1.2
+    version: 4.2.0
   - name: postgres-cluster
     alias: postgres-17-cluster
     version: 5.1.0

clusters/cl01tl/applications/plex/Chart.yaml

@@ -21,6 +21,6 @@ dependencies:
   - name: app-template
     alias: plex
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.1.2
+    version: 4.2.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/plex.png
 appVersion: 1.41.6

clusters/cl01tl/applications/plex/values.yaml

@@ -9,7 +9,7 @@ plex:
         main:
           image:
             repository: ghcr.io/linuxserver/plex
-            tag: 1.41.8@sha256:2bae6500e2328fbc48fcc9ec1c0c17d6f95e8d024fcbff5c60d154093f29832d
+            tag: 1.41.9@sha256:3f124bbd4d58a588187a87b75427cba35d5de05a071f2252f908abbb95edf7bb
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/applications/postiz/Chart.yaml

@@ -8,12 +8,10 @@ keywords:
 home: https://wiki.alexlebens.dev/s/f483a06b-860b-423c-8d51-a1ce82e0fd43
 sources:
   - https://github.com/gitroomhq/postiz-app
-  - https://github.com/valkey-io/valkey
   - https://github.com/cloudflare/cloudflared
   - https://github.com/cloudnative-pg/cloudnative-pg
   - https://github.com/gitroomhq/postiz-app/pkgs/container/postiz-app
   - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-  - https://github.com/bitnami/charts/tree/main/bitnami/valkey
   - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/cloudflared
   - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/postgres-cluster
 maintainers:
@@ -22,10 +20,7 @@ dependencies:
   - name: app-template
     alias: postiz
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.1.2
+    version: 4.2.0
-  - name: valkey
-    version: 3.0.20
-    repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
     version: 1.18.0

clusters/cl01tl/applications/postiz/templates/external-secret.yaml

@@ -24,10 +24,10 @@ spec:
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
-  name: postiz-valkey-config
+  name: postiz-redis-config
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: postiz-valkey-config
+    app.kubernetes.io/name: postiz-redis-config
     app.kubernetes.io/instance: {{ .Release.Name }}
     app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
@@ -35,27 +35,27 @@ spec:
     kind: ClusterSecretStore
     name: vault
   data:
+    - secretKey: REDIS_URL
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/postiz/redis
+        metadataPolicy: None
+        property: REDIS_URL
     - secretKey: user
       remoteRef:
         conversionStrategy: Default
         decodingStrategy: None
-        key: /cl01tl/postiz/valkey
+        key: /cl01tl/postiz/redis
         metadataPolicy: None
         property: user
     - secretKey: password
       remoteRef:
         conversionStrategy: Default
         decodingStrategy: None
-        key: /cl01tl/postiz/valkey
+        key: /cl01tl/postiz/redis
         metadataPolicy: None
         property: password
-    - secretKey: REDIS_URL
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/postiz/valkey
-        metadataPolicy: None
-        property: REDIS_URL
 
 ---
 apiVersion: external-secrets.io/v1

clusters/cl01tl/applications/postiz/templates/redis-replication.yaml

@@ -0,0 +1,35 @@
+apiVersion: redis.redis.opstreelabs.in/v1beta2
+kind: RedisReplication
+metadata:
+  name: redis-replication-postiz
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: redis-replication-postiz
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  clusterSize: 3
+  podSecurityContext:
+    runAsUser: 1000
+    fsGroup: 1000
+  kubernetesConfig:
+    image: quay.io/opstree/redis:v8.0.3
+    imagePullPolicy: IfNotPresent
+    redisSecret:
+      name: postiz-redis-config
+      key: password
+    resources:
+      requests:
+        cpu: 50m
+        memory: 128Mi
+  storage:
+    volumeClaimTemplate:
+      spec:
+        storageClassName: ceph-block
+        accessModes: ["ReadWriteOnce"]
+        resources:
+          requests:
+            storage: 1Gi
+  redisExporter:
+    enabled: true
+    image: quay.io/opstree/redis-exporter:v1.48.0

clusters/cl01tl/applications/postiz/templates/service-monitor.yaml

@@ -0,0 +1,19 @@
+apiVersion: monitoring.coreos.com/v1
+kind: ServiceMonitor
+metadata:
+  name: redis-replication-postiz
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: redis-replication-postiz
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+    redis-operator: "true"
+    env: production
+spec:
+  selector:
+    matchLabels:
+      redis_setup_type: replication
+  endpoints:
+    - port: redis-exporter
+      interval: 30s
+      scrapeTimeout: 10s

clusters/cl01tl/applications/postiz/values.yaml

@@ -9,7 +9,7 @@ postiz:
         main:
           image:
             repository: ghcr.io/gitroomhq/postiz-app
-            tag: v1.63.0
+            tag: v2.0.8
             pullPolicy: IfNotPresent
           env:
             - name: MAIN_URL
@@ -31,7 +31,7 @@ postiz:
             - name: REDIS_URL
               valueFrom:
                 secretKeyRef:
-                  name: postiz-valkey-config
+                  name: postiz-redis-config
                   key: REDIS_URL
             - name: BACKEND_INTERNAL_URL
               value: http://localhost:3000
@@ -102,30 +102,6 @@ postiz:
           main:
             - path: /uploads
               readOnly: false
-valkey:
-  architecture: replication
-  auth:
-    enabled: true
-    existingSecret: postiz-valkey-config
-    existingSecretPasswordKey: password
-    usePasswordFiles: false
-  primary:
-    resources:
-      requests:
-        cpu: 100m
-        memory: 64Mi
-    persistence:
-      enabled: true
-      size: 1Gi
-  replica:
-    replicaCount: 1
-    resources:
-      requests:
-        cpu: 100m
-        memory: 64Mi
-    persistence:
-      enabled: true
-      size: 1Gi
 cloudflared:
   name: cloudflared-postiz
   existingSecretName: postiz-cloudflared-secret

clusters/cl01tl/applications/prowlarr/Chart.yaml

@@ -18,6 +18,6 @@ dependencies:
   - name: app-template
     alias: prowlarr
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.1.2
+    version: 4.2.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/prowlarr.png
 appVersion: 1.35.1

clusters/cl01tl/applications/prowlarr/values.yaml

@@ -20,7 +20,7 @@ prowlarr:
         main:
           image:
             repository: ghcr.io/linuxserver/prowlarr
-            tag: 1.37.0@sha256:b6583aeaa0fe637da09b5d8e498a3f6dcb9eef96aa59d4c455bf021c9f914119
+            tag: 1.37.0@sha256:d2462d470891c70073e31d158657a9b247b317c90238c40534d8be8f98671057
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/applications/radarr-4k/Chart.yaml

@@ -24,7 +24,7 @@ dependencies:
   - name: app-template
     alias: radarr-4k
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.1.2
+    version: 4.2.0
   - name: postgres-cluster
     alias: postgres-17-cluster
     version: 5.1.0

clusters/cl01tl/applications/radarr-4k/values.yaml

@@ -15,7 +15,7 @@ radarr-4k:
         main:
           image:
             repository: ghcr.io/linuxserver/radarr
-            tag: 5.26.2@sha256:3f6c13cd920e60469e24fac6b25338b0805832e6dea108f8316814d0f4147ab6
+            tag: 5.26.2@sha256:ae89f05ad7023258730ed62f5fcca63aab1e27ee5adcca1edb55d716f7cef356
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/applications/radarr-anime/Chart.yaml

@@ -24,7 +24,7 @@ dependencies:
   - name: app-template
     alias: radarr-anime
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.1.2
+    version: 4.2.0
   - name: postgres-cluster
     alias: postgres-17-cluster
     version: 5.1.0

clusters/cl01tl/applications/radarr-anime/values.yaml

@@ -13,7 +13,7 @@ radarr-anime:
         main:
           image:
             repository: ghcr.io/linuxserver/radarr
-            tag: 5.26.2@sha256:3f6c13cd920e60469e24fac6b25338b0805832e6dea108f8316814d0f4147ab6
+            tag: 5.26.2@sha256:ae89f05ad7023258730ed62f5fcca63aab1e27ee5adcca1edb55d716f7cef356
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/applications/radarr-standup/Chart.yaml

@@ -23,7 +23,7 @@ dependencies:
   - name: app-template
     alias: radarr-standup
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.1.2
+    version: 4.2.0
   - name: postgres-cluster
     alias: postgres-17-cluster
     version: 5.1.0

clusters/cl01tl/applications/radarr-standup/values.yaml

@@ -13,7 +13,7 @@ radarr-standup:
         main:
           image:
             repository: ghcr.io/linuxserver/radarr
-            tag: 5.26.2@sha256:3f6c13cd920e60469e24fac6b25338b0805832e6dea108f8316814d0f4147ab6
+            tag: 5.26.2@sha256:ae89f05ad7023258730ed62f5fcca63aab1e27ee5adcca1edb55d716f7cef356
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/applications/radarr/Chart.yaml

@@ -23,7 +23,7 @@ dependencies:
   - name: app-template
     alias: radarr
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.1.2
+    version: 4.2.0
   - name: postgres-cluster
     alias: postgres-17-cluster
     version: 5.1.0

clusters/cl01tl/applications/radarr/values.yaml

@@ -15,7 +15,7 @@ radarr:
         main:
           image:
             repository: ghcr.io/linuxserver/radarr
-            tag: 5.26.2@sha256:3f6c13cd920e60469e24fac6b25338b0805832e6dea108f8316814d0f4147ab6
+            tag: 5.26.2@sha256:ae89f05ad7023258730ed62f5fcca63aab1e27ee5adcca1edb55d716f7cef356
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/applications/roundcube/Chart.yaml

@@ -18,7 +18,7 @@ dependencies:
   - name: app-template
     alias: roundcube
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.1.2
+    version: 4.2.0
   - name: postgres-cluster
     alias: postgres-17-cluster
     version: 5.1.0

clusters/cl01tl/applications/searxng/Chart.yaml

@@ -8,18 +8,13 @@ keywords:
 home: https://wiki.alexlebens.dev/s/6c6da68a-8725-4439-93c8-990ce824be54
 sources:
   - https://github.com/searxng/searxng
-  - https://github.com/valkey-io/valkey
   - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-  - https://github.com/bitnami/charts/tree/main/bitnami/valkey
 maintainers:
   - name: alexlebens
 dependencies:
   - name: app-template
     alias: searxng
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.1.2
+    version: 4.2.0
-  - name: valkey
-    version: 3.0.20
-    repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/searxng.png
 appVersion: 1.0.0

clusters/cl01tl/applications/searxng/templates/redis-replication.yaml

@@ -0,0 +1,32 @@
+apiVersion: redis.redis.opstreelabs.in/v1beta2
+kind: RedisReplication
+metadata:
+  name: redis-replication-searxng
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: redis-replication-searxng
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  clusterSize: 3
+  podSecurityContext:
+    runAsUser: 1000
+    fsGroup: 1000
+  kubernetesConfig:
+    image: quay.io/opstree/redis:v8.0.3
+    imagePullPolicy: IfNotPresent
+    resources:
+      requests:
+        cpu: 50m
+        memory: 128Mi
+  storage:
+    volumeClaimTemplate:
+      spec:
+        storageClassName: ceph-block
+        accessModes: ["ReadWriteOnce"]
+        resources:
+          requests:
+            storage: 1Gi
+  redisExporter:
+    enabled: true
+    image: quay.io/opstree/redis-exporter:v1.48.0

clusters/cl01tl/applications/searxng/templates/service-monitor.yaml

@@ -0,0 +1,19 @@
+apiVersion: monitoring.coreos.com/v1
+kind: ServiceMonitor
+metadata:
+  name: redis-replication-searxng
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: redis-replication-searxng
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+    redis-operator: "true"
+    env: production
+spec:
+  selector:
+    matchLabels:
+      redis_setup_type: replication
+  endpoints:
+    - port: redis-exporter
+      interval: 30s
+      scrapeTimeout: 10s

clusters/cl01tl/applications/searxng/values.yaml

@@ -9,7 +9,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:54097e8189288082454fc257cf39c51d8059f24efeb07a4abbe0abbc58e38772
+            tag: latest@sha256:8ee06648ea025780c4805cf58fd66e48245bf7e81466751afae4bf84e5ef29ca
             pullPolicy: IfNotPresent
           env:
             - name: SEARXNG_BASE_URL
@@ -43,7 +43,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:54097e8189288082454fc257cf39c51d8059f24efeb07a4abbe0abbc58e38772
+            tag: latest@sha256:8ee06648ea025780c4805cf58fd66e48245bf7e81466751afae4bf84e5ef29ca
             pullPolicy: IfNotPresent
           env:
             - name: SEARXNG_BASE_URL
@@ -53,7 +53,7 @@ searxng:
             - name: SEARXNG_HOSTNAME
               value: searxng.alexlebens.net
             - name: SEARXNG_REDIS_URL
-              value: redis://searxng-valkey-primary.searxng:6379/0
+              value: redis://redis-replication-searxng-master.searxng:6379/0
             - name: UWSGI_WORKERS
               value: 4
             - name: UWSGI_THREADS
@@ -111,25 +111,3 @@ searxng:
           main:
             - path: /etc/searxng
               readOnly: false
-valkey:
-  architecture: replication
-  auth:
-    enabled: false
-    usePasswordFiles: false
-  primary:
-    resources:
-      requests:
-        cpu: 100m
-        memory: 64Mi
-    persistence:
-      enabled: true
-      size: 1Gi
-  replica:
-    replicaCount: 1
-    resources:
-      requests:
-        cpu: 100m
-        memory: 64Mi
-    persistence:
-      enabled: true
-      size: 1Gi

clusters/cl01tl/applications/site-profile/Chart.yaml

@@ -19,10 +19,10 @@ dependencies:
   - name: app-template
     alias: site-profile
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.1.2
+    version: 4.2.0
   - name: cloudflared
     alias: cloudflared-site
     repository: oci://harbor.alexlebens.net/helm-charts
     version: 1.18.0
-icon: https://d21zlbwtcn424f.cloudfront.net/icon_white.png
+icon: https://d21zlbwtcn424f.cloudfront.net/logo-new-round.png
 appVersion: 0.8.1

clusters/cl01tl/applications/site-profile/values.yaml

@@ -5,13 +5,13 @@ site-profile:
     main:
       type: deployment
       replicas: 3
-      strategy: Recreate
+      strategy: RollingUpdate
       revisionHistoryLimit: 3
       containers:
         main:
           image:
             repository: harbor.alexlebens.net/images/site-profile
-            tag: 0.8.13
+            tag: 1.0.1
             pullPolicy: IfNotPresent
           resources:
             requests:

clusters/cl01tl/applications/slskd/Chart.yaml

@@ -20,6 +20,6 @@ dependencies:
   - name: app-template
     alias: slskd
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.1.2
+    version: 4.2.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/slskd.png
 appVersion: 0.22.5

clusters/cl01tl/applications/sonarr-4k/Chart.yaml

@@ -24,7 +24,7 @@ dependencies:
   - name: app-template
     alias: sonarr-4k
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.1.2
+    version: 4.2.0
   - name: postgres-cluster
     alias: postgres-17-cluster
     version: 5.1.0

clusters/cl01tl/applications/sonarr-4k/values.yaml

@@ -13,7 +13,7 @@ sonarr-4k:
         main:
           image:
             repository: ghcr.io/linuxserver/sonarr
-            tag: 4.0.15@sha256:b0ac15772c04f329964ed79cb446ab23fd1ee28f33b58b10f0264feac17d33cd
+            tag: 4.0.15@sha256:c0836f49c20000e603170dc95d74c2527e690d50309977d94fc171eaa49351a4
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/applications/sonarr-anime/Chart.yaml

@@ -23,7 +23,7 @@ dependencies:
   - name: app-template
     alias: sonarr-anime
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.1.2
+    version: 4.2.0
   - name: postgres-cluster
     alias: postgres-17-cluster
     version: 5.1.0

clusters/cl01tl/applications/sonarr-anime/values.yaml

@@ -13,7 +13,7 @@ sonarr-anime:
         main:
           image:
             repository: ghcr.io/linuxserver/sonarr
-            tag: 4.0.15@sha256:b0ac15772c04f329964ed79cb446ab23fd1ee28f33b58b10f0264feac17d33cd
+            tag: 4.0.15@sha256:c0836f49c20000e603170dc95d74c2527e690d50309977d94fc171eaa49351a4
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/applications/sonarr/Chart.yaml

@@ -23,7 +23,7 @@ dependencies:
   - name: app-template
     alias: sonarr
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.1.2
+    version: 4.2.0
   - name: postgres-cluster
     alias: postgres-17-cluster
     version: 5.1.0

clusters/cl01tl/applications/sonarr/values.yaml

@@ -13,7 +13,7 @@ sonarr:
         main:
           image:
             repository: ghcr.io/linuxserver/sonarr
-            tag: 4.0.15@sha256:b0ac15772c04f329964ed79cb446ab23fd1ee28f33b58b10f0264feac17d33cd
+            tag: 4.0.15@sha256:c0836f49c20000e603170dc95d74c2527e690d50309977d94fc171eaa49351a4
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/applications/tautulli/Chart.yaml

@@ -16,6 +16,6 @@ dependencies:
   - name: app-template
     alias: tautulli
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.1.2
+    version: 4.2.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/tautulli.png
 appVersion: v2.15.2

clusters/cl01tl/applications/tdarr/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
   - name: app-template
     alias: tdarr
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.1.2
+    version: 4.2.0
   - name: tdarr-exporter
     version: 1.1.7
     repository: https://homeylab.github.io/helm-charts/

clusters/cl01tl/applications/tubearchivist/Chart.yaml

@@ -11,23 +11,14 @@ home: https://wiki.alexlebens.dev/s/9a5f89bb-3cae-43ab-b651-d39f69a05e93
 sources:
   - https://github.com/tubearchivist/tubearchivist
   - https://github.com/elastic/elasticsearch
-  - https://github.com/valkey-io/valkey
   - https://hub.docker.com/r/bbilly1/tubearchivist
   - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-  - https://github.com/bitnami/charts/tree/main/bitnami/valkey
-  - https://github.com/bitnami/charts/tree/main/bitnami/elasticsearch
 maintainers:
   - name: alexlebens
 dependencies:
   - name: app-template
     alias: tubearchivist
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.1.2
+    version: 4.2.0
-  - name: valkey
-    version: 3.0.20
-    repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
-  - name: elasticsearch
-    version: 22.0.12
-    repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/tube-archivist.png
 appVersion: v0.5.2

clusters/cl01tl/applications/tubearchivist/templates/elasticsearch.yaml

@@ -0,0 +1,42 @@
+apiVersion: elasticsearch.k8s.elastic.co/v1
+kind: Elasticsearch
+metadata:
+  name: elasticsearch-tubearchivist
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: elasticsearch-tubearchivist
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  version: 8.18.0
+  auth:
+    fileRealm:
+      - secretName: tubearchivist-elasticsearch-secret
+  nodeSets:
+    - name: default
+      count: 1
+      config:
+        node.store.allow_mmap: false
+        path.repo: /usr/share/elasticsearch/data/snapshot
+      podTemplate:
+        spec:
+          volumes:
+            - name: tubearchivist-snapshot-nfs-storage
+              nfs:
+                path: /volume2/Storage/TubeArchivist
+                server: synologybond.alexlebens.net
+          containers:
+            - name: elasticsearch
+              volumeMounts:
+                - name: tubearchivist-snapshot-nfs-storage
+                  mountPath: /usr/share/elasticsearch/data/snapshot
+      volumeClaimTemplates:
+        - metadata:
+            name: elasticsearch-data
+          spec:
+            accessModes:
+              - ReadWriteOnce
+            resources:
+              requests:
+                storage: 10Gi
+            storageClassName: ceph-block

clusters/cl01tl/applications/tubearchivist/templates/external-secret.yaml

@@ -42,13 +42,27 @@ spec:
     kind: ClusterSecretStore
     name: vault
   data:
-    - secretKey: ELASTIC_PASSWORD
+    - secretKey: username
       remoteRef:
         conversionStrategy: Default
         decodingStrategy: None
-        key: /cl01tl/tubearchivist/env
+        key: /cl01tl/tubearchivist/elasticsearch
         metadataPolicy: None
-        property: ELASTIC_PASSWORD
+        property: username
+    - secretKey: password
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/tubearchivist/elasticsearch
+        metadataPolicy: None
+        property: password
+    - secretKey: roles
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/tubearchivist/elasticsearch
+        metadataPolicy: None
+        property: roles
 
 ---
 apiVersion: external-secrets.io/v1

clusters/cl01tl/applications/tubearchivist/templates/redis-replication.yaml

@@ -0,0 +1,32 @@
+apiVersion: redis.redis.opstreelabs.in/v1beta2
+kind: RedisReplication
+metadata:
+  name: redis-replication-tubearchivist
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: redis-replication-tubearchivist
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  clusterSize: 3
+  podSecurityContext:
+    runAsUser: 1000
+    fsGroup: 1000
+  kubernetesConfig:
+    image: quay.io/opstree/redis:v8.0.3
+    imagePullPolicy: IfNotPresent
+    resources:
+      requests:
+        cpu: 50m
+        memory: 128Mi
+  storage:
+    volumeClaimTemplate:
+      spec:
+        storageClassName: ceph-block
+        accessModes: ["ReadWriteOnce"]
+        resources:
+          requests:
+            storage: 1Gi
+  redisExporter:
+    enabled: true
+    image: quay.io/opstree/redis-exporter:v1.48.0

clusters/cl01tl/applications/tubearchivist/templates/service-monitor.yaml

@@ -0,0 +1,19 @@
+apiVersion: monitoring.coreos.com/v1
+kind: ServiceMonitor
+metadata:
+  name: redis-replication-tubearchivist
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: redis-replication-tubearchivist
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+    redis-operator: "true"
+    env: production
+spec:
+  selector:
+    matchLabels:
+      redis_setup_type: replication
+  endpoints:
+    - port: redis-exporter
+      interval: 30s
+      scrapeTimeout: 10s

clusters/cl01tl/applications/tubearchivist/values.yaml

@@ -19,9 +19,11 @@ tubearchivist:
             - name: HOST_GID
               value: 1000
             - name: ES_URL
-              value: http://tubearchivist-elasticsearch:9200
+              value: https://elasticsearch-tubearchivist-es-http.tubearchivist:9200
+            - name: ES_DISABLE_VERIFY_SSL
+              value: true
             - name: REDIS_CON
-              value: redis://tubearchivist-valkey-primary.tubearchivist:6379
+              value: redis://redis-replication-tubearchivist-master.tubearchivist:6379
             - name: TA_HOST
               value: https://tubearchivist.alexlebens.net http://tubearchivist.tubearchivist:80/
             - name: TA_PORT
@@ -103,60 +105,3 @@ tubearchivist:
           main:
             - path: /youtube
               readOnly: false
-valkey:
-  architecture: replication
-  auth:
-    enabled: false
-    usePasswordFiles: false
-  primary:
-    resources:
-      requests:
-        cpu: 100m
-        memory: 64Mi
-    persistence:
-      enabled: true
-      size: 1Gi
-  replica:
-    replicaCount: 1
-    resources:
-      requests:
-        cpu: 100m
-        memory: 64Mi
-    persistence:
-      enabled: true
-      size: 1Gi
-elasticsearch:
-  global:
-    storageClass: ceph-block
-  image:
-    registry: docker.io
-    repository: bitnami/elasticsearch
-    tag: 8.18.0-debian-12-r2
-  extraEnvVars:
-    - name: discovery.type
-      value: single-node
-    - name: xpack.security.enabled
-      value: "true"
-  extraEnvVarsSecret: tubearchivist-elasticsearch-secret
-  extraConfig:
-    path:
-      repo: /usr/share/elasticsearch/data/snapshot
-  extraVolumes:
-    - name: snapshot
-      nfs:
-        path: /volume2/Storage/TubeArchivist
-        server: synologybond.alexlebens.net
-  extraVolumeMounts:
-    - name: snapshot
-      mountPath: /usr/share/elasticsearch/data/snapshot
-  snapshotRepoPath: /usr/share/elasticsearch/data/snapshot
-  master:
-    masterOnly: false
-    replicaCount: 1
-  data:
-    replicaCount: 0
-  coordinating:
-    replicaCount: 0
-  ingest:
-    enabled: false
-    replicaCount: 0

clusters/cl01tl/applications/vaultwarden/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
   - name: app-template
     alias: vaultwarden
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.1.2
+    version: 4.2.0
   - name: cloudflared
     alias: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts

clusters/cl01tl/applications/vaultwarden/values.yaml

@@ -9,7 +9,7 @@ vaultwarden:
         main:
           image:
             repository: vaultwarden/server
-            tag: 1.34.1
+            tag: 1.34.2
             pullPolicy: IfNotPresent
           env:
             - name: DOMAIN

clusters/cl01tl/applications/yamtrack/Chart.yaml

@@ -8,12 +8,10 @@ keywords:
   - jellyfin
 home: https://wiki.alexlebens.dev/s/74f31779-734e-42d0-852e-efd57ebdc797
 sources:
-  - https://github.com/FuzzyGrim/Yamtrack/
+  - https://github.com/FuzzyGrim/Yamtrack
-  - https://github.com/valkey-io/valkey
   - https://github.com/cloudnative-pg/cloudnative-pg
   - https://github.com/FuzzyGrim/Yamtrack/pkgs/container/yamtrack
   - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-  - https://github.com/bitnami/charts/tree/main/bitnami/valkey
   - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/postgres-cluster
 maintainers:
   - name: alexlebens
@@ -21,10 +19,7 @@ dependencies:
   - name: app-template
     alias: yamtrack
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.1.2
+    version: 4.2.0
-  - name: valkey
-    version: 3.0.20
-    repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
   - name: postgres-cluster
     alias: postgres-17-cluster
     version: 5.1.0

clusters/cl01tl/applications/yamtrack/templates/external-secret.yaml

@@ -19,13 +19,6 @@ spec:
         key: /cl01tl/yamtrack/config
         metadataPolicy: None
         property: SECRET
-    - secretKey: REDIS_URL
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/yamtrack/config
-        metadataPolicy: None
-        property: REDIS_URL
 
 ---
 apiVersion: external-secrets.io/v1

clusters/cl01tl/applications/yamtrack/templates/redis-replication.yaml

@@ -0,0 +1,32 @@
+apiVersion: redis.redis.opstreelabs.in/v1beta2
+kind: RedisReplication
+metadata:
+  name: redis-replication-yamtrack
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: redis-replication-yamtrack
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  clusterSize: 3
+  podSecurityContext:
+    runAsUser: 1000
+    fsGroup: 1000
+  kubernetesConfig:
+    image: quay.io/opstree/redis:v8.0.3
+    imagePullPolicy: IfNotPresent
+    resources:
+      requests:
+        cpu: 50m
+        memory: 128Mi
+  storage:
+    volumeClaimTemplate:
+      spec:
+        storageClassName: ceph-block
+        accessModes: ["ReadWriteOnce"]
+        resources:
+          requests:
+            storage: 1Gi
+  redisExporter:
+    enabled: true
+    image: quay.io/opstree/redis-exporter:v1.48.0

clusters/cl01tl/applications/yamtrack/templates/service-monitor.yaml

@@ -0,0 +1,19 @@
+apiVersion: monitoring.coreos.com/v1
+kind: ServiceMonitor
+metadata:
+  name: redis-replication-yamtrack
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: redis-replication-yamtrack
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+    redis-operator: "true"
+    env: production
+spec:
+  selector:
+    matchLabels:
+      redis_setup_type: replication
+  endpoints:
+    - port: redis-exporter
+      interval: 30s
+      scrapeTimeout: 10s