Update Helm release postgres-cluster to v6

Update Helm release argo-cd to v8.1.4 (#989 )
Update ghcr.io/home-assistant/home-assistant Docker tag to v2025.7.3
2025-07-22 15:05:04 +00:00 · 2025-07-22 15:03:18 +00:00 · 2025-07-22 09:02:20 +00:00 · 2025-07-22 09:02:05 +00:00 · 2025-07-21 22:28:37 -05:00 · 2025-07-21 22:24:00 -05:00
102 changed files with 543 additions and 288 deletions
--- a/.gitea/workflows/process-pull-requests.yaml
+++ b/.gitea/workflows/process-pull-requests.yaml
@@ -1,35 +0,0 @@
 name: process-pull-requests
 on:
  schedule:
    - cron: '@daily'
 jobs:
  process-pull-requests:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout Python Script
        uses: actions/checkout@v4
        with:
          repository: alexlebens/workflow-scripts
          ref: main
          token: ${{ secrets.BOT_TOKEN }}
          path: scripts
      - name: Set up Python
        uses: actions/setup-python@v5
        with:
          python-version: '3.13'
      - name: Install dependencies
        run: pip install requests
      - name: Run Script
        env:
          INSTANCE_URL: ${{ vars.INSTANCE_URL }}
          REPOSITORY: ${{ gitea.repository }}
          TOKEN: ${{ secrets.BOT_TOKEN }}
          STALE_DAYS: 3
          STALE_TAG: 'stale'
          REQUIRED_TAG: 'automerge'
        run: python ./scripts/scripts/process-pull-requests.py
--- a/.gitea/workflows/process-repository.yaml
+++ b/.gitea/workflows/process-repository.yaml
@@ -1,11 +1,11 @@
-name: process-issues
+name: process-repository
 on:
  schedule:
-    - cron: '@daily'
+    - cron: "@daily"
 jobs:
-  process-issues:
+  process-repository:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout Python Script
@@ -14,22 +14,27 @@ jobs:
          repository: alexlebens/workflow-scripts
          ref: main
          token: ${{ secrets.BOT_TOKEN }}
-          path: scripts
+          path: workflow-scripts
      - name: Set up Python
        uses: actions/setup-python@v5
        with:
-          python-version: '3.13'
+          python-version: "3.13"
      - name: Install dependencies
-        run: pip install requests
+        run: pip install requests immutabledict
      - name: Run Script
        env:
          INSTANCE_URL: ${{ vars.INSTANCE_URL }}
          OWNER: ${{ gitea.owner }}
          REPOSITORY: ${{ gitea.repository }}
          TOKEN: ${{ secrets.BOT_TOKEN }}
-          STALE_DAYS: 3
+          LOG_LEVEL: DEBUG
-          STALE_TAG: 'stale'
+          ISSUE_STALE_DAYS: 3
-          EXCLUDE_TAG: 'renovate'
+          ISSUE_STALE_TAG: 16
-        run: python ./scripts/scripts/process-issues.py
+          ISSUE_EXCLUDE_TAG: 20
          PULL_REQUEST_STALE_DAYS: 3
          PULL_REQUEST_STALE_TAG: 16
          PULL_REQUEST_REQUIRED_TAG: 15
        run: python ./workflow-scripts/process-repository.py
--- a/clusters/cl01tl/applications/audiobookshelf/values.yaml
+++ b/clusters/cl01tl/applications/audiobookshelf/values.yaml
@@ -9,7 +9,7 @@ audiobookshelf:
        main:
          image:
            repository: ghcr.io/advplyr/audiobookshelf
-            tag: 2.25.1
+            tag: 2.26.2
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/applications/bazarr/values.yaml
+++ b/clusters/cl01tl/applications/bazarr/values.yaml
@@ -15,7 +15,7 @@ bazarr:
        main:
          image:
            repository: ghcr.io/linuxserver/bazarr
-            tag: 1.5.2@sha256:7fa77912d9cc0573ca4efd9ac542aba4fd51eb6d331c3ad7aac7bc7fca48b929
+            tag: 1.5.2@sha256:a848b8a1d9e3b2553157ceb72cd3fc6ae2b34e71bcece24561b0944fb7922b46
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/applications/calibre-web-automated/values.yaml
+++ b/clusters/cl01tl/applications/calibre-web-automated/values.yaml
@@ -31,7 +31,7 @@ calibre-web-automated:
        main:
          image:
            repository: ghcr.io/calibrain/calibre-web-automated-book-downloader
-            tag: latest@sha256:914a9e80b1c5b81b0e17a7d82ad1d1e22b0050164a739131203831123c60baf7
+            tag: latest@sha256:518908641a2260249513f349eef9f30e580f8f428d1adfa830096b43a818e97b
            pullPolicy: IfNotPresent
          env:
            - name: FLASK_PORT
--- a/clusters/cl01tl/applications/code-server/Chart.yaml
+++ b/clusters/cl01tl/applications/code-server/Chart.yaml
@@ -23,6 +23,6 @@ dependencies:
  - name: cloudflared
    alias: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.17.3
+    version: 1.18.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/visual-studio-code.png
 appVersion: 4.100.2
--- a/clusters/cl01tl/applications/code-server/values.yaml
+++ b/clusters/cl01tl/applications/code-server/values.yaml
@@ -9,7 +9,7 @@ code-server:
        main:
          image:
            repository: ghcr.io/linuxserver/code-server
-            tag: 4.101.2@sha256:d3945c21b1bd19938c15d79fc21f08fff272b2f6699825ca08856dd78545b623
+            tag: 4.102.1@sha256:61d3d01f1716a0dac5dec2a000a4fa8b48d3c0d9ded31860dbe994f0f6096cb5
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/applications/directus/Chart.yaml
+++ b/clusters/cl01tl/applications/directus/Chart.yaml
@@ -24,12 +24,12 @@ dependencies:
    repository: https://bjw-s-labs.github.io/helm-charts/
    version: 4.1.2
  - name: valkey
-    version: 3.0.16
+    version: 3.0.22
    repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
  - name: cloudflared
    alias: cloudflared-directus
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.17.3
+    version: 1.18.0
  - name: postgres-cluster
    alias: postgres-17-cluster
    version: 6.4.4
--- a/clusters/cl01tl/applications/directus/values.yaml
+++ b/clusters/cl01tl/applications/directus/values.yaml
@@ -9,7 +9,7 @@ directus:
        main:
          image:
            repository: directus/directus
-            tag: 11.9.2
+            tag: 11.9.3
            pullPolicy: IfNotPresent
          env:
            - name: PUBLIC_URL
@@ -200,3 +200,4 @@ postgres-17-cluster:
    destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/directus/directus-postgresql-17-cluster
    endpointCredentials: directus-postgresql-17-cluster-backup-secret
    backupIndex: 2
    retentionPolicy: "7d"
--- a/clusters/cl01tl/applications/element-web/Chart.yaml
+++ b/clusters/cl01tl/applications/element-web/Chart.yaml
@@ -17,11 +17,11 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: element-web
-    version: 1.4.14
+    version: 1.4.16
    repository: https://ananace.gitlab.io/charts
  - name: cloudflared
    alias: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.17.3
+    version: 1.18.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/element.png
 appVersion: v1.11.100
--- a/clusters/cl01tl/applications/element-web/values.yaml
+++ b/clusters/cl01tl/applications/element-web/values.yaml
@@ -2,7 +2,7 @@ element-web:
  replicaCount: 1
  image:
    repository: vectorim/element-web
-    tag: v1.11.105
+    tag: v1.11.106
    pullPolicy: IfNotPresent
  defaultServer:
    url: https://matrix.alexlebens.dev
--- a/clusters/cl01tl/applications/freshrss/Chart.yaml
+++ b/clusters/cl01tl/applications/freshrss/Chart.yaml
@@ -24,7 +24,7 @@ dependencies:
  - name: cloudflared
    alias: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.17.3
+    version: 1.18.0
  - name: postgres-cluster
    alias: postgres-17-cluster
    version: 6.4.4
--- a/clusters/cl01tl/applications/freshrss/values.yaml
+++ b/clusters/cl01tl/applications/freshrss/values.yaml
@@ -11,7 +11,7 @@ freshrss:
            runAsUser: 0
          image:
            repository: alpine
-            tag: 3.22.0
+            tag: 3.22.1
            pullPolicy: IfNotPresent
          command:
            - /bin/sh
@@ -35,7 +35,7 @@ freshrss:
            runAsUser: 0
          image:
            repository: alpine
-            tag: 3.22.0
+            tag: 3.22.1
            pullPolicy: IfNotPresent
          command:
            - /bin/sh
@@ -192,3 +192,4 @@ postgres-17-cluster:
    destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/freshrss/freshrss-postgresql-17-cluster
    endpointCredentials: freshrss-postgresql-17-cluster-backup-secret
    backupIndex: 3
    retentionPolicy: "7d"
--- a/clusters/cl01tl/applications/hoarder/Chart.yaml
+++ b/clusters/cl01tl/applications/hoarder/Chart.yaml
@@ -28,6 +28,6 @@ dependencies:
  - name: cloudflared
    alias: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.17.3
+    version: 1.18.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/webp/karakeep.webp
 appVersion: 0.24.1
--- a/clusters/cl01tl/applications/home-assistant/values.yaml
+++ b/clusters/cl01tl/applications/home-assistant/values.yaml
@@ -9,7 +9,7 @@ home-assistant:
        main:
          image:
            repository: ghcr.io/home-assistant/home-assistant
-            tag: 2025.7.1
+            tag: 2025.7.3
            pullPolicy: IfNotPresent
          env:
            - name: TZ
@@ -21,7 +21,7 @@ home-assistant:
        code-server:
          image:
            repository: ghcr.io/linuxserver/code-server
-            tag: 4.101.2@sha256:d3945c21b1bd19938c15d79fc21f08fff272b2f6699825ca08856dd78545b623
+            tag: 4.102.1@sha256:61d3d01f1716a0dac5dec2a000a4fa8b48d3c0d9ded31860dbe994f0f6096cb5
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/applications/homepage-dev/Chart.yaml
+++ b/clusters/cl01tl/applications/homepage-dev/Chart.yaml
@@ -22,6 +22,6 @@ dependencies:
  - name: cloudflared
    alias: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.17.3
+    version: 1.18.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/homepage.png
 appVersion: v1.2.0
--- a/clusters/cl01tl/applications/homepage-dev/values.yaml
+++ b/clusters/cl01tl/applications/homepage-dev/values.yaml
@@ -11,7 +11,7 @@ homepage:
        main:
          image:
            repository: ghcr.io/gethomepage/homepage
-            tag: v1.3.2
+            tag: v1.4.0
            pullPolicy: IfNotPresent
          env:
            - name: HOMEPAGE_ALLOWED_HOSTS
--- a/clusters/cl01tl/applications/homepage/values.yaml
+++ b/clusters/cl01tl/applications/homepage/values.yaml
@@ -15,7 +15,7 @@ homepage:
        main:
          image:
            repository: ghcr.io/gethomepage/homepage
-            tag: v1.3.2
+            tag: v1.4.0
            pullPolicy: IfNotPresent
          env:
            - name: HOMEPAGE_ALLOWED_HOSTS
--- a/clusters/cl01tl/applications/huntarr/values.yaml
+++ b/clusters/cl01tl/applications/huntarr/values.yaml
@@ -9,7 +9,7 @@ huntarr:
        main:
          image:
            repository: ghcr.io/plexguide/huntarr
-            tag: 8.1.11
+            tag: 8.1.15
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/applications/immich/Chart.yaml
+++ b/clusters/cl01tl/applications/immich/Chart.yaml
@@ -21,7 +21,7 @@ dependencies:
    repository: https://bjw-s-labs.github.io/helm-charts/
    version: 4.1.2
  - name: valkey
-    version: 3.0.16
+    version: 3.0.22
    repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
  - name: postgres-cluster
    alias: postgres-16-cluster
--- a/clusters/cl01tl/applications/immich/values.yaml
+++ b/clusters/cl01tl/applications/immich/values.yaml
@@ -250,3 +250,4 @@ postgres-16-cluster:
    destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/immich/immich-postgresql-16-cluster
    endpointCredentials: immich-postgresql-16-cluster-backup-secret
    backupIndex: 2
    retentionPolicy: "7d"
--- a/clusters/cl01tl/applications/jellystat/values.yaml
+++ b/clusters/cl01tl/applications/jellystat/values.yaml
@@ -102,4 +102,4 @@ postgres-17-cluster:
    destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/jellystat/jellystat-postgresql-17-cluster
    endpointCredentials: jellystat-postgresql-17-cluster-backup-secret
    backupIndex: 2
-    retentionPolicy: "7d"
+    retentionPolicy: "3d"
--- a/clusters/cl01tl/applications/libation/values.yaml
+++ b/clusters/cl01tl/applications/libation/values.yaml
@@ -16,7 +16,7 @@ libation:
        main:
          image:
            repository: rmcrackan/libation
-            tag: 12.4.5
+            tag: 12.4.7
            pullPolicy: IfNotPresent
          env:
            - name: SLEEP_TIME
--- a/clusters/cl01tl/applications/lidarr/values.yaml
+++ b/clusters/cl01tl/applications/lidarr/values.yaml
@@ -15,7 +15,7 @@ lidarr:
        main:
          image:
            repository: ghcr.io/linuxserver/lidarr
-            tag: 2.12.4@sha256:71fe6d5702691c6ac8961b9b1042fdea1ff833a49c82c5e165346fa88999a48a
+            tag: 2.12.4@sha256:d902a742ec417cc0f8fb87977f0d1e8df2c6f8dd43c96ff7b16e29c70b4776b8
            pullPolicy: IfNotPresent
          env:
            - name: TZ
@@ -117,4 +117,4 @@ postgres-17-cluster:
    destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/lidarr2/lidarr2-postgresql-17-cluster
    endpointCredentials: lidarr-postgresql-17-cluster-backup-secret
    backupIndex: 3
-    retentionPolicy: "7d"
+    retentionPolicy: "3d"
--- a/clusters/cl01tl/applications/omni-tools/values.yaml
+++ b/clusters/cl01tl/applications/omni-tools/values.yaml
@@ -9,7 +9,7 @@ omni-tools:
        main:
          image:
            repository: iib0011/omni-tools
-            tag: 0.4.0
+            tag: 0.5.0
            pullPolicy: IfNotPresent
          resources:
            requests:
--- a/clusters/cl01tl/applications/outline/Chart.yaml
+++ b/clusters/cl01tl/applications/outline/Chart.yaml
@@ -25,12 +25,12 @@ dependencies:
    repository: https://bjw-s-labs.github.io/helm-charts/
    version: 4.1.2
  - name: valkey
-    version: 3.0.16
+    version: 3.0.22
    repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
  - name: cloudflared
    alias: cloudflared-outline
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.17.3
+    version: 1.18.0
  - name: postgres-cluster
    alias: postgres-17-cluster
    version: 6.4.4
--- a/clusters/cl01tl/applications/outline/values.yaml
+++ b/clusters/cl01tl/applications/outline/values.yaml
@@ -9,7 +9,7 @@ outline:
        main:
          image:
            repository: outlinewiki/outline
-            tag: 0.85.0
+            tag: 0.85.1
            pullPolicy: IfNotPresent
          env:
            - name: NODE_ENV
@@ -191,3 +191,4 @@ postgres-17-cluster:
    destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/outline/outline-postgresql-17-cluster
    endpointCredentials: outline-postgresql-17-cluster-backup-secret
    backupIndex: 2
    retentionPolicy: "7d"
--- a/clusters/cl01tl/applications/plex/values.yaml
+++ b/clusters/cl01tl/applications/plex/values.yaml
@@ -9,7 +9,7 @@ plex:
        main:
          image:
            repository: ghcr.io/linuxserver/plex
-            tag: 1.41.8@sha256:14e8d783f2b0ec7e7ca2836d3d7185f5e68c60ba0e4eac77666bee4f0f819043
+            tag: 1.41.9@sha256:f8ed359f87f1becab37c2586af9f3414bd5c604d031d47f75e8422baf5224ef5
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/applications/postiz/Chart.yaml
+++ b/clusters/cl01tl/applications/postiz/Chart.yaml
@@ -24,11 +24,11 @@ dependencies:
    repository: https://bjw-s-labs.github.io/helm-charts/
    version: 4.1.2
  - name: valkey
-    version: 3.0.16
+    version: 3.0.22
    repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
  - name: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.17.3
+    version: 1.18.0
  - name: postgres-cluster
    alias: postgres-17-cluster
    version: 6.4.4
--- a/clusters/cl01tl/applications/postiz/values.yaml
+++ b/clusters/cl01tl/applications/postiz/values.yaml
@@ -9,7 +9,7 @@ postiz:
        main:
          image:
            repository: ghcr.io/gitroomhq/postiz-app
-            tag: v1.60.1
+            tag: v1.65.7
            pullPolicy: IfNotPresent
          env:
            - name: MAIN_URL
@@ -153,3 +153,4 @@ postgres-17-cluster:
    destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/postiz/postiz-postgresql-17-cluster
    endpointCredentials: postiz-postgresql-17-cluster-backup-secret
    backupIndex: 1
    retentionPolicy: "7d"
--- a/clusters/cl01tl/applications/prowlarr/values.yaml
+++ b/clusters/cl01tl/applications/prowlarr/values.yaml
@@ -20,7 +20,7 @@ prowlarr:
        main:
          image:
            repository: ghcr.io/linuxserver/prowlarr
-            tag: 1.37.0@sha256:b058be8a4e083e0cba238f03759994617a559abe0c89e5ed66454b44395da6a9
+            tag: 1.37.0@sha256:89eac63d2099477094df8c2329a6a750b8b5e382f8975dd18e7861678b55cca4
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/applications/radarr-4k/values.yaml
+++ b/clusters/cl01tl/applications/radarr-4k/values.yaml
@@ -15,7 +15,7 @@ radarr-4k:
        main:
          image:
            repository: ghcr.io/linuxserver/radarr
-            tag: 5.26.2@sha256:07a474b61394553e047ad43a1a78c1047fc99be0144c509dd91e3877f402ebcb
+            tag: 5.26.2@sha256:ae89f05ad7023258730ed62f5fcca63aab1e27ee5adcca1edb55d716f7cef356
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/applications/radarr-anime/values.yaml
+++ b/clusters/cl01tl/applications/radarr-anime/values.yaml
@@ -13,7 +13,7 @@ radarr-anime:
        main:
          image:
            repository: ghcr.io/linuxserver/radarr
-            tag: 5.26.2@sha256:07a474b61394553e047ad43a1a78c1047fc99be0144c509dd91e3877f402ebcb
+            tag: 5.26.2@sha256:ae89f05ad7023258730ed62f5fcca63aab1e27ee5adcca1edb55d716f7cef356
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/applications/radarr-standup/values.yaml
+++ b/clusters/cl01tl/applications/radarr-standup/values.yaml
@@ -13,7 +13,7 @@ radarr-standup:
        main:
          image:
            repository: ghcr.io/linuxserver/radarr
-            tag: 5.26.2@sha256:07a474b61394553e047ad43a1a78c1047fc99be0144c509dd91e3877f402ebcb
+            tag: 5.26.2@sha256:ae89f05ad7023258730ed62f5fcca63aab1e27ee5adcca1edb55d716f7cef356
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/applications/radarr/values.yaml
+++ b/clusters/cl01tl/applications/radarr/values.yaml
@@ -15,7 +15,7 @@ radarr:
        main:
          image:
            repository: ghcr.io/linuxserver/radarr
-            tag: 5.26.2@sha256:07a474b61394553e047ad43a1a78c1047fc99be0144c509dd91e3877f402ebcb
+            tag: 5.26.2@sha256:ae89f05ad7023258730ed62f5fcca63aab1e27ee5adcca1edb55d716f7cef356
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/applications/roundcube/values.yaml
+++ b/clusters/cl01tl/applications/roundcube/values.yaml
@@ -229,3 +229,4 @@ postgres-17-cluster:
    destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/roundcube/roundcube-postgresql-17-cluster
    endpointCredentials: roundcube-postgresql-17-cluster-backup-secret
    backupIndex: 2
    retentionPolicy: "7d"
--- a/clusters/cl01tl/applications/searxng/Chart.yaml
+++ b/clusters/cl01tl/applications/searxng/Chart.yaml
@@ -19,7 +19,7 @@ dependencies:
    repository: https://bjw-s-labs.github.io/helm-charts/
    version: 4.1.2
  - name: valkey
-    version: 3.0.16
+    version: 3.0.22
    repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/searxng.png
 appVersion: 1.0.0
--- a/clusters/cl01tl/applications/searxng/values.yaml
+++ b/clusters/cl01tl/applications/searxng/values.yaml
@@ -9,7 +9,7 @@ searxng:
        main:
          image:
            repository: searxng/searxng
-            tag: latest@sha256:943a2c535c076e77d529303f6512a9a346f5f5ecf59268164e38b7f2fcd93bb9
+            tag: latest@sha256:4c0724b937d02f1872d7a7b944252938832ecf6a4fe4e12e0b109916d49d61b6
            pullPolicy: IfNotPresent
          env:
            - name: SEARXNG_BASE_URL
@@ -43,7 +43,7 @@ searxng:
        main:
          image:
            repository: searxng/searxng
-            tag: latest@sha256:943a2c535c076e77d529303f6512a9a346f5f5ecf59268164e38b7f2fcd93bb9
+            tag: latest@sha256:4c0724b937d02f1872d7a7b944252938832ecf6a4fe4e12e0b109916d49d61b6
            pullPolicy: IfNotPresent
          env:
            - name: SEARXNG_BASE_URL
--- a/clusters/cl01tl/applications/site-profile/Chart.yaml
+++ b/clusters/cl01tl/applications/site-profile/Chart.yaml
@@ -23,6 +23,6 @@ dependencies:
  - name: cloudflared
    alias: cloudflared-site
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.17.3
+    version: 1.18.0
 icon: https://d21zlbwtcn424f.cloudfront.net/icon_white.png
 appVersion: 0.8.1
--- a/clusters/cl01tl/applications/site-profile/values.yaml
+++ b/clusters/cl01tl/applications/site-profile/values.yaml
@@ -11,7 +11,7 @@ site-profile:
        main:
          image:
            repository: harbor.alexlebens.net/images/site-profile
-            tag: 0.8.12
+            tag: 0.11.3
            pullPolicy: IfNotPresent
          resources:
            requests:
--- a/clusters/cl01tl/applications/slskd/values.yaml
+++ b/clusters/cl01tl/applications/slskd/values.yaml
@@ -28,7 +28,7 @@ slskd:
        main:
          image:
            repository: slskd/slskd
-            tag: 0.22.5
+            tag: 0.23.1
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/applications/sonarr-4k/values.yaml
+++ b/clusters/cl01tl/applications/sonarr-4k/values.yaml
@@ -13,7 +13,7 @@ sonarr-4k:
        main:
          image:
            repository: ghcr.io/linuxserver/sonarr
-            tag: 4.0.15@sha256:e3916c86db3c78156d5fcca8d86df5d4ed2ce9c4b476b606a7c4d2ba06a25dde
+            tag: 4.0.15@sha256:b0ac15772c04f329964ed79cb446ab23fd1ee28f33b58b10f0264feac17d33cd
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/applications/sonarr-anime/values.yaml
+++ b/clusters/cl01tl/applications/sonarr-anime/values.yaml
@@ -13,7 +13,7 @@ sonarr-anime:
        main:
          image:
            repository: ghcr.io/linuxserver/sonarr
-            tag: 4.0.15@sha256:e3916c86db3c78156d5fcca8d86df5d4ed2ce9c4b476b606a7c4d2ba06a25dde
+            tag: 4.0.15@sha256:b0ac15772c04f329964ed79cb446ab23fd1ee28f33b58b10f0264feac17d33cd
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/applications/sonarr/values.yaml
+++ b/clusters/cl01tl/applications/sonarr/values.yaml
@@ -13,7 +13,7 @@ sonarr:
        main:
          image:
            repository: ghcr.io/linuxserver/sonarr
-            tag: 4.0.15@sha256:e3916c86db3c78156d5fcca8d86df5d4ed2ce9c4b476b606a7c4d2ba06a25dde
+            tag: 4.0.15@sha256:b0ac15772c04f329964ed79cb446ab23fd1ee28f33b58b10f0264feac17d33cd
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/applications/tubearchivist/Chart.yaml
+++ b/clusters/cl01tl/applications/tubearchivist/Chart.yaml
@@ -24,10 +24,10 @@ dependencies:
    repository: https://bjw-s-labs.github.io/helm-charts/
    version: 4.1.2
  - name: valkey
-    version: 3.0.16
+    version: 3.0.22
    repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
  - name: elasticsearch
-    version: 22.0.10
+    version: 22.0.13
    repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/tube-archivist.png
 appVersion: v0.5.2
--- a/clusters/cl01tl/applications/vaultwarden/Chart.yaml
+++ b/clusters/cl01tl/applications/vaultwarden/Chart.yaml
@@ -25,7 +25,7 @@ dependencies:
  - name: cloudflared
    alias: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.17.3
+    version: 1.18.0
  - name: postgres-cluster
    alias: postgres-17-cluster
    version: 6.4.4
--- a/clusters/cl01tl/applications/vaultwarden/values.yaml
+++ b/clusters/cl01tl/applications/vaultwarden/values.yaml
@@ -73,3 +73,4 @@ postgres-17-cluster:
    destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/vaultwarden/vaultwarden-postgresql-17-cluster
    endpointCredentials: vaultwarden-postgresql-17-cluster-backup-secret
    backupIndex: 3
    retentionPolicy: "7d"
--- a/clusters/cl01tl/applications/yamtrack/Chart.yaml
+++ b/clusters/cl01tl/applications/yamtrack/Chart.yaml
@@ -23,7 +23,7 @@ dependencies:
    repository: https://bjw-s-labs.github.io/helm-charts/
    version: 4.1.2
  - name: valkey
-    version: 3.0.16
+    version: 3.0.22
    repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
  - name: postgres-cluster
    alias: postgres-17-cluster
--- a/clusters/cl01tl/applications/yamtrack/values.yaml
+++ b/clusters/cl01tl/applications/yamtrack/values.yaml
@@ -9,7 +9,7 @@ yamtrack:
        main:
          image:
            repository: ghcr.io/fuzzygrim/yamtrack
-            tag: 0.24.5
+            tag: 0.24.6
            pullPolicy: IfNotPresent
          env:
            - name: TZ
@@ -118,3 +118,4 @@ postgres-17-cluster:
    destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/yamtrack/yamtrack-postgresql-17-cluster
    endpointCredentials: yamtrack-postgresql-17-cluster-backup-secret
    backupIndex: 1
    retentionPolicy: "7d"
--- a/clusters/cl01tl/deployment/argocd/Chart.yaml
+++ b/clusters/cl01tl/deployment/argocd/Chart.yaml
@@ -15,7 +15,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: argo-cd
-    version: 8.1.2
+    version: 8.1.4
    repository: https://argoproj.github.io/argo-helm
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 appVersion: 3.0.0
--- a/clusters/cl01tl/management/argo-workflows/Chart.yaml
+++ b/clusters/cl01tl/management/argo-workflows/Chart.yaml
@@ -18,10 +18,10 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: argo-workflows
-    version: 0.45.19
+    version: 0.45.20
    repository: https://argoproj.github.io/argo-helm
  - name: argo-events
-    version: 2.4.15
+    version: 2.4.16
    repository: https://argoproj.github.io/argo-helm
  - name: postgres-cluster
    alias: postgres-17-cluster
--- a/clusters/cl01tl/management/argo-workflows/values.yaml
+++ b/clusters/cl01tl/management/argo-workflows/values.yaml
@@ -111,3 +111,4 @@ postgres-17-cluster:
    endpointURL: https://nyc3.digitaloceanspaces.com
    destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/argo-workflows/argo-workflows-postgresql-17-cluster
    backupIndex: 4
    retentionPolicy: "7d"
--- a/clusters/cl01tl/management/headlamp/Chart.yaml
+++ b/clusters/cl01tl/management/headlamp/Chart.yaml
@@ -14,7 +14,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: headlamp
-    version: 0.31.1
+    version: 0.32.1
    repository: https://kubernetes-sigs.github.io/headlamp/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/headlamp.png
 appVersion: 0.30.1
--- a/clusters/cl01tl/management/komodo/values.yaml
+++ b/clusters/cl01tl/management/komodo/values.yaml
@@ -154,3 +154,4 @@ postgres-17-cluster:
    destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/komodo/komodo-postgresql-17-cluster
    endpointCredentials: komodo-postgresql-17-cluster-backup-secret
    backupIndex: 2
    retentionPolicy: "7d"
--- a/clusters/cl01tl/monitoring/gatus/values.yaml
+++ b/clusters/cl01tl/monitoring/gatus/values.yaml
@@ -7,7 +7,7 @@ gatus:
    enabled: true
  image:
    repository: ghcr.io/twin/gatus
-    tag: v5.19.0
+    tag: v5.20.0
  annotations:
    reloader.stakater.com/auto: "true"
  service:
@@ -382,3 +382,4 @@ postgres-17-cluster:
    endpointURL: https://nyc3.digitaloceanspaces.com
    destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/gatus/gatus-postgresql-17-cluster
    backupIndex: 1
    retentionPolicy: "7d"
--- a/clusters/cl01tl/monitoring/grafana-operator/Chart.yaml
+++ b/clusters/cl01tl/monitoring/grafana-operator/Chart.yaml
@@ -21,11 +21,11 @@ dependencies:
    repository: https://grafana.github.io/helm-charts
  - name: valkey
    alias: valkey-unified-alerting
-    version: 3.0.16
+    version: 3.0.22
    repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
  - name: valkey
    alias: valkey-remote-cache
-    version: 3.0.16
+    version: 3.0.22
    repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
  - name: postgres-cluster
    alias: postgres-17-cluster
--- a/clusters/cl01tl/monitoring/grafana-operator/templates/grafana-dashboard.yaml
+++ b/clusters/cl01tl/monitoring/grafana-operator/templates/grafana-dashboard.yaml
@@ -378,6 +378,25 @@ spec:
  resyncPeriod: 1h
  url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/service/volsync.json
 ---
 apiVersion: grafana.integreatly.org/v1beta1
 kind: GrafanaDashboard
 metadata:
  name: grafana-dashboard-s3
  namespace: {{ .Release.Namespace }}
  labels:
    app.kubernetes.io/name: grafana-dashboard-s3
    app.kubernetes.io/instance: {{ .Release.Name }}
    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
  instanceSelector:
    matchLabels:
      app: grafana-main
  contentCacheDuration: 1h
  folderUID: grafana-folder-platform
  resyncPeriod: 1h
  url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/platform/s3.json
 ---
 apiVersion: grafana.integreatly.org/v1beta1
 kind: GrafanaDashboard
--- a/clusters/cl01tl/monitoring/grafana-operator/values.yaml
+++ b/clusters/cl01tl/monitoring/grafana-operator/values.yaml
@@ -80,3 +80,4 @@ postgres-17-cluster:
    destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/grafana-operator/grafana-operator-postgresql-17-cluster
    endpointCredentials: grafana-operator-postgresql-17-cluster-backup-secret
    backupIndex: 1
    retentionPolicy: "7d"
--- a/clusters/cl01tl/monitoring/kube-prometheus-stack/Chart.yaml
+++ b/clusters/cl01tl/monitoring/kube-prometheus-stack/Chart.yaml
@@ -17,7 +17,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: kube-prometheus-stack
-    version: 75.8.1
+    version: 75.12.0
    repository: oci://ghcr.io/prometheus-community/charts
  - name: app-template
    alias: ntfy-alertmanager
@@ -25,7 +25,7 @@ dependencies:
    version: 4.1.2
  - name: valkey
    alias: valkey-ntfy-alertmanager
-    version: 3.0.16
+    version: 3.0.22
    repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/prometheus.png
 appVersion: v0.82.0
--- a/clusters/cl01tl/monitoring/loki/Chart.yaml
+++ b/clusters/cl01tl/monitoring/loki/Chart.yaml
@@ -16,7 +16,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: loki
-    version: 6.30.1
+    version: 6.32.0
    repository: https://grafana.github.io/helm-charts
  - name: promtail
    version: 6.17.0
--- a/clusters/cl01tl/monitoring/s3-exporter/Chart.yaml
+++ b/clusters/cl01tl/monitoring/s3-exporter/Chart.yaml
@@ -0,0 +1,22 @@
 apiVersion: v2
 name: s3-exporter
 version: 1.0.0
 description: S3 Exporter
 keywords:
  - s3-exporter
  - storage
  - monitoring
  - metrics
 home: https://wiki.alexlebens.dev/s/
 sources:
  - https://github.com/molu8bits/s3bucket_exporter
  - https://hub.docker.com/r/molu8bits/s3bucket_exporter
  - https://github.com/bjw-s/helm-charts/blob/main/charts/other/app-template
 maintainers:
  - name: alexlebens
 dependencies:
  - name: app-template
    alias: s3-exporter
    repository: https://bjw-s-labs.github.io/helm-charts/
    version: 4.1.2
 appVersion: 1.0.2
--- a/clusters/cl01tl/monitoring/s3-exporter/templates/external-secret.yaml
+++ b/clusters/cl01tl/monitoring/s3-exporter/templates/external-secret.yaml
@@ -0,0 +1,72 @@
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
  name: s3-ceph-directus-secret
  namespace: {{ .Release.Namespace }}
  labels:
    app.kubernetes.io/name: s3-ceph-directus-secret
    app.kubernetes.io/instance: {{ .Release.Name }}
    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
  secretStoreRef:
    kind: ClusterSecretStore
    name: vault
  data:
    - secretKey: AWS_ACCESS_KEY_ID
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        key: /cl01tl/directus/ceph
        metadataPolicy: None
        property: AWS_ACCESS_KEY_ID
    - secretKey: AWS_SECRET_ACCESS_KEY
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        key: /cl01tl/directus/ceph
        metadataPolicy: None
        property: AWS_SECRET_ACCESS_KEY
    - secretKey: BUCKET_HOST
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        key: /cl01tl/directus/ceph
        metadataPolicy: None
        property: BUCKET_HOST
 ---
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
  name: s3-do-home-infra-secret
  namespace: {{ .Release.Namespace }}
  labels:
    app.kubernetes.io/name: s3-do-home-infra-secret
    app.kubernetes.io/instance: {{ .Release.Name }}
    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
  secretStoreRef:
    kind: ClusterSecretStore
    name: vault
  data:
    - secretKey: AWS_ACCESS_KEY_ID
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        key: /digital-ocean/home-infra/all-access
        metadataPolicy: None
        property: AWS_ACCESS_KEY_ID
    - secretKey: AWS_SECRET_ACCESS_KEY
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        key: /digital-ocean/home-infra/all-access
        metadataPolicy: None
        property: AWS_SECRET_ACCESS_KEY
    - secretKey: AWS_REGION
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        key: /digital-ocean/home-infra/prometheus-exporter
        metadataPolicy: None
        property: AWS_REGION
--- a/clusters/cl01tl/monitoring/s3-exporter/templates/service-monitor.yaml
+++ b/clusters/cl01tl/monitoring/s3-exporter/templates/service-monitor.yaml
@@ -0,0 +1,42 @@
 apiVersion: monitoring.coreos.com/v1
 kind: ServiceMonitor
 metadata:
  name: s3-exporter-digital-ocean
  namespace: {{ .Release.Namespace }}
  labels:
    app.kubernetes.io/name: s3-exporter-digital-ocean
    app.kubernetes.io/instance: {{ .Release.Name }}
    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
  selector:
    matchLabels:
      app.kubernetes.io/name: s3-exporter
      app.kubernetes.io/instance: {{ .Release.Name }}
      app.kubernetes.io/service: s3-exporter-digital-ocean
  endpoints:
    - port: metrics
      interval: 6h
      scrapeTimeout: 120s
      path: /metrics
 ---
 apiVersion: monitoring.coreos.com/v1
 kind: ServiceMonitor
 metadata:
  name: s3-exporter-ceph-directus
  namespace: {{ .Release.Namespace }}
  labels:
    app.kubernetes.io/name: s3-exporter-ceph-directus
    app.kubernetes.io/instance: {{ .Release.Name }}
    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
  selector:
    matchLabels:
      app.kubernetes.io/name: s3-exporter
      app.kubernetes.io/instance: {{ .Release.Name }}
      app.kubernetes.io/service: s3-exporter-ceph-directus
  endpoints:
    - port: metrics
      interval: 6h
      scrapeTimeout: 120s
      path: /metrics
--- a/clusters/cl01tl/monitoring/s3-exporter/values.yaml
+++ b/clusters/cl01tl/monitoring/s3-exporter/values.yaml
@@ -0,0 +1,95 @@
 s3-exporter:
  controllers:
    digital-ocean:
      type: deployment
      replicas: 1
      strategy: Recreate
      revisionHistoryLimit: 3
      containers:
        main:
          image:
            repository: molu8bits/s3bucket_exporter
            tag: 1.0.2
            pullPolicy: IfNotPresent
          env:
            - name: S3_NAME
              value: digital-ocean
            - name: S3_ENDPOINT
              value: https://nyc3.digitaloceanspaces.com
            - name: S3_ACCESS_KEY
              valueFrom:
                secretKeyRef:
                  name: s3-do-home-infra-secret
                  key: AWS_ACCESS_KEY_ID
            - name: S3_SECRET_KEY
              valueFrom:
                secretKeyRef:
                  name: s3-do-home-infra-secret
                  key: AWS_SECRET_ACCESS_KEY
            - name: S3_REGION
              valueFrom:
                secretKeyRef:
                  name: s3-do-home-infra-secret
                  key: AWS_REGION
            - name: LOG_LEVEL
              value: debug
            - name: S3_FORCE_PATH_STYLE
              value: false
          resources:
            requests:
              cpu: 10m
              memory: 64Mi
    ceph-directus:
      type: deployment
      replicas: 1
      strategy: Recreate
      revisionHistoryLimit: 3
      containers:
        main:
          image:
            repository: molu8bits/s3bucket_exporter
            tag: 1.0.2
            pullPolicy: IfNotPresent
          env:
            - name: S3_NAME
              value: ceph-directus
            - name: S3_ENDPOINT
              valueFrom:
                secretKeyRef:
                  name: s3-ceph-directus-secret
                  key: BUCKET_HOST
            - name: S3_ACCESS_KEY
              valueFrom:
                secretKeyRef:
                  name: s3-ceph-directus-secret
                  key: AWS_ACCESS_KEY_ID
            - name: S3_SECRET_KEY
              valueFrom:
                secretKeyRef:
                  name: s3-ceph-directus-secret
                  key: AWS_SECRET_ACCESS_KEY
            - name: S3_REGION
              value: us-east-1
            - name: LOG_LEVEL
              value: debug
            - name: S3_FORCE_PATH_STYLE
              value: true
          resources:
            requests:
              cpu: 10m
              memory: 64Mi
  service:
    digital-ocean:
      controller: digital-ocean
      ports:
        metrics:
          port: 9655
          targetPort: 9655
          protocol: TCP
    ceph-directus:
      controller: ceph-directus
      ports:
        metrics:
          port: 9655
          targetPort: 9655
          protocol: TCP
--- a/clusters/cl01tl/monitoring/trivy/Chart.yaml
+++ b/clusters/cl01tl/monitoring/trivy/Chart.yaml
@@ -16,7 +16,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: trivy-operator
-    version: 0.29.1
+    version: 0.29.3
    repository: https://aquasecurity.github.io/helm-charts/
 icon: https://raw.githubusercontent.com/aquasecurity/trivy/main/docs/imgs/logo.png
 appVersion: v0.26.1
--- a/clusters/cl01tl/monitoring/trivy/values.yaml
+++ b/clusters/cl01tl/monitoring/trivy/values.yaml
@@ -61,6 +61,10 @@ trivy-operator:
      cpu: 100m
      memory: 128Mi
  nodeCollector:
    tolerations:
      - key: node-role.kubernetes.io/control-plane
        operator: Exists
        effect: NoSchedule
    volumeMounts:
      - name: var-lib-etcd
        mountPath: /var/lib/etcd
--- a/clusters/cl01tl/platform/authentik/Chart.yaml
+++ b/clusters/cl01tl/platform/authentik/Chart.yaml
@@ -26,7 +26,7 @@ dependencies:
  - name: cloudflared
    alias: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.17.3
+    version: 1.18.0
  - name: postgres-cluster
    alias: postgres-17-cluster
    version: 6.4.4
--- a/clusters/cl01tl/platform/authentik/values.yaml
+++ b/clusters/cl01tl/platform/authentik/values.yaml
@@ -79,3 +79,4 @@ postgres-17-cluster:
    destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/authentik/authentik-postgresql-17-cluster
    endpointCredentials: authentik-postgresql-17-cluster-backup-secret
    backupIndex: 2
    retentionPolicy: "7d"
--- a/clusters/cl01tl/platform/gitea/Chart.yaml
+++ b/clusters/cl01tl/platform/gitea/Chart.yaml
@@ -28,7 +28,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: gitea
-    version: 12.1.1
+    version: 12.1.2
    repository: https://dl.gitea.io/charts/
  - name: gitea-actions
    repository: oci://harbor.alexlebens.net/helm-charts
@@ -41,16 +41,16 @@ dependencies:
    version: 0.14.0
    repository: https://meilisearch.github.io/meilisearch-kubernetes
  - name: valkey
-    version: 3.0.16
+    version: 3.0.22
    repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
  - name: valkey
    alias: valkey-renovate
-    version: 3.0.16
+    version: 3.0.22
    repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
  - name: cloudflared
    alias: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.17.3
+    version: 1.18.0
  - name: postgres-cluster
    alias: postgres-17-cluster
    version: 6.4.4
--- a/clusters/cl01tl/platform/gitea/templates/external-secret.yaml
+++ b/clusters/cl01tl/platform/gitea/templates/external-secret.yaml
@@ -168,43 +168,6 @@ spec:
        metadataPolicy: None
        property: id_rsa.pub
 ---
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
  name: gitea-backup-s3
  namespace: {{ .Release.Namespace }}
  labels:
    app.kubernetes.io/name: gitea-backup-s3
    app.kubernetes.io/instance: {{ .Release.Name }}
    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
  secretStoreRef:
    kind: ClusterSecretStore
    name: vault
  data:
    - secretKey: AWS_ACCESS_KEY_ID
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        key: /digital-ocean/home-infra/gitea-backup
        metadataPolicy: None
        property: AWS_ACCESS_KEY_ID
    - secretKey: AWS_SECRET_ACCESS_KEY
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        key: /digital-ocean/home-infra/gitea-backup
        metadataPolicy: None
        property: AWS_SECRET_ACCESS_KEY
    - secretKey: S3_REPOSITORY
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        key: /digital-ocean/home-infra/gitea-backup
        metadataPolicy: None
        property: S3_REPOSITORY
 ---
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
@@ -224,9 +187,16 @@ spec:
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
-        key: /cl01tl/gitea/backup
+        key: /digital-ocean/home-infra/gitea-backup
        metadataPolicy: None
        property: s3cfg
    - secretKey: BUCKET
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        key: /digital-ocean/home-infra/gitea-backup
        metadataPolicy: None
        property: BUCKET
 ---
 apiVersion: external-secrets.io/v1
--- a/clusters/cl01tl/platform/gitea/templates/persistent-volume-claim.yaml
+++ b/clusters/cl01tl/platform/gitea/templates/persistent-volume-claim.yaml
@@ -15,3 +15,22 @@ spec:
  resources:
    requests:
      storage: 1Gi
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim
 metadata:
  name: gitea-themes-storage
  namespace: {{ .Release.Namespace }}
  labels:
    app.kubernetes.io/name: gitea-themes-storage
    app.kubernetes.io/instance: {{ .Release.Name }}
    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
  volumeMode: Filesystem
  storageClassName: nfs-client
  accessModes:
    - ReadWriteOnce
  resources:
    requests:
      storage: 1Gi
--- a/clusters/cl01tl/platform/gitea/values.yaml
+++ b/clusters/cl01tl/platform/gitea/values.yaml
@@ -4,7 +4,7 @@ gitea:
  replicaCount: 3
  image:
    repository: gitea/gitea
-    tag: 1.24.2
+    tag: 1.24.3
  service:
    http:
      type: ClusterIP
@@ -25,10 +25,24 @@ gitea:
    - name: gitea-nfs-storage-backup
      persistentVolumeClaim:
        claimName: gitea-nfs-storage-backup
-  extraVolumeMounts:
+    - name: gitea-themes-storage
      persistentVolumeClaim:
        claimName: gitea-themes-storage
  extraInitVolumeMounts:
    - name: gitea-themes-storage
      readOnly: false
      mountPath: /data/gitea/public/assets/css
  extraContainerVolumeMounts:
    - mountPath: /opt/backup
      name: gitea-nfs-storage-backup
      readOnly: false
    - name: gitea-themes-storage
      readOnly: true
      mountPath: /data/gitea/public/assets/css
  initPreScript: |
    wget https://github.com/catppuccin/gitea/releases/latest/download/catppuccin-gitea.tar.gz;
    tar -xvzf catppuccin-gitea.tar.gz -C /data/gitea/public/assets/css;
    rm catppuccin-gitea.tar.gz;
  gitea:
    metrics:
      enabled: true
@@ -83,6 +97,9 @@ gitea:
        REQUIRE_SIGNIN_VIEW: true
      webhook:
        ALLOWED_HOST_LIST: private
      ui:
        DEFAULT_THEME: gitea-auto
        THEMES: gitea-light,gitea-dark,gitea-auto,catppuccin-rosewater-auto,catppuccin-flamingo-auto,catppuccin-pink-auto,catppuccin-mauve-auto,catppuccin-red-auto,catppuccin-maroon-auto,catppuccin-peach-auto,catppuccin-yellow-auto,catppuccin-green-auto,catppuccin-teal-auto,catppuccin-sky-auto,catppuccin-sapphire-auto,catppuccin-blue-auto,catppuccin-lavender-auto,catppuccin-latte-rosewater,catppuccin-latte-flamingo,catppuccin-latte-pink,catppuccin-latte-mauve,catppuccin-latte-red,catppuccin-latte-maroon,catppuccin-latte-peach,catppuccin-latte-yellow,catppuccin-latte-green,catppuccin-latte-teal,catppuccin-latte-sky,catppuccin-latte-sapphire,catppuccin-latte-blue,catppuccin-latte-lavender,catppuccin-frappe-rosewater,catppuccin-frappe-flamingo,catppuccin-frappe-pink,catppuccin-frappe-mauve,catppuccin-frappe-red,catppuccin-frappe-maroon,catppuccin-frappe-peach,catppuccin-frappe-yellow,catppuccin-frappe-green,catppuccin-frappe-teal,catppuccin-frappe-sky,catppuccin-frappe-sapphire,catppuccin-frappe-blue,catppuccin-frappe-lavender,catppuccin-macchiato-rosewater,catppuccin-macchiato-flamingo,catppuccin-macchiato-pink,catppuccin-macchiato-mauve,catppuccin-macchiato-red,catppuccin-macchiato-maroon,catppuccin-macchiato-peach,catppuccin-macchiato-yellow,catppuccin-macchiato-green,catppuccin-macchiato-teal,catppuccin-macchiato-sky,catppuccin-macchiato-sapphire,catppuccin-macchiato-blue,catppuccin-macchiato-lavender,catppuccin-mocha-rosewater,catppuccin-mocha-flamingo,catppuccin-mocha-pink,catppuccin-mocha-mauve,catppuccin-mocha-red,catppuccin-mocha-maroon,catppuccin-mocha-peach,catppuccin-mocha-yellow,catppuccin-mocha-green,catppuccin-mocha-teal,catppuccin-mocha-sky,catppuccin-mocha-sapphire,catppuccin-mocha-blue,catppuccin-mocha-lavender
      mirror:
        DEFAULT_INTERVAL: 10m
    additionalConfigFromEnvs:
@@ -175,7 +192,7 @@ backup:
        backup:
          image:
            repository: bitnami/kubectl
-            tag: 1.33.1
+            tag: 1.33.3
            pullPolicy: IfNotPresent
          command:
            - sh
@@ -192,7 +209,7 @@ backup:
        s3-backup:
          image:
            repository: d3fk/s3cmd
-            tag: latest@sha256:e9f00f479587ce03d52eb1c650e589b14dc13baf5345cb6ac752105e08305eca
+            tag: latest@sha256:4e1ea572a90e25f42fe0550b86bad601508033030dd6989c63b85a79e143c8b4
            pullPolicy: IfNotPresent
          command:
            - /bin/sh
@@ -200,12 +217,15 @@ backup:
            - -ec
            - |
              echo ">> Running S3 backup for Gitea"
-              s3cmd put --no-check-md5 --no-check-certificate -v /opt/backup/gitea-backup.zip ${S3_REPOSITORY}/gitea-backup-$(date +"%Y%m%d-%H-%M").zip;
+              s3cmd put --no-check-md5 --no-check-certificate -v /opt/backup/gitea-backup.zip ${BUCKET}/cl01tl/gitea-backup-$(date +"%Y%m%d-%H-%M").zip;
              mv /opt/backup/gitea-backup.zip /opt/backup/gitea-backup-$(date +"%Y%m%d-%H-%M").zip;
              echo ">> Completed S3 backup for Gitea"
-          envFrom:
+          env:
-            - secretRef:
+            - name: BUCKET
-                name: gitea-backup-s3
+              valueFrom:
                secretKeyRef:
                  name: gitea-s3cmd-config
                  key: BUCKET
          resources:
            requests:
              cpu: 100m
@@ -213,31 +233,33 @@ backup:
        s3-prune:
          image:
            repository: d3fk/s3cmd
-            tag: latest@sha256:e9f00f479587ce03d52eb1c650e589b14dc13baf5345cb6ac752105e08305eca
+            tag: latest@sha256:4e1ea572a90e25f42fe0550b86bad601508033030dd6989c63b85a79e143c8b4
            pullPolicy: IfNotPresent
          command:
            - /bin/sh
          args:
            - -ec
            - |
-              export ONE_WEEK_AGO=$(date -d @$(( $(date +%s) - 604800 )) +%Y-%m-%d\ %H:%M:%S);
+              export DATE_RANGE=$(date -d @$(( $(date +%s) - 1209600 )) +%Y%m%d);
-              export TWO_WEEK_AGO=$(date -d @$(( $(date +%s) - 1209600 )) +%Y-%m-%d\ %H:%M:%S);
+              export FILE_MATCH="$BUCKET/cl01tl/gitea-backup-$DATE_RANGE-09-00.zip"
              export TIME_RANGE="$TWO_WEEK_AGO"
              echo ">> Running S3 prune for Gitea backup repository"
-              echo ">> Backups prior to '$TIME_RANGE' will be removed"
+              echo ">> Backups prior to '$DATE_RANGE' will be removed"
-              echo ">> File list:"
+              echo ">> Backups to be removed:"
-              s3cmd ls -v $S3_REPOSITORY
+              s3cmd ls ${BUCKET}/cl01tl/ |
                awk -v file_match="$FILE_MATCH" '$4 < file_match {print $4}'
              echo ">> Deleting ..."
-              s3cmd ls -v $S3_REPOSITORY |
+              s3cmd ls ${BUCKET}/cl01tl/ |
-                awk -v time_range="$TIME_RANGE" '$1 < time_range {print $4}' |
+                awk -v file_match="$FILE_MATCH" '$4 < file_match {print $4}' |
-                while read file;
+                while read file; do
-                  do s3cmd del -v "$file";
+                  s3cmd del "$file";
                  echo ">> Deleted $file";
                done;
              echo ">> Completed S3 prune for Gitea backup repository"
-          envFrom:
+          env:
-            - secretRef:
+            - name: BUCKET
-                name: gitea-backup-s3
+              valueFrom:
                secretKeyRef:
                  name: gitea-s3cmd-config
                  key: BUCKET
          resources:
            requests:
              cpu: 100m
@@ -349,3 +371,4 @@ postgres-17-cluster:
    destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/gitea/gitea-postgresql-17-cluster
    endpointCredentials: gitea-postgresql-17-cluster-backup-secret
    backupIndex: 3
    retentionPolicy: "7d"
--- a/clusters/cl01tl/platform/matrix-synapse/Chart.yaml
+++ b/clusters/cl01tl/platform/matrix-synapse/Chart.yaml
@@ -31,7 +31,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: matrix-synapse
-    version: 3.12.3
+    version: 3.12.5
    repository: https://ananace.gitlab.io/charts
  - name: app-template
    alias: matrix-hookshot
@@ -47,19 +47,19 @@ dependencies:
  #   version: 4.0.1
  - name: valkey
    alias: valkey-synapse
-    version: 3.0.16
+    version: 3.0.22
    repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
  - name: valkey
    alias: valkey-hookshot
-    version: 3.0.16
+    version: 3.0.22
    repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
  - name: cloudflared
    alias: cloudflared-synapse
-    version: 1.17.3
+    version: 1.18.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: cloudflared
    alias: cloudflared-hookshot
-    version: 1.17.3
+    version: 1.18.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: postgres-cluster
    alias: postgres-17-cluster
--- a/clusters/cl01tl/platform/matrix-synapse/values.yaml
+++ b/clusters/cl01tl/platform/matrix-synapse/values.yaml
@@ -203,7 +203,7 @@ mautrix-discord:
        main:
          image:
            repository: dock.mau.dev/mautrix/discord
-            tag: v0.7.4
+            tag: v0.7.5
            pullPolicy: IfNotPresent
          resources:
            requests:
@@ -252,7 +252,7 @@ mautrix-whatsapp:
        main:
          image:
            repository: dock.mau.dev/mautrix/whatsapp
-            tag: v0.12.2
+            tag: v0.12.3
            pullPolicy: IfNotPresent
          resources:
            requests:
@@ -368,3 +368,4 @@ postgres-17-cluster:
    destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/matrix-synapse/matrix-synapse-postgresql-17-cluster
    endpointCredentials: matrix-synapse-postgresql-17-cluster-backup-secret
    backupIndex: 1
    retentionPolicy: "7d"
--- a/clusters/cl01tl/platform/n8n/Chart.yaml
+++ b/clusters/cl01tl/platform/n8n/Chart.yaml
@@ -22,7 +22,7 @@ dependencies:
    repository: https://bjw-s-labs.github.io/helm-charts/
    version: 4.1.2
  - name: valkey
-    version: 3.0.16
+    version: 3.0.22
    repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
  - name: postgres-cluster
    alias: postgres-17-cluster
--- a/clusters/cl01tl/platform/n8n/values.yaml
+++ b/clusters/cl01tl/platform/n8n/values.yaml
@@ -9,7 +9,7 @@ n8n:
        main:
          image:
            repository: ghcr.io/n8n-io/n8n
-            tag: 1.101.1
+            tag: 1.104.0
            pullPolicy: IfNotPresent
          env:
            - name: GENERIC_TIMEZONE
@@ -93,7 +93,7 @@ n8n:
        main:
          image:
            repository: ghcr.io/n8n-io/n8n
-            tag: 1.101.1
+            tag: 1.104.0
            pullPolicy: IfNotPresent
          command:
            - n8n
@@ -182,7 +182,7 @@ n8n:
        main:
          image:
            repository: ghcr.io/n8n-io/n8n
-            tag: 1.101.1
+            tag: 1.104.0
            pullPolicy: IfNotPresent
          command:
            - n8n
@@ -353,3 +353,4 @@ postgres-17-cluster:
    destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/n8n/n8n-postgresql-17-cluster
    endpointCredentials: n8n-postgresql-17-cluster-backup-secret
    backupIndex: 1
    retentionPolicy: "7d"
--- a/clusters/cl01tl/platform/ntfy/values.yaml
+++ b/clusters/cl01tl/platform/ntfy/values.yaml
@@ -9,7 +9,7 @@ ntfy:
        main:
          image:
            repository: binwiederhier/ntfy
-            tag: v2.12.0
+            tag: v2.13.0
            pullPolicy: IfNotPresent
          args: ["serve"]
          env:
--- a/clusters/cl01tl/platform/ollama/values.yaml
+++ b/clusters/cl01tl/platform/ollama/values.yaml
@@ -22,7 +22,7 @@ ollama:
        main:
          image:
            repository: ollama/ollama
-            tag: 0.9.5
+            tag: 0.9.6
            pullPolicy: IfNotPresent
          env:
            - name: OLLAMA_KEEP_ALIVE
@@ -58,7 +58,7 @@ ollama:
        main:
          image:
            repository: ollama/ollama
-            tag: 0.9.5
+            tag: 0.9.6
            pullPolicy: IfNotPresent
          env:
            - name: OLLAMA_KEEP_ALIVE
@@ -94,7 +94,7 @@ ollama:
        main:
          image:
            repository: ollama/ollama
-            tag: 0.9.5
+            tag: 0.9.6
            pullPolicy: IfNotPresent
          env:
            - name: OLLAMA_KEEP_ALIVE
@@ -117,7 +117,7 @@ ollama:
        main:
          image:
            repository: ghcr.io/open-webui/open-webui
-            tag: v0.6.15
+            tag: v0.6.18
            pullPolicy: IfNotPresent
          env:
            - name: ENV
@@ -261,3 +261,4 @@ postgres-17-cluster:
    destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/ollama/ollama-web-postgresql-17-cluster
    endpointCredentials: ollama-web-postgresql-17-cluster-backup-secret
    backupIndex: 2
    retentionPolicy: "7d"
--- a/clusters/cl01tl/platform/qbittorrent/templates/config-map.yaml
+++ b/clusters/cl01tl/platform/qbittorrent/templates/config-map.yaml
@@ -42,7 +42,7 @@ data:
      rem_orphaned: true
      tag_nohardlinks: false
      share_limits: true
-      skip_qb_version_check: false
+      skip_qb_version_check: true
      skip_cleanup: false
    qbt:
--- a/clusters/cl01tl/platform/qbittorrent/values.yaml
+++ b/clusters/cl01tl/platform/qbittorrent/values.yaml
@@ -28,7 +28,7 @@ qbittorrent:
        qbittorrent:
          image:
            repository: ghcr.io/linuxserver/qbittorrent
-            tag: 5.1.2@sha256:94c8c82291c4fcf86084a6efb9f806786296fad48739e4723dc9a5393073a2ae
+            tag: 5.1.0@sha256:ca6325989299ff807ab94c9505c138b6cadfe8a77c4ef14c5690094cbbe40d7d
            pullPolicy: IfNotPresent
          env:
            - name: TZ
@@ -135,7 +135,7 @@ qbittorrent:
        qbit-manage:
          image:
            repository: ghcr.io/stuffanthings/qbit_manage
-            tag: v4.4.0
+            tag: v4.5.1
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/platform/stalwart/Chart.yaml
+++ b/clusters/cl01tl/platform/stalwart/Chart.yaml
@@ -25,10 +25,10 @@ dependencies:
    version: 4.1.2
    repository: https://bjw-s-labs.github.io/helm-charts/
  - name: valkey
-    version: 3.0.16
+    version: 3.0.22
    repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
  - name: elasticsearch
-    version: 22.0.10
+    version: 22.0.13
    repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
  - name: postgres-cluster
    alias: postgres-17-cluster
--- a/clusters/cl01tl/platform/stalwart/values.yaml
+++ b/clusters/cl01tl/platform/stalwart/values.yaml
@@ -116,3 +116,4 @@ postgres-17-cluster:
    destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/stalwart/stalwart-postgresql-17-cluster
    endpointCredentials: stalwart-postgresql-17-cluster-backup-secret
    backupIndex: 2
    retentionPolicy: "7d"
--- a/clusters/cl01tl/platform/vault/templates/external-secret.yaml
+++ b/clusters/cl01tl/platform/vault/templates/external-secret.yaml
@@ -27,43 +27,6 @@ spec:
        metadataPolicy: None
        property: VAULT_APPROLE_SECRET_ID
 ---
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
  name: vault-snapshot-s3
  namespace: {{ .Release.Namespace }}
  labels:
    app.kubernetes.io/name: vault-snapshot-s3
    app.kubernetes.io/instance: {{ .Release.Name }}
    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
  secretStoreRef:
    kind: ClusterSecretStore
    name: vault
  data:
    - secretKey: AWS_ACCESS_KEY_ID
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        key: /digital-ocean/home-infra/vault-backup
        metadataPolicy: None
        property: AWS_ACCESS_KEY_ID
    - secretKey: AWS_SECRET_ACCESS_KEY
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        key: /digital-ocean/home-infra/vault-backup
        metadataPolicy: None
        property: AWS_SECRET_ACCESS_KEY
    - secretKey: S3_REPOSITORY
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        key: /digital-ocean/home-infra/vault-backup
        metadataPolicy: None
        property: S3_REPOSITORY
 ---
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
@@ -83,9 +46,16 @@ spec:
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
-        key: /cl01tl/vault/snapshot
+        key: /digital-ocean/home-infra/vault-backup
        metadataPolicy: None
        property: s3cfg
    - secretKey: BUCKET
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        key: /digital-ocean/home-infra/vault-backup
        metadataPolicy: None
        property: BUCKET
 ---
 apiVersion: external-secrets.io/v1
--- a/clusters/cl01tl/platform/vault/values.yaml
+++ b/clusters/cl01tl/platform/vault/values.yaml
@@ -198,7 +198,7 @@ snapshot:
        s3-backup:
          image:
            repository: d3fk/s3cmd
-            tag: latest@sha256:e9f00f479587ce03d52eb1c650e589b14dc13baf5345cb6ac752105e08305eca
+            tag: latest@sha256:4e1ea572a90e25f42fe0550b86bad601508033030dd6989c63b85a79e143c8b4
            pullPolicy: IfNotPresent
          command:
            - /bin/sh
@@ -206,38 +206,15 @@ snapshot:
            - -ec
            - |
              echo ">> Running S3 backup for Vault snapshot"
-              s3cmd put --no-check-md5 --no-check-certificate -v /opt/backup/vault-snapshot-s3.snap ${S3_REPOSITORY}/vault-snapshot-$(date +"%Y%m%d-%H-%M").snap;
+              s3cmd put --no-check-md5 --no-check-certificate -v /opt/backup/vault-snapshot-s3.snap ${BUCKET}/cl01tl/cl01tl-vault-snapshots/vault-snapshot-$(date +"%Y%m%d-%H-%M").snap;
              rm -f /opt/backup/vault-snapshot-s3.snap;
              echo ">> Completed S3 backup for Vault snapshot"
-          envFrom:
+          env:
-            - secretRef:
+            - name: BUCKET
-                name: vault-snapshot-s3
+              valueFrom:
-          resources:
+                secretKeyRef:
-            requests:
+                  name: vault-s3cmd-config
-              cpu: 100m
+                  key: BUCKET
              memory: 128Mi
        s3-prune:
          image:
            repository: d3fk/s3cmd
            tag: latest@sha256:e9f00f479587ce03d52eb1c650e589b14dc13baf5345cb6ac752105e08305eca
            pullPolicy: IfNotPresent
          command:
            - /bin/sh
          args:
            - -ec
            - |
              export MONTH_AGO=$(date -d @$(( $(date +%s) - 2592000 )) +%Y-%m-%d\ %H:%M:%S);
              echo ">> Running S3 prune for Vault snapshot repository"
              echo ">> Backups prior to '$MONTH_AGO' will be removed"
              s3cmd ls -v $S3_REPOSITORY |
                awk -v month_ago="$MONTH_AGO" '$1 < month_ago {print $4}' |
                while read file;
                  do s3cmd del -v "$file";
                done;
              echo ">> Completed S3 prune for Vault snapshot repository"
          envFrom:
            - secretRef:
                name: vault-snapshot-s3
          resources:
            requests:
              cpu: 100m
@@ -264,11 +241,6 @@ snapshot:
              readOnly: true
              mountPropagation: None
              subPath: .s3cfg
          s3-prune:
            - path: /root/.s3cfg
              readOnly: true
              mountPropagation: None
              subPath: .s3cfg
 unseal:
  global:
    fullnameOverride: vault-unseal
--- a/clusters/cl01tl/services/blocky/Chart.yaml
+++ b/clusters/cl01tl/services/blocky/Chart.yaml
@@ -20,7 +20,7 @@ dependencies:
    repository: https://bjw-s-labs.github.io/helm-charts/
    version: 4.1.2
  - name: valkey
-    version: 3.0.16
+    version: 3.0.22
    repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/blocky.png
 appVersion: v0.25
--- a/clusters/cl01tl/services/generic-device-plugin/Chart.yaml
+++ b/clusters/cl01tl/services/generic-device-plugin/Chart.yaml
@@ -15,6 +15,6 @@ maintainers:
 dependencies:
  - name: generic-device-plugin
    repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-    version: 0.3.2
+    version: 0.4.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 appVersion: 0.1.10
--- a/clusters/cl01tl/services/generic-device-plugin/values.yaml
+++ b/clusters/cl01tl/services/generic-device-plugin/values.yaml
@@ -1,7 +1,7 @@
 generic-device-plugin:
  image:
    repository: ghcr.io/squat/generic-device-plugin
-    tag: latest@sha256:d7d0951df7f11479185fd9fba1c1cb4d9c8f3232d38a5468d6fe80074f2b45d5
+    tag: latest@sha256:1f779444c72c7bf06b082c44698d6268a8e642ebd9488a35c84a603087940e64
  config:
    enabled: true
    data: |
--- a/clusters/cl01tl/services/harbor/Chart.yaml
+++ b/clusters/cl01tl/services/harbor/Chart.yaml
@@ -22,7 +22,7 @@ dependencies:
    version: 1.17.1
    repository: https://helm.goharbor.io
  - name: valkey
-    version: 3.0.16
+    version: 3.0.22
    repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
  - name: postgres-cluster
    alias: postgres-17-cluster
--- a/clusters/cl01tl/services/harbor/values.yaml
+++ b/clusters/cl01tl/services/harbor/values.yaml
@@ -139,3 +139,4 @@ postgres-17-cluster:
    destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/harbor/harbor-postgresql-17-cluster
    endpointCredentials: harbor-postgresql-17-cluster-backup-secret
    backupIndex: 1
    retentionPolicy: "7d"
--- a/clusters/cl01tl/services/reloader/Chart.yaml
+++ b/clusters/cl01tl/services/reloader/Chart.yaml
@@ -14,7 +14,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: reloader
-    version: 2.1.4
+    version: 2.1.5
    repository: https://stakater.github.io/stakater-charts
 icon: https://raw.githubusercontent.com/stakater/Reloader/refs/heads/master/assets/web/reloader.jpg
 appVersion: v1.4.2
--- a/clusters/cl01tl/services/talos/templates/external-secret.yaml
+++ b/clusters/cl01tl/services/talos/templates/external-secret.yaml
@@ -28,6 +28,20 @@ spec:
        key: /digital-ocean/home-infra/etcd-backup
        metadataPolicy: None
        property: AWS_SECRET_ACCESS_KEY
    - secretKey: .s3cfg
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        key: /digital-ocean/home-infra/etcd-backup
        metadataPolicy: None
        property: s3cfg
    - secretKey: BUCKET
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        key: /digital-ocean/home-infra/etcd-backup
        metadataPolicy: None
        property: BUCKET
    - secretKey: AGE_X25519_PUBLIC_KEY
      remoteRef:
        conversionStrategy: Default
--- a/clusters/cl01tl/services/talos/values.yaml
+++ b/clusters/cl01tl/services/talos/values.yaml
@@ -56,7 +56,7 @@ etcd-backup:
            - name: BUCKET
              value: talos-backups-bee8585f7b8a4d0239c9b823
            - name: S3_PREFIX
-              value: "cl01tl"
+              value: "cl01tl/etcd"
            - name: CLUSTER_NAME
              value: "cl01tl"
            - name: AGE_X25519_PUBLIC_KEY
@@ -70,6 +70,40 @@ etcd-backup:
            requests:
              cpu: 100m
              memory: 128Mi
        s3-prune:
          image:
            repository: d3fk/s3cmd
            tag: latest@sha256:4e1ea572a90e25f42fe0550b86bad601508033030dd6989c63b85a79e143c8b4
            pullPolicy: IfNotPresent
          command:
            - /bin/sh
          args:
            - -ec
            - |
              export DATE_RANGE=$(date -d @$(( $(date +%s) - 1209600 )) +%Y-%m-%dT%H:%M:%SZ);
              export FILE_MATCH="$BUCKET/cl01tl/etcd/cl01tl-$DATE_RANGE.snap.age"
              echo ">> Running S3 prune for Talos backup repository"
              echo ">> Backups prior to '$DATE_RANGE' will be removed"
              echo ">> Backups to be removed:"
              s3cmd ls ${BUCKET}/cl01tl/etcd/ |
                awk -v file_match="$FILE_MATCH" '$4 < file_match {print $4}'
              echo ">> Deleting ..."
              s3cmd ls ${BUCKET}/cl01tl/etcd/ |
                awk -v file_match="$FILE_MATCH" '$4 < file_match {print $4}' |
                while read file; do
                  s3cmd del "$file";
                done;
              echo ">> Completed S3 prune for Talos backup repository"
          env:
            - name: BUCKET
              valueFrom:
                secretKeyRef:
                  name: talos-etcd-backup-secret
                  key: BUCKET
          resources:
            requests:
              cpu: 100m
              memory: 128Mi
  persistence:
    tmp:
      type: emptyDir
@@ -97,3 +131,14 @@ etcd-backup:
            - path: /var/run/secrets/talos.dev
              readOnly: true
              mountPropagation: None
    s3cmd-config:
      enabled: true
      type: secret
      name: talos-etcd-backup-secret
      advancedMounts:
        main:
          s3-prune:
            - path: /root/.s3cfg
              readOnly: true
              mountPropagation: None
              subPath: .s3cfg
--- a/clusters/cl01tl/standalone/cilium/Chart.yaml
+++ b/clusters/cl01tl/standalone/cilium/Chart.yaml
@@ -15,7 +15,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: cilium
-    version: 1.17.5
+    version: 1.17.6
    repository: https://helm.cilium.io/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/cilium.png
 appVersion: 1.17.3
--- a/clusters/cl01tl/standalone/prometheus-operator-crds/Chart.yaml
+++ b/clusters/cl01tl/standalone/prometheus-operator-crds/Chart.yaml
@@ -15,7 +15,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: prometheus-operator-crds
-    version: 21.0.0
+    version: 22.0.1
    repository: oci://ghcr.io/prometheus-community/charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/prometheus.png
 appVersion: v0.82.0
--- a/clusters/cl01tl/storage/rook-ceph/Chart.yaml
+++ b/clusters/cl01tl/storage/rook-ceph/Chart.yaml
@@ -16,14 +16,14 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: rook-ceph
-    version: v1.17.5
+    version: v1.17.6
    repository: https://charts.rook.io/release
  - name: rook-ceph-cluster
-    version: v1.17.5
+    version: v1.17.6
    repository: https://charts.rook.io/release
  - name: cloudflared
    alias: cloudflared-rgw
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.17.3
+    version: 1.18.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ceph.png
 appVersion: v1.17.1
--- a/clusters/cl01tl/storage/volsync/Chart.yaml
+++ b/clusters/cl01tl/storage/volsync/Chart.yaml
@@ -16,7 +16,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: volsync
-    version: 0.12.1
+    version: 0.13.0
    repository: https://backube.github.io/helm-charts/
 icon: https://raw.githubusercontent.com/backube/volsync/main/docs/media/volsync.svg?sanitize=true
 appVersion: 0.12.1
--- a/clusters/cl01tl/storage/whodb/values.yaml
+++ b/clusters/cl01tl/storage/whodb/values.yaml
@@ -8,7 +8,7 @@ whodb:
        main:
          image:
            repository: clidey/whodb
-            tag: 0.57.0
+            tag: 0.58.0
            pullPolicy: IfNotPresent
          env:
            - name: WHODB_OLLAMA_HOST
--- a/hosts/ps08rp/traefik/compose.yaml
+++ b/hosts/ps08rp/traefik/compose.yaml
@@ -1,7 +1,7 @@
 ---
 services:
    traefik:
-        image: ghcr.io/traefik/traefik:v3.4.3
+        image: ghcr.io/traefik/traefik:v3.4.4
        container_name: traefik
        command:
            - "--global.checkNewVersion=false"
--- a/hosts/ps09rp/traefik/compose.yaml
+++ b/hosts/ps09rp/traefik/compose.yaml
@@ -1,7 +1,7 @@
 ---
 services:
    traefik:
-        image: ghcr.io/traefik/traefik:v3.4.3
+        image: ghcr.io/traefik/traefik:v3.4.4
        container_name: traefik
        command:
            - "--global.checkNewVersion=false"
--- a/hosts/ps10rp/gitea/compose.yaml
+++ b/hosts/ps10rp/gitea/compose.yaml
@@ -33,7 +33,7 @@ services:
            - postgresql:/var/lib/postgresql/data
    gitea:
-        image: gitea/gitea:1.24.2
+        image: gitea/gitea:1.24.3
        container_name: gitea
        depends_on:
            - postgresql
--- a/Show More
+++ b/Show More