43 Commits

Author SHA1 Message Date
3a9183035b feat: update compose
All checks were successful
lint-test-docker / lint-docker-compose (push) Successful in 16s
renovate / renovate (push) Successful in 2m12s
2026-03-24 14:38:53 -05:00
f52b52cdb5 feat: change order of rules
All checks were successful
renovate / renovate (push) Successful in 2m29s
2026-03-24 14:12:15 -05:00
f3dcecdd51 feat: upgrade to v2 (#5075)
All checks were successful
lint-test-helm / lint-helm (push) Successful in 16s
lint-test-helm / validate-kubeconform (push) Has been skipped
lint-test-docker / lint-docker-compose (push) Successful in 25s
renovate / renovate (push) Successful in 3m27s
Reviewed-on: #5075
2026-03-24 19:04:24 +00:00
0572ffac85 chore(deps): update guillaumefalourd/branch-exists action to v1.2 (#5041)
All checks were successful
renovate / renovate (push) Successful in 1m51s
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [GuillaumeFalourd/branch-exists](https://github.com/GuillaumeFalourd/branch-exists) | action | minor | `v1.1` → `v1.2` |

---

### Release Notes

<details>
<summary>GuillaumeFalourd/branch-exists (GuillaumeFalourd/branch-exists)</summary>

### [`v1.2`](https://github.com/GuillaumeFalourd/branch-exists/releases/tag/v1.2)

[Compare Source](https://github.com/GuillaumeFalourd/branch-exists/compare/v1.1...v1.2)

Update actions/checkout to v6.0.2.

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My44NC4yIiwidXBkYXRlZEluVmVyIjoiNDMuODQuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Reviewed-on: #5041
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2026-03-24 18:19:22 +00:00
41cab82d54 chore(deps): update ghcr.io/caronc/apprise docker tag to v1.3.3 (#5054)
Some checks failed
lint-test-helm / lint-helm (push) Successful in 17s
lint-test-helm / validate-kubeconform (push) Has been skipped
renovate / renovate (push) Has been cancelled
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/caronc/apprise](https://github.com/caronc/apprise-api) | patch | `v1.3.2` → `v1.3.3` |

---

### Release Notes

<details>
<summary>caronc/apprise-api (ghcr.io/caronc/apprise)</summary>

### [`v1.3.3`](https://github.com/caronc/apprise-api/releases/tag/v1.3.3): Apprise API Release v1.3.3

[Compare Source](https://github.com/caronc/apprise-api/compare/v1.3.3...v1.3.3)

##### What's Changed

This release:

- integrates itself with the new [Apprise URL Builder](https://appriseit.com/tools/url-builder/)
- Add support for Apprise v1.9.9

##### ❤️ Life Cycle

- docs: Newly added undocumented parameter by [@&#8203;ciro-mota](https://github.com/ciro-mota) in [#&#8203;292](https://github.com/caronc/apprise-api/pull/292)
- fix: fixes reverse proxy port issues by [@&#8203;Bruceforce](https://github.com/Bruceforce) in [#&#8203;298](https://github.com/caronc/apprise-api/pull/298)
- Case sensitive field mapping in place in [#&#8203;299](https://github.com/caronc/apprise-api/pull/299)
- APPRISE\_BASE\_URL settings now dynamically build nginx.conf in [#&#8203;300](https://github.com/caronc/apprise-api/pull/300)
- Updated copyright notices to reflect 2026 in [#&#8203;303](https://github.com/caronc/apprise-api/pull/303)

##### New Contributors

- [@&#8203;ciro-mota](https://github.com/ciro-mota) made their first contribution in [#&#8203;292](https://github.com/caronc/apprise-api/pull/292)
- [@&#8203;Bruceforce](https://github.com/Bruceforce) made their first contribution in [#&#8203;298](https://github.com/caronc/apprise-api/pull/298)

**Full Changelog**: <https://github.com/caronc/apprise-api/compare/v1.3.1...v1.3.3>

### [`v1.3.3`](https://github.com/caronc/apprise-api/releases/tag/v1.3.3): Apprise API Release v1.3.3

[Compare Source](https://github.com/caronc/apprise-api/compare/v1.3.2...v1.3.3)

##### What's Changed

This release:

- integrates itself with the new [Apprise URL Builder](https://appriseit.com/tools/url-builder/)
- Add support for Apprise v1.9.9

##### ❤️ Life Cycle

- docs: Newly added undocumented parameter by [@&#8203;ciro-mota](https://github.com/ciro-mota) in [#&#8203;292](https://github.com/caronc/apprise-api/pull/292)
- fix: fixes reverse proxy port issues by [@&#8203;Bruceforce](https://github.com/Bruceforce) in [#&#8203;298](https://github.com/caronc/apprise-api/pull/298)
- Case sensitive field mapping in place in [#&#8203;299](https://github.com/caronc/apprise-api/pull/299)
- APPRISE\_BASE\_URL settings now dynamically build nginx.conf in [#&#8203;300](https://github.com/caronc/apprise-api/pull/300)
- Updated copyright notices to reflect 2026 in [#&#8203;303](https://github.com/caronc/apprise-api/pull/303)

##### New Contributors

- [@&#8203;ciro-mota](https://github.com/ciro-mota) made their first contribution in [#&#8203;292](https://github.com/caronc/apprise-api/pull/292)
- [@&#8203;Bruceforce](https://github.com/Bruceforce) made their first contribution in [#&#8203;298](https://github.com/caronc/apprise-api/pull/298)

**Full Changelog**: <https://github.com/caronc/apprise-api/compare/v1.3.1...v1.3.3>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My44OS4xIiwidXBkYXRlZEluVmVyIjoiNDMuODkuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiYXV0b21lcmdlIiwiaW1hZ2UiXX0=-->

Reviewed-on: #5054
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2026-03-24 18:18:32 +00:00
f95137baba chore(deps): update dependency element-hq/synapse to v1.150.0 (#5040)
All checks were successful
lint-test-helm / lint-helm (push) Successful in 22s
lint-test-helm / validate-kubeconform (push) Has been skipped
renovate / renovate (push) Successful in 1m48s
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [element-hq/synapse](https://github.com/element-hq/synapse) | minor | `v1.149.1` → `v1.150.0` |

---

### Release Notes

<details>
<summary>element-hq/synapse (element-hq/synapse)</summary>

### [`v1.150.0`](https://github.com/element-hq/synapse/releases/tag/v1.150.0)

[Compare Source](https://github.com/element-hq/synapse/compare/v1.149.1...v1.150.0)

### Synapse 1.150.0 (2026-03-24)

No significant changes since 1.150.0rc1.

### Synapse 1.150.0rc1 (2026-03-17)

#### Features

- Add experimental support for the [MSC4370](https://github.com/matrix-org/matrix-spec-proposals/pull/4370) Federation API `GET /extremities` endpoint. ([#&#8203;19314](https://github.com/element-hq/synapse/issues/19314))
- [MSC4140: Cancellable delayed events](https://github.com/matrix-org/matrix-spec-proposals/pull/4140): When persisting a delayed event to the timeline, include its `delay_id` in the event's `unsigned` section in `/sync` responses to the event sender. ([#&#8203;19479](https://github.com/element-hq/synapse/issues/19479))
- Expose [MSC4354 Sticky Events](https://github.com/matrix-org/matrix-spec-proposals/pull/4354) over the legacy (v3) /sync API. ([#&#8203;19487](https://github.com/element-hq/synapse/issues/19487))
- When Matrix Authentication Service (MAS) integration is enabled, allow MAS to set the user locked status in Synapse. ([#&#8203;19554](https://github.com/element-hq/synapse/issues/19554))

#### Bugfixes

- Fix `Build and push complement image` CI job pointing to non-existent image. ([#&#8203;19523](https://github.com/element-hq/synapse/issues/19523))
- Fix a bug introduced in v1.26.0 that caused deactivated, erased users to not be removed from the user directory. ([#&#8203;19542](https://github.com/element-hq/synapse/issues/19542))

#### Improved Documentation

- In the Admin API documentation, always express path parameters as `/<param>` instead of as `/$param`. ([#&#8203;19307](https://github.com/element-hq/synapse/issues/19307))
- Update docs to clarify `outbound_federation_restricted_to` can also be used with the [Secure Border Gateway (SBG)](https://element.io/en/server-suite/secure-border-gateways). ([#&#8203;19517](https://github.com/element-hq/synapse/issues/19517))
- Unify Complement developer docs. ([#&#8203;19518](https://github.com/element-hq/synapse/issues/19518))

#### Internal Changes

- Put membership updates in a background resumable task when changing the avatar or the display name. ([#&#8203;19311](https://github.com/element-hq/synapse/issues/19311))
- Add in-repo Complement test to sanity check Synapse version matches git checkout (testing what we think we are). ([#&#8203;19476](https://github.com/element-hq/synapse/issues/19476))
- Migrate `dev` dependencies to [PEP 735](https://peps.python.org/pep-0735/) dependency groups. ([#&#8203;19490](https://github.com/element-hq/synapse/issues/19490))
- Remove the optional `systemd-python` dependency and the `systemd` extra on the `synapse` package. ([#&#8203;19491](https://github.com/element-hq/synapse/issues/19491))
- Avoid re-computing the event ID when cloning events. ([#&#8203;19527](https://github.com/element-hq/synapse/issues/19527))
- Allow caching of the `/versions` and `/auth_metadata` public endpoints. ([#&#8203;19530](https://github.com/element-hq/synapse/issues/19530))
- Add a few labels to the number groupings in the `Processed request` logs. ([#&#8203;19548](https://github.com/element-hq/synapse/issues/19548))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My44NC4yIiwidXBkYXRlZEluVmVyIjoiNDMuODQuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=-->

Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/5040
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2026-03-24 18:14:45 +00:00
ca462b84a7 chore(deps): update ghcr.io/renovatebot/renovate docker tag to v43.89.2 (#5073)
All checks were successful
renovate / renovate (push) Successful in 2m22s
2026-03-24 18:05:40 +00:00
fe911a7141 chore(deps): update foldergram/foldergram to v1.0.6 (#5049)
Some checks failed
lint-test-helm / lint-helm (push) Successful in 20s
lint-test-helm / validate-kubeconform (push) Has been skipped
renovate / renovate (push) Has been cancelled
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [foldergram/foldergram](https://github.com/foldergram/foldergram) | patch | `v1.0.5` → `v1.0.6` |
| [ghcr.io/foldergram/foldergram](https://github.com/foldergram/foldergram) | patch | `1.0.5` → `1.0.6` |

---

### Release Notes

<details>
<summary>foldergram/foldergram (foldergram/foldergram)</summary>

### [`v1.0.6`](https://github.com/foldergram/foldergram/releases/tag/v1.0.6)

[Compare Source](https://github.com/foldergram/foldergram/compare/v1.0.5...v1.0.6)

- Added admin-only folder customization: rename folders in-app without changing filesystem names, and add an optional folder description.
- Added admin-only “Set as Cover” from the image viewer to choose any image in a folder as that folder’s avatar.
- Added support for filesystem-based folder covers using `cover.jpg`, `cover.jpeg`, `cover.png`, `cover.webp`, or `cover.gif`.
- Cover-file detection now works for nested child albums, not just top-level folders.
- Cover filenames are now treated case-insensitively, so files like `Cover.jpg` work the same as `cover.jpg`.
- Active cover files are hidden from the feed and folder grid so they do not appear as duplicate posts.
- Manual folder names, descriptions, and UI-selected covers now persist across normal rescans and startup scans instead of being overwritten.
- Folder avatars are now clickable on the folder page and open the currently active avatar image in the existing `ImageModal`.
- Hidden cover images can now still open in the viewer when they are the folder’s active avatar.
- Added an admin-only `Home Feed Default` setting under `Scan & Library` to choose whether Home opens with Random, Recent, or Rediscover.
- The homepage now uses the saved app-wide feed default on first load instead of relying on a hardcoded mode.
- `Random` remains the single fallback and default when no home-feed preference has been configured yet.
- Viewers can still switch feed modes from the Home page without changing the saved admin default.
- Added regression coverage for rescan persistence, child-album cover detection, case-insensitive cover hiding, active-avatar opening behavior, and home-feed default validation/status handling.

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these updates again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My44OS4xIiwidXBkYXRlZEluVmVyIjoiNDMuODkuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiYXV0b21lcmdlIiwiaW1hZ2UiXX0=-->

Reviewed-on: #5049
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2026-03-24 18:04:00 +00:00
718f89b1f0 chore(deps): update rclone/rclone to v1.73.3 (#5069)
All checks were successful
lint-test-helm / lint-helm (push) Successful in 22s
lint-test-helm / validate-kubeconform (push) Has been skipped
renovate / renovate (push) Successful in 1m54s
2026-03-24 17:21:31 +00:00
76dd030acc chore(deps): update kube-prometheus-stack docker tag to v82.13.6 (#5067)
Some checks failed
lint-test-helm / validate-kubeconform (push) Has been cancelled
lint-test-helm / lint-helm (push) Has been cancelled
renovate / renovate (push) Has been cancelled
2026-03-24 17:21:16 +00:00
933c77ab42 chore(deps): update immich to v2.6.2 (#5065)
Some checks failed
lint-test-helm / lint-helm (push) Successful in 20s
lint-test-helm / validate-kubeconform (push) Has been cancelled
renovate / renovate (push) Has been cancelled
2026-03-24 17:20:44 +00:00
a169aa5def chore(deps): update home-assistant to v2026.3.4 (#5064)
Some checks failed
lint-test-helm / validate-kubeconform (push) Has been cancelled
lint-test-helm / lint-helm (push) Has been cancelled
renovate / renovate (push) Has been cancelled
2026-03-24 17:20:34 +00:00
c80d2c7e2b chore(deps): update helm release matrix-synapse to v3.12.24 (#5061)
All checks were successful
lint-test-helm / lint-helm (push) Successful in 21s
lint-test-helm / validate-kubeconform (push) Has been skipped
renovate / renovate (push) Successful in 1m52s
2026-03-24 17:00:18 +00:00
c68ee5d6d0 chore(deps): update helm release generic-device-plugin to v0.20.26 (#5059)
Some checks failed
lint-test-helm / lint-helm (push) Successful in 21s
lint-test-helm / validate-kubeconform (push) Has been skipped
renovate / renovate (push) Has been cancelled
2026-03-24 16:59:46 +00:00
4b297941ac chore(deps): update helm release argo-workflows to v1.0.6 (#5058)
Some checks failed
lint-test-helm / validate-kubeconform (push) Has been cancelled
lint-test-helm / lint-helm (push) Has been cancelled
renovate / renovate (push) Has been cancelled
2026-03-24 16:59:23 +00:00
288dc661cd chore(deps): update ghcr.io/stuffanthings/qbit_manage docker tag to v4.6.6 (#5055)
All checks were successful
lint-test-helm / lint-helm (push) Successful in 24s
lint-test-helm / validate-kubeconform (push) Has been skipped
renovate / renovate (push) Successful in 2m30s
2026-03-24 16:40:35 +00:00
c4d4ff1a66 chore(deps): update ghcr.io/av1155/houndarr docker tag to v1.6.2 (#5053)
Some checks failed
lint-test-helm / validate-kubeconform (push) Has been cancelled
lint-test-helm / lint-helm (push) Has been cancelled
renovate / renovate (push) Has been cancelled
2026-03-24 16:40:16 +00:00
e23b5d1aaf chore(deps): update frederikemmer/medialyze to v0.2.5 (#5050)
All checks were successful
lint-test-helm / lint-helm (push) Successful in 15s
lint-test-helm / validate-kubeconform (push) Has been skipped
renovate / renovate (push) Successful in 2m18s
2026-03-24 16:12:49 +00:00
8e5b4cf952 chore(deps): update element-web (#5048)
Some checks failed
lint-test-helm / validate-kubeconform (push) Has been cancelled
lint-test-helm / lint-helm (push) Has been cancelled
renovate / renovate (push) Has been cancelled
2026-03-24 16:12:28 +00:00
1e959fd12b chore(deps): update searxng/searxng:latest docker digest to 5cb5844 (#5004)
All checks were successful
lint-test-helm / lint-helm (push) Successful in 24s
lint-test-helm / validate-kubeconform (push) Has been skipped
renovate / renovate (push) Successful in 2m30s
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| searxng/searxng | digest | `b6db575` → `5cb5844` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My44NC4yIiwidXBkYXRlZEluVmVyIjoiNDMuODQuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiYXV0b21lcmdlIiwiaW1hZ2UiXX0=-->

Reviewed-on: #5004
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2026-03-24 16:06:28 +00:00
1200ba46d6 ci: change to support jsonc
All checks were successful
renovate / renovate (push) Successful in 2m25s
2026-03-24 10:59:33 -05:00
0fc683f069 chore(deps): update ghcr.io/renovatebot/renovate docker tag to v43.89.1 (#5046)
Some checks failed
renovate / renovate (push) Failing after 6s
2026-03-24 15:58:34 +00:00
ee8cc64401 ci: no minimum release
Some checks failed
renovate / renovate (push) Has been cancelled
2026-03-24 10:54:18 -05:00
0ec91efbf2 chore(config): migrate Renovate config (#5045)
All checks were successful
renovate / renovate (push) Successful in 1m55s
The Renovate config in this repository needs migrating. Typically this is because one or more configuration options you are using have been renamed.

  You don't need to merge this PR right away, because Renovate will continue to migrate these fields internally each time it runs. But later some of these fields may be fully deprecated and the migrations removed. So it's a good idea to merge this migration PR soon.

🔕 **Ignore**: Close this PR and you won't be reminded about config migration again, but one day your current config may no longer be valid.

 Got questions? Does something look wrong to you? Please don't hesitate to [request help here](https://github.com/renovatebot/renovate/discussions).

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

Reviewed-on: #5045
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2026-03-24 15:51:32 +00:00
f569ab914a ci: group more
All checks were successful
renovate / renovate (push) Successful in 2m7s
2026-03-24 10:46:54 -05:00
7b8d7d66e8 ci: fix group name
All checks were successful
renovate / renovate (push) Successful in 2m6s
2026-03-24 10:38:58 -05:00
340cac8698 ci: group apps
All checks were successful
renovate / renovate (push) Successful in 2m58s
2026-03-24 10:34:52 -05:00
e0f4b4b629 chore(deps): update unpoller/unpoller to v2.38.0 (#5029)
All checks were successful
lint-test-helm / lint-helm (push) Successful in 16s
lint-test-helm / validate-kubeconform (push) Has been skipped
renovate / renovate (push) Successful in 1m55s
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/unpoller/unpoller](https://github.com/unpoller/unpoller) | minor | `v2.37.0` → `v2.38.0` |
| [unpoller/unpoller](https://github.com/unpoller/unpoller) | minor | `v2.37.0` → `v2.38.0` |

---

### Release Notes

<details>
<summary>unpoller/unpoller (ghcr.io/unpoller/unpoller)</summary>

### [`v2.38.0`](https://github.com/unpoller/unpoller/releases/tag/v2.38.0)

[Compare Source](https://github.com/unpoller/unpoller/compare/v2.37.0...v2.38.0)

##### Changelog

- [`2f1e28c`](2f1e28c7d3) chore: apply linter auto-fixes (wsl\_v5, nlreturn, tagalign) ([#&#8203;984](https://github.com/unpoller/unpoller/issues/984))
- [`18c6e66`](18c6e66a8e) feat: add Site Magic site-to-site VPN metrics (closes [#&#8203;926](https://github.com/unpoller/unpoller/issues/926)) ([#&#8203;983](https://github.com/unpoller/unpoller/issues/983))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these updates again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My44NC4yIiwidXBkYXRlZEluVmVyIjoiNDMuODQuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=-->

Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/5029
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2026-03-24 15:27:41 +00:00
3d24db859a chore(deps): update helm release traefik-crds to v1.16.0 (#5036)
Some checks failed
lint-test-helm / lint-helm (push) Successful in 18s
lint-test-helm / validate-kubeconform (push) Has been skipped
renovate / renovate (push) Has been cancelled
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [traefik-crds](https://traefik.io/) ([source](https://github.com/traefik/traefik-helm-chart)) | minor | `1.15.0` → `1.16.0` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My44NC4yIiwidXBkYXRlZEluVmVyIjoiNDMuODQuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiY2hhcnQiXX0=-->

Reviewed-on: #5036
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2026-03-24 15:26:11 +00:00
2280df1e16 feat: disable liveness (#5042)
Some checks failed
lint-test-helm / validate-kubeconform (push) Has been cancelled
lint-test-helm / lint-helm (push) Has been cancelled
renovate / renovate (push) Has been cancelled
Reviewed-on: #5042
2026-03-24 15:25:53 +00:00
2d75a2f197 chore(deps): update dependency cilium/cilium to v1.19.2 (#5037)
All checks were successful
lint-test-helm / lint-helm (push) Successful in 22s
lint-test-helm / validate-kubeconform (push) Has been skipped
renovate / renovate (push) Successful in 3m32s
render-manifests / render-manifests (push) Successful in 5m15s
2026-03-24 14:02:30 +00:00
36ac6266ca tmp/booklore (#5034)
All checks were successful
lint-test-docker / lint-docker-compose (push) Successful in 23s
lint-test-helm / lint-helm (push) Successful in 26s
lint-test-helm / validate-kubeconform (push) Has been skipped
renovate / renovate (push) Successful in 2m0s
Reviewed-on: #5034
2026-03-24 03:44:24 +00:00
e20bc4b2cf tmp/grimmory-5 (#5032)
All checks were successful
lint-test-helm / lint-helm (push) Successful in 24s
lint-test-helm / validate-kubeconform (push) Has been skipped
renovate / renovate (push) Successful in 2m14s
Reviewed-on: #5032
2026-03-24 03:28:49 +00:00
5706150396 feat: change to boot from grimmory (#5030)
All checks were successful
lint-test-helm / lint-helm (push) Successful in 14s
lint-test-helm / validate-kubeconform (push) Has been skipped
renovate / renovate (push) Successful in 1m9s
Reviewed-on: #5030
2026-03-24 02:54:59 +00:00
d4d75563ed feat: change user
All checks were successful
lint-test-helm / lint-helm (push) Successful in 13s
lint-test-helm / validate-kubeconform (push) Has been skipped
renovate / renovate (push) Successful in 1m59s
2026-03-23 21:49:41 -05:00
5643260b63 feat: scale (#5027)
All checks were successful
lint-test-helm / lint-helm (push) Successful in 13s
lint-test-helm / validate-kubeconform (push) Has been skipped
renovate / renovate (push) Successful in 2m18s
Reviewed-on: #5027
2026-03-24 02:44:26 +00:00
2c354902d7 tmp/grimmory-2 (#5025)
All checks were successful
lint-test-helm / lint-helm (push) Successful in 23s
lint-test-helm / validate-kubeconform (push) Has been skipped
renovate / renovate (push) Successful in 1m44s
Reviewed-on: #5025
2026-03-24 02:25:28 +00:00
3f9743ee3f fix: add mover contect (#5023)
All checks were successful
lint-test-helm / lint-helm (push) Successful in 24s
lint-test-helm / validate-kubeconform (push) Has been skipped
renovate / renovate (push) Successful in 2m27s
Reviewed-on: #5023
2026-03-24 02:10:14 +00:00
1b61891d18 Add Grimmory as separate from Booklore (#5020)
All checks were successful
lint-test-helm / lint-helm (push) Successful in 53s
lint-test-helm / validate-kubeconform (push) Has been skipped
lint-test-docker / lint-docker-compose (push) Successful in 1m17s
renovate / renovate (push) Successful in 1m15s
Reviewed-on: #5020
2026-03-24 01:50:24 +00:00
0f844bb80c chore(deps): update ghcr.io/haveagitgat/tdarr_node docker tag to v2.65.01 (#5003)
All checks were successful
lint-test-helm / lint-helm (push) Successful in 29s
lint-test-helm / validate-kubeconform (push) Has been skipped
renovate / renovate (push) Successful in 1m44s
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/haveagitgat/tdarr_node](https://github.com/HaveAGitGat/tdarr_express_be) | minor | `2.64.02` → `2.65.01` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My44NC4yIiwidXBkYXRlZEluVmVyIjoiNDMuODQuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=-->

Reviewed-on: #5003
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2026-03-24 01:48:01 +00:00
72cd322005 chore(deps): update ghcr.io/haveagitgat/tdarr docker tag to v2.65.01 (#5002)
All checks were successful
lint-test-helm / lint-helm (push) Successful in 14s
lint-test-helm / validate-kubeconform (push) Has been skipped
renovate / renovate (push) Successful in 1m42s
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/haveagitgat/tdarr](https://github.com/HaveAGitGat/tdarr_express_be) | minor | `2.64.02` → `2.65.01` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My44NC4yIiwidXBkYXRlZEluVmVyIjoiNDMuODQuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=-->

Reviewed-on: #5002
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2026-03-24 01:45:48 +00:00
4c60e63411 chore(deps): update unpoller/unpoller to v2.37.0 (#5019)
Some checks failed
lint-test-helm / lint-helm (push) Successful in 21s
lint-test-helm / validate-kubeconform (push) Has been skipped
renovate / renovate (push) Has been cancelled
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/unpoller/unpoller](https://github.com/unpoller/unpoller) | minor | `v2.36.0` → `v2.37.0` |
| [unpoller/unpoller](https://github.com/unpoller/unpoller) | minor | `v2.36.0` → `v2.37.0` |

---

### Release Notes

<details>
<summary>unpoller/unpoller (ghcr.io/unpoller/unpoller)</summary>

### [`v2.37.0`](https://github.com/unpoller/unpoller/releases/tag/v2.37.0)

[Compare Source](https://github.com/unpoller/unpoller/compare/v2.36.0...v2.37.0)

##### Changelog

- [`a81a6e6`](a81a6e6e16) feat: add port anomaly metrics (closes [#&#8203;929](https://github.com/unpoller/unpoller/issues/929)) ([#&#8203;982](https://github.com/unpoller/unpoller/issues/982))
- [`643c108`](643c108674) feat: add network topology metrics (closes [#&#8203;931](https://github.com/unpoller/unpoller/issues/931)) ([#&#8203;981](https://github.com/unpoller/unpoller/issues/981))
- [`f3d4e21`](f3d4e21e0e) build(deps): bump google.golang.org/grpc from 1.79.2 to 1.79.3 ([#&#8203;980](https://github.com/unpoller/unpoller/issues/980))
- [`6b33b6b`](6b33b6b97b) feat: firewall policy metrics across all output plugins (closes [#&#8203;928](https://github.com/unpoller/unpoller/issues/928)) ([#&#8203;979](https://github.com/unpoller/unpoller/issues/979))
- [`521c2f8`](521c2f88bc) feat(otelunifi): add OpenTelemetry output plugin ([#&#8203;978](https://github.com/unpoller/unpoller/issues/978))
- [`4c34180`](4c34180047) feat(clients): add MIMO spatial stream metrics for WiFi clients ([#&#8203;977](https://github.com/unpoller/unpoller/issues/977))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these updates again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My44NC4yIiwidXBkYXRlZEluVmVyIjoiNDMuODQuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=-->

Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/5019
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2026-03-24 01:44:35 +00:00
8e64d73e75 chore(deps): update sahara101/movie-roulette to v5.3.0 (#5012)
All checks were successful
lint-test-helm / lint-helm (push) Successful in 27s
lint-test-helm / validate-kubeconform (push) Has been skipped
renovate / renovate (push) Successful in 2m37s
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| ghcr.io/sahara101/movie-roulette | minor | `v5.2.1` → `v5.3.0` |
| [sahara101/Movie-Roulette](https://github.com/sahara101/Movie-Roulette) | minor | `v5.2.1` → `v5.3.0` |

---

### Release Notes

<details>
<summary>sahara101/Movie-Roulette (sahara101/Movie-Roulette)</summary>

### [`v5.3.0`](https://github.com/sahara101/Movie-Roulette/releases/tag/v5.3.0)

[Compare Source](https://github.com/sahara101/Movie-Roulette/compare/v5.2.1...v5.3.0)

#### New Features

- **Enrichment Cache** — persistent background cache pre-fetches TMDb credits, external links, trailers, and movie logos at startup; movie cards load instantly without secondary API calls (`_enriched` flag skips all async fetches)
- **Session-Based Seen Tracking** — random selection avoids repeating movies within the same browser tab session; resets automatically when the full pool is exhausted with a toast notification
- **Media Server Web Client** — client-picker now includes the configured media server as a direct watch option; opens the movie's detail page in Plex/Jellyfin/Emby web UI in a new tab
- **Animated Login Logo** — app icon replaced with a looping silent MP4 on the login screen
- **PWA Splash Screen** — standalone home-screen launches show a custom dark splash for 1.5s, dismissed once per session

#### Visual Overhaul

- **Color System** — full amber palette replacing all purple/indigo across both HeroUI themes; buttons, glows, progress bars, focus rings, and aurora orbs all updated
- **Typography** — three-font system: Geist (UI), Instrument Serif (movie titles), Geist Mono (numbers/metadata)
- **Cinema Poster Mode** — full-bleed blurred backdrop, glassmorphism info bars, editorial director layout, spring-eased progress bar
- **Filter Island** — filter controls unified into a glass pill with active-count badge and spring-entrance dropdown
- **Icon Button Animations** — Next, Power, and service-switcher icons spin 360° on hover (disabled on touch devices)

#### Bug Fixes

- **Collection warning count mismatch** — badge and modal heading now consistently exclude Trakt-watched movies; Trakt-watched previous movies hidden from modal list (no action needed)
- **Collection warning shown for all-handled collections** — button correctly hidden when every previous movie is watched locally or on Trakt and all other collection movies are in library or on Trakt
- **Collection warning slow to appear** — moved to async `/api/collection_status` endpoint; no longer blocks movie response
- **TMDb collection cache never expiring** — weekly APScheduler job clears `lru_cache` so new sequels appear without restart
- **Next-movie background flash** — images preloaded before DOM update; old movie stays visible until new assets are ready
- **Service switch leaves stale filters** — switching service now resets filters and session seen-list
- **Apple TV pairing on macOS Docker** — optional IP Address field uses `--scan-hosts` for direct unicast pairing; failure now reports EOF/TIMEOUT reason with atvremote output
- **Apple TV device name/model** — stored on pairing and shown in settings instead of raw UUID
- **PWA icons showing white background** — all icons rebuilt with `#222222` background; 1024×1024 maskable icon added for macOS dock
- **Auth session writes on every request** — session values only written when they actually change

#### Changes

- **Default settings** — fresh installs: Movie Logos off, Login Backdrops on, Load on Start on, Poster Mode set to Screensaver

**Full Changelog**: <https://github.com/sahara101/Movie-Roulette/compare/v5.2.1...v5.3.0>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these updates again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My44NC4yIiwidXBkYXRlZEluVmVyIjoiNDMuODQuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=-->

Reviewed-on: #5012
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>
2026-03-24 01:38:41 +00:00
56 changed files with 336 additions and 311 deletions

View File

@@ -28,7 +28,7 @@ jobs:
- name: Check Branch Exists
id: check-branch-exists
if: github.event_name == 'pull_request'
uses: GuillaumeFalourd/branch-exists@009290475dc3d75b5d7ec680c0c5b614b0d9855d # v1.1
uses: GuillaumeFalourd/branch-exists@650358876c774d6ccbd581b5553eb636dab79a97 # v1.2
with:
branch: "${{ github.base_ref }}"

View File

@@ -35,7 +35,7 @@ jobs:
- name: Check Branch Exists
id: check-branch-exists
if: github.event_name == 'pull_request'
uses: GuillaumeFalourd/branch-exists@009290475dc3d75b5d7ec680c0c5b614b0d9855d # v1.1
uses: GuillaumeFalourd/branch-exists@650358876c774d6ccbd581b5553eb636dab79a97 # v1.2
with:
branch: ${{ github.base_ref }}

View File

@@ -13,7 +13,7 @@ on:
jobs:
renovate:
runs-on: ubuntu-latest
container: ghcr.io/renovatebot/renovate:43.84.2@sha256:92285747b3aac062a4f567762c272a12dce037843a20177a02c95b7c420e20cb
container: ghcr.io/renovatebot/renovate:43.89.2@sha256:a823bf9ff1f04c31d46267b78330e06f802dbf6e1af899e21c6a8e3197d45354
steps:
- name: Checkout
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6

View File

@@ -1,12 +1,12 @@
dependencies:
- name: argo-workflows
repository: https://argoproj.github.io/argo-helm
version: 1.0.5
version: 1.0.6
- name: argo-events
repository: https://argoproj.github.io/argo-helm
version: 2.4.21
- name: postgres-cluster
repository: oci://harbor.alexlebens.net/helm-charts
version: 7.10.0
digest: sha256:d0d7ebf1c0013d001aa2f17d04a6d3f3d7a1fa7d5c62792eef856b87c24eb26e
generated: "2026-03-20T20:48:30.830922259Z"
digest: sha256:5635bfe609d8a901df257ef3e6cb469396a21bdd4c6f96e7e33f84036019c52b
generated: "2026-03-24T16:59:01.228848139Z"

View File

@@ -18,7 +18,7 @@ maintainers:
- name: alexlebens
dependencies:
- name: argo-workflows
version: 1.0.5
version: 1.0.6
repository: https://argoproj.github.io/argo-helm
- name: argo-events
version: 2.4.21

View File

@@ -4,6 +4,10 @@ audiobookshelf:
type: deployment
replicas: 1
strategy: Recreate
pod:
securityContext:
fsGroup: 1000
fsGroupChangePolicy: OnRootMismatch
containers:
main:
image:
@@ -19,7 +23,7 @@ audiobookshelf:
apprise-api:
image:
repository: ghcr.io/caronc/apprise
tag: v1.3.2@sha256:1aafc2118b6eae5d70d17831d9a8a52adee7104fd6f2bb018e6421664699c903
tag: v1.3.3@sha256:4bfeac268ba87b8e08e308c9aa0182fe99e9501ec464027afc333d1634e65977
env:
- name: TZ
value: America/Chicago

View File

@@ -108,7 +108,6 @@ blocky:
authentik IN CNAME traefik-cl01tl
backrest IN CNAME traefik-cl01tl
bazarr IN CNAME traefik-cl01tl
booklore IN CNAME traefik-cl01tl
ceph IN CNAME traefik-cl01tl
code-server IN CNAME traefik-cl01tl
dawarich IN CNAME traefik-cl01tl
@@ -121,6 +120,7 @@ blocky:
gatus IN CNAME traefik-cl01tl
gitea IN CNAME traefik-cl01tl
grafana IN CNAME traefik-cl01tl
grimmory IN CNAME traefik-cl01tl
harbor IN CNAME traefik-cl01tl
headlamp IN CNAME traefik-cl01tl
home IN CNAME traefik-cl01tl

View File

@@ -19,4 +19,4 @@ dependencies:
repository: https://helm.cilium.io/
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/cilium.png
# renovate: datasource=github-releases depName=cilium/cilium
appVersion: 1.19.1
appVersion: 1.19.2

View File

@@ -1,9 +1,9 @@
dependencies:
- name: element-web
repository: https://ananace.gitlab.io/charts
version: 1.4.32
version: 1.4.33
- name: cloudflared
repository: oci://harbor.alexlebens.net/helm-charts
version: 2.4.0
digest: sha256:49d9dd45eff7cbbc11644e4a8bd3c9d3bf84716ed034a76f097f0ba1fea4c934
generated: "2026-03-11T16:04:17.556777286Z"
digest: sha256:63b0e582d42fb42bcf4d96ba4b299e42c434c42f284208596808288543192fe0
generated: "2026-03-24T16:11:50.424321433Z"

View File

@@ -17,11 +17,11 @@ maintainers:
- name: alexlebens
dependencies:
- name: element-web
version: 1.4.32
version: 1.4.33
repository: https://ananace.gitlab.io/charts
- name: cloudflared
repository: oci://harbor.alexlebens.net/helm-charts
version: 2.4.0
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/element.png
# renovate: datasource=github-releases depName=element-hq/element-web
appVersion: v1.12.12
appVersion: v1.12.13

View File

@@ -2,7 +2,7 @@ element-web:
replicaCount: 1
image:
repository: vectorim/element-web
tag: v1.12.12
tag: v1.12.13
pullPolicy: IfNotPresent
defaultServer:
url: https://matrix.alexlebens.dev

View File

@@ -22,4 +22,4 @@ dependencies:
repository: oci://harbor.alexlebens.net/helm-charts
icon: https://raw.githubusercontent.com/foldergram/foldergram/refs/heads/main/client/public/icon-512.png
# renovate: datasource=github-releases depName=foldergram/foldergram
appVersion: v1.0.5
appVersion: v1.0.6

View File

@@ -9,7 +9,7 @@ foldergram:
main:
image:
repository: ghcr.io/foldergram/foldergram
tag: 1.0.5
tag: 1.0.6
pullPolicy: IfNotPresent
env:
- name: IMAGE_DETAIL_SOURCE

View File

@@ -164,8 +164,8 @@ gatus:
- name: foldergram
url: https://foldergram.alexlebens.net
<<: *defaults
- name: booklore
url: https://booklore.alexlebens.net
- name: grimmory
url: https://grimmory.alexlebens.net
<<: *defaults
- name: directus
url: https://directus.alexlebens.net

View File

@@ -1,6 +1,6 @@
dependencies:
- name: generic-device-plugin
repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
version: 0.20.25
digest: sha256:04f987ed54b51b4401ab056b4627cfce7d1fe660bb496a459e975f4dcc8ff466
generated: "2026-03-24T00:12:00.102697457Z"
version: 0.20.26
digest: sha256:47d12b7555d345dea0438d13ac538896994dbd44b142b9a546dbfe5c0939a92b
generated: "2026-03-24T16:59:26.537547513Z"

View File

@@ -15,6 +15,6 @@ maintainers:
dependencies:
- name: generic-device-plugin
repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
version: 0.20.25
version: 0.20.26
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
appVersion: 1.0.0

View File

@@ -8,8 +8,5 @@ dependencies:
- name: volsync-target
repository: oci://harbor.alexlebens.net/helm-charts
version: 0.8.0
- name: volsync-target
repository: oci://harbor.alexlebens.net/helm-charts
version: 0.8.0
digest: sha256:e65fa008c652092da5431e9780eb2a87c944298a12e58e432efad61c9e826da5
generated: "2026-03-14T23:57:22.721295098Z"
digest: sha256:6ee403da03c1bcc0289a9abdef0508344072d51173da996eda69b8305d5feefa
generated: "2026-03-23T20:35:19.743257-05:00"

View File

@@ -1,23 +1,22 @@
apiVersion: v2
name: booklore
name: grimmory
version: 1.0.0
description: booklore
description: Grimmory
keywords:
- booklore
- grimmory
- books
home: https://wiki.alexlebens.dev/
home: https://docs.alexlebens.dev/applications/grimmory/
sources:
- https://github.com/booklore-app/BookLore
- https://github.com/grimmory-tools/grimmory
- https://github.com/booklore-app/booklore/pkgs/container/booklore
- https://github.com/grimmory-tools/grimmory/pkgs/container/grimmory
- https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
- https://github.com/mariadb-operator/mariadb-operator/tree/main/deploy/charts/mariadb-cluster
- https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/volsync-target
maintainers:
- name: alexlebens
dependencies:
- name: app-template
alias: booklore
alias: grimmory
repository: https://bjw-s-labs.github.io/helm-charts/
version: 4.6.2
- name: mariadb-cluster
@@ -27,10 +26,6 @@ dependencies:
alias: volsync-target-config
version: 0.8.0
repository: oci://harbor.alexlebens.net/helm-charts
- name: volsync-target
alias: volsync-target-data
version: 0.8.0
repository: oci://harbor.alexlebens.net/helm-charts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/booklore.png
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/grimmory.png
# renovate: datasource=github-releases depName=grimmory-tools/grimmory
appVersion: v2.3.0

View File

@@ -1,10 +1,10 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: booklore-database-secret
name: grimmory-database-secret
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: booklore-database-secret
app.kubernetes.io/name: grimmory-database-secret
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec:
@@ -14,20 +14,17 @@ spec:
data:
- secretKey: password
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/booklore/database
metadataPolicy: None
key: /cl01tl/grimmory/database
property: password
---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: booklore-data-replication-secret
name: grimmory-data-replication-secret
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: booklore-data-replication-secret
app.kubernetes.io/name: grimmory-data-replication-secret
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec:
@@ -37,20 +34,17 @@ spec:
data:
- secretKey: psk.txt
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/booklore/replication
metadataPolicy: None
key: /cl01tl/grimmory/replication
property: psk.txt
---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: booklore-mariadb-cluster-backup-secret-external
name: grimmory-mariadb-cluster-backup-secret-external
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: booklore-mariadb-cluster-backup-secret-external
app.kubernetes.io/name: grimmory-mariadb-cluster-backup-secret-external
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec:
@@ -60,27 +54,21 @@ spec:
data:
- secretKey: access
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /digital-ocean/home-infra/mariadb-backups
metadataPolicy: None
property: access
- secretKey: secret
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /digital-ocean/home-infra/mariadb-backups
metadataPolicy: None
property: secret
---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: booklore-mariadb-cluster-backup-secret-garage
name: grimmory-mariadb-cluster-backup-secret-garage
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: booklore-mariadb-cluster-backup-secret-garage
app.kubernetes.io/name: grimmory-mariadb-cluster-backup-secret-garage
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec:
@@ -90,15 +78,9 @@ spec:
data:
- secretKey: access
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/mariadb-backups
metadataPolicy: None
property: access
- secretKey: secret
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /garage/home-infra/mariadb-backups
metadataPolicy: None
property: secret

View File

@@ -1,11 +1,11 @@
apiVersion: v1
kind: Namespace
metadata:
name: booklore
name: grimmory
annotations:
volsync.backube/privileged-movers: "true"
labels:
app.kubernetes.io/name: booklore
app.kubernetes.io/name: grimmory
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
pod-security.kubernetes.io/audit: privileged

View File

@@ -1,14 +1,14 @@
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: booklore-books-nfs-storage
name: grimmory-books-nfs-storage
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: booklore-books-nfs-storage
app.kubernetes.io/name: grimmory-books-nfs-storage
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec:
volumeName: booklore-books-nfs-storage
volumeName: grimmory-books-nfs-storage
storageClassName: nfs-client
accessModes:
- ReadWriteMany
@@ -20,14 +20,14 @@ spec:
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: booklore-books-import-nfs-storage
name: grimmory-books-import-nfs-storage
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: booklore-books-import-nfs-storage
app.kubernetes.io/name: grimmory-books-import-nfs-storage
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec:
volumeName: booklore-books-import-nfs-storage
volumeName: grimmory-books-import-nfs-storage
storageClassName: nfs-client
accessModes:
- ReadWriteMany

View File

@@ -1,10 +1,10 @@
apiVersion: v1
kind: PersistentVolume
metadata:
name: booklore-books-nfs-storage
name: grimmory-books-nfs-storage
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: booklore-books-nfs-storage
app.kubernetes.io/name: grimmory-books-nfs-storage
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec:
@@ -26,10 +26,10 @@ spec:
apiVersion: v1
kind: PersistentVolume
metadata:
name: booklore-books-import-nfs-storage
name: grimmory-books-import-nfs-storage
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: booklore-books-import-nfs-storage
app.kubernetes.io/name: grimmory-books-import-nfs-storage
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec:

View File

@@ -1,16 +1,18 @@
booklore:
grimmory:
controllers:
main:
type: deployment
replicas: 1
strategy: Recreate
revisionHistoryLimit: 3
pod:
securityContext:
fsGroup: 1000
fsGroupChangePolicy: OnRootMismatch
containers:
main:
image:
repository: ghcr.io/grimmory-tools/grimmory
tag: v2.3.0
pullPolicy: IfNotPresent
tag: v2.3.0@sha256:9014247f591074529894f81115ca40f899db697e89f72c2fe91ec530e3f19597
env:
- name: TZ
value: America/Chicago
@@ -19,22 +21,22 @@ booklore:
- name: GROUP_ID
value: 1000
- name: DATABASE_URL
value: jdbc:mariadb://booklore-mariadb-cluster-primary.booklore:3306/booklore
value: jdbc:mariadb://grimmory-mariadb-cluster-primary.grimmory:3306/booklore
- name: DATABASE_USERNAME
value: booklore
value: grimmory
- name: DATABASE_PASSWORD
valueFrom:
secretKeyRef:
name: booklore-database-secret
name: grimmory-database-secret
key: password
- name: BOOKLORE_PORT
- name: GRIMMORY_PORT
value: 6060
- name: SWAGGER_ENABLED
value: false
resources:
requests:
cpu: 50m
memory: 128Mi
cpu: 10m
memory: 1Gi
service:
main:
controller: main
@@ -52,41 +54,26 @@ booklore:
name: traefik-gateway
namespace: traefik
hostnames:
- booklore.alexlebens.net
- grimmory.alexlebens.net
rules:
- backendRefs:
- group: ''
kind: Service
name: booklore
- name: grimmory
port: 80
weight: 100
matches:
- path:
type: PathPrefix
value: /
persistence:
config:
forceRename: booklore-config
forceRename: grimmory-config
storageClass: ceph-block
accessMode: ReadWriteOnce
size: 5Gi
retain: true
advancedMounts:
main:
main:
- path: /app/data
readOnly: false
data:
forceRename: booklore-data
storageClass: ceph-block
accessMode: ReadWriteOnce
size: 10Gi
retain: true
advancedMounts:
main:
main:
- path: /data
readOnly: false
books-import:
type: emptyDir
advancedMounts:
@@ -94,8 +81,15 @@ booklore:
main:
- path: /bookdrop
readOnly: false
data:
existingClaim: grimmory-books-nfs-storage
advancedMounts:
main:
main:
- path: /data
readOnly: false
ingest:
existingClaim: booklore-books-import-nfs-storage
existingClaim: grimmory-books-import-nfs-storage
advancedMounts:
main:
main:
@@ -105,7 +99,7 @@ mariadb-cluster:
mariadb:
rootPasswordSecretKeyRef:
generate: false
name: booklore-database-secret
name: grimmory-database-secret
key: password
storage:
size: 5Gi
@@ -115,14 +109,14 @@ mariadb-cluster:
bootstrapFrom:
s3:
bucket: mariadb-backups-b230a2f5aecf080a4b372c08
prefix: cl01tl/booklore
prefix: cl01tl/grimmory
endpoint: nyc3.digitaloceanspaces.com
region: us-east-1
accessKeyIdSecretKeyRef:
name: booklore-mariadb-cluster-backup-secret-external
name: grimmory-mariadb-cluster-backup-secret-external
key: access
secretAccessKeySecretKeyRef:
name: booklore-mariadb-cluster-backup-secret-external
name: grimmory-mariadb-cluster-backup-secret-external
key: secret
tls:
enabled: true
@@ -134,21 +128,22 @@ mariadb-cluster:
cleanupPolicy: Delete
requeueInterval: 10h
users:
- name: booklore
- name: grimmory
passwordSecretKeyRef:
name: booklore-database-secret
name: grimmory-database-secret
key: password
host: '%'
maxUserConnections: 100
cleanupPolicy: Delete
requeueInterval: 10h
retryInterval: 30s
grants:
- name: booklore
- name: grimmory
privileges:
- "ALL PRIVILEGES"
database: "booklore"
table: "*"
username: booklore
username: grimmory
grantOption: true
host: '%'
cleanupPolicy: Delete
@@ -166,14 +161,14 @@ mariadb-cluster:
storage:
s3:
bucket: mariadb-backups-b230a2f5aecf080a4b372c08
prefix: cl01tl/booklore
prefix: cl01tl/grimmory
endpoint: nyc3.digitaloceanspaces.com
region: us-east-1
accessKeyIdSecretKeyRef:
name: booklore-mariadb-cluster-backup-secret-external
name: grimmory-mariadb-cluster-backup-secret-external
key: access
secretAccessKeySecretKeyRef:
name: booklore-mariadb-cluster-backup-secret-external
name: grimmory-mariadb-cluster-backup-secret-external
key: secret
tls:
enabled: true
@@ -188,14 +183,14 @@ mariadb-cluster:
storage:
s3:
bucket: mariadb-backups
prefix: cl01tl/booklore
prefix: cl01tl/grimmory
endpoint: garage-ps10rp.boreal-beaufort.ts.net:3900
region: us-east-1
accessKeyIdSecretKeyRef:
name: booklore-mariadb-cluster-backup-secret-garage
name: grimmory-mariadb-cluster-backup-secret-garage
key: access
secretAccessKeySecretKeyRef:
name: booklore-mariadb-cluster-backup-secret-garage
name: grimmory-mariadb-cluster-backup-secret-garage
key: secret
tls:
enabled: true
@@ -210,17 +205,20 @@ mariadb-cluster:
storage:
s3:
bucket: mariadb-backups
prefix: cl01tl/booklore
prefix: cl01tl/grimmory
endpoint: garage-main.garage:3900
region: us-east-1
accessKeyIdSecretKeyRef:
name: booklore-mariadb-cluster-backup-secret-garage
name: grimmory-mariadb-cluster-backup-secret-garage
key: access
secretAccessKeySecretKeyRef:
name: booklore-mariadb-cluster-backup-secret-garage
name: grimmory-mariadb-cluster-backup-secret-garage
key: secret
volsync-target-config:
pvcTarget: booklore-config
pvcTarget: grimmory-config
moverSecurityContext:
fsGroup: 1000
fsGroupChangePolicy: OnRootMismatch
local:
enabled: true
schedule: 12 8 * * *
@@ -230,20 +228,3 @@ volsync-target-config:
external:
enabled: true
schedule: 12 10 * * *
volsync-target-data:
pvcTarget: booklore-data
local:
enabled: true
schedule: 14 8 * * *
restic:
cacheCapacity: 10Gi
remote:
enabled: true
schedule: 14 9 * * *
restic:
cacheCapacity: 10Gi
external:
enabled: true
schedule: 14 10 * * *
restic:
cacheCapacity: 10Gi

View File

@@ -25,4 +25,4 @@ dependencies:
repository: oci://harbor.alexlebens.net/helm-charts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/home-assistant.png
# renovate: datasource=github-releases depName=home-assistant/core
appVersion: 2026.3.3
appVersion: 2026.3.4

View File

@@ -9,7 +9,7 @@ home-assistant:
main:
image:
repository: ghcr.io/home-assistant/home-assistant
tag: 2026.3.3
tag: 2026.3.4
pullPolicy: IfNotPresent
env:
- name: TZ

View File

@@ -211,8 +211,8 @@ homepage:
- Books:
icon: sh-booklore.webp
description: Grimmory
href: https://booklore.alexlebens.net
siteMonitor: http://booklore.booklore:80
href: https://grimmory.alexlebens.net
siteMonitor: http://grimmory.grimmory:80
statusStyle: dot
- Public:
- Site:

View File

@@ -9,7 +9,7 @@ houndarr:
main:
image:
repository: ghcr.io/av1155/houndarr
tag: v1.6.0
tag: v1.6.2
pullPolicy: IfNotPresent
env:
- name: TZ

View File

@@ -32,4 +32,4 @@ dependencies:
repository: oci://harbor.alexlebens.net/helm-charts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/immich.png
# renovate: datasource=github-releases depName=immich-app/immich
appVersion: v2.6.1
appVersion: v2.6.2

View File

@@ -9,7 +9,7 @@ immich:
main:
image:
repository: ghcr.io/immich-app/immich-server
tag: v2.6.1
tag: v2.6.2
pullPolicy: IfNotPresent
env:
- name: TZ

View File

@@ -5,5 +5,8 @@ dependencies:
- name: postgres-cluster
repository: oci://harbor.alexlebens.net/helm-charts
version: 7.10.0
digest: sha256:a6f33512d929c5a1b70bde6c3294902f5d707855aabbaa815f32e23aa54b266f
generated: "2026-03-15T20:06:49.233053802Z"
- name: volsync-target
repository: oci://harbor.alexlebens.net/helm-charts
version: 0.8.0
digest: sha256:c1bbed66c94b64ba44ef1caadf74d46d9bce551e37b62b1cd0a3af9b81046251
generated: "2026-03-24T14:00:56.813765-05:00"

View File

@@ -25,6 +25,10 @@ dependencies:
alias: postgresql-17-fdb-cluster
version: 7.10.0
repository: oci://harbor.alexlebens.net/helm-charts
- name: volsync-target
alias: volsync-target-keys
version: 0.8.0
repository: oci://harbor.alexlebens.net/helm-charts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/komodo.png
# renovate: datasource=github-releases depName=moghtech/komodo
appVersion: v1.19.5
appVersion: v2.0.0

View File

@@ -9,7 +9,7 @@ komodo:
main:
image:
repository: ghcr.io/moghtech/komodo-core
tag: 1.19.5
tag: 2.0.0@sha256:3cc134272b39313ae1fb34ea8a3c8a0c2f629a3c2eeaf71258702159f154f9e9
pullPolicy: IfNotPresent
env:
- name: COMPOSE_LOGGING_DRIVER
@@ -145,6 +145,17 @@ komodo:
type: PathPrefix
value: /
persistence:
keys:
forceRename: komodo-keys
storageClass: ceph-block
accessMode: ReadWriteOnce
size: 1Gi
retain: true
advancedMounts:
main:
main:
- path: /config/keys
readOnly: false
cache:
storageClass: ceph-block
accessMode: ReadWriteOnce
@@ -242,3 +253,14 @@ postgresql-17-fdb-cluster:
# immediate: true
# schedule: "0 0 0 * * *"
# backupName: external
volsync-target-keys:
pvcTarget: komodo-keys
local:
enabled: true
schedule: 54 11 * * *
remote:
enabled: true
schedule: 54 12 * * *
external:
enabled: true
schedule: 54 13 * * *

View File

@@ -1,12 +1,12 @@
dependencies:
- name: kube-prometheus-stack
repository: oci://ghcr.io/prometheus-community/charts
version: 82.13.0
version: 82.13.6
- name: app-template
repository: https://bjw-s-labs.github.io/helm-charts/
version: 4.6.2
- name: valkey
repository: oci://harbor.alexlebens.net/helm-charts
version: 0.4.0
digest: sha256:1d90bebd9c0afd20f8ff780edd15da18b20f89cf35fd85832d6d8d44b2e0544b
generated: "2026-03-20T18:02:38.368086545Z"
digest: sha256:6c29e37c4a0b08244b3ab0c60b2e07a2574f382f18183d98017d2d0dbcab7f21
generated: "2026-03-24T17:20:56.086048387Z"

View File

@@ -20,7 +20,7 @@ maintainers:
- name: alexlebens
dependencies:
- name: kube-prometheus-stack
version: 82.13.0
version: 82.13.6
repository: oci://ghcr.io/prometheus-community/charts
- name: app-template
alias: ntfy-alertmanager

View File

@@ -1,7 +1,7 @@
dependencies:
- name: matrix-synapse
repository: https://ananace.gitlab.io/charts
version: 3.12.23
version: 3.12.24
- name: app-template
repository: https://bjw-s-labs.github.io/helm-charts/
version: 4.6.2
@@ -38,5 +38,5 @@ dependencies:
- name: volsync-target
repository: oci://harbor.alexlebens.net/helm-charts
version: 0.8.0
digest: sha256:1578e2c48447f217e72bffb3afcb6f1f15c427a4acce5dbca830cdd7045b1348
generated: "2026-03-15T20:07:12.751000922Z"
digest: sha256:8fb2d00605ade15db97e778f47ecc1ffae3705ce3408a17e0a21f7def65de884
generated: "2026-03-24T16:59:56.540825394Z"

View File

@@ -29,7 +29,7 @@ maintainers:
- name: alexlebens
dependencies:
- name: matrix-synapse
version: 3.12.23
version: 3.12.24
repository: https://ananace.gitlab.io/charts
- name: app-template
alias: matrix-hookshot
@@ -81,4 +81,4 @@ dependencies:
repository: oci://harbor.alexlebens.net/helm-charts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/matrix.png
# renovate: datasource=github-releases depName=element-hq/synapse
appVersion: v1.149.1
appVersion: v1.150.0

View File

@@ -19,4 +19,4 @@ dependencies:
version: 4.6.2
icon: https://raw.githubusercontent.com/frederikemmer/MediaLyze/d8f69c0628bac7c047b90f91a66341648029c273/frontend/public/favicon.svg
# renovate: datasource=github-releases depName=frederikemmer/MediaLyze
appVersion: 0.2.3
appVersion: 0.2.5

View File

@@ -9,7 +9,7 @@ medialyze:
main:
image:
repository: ghcr.io/frederikemmer/medialyze
tag: 0.2.3
tag: 0.2.5
pullPolicy: IfNotPresent
env:
- name: HOST_PORT

View File

@@ -19,4 +19,4 @@ dependencies:
version: 4.6.2
icon: https://raw.githubusercontent.com/sahara101/Movie-Roulette/refs/heads/main/static/icons/icon.png
# renovate: datasource=github-releases depName=sahara101/Movie-Roulette
appVersion: v5.2.1
appVersion: v5.3.0

View File

@@ -9,7 +9,7 @@ movie-roulette:
main:
image:
repository: ghcr.io/sahara101/movie-roulette
tag: v5.2.1
tag: v5.3.0
pullPolicy: IfNotPresent
env:
- name: FLASK_SECRET_KEY

View File

@@ -162,7 +162,7 @@ qbittorrent:
qbit-manage:
image:
repository: ghcr.io/stuffanthings/qbit_manage
tag: v4.6.5
tag: v4.6.6
pullPolicy: IfNotPresent
env:
- name: TZ

View File

@@ -20,4 +20,4 @@ dependencies:
version: 4.6.2
icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/rclone.webp
# renovate: datasource=github-releases depName=rclone/rclone
appVersion: v1.73.2
appVersion: v1.73.3

View File

@@ -16,7 +16,7 @@ rclone:
sync:
image:
repository: rclone/rclone
tag: 1.73.2
tag: 1.73.3
pullPolicy: IfNotPresent
args:
- sync
@@ -99,7 +99,7 @@ rclone:
sync:
image:
repository: rclone/rclone
tag: 1.73.2
tag: 1.73.3
pullPolicy: IfNotPresent
args:
- sync
@@ -182,7 +182,7 @@ rclone:
sync:
image:
repository: rclone/rclone
tag: 1.73.2
tag: 1.73.3
pullPolicy: IfNotPresent
args:
- sync
@@ -254,7 +254,7 @@ rclone:
prune:
image:
repository: rclone/rclone
tag: 1.73.2
tag: 1.73.3
pullPolicy: IfNotPresent
args:
- delete
@@ -307,7 +307,7 @@ rclone:
sync:
image:
repository: rclone/rclone
tag: 1.73.2
tag: 1.73.3
pullPolicy: IfNotPresent
args:
- sync
@@ -390,7 +390,7 @@ rclone:
sync:
image:
repository: rclone/rclone
tag: 1.73.2
tag: 1.73.3
pullPolicy: IfNotPresent
args:
- sync
@@ -466,7 +466,7 @@ rclone:
prune:
image:
repository: rclone/rclone
tag: 1.73.2
tag: 1.73.3
pullPolicy: IfNotPresent
args:
- delete

View File

@@ -139,7 +139,7 @@ rybbit:
key: clickhouse-password
probes:
liveness:
enabled: true
enabled: false
custom: true
spec:
exec:

View File

@@ -9,7 +9,7 @@ searxng:
main:
image:
repository: searxng/searxng
tag: latest@sha256:b6db575bb821d35279474090270db9e53e92432a66d19e7da51c0ef1b5ddb806
tag: latest@sha256:5cb5844fcb0f6e739cca03352a9d48e6e936323cb90f717cd07cee872b6d081a
pullPolicy: IfNotPresent
env:
- name: SEARXNG_BASE_URL
@@ -39,7 +39,7 @@ searxng:
main:
image:
repository: searxng/searxng
tag: latest@sha256:b6db575bb821d35279474090270db9e53e92432a66d19e7da51c0ef1b5ddb806
tag: latest@sha256:5cb5844fcb0f6e739cca03352a9d48e6e936323cb90f717cd07cee872b6d081a
pullPolicy: IfNotPresent
env:
- name: SEARXNG_BASE_URL

View File

@@ -12,14 +12,14 @@ spec:
kind: ClusterSecretStore
name: vault
data:
- secretKey: booklore-user
- secretKey: grimmory-user
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/shelfmark/booklore
metadataPolicy: None
property: user
- secretKey: booklore-password
- secretKey: grimmory-password
remoteRef:
conversionStrategy: Default
decodingStrategy: None

View File

@@ -17,7 +17,7 @@ shelfmark:
- name: DOCKERMODE
value: true
- name: CALIBRE_WEB_URL
value: https://booklore.alexlebens.net
value: https://grimmory.alexlebens.net
- name: AUDIOBOOK_LIBRARY_URL
value: https://audiobookshelf.alexlebens.net
- name: SEARCH_MODE
@@ -29,17 +29,17 @@ shelfmark:
- name: BOOKS_OUTPUT_MODE
value: booklore
- name: BOOKLORE_HOST
value: http://booklore.booklore:80
value: http://grimmory.grimmory:80
- name: BOOKLORE_USERNAME
valueFrom:
secretKeyRef:
name: shelfmark-config-secret
key: booklore-user
key: grimmory-user
- name: BOOKLORE_PASSWORD
valueFrom:
secretKeyRef:
name: shelfmark-config-secret
key: booklore-password
key: grimmory-password
- name: BOOKLORE_DESTINATION
value: library
- name: BOOKLORE_LIBRARY_ID

View File

@@ -9,7 +9,7 @@ tdarr:
main:
image:
repository: ghcr.io/haveagitgat/tdarr
tag: 2.64.02
tag: 2.65.01
pullPolicy: IfNotPresent
env:
- name: TZ
@@ -48,7 +48,7 @@ tdarr:
main:
image:
repository: ghcr.io/haveagitgat/tdarr_node
tag: 2.64.02
tag: 2.65.01
pullPolicy: IfNotPresent
env:
- name: TZ

View File

@@ -4,6 +4,6 @@ dependencies:
version: 39.0.6
- name: traefik-crds
repository: https://traefik.github.io/charts
version: 1.15.0
digest: sha256:45b11c0cb1083daff76df3c90ecf7d73fc09979239bdc0f272d826fab92a3ba4
generated: "2026-03-20T20:50:42.131002257Z"
version: 1.16.0
digest: sha256:7311d1720303d2930821ac085e246c09d2935aa5f4b8223040017afe3c5acfc4
generated: "2026-03-24T14:04:56.829498329Z"

View File

@@ -18,7 +18,7 @@ dependencies:
version: 39.0.6
repository: https://traefik.github.io/charts
- name: traefik-crds
version: 1.15.0
version: 1.16.0
repository: https://traefik.github.io/charts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/webp/traefik.webp
# renovate: datasource=github-releases depName=traefik/traefik

View File

@@ -21,4 +21,4 @@ dependencies:
version: 4.6.2
icon: https://camo.githubusercontent.com/c5d07a5b3acfeac8e1c25bf56f440ffe032b86e4e7f15de82357f022a43fc927/68747470733a2f2f756e706f6c6c65722e636f6d2f696d672f6c6f676f2e706e67
# renovate: datasource=github-releases depName=unpoller/unpoller
appVersion: v2.36.0
appVersion: v2.38.0

View File

@@ -9,7 +9,7 @@ unpoller:
main:
image:
repository: ghcr.io/unpoller/unpoller
tag: v2.36.0
tag: v2.38.0
pullPolicy: IfNotPresent
env:
- name: UP_UNIFI_CONTROLLER_0_SAVE_ALARMS

View File

@@ -85,7 +85,6 @@ customDNS:
authentik IN CNAME traefik-cl01tl
backrest IN CNAME traefik-cl01tl
bazarr IN CNAME traefik-cl01tl
booklore IN CNAME traefik-cl01tl
ceph IN CNAME traefik-cl01tl
code-server IN CNAME traefik-cl01tl
dawarich IN CNAME traefik-cl01tl
@@ -98,6 +97,7 @@ customDNS:
gatus IN CNAME traefik-cl01tl
gitea IN CNAME traefik-cl01tl
grafana IN CNAME traefik-cl01tl
grimmory IN CNAME traefik-cl01tl
harbor IN CNAME traefik-cl01tl
headlamp IN CNAME traefik-cl01tl
home IN CNAME traefik-cl01tl

View File

@@ -106,7 +106,6 @@ customDNS:
authentik IN CNAME traefik-cl01tl
backrest IN CNAME traefik-cl01tl
bazarr IN CNAME traefik-cl01tl
booklore IN CNAME traefik-cl01tl
ceph IN CNAME traefik-cl01tl
code-server IN CNAME traefik-cl01tl
dawarich IN CNAME traefik-cl01tl
@@ -119,6 +118,7 @@ customDNS:
gatus IN CNAME traefik-cl01tl
gitea IN CNAME traefik-cl01tl
grafana IN CNAME traefik-cl01tl
grimmory IN CNAME traefik-cl01tl
harbor IN CNAME traefik-cl01tl
headlamp IN CNAME traefik-cl01tl
home IN CNAME traefik-cl01tl

View File

@@ -1,7 +1,7 @@
---
services:
tailscale-komodo-periphery:
image: ghcr.io/tailscale/tailscale:latest@sha256:95e528798bebe75f39b10e74e7051cf51188ee615934f232ba7ad06a3390ffa1
image: ghcr.io/tailscale/tailscale:v1.94.2@sha256:95e528798bebe75f39b10e74e7051cf51188ee615934f232ba7ad06a3390ffa1
container_name: tailscale-komodo-periphery
cap_add:
- net_admin
@@ -20,18 +20,20 @@ services:
- /dev/net/tun:/dev/net/tun
komodo-periphery:
image: ghcr.io/moghtech/komodo-periphery:latest@sha256:bd79cf960ed054fe8e02384322303e462448679b1149dde48bbef151417255b1
image: ghcr.io/moghtech/komodo-periphery:2.0.0@sha256:cc9aff8b621d49bbcca394e1538d9d9ea28c48bcfd2d6c8a6f9d5d3eef7f8341
container_name: komodo-periphery
init: true
env_file:
- .env
- .komodo-env
environment:
- TZ=America/Chicago
restart: always
volumes:
- /var/run/docker.sock:/var/run/docker.sock
- /proc:/proc
- /mnt/data/komodo/repos:/etc/komodo/repos
- /mnt/data/komodo/stacks:/etc/komodo/stacks
- /mnt/data/komodo:/etc/komodo
- keys:/config/keys
volumes:
tailscale:
keys:

View File

@@ -70,22 +70,6 @@
],
"enabled": false
},
{
"description": "Automerge digests for actions",
"matchManagers": [
"github-actions"
],
"matchUpdateTypes": [
"digest"
],
"addLabels": [
"actions",
"automerge"
],
"enabled": true,
"automerge": true,
"minimumReleaseAge": "1 days"
},
{
"description": "Label charts",
"matchDatasources": [
@@ -96,36 +80,6 @@
],
"automerge": false
},
{
"description": "Automerge chart patches",
"matchUpdateTypes": [
"patch"
],
"matchDatasources": [
"helm"
],
"addLabels": [
"chart",
"automerge"
],
"automerge": true,
"minimumReleaseAge": "1 days"
},
{
"description": "Automerge helm chart lock files",
"matchManagers": [
"helm"
],
"lockFileMaintenance": {
"enabled": true
},
"addLabels": [
"chart",
"automerge"
],
"automerge": true,
"automergeType": "branch"
},
{
"description": "Label images",
"matchDatasources": [
@@ -136,60 +90,7 @@
],
"automerge": false
},
{
"description": "Automerge image patches",
"matchUpdateTypes": [
"patch",
"pinDigest"
],
"matchDatasources": [
"docker"
],
"addLabels": [
"image",
"automerge"
],
"automerge": true,
"minimumReleaseAge": "1 days"
},
{
"description": "Automerge images, specific packages",
"matchUpdateTypes": [
"patch",
"minor"
],
"matchDatasources": [
"docker"
],
"matchPackageNames": [
"ghcr.io/renovatebot/renovate"
],
"addLabels": [
"image",
"automerge"
],
"automerge": true,
"minimumReleaseAge": "1 days"
},
{
"description": "Automerge digest updates, specific packages",
"matchUpdateTypes": [
"digest"
],
"matchDatasources": [
"docker"
],
"matchPackageNames": [
"searxng/searxng"
],
"addLabels": [
"image",
"automerge"
],
"enabled": true,
"automerge": true,
"minimumReleaseAge": "1 days"
},
{
"description": "Label appVersion and images, merged",
"matchManagers": [
@@ -223,17 +124,151 @@
"minimumReleaseAge": "1 days"
},
{
"description": "Group unmatched Dawarich dependencies",
"matchPackageNames": [
"freikin/dawarich",
"freika/dawarich",
"ghcr.io/freikin/dawarich",
"ghcr.io/freika/dawarich",
"docker.io/freikin/dawarich",
"docker.io/freika/dawarich"
"description": "Automerge digests for actions",
"matchManagers": [
"github-actions"
],
"matchUpdateTypes": [
"digest"
],
"addLabels": [
"actions",
"automerge"
],
"enabled": true,
"automerge": true,
"minimumReleaseAge": "1 days"
},
{
"description": "Automerge chart patches",
"matchUpdateTypes": [
"patch"
],
"matchDatasources": [
"helm"
],
"addLabels": [
"chart",
"automerge"
],
"automerge": true,
"minimumReleaseAge": "1 days"
},
{
"description": "Automerge helm chart lock files",
"matchManagers": [
"helm"
],
"lockFileMaintenance": {
"enabled": true
},
"addLabels": [
"chart",
"automerge"
],
"automerge": true,
"automergeType": "branch"
},
{
"description": "Automerge image patches",
"matchUpdateTypes": [
"patch",
"pinDigest"
],
"matchDatasources": [
"docker"
],
"addLabels": [
"image",
"automerge"
],
"automerge": true,
"minimumReleaseAge": "1 days"
},
{
"description": "Automerge images, specific packages",
"matchUpdateTypes": [
"patch",
"minor"
],
"matchDatasources": [
"docker"
],
"matchPackageNames": [
"ghcr.io/renovatebot/renovate",
"kube-prometheus-stack"
],
"addLabels": [
"image",
"automerge"
],
"automerge": true
},
{
"description": "Automerge digest updates, specific packages",
"matchUpdateTypes": [
"digest"
],
"matchDatasources": [
"docker"
],
"matchPackageNames": [
"searxng/searxng"
],
"addLabels": [
"image",
"automerge"
],
"enabled": true,
"automerge": true
},
{
"description": "Group Dawarich dependencies",
"groupName": "dawarich",
"groupSlug": "unified-dawarich"
"groupSlug": "unified-dawarich",
"matchPackageNames": [
"/^(ghcr\\.io/|docker\\.io/)?(freika|freikin)/dawarich/"
]
},
{
"description": "Group Komodo dependencies",
"groupName": "komodo",
"groupSlug": "unified-komodo",
"matchPackageNames": [
"/^moghtech/komodo/",
"/^ghcr\\.io/moghtech/komodo/",
"/^docker\\.io/moghtech/komodo/"
]
},
{
"description": "Group Immich dependencies",
"groupName": "immich",
"groupSlug": "unified-immich",
"matchPackageNames": [
"/^immich-app/immich/",
"/^ghcr\\.io/immich-app/immich/",
"/^docker\\.io/immich-app/immich/"
]
},
{
"description": "Group Home Assistant dependencies",
"groupName": "home-assistant",
"groupSlug": "unified-home-assistant",
"matchPackageNames": [
"/^home-assistant//",
"/^ghcr\\.io/home-assistant//",
"/^docker\\.io/home-assistant//"
]
},
{
"description": "Group Element Web updates",
"groupName": "element-web",
"groupSlug": "unified-element-web",
"matchPackageNames": [
"/element-web/",
"/vectorim/element-web/",
"/element-hq/element-web/"
]
}
]
}