chore(deps): update helm release cilium to v1.19.0

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [harbor.alexlebens.net/images/site-profile](https://gitea.alexlebens.dev/alexlebens/site-profile) | minor | `2.4.0` → `2.5.0` |

---

### Release Notes

<details>
<summary>alexlebens/site-profile (harbor.alexlebens.net/images/site-profile)</summary>

### [`v2.5.0`](https://gitea.alexlebens.dev/alexlebens/site-profile/compare/2.4.0...2.5.0)

[Compare Source](https://gitea.alexlebens.dev/alexlebens/site-profile/compare/2.4.0...2.5.0)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4zLjYiLCJ1cGRhdGVkSW5WZXIiOiI0My4zLjYiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImltYWdlIl19-->

Reviewed-on: #3875
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>

clusters/cl01tl/helm/argocd/values.yaml

@@ -4,6 +4,7 @@ argo-cd:
   configs:
     cm:
       admin.enabled: true
+      accounts.homepage: apiKey
       timeout.reconciliation: 100s
       timeout.reconciliation.jitter: 60s
       url: https://argocd.alexlebens.net
@@ -29,6 +30,7 @@ argo-cd:
     rbac:
       policy.csv: |
         g, ArgoCD Admins, role:admin
+        g, homepage, role:readonly
   controller:
     replicas: 1
     metrics:

clusters/cl01tl/helm/blocky/values.yaml

@@ -112,6 +112,7 @@ blocky:
               booklore                        IN      CNAME   traefik-cl01tl
               ceph                            IN      CNAME   traefik-cl01tl
               code-server                     IN      CNAME   traefik-cl01tl
+              directus                        IN      CNAME   traefik-cl01tl
               excalidraw                      IN      CNAME   traefik-cl01tl
               feishin                         IN      CNAME   traefik-cl01tl
               garage-s3                       IN      CNAME   traefik-cl01tl

clusters/cl01tl/helm/cilium/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: cilium
   repository: https://helm.cilium.io/
-  version: 1.18.6
-digest: sha256:8ea328ac238524b5b423e6289f5e25d05ef64e6aa19cfd5de238f1d5dd533e9b
-generated: "2026-02-05T12:00:20.15778-06:00"
+  version: 1.19.0
+digest: sha256:d2319facc93cab2a0a137588d8bd93315b52025b3ec86bc89edb0e236a74c814
+generated: "2026-02-10T04:41:56.613146232Z"

clusters/cl01tl/helm/cilium/Chart.yaml

@@ -15,7 +15,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: cilium
-    version: 1.18.6
+    version: 1.19.0
     repository: https://helm.cilium.io/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/cilium.png
 # renovate: datasource=github-releases depName=cilium/cilium

clusters/cl01tl/helm/directus/Chart.yaml

@@ -21,9 +21,6 @@ dependencies:
     alias: directus
     repository: https://bjw-s-labs.github.io/helm-charts/
     version: 4.6.2
-  - name: cloudflared
-    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.3.0
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.5.1

clusters/cl01tl/helm/directus/values.yaml

@@ -13,7 +13,7 @@ directus:
             pullPolicy: IfNotPresent
           env:
             - name: PUBLIC_URL
-              value: https://directus.alexlebens.dev
+              value: https://directus.alexlebens.net
             - name: WEBSOCKETS_ENABLED
               value: true
             - name: ADMIN_EMAIL
@@ -125,7 +125,7 @@ directus:
             - name: AUTH_AUTHENTIK_SCOPE
               value: openid profile email
             - name: AUTH_AUTHENTIK_ISSUER_URL
-              value: https://auth.alexlebens.dev/application/o/directus/.well-known/openid-configuration
+              value: https://authentik.alexlebens.net/application/o/directus/.well-known/openid-configuration
             - name: AUTH_AUTHENTIK_IDENTIFIER_KEY
               value: email
             - name: AUTH_AUTHENTIK_ALLOW_PUBLIC_REGISTRATION
@@ -168,6 +168,27 @@ directus:
           bearerTokenSecret:
             name: directus-metric-token
             key: metric-token
+  route:
+    main:
+      kind: HTTPRoute
+      parentRefs:
+        - group: gateway.networking.k8s.io
+          kind: Gateway
+          name: traefik-gateway
+          namespace: traefik
+      hostnames:
+        - directus.alexlebens.net
+      rules:
+        - backendRefs:
+            - group: ''
+              kind: Service
+              name: directus
+              port: 80
+              weight: 100
+          matches:
+            - path:
+                type: PathPrefix
+                value: /
 postgres-18-cluster:
   mode: recovery
   recovery:

clusters/cl01tl/helm/gatus/values.yaml

@@ -327,7 +327,7 @@ gatus:
         <<: *defaults
         group: external
       - name: directus
-        url: https://directus.alexlebens.dev
+        url: https://directus.alexlebens.net
         <<: *defaults
         group: external
       - name: postiz

clusters/cl01tl/helm/homepage/templates/external-secret.yaml

@@ -12,6 +12,41 @@ spec:
     kind: ClusterSecretStore
     name: vault
   data:
+    - secretKey: HOMEPAGE_VAR_GITEA_API_TOKEN
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/gitea/auth/homepage
+        metadataPolicy: None
+        property: token
+    - secretKey: HOMEPAGE_VAR_ARGOCD_API_TOKEN
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/argocd/credentials/homepage
+        metadataPolicy: None
+        property: token
+    - secretKey: HOMEPAGE_VAR_KOMODO_API_KEY
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/komodo/homepage
+        metadataPolicy: None
+        property: key
+    - secretKey: HOMEPAGE_VAR_KOMODO_API_SECRET
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/komodo/homepage
+        metadataPolicy: None
+        property: secret
+    - secretKey: HOMEPAGE_VAR_JELLYSTAT_API_KEY
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/jellystat/homepage
+        metadataPolicy: None
+        property: key
     - secretKey: HOMEPAGE_VAR_SYNOLOGY_USER
       remoteRef:
         conversionStrategy: Default
@@ -26,20 +61,13 @@ spec:
         key: /synology/auth/cl01tl
         metadataPolicy: None
         property: password
-    - secretKey: HOMEPAGE_VAR_UNIFI_USER
+    - secretKey: HOMEPAGE_VAR_UNIFI_API_KEY
       remoteRef:
         conversionStrategy: Default
         decodingStrategy: None
         key: /unifi/auth/cl01tl
         metadataPolicy: None
-        property: user
-    - secretKey: HOMEPAGE_VAR_UNIFI_PASSWORD
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /unifi/auth/cl01tl
-        metadataPolicy: None
-        property: password
+        property: api-key
     - secretKey: HOMEPAGE_VAR_SONARR_KEY
       remoteRef:
         conversionStrategy: Default

clusters/cl01tl/helm/homepage/values.yaml

@@ -4,7 +4,7 @@ homepage:
   controllers:
     main:
       type: deployment
-      replicas: 3
+      replicas: 1
       strategy: RollingUpdate
       annotations:
         reloader.stakater.com/auto: "true"
@@ -206,8 +206,8 @@ homepage:
               - Content Management:
                   icon: directus.png
                   description: Directus
-                  href: https://directus.alexlebens.dev
-                  siteMonitor: https://directus.alexlebens.dev
+                  href: https://directus.alexlebens.net
+                  siteMonitor: http://directus.directus:80
                   statusStyle: dot
               - Social Media Management:
                   icon: sh-postiz.webp
@@ -301,6 +301,16 @@ homepage:
                   href: https://gitea.alexlebens.dev
                   siteMonitor: https://gitea.alexlebens.dev
                   statusStyle: dot
+                  namespace: gitea
+                  app: gitea
+                  podSelector: >-
+                      app.kubernetes.io/instance in (
+                          gitea
+                      )
+                  widget:
+                      type: gitea
+                      url: http://gitea-http.gitea:3000
+                      key: {{ "{{HOMEPAGE_VAR_GITEA_API_TOKEN}}" }}
               - Code (Local):
                   icon: sh-gitea.webp
                   description: Gitea
@@ -325,19 +335,37 @@ homepage:
                   href: https://home-assistant-code-server.alexlebens.net
                   siteMonitor: http://home-assistant-code-server.home-assistant:8443
                   statusStyle: dot
+          - Automation:
               - Continuous Deployment:
                   icon: sh-argo-cd.webp
                   description: ArgoCD
                   href: https://argocd.alexlebens.net
                   siteMonitor: http://argocd-server.argocd:80
                   statusStyle: dot
+                  namespace: argocd
+                  app: argocd
+                  podSelector: >-
+                      app.kubernetes.io/instance in (
+                          argocd
+                      )
+                  widget:
+                      type: argocd
+                      url: http://argocd-server.argocd:80
+                      key: {{ "{{HOMEPAGE_VAR_ARGOCD_API_TOKEN}}" }}
+                      fields: ["outOfSync", "progressing", "suspended", "degraded"]
               - Docker Deployment:
                   icon: sh-komodo-light.webp
                   description: Komodo
                   href: https://komodo.alexlebens.net
                   siteMonitor: http://komodo-main.komodo:80
                   statusStyle: dot
-          - Automation:
+                  widget:
+                      type: komodo
+                      url: http://komodo-main.komodo:80
+                      key: {{ "{{HOMEPAGE_VAR_KOMODO_API_KEY}}" }}
+                      secret: {{ "{{HOMEPAGE_VAR_KOMODO_API_SECRET}}" }}
+                      showStacks: true
+                      fields: ["running", "down", "unhealthy", "unknown"]
               - Deployment Workflows:
                   icon: sh-argo-cd.webp
                   description: Argo Workflows
@@ -363,24 +391,36 @@ homepage:
                   href: https://headlamp.alexlebens.net
                   siteMonitor: http://headlamp.headlamp:80
                   statusStyle: dot
-              - Network Monitoring:
-                  icon: sh-cilium.webp
-                  description: Hubble for Cilium
-                  href: https://hubble.alexlebens.net
-                  siteMonitor: http://hubble-ui.kube-system:80
-                  statusStyle: dot
               - Dashboard:
                   icon: sh-grafana.webp
                   description: Grafana
                   href: https://grafana.alexlebens.net
                   siteMonitor: http://grafana-main-service.grafana-operator:3000/api/health
                   statusStyle: dot
+              - Network Monitoring:
+                  icon: sh-cilium.webp
+                  description: Hubble for Cilium
+                  href: https://hubble.alexlebens.net
+                  siteMonitor: http://hubble-ui.kube-system:80
+                  statusStyle: dot
+                  namespace: kube-system
+                  app: cilium-operator
+                  podSelector: >-
+                      app.kubernetes.io/part-of in (
+                          cilium
+                      )
               - Metrics:
                   icon: sh-prometheus.webp
                   description: Prometheus
                   href: https://prometheus.alexlebens.net
                   siteMonitor: http://kube-prometheus-stack-prometheus.kube-prometheus-stack:9090
                   statusStyle: dot
+                  namespace: kube-prometheus-stack
+                  app: prometheus
+                  podSelector: >-
+                      app.kubernetes.io/instance in (
+                          kube-prometheus-stack
+                      )
                   widget:
                     type: prometheus
                     url: http://kube-prometheus-stack-prometheus.kube-prometheus-stack:9090
@@ -454,6 +494,11 @@ homepage:
                   href: https://unifi.alexlebens.net
                   siteMonitor: https://unifi.alexlebens.net
                   statusStyle: dot
+                  widget:
+                      type: unifi
+                      url: https://unifi.alexlebens.net
+                      key: {{ "{{HOMEPAGE_VAR_UNIFI_API_KEY}}" }}
+                      fields: ["uptime", "wan", "lan_devices", "wlan_devices"]
               - Network Attached Storage:
                   icon: sh-synology-light.webp
                   description: Synology
@@ -526,6 +571,9 @@ homepage:
                   href: https://backrest.alexlebens.net
                   siteMonitor: http://backrest.backrest:80
                   statusStyle: dot
+                  widget:
+                      type: backrest
+                      url: http://backrest.backrest:80
           - Content:
               - qUI:
                   icon: https://raw.githubusercontent.com/autobrr/qui/8487c818886df9abb2b1456f43b54e0ba180a2bd/web/public/icons.svg

clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: kube-prometheus-stack
   repository: oci://ghcr.io/prometheus-community/charts
-  version: 81.5.0
+  version: 81.6.0
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
   version: 4.6.2
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.0.4
-digest: sha256:62ceeea1ed2f1f3a838e468665c3f291cb67ac547f3fa37863131f088736a750
-generated: "2026-02-03T20:37:14.907439914Z"
+digest: sha256:c72007e1f7faf89fddc4058d2e038ae74fdbf0a49ac50063f67a78447fe3d84c
+generated: "2026-02-10T02:01:54.512608335Z"

clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml

@@ -20,7 +20,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: kube-prometheus-stack
-    version: 81.5.0
+    version: 81.6.0
     repository: oci://ghcr.io/prometheus-community/charts
   - name: app-template
     alias: ntfy-alertmanager

clusters/cl01tl/helm/ntfy/Chart.yaml

@@ -20,4 +20,4 @@ dependencies:
     version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ntfy.png
 # renovate: datasource=github-releases depName=binwiederhier/ntfy
-appVersion: 2.16.0
+appVersion: 2.17.0

clusters/cl01tl/helm/ntfy/values.yaml

@@ -9,7 +9,7 @@ ntfy:
         main:
           image:
             repository: binwiederhier/ntfy
-            tag: v2.16.0
+            tag: v2.17.0
             pullPolicy: IfNotPresent
           args: ["serve"]
           env:

clusters/cl01tl/helm/roundcube/values.yaml

@@ -9,7 +9,7 @@ roundcube:
         main:
           image:
             repository: roundcube/roundcubemail
-            tag: 1.6.12-fpm-alpine
+            tag: 1.6.13-fpm-alpine
             pullPolicy: IfNotPresent
           env:
             - name: ROUNDCUBEMAIL_DB_TYPE
@@ -85,7 +85,7 @@ roundcube:
         backup:
           image:
             repository: roundcube/roundcubemail
-            tag: 1.6.12-fpm-alpine
+            tag: 1.6.13-fpm-alpine
             pullPolicy: IfNotPresent
           env:
             - name: ROUNDCUBEMAIL_DB_TYPE

clusters/cl01tl/helm/site-profile/values.yaml

@@ -11,7 +11,7 @@ site-profile:
         main:
           image:
             repository: harbor.alexlebens.net/images/site-profile
-            tag: 2.4.0
+            tag: 2.5.0
             pullPolicy: IfNotPresent
           resources:
             requests:

hosts/ps08rp/blocky/config.yml

@@ -87,6 +87,7 @@ customDNS:
     booklore                        IN      CNAME   traefik-cl01tl
     ceph                            IN      CNAME   traefik-cl01tl
     code-server                     IN      CNAME   traefik-cl01tl
+    directus                        IN      CNAME   traefik-cl01tl
     excalidraw                      IN      CNAME   traefik-cl01tl
     feishin                         IN      CNAME   traefik-cl01tl
     garage-s3                       IN      CNAME   traefik-cl01tl

hosts/ps09rp/blocky/config.yml

@@ -108,6 +108,7 @@ customDNS:
     booklore                        IN      CNAME   traefik-cl01tl
     ceph                            IN      CNAME   traefik-cl01tl
     code-server                     IN      CNAME   traefik-cl01tl
+    directus                        IN      CNAME   traefik-cl01tl
     excalidraw                      IN      CNAME   traefik-cl01tl
     feishin                         IN      CNAME   traefik-cl01tl
     garage-s3                       IN      CNAME   traefik-cl01tl