chore(deps): update searxng/searxng:latest docker digest to 1502823 (#3895)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [loki](https://grafana.github.io/helm-charts) ([source](https://github.com/grafana/helm-charts)) | minor | `6.52.0` → `6.53.0` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4zLjYiLCJ1cGRhdGVkSW5WZXIiOiI0My4zLjYiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImNoYXJ0Il19-->

Reviewed-on: #3878
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>

clusters/cl01tl/helm/argocd/values.yaml

@@ -4,6 +4,7 @@ argo-cd:
   configs:
     cm:
       admin.enabled: true
+      accounts.homepage: apiKey
       timeout.reconciliation: 100s
       timeout.reconciliation.jitter: 60s
       url: https://argocd.alexlebens.net
@@ -29,6 +30,7 @@ argo-cd:
     rbac:
       policy.csv: |
         g, ArgoCD Admins, role:admin
+        g, homepage, role:readonly
   controller:
     replicas: 1
     metrics:

clusters/cl01tl/helm/bazarr/values.yaml

@@ -15,7 +15,7 @@ bazarr:
         main:
           image:
             repository: ghcr.io/linuxserver/bazarr
-            tag: 1.5.5@sha256:d40ee61030a9afafddfdd58d160281b865bfcad7cb66e920116fd6fd40668cbb
+            tag: 1.5.5@sha256:18ff732dffcebd559d15a91845fc3360d49652ea01dccfbfd98b8248ceb86e38
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/element-web/Chart.yaml

@@ -24,4 +24,4 @@ dependencies:
     version: 2.3.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/element.png
 # renovate: datasource=github-releases depName=element-hq/element-web
-appVersion: v1.12.9
+appVersion: v1.12.10

clusters/cl01tl/helm/element-web/values.yaml

@@ -2,7 +2,7 @@ element-web:
   replicaCount: 1
   image:
     repository: vectorim/element-web
-    tag: v1.12.9
+    tag: v1.12.10
     pullPolicy: IfNotPresent
   defaultServer:
     url: https://matrix.alexlebens.dev

clusters/cl01tl/helm/headlamp/Chart.yaml

@@ -18,4 +18,4 @@ dependencies:
     repository: https://kubernetes-sigs.github.io/headlamp/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/headlamp.png
 # renovate: datasource=github-releases depName=headlamp-k8s/headlamp
-appVersion: v0.40.0
+appVersion: v0.40.1

clusters/cl01tl/helm/homepage/templates/external-secret.yaml

@@ -12,6 +12,41 @@ spec:
     kind: ClusterSecretStore
     name: vault
   data:
+    - secretKey: HOMEPAGE_VAR_GITEA_API_TOKEN
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/gitea/auth/homepage
+        metadataPolicy: None
+        property: token
+    - secretKey: HOMEPAGE_VAR_ARGOCD_API_TOKEN
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/argocd/credentials/homepage
+        metadataPolicy: None
+        property: token
+    - secretKey: HOMEPAGE_VAR_KOMODO_API_KEY
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/komodo/homepage
+        metadataPolicy: None
+        property: key
+    - secretKey: HOMEPAGE_VAR_KOMODO_API_SECRET
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/komodo/homepage
+        metadataPolicy: None
+        property: secret
+    - secretKey: HOMEPAGE_VAR_JELLYSTAT_API_KEY
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/jellystat/homepage
+        metadataPolicy: None
+        property: key
     - secretKey: HOMEPAGE_VAR_SYNOLOGY_USER
       remoteRef:
         conversionStrategy: Default
@@ -26,20 +61,13 @@ spec:
         key: /synology/auth/cl01tl
         metadataPolicy: None
         property: password
-    - secretKey: HOMEPAGE_VAR_UNIFI_USER
+    - secretKey: HOMEPAGE_VAR_UNIFI_API_KEY
       remoteRef:
         conversionStrategy: Default
         decodingStrategy: None
         key: /unifi/auth/cl01tl
         metadataPolicy: None
-        property: user
+        property: api-key
-    - secretKey: HOMEPAGE_VAR_UNIFI_PASSWORD
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /unifi/auth/cl01tl
-        metadataPolicy: None
-        property: password
     - secretKey: HOMEPAGE_VAR_SONARR_KEY
       remoteRef:
         conversionStrategy: Default

clusters/cl01tl/helm/homepage/values.yaml

@@ -301,6 +301,16 @@ homepage:
                   href: https://gitea.alexlebens.dev
                   siteMonitor: https://gitea.alexlebens.dev
                   statusStyle: dot
+                  namespace: gitea
+                  app: gitea
+                  podSelector: >-
+                      app.kubernetes.io/instance in (
+                          gitea
+                      )
+                  widget:
+                      type: gitea
+                      url: http://gitea-http.gitea:3000
+                      key: {{ "{{HOMEPAGE_VAR_GITEA_API_TOKEN}}" }}
               - Code (Local):
                   icon: sh-gitea.webp
                   description: Gitea
@@ -325,19 +335,37 @@ homepage:
                   href: https://home-assistant-code-server.alexlebens.net
                   siteMonitor: http://home-assistant-code-server.home-assistant:8443
                   statusStyle: dot
+          - Automation:
               - Continuous Deployment:
                   icon: sh-argo-cd.webp
                   description: ArgoCD
                   href: https://argocd.alexlebens.net
                   siteMonitor: http://argocd-server.argocd:80
                   statusStyle: dot
+                  namespace: argocd
+                  app: argocd
+                  podSelector: >-
+                      app.kubernetes.io/instance in (
+                          argocd
+                      )
+                  widget:
+                      type: argocd
+                      url: http://argocd-server.argocd:80
+                      key: {{ "{{HOMEPAGE_VAR_ARGOCD_API_TOKEN}}" }}
+                      fields: ["outOfSync", "progressing", "suspended", "degraded"]
               - Docker Deployment:
                   icon: sh-komodo-light.webp
                   description: Komodo
                   href: https://komodo.alexlebens.net
                   siteMonitor: http://komodo-main.komodo:80
                   statusStyle: dot
-          - Automation:
+                  widget:
+                      type: komodo
+                      url: http://komodo-main.komodo:80
+                      key: {{ "{{HOMEPAGE_VAR_KOMODO_API_KEY}}" }}
+                      secret: {{ "{{HOMEPAGE_VAR_KOMODO_API_SECRET}}" }}
+                      showStacks: true
+                      fields: ["running", "down", "unhealthy", "unknown"]
               - Deployment Workflows:
                   icon: sh-argo-cd.webp
                   description: Argo Workflows
@@ -363,24 +391,36 @@ homepage:
                   href: https://headlamp.alexlebens.net
                   siteMonitor: http://headlamp.headlamp:80
                   statusStyle: dot
-              - Network Monitoring:
-                  icon: sh-cilium.webp
-                  description: Hubble for Cilium
-                  href: https://hubble.alexlebens.net
-                  siteMonitor: http://hubble-ui.kube-system:80
-                  statusStyle: dot
               - Dashboard:
                   icon: sh-grafana.webp
                   description: Grafana
                   href: https://grafana.alexlebens.net
                   siteMonitor: http://grafana-main-service.grafana-operator:3000/api/health
                   statusStyle: dot
+              - Network Monitoring:
+                  icon: sh-cilium.webp
+                  description: Hubble for Cilium
+                  href: https://hubble.alexlebens.net
+                  siteMonitor: http://hubble-ui.kube-system:80
+                  statusStyle: dot
+                  namespace: kube-system
+                  app: cilium-operator
+                  podSelector: >-
+                      app.kubernetes.io/part-of in (
+                          cilium
+                      )
               - Metrics:
                   icon: sh-prometheus.webp
                   description: Prometheus
                   href: https://prometheus.alexlebens.net
                   siteMonitor: http://kube-prometheus-stack-prometheus.kube-prometheus-stack:9090
                   statusStyle: dot
+                  namespace: kube-prometheus-stack
+                  app: prometheus
+                  podSelector: >-
+                      app.kubernetes.io/instance in (
+                          kube-prometheus-stack
+                      )
                   widget:
                     type: prometheus
                     url: http://kube-prometheus-stack-prometheus.kube-prometheus-stack:9090
@@ -454,6 +494,11 @@ homepage:
                   href: https://unifi.alexlebens.net
                   siteMonitor: https://unifi.alexlebens.net
                   statusStyle: dot
+                  widget:
+                      type: unifi
+                      url: https://unifi.alexlebens.net
+                      key: {{ "{{HOMEPAGE_VAR_UNIFI_API_KEY}}" }}
+                      fields: ["uptime", "wan", "lan_devices", "wlan_devices"]
               - Network Attached Storage:
                   icon: sh-synology-light.webp
                   description: Synology
@@ -526,6 +571,9 @@ homepage:
                   href: https://backrest.alexlebens.net
                   siteMonitor: http://backrest.backrest:80
                   statusStyle: dot
+                  widget:
+                      type: backrest
+                      url: http://backrest.backrest:80
           - Content:
               - qUI:
                   icon: https://raw.githubusercontent.com/autobrr/qui/8487c818886df9abb2b1456f43b54e0ba180a2bd/web/public/icons.svg

clusters/cl01tl/helm/immich/Chart.yaml

@@ -31,4 +31,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/immich.png
 # renovate: datasource=github-releases depName=immich-app/immich
-appVersion: v2.5.5
+appVersion: v2.5.6

clusters/cl01tl/helm/immich/values.yaml

@@ -9,7 +9,7 @@ immich:
         main:
           image:
             repository: ghcr.io/immich-app/immich-server
-            tag: v2.5.5
+            tag: v2.5.6
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: kube-prometheus-stack
   repository: oci://ghcr.io/prometheus-community/charts
-  version: 81.5.0
+  version: 81.6.1
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
   version: 4.6.2
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.0.4
-digest: sha256:62ceeea1ed2f1f3a838e468665c3f291cb67ac547f3fa37863131f088736a750
+digest: sha256:5620c76f888c65e275d33ede933fca9dd5d0cf330cce7be884655fd9027c048b
-generated: "2026-02-03T20:37:14.907439914Z"
+generated: "2026-02-10T18:34:27.265951045Z"

clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml

@@ -20,7 +20,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: kube-prometheus-stack
-    version: 81.5.0
+    version: 81.6.1
     repository: oci://ghcr.io/prometheus-community/charts
   - name: app-template
     alias: ntfy-alertmanager

clusters/cl01tl/helm/loki/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: loki
   repository: https://grafana.github.io/helm-charts
-  version: 6.52.0
+  version: 6.53.0
 - name: alloy
   repository: https://grafana.github.io/helm-charts
   version: 1.6.0
-digest: sha256:097f893b362b3ba6a1498d6df00dc57030c4d1321cf3301268adb9e30d5043ed
+digest: sha256:a65f68b2e68defa63d15cf84317ba45a770b5b9cbb5bebc6fed219cefed99b69
-generated: "2026-02-05T22:01:50.699662067Z"
+generated: "2026-02-10T19:12:00.80383488Z"

clusters/cl01tl/helm/loki/Chart.yaml

@@ -16,7 +16,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: loki
-    version: 6.52.0
+    version: 6.53.0
     repository: https://grafana.github.io/helm-charts
   - name: alloy
     version: 1.6.0

clusters/cl01tl/helm/matrix-synapse/Chart.yaml

@@ -81,4 +81,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/matrix.png
 # renovate: datasource=github-releases depName=element-hq/synapse
-appVersion: 1.146.0
+appVersion: 1.147.0

clusters/cl01tl/helm/postiz/Chart.yaml

@@ -41,4 +41,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/postiz.png
 # renovate: datasource=github-releases depName=gitroomhq/postiz-app
-appVersion: v2.15.0
+appVersion: v2.16.0

clusters/cl01tl/helm/postiz/values.yaml

@@ -9,7 +9,7 @@ postiz:
         main:
           image:
             repository: ghcr.io/gitroomhq/postiz-app
-            tag: v2.15.0
+            tag: v2.16.0
             pullPolicy: IfNotPresent
           env:
             - name: MAIN_URL

clusters/cl01tl/helm/roundcube/values.yaml

@@ -9,7 +9,7 @@ roundcube:
         main:
           image:
             repository: roundcube/roundcubemail
-            tag: 1.6.12-fpm-alpine
+            tag: 1.6.13-fpm-alpine
             pullPolicy: IfNotPresent
           env:
             - name: ROUNDCUBEMAIL_DB_TYPE
@@ -85,7 +85,7 @@ roundcube:
         backup:
           image:
             repository: roundcube/roundcubemail
-            tag: 1.6.12-fpm-alpine
+            tag: 1.6.13-fpm-alpine
             pullPolicy: IfNotPresent
           env:
             - name: ROUNDCUBEMAIL_DB_TYPE

clusters/cl01tl/helm/searxng/values.yaml

@@ -9,7 +9,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:670bd1076097640fc25221bf92a8af7d344503ce17ba3305abedf28e3634e807
+            tag: latest@sha256:1502823ea918998e325d95f8c0cbd3db1dbd024da412dcce9f504e6244632b26
             pullPolicy: IfNotPresent
           env:
             - name: SEARXNG_BASE_URL
@@ -39,7 +39,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:670bd1076097640fc25221bf92a8af7d344503ce17ba3305abedf28e3634e807
+            tag: latest@sha256:1502823ea918998e325d95f8c0cbd3db1dbd024da412dcce9f504e6244632b26
             pullPolicy: IfNotPresent
           env:
             - name: SEARXNG_BASE_URL

clusters/cl01tl/helm/site-profile/values.yaml

@@ -11,7 +11,7 @@ site-profile:
         main:
           image:
             repository: harbor.alexlebens.net/images/site-profile
-            tag: 2.4.0
+            tag: 2.5.0
             pullPolicy: IfNotPresent
           resources:
             requests:

clusters/cl01tl/helm/slskd/values.yaml

@@ -122,7 +122,7 @@ slskd:
         main:
           image:
             repository: mrusse08/soularr
-            tag: latest@sha256:c1cfc6425c1cc141f5f99744611eeb1af32c85258df5e2a4974d7dbf6db76840
+            tag: latest@sha256:c02aec4a14b5ee228af21aaf7c94c181f45db8298057f1919688faa9c56c4387
             pullPolicy: IfNotPresent
           env:
             - name: TZ