chore(deps): update cloudnative-pg

Reviewed-on: #5360

.gitea/workflows/renovate.yaml

@@ -13,7 +13,7 @@ on:
 jobs:
   renovate:
     runs-on: ubuntu-latest
-    container: ghcr.io/renovatebot/renovate:43.101.1@sha256:06c9297754f7d487adca6446b9970fecade3202190138259e7888c30ec8d4277
+    container: ghcr.io/renovatebot/renovate:43.102.8@sha256:e230599b399a3ed960987fe652550e39cd4f514dbe9a693839da1b99f049a0e1
     steps:
       - name: Checkout
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6

clusters/cl01tl/helm/actual/values.yaml

@@ -39,7 +39,6 @@ actual:
         http:
           port: 80
           targetPort: 5006
-          protocol: HTTP
   route:
     main:
       kind: HTTPRoute

clusters/cl01tl/helm/argo-workflows/Chart.lock

@@ -7,6 +7,6 @@ dependencies:
   version: 2.4.21
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.0
+  version: 7.11.1
-digest: sha256:b4a42201142f0a13d5c0b7c82be04bf8860b2a2b564cad8c48f1ea7995a01451
+digest: sha256:a249bd8faad886fa267cb42e843fd6465b3c4147961d182b73dd64ef9e6ca06e
-generated: "2026-03-30T19:14:56.324362875Z"
+generated: "2026-03-31T18:36:18.025982-05:00"

clusters/cl01tl/helm/argo-workflows/Chart.yaml

@@ -25,7 +25,7 @@ dependencies:
     repository: https://argoproj.github.io/argo-helm
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.0
+    version: 7.11.1
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 # renovate: datasource=github-releases depName=argoproj/argo-workflows

clusters/cl01tl/helm/audiobookshelf/values.yaml

@@ -49,11 +49,9 @@ audiobookshelf:
         http:
           port: 80
           targetPort: 80
-          protocol: HTTP
         apprise:
           port: 8000
           targetPort: 8000
-          protocol: HTTP
   serviceMonitor:
     main:
       selector:

clusters/cl01tl/helm/authentik/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 2.4.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.0
+  version: 7.11.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.0
+  version: 0.5.0
-digest: sha256:8e6edf9d2c94ec610ca8c3cd177d7a74b3e0d395c45f81ef6e36b9824bd1063a
+digest: sha256:4b90c5af4cc7f37b04284aafd75ddda1241c71acb726932e7e21520b5bf98543
-generated: "2026-03-30T19:15:11.378278697Z"
+generated: "2026-03-31T18:36:26.87524-05:00"

clusters/cl01tl/helm/authentik/Chart.yaml

@@ -25,11 +25,11 @@ dependencies:
     version: 2.4.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.0
+    version: 7.11.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
-    version: 0.4.0
+    version: 0.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/authentik.png
 # renovate: datasource=github-releases depName=goauthentik/authentik

clusters/cl01tl/helm/authentik/values.yaml

@@ -77,6 +77,10 @@ authentik:
       enabled: true
 postgres-18-cluster:
   mode: recovery
+  cluster:
+    resources:
+      requests:
+        memory: 150Mi
   recovery:
     method: objectStore
     objectStore:

clusters/cl01tl/helm/backrest/values.yaml

@@ -31,7 +31,6 @@ backrest:
         http:
           port: 80
           targetPort: 9898
-          protocol: TCP
   serviceMonitor:
     main:
       selector:

clusters/cl01tl/helm/bazarr/values.yaml

@@ -35,7 +35,6 @@ bazarr:
         http:
           port: 80
           targetPort: 6767
-          protocol: HTTP
   route:
     main:
       kind: HTTPRoute

clusters/cl01tl/helm/blocky/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.6.2
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.0
+  version: 0.5.0
-digest: sha256:a5b0099261d772b24a302a106d106cfa82ac07fa14564141e00cf107d708e859
+digest: sha256:49b0e666059bad492ebaa4a20119ce5bbd1959a1ee6b22b271a9ca9529122697
-generated: "2026-03-09T23:06:16.853255429Z"
+generated: "2026-03-31T18:37:20.549898-05:00"

clusters/cl01tl/helm/blocky/Chart.yaml

@@ -20,7 +20,7 @@ dependencies:
     version: 4.6.2
   - name: valkey
     alias: valkey
-    version: 0.4.0
+    version: 0.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/blocky.png
 # renovate: datasource=github-releases depName=0xerr0r/blocky

clusters/cl01tl/helm/blocky/values.yaml

@@ -144,6 +144,7 @@ blocky:
               objects                         IN      CNAME   traefik-cl01tl
               ollama                          IN      CNAME   traefik-cl01tl
               omni-tools                      IN      CNAME   traefik-cl01tl
+              paperless-ngx                   IN      CNAME   traefik-cl01tl
               photoview                       IN      CNAME   traefik-cl01tl
               plex                            IN      CNAME   traefik-cl01tl
               postiz                          IN      CNAME   traefik-cl01tl

clusters/cl01tl/helm/cloudnative-pg/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: cloudnative-pg
   repository: https://cloudnative-pg.io/charts/
-  version: 0.27.1
+  version: 0.28.0
 - name: plugin-barman-cloud
   repository: https://cloudnative-pg.io/charts/
   version: 0.5.0
-digest: sha256:e7089ffd089cae87529e28f0e71302b9fc4a869b389cbb6628f1c559644a3a10
+digest: sha256:3e9b26d00fdb61af60f003bcb327e05d02799eb6088e30aaabd01c49c6021aac
-generated: "2026-02-05T19:36:19.473447121Z"
+generated: "2026-04-01T20:05:40.198140255Z"

clusters/cl01tl/helm/cloudnative-pg/Chart.yaml

@@ -17,11 +17,11 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: cloudnative-pg
-    version: 0.27.1
+    version: 0.28.0
     repository: https://cloudnative-pg.io/charts/
   - name: plugin-barman-cloud
     version: 0.5.0
     repository: https://cloudnative-pg.io/charts/
 icon: https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg.github.io/refs/heads/main/assets/images/hero_image.png
 # renovate: datasource=github-releases depName=cloudnative-pg/cloudnative-pg
-appVersion: 1.28.1
+appVersion: 1.29.0

clusters/cl01tl/helm/code-server/values.yaml

@@ -12,7 +12,7 @@ code-server:
         main:
           image:
             repository: ghcr.io/linuxserver/code-server
-            tag: 4.112.0@sha256:4bb5b8ad22268001687c047f0f04933799fb03df1eb0e1e266ba15ed2d9f4e8b
+            tag: 4.112.0-ls325@sha256:a17ee95f4e1b43284fe5dfea99e82c8a26f096534215ff36817fa80161eec220
           env:
             - name: TZ
               value: America/Chicago
@@ -36,7 +36,6 @@ code-server:
         http:
           port: 8443
           targetPort: 8443
-          protocol: HTTP
   route:
     main:
       kind: HTTPRoute

clusters/cl01tl/helm/dawarich/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.0
+  version: 7.11.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.0
+  version: 0.5.0
-digest: sha256:7c23617fd0a7631f3607e3fd4c128da115fb8fc928beed32705cacf17144de6b
+digest: sha256:1f513bd53430dd0fbba301ab5577aca85e984394dfdca9f615aae944a09c6bc0
-generated: "2026-03-30T19:15:23.657391248Z"
+generated: "2026-03-31T18:37:35.858603-05:00"

clusters/cl01tl/helm/dawarich/Chart.yaml

@@ -21,11 +21,11 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.0
+    version: 7.11.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
-    version: 0.4.0
+    version: 0.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/dawarich.png
 # renovate: datasource=github-releases depName=Freika/dawarich

clusters/cl01tl/helm/dawarich/values.yaml

@@ -211,11 +211,9 @@ dawarich:
         http:
           port: 80
           targetPort: 3000
-          protocol: TCP
         metrics:
           port: 9394
           targetPort: 9394
-          protocol: TCP
   serviceMonitor:
     main:
       selector:

clusters/cl01tl/helm/democratic-csi-synology-iscsi/values.yaml

@@ -1,5 +1,8 @@
 democratic-csi:
   driver:
+    image:
+      registry: ghcr.io/democratic-csi/democratic-csi
+      tag: v1.9.5@@sha256:fc3b7d7ed3a616714139525075312758e23a5d425ffb539ad12c9bd20fb6001f
     existingConfigSecret: synology-iscsi-config-secret
     config:
       driver: synology-iscsi
@@ -10,7 +13,23 @@ democratic-csi:
   csiDriver:
     name: "org.democratic-csi.iscsi-synology"
   controller:
-    replicaCount: 2
+    replicaCount: 3
+    externalAttacher:
+      image:
+        registry: registry.k8s.io/sig-storage/csi-attacher
+        tag: v4.11.0@sha256:b74b05b39501565022883fc128002b4cb857a7bb6c858606bcb3fdedba0b0b80
+    externalProvisioner:
+      image:
+        registry: registry.k8s.io/sig-storage/csi-provisioner
+        tag: v3.6.4@sha256:e7ad666f1d9b0caa077c7f0c157c9f87d1e73858390732496f66dcc716ff10c5
+    externalResizer:
+      image:
+        registry: registry.k8s.io/sig-storage/csi-resizer
+        tag: v1.9.4@sha256:522911ef68bd2c5c17d90fb2a6d2b2fb72ae790f2c1463a466b4262a07fdbf5a
+    externalSnapshotter:
+      image:
+        registry: registry.k8s.io/sig-storage/csi-snapshotter
+        tag: v8.5.0@sha256:da081c27e8a6d91f36042c1942362d0515ced8d06e18c11b8f893e58c4d6d797
   storageClasses:
     - name: synology-iscsi-delete
       defaultClass: false
@@ -36,3 +55,7 @@ democratic-csi:
           value: /usr/local/sbin/iscsiadm
       iscsiDirHostPath: /var/iscsi
       iscsiDirHostPathType: ""
+  driverRegistrar:
+    image:
+      registry: registry.k8s.io/sig-storage/csi-node-driver-registrar
+      tag: v2.16.0@sha256:ab482308a4921e28a6df09a16ab99a457e9af9641ff44fb1be1a690d07ce8b70

clusters/cl01tl/helm/directus/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.0
+  version: 7.11.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.0
+  version: 0.5.0
-digest: sha256:20d73512e2e48dd1334eb08606e77f95a95bfdda88a648587d16f06a23afc445
+digest: sha256:116183cdff428293215553b7e60be9aefafbbaaaf64c01f1fc974badd3e0754b
-generated: "2026-03-30T19:15:37.186213823Z"
+generated: "2026-03-31T18:37:42.414041-05:00"

clusters/cl01tl/helm/directus/Chart.yaml

@@ -21,12 +21,12 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.0
+    version: 7.11.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
-    version: 0.4.0
+    version: 0.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/directus.png
 # renovate: datasource=github-releases depName=directus/directus
-appVersion: 11.17.0
+appVersion: 11.17.1

clusters/cl01tl/helm/directus/values.yaml

@@ -151,7 +151,6 @@ directus:
         http:
           port: 80
           targetPort: 8055
-          protocol: TCP
   serviceMonitor:
     main:
       selector:
@@ -212,3 +211,7 @@ valkey:
       aclUsers:
         default:
           permissions: "~* &* +@all"
+    # No option to configure metrics when auth is enabled
+    # https://github.com/valkey-io/valkey-helm/issues/135
+    metrics:
+      enabled: false

clusters/cl01tl/helm/excalidraw/values.yaml

@@ -25,7 +25,6 @@ excalidraw:
         http:
           port: 80
           targetPort: 80
-          protocol: HTTP
   route:
     main:
       kind: HTTPRoute

clusters/cl01tl/helm/foldergram/values.yaml

@@ -36,7 +36,6 @@ foldergram:
         http:
           port: 80
           targetPort: 4141
-          protocol: HTTP
   route:
     main:
       kind: HTTPRoute

clusters/cl01tl/helm/freshrss/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 2.4.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.0
+  version: 7.11.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:6eb8bdcddec62b07988c0815a011f46926125ef84bcde5284239b379cec84b24
+digest: sha256:ebf08159809ef0d69fcb8742b47245c82994b528c2f58e5ed40293555e085ecd
-generated: "2026-03-30T19:15:51.864495531Z"
+generated: "2026-03-31T18:37:59.187695-05:00"

clusters/cl01tl/helm/freshrss/Chart.yaml

@@ -25,7 +25,7 @@ dependencies:
     version: 2.4.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.0
+    version: 7.11.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data

clusters/cl01tl/helm/freshrss/values.yaml

@@ -87,7 +87,6 @@ freshrss:
         http:
           port: 80
           targetPort: 80
-          protocol: HTTP
   persistence:
     data:
       forceRename: freshrss-data

clusters/cl01tl/helm/garage/values.yaml

@@ -212,19 +212,15 @@ garage:
         s3:
           port: 3900
           targetPort: 3900
-          protocol: HTTP
         rpc:
           port: 3901
           targetPort: 3901
-          protocol: HTTP
         web:
           port: 3902
           targetPort: 3902
-          protocol: HTTP
         admin:
           port: 3903
           targetPort: 3903
-          protocol: HTTP
     server-2:
       forceRename: garage-2
       controller: server-2
@@ -232,19 +228,15 @@ garage:
         s3:
           port: 3900
           targetPort: 3900
-          protocol: HTTP
         rpc:
           port: 3901
           targetPort: 3901
-          protocol: HTTP
         web:
           port: 3902
           targetPort: 3902
-          protocol: HTTP
         admin:
           port: 3903
           targetPort: 3903
-          protocol: HTTP
     server-3:
       forceRename: garage-3
       controller: server-3
@@ -252,26 +244,21 @@ garage:
         s3:
           port: 3900
           targetPort: 3900
-          protocol: HTTP
         rpc:
           port: 3901
           targetPort: 3901
-          protocol: HTTP
         web:
           port: 3902
           targetPort: 3902
-          protocol: HTTP
         admin:
           port: 3903
           targetPort: 3903
-          protocol: HTTP
     webui:
       controller: webui
       ports:
         webui:
           port: 3909
           targetPort: 3909
-          protocol: HTTP
   serviceMonitor:
     main:
       selector:

clusters/cl01tl/helm/gatus/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 1.5.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.0
+  version: 7.11.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:3e83f3453816adc3beea6e5388e6d73028bfb609b353ac8a2d85743d531e5a59
+digest: sha256:1f530794c6d9c4a487d30443dce7ddf556524c7f875c6e5249b135e81528f0c5
-generated: "2026-03-30T19:16:03.513126054Z"
+generated: "2026-03-31T19:06:30.871275-05:00"

clusters/cl01tl/helm/gatus/Chart.yaml

@@ -20,7 +20,7 @@ dependencies:
     version: 1.5.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.0
+    version: 7.11.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data

clusters/cl01tl/helm/gatus/values.yaml

@@ -164,15 +164,15 @@ gatus:
       - name: roundcube
         url: https://mail.alexlebens.net
         <<: *defaults
+      - name: paperless-ngx
+        url: https://paperless-ngx.alexlebens.net
+        <<: *defaults
       - name: kiwix
         url: https://kiwix.alexlebens.net
         <<: *defaults
       - name: excalidraw
         url: https://excalidraw.alexlebens.net
         <<: *defaults
-      - name: languagetool
-        url: https://languagetool.alexlebens.net
-        <<: *defaults
       - name: gitea
         url: https://gitea.alexlebens.net
         <<: *defaults

clusters/cl01tl/helm/generic-device-plugin/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: generic-device-plugin
   repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-  version: 0.20.26
+  version: 0.20.27
-digest: sha256:47d12b7555d345dea0438d13ac538896994dbd44b142b9a546dbfe5c0939a92b
+digest: sha256:b66a7ab013f5eda47ccf94824796e026642e1abfc051e498957ee0f59743e9fc
-generated: "2026-03-24T16:59:26.537547513Z"
+generated: "2026-03-31T21:37:08.823163353Z"

clusters/cl01tl/helm/generic-device-plugin/Chart.yaml

@@ -14,6 +14,6 @@ maintainers:
 dependencies:
   - name: generic-device-plugin
     repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-    version: 0.20.26
+    version: 0.20.27
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 appVersion: 1.0.0

clusters/cl01tl/helm/gitea/Chart.lock

@@ -13,15 +13,15 @@ dependencies:
   version: 2.4.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.0
+  version: 7.10.0
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.0
+  version: 0.5.0
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.0
+  version: 0.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:ffbcf99c04907d73f20ce6ede318169989361712b8da1122cc2de699575d7fc3
+digest: sha256:bbc7c8c9da52c79c8b8cfe93ec75a1df75fd2985e82417e61eae6ba11da52a89
-generated: "2026-03-30T19:16:17.580813203Z"
+generated: "2026-03-31T18:38:06.461077-05:00"

clusters/cl01tl/helm/gitea/Chart.yaml

@@ -39,15 +39,15 @@ dependencies:
     version: 2.4.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.0
+    version: 7.10.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey-gitea
-    version: 0.4.0
+    version: 0.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey-renovate
-    version: 0.4.0
+    version: 0.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-storage

clusters/cl01tl/helm/gitea/values.yaml

@@ -201,7 +201,7 @@ postgres-18-cluster:
     resources:
       requests:
         cpu: 100m
-        memory: 100Mi
+        memory: 150Mi
   recovery:
     method: objectStore
     objectStore:
@@ -224,7 +224,7 @@ valkey-gitea:
     resources:
       requests:
         cpu: 20m
-        memory: 2Gi
+        memory: 1Gi
     dataStorage:
       requestedSize: 10Gi
     replica:

clusters/cl01tl/helm/grafana-operator/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 5.22.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.0
+  version: 7.11.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.0
+  version: 0.5.0
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.0
+  version: 0.5.0
-digest: sha256:cc47fe852f6afa3b87283ee845b9eae624756552df55d4902837de0004fd1fb8
+digest: sha256:1f6bf4f0f24f85d8c362766010e4f42d26458c0412b67afab9b05f2e17eacced
-generated: "2026-03-30T19:16:39.390025102Z"
+generated: "2026-03-31T19:12:08.326471-05:00"

clusters/cl01tl/helm/grafana-operator/Chart.yaml

@@ -20,15 +20,15 @@ dependencies:
     repository: https://grafana.github.io/helm-charts
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.0
+    version: 7.11.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey-unified-alerting
-    version: 0.4.0
+    version: 0.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey-remote-cache
-    version: 0.4.0
+    version: 0.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/grafana.png
 # renovate: datasource=github-releases depName=grafana/grafana-operator

clusters/cl01tl/helm/grafana-operator/values.yaml

@@ -1,4 +1,9 @@
 grafana-operator:
+  image:
+    registry: ghcr.io
+    repository: grafana/grafana-operator
+    # renovate: datasource=docker depName=ghcr.io/grafana/grafana-operator
+    tag: v5.22.2@sha256:d45fc24e8f43d83286d81625ee8d919d0fc88255a6500b63f68d7966a4f9e9af
   replicas: 2
   resources:
     requests:

clusters/cl01tl/helm/grimmory/values.yaml

@@ -44,7 +44,6 @@ grimmory:
         http:
           port: 80
           targetPort: 6060
-          protocol: HTTP
   route:
     main:
       kind: HTTPRoute

clusters/cl01tl/helm/harbor/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 1.18.3
 - name: postgres-cluster
   repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
-  version: 7.11.0
+  version: 7.11.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.0
+  version: 0.5.0
-digest: sha256:15976af2c027ed2c4121e551fc26c300f7d11ffff7bae09cd0e3e814ce050f82
+digest: sha256:fb17e2bad9c3a303da2b9d65ee5bd082a58ca6a5cee17d337e2536747982aa2c
-generated: "2026-03-30T19:16:52.623730222Z"
+generated: "2026-03-31T18:38:15.510833-05:00"

clusters/cl01tl/helm/harbor/Chart.yaml

@@ -20,11 +20,11 @@ dependencies:
     repository: https://helm.goharbor.io
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.0
+    version: 7.11.1
     repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
   - name: valkey
     alias: valkey
-    version: 0.4.0
+    version: 0.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/harbor.png
 # renovate: datasource=github-releases depName=goharbor/harbor

clusters/cl01tl/helm/harbor/values.yaml

@@ -111,3 +111,8 @@ postgres-18-cluster:
         immediate: true
         schedule: "0 35 14 * * *"
         backupName: garage-local
+valkey:
+  valkey:
+    resources:
+      requests:
+        memory: 30Mi

clusters/cl01tl/helm/home-assistant/values.yaml

@@ -23,7 +23,7 @@ home-assistant:
         code-server:
           image:
             repository: ghcr.io/linuxserver/code-server
-            tag: 4.112.0@sha256:4bb5b8ad22268001687c047f0f04933799fb03df1eb0e1e266ba15ed2d9f4e8b
+            tag: 4.112.0-ls325@sha256:a17ee95f4e1b43284fe5dfea99e82c8a26f096534215ff36817fa80161eec220
           env:
             - name: TZ
               value: America/Chicago
@@ -43,14 +43,12 @@ home-assistant:
         http:
           port: 80
           targetPort: 8123
-          protocol: TCP
     code-server:
       controller: main
       ports:
         http:
           port: 8443
           targetPort: 8443
-          protocol: HTTP
   serviceMonitor:
     main:
       selector:
@@ -119,8 +117,6 @@ home-assistant:
 volsync-target-config:
   pvcTarget: home-assistant-config
   moverSecurityContext:
-    runAsUser: 1000
-    runAsGroup: 1000
     fsGroup: 1000
     fsGroupChangePolicy: OnRootMismatch
   local:

clusters/cl01tl/helm/homepage/Chart.yaml

@@ -5,7 +5,7 @@ description: Homepage
 keywords:
   - homepage
   - dashboard
-home: https://wiki.alexlebens.dev/s/a5fabd91-3d89-4e2b-9417-06111aedaeaa
+home: https://docs.alexlebens.dev/applications/homepage/
 sources:
   - https://github.com/gethomepage/homepage
   - https://github.com/gethomepage/homepage/pkgs/container/homepage
@@ -19,4 +19,4 @@ dependencies:
     version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/homepage.png
 # renovate: datasource=github-releases depName=gethomepage/homepage
-appVersion: v1.12.1
+appVersion: v1.12.2

clusters/cl01tl/helm/homepage/templates/external-secret.yaml

@@ -14,120 +14,69 @@ spec:
   data:
     - secretKey: HOMEPAGE_VAR_GITEA_API_TOKEN
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cl01tl/gitea/auth/homepage
-        metadataPolicy: None
         property: token
     - secretKey: HOMEPAGE_VAR_ARGOCD_API_TOKEN
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cl01tl/argocd/credentials/homepage
-        metadataPolicy: None
         property: token
     - secretKey: HOMEPAGE_VAR_KOMODO_API_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cl01tl/komodo/homepage
-        metadataPolicy: None
         property: key
     - secretKey: HOMEPAGE_VAR_KOMODO_API_SECRET
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cl01tl/komodo/homepage
-        metadataPolicy: None
         property: secret
     - secretKey: HOMEPAGE_VAR_JELLYSTAT_API_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cl01tl/jellystat/homepage
-        metadataPolicy: None
         property: key
     - secretKey: HOMEPAGE_VAR_SYNOLOGY_USER
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /synology/auth/cl01tl
-        metadataPolicy: None
         property: user
     - secretKey: HOMEPAGE_VAR_SYNOLOGY_PASSWORD
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /synology/auth/cl01tl
-        metadataPolicy: None
         property: password
     - secretKey: HOMEPAGE_VAR_UNIFI_API_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /unifi/auth/cl01tl
-        metadataPolicy: None
         property: api-key
     - secretKey: HOMEPAGE_VAR_SONARR_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cl01tl/sonarr4/key
-        metadataPolicy: None
         property: key
     - secretKey: HOMEPAGE_VAR_SONARR4K_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cl01tl/sonarr4-4k/key
-        metadataPolicy: None
         property: key
     - secretKey: HOMEPAGE_VAR_SONARRANIME_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cl01tl/sonarr4-anime/key
-        metadataPolicy: None
         property: key
     - secretKey: HOMEPAGE_VAR_RADARR_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cl01tl/radarr5/key
-        metadataPolicy: None
         property: key
     - secretKey: HOMEPAGE_VAR_RADARR4K_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cl01tl/radarr5-4k/key
-        metadataPolicy: None
         property: key
     - secretKey: HOMEPAGE_VAR_RADARRANIME_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cl01tl/radarr5-anime/key
-        metadataPolicy: None
         property: key
     - secretKey: HOMEPAGE_VAR_RADARRSTANDUP_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cl01tl/radarr5-standup/key
-        metadataPolicy: None
         property: key
     - secretKey: HOMEPAGE_VAR_LIDARR_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cl01tl/lidarr2/key
-        metadataPolicy: None
         property: key
     - secretKey: HOMEPAGE_VAR_PROWLARR_KEY
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cl01tl/prowlarr/key
-        metadataPolicy: None
         property: key

clusters/cl01tl/helm/homepage/values.yaml

@@ -5,7 +5,7 @@ homepage:
     main:
       type: deployment
       replicas: 1
-      strategy: RollingUpdate
+      strategy: Recreate
       annotations:
         reloader.stakater.com/auto: "true"
       serviceAccount:
@@ -16,8 +16,7 @@ homepage:
         main:
           image:
             repository: ghcr.io/gethomepage/homepage
-            tag: v1.12.1
+            tag: v1.12.3@sha256:cc84f2f5eb3c7734353701ccbaa24ed02dacb0d119114e50e4251e2005f3990a
-            pullPolicy: IfNotPresent
           env:
             - name: HOMEPAGE_ALLOWED_HOSTS
               value: home.alexlebens.net
@@ -26,8 +25,8 @@ homepage:
                 name: homepage-keys-secret
           resources:
             requests:
-              cpu: 10m
+              cpu: 1m
-              memory: 256Mi
+              memory: 128Mi
   serviceAccount:
     homepage:
       enabled: true
@@ -57,7 +56,7 @@ homepage:
             - Media:
                 tab: Applications
                 icon: mdi-multimedia-#ffffff
-            - Public:
+            - External:
                 tab: Applications
                 icon: mdi-earth-#ffffff
             - Internal:
@@ -189,7 +188,7 @@ homepage:
                   siteMonitor: http://photoview.photoview:80
                   statusStyle: dot
               - Pictures:
-                  icon: https://raw.githubusercontent.com/foldergram/foldergram/refs/heads/main/client/public/icon-512.png
+                  icon: sh-foldergram.webp
                   description: Foldergram
                   href: https://foldergram.alexlebens.net
                   siteMonitor: http://foldergram.foldergram:80
@@ -200,7 +199,7 @@ homepage:
                   href: https://grimmory.alexlebens.net
                   siteMonitor: http://grimmory.grimmory:80
                   statusStyle: dot
-          - Public:
+          - External:
               - Site:
                   icon: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/logo-new-round.png
                   description: Profile Website
@@ -304,6 +303,12 @@ homepage:
                   href: https://mail.alexlebens.net
                   siteMonitor: http://roundcube.roundcube:80
                   statusStyle: dot
+              - Documents:
+                  icon: sh-paperless-ngx.webp
+                  description: Paperless-ngx
+                  href: https://paperless-ngx.alexlebens.net
+                  siteMonitor: http://paperless-ngx.paperless-ngx:80
+                  statusStyle: dot
               - Wiki:
                   icon: sh-kiwix-light.webp
                   description: Kiwix
@@ -317,7 +322,7 @@ homepage:
                   siteMonitor: http://excalidraw.excalidraw:80
                   statusStyle: dot
           - Code:
-              - Code (Public):
+              - Code (External):
                   icon: sh-gitea.webp
                   description: Gitea
                   href: https://gitea.alexlebens.dev
@@ -339,13 +344,13 @@ homepage:
                   href: https://gitea.alexlebens.net
                   siteMonitor: https://gitea.alexlebens.net
                   statusStyle: dot
-              - Code (ps10rp):
+              - Code (Remote):
                   icon: sh-gitea.webp
                   description: Gitea
                   href: https://gitea-ps10rp.boreal-beaufort.ts.net
                   siteMonitor: https://gitea-ps10rp.boreal-beaufort.ts.net
                   statusStyle: dot
-              - IDE (Public):
+              - IDE (External):
                   icon: sh-visual-studio-code.webp
                   description: VS Code
                   href: https://codeserver.alexlebens.dev
@@ -463,25 +468,31 @@ homepage:
                         query: prometheus_tsdb_storage_blocks_bytes
                         format:
                           type: bytes
-              - Jellystat:
+              - Jellyfin Monitor:
                   icon: sh-jellystat.webp
-                  description: Jellyfin Monitoring
+                  description: Jellystat
                   href: https://jellystat.alexlebens.net
                   siteMonitor: http://jellystat.jellystat:80
                   statusStyle: dot
-              - MediaLyze:
+              - Media Library Statistics:
                   icon: https://raw.githubusercontent.com/frederikemmer/MediaLyze/d8f69c0628bac7c047b90f91a66341648029c273/frontend/public/favicon.svg
-                  description: Jellyfin Media Monitoring
+                  description: MediaLyze
                   href: https://medialyze.alexlebens.net
                   siteMonitor: http://medialyze.medialyze:80
                   statusStyle: dot
           - Services:
-              - Auth (Public):
+              - Auth (External):
                   icon: sh-authentik.webp
                   description: Authentik
                   href: https://auth.alexlebens.dev
                   siteMonitor: https://auth.alexlebens.dev
                   statusStyle: dot
+                  namespace: authentik
+                  app: authentik
+                  podSelector: >-
+                      app.kubernetes.io/instance in (
+                          authentik
+                      )
               - Auth (Local):
                   icon: sh-authentik.webp
                   description: Authentik
@@ -494,18 +505,36 @@ homepage:
                   href: https://stalwart.alexlebens.net
                   siteMonitor: http://stalwart.stalwart:80
                   statusStyle: dot
+                  namespace: stalwart
+                  app: stalwart
+                  podSelector: >-
+                      app.kubernetes.io/instance in (
+                          stalwart
+                      )
               - Notifications:
                   icon: sh-ntfy.webp
                   description: ntfy
                   href: https://ntfy.alexlebens.net
                   siteMonitor: http://ntfy.ntfy:80
                   statusStyle: dot
+                  namespace: ntfy
+                  app: ntfy
+                  podSelector: >-
+                      app.kubernetes.io/instance in (
+                          ntfy
+                      )
               - Reverse Proxy:
                   icon: sh-traefik.webp
                   description: Traefik
                   href: https://traefik-cl01tl.alexlebens.net/dashboard/#/
                   siteMonitor: https://traefik-cl01tl.alexlebens.net/dashboard/#/
                   statusStyle: dot
+                  namespace: traefik
+                  app: traefik
+                  podSelector: >-
+                      app.kubernetes.io/name in (
+                          traefik
+                      )
                   widget:
                     type: traefik
                     url: https://traefik-cl01tl.alexlebens.net
@@ -515,8 +544,14 @@ homepage:
                   href: https://harbor.alexlebens.net
                   siteMonitor: http://harbor-portal.harbor:80
                   statusStyle: dot
+                  namespace: harbor
+                  app: harbor
+                  podSelector: >-
+                      app.kubernetes.io/instance in (
+                          harbor
+                      )
           - Hardware:
-              - Network Management (alexlebens.net):
+              - Network Management (Local):
                   icon: sh-ubiquiti-unifi.webp
                   description: Unifi
                   href: https://unifi.alexlebens.net
@@ -569,13 +604,22 @@ homepage:
                   href: https://ceph.alexlebens.net
                   siteMonitor: http://rook-ceph-mgr-dashboard.rook-ceph:7000
                   statusStyle: dot
-              - Object Storage (NAS):
+                  namespace: rook-ceph
+                  app: rook-ceph
+                  podSelector: ""
+              - Object Storage (Local):
                   icon: sh-garage.webp
                   description: Garage
                   href: https://garage-webui.alexlebens.net
                   siteMonitor: http://garage-webui.garage:3909
                   statusStyle: dot
-              - Object Storage (ps10rp):
+                  namespace: garage
+                  app: garage
+                  podSelector: >-
+                      app.kubernetes.io/instance in (
+                          garage
+                      )
+              - Object Storage (Remote):
                   icon: sh-garage.webp
                   description: Garage
                   href: https://garage-ui-ps10rp.boreal-beaufort.ts.net
@@ -593,12 +637,24 @@ homepage:
                   href: https://vault.alexlebens.net
                   siteMonitor: http://vault.vault:8200
                   statusStyle: dot
+                  namespace: vault
+                  app: vault
+                  podSelector: >-
+                      app.kubernetes.io/instance in (
+                          vault
+                      )
               - Backups:
                   icon: sh-backrest-light.webp
                   description: Backrest
                   href: https://backrest.alexlebens.net
                   siteMonitor: http://backrest.backrest:80
                   statusStyle: dot
+                  namespace: backrest
+                  app: backrest
+                  podSelector: >-
+                      app.kubernetes.io/instance in (
+                          backrest
+                      )
                   widget:
                       type: backrest
                       url: http://backrest.backrest:80
@@ -609,6 +665,12 @@ homepage:
                   href: https://qui.alexlebens.net
                   siteMonitor: http://qbittorrent-qui.qbittorrent:80
                   statusStyle: dot
+                  namespace: qbittorrent
+                  app: qbittorrent
+                  podSelector: >-
+                      app.kubernetes.io/instance in (
+                          qbittorrent
+                      )
                   widget:
                     type: qbittorrent
                     url: http://qbittorrent.qbittorrent:8080
@@ -637,6 +699,12 @@ homepage:
                   href: https://tdarr.alexlebens.net
                   siteMonitor: http://tdarr-web.tdarr:8265
                   statusStyle: dot
+                  namespace: tdarr
+                  app: tdarr
+                  podSelector: >-
+                      app.kubernetes.io/instance in (
+                          tdarr
+                      )
                   widget:
                     type: tdarr
                     url: http://tdarr-web.tdarr:8265
@@ -647,6 +715,12 @@ homepage:
                   href: https://sonarr.alexlebens.net
                   siteMonitor: http://sonarr.sonarr:80
                   statusStyle: dot
+                  namespace: sonarr
+                  app: sonarr
+                  podSelector: >-
+                      app.kubernetes.io/instance in (
+                          sonarr
+                      )
                   widget:
                     type: sonarr
                     url: http://sonarr.sonarr:80
@@ -659,6 +733,12 @@ homepage:
                   href: https://sonarr-4k.alexlebens.net
                   siteMonitor: http://sonarr-4k.sonarr-4k:80
                   statusStyle: dot
+                  namespace: sonarr-4k
+                  app: sonarr-4k
+                  podSelector: >-
+                      app.kubernetes.io/instance in (
+                          sonarr-4k
+                      )
                   widget:
                     type: sonarr
                     url: http://sonarr-4k.sonarr-4k:80
@@ -671,6 +751,12 @@ homepage:
                   href: https://sonarr-anime.alexlebens.net
                   siteMonitor: http://sonarr-anime.sonarr-anime:80
                   statusStyle: dot
+                  namespace: sonarr-anime
+                  app: sonarr-anime
+                  podSelector: >-
+                      app.kubernetes.io/instance in (
+                          sonarr-anime
+                      )
                   widget:
                     type: sonarr
                     url: http://sonarr-anime.sonarr-anime:80
@@ -684,6 +770,12 @@ homepage:
                   href: https://radarr.alexlebens.net
                   siteMonitor: http://radarr.radarr:80
                   statusStyle: dot
+                  namespace: radarr
+                  app: radarr
+                  podSelector: >-
+                      app.kubernetes.io/instance in (
+                          radarr
+                      )
                   widget:
                     type: radarr
                     url: http://radarr.radarr:80
@@ -696,6 +788,12 @@ homepage:
                   href: https://radarr-4k.alexlebens.net
                   siteMonitor: http://radarr-4k.radarr-4k:80
                   statusStyle: dot
+                  namespace: radarr-4k
+                  app: radarr-4k
+                  podSelector: >-
+                      app.kubernetes.io/instance in (
+                          radarr-4k
+                      )
                   widget:
                     type: radarr
                     url: http://radarr-4k.radarr-4k:80
@@ -708,6 +806,12 @@ homepage:
                   href: https://radarr-anime.alexlebens.net
                   siteMonitor: http://radarr-anime.radarr-anime:80
                   statusStyle: dot
+                  namespace: radarr-anime
+                  app: radarr-anime
+                  podSelector: >-
+                      app.kubernetes.io/instance in (
+                          radarr-anime
+                      )
                   widget:
                     type: radarr
                     url: http://radarr-anime.radarr-anime:80
@@ -720,6 +824,12 @@ homepage:
                   href: https://radarr-standup.alexlebens.net
                   siteMonitor: http://radarr-standup.radarr-standup:80
                   statusStyle: dot
+                  namespace: radarr-standup
+                  app: radarr-standup
+                  podSelector: >-
+                      app.kubernetes.io/instance in (
+                          radarr-standup
+                      )
                   widget:
                     type: radarr
                     url: http://radarr-standup.radarr-standup:80
@@ -733,6 +843,12 @@ homepage:
                   href: https://lidarr.alexlebens.net
                   siteMonitor: http://lidarr.lidarr:80
                   statusStyle: dot
+                  namespace: lidarr
+                  app: lidarr
+                  podSelector: >-
+                      app.kubernetes.io/instance in (
+                          lidarr
+                      )
                   widget:
                     type: lidarr
                     url: http://lidarr.lidarr:80
@@ -756,6 +872,12 @@ homepage:
                   href: https://slskd.alexlebens.net
                   siteMonitor: http://slskd.slskd:5030
                   statusStyle: dot
+                  namespace: slskd
+                  app: slskd
+                  podSelector: >-
+                      app.kubernetes.io/instance in (
+                          slskd
+                      )
           - Books:
               - Shelfmark:
                   icon: sh-shelfmark.webp
@@ -822,7 +944,6 @@ homepage:
         http:
           port: 80
           targetPort: 3000
-          protocol: HTTP
   route:
     main:
       kind: HTTPRoute
@@ -835,11 +956,8 @@ homepage:
         - home.alexlebens.net
       rules:
         - backendRefs:
-            - group: ''
+            - name: homepage
-              kind: Service
-              name: homepage
               port: 80
-              weight: 100
           matches:
             - path:
                 type: PathPrefix

clusters/cl01tl/helm/houndarr/Chart.yaml

@@ -22,4 +22,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://raw.githubusercontent.com/av1155/houndarr/main/src/houndarr/static/img/houndarr-logo-dark.png
 # renovate: datasource=github-releases depName=av1155/houndarr
-appVersion: v1.6.3
+appVersion: v1.6.4

clusters/cl01tl/helm/houndarr/values.yaml

@@ -9,7 +9,7 @@ houndarr:
         main:
           image:
             repository: ghcr.io/av1155/houndarr
-            tag: v1.6.3
+            tag: v1.6.5
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/immich/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.0
+  version: 7.10.0
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.4.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:db3281f7b20adee73a623b5c9696a07e444ec64655147848efcd5d6c1770fb80
+digest: sha256:b79ea8c506f0172deed820247a33c79329f34426435c8b5eb27b206ac8831b13
-generated: "2026-03-30T19:17:07.528879591Z"
+generated: "2026-03-15T20:06:27.091094433Z"

clusters/cl01tl/helm/immich/Chart.yaml

@@ -20,7 +20,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.0
+    version: 7.10.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey

clusters/cl01tl/helm/jellyfin/Chart.yaml

@@ -33,4 +33,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/jellyfin.png
 # renovate: datasource=github-releases depName=jellyfin/jellyfin
-appVersion: 10.11.6
+appVersion: 10.11.7

clusters/cl01tl/helm/jellyfin/values.yaml

@@ -9,7 +9,7 @@ jellyfin:
         main:
           image:
             repository: ghcr.io/jellyfin/jellyfin
-            tag: 10.11.6
+            tag: 10.11.7
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/jellystat/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.0
+  version: 7.10.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:b884d01180d1f2748342568ce6f30bd2ad05ca01479672ffcb72477d60f32d4a
+digest: sha256:f779185ce82045b47fc75bf95c4a8215acbd387f44a4bdb764486406d9b03748
-generated: "2026-03-30T19:17:19.650147764Z"
+generated: "2026-03-15T20:06:38.720993367Z"

clusters/cl01tl/helm/jellystat/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.0
+    version: 7.10.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data

clusters/cl01tl/helm/komodo/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.0
+  version: 7.10.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:821aa66f21af6d9b819e6d8c95c145b0e2a359c98182240ca80310b14836a896
+digest: sha256:c1bbed66c94b64ba44ef1caadf74d46d9bce551e37b62b1cd0a3af9b81046251
-generated: "2026-03-30T19:17:31.95874206Z"
+generated: "2026-03-24T14:00:56.813765-05:00"

clusters/cl01tl/helm/komodo/Chart.yaml

@@ -23,7 +23,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgresql-17-fdb-cluster
-    version: 7.11.0
+    version: 7.10.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-keys

clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: kube-prometheus-stack
   repository: oci://ghcr.io/prometheus-community/charts
-  version: 82.15.1
+  version: 82.16.0
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
   version: 4.6.2
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.4.0
-digest: sha256:7be2f0d61a12e674af175046960df7ba06a7248dc92db0b2d9c9b63a77a5bc17
+digest: sha256:a7086a19bfa46989e0db1d4c99b0ffa11f63115f41d60259f4467cc5dcf9bcaa
-generated: "2026-03-28T01:54:34.406941487Z"
+generated: "2026-03-31T16:04:22.10025203Z"

clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml

@@ -20,7 +20,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: kube-prometheus-stack
-    version: 82.15.1
+    version: 82.16.0
     repository: oci://ghcr.io/prometheus-community/charts
   - name: app-template
     alias: ntfy-alertmanager

clusters/cl01tl/helm/kube-prometheus-stack/values.yaml

@@ -148,7 +148,7 @@ ntfy-alertmanager:
         main:
           image:
             repository: xenrox/ntfy-alertmanager
-            tag: 0.5.0
+            tag: 1.0.0
             pullPolicy: IfNotPresent
   service:
     main:

clusters/cl01tl/helm/lidarr/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.0
+  version: 7.10.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:a28cca5e20262e1fed431b6cd4e9128a5464740921484437462813dd534d95a4
+digest: sha256:0f1a2923a7042b364a817edc64729d5e1c18b0552555c035d974de626f372692
-generated: "2026-03-30T19:17:48.162463807Z"
+generated: "2026-03-15T20:07:00.750754951Z"

clusters/cl01tl/helm/lidarr/Chart.yaml

@@ -24,7 +24,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.0
+    version: 7.10.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/matrix-synapse/Chart.lock

@@ -19,7 +19,7 @@ dependencies:
   version: 2.4.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.0
+  version: 7.10.0
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.4.0
@@ -38,5 +38,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:e50cdb12af390827f31421d2167e957c20128681dd9753c4e894db93f59bb103
+digest: sha256:8fb2d00605ade15db97e778f47ecc1ffae3705ce3408a17e0a21f7def65de884
-generated: "2026-03-30T19:18:02.602410242Z"
+generated: "2026-03-24T16:59:56.540825394Z"

clusters/cl01tl/helm/matrix-synapse/Chart.yaml

@@ -53,7 +53,7 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.0
+    version: 7.10.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey-matrix-synapse

clusters/cl01tl/helm/medialyze/Chart.yaml

@@ -19,4 +19,4 @@ dependencies:
     version: 4.6.2
 icon: https://raw.githubusercontent.com/frederikemmer/MediaLyze/d8f69c0628bac7c047b90f91a66341648029c273/frontend/public/favicon.svg
 # renovate: datasource=github-releases depName=frederikemmer/MediaLyze
-appVersion: 0.4.0
+appVersion: 0.4.1

clusters/cl01tl/helm/medialyze/values.yaml

@@ -9,7 +9,7 @@ medialyze:
         main:
           image:
             repository: ghcr.io/frederikemmer/medialyze
-            tag: 0.4.0
+            tag: 0.4.1
             pullPolicy: IfNotPresent
           env:
             - name: HOST_PORT

clusters/cl01tl/helm/movie-roulette/values.yaml

@@ -9,7 +9,7 @@ movie-roulette:
         main:
           image:
             repository: ghcr.io/sahara101/movie-roulette
-            tag: v5.4.0
+            tag: v5.4.1
             pullPolicy: IfNotPresent
           env:
             - name: FLASK_SECRET_KEY

clusters/cl01tl/helm/navidrome/values.yaml

@@ -9,7 +9,7 @@ navidrome:
         main:
           image:
             repository: deluan/navidrome
-            tag: 0.60.3@sha256:a5dce8f33304714dd138e870cca0dcab3d937ca236be1a9f2b97da009d1a0048
+            tag: 0.61.0@sha256:b14a6acb5cd5ee73f3a13d63d8d68ede82dedb796aa522fbada94769d990cf0b
             pullPolicy: IfNotPresent
           env:
             - name: ND_MUSICFOLDER

clusters/cl01tl/helm/ntfy/Chart.yaml

@@ -20,4 +20,4 @@ dependencies:
     version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ntfy.png
 # renovate: datasource=github-releases depName=binwiederhier/ntfy
-appVersion: 2.20.1
+appVersion: 2.21.0

clusters/cl01tl/helm/ntfy/values.yaml

@@ -9,7 +9,7 @@ ntfy:
         main:
           image:
             repository: binwiederhier/ntfy
-            tag: v2.20.1
+            tag: v2.21.0
             pullPolicy: IfNotPresent
           args: ["serve"]
           env:

clusters/cl01tl/helm/ollama/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.0
+  version: 7.10.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:3b796aa29dd8674205e50bb26fb4e369c56cdabc6eec6a99dd632875224ea0be
+digest: sha256:d0f47712bf5d2bab8136c43f1d5bac41860f067b53c741282a4647ce93a7cd93
-generated: "2026-03-30T19:18:26.217283061Z"
+generated: "2026-03-15T20:07:27.179378683Z"

clusters/cl01tl/helm/ollama/Chart.yaml

@@ -23,7 +23,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.0
+    version: 7.10.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data

clusters/cl01tl/helm/outline/Chart.lock

@@ -7,12 +7,12 @@ dependencies:
   version: 2.4.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.0
+  version: 7.10.0
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.4.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:3d47d212e3238b7ecf3b876172501f37aedbefaa992e592ce8788127120e0933
+digest: sha256:02780454fad48c10e95851e73e45e8a98091596d9dce8ada9e361e7212e581df
-generated: "2026-03-30T19:18:41.197387675Z"
+generated: "2026-03-15T20:07:38.818063491Z"

clusters/cl01tl/helm/outline/Chart.yaml

@@ -27,7 +27,7 @@ dependencies:
     version: 2.4.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.0
+    version: 7.10.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey

clusters/cl01tl/helm/paperless-ngx/Chart.lock

@@ -0,0 +1,24 @@
+dependencies:
+- name: app-template
+  repository: https://bjw-s-labs.github.io/helm-charts/
+  version: 4.6.2
+- name: postgres-cluster
+  repository: oci://harbor.alexlebens.net/helm-charts
+  version: 7.11.0
+- name: valkey
+  repository: oci://harbor.alexlebens.net/helm-charts
+  version: 0.5.0
+- name: volsync-target
+  repository: oci://harbor.alexlebens.net/helm-charts
+  version: 0.8.0
+- name: volsync-target
+  repository: oci://harbor.alexlebens.net/helm-charts
+  version: 0.8.0
+- name: volsync-target
+  repository: oci://harbor.alexlebens.net/helm-charts
+  version: 0.8.0
+- name: volsync-target
+  repository: oci://harbor.alexlebens.net/helm-charts
+  version: 0.8.0
+digest: sha256:08acc0818deaede4bb7515be7cbb1253f30036b70af6038caa69e4bd3cc02412
+generated: "2026-03-30T20:25:47.995874-05:00"

clusters/cl01tl/helm/paperless-ngx/Chart.yaml

@@ -0,0 +1,51 @@
+apiVersion: v2
+name: paperless-ngx
+version: 1.0.0
+description: Paperless-ngx
+keywords:
+  - paperless-ngx
+  - documents
+home: https://docs.alexlebens.dev/applications/paperless-ngx/
+sources:
+  - https://github.com/paperless-ngx/paperless-ngx
+  - https://github.com/gotenberg/gotenberg
+  - https://github.com/paperless-ngx/paperless-ngx/pkgs/container/paperless-ngx
+  - https://hub.docker.com/r/gotenberg/gotenberg
+  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
+  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/postgres-cluster
+  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/valkey
+  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/volsync-target
+maintainers:
+  - name: alexlebens
+dependencies:
+  - name: app-template
+    alias: paperless-ngx
+    repository: https://bjw-s-labs.github.io/helm-charts/
+    version: 4.6.2
+  - name: postgres-cluster
+    alias: postgres-18-cluster
+    version: 7.11.0
+    repository: oci://harbor.alexlebens.net/helm-charts
+  - name: valkey
+    alias: valkey
+    version: 0.5.0
+    repository: oci://harbor.alexlebens.net/helm-charts
+  - name: volsync-target
+    alias: volsync-target-data
+    version: 0.8.0
+    repository: oci://harbor.alexlebens.net/helm-charts
+  - name: volsync-target
+    alias: volsync-target-media
+    version: 0.8.0
+    repository: oci://harbor.alexlebens.net/helm-charts
+  - name: volsync-target
+    alias: volsync-target-export
+    version: 0.8.0
+    repository: oci://harbor.alexlebens.net/helm-charts
+  - name: volsync-target
+    alias: volsync-target-consume
+    version: 0.8.0
+    repository: oci://harbor.alexlebens.net/helm-charts
+icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/paperless-ngx.png
+# renovate: datasource=github-releases depName=paperless-ngx/paperless-ngx
+appVersion: 2.20.13

clusters/cl01tl/helm/paperless-ngx/templates/external-secret.yaml

@@ -0,0 +1,54 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: paperless-ngx-secret
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: paperless-ngx-secret
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  data:
+    - secretKey: secret-key
+      remoteRef:
+        key: /cl01tl/paperless-ngx/secret
+        property: secret-key
+    - secretKey: admin-user
+      remoteRef:
+        key: /cl01tl/paperless-ngx/secret
+        property: admin-user
+    - secretKey: admin-password
+      remoteRef:
+        key: /cl01tl/paperless-ngx/secret
+        property: admin-password
+
+---
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: paperless-ngx-oidc-secret
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: paperless-ngx-oidc-secret
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  data:
+    - secretKey: OIDC_CLIENT_ID
+      remoteRef:
+        key: /authentik/oidc/paperless-ngx
+        property: client
+    - secretKey: OIDC_CLIENT_SECRET
+      remoteRef:
+        key: /authentik/oidc/paperless-ngx
+        property: secret
+    - secretKey: PAPERLESS_SOCIALACCOUNT_PROVIDERS
+      remoteRef:
+        key: /authentik/oidc/paperless-ngx
+        property: PAPERLESS_SOCIALACCOUNT_PROVIDERS

clusters/cl01tl/helm/paperless-ngx/values.yaml

@@ -0,0 +1,212 @@
+paperless-ngx:
+  controllers:
+    main:
+      type: deployment
+      replicas: 1
+      strategy: Recreate
+      containers:
+        main:
+          image:
+            repository: ghcr.io/paperless-ngx/paperless-ngx
+            tag: 2.20.13@sha256:4b05bcd28e6923768000b5d247cbf2c66fd49bdc3f3b05955bd4f6790a638b01
+          env:
+            - name: PAPERLESS_REDIS
+              value: redis://paperless-ngx-valkey.paperless-ngx:6379
+            - name: PAPERLESS_DBHOST
+              valueFrom:
+                secretKeyRef:
+                  name: paperless-ngx-postgresql-18-cluster-app
+                  key: host
+            - name: PAPERLESS_DBPORT
+              valueFrom:
+                secretKeyRef:
+                  name: paperless-ngx-postgresql-18-cluster-app
+                  key: port
+            - name: PAPERLESS_DBNAME
+              valueFrom:
+                secretKeyRef:
+                  name: paperless-ngx-postgresql-18-cluster-app
+                  key: dbname
+            - name: PAPERLESS_DBUSER
+              valueFrom:
+                secretKeyRef:
+                  name: paperless-ngx-postgresql-18-cluster-app
+                  key: user
+            - name: PAPERLESS_DBPASS
+              valueFrom:
+                secretKeyRef:
+                  name: paperless-ngx-postgresql-18-cluster-app
+                  key: password
+            - name: PAPERLESS_TIKA_ENABLED
+              value: true
+            - name: PAPERLESS_TIKA_GOTENBERG_ENDPOINT
+              value: http://localhost:3000/
+            - name: PAPERLESS_SECRET_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: paperless-ngx-secret
+                  key: secret-key
+            - name: PAPERLESS_URL
+              value: https://paperless-ngx.alexlebens.net
+            - name: PAPERLESS_ALLOWED_HOSTS
+              value: paperless-ngx.alexlebens.net, paperless-ngx.paperless-ngx
+            - name: PAPERLESS_ADMIN_USER
+              valueFrom:
+                secretKeyRef:
+                  name: paperless-ngx-secret
+                  key: admin-user
+            - name: PAPERLESS_ADMIN_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: paperless-ngx-secret
+                  key: admin-password
+            - name: PAPERLESS_ACCOUNT_ALLOW_SIGNUPS
+              value: true
+            - name: PAPERLESS_SOCIAL_AUTO_SIGNUP
+              value: true
+            - name: PAPERLESS_SOCIALACCOUNT_ALLOW_SIGNUPS
+              value: true
+            - name: PAPERLESS_APPS
+              value: allauth.socialaccount.providers.openid_connect
+            - name: PAPERLESS_LOGOUT_REDIRECT_URL
+              value: https://authentik.alexlebens.net/application/o/paperless-ngx/end-session/
+            - name: PAPERLESS_SOCIALACCOUNT_PROVIDERS
+              valueFrom:
+                secretKeyRef:
+                  name: paperless-ngx-oidc-secret
+                  key: PAPERLESS_SOCIALACCOUNT_PROVIDERS
+            - name: PAPERLESS_TIME_ZONE
+              value: America/Chicago
+          resources:
+            requests:
+              cpu: 1m
+              memory: 100Mi
+        gotenberg:
+          image:
+            repository: gotenberg/gotenberg
+            tag: 8.29.1@sha256:36c925776fa0db0fd1030408d131fde7ac3453027a559883555155b72adb16a7
+  service:
+    main:
+      controller: main
+      ports:
+        http:
+          port: 80
+          targetPort: 8000
+  route:
+    main:
+      kind: HTTPRoute
+      parentRefs:
+        - group: gateway.networking.k8s.io
+          kind: Gateway
+          name: traefik-gateway
+          namespace: traefik
+      hostnames:
+        - paperless-ngx.alexlebens.net
+      rules:
+        - backendRefs:
+            - name: paperless-ngx
+              port: 80
+          matches:
+            - path:
+                type: PathPrefix
+                value: /
+  persistence:
+    data:
+      forceRename: paperless-ngx-data
+      storageClass: ceph-block
+      accessMode: ReadWriteOnce
+      size: 2Gi
+      advancedMounts:
+        main:
+          main:
+            - path: /usr/src/paperless/data
+    media:
+      forceRename: paperless-ngx-media
+      storageClass: ceph-block
+      accessMode: ReadWriteOnce
+      size: 10Gi
+      advancedMounts:
+        main:
+          main:
+            - path: /usr/src/paperless/media
+    export:
+      forceRename: paperless-ngx-export
+      storageClass: ceph-block
+      accessMode: ReadWriteOnce
+      size: 2Gi
+      advancedMounts:
+        main:
+          main:
+            - path: /usr/src/paperless/export
+    consume:
+      forceRename: paperless-ngx-consume
+      storageClass: ceph-block
+      accessMode: ReadWriteOnce
+      size: 2Gi
+      advancedMounts:
+        main:
+          main:
+            - path: /usr/src/paperless/consume
+postgres-18-cluster:
+  mode: recovery
+  recovery:
+    method: objectStore
+    objectStore:
+      index: 1
+  backup:
+    objectStore:
+      - name: garage-local
+        index: 1
+        destinationBucket: postgres-backups
+        externalSecretCredentialPath: /garage/home-infra/postgres-backups
+        isWALArchiver: true
+    scheduledBackups:
+      - name: live-backup
+        suspend: false
+        immediate: true
+        schedule: "0 15 15 * * *"
+        backupName: garage-local
+volsync-target-data:
+  pvcTarget: paperless-ngx-data
+  local:
+    enabled: true
+    schedule: 2 8 * * *
+  remote:
+    enabled: true
+    schedule: 2 9 * * *
+  external:
+    enabled: true
+    schedule: 2 10 * * *
+volsync-target-media:
+  pvcTarget: paperless-ngx-metadata
+  local:
+    enabled: true
+    schedule: 4 8 * * *
+  remote:
+    enabled: true
+    schedule: 4 9 * * *
+  external:
+    enabled: true
+    schedule: 4 10 * * *
+volsync-target-export:
+  pvcTarget: paperless-ngx-data
+  local:
+    enabled: true
+    schedule: 2 8 * * *
+  remote:
+    enabled: true
+    schedule: 2 9 * * *
+  external:
+    enabled: true
+    schedule: 2 10 * * *
+volsync-target-consume:
+  pvcTarget: paperless-ngx-metadata
+  local:
+    enabled: true
+    schedule: 4 8 * * *
+  remote:
+    enabled: true
+    schedule: 4 9 * * *
+  external:
+    enabled: true
+    schedule: 4 10 * * *

clusters/cl01tl/helm/photoview/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.0
+  version: 7.10.0
-digest: sha256:a3964c6908354e1b3a946e29b3613a7851bd07ba7e0cfdea60fc03225fd3b547
+digest: sha256:fe266f506edd672979091e0ad12379d6ad7dddd2c982e196e602dcda268d6f76
-generated: "2026-03-30T19:18:55.696326635Z"
+generated: "2026-03-15T20:07:52.831926834Z"

clusters/cl01tl/helm/photoview/Chart.yaml

@@ -20,7 +20,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.0
+    version: 7.10.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/photoview.png
 # renovate: datasource=github-releases depName=photoview/photoview

clusters/cl01tl/helm/postiz/Chart.lock

@@ -7,7 +7,7 @@ dependencies:
   version: 2.4.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.0
+  version: 7.10.0
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.4.0
@@ -17,5 +17,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:1037a9a69f28ea2a9003c038b6e428a0a8c32b0a9069d642387bbf5b116fcacf
+digest: sha256:de3fb540df1cf7385a19316741854d01e002740c0bf346f3da0ff3a809b1fc3d
-generated: "2026-03-30T19:19:10.160394326Z"
+generated: "2026-03-15T20:08:06.855136249Z"

clusters/cl01tl/helm/postiz/Chart.yaml

@@ -26,7 +26,7 @@ dependencies:
     version: 2.4.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.0
+    version: 7.10.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
@@ -42,4 +42,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/postiz.png
 # renovate: datasource=github-releases depName=gitroomhq/postiz-app
-appVersion: v2.21.2
+appVersion: v2.21.4

clusters/cl01tl/helm/radarr-4k/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.0
+  version: 7.10.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:bdd31f2479b7c450e0543db15fd03e4fbda7fc3cbea7d2113aba3d374b991d0e
+digest: sha256:d76563fe1a7a9f8ceaf6937831bd0c5511eb7369abb8eb54110dfb69e6dce224
-generated: "2026-03-30T19:19:26.940035872Z"
+generated: "2026-03-15T20:08:21.236792423Z"

clusters/cl01tl/helm/radarr-4k/Chart.yaml

@@ -27,7 +27,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.0
+    version: 7.10.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/radarr-anime/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.0
+  version: 7.10.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:c9e176ff65a6a06db66e996097bd642d69e01e3a0495af71d081baaec207ff71
+digest: sha256:21bde3a8778fb94e40f2177383ca418123e69f3f3f463b31d35e9f9bf83dfa9d
-generated: "2026-03-30T19:19:40.775773338Z"
+generated: "2026-03-15T20:08:35.497440433Z"

clusters/cl01tl/helm/radarr-anime/Chart.yaml

@@ -27,7 +27,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.0
+    version: 7.10.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/radarr-standup/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.0
+  version: 7.10.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:23cad6b105e31aee71b14476e0010373d4f94a908353f2c17c926b592c5d47fa
+digest: sha256:ebd25d2a12ca1924b66c62d6dd2c69476ae4526825020796198b65c2ebd2c6eb
-generated: "2026-03-30T19:19:53.62627542Z"
+generated: "2026-03-15T20:08:49.811429784Z"

clusters/cl01tl/helm/radarr-standup/Chart.yaml

@@ -26,7 +26,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.0
+    version: 7.10.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/radarr/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.0
+  version: 7.10.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:3d7d42b81df431c0d18973818d2b0b6bb0ac07310e16551078853ff3f7ca2751
+digest: sha256:05ce0d746d9c42a00338df5e6673fde8baeefa6f598ef8c85a32e6bc393b94ca
-generated: "2026-03-30T19:20:07.677580675Z"
+generated: "2026-03-15T20:09:03.538226001Z"

clusters/cl01tl/helm/radarr/Chart.yaml

@@ -26,7 +26,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.0
+    version: 7.10.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/roundcube/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.0
+  version: 7.10.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:d6759b18eb0a9b13155a3c303d75f2159536e262ba314961eb29a72b8013c8e2
+digest: sha256:755aa4db5c7142d46af4a80c9fce49c3c558cc81042c9a00a0bdcd607276e856
-generated: "2026-03-30T19:20:20.103459425Z"
+generated: "2026-03-15T20:09:18.053504671Z"

clusters/cl01tl/helm/roundcube/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.0
+    version: 7.10.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data
@@ -29,4 +29,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/roundcube.png
 # renovate: datasource=github-releases depName=roundcube/roundcubemail
-appVersion: 1.6.14
+appVersion: 1.6.15

clusters/cl01tl/helm/roundcube/values.yaml

@@ -9,7 +9,7 @@ roundcube:
         main:
           image:
             repository: roundcube/roundcubemail
-            tag: 1.6.14-fpm-alpine
+            tag: 1.6.15-fpm-alpine
             pullPolicy: IfNotPresent
           env:
             - name: ROUNDCUBEMAIL_DB_TYPE
@@ -85,7 +85,7 @@ roundcube:
         backup:
           image:
             repository: roundcube/roundcubemail
-            tag: 1.6.14-fpm-alpine
+            tag: 1.6.15-fpm-alpine
             pullPolicy: IfNotPresent
           env:
             - name: ROUNDCUBEMAIL_DB_TYPE

clusters/cl01tl/helm/rybbit/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 2.4.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.0
+  version: 7.10.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:b750580d9e2ce97be33b6202a1c74c7e8e84238f8e77fdf66f7ec628896a4870
+digest: sha256:9342eb966ec3e8020aa6b1d6d2ac72d2c4a46c4ed70c5cf52c16ff25d2f2b0fa
-generated: "2026-03-30T19:20:33.628410812Z"
+generated: "2026-03-15T20:09:33.800790437Z"

clusters/cl01tl/helm/rybbit/Chart.yaml

@@ -23,7 +23,7 @@ dependencies:
     version: 2.4.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.0
+    version: 7.10.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-clickhouse-data

clusters/cl01tl/helm/searxng/values.yaml

@@ -9,7 +9,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:4d7ed8b7035ecf827bd901ba6d32f5c32d8119bc09bb3cdafeb0ce58f1b951c1
+            tag: latest@sha256:dac0c447bdd3f20a43687c6bed8140547f493252fd7bad3ad8bef1faffe1002d
             pullPolicy: IfNotPresent
           env:
             - name: SEARXNG_BASE_URL
@@ -39,7 +39,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:4d7ed8b7035ecf827bd901ba6d32f5c32d8119bc09bb3cdafeb0ce58f1b951c1
+            tag: latest@sha256:dac0c447bdd3f20a43687c6bed8140547f493252fd7bad3ad8bef1faffe1002d
             pullPolicy: IfNotPresent
           env:
             - name: SEARXNG_BASE_URL

clusters/cl01tl/helm/seerr/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: seerr-chart
   repository: oci://ghcr.io/seerr-team/seerr
-  version: 3.3.0
+  version: 3.3.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:6b3f76b56c20740f1f1c39df0b0f8ed2684051c698e287c113c9e311477fed82
+digest: sha256:125b2384418dda2ccf6ee188d61daf1e78f2faa3bf1ee4a81c2d0f741967ca5f
-generated: "2026-03-06T01:16:36.098673586Z"
+generated: "2026-03-31T13:05:18.964064368Z"

clusters/cl01tl/helm/seerr/Chart.yaml

@@ -17,7 +17,7 @@ maintainers:
 dependencies:
   - name: seerr-chart
     repository: oci://ghcr.io/seerr-team/seerr
-    version: 3.3.0
+    version: 3.3.1
   - name: volsync-target
     alias: volsync-target-config
     version: 0.8.0

clusters/cl01tl/helm/site-documentation/values.yaml

@@ -11,7 +11,7 @@ site-documentation:
         main:
           image:
             repository: harbor.alexlebens.net/images/site-documentation
-            tag: 0.12.0
+            tag: 0.13.0
             pullPolicy: IfNotPresent
           resources:
             requests: