Update Helm release argo-cd to v9.2.2 (#2890)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [freshrss/freshrss](https://freshrss.org/) ([source](https://github.com/FreshRSS/FreshRSS)) | minor | `1.27.1` -> `1.28.0` |

---

### Release Notes

<details>
<summary>FreshRSS/FreshRSS (freshrss/freshrss)</summary>

### [`v1.28.0`](https://github.com/FreshRSS/FreshRSS/blob/HEAD/CHANGELOG.md#2025-12-24-FreshRSS-1280)

[Compare Source](https://github.com/FreshRSS/FreshRSS/compare/1.27.1...1.28.0)

- Features
  - New sorting and filtering by date of *User modified* [#&#8203;7886](https://github.com/FreshRSS/FreshRSS/pull/7886), [#&#8203;8090](https://github.com/FreshRSS/FreshRSS/pull/8090),
    [#&#8203;8105](https://github.com/FreshRSS/FreshRSS/pull/8105), [#&#8203;8118](https://github.com/FreshRSS/FreshRSS/pull/8118), [#&#8203;8130](https://github.com/FreshRSS/FreshRSS/pull/8130)
    - Corresponding search operator, e.g. `userdate:PT1H` for the past hour [#&#8203;8093](https://github.com/FreshRSS/FreshRSS/pull/8093)
    - Allows finding articles marked by the local user as read/unread or starred/unstarred at specific dates for e.g. undo action.
  - New sorting by article length [#&#8203;8119](https://github.com/FreshRSS/FreshRSS/pull/8119)
  - New advanced search form [#&#8203;8103](https://github.com/FreshRSS/FreshRSS/pull/8103), [#&#8203;8122](https://github.com/FreshRSS/FreshRSS/pull/8122), [#&#8203;8226](https://github.com/FreshRSS/FreshRSS/pull/8226)
  - Add compatibility with PCRE word boundary `\b` and `\B` for regex search using PostgreSQL [#&#8203;8141](https://github.com/FreshRSS/FreshRSS/pull/8141)
  - More uniform SQL search and PHP search for accents and case-sensitivity (e.g. for automatically marking as read) [#&#8203;8329](https://github.com/FreshRSS/FreshRSS/pull/8329)
  - New overview of dates with most unread articles [#&#8203;8089](https://github.com/FreshRSS/FreshRSS/pull/8089)
  - Allow marking as read articles older than 1 or 7 days also when sorting by publication date [#&#8203;8163](https://github.com/FreshRSS/FreshRSS/pull/8163)
  - New option to show user labels instead of tags in RSS share [#&#8203;8112](https://github.com/FreshRSS/FreshRSS/pull/8112)
  - Add new feed visibility (priority) *Show in its feed* [#&#8203;7972](https://github.com/FreshRSS/FreshRSS/pull/7972)
  - New ability to share feed visibility through API (implemented by e.g. Capy Reader) [#&#8203;7583](https://github.com/FreshRSS/FreshRSS/pull/7583), [#&#8203;8158](https://github.com/FreshRSS/FreshRSS/pull/8158)
  - Configurable notification timeout [#&#8203;7942](https://github.com/FreshRSS/FreshRSS/pull/7942)
  - OPML export/import of unicity criteria [#&#8203;8243](https://github.com/FreshRSS/FreshRSS/pull/8243)
  - Ensure stable IDs (categories, feeds, labels) during export/import [#&#8203;7988](https://github.com/FreshRSS/FreshRSS/pull/7988)
  - Add username and timestamp to SQLite export from Web UI [#&#8203;8169](https://github.com/FreshRSS/FreshRSS/pull/8169)
  - Add option to apply filter actions to existing articles [#&#8203;7959](https://github.com/FreshRSS/FreshRSS/pull/7959), [#&#8203;8259](https://github.com/FreshRSS/FreshRSS/pull/8259)
  - Support CSS selector `~` *subsequent-sibling* [#&#8203;8154](https://github.com/FreshRSS/FreshRSS/pull/8154)
    - Upstream PR [phpgt/CssXPath#231](https://github.com/phpgt/CssXPath/pull/231)
  - Rework saving of configuration files for more reliability in case of e.g. full disk [#&#8203;8220](https://github.com/FreshRSS/FreshRSS/pull/8220)
  - Web scraping support date format as milliseconds for Unix epoch [#&#8203;8266](https://github.com/FreshRSS/FreshRSS/pull/8266)
  - Allow negative category sort numbers [#&#8203;8330](https://github.com/FreshRSS/FreshRSS/pull/8330)
- Performance
  - Improve SQL speed for updating cached information [#&#8203;6957](https://github.com/FreshRSS/FreshRSS/pull/6957), [#&#8203;8207](https://github.com/FreshRSS/FreshRSS/pull/8207),
    [#&#8203;8255](https://github.com/FreshRSS/FreshRSS/pull/8255), [#&#8203;8254](https://github.com/FreshRSS/FreshRSS/pull/8254), [#&#8203;8255](https://github.com/FreshRSS/FreshRSS/pull/8255)
  - Fix SQL performance issue with MySQL, using an index hint [#&#8203;8211](https://github.com/FreshRSS/FreshRSS/pull/8211)
  - Scaling of user statistics in Web UI and CLI, to help instances with 1k+ users [#&#8203;8277](https://github.com/FreshRSS/FreshRSS/pull/8277)
  - API streaming of large responses for reducing memory consumption and increasing speed [#&#8203;8041](https://github.com/FreshRSS/FreshRSS/pull/8041)
- Security
  - 💥 Move unsafe autologin to an extension [#&#8203;7958](https://github.com/FreshRSS/FreshRSS/pull/7958)
  - Fix some CSRFs [#&#8203;8035](https://github.com/FreshRSS/FreshRSS/pull/8035)
  - Strengthen some crypto (login, tokens, nonces) [#&#8203;8061](https://github.com/FreshRSS/FreshRSS/pull/8061), [#&#8203;8320](https://github.com/FreshRSS/FreshRSS/pull/8320)
  - Create separate HTTP `Retry-After` rules for proxies [#&#8203;8029](https://github.com/FreshRSS/FreshRSS/pull/8029), [#&#8203;8218](https://github.com/FreshRSS/FreshRSS/pull/8218)
  - Add `data:` to CSP in subscription controller [#&#8203;8253](https://github.com/FreshRSS/FreshRSS/pull/8253)
  - Improve anonymous authentication logic [#&#8203;8165](https://github.com/FreshRSS/FreshRSS/pull/8165)
  - Enable GitHub [release immutability](https://github.blog/changelog/2025-10-28-immutable-releases-are-now-generally-available/) [#&#8203;8205](https://github.com/FreshRSS/FreshRSS/issues/8205)
- Bug fixing
  - Exclude local networks for domain-wide HTTP `Retry-After` [#&#8203;8195](https://github.com/FreshRSS/FreshRSS/pull/8195)
  - Fix OpenID Connect with Debian 13 [#&#8203;8032](https://github.com/FreshRSS/FreshRSS/pull/8032)
  - Fix MySQL / MariaDB bug wrongly sorting new articles [#&#8203;8223](https://github.com/FreshRSS/FreshRSS/pull/8223)
  - Fix MySQL / MariaDB database size calculation [#&#8203;8282](https://github.com/FreshRSS/FreshRSS/pull/8282)
  - Fix SQLite bind bug when adding user label [#&#8203;8101](https://github.com/FreshRSS/FreshRSS/pull/8101)
  - Fix SQL auto-update of field `f.kind` to ease migrations from FreshRSS versions older than 1.20.0 [#&#8203;8148](https://github.com/FreshRSS/FreshRSS/pull/8148)
  - Fix search encoding and quoting [#&#8203;8311](https://github.com/FreshRSS/FreshRSS/pull/8311), [#&#8203;8324](https://github.com/FreshRSS/FreshRSS/pull/8324), [#&#8203;8338](https://github.com/FreshRSS/FreshRSS/pull/8338)
  - Fix handling of database unexpected null content (during migrations) [#&#8203;8319](https://github.com/FreshRSS/FreshRSS/pull/8319), [#&#8203;8321](https://github.com/FreshRSS/FreshRSS/pull/8321)
  - Fix drag & drop of user query losing information [#&#8203;8113](https://github.com/FreshRSS/FreshRSS/pull/8113)
  - Fix DOM error while filtering retrieved full content [#&#8203;8132](https://github.com/FreshRSS/FreshRSS/pull/8132), [#&#8203;8161](https://github.com/FreshRSS/FreshRSS/pull/8161)
  - Fix `config.custom.php` during install [#&#8203;8033](https://github.com/FreshRSS/FreshRSS/pull/8033)
  - Fix do not mark important feeds as read from category [#&#8203;8067](https://github.com/FreshRSS/FreshRSS/pull/8067)
  - Fix regression of warnings in Web browser console due to lack of `window.bcrypt` object [#&#8203;8166](https://github.com/FreshRSS/FreshRSS/pull/8166)
  - Fix chart resize regression due to `chart.js` v4 update [#&#8203;8298](https://github.com/FreshRSS/FreshRSS/pull/8298)
  - Fix CLI user creation warning when language is not given [#&#8203;8283](https://github.com/FreshRSS/FreshRSS/pull/8283)
  - Fix merging of custom HTTP headers [#&#8203;8251](https://github.com/FreshRSS/FreshRSS/pull/8251)
  - Fix bug in the case of duplicated mark-as-read filters [#&#8203;8322](https://github.com/FreshRSS/FreshRSS/pull/8322)
- SimplePie
  - Fix support of HTTP trailer headers [#&#8203;7983](https://github.com/FreshRSS/FreshRSS/pull/7983), [simplepie#943](https://github.com/simplepie/simplepie/pull/943)
  - Apply HTTPS policy also on GUIDs and permalinks [#&#8203;8037](https://github.com/FreshRSS/FreshRSS/pull/8037), [simplepie#951](https://github.com/simplepie/simplepie/pull/951)
    - Fix `WordPress.com` HTTP duplicates with WebSub [Automattic/pushpress#16](https://github.com/Automattic/pushpress/pull/16)
  - Implement HTML whitelist for SimplePie sanitizer [#&#8203;7924](https://github.com/FreshRSS/FreshRSS/pull/7924), [simplepie#947](https://github.com/simplepie/simplepie/pull/947)
  - Various upstream contributions [simplepie#940](https://github.com/simplepie/simplepie/pull/940), [simplepie#944](https://github.com/simplepie/simplepie/pull/944)
- Deployment
  - Docker default image updated to Debian 13 Trixie with PHP 8.4.11 and Apache 2.4.65 [#&#8203;8032](https://github.com/FreshRSS/FreshRSS/pull/8032)
  - Docker alternative image updated to Alpine 3.23 with PHP 8.4.15 and Apache 2.4.65 [#&#8203;8285](https://github.com/FreshRSS/FreshRSS/pull/8285)
  - Fix Docker healthcheck `cli/health.php` compatibility with OpenID Connect [#&#8203;8040](https://github.com/FreshRSS/FreshRSS/pull/8040)
  - Improve Docker for compatibility with other base images such as Arch Linux [#&#8203;8299](https://github.com/FreshRSS/FreshRSS/pull/8299)
    - Improve `cli/access-permissions.sh` to detect the correct permission Web group such as `www-data`, `apache`, or `http`
  - Update PostgreSQL volume for Docker [#&#8203;8216](https://github.com/FreshRSS/FreshRSS/pull/8216), [#&#8203;8224](https://github.com/FreshRSS/FreshRSS/pull/8224)
  - Catch lack of `exec()` function for git update [#&#8203;8228](https://github.com/FreshRSS/FreshRSS/pull/8228)
  - Work around `DOMDocument::saveHTML()` scrambling charset encoding in some versions of libxml2 [#&#8203;8296](https://github.com/FreshRSS/FreshRSS/pull/8296)
  - Improve configuration checks for PHP extensions (in Web UI and CLI), including recommending e.g. `php-intl` [#&#8203;8334](https://github.com/FreshRSS/FreshRSS/pull/8334)
- UI
  - New button for toggling sidebar on desktop view [#&#8203;8201](https://github.com/FreshRSS/FreshRSS/pull/8201), [#&#8203;8286](https://github.com/FreshRSS/FreshRSS/pull/8286)
  - Better transitions between groups of articles [#&#8203;8174](https://github.com/FreshRSS/FreshRSS/pull/8174)
  - New links in transitions and jump ⏭ to next transition [#&#8203;8294](https://github.com/FreshRSS/FreshRSS/pull/8294)
  - More visible selected article [#&#8203;8230](https://github.com/FreshRSS/FreshRSS/pull/8230)
  - Show the parsed search query instead of the original user input [#&#8203;8293](https://github.com/FreshRSS/FreshRSS/pull/8293),
    [#&#8203;8306](https://github.com/FreshRSS/FreshRSS/pull/8306), [#&#8203;8341](https://github.com/FreshRSS/FreshRSS/pull/8341)
  - Show search query in the page title [#&#8203;8217](https://github.com/FreshRSS/FreshRSS/pull/8217)
  - Scroll into filtered feed/category on page load in the sidebar [#&#8203;8281](https://github.com/FreshRSS/FreshRSS/pull/8281), [#&#8203;8307](https://github.com/FreshRSS/FreshRSS/pull/8307)
  - Fix autocomplete issues in change password form [#&#8203;7812](https://github.com/FreshRSS/FreshRSS/pull/7812)
  - Fix navigating between read feeds using shortcut <kbd>shift</kbd>+<kbd>j</kbd>/<kbd>k</kbd> [#&#8203;8057](https://github.com/FreshRSS/FreshRSS/pull/8057)
  - Dark background in Web app manifest to avoid white flash when opening [#&#8203;8140](https://github.com/FreshRSS/FreshRSS/pull/8140)
  - Increase button visibility in UI to change theme [#&#8203;8149](https://github.com/FreshRSS/FreshRSS/pull/8149)
  - Replace arrow navigation in theme switcher with `<select>` [#&#8203;8190](https://github.com/FreshRSS/FreshRSS/pull/8190)
  - Improve scroll of article after load of user labels [#&#8203;7962](https://github.com/FreshRSS/FreshRSS/pull/7962)
  - Keep scroll state of page when closing the slider [#&#8203;8295](https://github.com/FreshRSS/FreshRSS/pull/8295), [#&#8203;8301](https://github.com/FreshRSS/FreshRSS/pull/8301)
  - Scroll into filtered feed/category on page load [#&#8203;8281](https://github.com/FreshRSS/FreshRSS/pull/8281)
  - Display sidebar dropdowns above if no space below [#&#8203;8335](https://github.com/FreshRSS/FreshRSS/pull/8335), [#&#8203;8336](https://github.com/FreshRSS/FreshRSS/pull/8336)
  - Use native CSS instead of SCSS [#&#8203;8200](https://github.com/FreshRSS/FreshRSS/pull/8200), [#&#8203;8241](https://github.com/FreshRSS/FreshRSS/pull/8241)
    - Using [CSS nesting](https://developer.mozilla.org/en-US/docs/Web/CSS/Guides/Nesting) and [relative colours](https://developer.mozilla.org/en-US/docs/Web/CSS/Guides/Colors/Using_relative_colors).
  - Various UI and style improvements: [#&#8203;8171](https://github.com/FreshRSS/FreshRSS/pull/8171), [#&#8203;8185](https://github.com/FreshRSS/FreshRSS/pull/8185), [#&#8203;8196](https://github.com/FreshRSS/FreshRSS/pull/8196)
  - JavaScript finalise migration from `Promise` to `async`/`await`: [#&#8203;8182](https://github.com/FreshRSS/FreshRSS/pull/8182)
- API
  - API performance optimisation: streaming of large responses [#&#8203;8041](https://github.com/FreshRSS/FreshRSS/pull/8041)
  - Fever API: Add `with_ids` parameter to mass-change read/unread/saved/unsaved on lists of articles [#&#8203;8312](https://github.com/FreshRSS/FreshRSS/pull/8312)
  - Misc API: better REST error semantics [#&#8203;8232](https://github.com/FreshRSS/FreshRSS/pull/8232)
- Extensions
  - Add support for extension priority [#&#8203;8038](https://github.com/FreshRSS/FreshRSS/pull/8038)
  - Add support for extension compatibility [#&#8203;8081](https://github.com/FreshRSS/FreshRSS/pull/8081)
  - Improve PHP code with hook enums [#&#8203;8036](https://github.com/FreshRSS/FreshRSS/pull/8036)
  - New hook `nav_entries` [#&#8203;8054](https://github.com/FreshRSS/FreshRSS/pull/8054)
  - Rename [Extensions](https://github.com/FreshRSS/Extensions) default branch from *master* to *main* [#&#8203;8194](https://github.com/FreshRSS/FreshRSS/pull/8194)
- I18n
  - Translation status as text in README [#&#8203;7842](https://github.com/FreshRSS/FreshRSS/pull/7842)
  - Add new translate CLI commands `move` [#&#8203;8214](https://github.com/FreshRSS/FreshRSS/pull/8214)
  - Change some regional language codes to comply with RFC 5646 / IETF BCP 47 / ISO 3166 / ISO 639-1 [#&#8203;8065](https://github.com/FreshRSS/FreshRSS/pull/8065)
  - Improve German [#&#8203;8028](https://github.com/FreshRSS/FreshRSS/pull/8028)
  - Improve Greek [#&#8203;8146](https://github.com/FreshRSS/FreshRSS/pull/8146)
  - Improve Finnish [#&#8203;8073](https://github.com/FreshRSS/FreshRSS/pull/8073), [#&#8203;8092](https://github.com/FreshRSS/FreshRSS/pull/8092)
  - Improve Hungarian [#&#8203;8244](https://github.com/FreshRSS/FreshRSS/pull/8244)
  - Improve Italian [#&#8203;8115](https://github.com/FreshRSS/FreshRSS/pull/8115), [#&#8203;8186](https://github.com/FreshRSS/FreshRSS/pull/8186)
  - Improve Polish [#&#8203;8134](https://github.com/FreshRSS/FreshRSS/pull/8134), [#&#8203;8135](https://github.com/FreshRSS/FreshRSS/pull/8135)
  - Improve Russian [#&#8203;8155](https://github.com/FreshRSS/FreshRSS/pull/8155), [#&#8203;8197](https://github.com/FreshRSS/FreshRSS/pull/8197)
  - Improve Simplified Chinese [#&#8203;8308](https://github.com/FreshRSS/FreshRSS/pull/8308), [#&#8203;8313](https://github.com/FreshRSS/FreshRSS/pull/8313)
- Misc.
  - Add code to modify a search expression [#&#8203;8293](https://github.com/FreshRSS/FreshRSS/pull/8293)
  - Remove *Pocket* sharing service [#&#8203;8127](https://github.com/FreshRSS/FreshRSS/pull/8127), [#&#8203;8128](https://github.com/FreshRSS/FreshRSS/pull/8128)
  - Update to PHPMailer 7.0.1 [#&#8203;8048](https://github.com/FreshRSS/FreshRSS/pull/8048), [#&#8203;8180](https://github.com/FreshRSS/FreshRSS/pull/8180), [#&#8203;8272](https://github.com/FreshRSS/FreshRSS/pull/8272)
  - 💥 Housekeeping of `lib_rss.php` with potential breaking changes for some extensions [#&#8203;8193](https://github.com/FreshRSS/FreshRSS/pull/8193),
  - Use native PHP `#[Deprecated]` [#&#8203;8325](https://github.com/FreshRSS/FreshRSS/pull/8325)
  - Improve PHP code [#&#8203;8156](https://github.com/FreshRSS/FreshRSS/pull/8156), [#&#8203;8203](https://github.com/FreshRSS/FreshRSS/pull/8203), [#&#8203;8284](https://github.com/FreshRSS/FreshRSS/pull/8284),
    [#&#8203;8292](https://github.com/FreshRSS/FreshRSS/pull/8292), [#&#8203;8297](https://github.com/FreshRSS/FreshRSS/pull/8297)
  - GitHub Actions: `--no-progress` [#&#8203;8315](https://github.com/FreshRSS/FreshRSS/pull/8315)
  - Update dev dependencies [#&#8203;8043](https://github.com/FreshRSS/FreshRSS/pull/8043), [#&#8203;8044](https://github.com/FreshRSS/FreshRSS/pull/8044),
    [#&#8203;8045](https://github.com/FreshRSS/FreshRSS/pull/8045), [#&#8203;8046](https://github.com/FreshRSS/FreshRSS/pull/8046), [#&#8203;8047](https://github.com/FreshRSS/FreshRSS/pull/8047),
    [#&#8203;8052](https://github.com/FreshRSS/FreshRSS/pull/8052), [#&#8203;8176](https://github.com/FreshRSS/FreshRSS/pull/8176), [#&#8203;8177](https://github.com/FreshRSS/FreshRSS/pull/8177),
    [#&#8203;8178](https://github.com/FreshRSS/FreshRSS/pull/8178), [#&#8203;8179](https://github.com/FreshRSS/FreshRSS/pull/8179), [#&#8203;8210](https://github.com/FreshRSS/FreshRSS/pull/8210),
    [#&#8203;8270](https://github.com/FreshRSS/FreshRSS/pull/8270), [#&#8203;8271](https://github.com/FreshRSS/FreshRSS/pull/8271), [#&#8203;8273](https://github.com/FreshRSS/FreshRSS/pull/8273),
    [#&#8203;8274](https://github.com/FreshRSS/FreshRSS/pull/8274), [#&#8203;8275](https://github.com/FreshRSS/FreshRSS/pull/8275), [#&#8203;8276](https://github.com/FreshRSS/FreshRSS/pull/8276)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi4zOS4xIiwidXBkYXRlZEluVmVyIjoiNDIuMzkuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=-->

Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/2851
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>

clusters/cl01tl/helm/actual/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
-digest: sha256:09dae69cd64556ed0b8ce2d8afe304720af3a71f64610ee6c70219572ccfdf5e
-generated: "2025-12-18T02:42:53.481944952Z"
+  version: 0.7.0
+digest: sha256:4840c828f8fbb695fa06fb959aad415acd12ff0d4930d136783488f16b9f875c
+generated: "2025-12-27T13:29:28.243328-06:00"

clusters/cl01tl/helm/actual/Chart.yaml

@@ -19,7 +19,7 @@ dependencies:
     version: 4.5.0
   - name: volsync-target
     alias: volsync-target-data
-    version: 0.6.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/actual-budget.png
 # renovate: github=actualbudget/actual

clusters/cl01tl/helm/actual/values.yaml

@@ -77,3 +77,10 @@ actual:
               readOnly: false
 volsync-target-data:
   pvcTarget: actual-data
+  local:
+    enabled: false
+  remote:
+    enabled: false
+  external:
+    enabled: true
+    schedule: 0 9 * * *

clusters/cl01tl/helm/argo-workflows/Chart.lock

@@ -7,6 +7,6 @@ dependencies:
   version: 2.4.19
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.3
-digest: sha256:6de7da41d9317d7942a455226e5eae682f32f1bbb7d0287b9306de847bd56fdb
-generated: "2025-12-22T23:17:37.4042-06:00"
+  version: 7.4.4
+digest: sha256:9eb2c00f12b0c30a59a83ce84ecec7178d2ea4555ff613b706356e66b3f978a2
+generated: "2025-12-27T13:29:30.232148-06:00"

clusters/cl01tl/helm/argo-workflows/Chart.yaml

@@ -25,7 +25,7 @@ dependencies:
     repository: https://argoproj.github.io/argo-helm
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.3
+    version: 7.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 # renovate: github=argoproj/argo-workflows

clusters/cl01tl/helm/argocd/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: argo-cd
   repository: https://argoproj.github.io/argo-helm
-  version: 9.2.0
-digest: sha256:1413d0b780ce108754e8ffef217631baf5a6e6ee50accf0ddaf288a2fac8c1ed
-generated: "2025-12-24T19:26:25.627880272Z"
+  version: 9.2.2
+digest: sha256:f2ac58995d33d7240087fe7d7618bfbc24b424b1d65ce0e85b297de0223fcdd1
+generated: "2025-12-27T19:43:02.217321931Z"

clusters/cl01tl/helm/argocd/Chart.yaml

@@ -15,7 +15,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: argo-cd
-    version: 9.2.0
+    version: 9.2.2
     repository: https://argoproj.github.io/argo-helm
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 # renovate: github=argoproj/argo-cd

clusters/cl01tl/helm/audiobookshelf/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
+  version: 0.7.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
-digest: sha256:67571554c39c1acdb1cd286024e7bdc0d7c94f0c4bfff5bf5fb225817f495616
-generated: "2025-12-18T02:43:02.876706511Z"
+  version: 0.7.0
+digest: sha256:75ef1406c49929e118569581946d1baaf9e082a45e3482cb10b9b9ae464eadfb
+generated: "2025-12-27T13:29:36.350679-06:00"

clusters/cl01tl/helm/audiobookshelf/Chart.yaml

@@ -21,11 +21,11 @@ dependencies:
     version: 4.5.0
   - name: volsync-target
     alias: volsync-target-config
-    version: 0.6.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-metadata
-    version: 0.6.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/audiobookshelf.png
 # renovate: github=advplyr/audiobookshelf

clusters/cl01tl/helm/audiobookshelf/values.yaml

@@ -123,5 +123,19 @@ audiobookshelf:
               readOnly: false
 volsync-target-config:
   pvcTarget: audiobookshelf-config
+  local:
+    enabled: false
+  remote:
+    enabled: false
+  external:
+    enabled: true
+    schedule: 2 9 * * *
 volsync-target-metadata:
   pvcTarget: audiobookshelf-metadata
+  local:
+    enabled: false
+  remote:
+    enabled: false
+  external:
+    enabled: true
+    schedule: 4 9 * * *

clusters/cl01tl/helm/authentik/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 2.1.4
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.3
+  version: 7.4.4
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.5.0
-digest: sha256:d250e40d77b3010d55c258e264e36de060a6dbdb78fe56bdbfbc427692cfdcc7
-generated: "2025-12-23T16:28:00.416521-06:00"
+digest: sha256:801200315ebeb56dc1e43f3f769c535ac9620829cf51cdb31d6fa5c6aa2ba483
+generated: "2025-12-27T13:29:38.418076-06:00"

clusters/cl01tl/helm/authentik/Chart.yaml

@@ -28,7 +28,7 @@ dependencies:
     version: 2.1.4
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.3
+    version: 7.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     version: 0.5.0

clusters/cl01tl/helm/authentik/values.yaml

@@ -109,7 +109,7 @@ redis-replication:
   existingSecret:
     enabled: false
   redisReplication:
-    clusterSize: 3
+    clusterSize: 1
   redisSentinel:
-    enabled: true
+    enabled: false
     clusterSize: 3

clusters/cl01tl/helm/backrest/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
+  version: 0.7.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
-digest: sha256:ba31d044402f9da6705f64d21a0947730a37526fce047891162cfd2b21b8d08a
-generated: "2025-12-18T02:43:14.604382042Z"
+  version: 0.7.0
+digest: sha256:26680d49c76f150932d55fac070325d5ed89e635e713f37e1796f0d55775af9e
+generated: "2025-12-27T13:29:41.313658-06:00"

clusters/cl01tl/helm/backrest/Chart.yaml

@@ -19,11 +19,11 @@ dependencies:
     version: 4.5.0
   - name: volsync-target
     alias: volsync-target-config
-    version: 0.6.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data
-    version: 0.6.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/backrest.png
 # renovate: github=garethgeorge/backrest

clusters/cl01tl/helm/backrest/values.yaml

@@ -107,5 +107,19 @@ backrest:
               readOnly: true
 volsync-target-data:
   pvcTarget: backrest-data
+  local:
+    enabled: false
+  remote:
+    enabled: false
+  external:
+    enabled: true
+    schedule: 6 9 * * *
 volsync-target-config:
   pvcTarget: backrest-config
+  local:
+    enabled: false
+  remote:
+    enabled: false
+  external:
+    enabled: true
+    schedule: 8 9 * * *

clusters/cl01tl/helm/bazarr/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
-digest: sha256:20237b7a0548ae3458b4765e01aef39b5e072da5390305eb7815b086eef4983a
-generated: "2025-12-18T02:43:26.844170003Z"
+  version: 0.7.0
+digest: sha256:9d9d5e30903d7967baaf5c274e9adc8403cce32d91bdd3d1780acffb249f312d
+generated: "2025-12-27T13:29:43.329783-06:00"

clusters/cl01tl/helm/bazarr/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     version: 4.5.0
   - name: volsync-target
     alias: volsync-target-config
-    version: 0.6.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/bazarr.png
 # renovate: github=linuxserver/bazarr

clusters/cl01tl/helm/bazarr/values.yaml

@@ -83,3 +83,10 @@ volsync-target-config:
     runAsGroup: 1000
     fsGroup: 1000
     fsGroupChangePolicy: OnRootMismatch
+  local:
+    enabled: false
+  remote:
+    enabled: false
+  external:
+    enabled: true
+    schedule: 10 9 * * *

clusters/cl01tl/helm/blocky/values.yaml

@@ -96,11 +96,9 @@ blocky:
               cl01tl-endpoint                 IN      A       10.232.1.22
               cl01tl-endpoint                 IN      A       10.232.1.23
 
-              cl01tl-gateway                  IN      A       10.232.1.200
-
               traefik-cl01tl                  IN      A       10.232.1.21
               blocky                          IN      A       10.232.1.22
-              plex-lb                         IN      A       10.232.1.23
+              cilium-cl01tl                   IN      A       10.232.1.23
 
               ;; Application Names
               actual                          IN      CNAME   traefik-cl01tl
@@ -115,6 +113,7 @@ blocky:
               ceph                            IN      CNAME   traefik-cl01tl
               code-server                     IN      CNAME   traefik-cl01tl
               ephemera                        IN      CNAME   traefik-cl01tl
+              feishin                         IN      CNAME   traefik-cl01tl
               garage-s3                       IN      CNAME   traefik-cl01tl
               garage-webui                    IN      CNAME   traefik-cl01tl
               gatus                           IN      CNAME   traefik-cl01tl
@@ -125,7 +124,7 @@ blocky:
               home                            IN      CNAME   traefik-cl01tl
               home-assistant                  IN      CNAME   traefik-cl01tl
               home-assistant-code-server      IN      CNAME   traefik-cl01tl
-              hubble                          IN      CNAME   cl01tl-gateway
+              hubble                          IN      CNAME   traefik-cl01tl
               huntarr                         IN      CNAME   traefik-cl01tl
               immich                          IN      CNAME   traefik-cl01tl
               jellyfin                        IN      CNAME   traefik-cl01tl
@@ -136,7 +135,7 @@ blocky:
               lidatube                        IN      CNAME   traefik-cl01tl
               listenarr                       IN      CNAME   traefik-cl01tl
               mail                            IN      CNAME   traefik-cl01tl
-              n8n                             IN      CNAME   traefik-cl01tl
+              navidrome                       IN      CNAME   traefik-cl01tl
               ntfy                            IN      CNAME   traefik-cl01tl
               objects                         IN      CNAME   traefik-cl01tl
               ollama                          IN      CNAME   traefik-cl01tl
@@ -153,12 +152,14 @@ blocky:
               radarr-4k                       IN      CNAME   traefik-cl01tl
               radarr-anime                    IN      CNAME   traefik-cl01tl
               radarr-standup                  IN      CNAME   traefik-cl01tl
+              rayflume                        IN      CNAME   traefik-cl01tl
               searxng                         IN      CNAME   traefik-cl01tl
               seerr                           IN      CNAME   traefik-cl01tl
               slskd                           IN      CNAME   traefik-cl01tl
               sonarr                          IN      CNAME   traefik-cl01tl
               sonarr-4k                       IN      CNAME   traefik-cl01tl
               sonarr-anime                    IN      CNAME   traefik-cl01tl
+              soulsync                        IN      CNAME   traefik-cl01tl
               stalwart                        IN      CNAME   traefik-cl01tl
               tautulli                        IN      CNAME   traefik-cl01tl
               tdarr                           IN      CNAME   traefik-cl01tl
@@ -317,6 +318,6 @@ redis-replication:
   existingSecret:
     enabled: false
   redisReplication:
-    clusterSize: 3
+    clusterSize: 1
   redisSentinel:
     enabled: false

clusters/cl01tl/helm/booklore/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.5.0
 - name: mariadb-cluster
   repository: https://helm.mariadb.com/mariadb-operator
-  version: 25.10.2
+  version: 25.10.3
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
+  version: 0.7.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
-digest: sha256:bc29fb12a2a7fde74e243be7ee4c22f4de82cdb6867ab95ddbd47e1d755b8a82
-generated: "2025-12-18T02:43:39.236584539Z"
+  version: 0.7.0
+digest: sha256:805832fd8df9e1e4435dd2b10c877e0248ca5b3855d4c2faba4ff09c23afb898
+generated: "2025-12-27T13:29:47.00956-06:00"

clusters/cl01tl/helm/booklore/Chart.yaml

@@ -22,11 +22,11 @@ dependencies:
     repository: https://helm.mariadb.com/mariadb-operator
   - name: volsync-target
     alias: volsync-target-config
-    version: 0.6.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data
-    version: 0.6.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/booklore.png
 # renovate: github=booklore-app/BookLore

clusters/cl01tl/helm/booklore/values.yaml

@@ -202,14 +202,27 @@ mariadb-cluster:
             key: secret
 volsync-target-config:
   pvcTarget: booklore-config
+  local:
+    enabled: false
+  remote:
+    enabled: false
+  external:
+    enabled: true
+    schedule: 12 9 * * *
 volsync-target-data:
   pvcTarget: booklore-data
   local:
+    enabled: true
+    schedule: 14 8 * * *
     restic:
       cacheCapacity: 10Gi
   remote:
+    enabled: true
+    schedule: 14 10 * * *
     restic:
       cacheCapacity: 10Gi
   external:
+    enabled: true
+    schedule: 14 9 * * *
     restic:
       cacheCapacity: 10Gi

clusters/cl01tl/helm/cilium/templates/cilium-l2-announcement-policy.yaml

@@ -0,0 +1,19 @@
+apiVersion: "cilium.io/v2alpha1"
+kind: CiliumL2AnnouncementPolicy
+metadata:
+  name: general-l2-policy
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: general-l2-policy
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  nodeSelector:
+    matchExpressions:
+      - key: kubernetes.io/hostname
+        operator: Exists
+  interfaces:
+    - end0
+    - enp6s0
+  externalIPs: true
+  loadBalancerIPs: true

clusters/cl01tl/helm/cilium/templates/gateway.yaml

@@ -1,7 +1,7 @@
 # apiVersion: gateway.networking.k8s.io/v1
 # kind: Gateway
 # metadata:
-#   name: tls-gateway
+#   name: cilium-tls-gateway
 #   namespace: {{ .Release.Namespace }}
 #   labels:
 #     app.kubernetes.io/name: tls-gateway

clusters/cl01tl/helm/cilium/values.yaml

@@ -26,7 +26,7 @@ cilium:
         - SYS_ADMIN
         - SYS_RESOURCE
   l2announcements:
-    enabled: false
+    enabled: true
   bgpControlPlane:
     enabled: false
     secretsNamespace:

clusters/cl01tl/helm/code-server/Chart.lock

@@ -7,6 +7,6 @@ dependencies:
   version: 2.1.4
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
-digest: sha256:8f24ac0aa7245c517cd68f4e9fb97de110620922b9bbdf3270e83aa4ad201324
-generated: "2025-12-18T02:43:53.325443712Z"
+  version: 0.7.0
+digest: sha256:1deedc65dece8540fd850648bf533da244f9ac8ba48f2133f1f6cac083f5953d
+generated: "2025-12-27T13:29:58.860038-06:00"

clusters/cl01tl/helm/code-server/Chart.yaml

@@ -25,7 +25,7 @@ dependencies:
     version: 2.1.4
   - name: volsync-target
     alias: volsync-target-config
-    version: 0.6.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/visual-studio-code.png
 # renovate: github=coder/code-server

clusters/cl01tl/helm/code-server/values.yaml

@@ -75,3 +75,10 @@ volsync-target-config:
     runAsGroup: 1000
     fsGroup: 1000
     fsGroupChangePolicy: OnRootMismatch
+  local:
+    enabled: false
+  remote:
+    enabled: false
+  external:
+    enabled: true
+    schedule: 16 9 * * *

clusters/cl01tl/helm/directus/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 2.1.4
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.3
+  version: 7.4.4
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.5.0
-digest: sha256:d9c95b9a697ebe9fb98ebb2a5e2f7058c26b9207742eadcd56f278ff36d00855
-generated: "2025-12-23T16:47:50.269275-06:00"
+digest: sha256:a8e216b4d7e0a6485461d30124a9463aff0ed8d7c6a1bfc3b82781c6e69b8e4d
+generated: "2025-12-27T13:30:07.87909-06:00"

clusters/cl01tl/helm/directus/Chart.yaml

@@ -26,7 +26,7 @@ dependencies:
     version: 2.1.4
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.3
+    version: 7.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     version: 0.5.0

clusters/cl01tl/helm/directus/values.yaml

@@ -216,7 +216,7 @@ redis-replication:
     name: directus-redis-config
     key: password
   redisReplication:
-    clusterSize: 3
+    clusterSize: 1
   redisSentinel:
-    enabled: true
+    enabled: false
     clusterSize: 3

clusters/cl01tl/helm/ephemera/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
-digest: sha256:c6d6edb1e46805147b2b8bc9371e807113480c9a97687c5a856cf7b64a204cbd
-generated: "2025-12-18T02:44:09.319124495Z"
+  version: 0.7.0
+digest: sha256:3b32ded75846bcee3e9fb892663173485da0dcd351ccc3a0337432f5d2da2e66
+generated: "2025-12-27T13:30:15.119299-06:00"

clusters/cl01tl/helm/ephemera/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     version: 4.5.0
   - name: volsync-target
     alias: volsync-target-config
-    version: 0.6.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ephemera.png
 # renovate: github=OrwellianEpilogue/ephemera

clusters/cl01tl/helm/ephemera/values.yaml

@@ -9,7 +9,7 @@ ephemera:
         main:
           image:
             repository: ghcr.io/orwellianepilogue/ephemera
-            tag: 1.3.1
+            tag: 1.4.1
             pullPolicy: IfNotPresent
           env:
             - name: AA_BASE_URL
@@ -129,3 +129,10 @@ ephemera:
               readOnly: false
 volsync-target-config:
   pvcTarget: ephemera
+  local:
+    enabled: false
+  remote:
+    enabled: false
+  external:
+    enabled: true
+    schedule: 16 9 * * *

clusters/cl01tl/helm/freshrss/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 2.1.4
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.3
+  version: 7.4.4
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
-digest: sha256:a73351fc38c927eb7fef8c536069b21ca4d99e3ffb193ee64d9b93dbdc728ec4
-generated: "2025-12-23T17:04:20.474187-06:00"
+  version: 0.7.0
+digest: sha256:7316b529c111bdd30cb32a09d8ff5b0e75659637c6a49175c0e385082e2083d0
+generated: "2025-12-27T13:30:23.231964-06:00"

clusters/cl01tl/helm/freshrss/Chart.yaml

@@ -26,11 +26,11 @@ dependencies:
     version: 2.1.4
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.3
+    version: 7.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data
-    version: 0.6.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/freshrss.png
 # renovate: github=FreshRSS/FreshRSS

clusters/cl01tl/helm/freshrss/values.yaml

@@ -80,7 +80,7 @@ freshrss:
         main:
           image:
             repository: freshrss/freshrss
-            tag: 1.27.1
+            tag: 1.28.0
             pullPolicy: IfNotPresent
           env:
             - name: PGID
@@ -246,3 +246,10 @@ volsync-target-data:
       - 100
       - 109
       - 65539
+  local:
+    enabled: false
+  remote:
+    enabled: false
+  external:
+    enabled: true
+    schedule: 18 9 * * *

clusters/cl01tl/helm/garage/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
-digest: sha256:61c919869d56032bfa09b2e159a6b2dd2a43debf34968be2d66cf2211100a2c5
-generated: "2025-12-18T02:44:33.509296082Z"
+  version: 0.7.0
+digest: sha256:e1042088193503be3e0de1df8a682f7454851032eba55b9be5cf3f4e48834514
+generated: "2025-12-27T13:30:25.860097-06:00"

clusters/cl01tl/helm/garage/Chart.yaml

@@ -20,7 +20,7 @@ dependencies:
     version: 4.5.0
   - name: volsync-target
     alias: volsync-target-db
-    version: 0.6.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 # renovate: github=deuxfleurs-org/garage

clusters/cl01tl/helm/garage/values.yaml

@@ -217,4 +217,5 @@ volsync-target-db:
     restic:
       cacheCapacity: 10Gi
   external:
-    enabled: false
+    enabled: true
+    schedule: 20 9 * * *

clusters/cl01tl/helm/gatus/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 1.4.4
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.3
+  version: 7.4.4
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
-digest: sha256:a4f701f64327062a92b491d97728f02367e09412aca46705c1cbd8c2c438d76a
-generated: "2025-12-23T17:10:07.510553-06:00"
+  version: 0.7.0
+digest: sha256:7a51be0fc61bedd966ebaef21458a4a8c8bdfa47baa946d236f3a6934afbc97e
+generated: "2025-12-27T13:30:27.780615-06:00"

clusters/cl01tl/helm/gatus/Chart.yaml

@@ -22,11 +22,11 @@ dependencies:
     version: 1.4.4
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.3
+    version: 7.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data
-    version: 0.6.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/gatus.png
 # renovate: github=TwiN/gatus

clusters/cl01tl/helm/gatus/values.yaml

@@ -134,15 +134,21 @@ gatus:
       - name: tubearchivist
         url: https://tubearchivist.alexlebens.net
         <<: *defaults
+      - name: navidrome
+        url: https://navidrome.alexlebens.net
+        <<: *defaults
+      - name: feishin
+        url: https://feishin.alexlebens.net
+        <<: *defaults
+      - name: audiobookshelf
+        url: https://audiobookshelf.alexlebens.net
+        <<: *defaults
       - name: immich
         url: https://immich.alexlebens.net
         <<: *defaults
       - name: photoview
         url: https://photoview.alexlebens.net
         <<: *defaults
-      - name: audiobookshelf
-        url: https://audiobookshelf.alexlebens.net
-        <<: *defaults
       - name: booklore
         url: https://booklore.alexlebens.net
         <<: *defaults
@@ -179,9 +185,6 @@ gatus:
       - name: argo-workflows
         url: https://argo-workflows.alexlebens.net
         <<: *defaults
-      - name: n8n
-        url: https://n8n.alexlebens.net
-        <<: *defaults
       - name: omni-tools
         url: https://omni-tools.alexlebens.net
         <<: *defaults
@@ -310,6 +313,12 @@ gatus:
       - name: lidatube
         url: https://lidatube.alexlebens.net
         <<: *defaults
+      - name: rayflume
+        url: https://rayflume.alexlebens.net
+        <<: *defaults
+      - name: soulsync
+        url: https://soulsync.alexlebens.net
+        <<: *defaults
       - name: slskd
         url: https://slskd.alexlebens.net
         <<: *defaults
@@ -414,3 +423,10 @@ postgres-18-cluster:
       #   backupName: external
 volsync-target-data:
   pvcTarget: gatus
+  local:
+    enabled: false
+  remote:
+    enabled: false
+  external:
+    enabled: true
+    schedule: 22 9 * * *

clusters/cl01tl/helm/gitea/Chart.lock

@@ -13,7 +13,7 @@ dependencies:
   version: 2.1.4
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.3
+  version: 7.4.4
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.5.0
@@ -22,6 +22,6 @@ dependencies:
   version: 0.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
-digest: sha256:978756233cbc1b10dedb4bd60568809ab368b0023732dbfeefa81d3c3fa95459
-generated: "2025-12-23T17:13:14.918887-06:00"
+  version: 0.7.0
+digest: sha256:3097e2f715c528bb4a11282339f4c9051febf018b66739465edaf564387baee0
+generated: "2025-12-27T13:30:32.016722-06:00"

clusters/cl01tl/helm/gitea/Chart.yaml

@@ -39,7 +39,7 @@ dependencies:
     version: 2.1.4
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.3
+    version: 7.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     alias: redis-replication-gitea
@@ -51,7 +51,7 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-storage
-    version: 0.6.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/gitea.png
 # renovate: github=go-gitea/gitea

clusters/cl01tl/helm/gitea/values.yaml

@@ -1,7 +1,7 @@
 gitea:
   global:
     imageRegistry: registry.hub.docker.com
-  replicaCount: 3
+  replicaCount: 2
   image:
     repository: gitea/gitea
     tag: 1.25.3

clusters/cl01tl/helm/grafana-operator/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 5.21.3
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.3
+  version: 7.4.4
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.5.0
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.5.0
-digest: sha256:cf38a5967c4da4236045746fcd619b4abd655feb4da970a398e282193ddb887e
-generated: "2025-12-23T17:15:11.407801-06:00"
+digest: sha256:9d95c0748d49659a883a07911e153c6e53246c1950a397c169b196eb1e85ac8c
+generated: "2025-12-27T13:30:36.832761-06:00"

clusters/cl01tl/helm/grafana-operator/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     repository: https://grafana.github.io/helm-charts
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.3
+    version: 7.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     alias: redis-replication-unified-alerting

clusters/cl01tl/helm/harbor/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 1.18.1
 - name: postgres-cluster
   repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
-  version: 7.4.3
+  version: 7.4.4
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.5.0
-digest: sha256:8f27e668381e0ce960f2dfcb6bb5b33feb708497b088b6af2a72a5816bc3df6d
-generated: "2025-12-23T17:17:55.749328-06:00"
+digest: sha256:79b7937fdac0c2678950fa6905fb3acd2040b931a9d76ee5f1c9db8d1ed4f136
+generated: "2025-12-27T13:30:39.602924-06:00"

clusters/cl01tl/helm/harbor/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     repository: https://helm.goharbor.io
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.3
+    version: 7.4.4
     repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
   - name: redis-replication
     version: 0.5.0

clusters/cl01tl/helm/harbor/values.yaml

@@ -142,7 +142,7 @@ redis-replication:
   existingSecret:
     enabled: false
   redisReplication:
-    clusterSize: 3
+    clusterSize: 1
   redisSentinel:
-    enabled: true
+    enabled: false
     clusterSize: 3

clusters/cl01tl/helm/home-assistant/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
-digest: sha256:626ca9cabfd6d48e3b5895b32d35c7764dde4569127241ce75117801b9b83170
-generated: "2025-12-18T02:45:13.984217826Z"
+  version: 0.7.0
+digest: sha256:89ed20fc7ce6de8a9f4518ab4cc01e60072ccfe463e024748b382ac8d3fe6ffb
+generated: "2025-12-27T13:30:44.539834-06:00"

clusters/cl01tl/helm/home-assistant/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     version: 4.5.0
   - name: volsync-target
     alias: volsync-target-config
-    version: 0.6.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/home-assistant.png
 # renovate: github=home-assistant/core

clusters/cl01tl/helm/home-assistant/values.yaml

@@ -132,3 +132,10 @@ volsync-target-config:
     runAsGroup: 1000
     fsGroup: 1000
     fsGroupChangePolicy: OnRootMismatch
+  local:
+    enabled: false
+  remote:
+    enabled: false
+  external:
+    enabled: true
+    schedule: 24 9 * * *

clusters/cl01tl/helm/homepage/values.yaml

@@ -129,18 +129,6 @@ homepage:
                 maximumFractionDigits: 0
         services.yaml: |
           - Media:
-              - Plex:
-                  icon: sh-plex.webp
-                  description: Media server
-                  href: https://plex.alexlebens.net
-                  siteMonitor: http://plex.plex:32400
-                  statusStyle: dot
-              - Jellyfin:
-                  icon: sh-jellyfin.webp
-                  description: Media server
-                  href: https://jellyfin.alexlebens.net
-                  siteMonitor: http://jellyfin.jellyfin:80
-                  statusStyle: dot
               - Media Requests:
                   icon: sh-overseerr.webp
                   description: Overseerr
@@ -159,12 +147,30 @@ homepage:
                   href: https://yamtrack.alexlebens.net
                   siteMonitor: http://yamtrack.yamtrack:80
                   statusStyle: dot
+              - Movies and TV:
+                  icon: sh-jellyfin.webp
+                  description: Jellyfin
+                  href: https://jellyfin.alexlebens.net
+                  siteMonitor: http://jellyfin.jellyfin:80
+                  statusStyle: dot
               - Youtube Archive:
                   icon: sh-tube-archivist-light.webp
-                  description: TubeAchivist
+                  description: TubeArchivist
                   href: https://tubearchivist.alexlebens.net/login
                   siteMonitor: http://tubearchivist.tubearchivist:80
                   statusStyle: dot
+              - Music:
+                  icon: sh-feishin.webp
+                  description: Feishin
+                  href: https://feishin.alexlebens.net
+                  siteMonitor: http://navidrome-feishin.navidrome:80
+                  statusStyle: dot
+              - Podcasts and Audiobooks:
+                  icon: sh-audiobookshelf.webp
+                  description: Audiobookshelf
+                  href: https://audiobookshelf.alexlebens.net
+                  siteMonitor: http://audiobookshelf.audiobookshelf:80
+                  statusStyle: dot
               - Photos:
                   icon: sh-immich.webp
                   description: Immich
@@ -177,12 +183,6 @@ homepage:
                   href: https://photoview.alexlebens.net
                   siteMonitor: http://photoview.photoview:80
                   statusStyle: dot
-              - Podcasts and Audiobooks:
-                  icon: sh-audiobookshelf.webp
-                  description: Audiobookshelf
-                  href: https://audiobookshelf.alexlebens.net
-                  siteMonitor: http://audiobookshelf.audiobookshelf:80
-                  statusStyle: dot
               - Books:
                   icon: sh-booklore.webp
                   description: Booklore
@@ -331,12 +331,6 @@ homepage:
                   href: https://argo-workflows.alexlebens.net
                   siteMonitor: http://argo-workflows-server.argo-workflows:2746
                   statusStyle: dot
-              - API Workflows:
-                  icon: sh-n8n.webp
-                  description: n8n
-                  href: https://n8n.alexlebens.net
-                  siteMonitor: http://n8n-main.n8n:80
-                  statusStyle: dot
               - Uptime:
                   icon: sh-gatus.webp
                   description: Gatus
@@ -661,13 +655,25 @@ homepage:
                     url: http://lidarr.lidarr:80
                     key: {{ "{{HOMEPAGE_VAR_LIDARR_KEY}}" }}
                     fields: ["wanted", "queued", "artists"]
+              - RayFlume:
+                  icon: sh-youtubarr.webp
+                  description: Playlist to Lidarr Import
+                  href: https://rayflume.alexlebens.net
+                  siteMonitor: http://rayflume.rayflume:80
+                  statusStyle: dot
               - LidaTube:
                   icon: sh-lidatube.webp
                   description: Searches for Music
                   href: https://lidatube.alexlebens.net
                   siteMonitor: http://lidatube.lidatube:80
                   statusStyle: dot
-              - Soulseek:
+              - SoulSync:
+                  icon: sh-soulsync.webp
+                  description: Playlist Sync
+                  href: https://soulsync.alexlebens.net
+                  siteMonitor: http://soulsync.soulsync:80
+                  statusStyle: dot
+              - slskd:
                   icon: sh-slskd.webp
                   description: slskd
                   href: https://slskd.alexlebens.net

clusters/cl01tl/helm/huntarr/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
-digest: sha256:5df38c1b38d310e20b905a22a6224849c4c806ce8b31688cd8caa16e286d5cd3
-generated: "2025-12-18T02:45:24.918485555Z"
+  version: 0.7.0
+digest: sha256:f86c0c4efcba787557a71051409c43793c970244cfbb45b305a3bf612f64bff7
+generated: "2025-12-27T13:30:49.841027-06:00"

clusters/cl01tl/helm/huntarr/Chart.yaml

@@ -19,7 +19,7 @@ dependencies:
     version: 4.5.0
   - name: volsync-target
     alias: volsync-target-config
-    version: 0.6.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/huntarr.png
 # renovate: github=plexguide/Huntarr.io

clusters/cl01tl/helm/huntarr/values.yaml

@@ -60,3 +60,10 @@ huntarr:
               readOnly: false
 volsync-target-config:
   pvcTarget: huntarr-config
+  local:
+    enabled: false
+  remote:
+    enabled: false
+  external:
+    enabled: true
+    schedule: 26 9 * * *

clusters/cl01tl/helm/immich/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.5.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.3
+  version: 7.4.4
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
-digest: sha256:49d8343aa4dc006a008cc50eb53ab1f541ff27190f321e2b3870d9a304c81ee2
-generated: "2025-12-23T17:41:46.797956-06:00"
+  version: 0.7.0
+digest: sha256:d0a0344710c15f512be3cb73a850bdf5d6088bc7c72cbba45c95eca328898231
+generated: "2025-12-27T13:30:51.784943-06:00"

clusters/cl01tl/helm/immich/Chart.yaml

@@ -20,14 +20,14 @@ dependencies:
     version: 4.5.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.3
+    version: 7.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     version: 0.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data
-    version: 0.6.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/immich.png
 # renovate: github=immich-app/immich

clusters/cl01tl/helm/immich/values.yaml

@@ -226,18 +226,24 @@ redis-replication:
   existingSecret:
     enabled: false
   redisReplication:
-    clusterSize: 3
+    clusterSize: 1
   redisSentinel:
-    enabled: true
+    enabled: false
     clusterSize: 3
 volsync-target-data:
   pvcTarget: immich
   local:
+    enabled: true
+    schedule: 28 8 * * *
     restic:
       cacheCapacity: 10Gi
   remote:
+    enabled: true
+    schedule: 28 10 * * *
     restic:
       cacheCapacity: 10Gi
   external:
+    enabled: true
+    schedule: 28 9 * * *
     restic:
       cacheCapacity: 10Gi

clusters/cl01tl/helm/jellyfin/Chart.lock

@@ -7,6 +7,6 @@ dependencies:
   version: 0.19.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
-digest: sha256:47ce0fd90e4f659ccb73539935eb8fcd2a9cfd0a85f792851903fa2677ca2dbb
-generated: "2025-12-23T22:03:27.681556-06:00"
+  version: 0.7.0
+digest: sha256:dc914dfc86c2b638fae6f580418dafebcddb09a25e6f534f89983fb592196245
+generated: "2025-12-27T13:30:57.814394-06:00"

clusters/cl01tl/helm/jellyfin/Chart.yaml

@@ -29,7 +29,7 @@ dependencies:
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: volsync-target
     alias: volsync-target-config
-    version: 0.6.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/jellyfin.png
 # renovate: github=jellyfin/jellyfin

clusters/cl01tl/helm/jellyfin/values.yaml

@@ -148,5 +148,7 @@ volsync-target-config:
     restic:
       cacheCapacity: 10Gi
   external:
+    enabled: true
+    schedule: 30 9 * * *
     restic:
       cacheCapacity: 10Gi

clusters/cl01tl/helm/jellystat/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.5.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.3
+  version: 7.4.4
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
-digest: sha256:520db247b91a1f121892c8283868f7737b6de01b9928d3af06a3706119c7f373
-generated: "2025-12-23T17:57:17.828908-06:00"
+  version: 0.7.0
+digest: sha256:339fbdb0ea0b2afafce8a81489c22c1f853ecaaed2b9b35ee201fdb2081cf48a
+generated: "2025-12-27T13:31:00.704611-06:00"

clusters/cl01tl/helm/jellystat/Chart.yaml

@@ -21,11 +21,11 @@ dependencies:
     version: 4.5.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.3
+    version: 7.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data
-    version: 0.6.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/jellystat.png
 # renovate: github=CyferShepard/Jellystat

clusters/cl01tl/helm/jellystat/values.yaml

@@ -141,6 +141,12 @@ postgres-18-cluster:
       #   immediate: true
       #   schedule: "0 0 0 * * *"
       #   backupName: external
-
 volsync-target-data:
   pvcTarget: jellystat-data
+  local:
+    enabled: false
+  remote:
+    enabled: false
+  external:
+    enabled: true
+    schedule: 32 9 * * *

clusters/cl01tl/helm/karakeep/Chart.lock

@@ -10,6 +10,6 @@ dependencies:
   version: 2.1.4
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
-digest: sha256:68db68d55b6dba608a8e86457eb122b9278e9fc3153129f4fa30cc685eee85f0
-generated: "2025-12-18T02:46:05.710950531Z"
+  version: 0.7.0
+digest: sha256:e750d8cab228de94d920f80137981e24e795d97040e92dd4cf0d80e463b2bd19
+generated: "2025-12-27T13:31:02.732529-06:00"

clusters/cl01tl/helm/karakeep/Chart.yaml

@@ -29,7 +29,7 @@ dependencies:
     version: 2.1.4
   - name: volsync-target
     alias: volsync-target-data
-    version: 0.6.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/webp/karakeep.webp
 # renovate: github=karakeep-app/karakeep

clusters/cl01tl/helm/karakeep/values.yaml

@@ -170,3 +170,10 @@ meilisearch:
     enabled: true
 volsync-target-data:
   pvcTarget: karakeep
+  local:
+    enabled: false
+  remote:
+    enabled: false
+  external:
+    enabled: true
+    schedule: 34 9 * * *

clusters/cl01tl/helm/komodo/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.5.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.3
-digest: sha256:982fc8d3fec365d0362f8ea38ecd00dd24d53d373ab3f8ac7b47bd6d6a9e8b2a
-generated: "2025-12-23T18:08:15.003474-06:00"
+  version: 7.4.4
+digest: sha256:1f17469b13951d6ee87996a6e79b6233c89b2dfa49c5a4885083a29c33e25be3
+generated: "2025-12-27T13:31:07.374138-06:00"

clusters/cl01tl/helm/komodo/Chart.yaml

@@ -23,7 +23,7 @@ dependencies:
     version: 4.5.0
   - name: postgres-cluster
     alias: postgresql-17-fdb-cluster
-    version: 7.4.3
+    version: 7.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/komodo.png
 # renovate: github=moghtech/komodo

clusters/cl01tl/helm/kube-prometheus-stack/values.yaml

@@ -174,12 +174,12 @@ redis-replication:
   existingSecret:
     enabled: false
   redisReplication:
-    clusterSize: 3
+    clusterSize: 1
     volumeClaimTemplate:
       spec:
         resources:
           requests:
             storage: 10Gi
   redisSentinel:
-    enabled: true
+    enabled: false
     clusterSize: 3

clusters/cl01tl/helm/libation/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
-digest: sha256:aebb132f7d046cc08fc7c16cad3d7efdabb5a42c2ec86f4f8a2679fcf56652f0
-generated: "2025-12-18T02:46:17.443356445Z"
+  version: 0.7.0
+digest: sha256:21c605c3a1308796b1a9248d9d82f07b95c199a13088573bcfbfee9482beec6d
+generated: "2025-12-27T13:31:16.344123-06:00"

clusters/cl01tl/helm/libation/Chart.yaml

@@ -20,7 +20,7 @@ dependencies:
     version: 4.5.0
   - name: volsync-target
     alias: volsync-target-config
-    version: 0.6.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/libation.png
 # renovate: github=rmcrackan/Libation

clusters/cl01tl/helm/libation/values.yaml

@@ -16,7 +16,7 @@ libation:
         main:
           image:
             repository: rmcrackan/libation
-            tag: 12.8.2
+            tag: 13.0.0
             pullPolicy: IfNotPresent
           env:
             - name: SLEEP_TIME
@@ -62,3 +62,10 @@ libation:
               readOnly: false
 volsync-target-config:
   pvcTarget: libation
+  local:
+    enabled: false
+  remote:
+    enabled: false
+  external:
+    enabled: true
+    schedule: 36 9 * * *

clusters/cl01tl/helm/lidarr/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.5.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.3
+  version: 7.4.4
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
-digest: sha256:33d3f2e45a1c1ff157e715b4aa06498454de33d6f5956a97aaa8281188d2b358
-generated: "2025-12-23T22:25:42.862324-06:00"
+  version: 0.7.0
+digest: sha256:ba53bb04a4ae5f2a85e47cbda002adc7949c28d169d47b1f74136ea106ed1b97
+generated: "2025-12-27T13:31:18.181646-06:00"

clusters/cl01tl/helm/lidarr/Chart.yaml

@@ -24,11 +24,11 @@ dependencies:
     version: 4.5.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.3
+    version: 7.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config
-    version: 0.6.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/lidarr.png
 # renovate: github=linuxserver/lidarr

clusters/cl01tl/helm/lidarr/values.yaml

@@ -170,3 +170,10 @@ volsync-target-config:
     runAsGroup: 1000
     fsGroup: 1000
     fsGroupChangePolicy: OnRootMismatch
+  local:
+    enabled: false
+  remote:
+    enabled: false
+  external:
+    enabled: true
+    schedule: 38 9 * * *

clusters/cl01tl/helm/lidatube/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
-digest: sha256:4e550c4829f2754a00951d71ea2029705201d60c66256119f6f66f57b4be9455
-generated: "2025-12-18T02:46:37.051923133Z"
+  version: 0.7.0
+digest: sha256:6bc6bec57cbc0955f169b0caf22dac5ece3a5a09766178686256641016a56597
+generated: "2025-12-27T13:31:20.276455-06:00"

clusters/cl01tl/helm/lidatube/Chart.yaml

@@ -20,7 +20,7 @@ dependencies:
     version: 4.5.0
   - name: volsync-target
     alias: volsync-target-config
-    version: 0.6.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/lidatube.png
 # renovate: github=TheWicklowWolf/LidaTube

clusters/cl01tl/helm/lidatube/values.yaml

@@ -92,3 +92,10 @@ volsync-target-config:
     runAsGroup: 1000
     fsGroup: 1000
     fsGroupChangePolicy: OnRootMismatch
+  local:
+    enabled: false
+  remote:
+    enabled: false
+  external:
+    enabled: true
+    schedule: 40 9 * * *

clusters/cl01tl/helm/listenarr/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
-digest: sha256:1d68f43b8a9bf2df9cee5e46491aa33245d7996ef6adff76e42f14463b03eb59
-generated: "2025-12-18T02:46:46.724653757Z"
+  version: 0.7.0
+digest: sha256:b6010b40a08e00cc0b51f305830b984b274564d52bb4c832651dae805a7248a8
+generated: "2025-12-27T13:31:22.118032-06:00"

clusters/cl01tl/helm/listenarr/Chart.yaml

@@ -19,7 +19,7 @@ dependencies:
     version: 4.5.0
   - name: volsync-target
     alias: volsync-target-config
-    version: 0.6.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 # renovate: github=therobbiedavis/Listenarr
 appVersion: 0.2.35

clusters/cl01tl/helm/listenarr/values.yaml

@@ -73,3 +73,10 @@ volsync-target-config:
     runAsGroup: 1000
     fsGroup: 1000
     fsGroupChangePolicy: OnRootMismatch
+  local:
+    enabled: false
+  remote:
+    enabled: false
+  external:
+    enabled: true
+    schedule: 42 9 * * *

clusters/cl01tl/helm/local-path-provisioner/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: local-path-provisioner
   repository: https://charts.containeroo.ch
-  version: 0.0.33
-digest: sha256:323aa6386161d2f5e2f3122082bc1dc63aeae96d2e02520b8d5dc63f80c3be1c
-generated: "2025-12-01T20:26:30.26287-06:00"
+  version: 0.0.34
+digest: sha256:f4f946897660d5d65eb2a56144d907c0b48c9a72e20d10a73684eaeb0d50cfd3
+generated: "2025-12-26T21:55:29.099967751Z"

clusters/cl01tl/helm/local-path-provisioner/Chart.yaml

@@ -15,7 +15,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: local-path-provisioner
-    version: 0.0.33
+    version: 0.0.34
     repository: https://charts.containeroo.ch
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 # renovate: github=rancher/local-path-provisioner

clusters/cl01tl/helm/local-path-provisioner/values.yaml

@@ -1,7 +1,7 @@
 local-path-provisioner:
   image:
     repository: rancher/local-path-provisioner
-    tag: v0.0.32
+    tag: v0.0.33
   helperImage:
     repository: busybox
     tag: 1.37.0

clusters/cl01tl/helm/mariadb-operator/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 25.10.3
 - name: mariadb-operator-crds
   repository: https://helm.mariadb.com/mariadb-operator
-  version: 25.10.2
-digest: sha256:013c53bbc13fa7b7f3f25d82f3116332e19894a1b1fd796224a4c05f9382645f
-generated: "2025-12-24T18:26:55.204948602Z"
+  version: 25.10.3
+digest: sha256:d32a1fb47160eccd389a71467a954f2eea59cad595db38a74243581af1c9c426
+generated: "2025-12-24T19:28:09.775077014Z"

clusters/cl01tl/helm/mariadb-operator/Chart.yaml

@@ -18,7 +18,7 @@ dependencies:
     version: 25.10.3
     repository: https://helm.mariadb.com/mariadb-operator
   - name: mariadb-operator-crds
-    version: 25.10.2
+    version: 25.10.3
     repository: https://helm.mariadb.com/mariadb-operator
 icon: https://mariadb-operator.github.io/mariadb-operator/assets/mariadb_profile.svg
 # renovate: github=mariadb-operator/mariadb-operator

clusters/cl01tl/helm/matrix-synapse/Chart.lock

@@ -19,7 +19,7 @@ dependencies:
   version: 2.1.4
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.4.3
+  version: 7.4.4
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.5.0
@@ -28,15 +28,15 @@ dependencies:
   version: 0.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
+  version: 0.7.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
+  version: 0.7.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
+  version: 0.7.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
-digest: sha256:0c08af386645d129c9420430b1506c4ac6556ef0155d5a1f86aab2ed5e0e0b85
-generated: "2025-12-23T22:32:15.040072-06:00"
+  version: 0.7.0
+digest: sha256:f46430b60914faed17a656af1ab34fcb534ef059c35f2b052a14297bd73be34f
+generated: "2025-12-27T13:31:33.620631-06:00"

clusters/cl01tl/helm/matrix-synapse/Chart.yaml

@@ -53,7 +53,7 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.4.3
+    version: 7.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     alias: redis-replication-matrix-synapse
@@ -65,19 +65,19 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-synapse
-    version: 0.6.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-hookshot
-    version: 0.6.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-discord
-    version: 0.6.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-whatsapp
-    version: 0.6.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/matrix.png
 # renovate: github=element-hq/synapse

clusters/cl01tl/helm/matrix-synapse/values.yaml

@@ -477,15 +477,43 @@ redis-replication-hookshot:
     clusterSize: 3
 volsync-target-synapse:
   pvcTarget: matrix-synapse
+  local:
+    enabled: false
+  remote:
+    enabled: false
+  external:
+    enabled: true
+    schedule: 44 9 * * *
 volsync-target-hookshot:
   pvcTarget: matrix-hookshot
+  local:
+    enabled: false
+  remote:
+    enabled: false
+  external:
+    enabled: true
+    schedule: 46 9 * * *
 volsync-target-discord:
   pvcTarget: mautrix-discord
   moverSecurityContext:
     runAsUser: 1337
     runAsGroup: 1337
+  local:
+    enabled: false
+  remote:
+    enabled: false
+  external:
+    enabled: true
+    schedule: 48 9 * * *
 volsync-target-whatsapp:
   pvcTarget: mautrix-whatsapp
   moverSecurityContext:
     runAsUser: 1337
     runAsGroup: 1337
+  local:
+    enabled: false
+  remote:
+    enabled: false
+  external:
+    enabled: true
+    schedule: 50 9 * * *

clusters/cl01tl/helm/n8n/Chart.yaml

@@ -1,35 +0,0 @@
-apiVersion: v2
-name: n8n
-version: 1.0.0
-description: n8n
-keywords:
-  - n8n
-  - automation
-home: https://wiki.alexlebens.dev/s/e4544bd4-c66a-420c-8020-c54b2078181a
-sources:
-  - https://github.com/n8n-io/n8n
-  - https://github.com/cloudnative-pg/cloudnative-pg
-  - https://github.com/n8n-io/n8n/pkgs/container/n8n
-  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/postgres-cluster
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: app-template
-    alias: n8n
-    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.5.0
-  - name: postgres-cluster
-    alias: postgres-18-cluster
-    version: 7.4.3
-    repository: oci://harbor.alexlebens.net/helm-charts
-  - name: redis-replication
-    version: 0.5.0
-    repository: oci://harbor.alexlebens.net/helm-charts
-  - name: volsync-target
-    alias: volsync-target-data
-    version: 0.6.0
-    repository: oci://harbor.alexlebens.net/helm-charts
-icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/n8n.png
-# renovate: github=n8n-io/n8n
-appVersion: 2.0.1

clusters/cl01tl/helm/n8n/values.yaml

@@ -1,441 +0,0 @@
-n8n:
-  controllers:
-    main:
-      type: deployment
-      replicas: 1
-      strategy: Recreate
-      revisionHistoryLimit: 3
-      containers:
-        main:
-          image:
-            repository: ghcr.io/n8n-io/n8n
-            tag: 2.2.1
-            pullPolicy: IfNotPresent
-          env:
-            - name: GENERIC_TIMEZONE
-              value: US/Central
-            - name: DB_TYPE
-              value: postgresdb
-            - name: DB_POSTGRESDB_DATABASE
-              valueFrom:
-                secretKeyRef:
-                  name: n8n-postgresql-18-cluster-app
-                  key: dbname
-            - name: DB_POSTGRESDB_HOST
-              valueFrom:
-                secretKeyRef:
-                  name: n8n-postgresql-18-cluster-app
-                  key: host
-            - name: DB_POSTGRESDB_PORT
-              valueFrom:
-                secretKeyRef:
-                  name: n8n-postgresql-18-cluster-app
-                  key: port
-            - name: DB_POSTGRESDB_USER
-              valueFrom:
-                secretKeyRef:
-                  name: n8n-postgresql-18-cluster-app
-                  key: user
-            - name: DB_POSTGRESDB_PASSWORD
-              valueFrom:
-                secretKeyRef:
-                  name: n8n-postgresql-18-cluster-app
-                  key: password
-            - name: N8N_METRICS
-              value: true
-            - name: QUEUE_HEALTH_CHECK_ACTIVE
-              value: true
-            - name: EXECUTIONS_MODE
-              value: queue
-            - name: QUEUE_BULL_REDIS_HOST
-              value: redis-replication-n8n-master.n8n
-            - name: N8N_ENCRYPTION_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: n8n-config-secret
-                  key: key
-            - name: WEBHOOK_URL
-              value: https://n8n.alexlebens.net/
-          probes:
-            liveness:
-              enabled: true
-              custom: true
-              spec:
-                httpGet:
-                  path: /healthz
-                  port: 5678
-                initialDelaySeconds: 0
-                periodSeconds: 10
-                timeoutSeconds: 1
-                failureThreshold: 3
-            readiness:
-              enabled: true
-              custom: true
-              spec:
-                httpGet:
-                  path: /healthz/readiness
-                  port: 5678
-                initialDelaySeconds: 0
-                periodSeconds: 10
-                timeoutSeconds: 1
-                failureThreshold: 3
-          resources:
-            requests:
-              cpu: 10m
-              memory: 128Mi
-    worker:
-      type: daemonset
-      revisionHistoryLimit: 3
-      pod:
-        nodeSelector:
-          kubernetes.io/arch: amd64
-      containers:
-        main:
-          image:
-            repository: ghcr.io/n8n-io/n8n
-            tag: 2.2.1
-            pullPolicy: IfNotPresent
-          command:
-            - n8n
-          args:
-            - worker
-            # - --concurrency=10
-          env:
-            - name: GENERIC_TIMEZONE
-              value: US/Central
-            - name: DB_TYPE
-              value: postgresdb
-            - name: DB_POSTGRESDB_DATABASE
-              valueFrom:
-                secretKeyRef:
-                  name: n8n-postgresql-18-cluster-app
-                  key: dbname
-            - name: DB_POSTGRESDB_HOST
-              valueFrom:
-                secretKeyRef:
-                  name: n8n-postgresql-18-cluster-app
-                  key: host
-            - name: DB_POSTGRESDB_PORT
-              valueFrom:
-                secretKeyRef:
-                  name: n8n-postgresql-18-cluster-app
-                  key: port
-            - name: DB_POSTGRESDB_USER
-              valueFrom:
-                secretKeyRef:
-                  name: n8n-postgresql-18-cluster-app
-                  key: user
-            - name: DB_POSTGRESDB_PASSWORD
-              valueFrom:
-                secretKeyRef:
-                  name: n8n-postgresql-18-cluster-app
-                  key: password
-            - name: N8N_METRICS
-              value: true
-            - name: N8N_RUNNERS_ENABLED
-              value: true
-            - name: N8N_BLOCK_ENV_ACCESS_IN_NODE
-              value: true
-            - name: N8N_GIT_NODE_DISABLE_BARE_REPOS
-              value: true
-            - name: QUEUE_HEALTH_CHECK_ACTIVE
-              value: true
-            - name: EXECUTIONS_MODE
-              value: queue
-            - name: QUEUE_BULL_REDIS_HOST
-              value: redis-replication-n8n-master.n8n
-            - name: N8N_ENCRYPTION_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: n8n-config-secret
-                  key: key
-            - name: WEBHOOK_URL
-              value: https://n8n.alexlebens.net/
-          probes:
-            liveness:
-              enabled: false
-              custom: true
-              spec:
-                httpGet:
-                  path: /healthz
-                  port: 5678
-                initialDelaySeconds: 60
-                periodSeconds: 10
-                timeoutSeconds: 1
-                failureThreshold: 3
-            readiness:
-              enabled: false
-              custom: true
-              spec:
-                httpGet:
-                  path: /healthz/readiness
-                  port: 5678
-                initialDelaySeconds: 60
-                periodSeconds: 10
-                timeoutSeconds: 1
-                failureThreshold: 3
-          resources:
-            requests:
-              cpu: 10m
-              memory: 128Mi
-    webhook:
-      type: daemonset
-      revisionHistoryLimit: 3
-      pod:
-        nodeSelector:
-          kubernetes.io/arch: amd64
-      containers:
-        main:
-          image:
-            repository: ghcr.io/n8n-io/n8n
-            tag: 2.2.1
-            pullPolicy: IfNotPresent
-          command:
-            - n8n
-          args:
-            - webhook
-          env:
-            - name: GENERIC_TIMEZONE
-              value: US/Central
-            - name: DB_TYPE
-              value: postgresdb
-            - name: DB_POSTGRESDB_DATABASE
-              valueFrom:
-                secretKeyRef:
-                  name: n8n-postgresql-18-cluster-app
-                  key: dbname
-            - name: DB_POSTGRESDB_HOST
-              valueFrom:
-                secretKeyRef:
-                  name: n8n-postgresql-18-cluster-app
-                  key: host
-            - name: DB_POSTGRESDB_PORT
-              valueFrom:
-                secretKeyRef:
-                  name: n8n-postgresql-18-cluster-app
-                  key: port
-            - name: DB_POSTGRESDB_USER
-              valueFrom:
-                secretKeyRef:
-                  name: n8n-postgresql-18-cluster-app
-                  key: user
-            - name: DB_POSTGRESDB_PASSWORD
-              valueFrom:
-                secretKeyRef:
-                  name: n8n-postgresql-18-cluster-app
-                  key: password
-            - name: N8N_METRICS
-              value: true
-            - name: QUEUE_HEALTH_CHECK_ACTIVE
-              value: true
-            - name: EXECUTIONS_MODE
-              value: queue
-            - name: QUEUE_BULL_REDIS_HOST
-              value: redis-replication-n8n-master.n8n
-            - name: N8N_ENCRYPTION_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: n8n-config-secret
-                  key: key
-            - name: WEBHOOK_URL
-              value: https://n8n.alexlebens.net/
-            - name: N8N_DIAGNOSTICS_ENABLED
-              value: false
-            - name: N8N_VERSION_NOTIFICATIONS_ENABLED
-              value: false
-          probes:
-            liveness:
-              enabled: true
-              custom: true
-              spec:
-                httpGet:
-                  path: /healthz
-                  port: 5678
-                initialDelaySeconds: 0
-                periodSeconds: 10
-                timeoutSeconds: 1
-                failureThreshold: 3
-            readiness:
-              enabled: true
-              custom: true
-              spec:
-                httpGet:
-                  path: /healthz/readiness
-                  port: 5678
-                initialDelaySeconds: 0
-                periodSeconds: 10
-                timeoutSeconds: 1
-                failureThreshold: 3
-          resources:
-            requests:
-              cpu: 10m
-              memory: 128Mi
-  service:
-    main:
-      controller: main
-      ports:
-        http:
-          port: 80
-          targetPort: 5678
-          protocol: HTTP
-    worker:
-      controller: worker
-      ports:
-        http:
-          port: 80
-          targetPort: 5678
-          protocol: HTTP
-    webhook:
-      controller: webhook
-      ports:
-        http:
-          port: 80
-          targetPort: 5678
-          protocol: HTTP
-  serviceMonitor:
-    main:
-      selector:
-        matchLabels:
-          app.kubernetes.io/name: n8n-main
-          app.kubernetes.io/instance: n8n-main
-      serviceName: '{{ include "bjw-s.common.lib.chart.names.fullname" $ }}'
-      endpoints:
-        - port: http
-          interval: 3m
-          scrapeTimeout: 1m
-          path: /metrics
-    worker:
-      selector:
-        matchLabels:
-          app.kubernetes.io/name: n8n-worker
-          app.kubernetes.io/instance: n8n-worker
-      serviceName: '{{ include "bjw-s.common.lib.chart.names.fullname" $ }}'
-      endpoints:
-        - port: http
-          interval: 3m
-          scrapeTimeout: 1m
-          path: /metrics
-    webhook:
-      selector:
-        matchLabels:
-          app.kubernetes.io/name: n8n-webhook
-          app.kubernetes.io/instance: n8n-webhook
-      serviceName: '{{ include "bjw-s.common.lib.chart.names.fullname" $ }}'
-      endpoints:
-        - port: http
-          interval: 3m
-          scrapeTimeout: 1m
-          path: /metrics
-  route:
-    main:
-      kind: HTTPRoute
-      parentRefs:
-        - group: gateway.networking.k8s.io
-          kind: Gateway
-          name: traefik-gateway
-          namespace: traefik
-      hostnames:
-        - n8n.alexlebens.net
-      rules:
-        - backendRefs:
-            - group: ''
-              kind: Service
-              name: n8n-main
-              port: 80
-              weight: 100
-          matches:
-            - path:
-                type: PathPrefix
-                value: /
-            - path:
-                type: PathPrefix
-                value: /webhook-test/
-        - backendRefs:
-            - group: ''
-              kind: Service
-              name: n8n-webhook
-              port: 80
-              weight: 100
-          matches:
-            - path:
-                type: PathPrefix
-                value: /webhook/
-            - path:
-                type: PathPrefix
-                value: /webhook-waiting/
-            - path:
-                type: PathPrefix
-                value: /form/
-  persistence:
-    data:
-      storageClass: ceph-block
-      accessMode: ReadWriteOnce
-      size: 5Gi
-      advancedMounts:
-        main:
-          main:
-            - path: /data
-              readOnly: false
-    cache:
-      type: emptyDir
-      advancedMounts:
-        worker:
-          main:
-            - path: /home/node/.n8n
-              readOnly: false
-        webhook:
-          main:
-            - path: /home/node/.n8n
-              readOnly: false
-postgres-18-cluster:
-  mode: recovery
-  recovery:
-    method: objectStore
-    objectStore:
-      index: 1
-  backup:
-    objectStore:
-      - name: garage-local
-        index: 1
-        destinationBucket: postgres-backups
-        externalSecretCredentialPath: /garage/home-infra/postgres-backups
-        isWALArchiver: true
-      # - name: garage-remote
-      #   index: 1
-      #   destinationBucket: postgres-backups
-      #   externalSecretCredentialPath: /garage/home-infra/postgres-backups
-      #   retentionPolicy: "90d"
-      #   data:
-      #     compression: bzip2
-      # - name: external
-      #   index: 1
-      #   endpointURL: https://nyc3.digitaloceanspaces.com
-      #   destinationBucket: postgres-backups-ce540ddf106d186bbddca68a
-      #   externalSecretCredentialPath: /garage/home-infra/postgres-backups
-      #   isWALArchiver: false
-    scheduledBackups:
-      - name: live-backup
-        suspend: false
-        immediate: true
-        schedule: "0 0 0 * * *"
-        backupName: garage-local
-      # - name: weekly-backup
-      #   suspend: true
-      #   immediate: true
-      #   schedule: "0 0 4 * * SAT"
-      #   backupName: garage-remote
-      # - name: daily-backup
-      #   suspend: true
-      #   immediate: true
-      #   schedule: "0 0 0 * * *"
-      #   backupName: external
-redis-replication:
-  existingSecret:
-    enabled: false
-  redisReplication:
-    clusterSize: 3
-  redisSentinel:
-    enabled: true
-    clusterSize: 3
-volsync-target-data:
-  pvcTarget: n8n

clusters/cl01tl/helm/navidrome/Chart.lock

@@ -0,0 +1,9 @@
+dependencies:
+- name: app-template
+  repository: https://bjw-s-labs.github.io/helm-charts/
+  version: 4.5.0
+- name: volsync-target
+  repository: oci://harbor.alexlebens.net/helm-charts
+  version: 0.7.0
+digest: sha256:0a5573366335b39a1d23376a629c7201d66b0418635129d23dcdf729f1842da6
+generated: "2025-12-27T13:31:40.981352-06:00"

clusters/cl01tl/helm/navidrome/Chart.yaml

@@ -0,0 +1,27 @@
+apiVersion: v2
+name: navidrome
+version: 1.0.0
+description: Navidrome
+keywords:
+  - navidrome
+  - feishin
+  - music
+home: https://wiki.alexlebens.dev/s/
+sources:
+  - https://github.com/navidrome/navidrome
+  - https://github.com/jeffvli/feishin
+  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
+maintainers:
+  - name: alexlebens
+dependencies:
+  - name: app-template
+    alias: navidrome
+    repository: https://bjw-s-labs.github.io/helm-charts/
+    version: 4.5.0
+  - name: volsync-target
+    alias: volsync-target-data
+    version: 0.7.0
+    repository: oci://harbor.alexlebens.net/helm-charts
+icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/navidrome.png
+# renovate: github=navidrome/navidrome
+appVersion: 1.42.2

clusters/cl01tl/helm/navidrome/templates/persistent-volume-claim.yaml

@@ -0,0 +1,17 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: navidrome-music-nfs-storage
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: navidrome-music-nfs-storage
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  volumeName: navidrome-music-nfs-storage
+  storageClassName: nfs-client
+  accessModes:
+    - ReadWriteMany
+  resources:
+    requests:
+      storage: 1Gi

clusters/cl01tl/helm/navidrome/templates/persistent-volume.yaml

@@ -0,0 +1,23 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: navidrome-music-nfs-storage
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: navidrome-music-nfs-storage
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  persistentVolumeReclaimPolicy: Retain
+  storageClassName: nfs-client
+  capacity:
+    storage: 1Gi
+  accessModes:
+    - ReadWriteMany
+  nfs:
+    path: /volume2/Storage/Music
+    server: synologybond.alexlebens.net
+  mountOptions:
+    - vers=4
+    - minorversion=1
+    - noac