Update docker.io/postgres Docker tag to v18

Update ghcr.io/linuxserver/bazarr:1.5.3 Docker digest to 4aa1e82 (#2333 )
Update ollama/ollama Docker tag to v0.13.2 (#2331 )
2025-12-09 22:03:09 +00:00 · 2025-12-09 22:01:53 +00:00 · 2025-12-09 18:02:10 +00:00 · 2025-12-09 18:02:04 +00:00 · 2025-12-09 09:01:44 +00:00 · 2025-12-08 22:40:25 -06:00
41 changed files with 367 additions and 135 deletions
--- a/.gitea/workflows/lint-test-docker.yaml
+++ b/.gitea/workflows/lint-test-docker.yaml
@@ -6,12 +6,14 @@ on:
      - main
    paths:
      - 'hosts/**'
+      - '!clusters/**'

  push:
    branches:
      - main
    paths:
      - 'hosts/**'
+      - '!clusters/**'

 env:
  BASE_BRANCH: "origin/${{ gitea.base_ref }}"
@@ -36,14 +38,20 @@ jobs:
        id: branch-exists
        if: github.event_name == 'push' || steps.check-branch-exists.outputs.exists == 'true' && github.event_name == 'pull_request'
        run: |
-          echo ">> Branch ${{ gitea.base_ref }} exists, will continue with linting"
+          if [ ${{ github.event_name == 'push' }} ]; then
+            echo ">> Action is from a push event, will continue with linting"
+
+          else
+            echo ">> Branch ${{ gitea.base_ref }} exists, will continue with linting"
+
+          fi

          echo "----"

          echo "exists=true" >> $GITEA_OUTPUT

      - name: Set up Node.js
-        if: steps.check-branch-exists.outputs.exists == 'true'
+        if: steps.branch-exists.outputs.exists == 'true'
        uses: actions/setup-node@v6
        with:
          node-version: '24'
@@ -73,6 +81,7 @@ jobs:

            for path in $GIT_DIFF; do
              CHANGED_COMPOSE+=$(echo "$path")
+              CHANGED_COMPOSE+=$(echo " ")
            done

          else
@@ -84,27 +93,27 @@ jobs:
          if [ -n "${CHANGED_COMPOSE}" ]; then
            echo ""
            echo ">> Compose to Lint:"
-            echo "$(echo "${CHANGED_COMPOSE[@]}" | sort -u)"
+            echo "$(echo "${CHANGED_COMPOSE}" | sort -u)"

            echo "----"

            echo "changes-detected=true" >> $GITEA_OUTPUT
            echo "compose-dir<<EOF" >> $GITEA_OUTPUT
-            echo "$(echo "${CHANGED_COMPOSE[@]}" | sort -u)" >> $GITEA_OUTPUT
+            echo "$(echo "${CHANGED_COMPOSE}" | sort -u)" >> $GITEA_OUTPUT
            echo "EOF" >> $GITEA_OUTPUT
          else
            echo "changes-detected=false" >> $GITEA_OUTPUT
          fi

      - name: Lint Docker Compose
-        if: steps.check-branch-exists.outputs.exists == 'true'
+        if: steps.check-dir-changes.outputs.changes-detected == 'true'
        env:
          CHANGED_COMPOSE: ${{ steps.check-dir-changes.outputs.compose-dir }}
        run: |
          echo ">> Running dclint on changed compose files:"
          echo "$CHANGED_COMPOSE"

-          echo "$CHANGED_COMPOSE" | while read -r compose; do
+          for compose in $CHANGED_COMPOSE; do
            echo ">> Linting $compose ..."
            npx dclint $compose
          done
--- a/.gitea/workflows/lint-test-helm.yaml
+++ b/.gitea/workflows/lint-test-helm.yaml
@@ -6,12 +6,14 @@ on:
      - main
    paths:
      - 'clusters/cl01tl/helm/**'
+      - '!hosts/**'

  push:
    branches:
      - main
    paths:
      - 'clusters/cl01tl/helm/**'
+      - '!hosts/**'

 env:
  CLUSTER: cl01tl
@@ -37,7 +39,13 @@ jobs:
        id: branch-exists
        if: github.event_name == 'push' || steps.check-branch-exists.outputs.exists == 'true' && github.event_name == 'pull_request'
        run: |
-          echo ">> Branch ${{ gitea.base_ref }} exists, will continue with linting"
+          if [ ${{ github.event_name == 'push' }} ]; then
+            echo ">> Action is from a push event, will continue with linting"
+
+          else
+            echo ">> Branch ${{ gitea.base_ref }} exists, will continue with linting"
+
+          fi

          echo "----"

@@ -48,7 +56,7 @@ jobs:
        uses: azure/setup-helm@v4
        with:
          token: ${{ secrets.GITEA_TOKEN }}
-          version: v3
+          version: v3.19.2

      - name: Check Directories for Changes
        id: check-dir-changes
@@ -61,6 +69,7 @@ jobs:
          if [ "${{ github.event_name }}" == "pull_request" ]; then
            echo ""
            echo ">> Checking for changes in a pull request ..."
+            git diff --name-only "${BASE_BRANCH}" | xargs -I {} dirname {} | sort -u | grep -E "clusters/[^/]+/helm/[^/]+"
            GIT_DIFF=$(git diff --name-only "${BASE_BRANCH}" | xargs -I {} dirname {} | sort -u | grep -E "clusters/[^/]+/helm/[^/]+")
          else
            echo ""
@@ -75,6 +84,7 @@ jobs:

            for path in $GIT_DIFF; do
              CHANGED_CHARTS+=$(echo "$path" | awk -F '/' '{print $4}')
+              CHANGED_CHARTS+=$(echo " ")
            done

          else
@@ -86,13 +96,13 @@ jobs:
          if [ -n "${CHANGED_CHARTS}" ]; then
            echo ""
            echo ">> Chart to Lint:"
-            echo "$(echo "${CHANGED_CHARTS[@]}" | sort -u)"
+            echo "$(echo "${CHANGED_CHARTS}" | sort -u)"

            echo "----"

            echo "changes-detected=true" >> $GITEA_OUTPUT
            echo "chart-dir<<EOF" >> $GITEA_OUTPUT
-            echo "$(echo "${CHANGED_CHARTS[@]}" | sort -u)" >> $GITEA_OUTPUT
+            echo "$(echo "${CHANGED_CHARTS}" | sort -u)" >> $GITEA_OUTPUT
            echo "EOF" >> $GITEA_OUTPUT
          else
            echo "changes-detected=false" >> $GITEA_OUTPUT
--- a/clusters/cl01tl/helm/argo-workflows/Chart.lock
+++ b/clusters/cl01tl/helm/argo-workflows/Chart.lock
@@ -4,9 +4,9 @@ dependencies:
  version: 0.46.1
 - name: argo-events
  repository: https://argoproj.github.io/argo-helm
-  version: 2.4.18
+  version: 2.4.19
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 6.16.1
-digest: sha256:6cc24f6ce2b7f67c2eeab9bb6f64ebfedc082a2e809fc1f03f691f99a3006143
-generated: "2025-12-04T01:01:06.532396136Z"
+digest: sha256:1f98e04526d7b61fa9ee690c46542bcc2ae6b69bf7619e1107a1592386de9bf2
+generated: "2025-12-07T03:02:14.909953853Z"
--- a/clusters/cl01tl/helm/argo-workflows/Chart.yaml
+++ b/clusters/cl01tl/helm/argo-workflows/Chart.yaml
@@ -21,7 +21,7 @@ dependencies:
    version: 0.46.1
    repository: https://argoproj.github.io/argo-helm
  - name: argo-events
-    version: 2.4.18
+    version: 2.4.19
    repository: https://argoproj.github.io/argo-helm
  - name: postgres-cluster
    alias: postgres-17-cluster
--- a/clusters/cl01tl/helm/argocd/values.yaml
+++ b/clusters/cl01tl/helm/argocd/values.yaml
@@ -60,7 +60,7 @@ argo-cd:
    enabled: true
    auth: false
  redisSecretInit:
-    enabled: true
+    enabled: false
  server:
    replicas: 2
    extensions:
@@ -279,7 +279,7 @@ argo-cd:
        - description: Application has degraded
          send:
            - app-health-degraded
-          when: app.status.health.status == 'Degraded' and time.Now().Sub(time.Parse(app.status.health.lastTransitionTime).Minutes() >= 15
+          when: app.status.health.status == 'Degraded'
      trigger.on-sync-failed: |
        - description: Application syncing has failed
          send:
--- a/clusters/cl01tl/helm/bazarr/values.yaml
+++ b/clusters/cl01tl/helm/bazarr/values.yaml
@@ -15,7 +15,7 @@ bazarr:
        main:
          image:
            repository: ghcr.io/linuxserver/bazarr
-            tag: 1.5.3@sha256:ec11e988e8e13411c994a4d9f43ed9b97409aa92c1da54d9f23926c3da7c2032
+            tag: 1.5.3@sha256:4aa1e82d1e96ae712095d881b7e3840e6db6ca862c335be5b00001f31156650b
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/helm/blocky/values.yaml
+++ b/clusters/cl01tl/helm/blocky/values.yaml
@@ -156,6 +156,7 @@ blocky:
              radarr-anime                    IN      CNAME   traefik-cl01tl
              radarr-standup                  IN      CNAME   traefik-cl01tl
              searxng                         IN      CNAME   traefik-cl01tl
+              seerr                           IN      CNAME   traefik-cl01tl
              slskd                           IN      CNAME   traefik-cl01tl
              sonarr                          IN      CNAME   traefik-cl01tl
              sonarr-4k                       IN      CNAME   traefik-cl01tl
--- a/clusters/cl01tl/helm/booklore/values.yaml
+++ b/clusters/cl01tl/helm/booklore/values.yaml
@@ -9,7 +9,7 @@ booklore:
        main:
          image:
            repository: ghcr.io/booklore-app/booklore
-            tag: v1.13.1
+            tag: v1.13.2
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/helm/gatus/values.yaml
+++ b/clusters/cl01tl/helm/gatus/values.yaml
@@ -125,6 +125,9 @@ gatus:
      - name: overseerr
        url: https://overseerr.alexlebens.net
        <<: *defaults
+      - name: seerr
+        url: https://seerr.alexlebens.net
+        <<: *defaults
      - name: yamtrack
        url: https://yamtrack.alexlebens.net
        <<: *defaults
@@ -140,6 +143,9 @@ gatus:
      - name: audiobookshelf
        url: https://audiobookshelf.alexlebens.net
        <<: *defaults
+      - name: booklore
+        url: https://booklore.alexlebens.net
+        <<: *defaults
      - name: home-assistant
        url: https://home-assistant.alexlebens.net
        <<: *defaults
@@ -176,6 +182,11 @@ gatus:
      - name: n8n
        url: https://n8n.alexlebens.net
        <<: *defaults
+      - name: kronic
+        url: https://kronic.alexlebens.net
+        <<: *defaults
+        conditions:
+          - "[STATUS] == 401"
      - name: omni-tools
        url: https://omni-tools.alexlebens.net
        <<: *defaults
@@ -245,6 +256,9 @@ gatus:
      - name: ceph
        url: https://ceph.alexlebens.net
        <<: *defaults
+      - name: garage
+        url: https://garage-webui.alexlebens.net
+        <<: *defaults
      - name: pgadmin
        url: https://pgadmin.alexlebens.net
        <<: *defaults
@@ -254,6 +268,29 @@ gatus:
      - name: vault
        url: https://vault.alexlebens.net
        <<: *defaults
+      - name: backrest
+        url: https://backrest.alexlebens.net
+        <<: *defaults
+      - name: qui
+        url: https://qui.alexlebens.net
+        <<: *defaults
+      - name: qbittorrent
+        url: https://qbittorrent.alexlebens.net
+        <<: *defaults
+      - name: prowlarr
+        url: https://prowlarr.alexlebens.net
+        <<: *defaults
+      - name: huntarr
+        url: https://huntarr.alexlebens.net
+        <<: *defaults
+      - name: bazarr
+        url: https://bazarr.alexlebens.net
+        <<: *defaults
+        conditions:
+          - "[STATUS] == 401"
+      - name: tdarr
+        url: https://tdarr.alexlebens.net
+        <<: *defaults
      - name: sonarr
        url: https://sonarr.alexlebens.net
        <<: *defaults
@@ -284,25 +321,11 @@ gatus:
      - name: slskd
        url: https://slskd.alexlebens.net
        <<: *defaults
-      - name: qui
-        url: https://qui.alexlebens.net
+      - name: ephemera
+        url: https://ephemera.alexlebens.net
        <<: *defaults
-      - name: qbittorrent
-        url: https://qbittorrent.alexlebens.net
-        <<: *defaults
-      - name: prowlarr
-        url: https://prowlarr.alexlebens.net
-        <<: *defaults
-      - name: bazarr
-        url: https://bazarr.alexlebens.net
-        <<: *defaults
-        conditions:
-          - "[STATUS] == 401"
-      - name: huntarr
-        url: https://huntarr.alexlebens.net
-        <<: *defaults
-      - name: tdarr
-        url: https://tdarr.alexlebens.net
+      - name: listenarr
+        url: https://listenarr.alexlebens.net
        <<: *defaults
      - name: www
        url: https://www.alexlebens.dev
@@ -347,24 +370,14 @@ gatus:
        url: https://codeserver.alexlebens.dev
        <<: *defaults
        group: external
+      - name: authentik
+        url: https://auth.alexlebens.dev
+        <<: *defaults
+        group: external
      - name: public homepage
        url: https://home.alexlebens.dev
        <<: *defaults
        group: external
-      - name: discord
-        group: public
-        url: https://discord.com/app
-        conditions:
-          - "[STATUS] == 200"
-          - "[RESPONSE_TIME] < 400"
-        interval: 10s
-      - name: reddit
-        group: public
-        url: https://reddit.com
-        conditions:
-          - "[STATUS] == 200"
-          - "[RESPONSE_TIME] < 400"
-        interval: 10s
 postgres-17-cluster:
  mode: recovery
  cluster:
--- a/clusters/cl01tl/helm/generic-device-plugin/Chart.lock
+++ b/clusters/cl01tl/helm/generic-device-plugin/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: generic-device-plugin
  repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-  version: 0.20.4
-digest: sha256:4aa24e57233783f99d3de453f997ff4dddecaea729ab09b78745ee89ffa0e4a8
-generated: "2025-12-06T01:01:30.343689275Z"
+  version: 0.20.5
+digest: sha256:329b2d00301ab1467a8654dd92febfd7078db121c00c0960548010c01dee66b6
+generated: "2025-12-08T03:02:06.697075532Z"
--- a/clusters/cl01tl/helm/generic-device-plugin/Chart.yaml
+++ b/clusters/cl01tl/helm/generic-device-plugin/Chart.yaml
@@ -15,6 +15,6 @@ maintainers:
 dependencies:
  - name: generic-device-plugin
    repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-    version: 0.20.4
+    version: 0.20.5
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 appVersion: 1.0.0
--- a/clusters/cl01tl/helm/gitea/templates/service-monitor.yaml
+++ b/clusters/cl01tl/helm/gitea/templates/service-monitor.yaml
@@ -12,8 +12,6 @@ spec:
    matchLabels:
      app.kubernetes.io/name: gitea
      app.kubernetes.io/instance: {{ .Release.Name }}
-    matchExpressions:
-      - { key: app.kubernetes.io/controller, operator: NotIn, values: [backup] }
  endpoints:
    - port: http

--- a/clusters/cl01tl/helm/gitea/values.yaml
+++ b/clusters/cl01tl/helm/gitea/values.yaml
@@ -174,6 +174,9 @@ gitea-actions:
 backup:
  global:
    fullnameOverride: gitea-backup
+    labels:
+      app.kubernetes.io/instance: gitea-backup
+      app.kubernetes.io/name: gitea-backup
  controllers:
    backup:
      type: cronjob
--- a/clusters/cl01tl/helm/harbor/Chart.yaml
+++ b/clusters/cl01tl/helm/harbor/Chart.yaml
@@ -17,7 +17,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: harbor
-    version: 1.18.0
+    version: 1.18.1
    repository: https://helm.goharbor.io
  - name: postgres-cluster
    alias: postgres-17-cluster
--- a/clusters/cl01tl/helm/headlamp/templates/cluster-role-binding.yaml
+++ b/clusters/cl01tl/helm/headlamp/templates/cluster-role-binding.yaml
@@ -13,7 +13,7 @@ roleRef:
  apiGroup: rbac.authorization.k8s.io
 subjects:
  - kind: User
-    name: alexanderlebens@gmail.com
+    name: https://authentik.alexlebens.net/application/o/headlamp/#alexanderlebens@gmail.com
    apiGroup: rbac.authorization.k8s.io
  - kind: ServiceAccount
    name: headlamp-admin
--- a/clusters/cl01tl/helm/headlamp/templates/external-secret.yaml
+++ b/clusters/cl01tl/helm/headlamp/templates/external-secret.yaml
@@ -40,14 +40,14 @@ spec:
        key: /authentik/oidc/headlamp
        metadataPolicy: None
        property: scopes
-    - secretKey: OIDC_VALIDATOR_ISSUER_URL
+    - secretKey: HEADLAMP_CONFIG_OIDC_VALIDATOR_IDP_ISSUER_URL
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        key: /authentik/oidc/headlamp
        metadataPolicy: None
        property: validator-issuer-url
-    - secretKey: OIDC_VALIDATOR_CLIENT_ID
+    - secretKey: HEADLAMP_CONFIG_OIDC_VALIDATOR_CLIENT_ID
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
--- a/clusters/cl01tl/helm/homepage/values.yaml
+++ b/clusters/cl01tl/helm/homepage/values.yaml
@@ -143,10 +143,16 @@ homepage:
                  statusStyle: dot
              - Media Requests:
                  icon: sh-overseerr.webp
-                  description: Overseer
+                  description: Overseerr
                  href: https://overseerr.alexlebens.net
                  siteMonitor: http://overseerr.overseerr:80
                  statusStyle: dot
+              - Media Requests (New):
+                  icon: sh-overseerr.webp
+                  description: Seerr
+                  href: https://seerr.alexlebens.net
+                  siteMonitor: http://seerr-seerr-chart.seerr:80
+                  statusStyle: dot
              - Media Tracking:
                  icon: sh-yamtrack.webp
                  description: Yamtrack
--- a/clusters/cl01tl/helm/kubelet-serving-cert-approver/values.yaml
+++ b/clusters/cl01tl/helm/kubelet-serving-cert-approver/values.yaml
@@ -38,7 +38,7 @@ kubelet-serving-cert-approver:
        main:
          image:
            repository: ghcr.io/alex1989hu/kubelet-serving-cert-approver
-            tag: 0.10.0
+            tag: 0.10.1
            pullPolicy: Always
          args:
            - serve
--- a/clusters/cl01tl/helm/n8n/values.yaml
+++ b/clusters/cl01tl/helm/n8n/values.yaml
@@ -9,7 +9,7 @@ n8n:
        main:
          image:
            repository: ghcr.io/n8n-io/n8n
-            tag: 1.123.1
+            tag: 1.123.3
            pullPolicy: IfNotPresent
          env:
            - name: GENERIC_TIMEZONE
@@ -93,7 +93,7 @@ n8n:
        main:
          image:
            repository: ghcr.io/n8n-io/n8n
-            tag: 1.123.1
+            tag: 1.123.3
            pullPolicy: IfNotPresent
          command:
            - n8n
@@ -188,7 +188,7 @@ n8n:
        main:
          image:
            repository: ghcr.io/n8n-io/n8n
-            tag: 1.123.1
+            tag: 1.123.3
            pullPolicy: IfNotPresent
          command:
            - n8n
--- a/clusters/cl01tl/helm/ollama/values.yaml
+++ b/clusters/cl01tl/helm/ollama/values.yaml
@@ -22,7 +22,7 @@ ollama:
        main:
          image:
            repository: ollama/ollama
-            tag: 0.13.1
+            tag: 0.13.2
            pullPolicy: IfNotPresent
          env:
            - name: OLLAMA_KEEP_ALIVE
@@ -58,7 +58,7 @@ ollama:
        main:
          image:
            repository: ollama/ollama
-            tag: 0.13.1
+            tag: 0.13.2
            pullPolicy: IfNotPresent
          env:
            - name: OLLAMA_KEEP_ALIVE
@@ -94,7 +94,7 @@ ollama:
        main:
          image:
            repository: ollama/ollama
-            tag: 0.13.1
+            tag: 0.13.2
            pullPolicy: IfNotPresent
          env:
            - name: OLLAMA_KEEP_ALIVE
--- a/clusters/cl01tl/helm/postiz/values.yaml
+++ b/clusters/cl01tl/helm/postiz/values.yaml
@@ -9,7 +9,7 @@ postiz:
        main:
          image:
            repository: ghcr.io/gitroomhq/postiz-app
-            tag: v2.9.0
+            tag: v2.10.1
            pullPolicy: IfNotPresent
          env:
            - name: MAIN_URL
--- a/clusters/cl01tl/helm/qbittorrent/values.yaml
+++ b/clusters/cl01tl/helm/qbittorrent/values.yaml
@@ -28,7 +28,7 @@ qbittorrent:
        qbittorrent:
          image:
            repository: ghcr.io/linuxserver/qbittorrent
-            tag: 5.1.4@sha256:f0465dbb2aa14397fd205a0240ee562eb062354c036ccc444084fe46c6c75091
+            tag: 5.1.4@sha256:043498de39c3dd63eec94360c5ad966a51271d1581070f42cb73ab0cf4776f29
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/helm/searxng/templates/external-secret.yaml
+++ b/clusters/cl01tl/helm/searxng/templates/external-secret.yaml
@@ -20,6 +20,36 @@ spec:
        metadataPolicy: None
        property: private-key

+---
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: searxng-browser-metrics-auth
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: searxng-browser-metrics-auth
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  data:
+    - secretKey: metrics-password
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: cl01tl/searxng/browser
+        metadataPolicy: None
+        property: metrics-password
+    - secretKey: metrics-username
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: cl01tl/searxng/browser
+        metadataPolicy: None
+        property: metrics-username
+
 ---
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
--- a/clusters/cl01tl/helm/searxng/templates/namespace.yaml
+++ b/clusters/cl01tl/helm/searxng/templates/namespace.yaml
@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: searxng
+  labels:
+    app.kubernetes.io/name: searxng
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+    pod-security.kubernetes.io/audit: privileged
+    pod-security.kubernetes.io/enforce: privileged
+    pod-security.kubernetes.io/warn: privileged
--- a/clusters/cl01tl/helm/searxng/templates/redis-replication.yaml
+++ b/clusters/cl01tl/helm/searxng/templates/redis-replication.yaml
@@ -1,32 +0,0 @@
-apiVersion: redis.redis.opstreelabs.in/v1beta2
-kind: RedisReplication
-metadata:
-  name: redis-replication-searxng
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: redis-replication-searxng
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  clusterSize: 3
-  podSecurityContext:
-    runAsUser: 1000
-    fsGroup: 1000
-  kubernetesConfig:
-    image: quay.io/opstree/redis:v8.0.3
-    imagePullPolicy: IfNotPresent
-    resources:
-      requests:
-        cpu: 50m
-        memory: 128Mi
-  storage:
-    volumeClaimTemplate:
-      spec:
-        storageClassName: ceph-block
-        accessModes: ["ReadWriteOnce"]
-        resources:
-          requests:
-            storage: 1Gi
-  redisExporter:
-    enabled: true
-    image: quay.io/opstree/redis-exporter:v1.48.0
--- a/clusters/cl01tl/helm/searxng/templates/service-monitor.yaml
+++ b/clusters/cl01tl/helm/searxng/templates/service-monitor.yaml
@@ -1,19 +1,26 @@
 apiVersion: monitoring.coreos.com/v1
 kind: ServiceMonitor
 metadata:
-  name: redis-replication-searxng
+  name: searxng-browser
  namespace: {{ .Release.Namespace }}
  labels:
-    app.kubernetes.io/name: redis-replication-searxng
+    app.kubernetes.io/name: searxng-browser
    app.kubernetes.io/instance: {{ .Release.Name }}
    app.kubernetes.io/part-of: {{ .Release.Name }}
-    redis-operator: "true"
-    env: production
 spec:
  selector:
    matchLabels:
-      redis_setup_type: replication
+      app.kubernetes.io/name: searxng-browser
+      app.kubernetes.io/instance: {{ .Release.Name }}
  endpoints:
-    - port: redis-exporter
+    - port: mail
      interval: 30s
-      scrapeTimeout: 10s
+      scrapeTimeout: 15s
+      path: /metrics
+      basicAuth:
+        password:
+          name: searxng-browser-metrics-auth
+          key: metrics-password
+        username:
+          name: searxng-browser-metrics-auth
+          key: metrics-username
--- a/clusters/cl01tl/helm/searxng/values.yaml
+++ b/clusters/cl01tl/helm/searxng/values.yaml
@@ -9,7 +9,7 @@ searxng:
        main:
          image:
            repository: searxng/searxng
-            tag: latest@sha256:c25c6b671382f0464318b2de3b142f1c9fe3721e46fdad027f4d6caf399728ea
+            tag: latest@sha256:95e59f5ba7d48b4c7ee92f2705907e52c5b98715b0d8c4802863322a502a8c4a
            pullPolicy: IfNotPresent
          env:
            - name: SEARXNG_BASE_URL
@@ -18,10 +18,6 @@ searxng:
              value: http://searxng-api.searxng:8080/search?q=<query>
            - name: SEARXNG_HOSTNAME
              value: searxng-api.searxng
-            - name: UWSGI_WORKERS
-              value: 4
-            - name: UWSGI_THREADS
-              value: 4
            - name: ENABLE_RAG_WEB_SEARCH
              value: true
            - name: RAG_WEB_SEARCH_ENGINE
@@ -43,7 +39,7 @@ searxng:
        main:
          image:
            repository: searxng/searxng
-            tag: latest@sha256:c25c6b671382f0464318b2de3b142f1c9fe3721e46fdad027f4d6caf399728ea
+            tag: latest@sha256:95e59f5ba7d48b4c7ee92f2705907e52c5b98715b0d8c4802863322a502a8c4a
            pullPolicy: IfNotPresent
          env:
            - name: SEARXNG_BASE_URL
@@ -52,16 +48,25 @@ searxng:
              value: https://searxng.alexlebens.net/search?q=<query>
            - name: SEARXNG_HOSTNAME
              value: searxng.alexlebens.net
-            - name: SEARXNG_REDIS_URL
-              value: redis://redis-replication-searxng-master.searxng:6379/0
-            - name: UWSGI_WORKERS
-              value: 4
-            - name: UWSGI_THREADS
-              value: 4
+            - name: SEARXNG_VALKEY_URL
+              value: valkey://127.0.0.1:6379/0
+            - name: GRANIAN_HOST
+              value: 0.0.0.0
+            - name: GRANIAN_PORT
+              value: 8080
          resources:
            requests:
              cpu: 10m
              memory: 256Mi
+        valkey:
+          image:
+            repository: valkey/valkey
+            tag: 9.0.0-alpine3.22
+            pullPolicy: IfNotPresent
+          resources:
+            requests:
+              cpu: 10m
+              memory: 128Mi
        gluetun:
          image:
            repository: ghcr.io/qdm12/gluetun
@@ -77,18 +82,10 @@ searxng:
                secretKeyRef:
                  name: searxng-wireguard-conf
                  key: private-key
-            - name: VPN_PORT_FORWARDING
-              value: "on"
-            - name: VPN_PORT_FORWARDING_UP_COMMAND
-              value: '/bin/sh -c "/gluetun/update.sh {{ printf "{{PORTS}}" }}"'
-            - name: PORT_FORWARD_ONLY
-              value: "on"
            - name: FIREWALL_OUTBOUND_SUBNETS
              value: 192.168.1.0/24,10.244.0.0/16
            - name: FIREWALL_INPUT_PORTS
              value: 8080
-            - name: DOT
-              value: "off"
          securityContext:
            privileged: True
            capabilities:
@@ -151,3 +148,12 @@ searxng:
          main:
            - path: /etc/searxng
              readOnly: false
+    valkey-data:
+      storageClass: ceph-block
+      accessMode: ReadWriteOnce
+      size: 5Gi
+      advancedMounts:
+        browser:
+          valkey:
+            - path: /data
+              readOnly: false
--- a/clusters/cl01tl/helm/seerr/Chart.lock
+++ b/clusters/cl01tl/helm/seerr/Chart.lock
@@ -0,0 +1,6 @@
+dependencies:
+- name: seerr-chart
+  repository: oci://ghcr.io/seerr-team/seerr
+  version: 3.0.0
+digest: sha256:6cf3525ac452922339261fa2a5ecc9d8cdf66b21bc30e032395d8d80bb79dc6c
+generated: "2025-12-08T20:48:24.567069-06:00"
--- a/clusters/cl01tl/helm/seerr/Chart.yaml
+++ b/clusters/cl01tl/helm/seerr/Chart.yaml
@@ -0,0 +1,22 @@
+apiVersion: v2
+name: seerr
+version: 1.0.0
+description: Seerr
+keywords:
+  - seerr
+  - media
+  - movies
+  - tv shows
+home: https://wiki.alexlebens.dev/
+sources:
+  - https://github.com/seerr-team/seerr
+  - https://github.com/seerr-team/seerr/pkgs/container/seerr
+  - https://github.com/seerr-team/seerr/tree/develop/charts/seerr-chart
+maintainers:
+  - name: alexlebens
+dependencies:
+  - name: seerr-chart
+    repository: oci://ghcr.io/seerr-team/seerr
+    version: 3.0.0
+icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/overseerr.png
+appVersion: develop
--- a/clusters/cl01tl/helm/seerr/templates/external-secret.yaml
+++ b/clusters/cl01tl/helm/seerr/templates/external-secret.yaml
@@ -0,0 +1,55 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: seerr-config-backup-secret
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: seerr-config-backup-secret
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  target:
+    template:
+      mergePolicy: Merge
+      engineVersion: v2
+      data:
+        RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/seerr/seerr-config"
+  data:
+    - secretKey: BUCKET_ENDPOINT
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/volsync/restic/config
+        metadataPolicy: None
+        property: S3_BUCKET_ENDPOINT
+    - secretKey: RESTIC_PASSWORD
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/volsync/restic/config
+        metadataPolicy: None
+        property: RESTIC_PASSWORD
+    - secretKey: AWS_DEFAULT_REGION
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/volsync/restic/config
+        metadataPolicy: None
+        property: AWS_DEFAULT_REGION
+    - secretKey: AWS_ACCESS_KEY_ID
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /digital-ocean/home-infra/volsync-backups
+        metadataPolicy: None
+        property: access_key
+    - secretKey: AWS_SECRET_ACCESS_KEY
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /digital-ocean/home-infra/volsync-backups
+        metadataPolicy: None
+        property: secret_key
--- a/clusters/cl01tl/helm/seerr/templates/http-route.yaml
+++ b/clusters/cl01tl/helm/seerr/templates/http-route.yaml
@@ -0,0 +1,28 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: http-route-seerr
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: http-route-seerr
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  parentRefs:
+    - group: gateway.networking.k8s.io
+      kind: Gateway
+      name: traefik-gateway
+      namespace: traefik
+  hostnames:
+    - seerr.alexlebens.net
+  rules:
+    - matches:
+      - path:
+          type: PathPrefix
+          value: /
+      backendRefs:
+        - group: ''
+          kind: Service
+          name: seerr-seerr-chart
+          port: 80
+          weight: 100
--- a/clusters/cl01tl/helm/seerr/templates/replication-source.yaml
+++ b/clusters/cl01tl/helm/seerr/templates/replication-source.yaml
@@ -0,0 +1,26 @@
+apiVersion: volsync.backube/v1alpha1
+kind: ReplicationSource
+metadata:
+  name: seerr-config-backup-source
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: seerr-config-backup-source
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  sourcePVC: seerr-config
+  trigger:
+    schedule: 0 4 * * *
+  restic:
+    pruneIntervalDays: 7
+    repository: seerr-config-backup-secret
+    retain:
+      hourly: 1
+      daily: 3
+      weekly: 2
+      monthly: 2
+      yearly: 4
+    copyMethod: Snapshot
+    storageClassName: ceph-block
+    volumeSnapshotClassName: ceph-blockpool-snapshot
+    cacheCapacity: 10Gi
--- a/clusters/cl01tl/helm/seerr/values.yaml
+++ b/clusters/cl01tl/helm/seerr/values.yaml
@@ -0,0 +1,31 @@
+seerr-chart:
+  image:
+    tag: develop
+    sha: f96deeef25cfb7bb0ecaa90f324bf6dfb66a844e8ed38501764f4d982a152280
+  probes:
+    livenessProbe:
+      initialDelaySeconds: 60
+      periodSeconds: 30
+      timeoutSeconds: 5
+      successThreshold: 1
+      failureThreshold: 5
+    readinessProbe:
+      initialDelaySeconds: 60
+      periodSeconds: 30
+      timeoutSeconds: 5
+      successThreshold: 1
+      failureThreshold: 5
+  service:
+    port: 80
+  config:
+    persistence:
+      size: 5Gi
+      accessModes:
+        - ReadWriteOnce
+      storageClass: ceph-block
+  ingress:
+    enabled: false
+  resources:
+    requests:
+      cpu: 10m
+      memory: 128Mi
--- a/clusters/cl01tl/helm/tubearchivist/templates/redis-replication.yaml
+++ b/clusters/cl01tl/helm/tubearchivist/templates/redis-replication.yaml
@@ -26,7 +26,7 @@ spec:
        accessModes: ["ReadWriteOnce"]
        resources:
          requests:
-            storage: 1Gi
+            storage: 5Gi
  redisExporter:
    enabled: true
    image: quay.io/opstree/redis-exporter:v1.48.0
--- a/clusters/cl01tl/helm/whodb/values.yaml
+++ b/clusters/cl01tl/helm/whodb/values.yaml
@@ -8,7 +8,7 @@ whodb:
        main:
          image:
            repository: clidey/whodb
-            tag: 0.81.0
+            tag: 0.82.0
            pullPolicy: IfNotPresent
          env:
            - name: WHODB_OLLAMA_HOST
--- a/hosts/ps08rp/blocky/config.yml
+++ b/hosts/ps08rp/blocky/config.yml
@@ -132,6 +132,7 @@ customDNS:
    radarr-anime                    IN      CNAME   traefik-cl01tl
    radarr-standup                  IN      CNAME   traefik-cl01tl
    searxng                         IN      CNAME   traefik-cl01tl
+    seerr                           IN      CNAME   traefik-cl01tl
    slskd                           IN      CNAME   traefik-cl01tl
    sonarr                          IN      CNAME   traefik-cl01tl
    sonarr-4k                       IN      CNAME   traefik-cl01tl
--- a/hosts/ps08rp/traefik/compose.yaml
+++ b/hosts/ps08rp/traefik/compose.yaml
@@ -1,7 +1,7 @@
 ---
 services:
    traefik:
-        image: ghcr.io/traefik/traefik:v3.6.2
+        image: ghcr.io/traefik/traefik:v3.6.4
        container_name: traefik
        command:
            - "--global.checkNewVersion=false"
--- a/hosts/ps09rp/blocky/config.yml
+++ b/hosts/ps09rp/blocky/config.yml
@@ -132,6 +132,7 @@ customDNS:
    radarr-anime                    IN      CNAME   traefik-cl01tl
    radarr-standup                  IN      CNAME   traefik-cl01tl
    searxng                         IN      CNAME   traefik-cl01tl
+    seerr                           IN      CNAME   traefik-cl01tl
    slskd                           IN      CNAME   traefik-cl01tl
    sonarr                          IN      CNAME   traefik-cl01tl
    sonarr-4k                       IN      CNAME   traefik-cl01tl
--- a/hosts/ps09rp/traefik/compose.yaml
+++ b/hosts/ps09rp/traefik/compose.yaml
@@ -1,7 +1,7 @@
 ---
 services:
    traefik:
-        image: ghcr.io/traefik/traefik:v3.6.2
+        image: ghcr.io/traefik/traefik:v3.6.4
        container_name: traefik
        command:
            - "--global.checkNewVersion=false"
--- a/hosts/ps10rp/gitea/compose.yaml
+++ b/hosts/ps10rp/gitea/compose.yaml
@@ -19,7 +19,7 @@ services:
            - /dev/net/tun:/dev/net/tun

    postgresql:
-        image: docker.io/postgres:17.7-alpine3.21
+        image: docker.io/postgres:18.1-alpine3.21
        container_name: gitea-postgres
        env_file:
            - .env
--- a/hosts/ps10rp/traefik/compose.yaml
+++ b/hosts/ps10rp/traefik/compose.yaml
@@ -20,7 +20,7 @@ services:
            - /dev/net/tun:/dev/net/tun

    traefik:
-        image: ghcr.io/traefik/traefik:v3.6.2
+        image: ghcr.io/traefik/traefik:v3.6.4
        container_name: traefik
        command:
            - "--global.checkNewVersion=false"
Author	SHA1	Message	Date
Renovate Bot	04eeea0cb7	Update docker.io/postgres Docker tag to v18 Some checks failed renovate/stability-days Updates have met minimum release age requirement Details lint-test-helm / lint-helm (pull_request) Failing after 16s Details lint-test-docker / lint-docker-compose (pull_request) Successful in 33s Details	2025-12-09 22:03:09 +00:00
Renovate Bot	42eb976804	Update ghcr.io/linuxserver/bazarr:1.5.3 Docker digest to 4aa1e82 (#2333 ) All checks were successful lint-test-helm / lint-helm (push) Successful in 12s Details render-manifests-push / render-manifests-push (push) Has been skipped Details renovate / renovate (push) Successful in 1m13s Details	2025-12-09 22:01:53 +00:00
Renovate Bot	3630b27a16	Update ollama/ollama Docker tag to v0.13.2 (#2331 ) All checks were successful render-manifests-push / render-manifests-push (push) Has been skipped Details lint-test-helm / lint-helm (push) Successful in 12s Details renovate / renovate (push) Successful in 1m22s Details	2025-12-09 18:02:10 +00:00
Renovate Bot	d93381d08e	Update searxng/searxng:latest Docker digest to 95e59f5 (#2330 ) Some checks failed render-manifests-push / render-manifests-push (push) Has been skipped Details lint-test-helm / lint-helm (push) Has been cancelled Details renovate / renovate (push) Has been cancelled Details	2025-12-09 18:02:04 +00:00
Renovate Bot	ed7323507d	Update Helm release harbor to v1.18.1 (#2328 ) All checks were successful render-manifests-push / render-manifests-push (push) Has been skipped Details lint-test-helm / lint-helm (push) Successful in 17s Details renovate / renovate (push) Successful in 1m40s Details	2025-12-09 09:01:44 +00:00
Alex Lebens	1b9b4b8082	fix secret All checks were successful render-manifests-push / render-manifests-push (push) Successful in 19s Details lint-test-helm / lint-helm (push) Successful in 12s Details renovate / renovate (push) Successful in 1m13s Details	2025-12-08 22:40:25 -06:00
Alex Lebens	e00140903e	add monitor All checks were successful lint-test-helm / lint-helm (push) Successful in 1m6s Details render-manifests-push / render-manifests-push (push) Successful in 25s Details renovate / renovate (push) Successful in 59s Details	2025-12-08 22:37:48 -06:00
Alex Lebens	4cda5a282b	replace with valkey sidecar All checks were successful lint-test-helm / lint-helm (push) Successful in 17s Details render-manifests-push / render-manifests-push (push) Successful in 26s Details renovate / renovate (push) Successful in 2m24s Details	2025-12-08 22:11:16 -06:00
Alex Lebens	2d18c0f052	add seer endpoint All checks were successful lint-test-helm / lint-helm (push) Successful in 13s Details render-manifests-push / render-manifests-push (push) Successful in 27s Details renovate / renovate (push) Successful in 2m29s Details	2025-12-08 21:48:21 -06:00
Alex Lebens	008b5c77a6	update service Some checks failed render-manifests-push / render-manifests-push (push) Successful in 27s Details renovate / renovate (push) Has been cancelled Details lint-test-helm / lint-helm (push) Successful in 15s Details	2025-12-08 21:47:41 -06:00
Alex Lebens	68a0301d50	change settings All checks were successful lint-test-helm / lint-helm (push) Successful in 24s Details render-manifests-push / render-manifests-push (push) Successful in 34s Details renovate / renovate (push) Successful in 1m27s Details	2025-12-08 21:31:51 -06:00
Alex Lebens	7c85944849	fix values All checks were successful lint-test-helm / lint-helm (push) Successful in 14s Details render-manifests-push / render-manifests-push (push) Successful in 41s Details renovate / renovate (push) Successful in 1m33s Details	2025-12-08 21:04:24 -06:00
Alex Lebens	f91c33d230	change image	2025-12-08 21:02:11 -06:00
Alex Lebens	4942e0f763	fix service and image All checks were successful lint-test-helm / lint-helm (push) Successful in 11s Details render-manifests-push / render-manifests-push (push) Successful in 25s Details renovate / renovate (push) Successful in 50s Details	2025-12-08 20:56:49 -06:00
Alex Lebens	5db5392881	add seerr All checks were successful renovate / renovate (push) Successful in 1m11s Details lint-test-helm / lint-helm (push) Successful in 12s Details lint-test-docker / lint-docker-compose (push) Successful in 49s Details render-manifests-push / render-manifests-push (push) Successful in 24s Details	2025-12-08 20:49:11 -06:00
Renovate Bot	594fef1515	Update Helm release generic-device-plugin to v0.20.5 (#2320 ) All checks were successful render-manifests-push / render-manifests-push (push) Has been skipped Details lint-test-helm / lint-helm (push) Successful in 15s Details renovate / renovate (push) Successful in 1m37s Details	2025-12-08 03:02:22 +00:00
Alex Lebens	23e28afbaa	change user All checks were successful render-manifests-push / render-manifests-push (push) Successful in 1m13s Details lint-test-helm / lint-helm (push) Successful in 1m30s Details renovate / renovate (push) Successful in 1m50s Details	2025-12-07 18:00:18 -06:00
Alex Lebens	7cffc51a57	change secret env All checks were successful lint-test-helm / lint-helm (push) Successful in 45s Details render-manifests-push / render-manifests-push (push) Successful in 26s Details renovate / renovate (push) Successful in 1m30s Details	2025-12-07 17:35:27 -06:00
Alex Lebens	320d0391a8	fix array	2025-12-07 17:35:27 -06:00
Renovate Bot	48e4cd2264	Update searxng/searxng:latest Docker digest to 8354c2e (#2316 ) All checks were successful lint-test-helm / lint-helm (push) Successful in 12s Details render-manifests-push / render-manifests-push (push) Has been skipped Details renovate / renovate (push) Successful in 1m51s Details	2025-12-07 22:48:02 +00:00
Alex Lebens	d5f521919e	handle conditions better Some checks failed renovate / renovate (push) Has been cancelled Details	2025-12-07 16:45:31 -06:00
Renovate Bot	6b0f4f1f11	Update ghcr.io/traefik/traefik Docker tag to v3.6.4 (#2295 ) All checks were successful renovate / renovate (push) Successful in 2m2s Details lint-test-docker / lint-docker-compose (push) Successful in 11s Details This PR contains the following updates: \| Package \| Update \| Change \| \|---\|---\|---\| \| [ghcr.io/traefik/traefik](https://hub.docker.com/_/traefik) ([source](https://github.com/traefik/traefik-library-image)) \| patch \| `v3.6.2` -> `v3.6.4` \| --- ### Release Notes <details> <summary>traefik/traefik-library-image (ghcr.io/traefik/traefik)</summary> ### [`v3.6.4`](https://github.com/traefik/traefik-library-image/compare/v3.6.4...v3.6.4) [Compare Source](https://github.com/traefik/traefik-library-image/compare/v3.6.4...v3.6.4) ### [`v3.6.4`](https://github.com/traefik/traefik-library-image/compare/v3.6.2...v3.6.4) [Compare Source](https://github.com/traefik/traefik-library-image/compare/v3.6.2...v3.6.4) </details> --- ### Configuration 📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 Automerge: Enabled. ♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 Ignore: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi4zOS4xIiwidXBkYXRlZEluVmVyIjoiNDIuMzkuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiYXV0b21lcmdlIiwiaW1hZ2UiXX0=--> Co-authored-by: Alex Lebens <alexanderlebens@gmail.com> Reviewed-on: #2295 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>	2025-12-07 18:41:52 +00:00
Alex Lebens	caceb87f81	add ignore paths All checks were successful renovate / renovate (push) Successful in 2m11s Details	2025-12-07 12:34:25 -06:00
Alex Lebens	a6f54d0ed9	override labels All checks were successful lint-test-helm / lint-helm (push) Successful in 12s Details render-manifests-push / render-manifests-push (push) Successful in 50s Details renovate / renovate (push) Successful in 2m1s Details	2025-12-07 12:26:19 -06:00
Alex Lebens	22dd67aaa1	add for debug All checks were successful renovate / renovate (push) Successful in 1m58s Details	2025-12-07 12:16:48 -06:00
Alex Lebens	aec7f80cc3	update endpoint All checks were successful lint-test-helm / lint-helm (push) Successful in 47s Details render-manifests-push / render-manifests-push (push) Successful in 1m11s Details renovate / renovate (push) Successful in 1m17s Details	2025-12-07 12:12:45 -06:00
Renovate Bot	15071cdb96	Update ghcr.io/booklore-app/booklore Docker tag to v1.13.2 (#2291 ) All checks were successful render-manifests-push / render-manifests-push (push) Has been skipped Details lint-test-helm / lint-helm (push) Successful in 16s Details renovate / renovate (push) Successful in 2m3s Details This PR contains the following updates: \| Package \| Update \| Change \| \|---\|---\|---\| \| [ghcr.io/booklore-app/booklore](https://github.com/booklore-app/booklore) \| patch \| `v1.13.1` -> `v1.13.2` \| --- ### Release Notes <details> <summary>booklore-app/booklore (ghcr.io/booklore-app/booklore)</summary> ### [`v1.13.2`](https://github.com/booklore-app/booklore/releases/tag/v1.13.2) [Compare Source](https://github.com/booklore-app/booklore/compare/v1.13.1...v1.13.2) #### 🌟 What's New in v1.13.2 #### 🚀 New Features - Add sort preference option for Magic Shelf names in the left sidebar ([#1749](https://github.com/booklore-app/booklore/issues/1749)) by [@adityachandelgit](https://github.com/adityachandelgit) - Feature: filter mode preference ([#1739](https://github.com/booklore-app/booklore/issues/1739)) by [@Muppetteer](https://github.com/Muppetteer) - Add a user-facing option to enable or disable series view ([#1748](https://github.com/booklore-app/booklore/issues/1748)) by [@adityachandelgit](https://github.com/adityachandelgit) #### ✨ Enhancements - fix(metadata): disable merging of moods and tags during metadata updates ([#1743](https://github.com/booklore-app/booklore/issues/1743)) by [@balazs-szucs](https://github.com/balazs-szucs) - fix(epub): improve date parsing to support year-only formats and add tests ([#1735](https://github.com/booklore-app/booklore/issues/1735)) by [@balazs-szucs](https://github.com/balazs-szucs) - feat(opds): Sort OPDS Feed by addedOn Desc ([#1691](https://github.com/booklore-app/booklore/issues/1691)) by [@WorldTeacher](https://github.com/WorldTeacher) - refactor(metadata): consider locked, but empty or null metadata valid ([#1729](https://github.com/booklore-app/booklore/issues/1729)) by [@balazs-szucs](https://github.com/balazs-szucs) #### 🎨 UI Tweaks - Visually indicate the active menu item in the left sidebar ([#1738](https://github.com/booklore-app/booklore/issues/1738)) by [@adityachandelgit](https://github.com/adityachandelgit) - Align the layout to be consistent throughout all dialogs ([#1737](https://github.com/booklore-app/booklore/issues/1737)) by [@adityachandelgit](https://github.com/adityachandelgit) #### 🐛 Bug Fixes - fix(amazon): improve localization of Amazon Parser ([#1706](https://github.com/booklore-app/booklore/issues/1706)) by [@balazs-szucs](https://github.com/balazs-szucs) - Add filter mode to querystring ([#1728](https://github.com/booklore-app/booklore/issues/1728)) by [@Muppetteer](https://github.com/Muppetteer) - Fix race conditions between Bookdrop and Monitoring Service when importing multiple files ([#1709](https://github.com/booklore-app/booklore/issues/1709)) by [@piffio](https://github.com/piffio) - Re-add "description" to epub metadata extraction ([#1727](https://github.com/booklore-app/booklore/issues/1727)) by [@beedaddy](https://github.com/beedaddy) ##### 🐳 Docker Images - Docker Hub: `booklore/booklore:v1.13.2` - GitHub Container Registry: `ghcr.io/booklore-app/booklore:v1.13.2` Full Changelog: <https://github.com/booklore-app/booklore/compare/v1.13.1...v1.13.2> </details> --- ### Configuration 📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 Automerge: Enabled. ♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 Ignore: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi4zOS4xIiwidXBkYXRlZEluVmVyIjoiNDIuMzkuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiYXV0b21lcmdlIiwiaW1hZ2UiXX0=--> Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/2291 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>	2025-12-07 18:04:28 +00:00
Alex Lebens	d258bf95e6	update endpoints All checks were successful lint-test-helm / lint-helm (push) Successful in 15s Details render-manifests-push / render-manifests-push (push) Successful in 25s Details renovate / renovate (push) Successful in 1m29s Details	2025-12-07 11:59:27 -06:00
Alex Lebens	c4ffa726cd	increase size Some checks failed renovate / renovate (push) Failing after 1s Details lint-test-helm / lint-helm (push) Successful in 11s Details render-manifests-push / render-manifests-push (push) Successful in 1m18s Details	2025-12-07 11:48:43 -06:00
Alex Lebens	d8a071d545	fix workflow	2025-12-07 11:48:43 -06:00
Renovate Bot	c9b626708e	Update searxng/searxng:latest Docker digest to 7605237 (#2309 ) All checks were successful render-manifests-push / render-manifests-push (push) Has been skipped Details lint-test-helm / lint-helm (push) Successful in 16s Details renovate / renovate (push) Successful in 1m4s Details	2025-12-07 14:02:02 +00:00
Renovate Bot	71dd70db02	Update ghcr.io/linuxserver/qbittorrent:5.1.4 Docker digest to 043498d (#2307 ) All checks were successful render-manifests-push / render-manifests-push (push) Has been skipped Details lint-test-helm / lint-helm (push) Successful in 12s Details renovate / renovate (push) Successful in 1m30s Details	2025-12-07 08:02:07 +00:00
Alex Lebens	72ee99bc16	disable init All checks were successful lint-test-helm / lint-helm (push) Successful in 16s Details render-manifests-push / render-manifests-push (push) Successful in 32s Details renovate / renovate (push) Successful in 1m34s Details	2025-12-06 22:25:37 -06:00
Alex Lebens	aac6714176	remove time check All checks were successful lint-test-helm / lint-helm (push) Successful in 15s Details render-manifests-push / render-manifests-push (push) Successful in 45s Details renovate / renovate (push) Successful in 1m3s Details	2025-12-06 22:21:05 -06:00
Renovate Bot	abfd362d81	Update ghcr.io/alex1989hu/kubelet-serving-cert-approver Docker tag to v0.10.1 (#2289 ) All checks were successful render-manifests-push / render-manifests-push (push) Has been skipped Details lint-test-helm / lint-helm (push) Successful in 15s Details renovate / renovate (push) Successful in 1m22s Details This PR contains the following updates: \| Package \| Update \| Change \| \|---\|---\|---\| \| [ghcr.io/alex1989hu/kubelet-serving-cert-approver](https://github.com/alex1989hu/kubelet-serving-cert-approver) \| patch \| `0.10.0` -> `0.10.1` \| --- ### Release Notes <details> <summary>alex1989hu/kubelet-serving-cert-approver (ghcr.io/alex1989hu/kubelet-serving-cert-approver)</summary> ### [`v0.10.1`](https://github.com/alex1989hu/kubelet-serving-cert-approver/blob/HEAD/CHANGELOG.md#v0101-2025-12-06) [Compare Source](https://github.com/alex1989hu/kubelet-serving-cert-approver/compare/v0.10.0...v0.10.1) ##### Chore - bump docker/metadata-action from 5.9.0 to 5.10.0 - upgrade cobra v1.10.2 - upgrade go 1.25.5 </details> --- ### Configuration 📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 Automerge: Enabled. ♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 Ignore: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi4zOS4xIiwidXBkYXRlZEluVmVyIjoiNDIuMzkuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiYXV0b21lcmdlIiwiaW1hZ2UiXX0=--> Reviewed-on: #2289 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>	2025-12-07 03:18:49 +00:00
Alex Lebens	8ef1e429e4	fix paths All checks were successful renovate / renovate (push) Successful in 1m59s Details	2025-12-06 21:14:06 -06:00
Alex Lebens	9425c92ba3	enable security All checks were successful lint-test-helm / lint-helm (push) Successful in 18s Details render-manifests-push / render-manifests-push (push) Successful in 58s Details renovate / renovate (push) Successful in 1m29s Details	2025-12-06 21:03:49 -06:00
Renovate Bot	2b670b1e24	Update ghcr.io/gitroomhq/postiz-app Docker tag to v2.10.1 (#2299 ) Some checks failed render-manifests-push / render-manifests-push (push) Has been skipped Details lint-test-helm / lint-helm (push) Has been cancelled Details renovate / renovate (push) Has been cancelled Details	2025-12-07 03:03:00 +00:00
Renovate Bot	112a5afefd	Update clidey/whodb Docker tag to v0.82.0 (#2298 ) Some checks failed lint-test-helm / lint-helm (push) Has been cancelled Details render-manifests-push / render-manifests-push (push) Has been cancelled Details renovate / renovate (push) Has been cancelled Details	2025-12-07 03:02:45 +00:00
Renovate Bot	a248f2d4a5	Update Helm release argo-events to v2.4.19 (#2296 ) Some checks failed lint-test-helm / lint-helm (push) Has been cancelled Details render-manifests-push / render-manifests-push (push) Has been skipped Details renovate / renovate (push) Has been cancelled Details	2025-12-07 03:02:35 +00:00
Alex Lebens	93f8cf531a	fix version Some checks failed renovate / renovate (push) Has been cancelled Details	2025-12-06 21:02:11 -06:00
Renovate Bot	54e74bdd12	Update ghcr.io/n8n-io/n8n Docker tag to v1.123.3 (#2294 ) Some checks failed render-manifests-push / render-manifests-push (push) Has been skipped Details renovate / renovate (push) Has been cancelled Details lint-test-helm / lint-helm (push) Successful in 22s Details	2025-12-07 03:01:52 +00:00