Update Helm release postgres-cluster to v6

clusters/cl01tl/applications/directus/Chart.yaml

@@ -27,7 +27,7 @@ dependencies:
     version: 1.20.1
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/directus.png
 appVersion: 11.7.2

clusters/cl01tl/applications/freshrss/Chart.yaml

@@ -27,7 +27,7 @@ dependencies:
     version: 1.20.1
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/freshrss.png
 appVersion: 1.26.2

clusters/cl01tl/applications/immich/Chart.yaml

@@ -20,7 +20,7 @@ dependencies:
     version: 4.2.0
   - name: postgres-cluster
     alias: postgres-16-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/immich.png
 appVersion: v1.132.3

clusters/cl01tl/applications/jellystat/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     version: 4.2.0
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/jellystat.png
 appVersion: 1.1.6

clusters/cl01tl/applications/lidarr/Chart.yaml

@@ -24,7 +24,7 @@ dependencies:
     version: 4.2.0
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/lidarr.png
 appVersion: 2.11.2

clusters/cl01tl/applications/outline/Chart.yaml

@@ -28,7 +28,7 @@ dependencies:
     version: 1.20.1
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/outline.png
 appVersion: 0.84.0

clusters/cl01tl/applications/photoview/Chart.yaml

@@ -20,7 +20,7 @@ dependencies:
     version: 4.2.0
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/photoview.png
 appVersion: 2.4.0

clusters/cl01tl/applications/postiz/Chart.yaml

@@ -26,7 +26,7 @@ dependencies:
     version: 1.20.1
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/postiz.png
 appVersion: v1.43.3

clusters/cl01tl/applications/radarr-4k/Chart.yaml

@@ -27,7 +27,7 @@ dependencies:
     version: 4.2.0
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/radarr-4k.png
 appVersion: 5.22.4

clusters/cl01tl/applications/radarr-anime/Chart.yaml

@@ -27,7 +27,7 @@ dependencies:
     version: 4.2.0
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/radarr-anime.png
 appVersion: 5.22.4

clusters/cl01tl/applications/radarr-standup/Chart.yaml

@@ -26,7 +26,7 @@ dependencies:
     version: 4.2.0
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/radarr.png
 appVersion: 5.22.4

clusters/cl01tl/applications/radarr/Chart.yaml

@@ -26,7 +26,7 @@ dependencies:
     version: 4.2.0
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/radarr.png
 appVersion: 5.22.4

clusters/cl01tl/applications/roundcube/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     version: 4.2.0
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/roundcube.png
 appVersion: 1.6.10

clusters/cl01tl/applications/sonarr-4k/Chart.yaml

@@ -27,7 +27,7 @@ dependencies:
     version: 4.2.0
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/sonarr.png
 appVersion: 4.0.14

clusters/cl01tl/applications/sonarr-anime/Chart.yaml

@@ -26,7 +26,7 @@ dependencies:
     version: 4.2.0
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/sonarr.png
 appVersion: 4.0.14

clusters/cl01tl/applications/sonarr/Chart.yaml

@@ -26,7 +26,7 @@ dependencies:
     version: 4.2.0
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/sonarr.png
 appVersion: 4.0.14

clusters/cl01tl/applications/vaultwarden/Chart.yaml

@@ -28,7 +28,7 @@ dependencies:
     version: 1.20.1
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/vaultwarden.png
 appVersion: 1.33.2

clusters/cl01tl/applications/yamtrack/Chart.yaml

@@ -22,7 +22,7 @@ dependencies:
     version: 4.2.0
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/yamtrack.png
 appVersion: 0.22.7

clusters/cl01tl/management/argo-workflows/Chart.yaml

@@ -25,7 +25,7 @@ dependencies:
     repository: https://argoproj.github.io/argo-helm
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 appVersion: v3.6.7

clusters/cl01tl/management/komodo/Chart.yaml

@@ -23,7 +23,7 @@ dependencies:
     version: 4.2.0
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/komodo.png
 appVersion: v1.17.5

clusters/cl01tl/monitoring/gatus/Chart.yaml

@@ -22,7 +22,7 @@ dependencies:
     version: 1.4.0
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/gatus.png
 appVersion: v5.12.0

clusters/cl01tl/monitoring/grafana-operator/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     repository: https://grafana.github.io/helm-charts
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/grafana.png
 appVersion: v5.18.0

clusters/cl01tl/platform/authentik/Chart.yaml

@@ -29,7 +29,7 @@ dependencies:
     version: 1.20.1
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/authentik.png
 appVersion: 2025.4.1

clusters/cl01tl/platform/gitea/Chart.yaml

@@ -44,7 +44,7 @@ dependencies:
     version: 1.20.1
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/gitea.png
 appVersion: 1.23.7

clusters/cl01tl/platform/matrix-synapse/Chart.yaml

@@ -53,7 +53,7 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/matrix.png
 appVersion: 1.129.0

clusters/cl01tl/platform/n8n/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     version: 4.2.0
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/n8n.png
 appVersion: 1.93.0

clusters/cl01tl/platform/ollama/Chart.yaml

@@ -23,7 +23,7 @@ dependencies:
     version: 4.2.0
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ollama.png
 appVersion: 0.7.0

clusters/cl01tl/platform/stalwart/Chart.yaml

@@ -23,7 +23,7 @@ dependencies:
     repository: https://bjw-s-labs.github.io/helm-charts/
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/stalwart.png
 appVersion: v0.11.8

clusters/cl01tl/services/harbor/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     repository: https://helm.goharbor.io
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 5.1.0
+    version: 6.4.4
     repository: http://gitea-http.gitea:3000/api/packages/alexlebens/helm
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/harbor.png
 appVersion: v2.13.0

clusters/cl01tl/services/talos/templates/external-secret.yaml

@@ -49,28 +49,3 @@ spec:
         key: /cl01tl/talos/etcd-backup
         metadataPolicy: None
         property: AGE_X25519_PUBLIC_KEY
-
----
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: talos-etcd-defrag-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: talos-etcd-defrag-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-  annotations:
-    kubernetes.io/service-account.name: talos-defrag-secrets
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: config
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/talos/etcd-defrag
-        metadataPolicy: None
-        property: config

clusters/cl01tl/services/talos/templates/secret.yaml

@@ -9,3 +9,16 @@ metadata:
     app.kubernetes.io/part-of: {{ .Release.Name }}
   annotations:
     kubernetes.io/service-account.name: talos-backup-secrets
+
+---
+apiVersion: v1
+kind: Secret
+metadata:
+  name: talos-etcd-secrets
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: talos-etcd-secrets
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+  annotations:
+    kubernetes.io/service-account.name: talos-etcd-secrets

clusters/cl01tl/services/talos/templates/service-account.yaml

@@ -10,3 +10,17 @@ metadata:
 spec:
   roles:
     - os:etcd:backup
+
+---
+apiVersion: talos.dev/v1alpha1
+kind: ServiceAccount
+metadata:
+  name: talos-etcd-secrets
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: talos-etcd-secrets
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  roles:
+    - os:etcd:backup

clusters/cl01tl/services/talos/values.yaml

@@ -168,17 +168,27 @@ etcd-defrag:
       containers:
         main:
           image:
-            repository: ghcr.io/siderolabs/talosctl
-            tag: v1.10.4
+            repository: alpine
+            tag: 3.22.1
             pullPolicy: IfNotPresent
-          args:
-              - etcd
-              - defrag
-              - -n 10.232.1.13
-          env:
-            - name: TALOSCONFIG
-              value: /tmp/.talos/config
+          command:
+            - sh
+            - -c
+            - |
+              wget -O /usr/local/bin/talosctl https://github.com/siderolabs/talos/releases/download/v1.10.4/talosctl-linux-amd64
+              chmod +x /usr/local/bin/talosctl
+              while true; talosctl -n 10.232.1.11 version; do sleep 1; done
           workingDir: /tmp
+          securityContext:
+            runAsUser: 1000
+            runAsGroup: 1000
+            allowPrivilegeEscalation: false
+            runAsNonRoot: true
+            capabilities:
+              drop:
+                - ALL
+            seccompProfile:
+              type: RuntimeDefault
           resources:
             requests:
               cpu: 100m
@@ -195,11 +205,10 @@ etcd-defrag:
     secret:
       enabled: true
       type: secret
-      name: talos-etcd-defrag-secret
+      name: talos-etcd-secrets
       advancedMounts:
         defrag:
           main:
-            - path: /tmp/.talos/config
+            - path: /var/run/secrets/talos.dev
               readOnly: true
               mountPropagation: None
-              subPath: config