chore(deps): update dependency goharbor/harbor to v2.15.1

Merge pull request 'chore(deps): update headlamp to v0.42.0' (#6620 ) from renovate/unified-headlamp into main
Reviewed-on: #6620
2026-05-07 20:42:12 +00:00 · 2026-05-07 20:40:15 +00:00 · 2026-05-07 20:40:15 +00:00 · 2026-05-07 20:38:19 +00:00 · 2026-05-07 20:38:19 +00:00 · 2026-05-07 20:28:27 +00:00
33 changed files with 152 additions and 181 deletions
--- a/.gitea/workflows/renovate.yaml
+++ b/.gitea/workflows/renovate.yaml
@@ -13,7 +13,7 @@ on:
 jobs:
  renovate:
    runs-on: ubuntu-js
-    container: ghcr.io/renovatebot/renovate:43.168.5@sha256:38aac6e29e09288bc3fb3b95ba9445962508a1081013144d5b6ec5a6735707b9
+    container: ghcr.io/renovatebot/renovate:43.169.3@sha256:8545351921176f15250454ec6a634d97e6f2b4ee6182507226daadba13180334
    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
--- a/clusters/cl01tl/helm/argocd/Chart.yaml
+++ b/clusters/cl01tl/helm/argocd/Chart.yaml
@@ -13,7 +13,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: argo-cd
-    version: 9.5.11
+    version: 9.5.12
    repository: https://argoproj.github.io/argo-helm
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 # renovate: datasource=github-releases depName=argoproj/argo-cd
--- a/clusters/cl01tl/helm/cloudnative-pg/values.yaml
+++ b/clusters/cl01tl/helm/cloudnative-pg/values.yaml
@@ -18,7 +18,7 @@ rclone-postgres-backups-remote:
  nameOverride: postgres-backups-remote-rclone
  cronJob:
    suspend: false
-    schedule: 0 6 * * 6
+    schedule: 30 6 * * 1
  rclone:
    source:
      bucketName: postgres-backups
@@ -44,14 +44,13 @@ rclone-postgres-backups-remote:
 rclone-postgres-backups-external:
  nameOverride: postgres-backups-external-rclone
  cronJob:
-    suspend: true
-    schedule: 0 6 * * 6
+    suspend: false
+    schedule: 0 6 * * 1
  rclone:
    source:
-      bucketName: openbao-backups
+      bucketName: postgres-backups
    destination:
-      bucketName: postgres-backups-ecc1010276b61716
-      providerType: DigitalOcean
+      bucketName: postgres-backups-775957147abfbc73
  prune:
    enabled: true
    ageToPrune: 45d
@@ -66,10 +65,10 @@ rclone-postgres-backups-external:
          path: /garage/config
      destination:
        credentials:
-          path: /digital-ocean/home-infra/postgres-backups
+          path: /backblaze/home-infra/postgres-backups
          keyIdProperty: AWS_ACCESS_KEY_ID
          secretKeyProperty: AWS_SECRET_ACCESS_KEY
          regionProperty: AWS_REGION
        config:
-          path: /digital-ocean/config
+          path: /backblaze/config
          endpointProperty: ENDPOINT
--- a/clusters/cl01tl/helm/directus/Chart.lock
+++ b/clusters/cl01tl/helm/directus/Chart.lock
@@ -11,5 +11,8 @@ dependencies:
 - name: rclone-bucket
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.7.0
-digest: sha256:3dea680a7391a11ea84cb6b81a0fd336590e59b163c7c3f5a11efc57136d8bc2
-generated: "2026-05-07T01:19:59.656347343Z"
+- name: rclone-bucket
+  repository: oci://harbor.alexlebens.net/helm-charts
+  version: 0.7.0
+digest: sha256:5be9eefefbda2ebe4b33dd0e0684f3688781de408bb666113e3b44e6e6b606dc
+generated: "2026-05-07T15:08:44.150931-05:00"
--- a/clusters/cl01tl/helm/directus/Chart.yaml
+++ b/clusters/cl01tl/helm/directus/Chart.yaml
@@ -32,6 +32,10 @@ dependencies:
    alias: rclone-directus-assets-remote
    repository: oci://harbor.alexlebens.net/helm-charts
    version: 0.7.0
+  - name: rclone-bucket
+    alias: rclone-directus-assets-external
+    repository: oci://harbor.alexlebens.net/helm-charts
+    version: 0.7.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/directus.png
 # renovate: datasource=github-releases depName=directus/directus
 appVersion: 11.17.4
--- a/clusters/cl01tl/helm/directus/values.yaml
+++ b/clusters/cl01tl/helm/directus/values.yaml
@@ -211,9 +211,10 @@ valkey:
        default:
          permissions: "~* &* +@all"
 rclone-directus-assets-remote:
+  nameOverride: directus-assets-remote-rclone
  cronJob:
    suspend: false
-    schedule: 0 0 * * *
+    schedule: 30 6 * * 2
  rclone:
    source:
      bucketName: directus-assets
@@ -231,3 +232,26 @@ rclone-directus-assets-remote:
          path: /garage/home-infra/directus-assets
        config:
          path: /garage/config
+rclone-directus-assets-external:
+  nameOverride: directus-assets-external-rclone
+  cronJob:
+    suspend: false
+    schedule: 0 6 * * 2
+  rclone:
+    source:
+      bucketName: directus-assets
+    destination:
+      bucketName: directus-assets-37363a16b71dc59b
+  secret:
+    externalSecret:
+      source:
+        credentials:
+          path: /garage/home-infra/directus-assets
+        config:
+          path: /garage/config
+      destination:
+        credentials:
+          path: /backblaze/home-infra/directus-assets
+        config:
+          path: /backblaze/config
+          endpointProperty: ENDPOINT
--- a/clusters/cl01tl/helm/generic-device-plugin/Chart.lock
+++ b/clusters/cl01tl/helm/generic-device-plugin/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: generic-device-plugin
  repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-  version: 0.20.31
-digest: sha256:2e073f735a5ff699844eb67715ab20d403261b3e9c035ebdc4292cee9666b4f4
-generated: "2026-04-15T01:16:30.361061773Z"
+  version: 0.20.33
+digest: sha256:c08407bfa5509e7805760023be163f2597ff41af1183a9b258413230e907d830
+generated: "2026-05-07T19:57:30.083273789Z"
--- a/clusters/cl01tl/helm/generic-device-plugin/Chart.yaml
+++ b/clusters/cl01tl/helm/generic-device-plugin/Chart.yaml
@@ -14,6 +14,6 @@ maintainers:
 dependencies:
  - name: generic-device-plugin
    repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-    version: 0.20.31
+    version: 0.20.33
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 appVersion: 1.0.0
--- a/clusters/cl01tl/helm/harbor/Chart.yaml
+++ b/clusters/cl01tl/helm/harbor/Chart.yaml
@@ -28,4 +28,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/harbor.png
 # renovate: datasource=github-releases depName=goharbor/harbor
-appVersion: v2.15.0
+appVersion: v2.15.1
--- a/clusters/cl01tl/helm/harbor/values.yaml
+++ b/clusters/cl01tl/helm/harbor/values.yaml
@@ -59,7 +59,7 @@ harbor:
    registry:
      image:
        repository: goharbor/registry-photon
-        tag: v2.15.0@sha256:beb49fd16cf0906c04a2bf51a22f7210289e7cc2ae43a733e2a0364380aceae6
+        tag: v2.15.1@sha256:ebf0325c2661729dbb317cbf839608eb8b15cfa158911a94976f2c21563c466e
    controller:
      image:
        repository: ghcr.io/goharbor/harbor-registryctl
--- a/clusters/cl01tl/helm/headlamp/Chart.lock
+++ b/clusters/cl01tl/helm/headlamp/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: headlamp
  repository: https://kubernetes-sigs.github.io/headlamp/
-  version: 0.41.0
-digest: sha256:b1cbc64b393c6c9e1c460510adab528cee8336735659040b9c517976e5c6f15d
-generated: "2026-03-26T15:07:50.703213905Z"
+  version: 0.42.0
+digest: sha256:09efb4cfe9ef92337074c8ae52a564bf902be41f9fcd742dde34b3fe4b4331fa
+generated: "2026-05-07T20:38:18.198513024Z"
--- a/clusters/cl01tl/helm/headlamp/Chart.yaml
+++ b/clusters/cl01tl/helm/headlamp/Chart.yaml
@@ -13,8 +13,8 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: headlamp
-    version: 0.41.0
+    version: 0.42.0
    repository: https://kubernetes-sigs.github.io/headlamp/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/headlamp.png
 # renovate: datasource=github-releases depName=headlamp-k8s/headlamp
-appVersion: v0.41.0
+appVersion: vv0.42.0
--- a/clusters/cl01tl/helm/headlamp/values.yaml
+++ b/clusters/cl01tl/helm/headlamp/values.yaml
@@ -3,7 +3,7 @@ headlamp:
  image:
    registry: ghcr.io
    repository: headlamp-k8s/headlamp
-    tag: v0.41.0@sha256:89c6c65810bfde61796483c93c70d659104355593792bf55cab680d685da8eeb
+    tag: v0.42.0@sha256:c9754bae1d799220da0547e51ceee234f6e66ebadc138518ca73e33ecd331e59
  config:
    oidc:
      secret:
--- a/clusters/cl01tl/helm/karakeep/Chart.lock
+++ b/clusters/cl01tl/helm/karakeep/Chart.lock
@@ -14,5 +14,8 @@ dependencies:
 - name: rclone-bucket
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.7.0
-digest: sha256:bb424fe9bed824b37aa26d0e72d123fea5f5c3fcae4eaa21a54e087f2b52421a
-generated: "2026-05-07T01:20:20.489019444Z"
+- name: rclone-bucket
+  repository: oci://harbor.alexlebens.net/helm-charts
+  version: 0.7.0
+digest: sha256:be0234cbbed7e9cd59ceaa9f0c8f4478cbd572867a8766f45840ec6d79a6a6aa
+generated: "2026-05-07T15:09:58.731382-05:00"
--- a/clusters/cl01tl/helm/karakeep/Chart.yaml
+++ b/clusters/cl01tl/helm/karakeep/Chart.yaml
@@ -37,6 +37,10 @@ dependencies:
    alias: rclone-karakeep-assets-remote
    repository: oci://harbor.alexlebens.net/helm-charts
    version: 0.7.0
+  - name: rclone-bucket
+    alias: rclone-karakeep-assets-external
+    repository: oci://harbor.alexlebens.net/helm-charts
+    version: 0.7.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/karakeep.png
 # renovate: datasource=github-releases depName=karakeep-app/karakeep
 appVersion: 0.31.0
--- a/clusters/cl01tl/helm/karakeep/values.yaml
+++ b/clusters/cl01tl/helm/karakeep/values.yaml
@@ -175,7 +175,7 @@ volsync-target-data:
 rclone-karakeep-assets-remote:
  cronJob:
    suspend: false
-    schedule: 10 0 * * *
+    schedule: 30 6 * * 3
  rclone:
    source:
      bucketName: karakeep-assets
@@ -193,3 +193,26 @@ rclone-karakeep-assets-remote:
          path: /garage/home-infra/karakeep-assets
        config:
          path: /garage/config
+rclone-karakeep-assets-external:
+  nameOverride: karakeep-assets-external-rclone
+  cronJob:
+    suspend: false
+    schedule: 0 6 * * 3
+  rclone:
+    source:
+      bucketName: karakeep-assets
+    destination:
+      bucketName: karakeep-assets-bcb0bc04dac3e3fd
+  secret:
+    externalSecret:
+      source:
+        credentials:
+          path: /garage/home-infra/karakeep-assets
+        config:
+          path: /garage/config
+      destination:
+        credentials:
+          path: /backblaze/home-infra/karakeep-assets
+        config:
+          path: /backblaze/config
+          endpointProperty: ENDPOINT
--- a/clusters/cl01tl/helm/komodo/Chart.yaml
+++ b/clusters/cl01tl/helm/komodo/Chart.yaml
@@ -31,4 +31,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/komodo.png
 # renovate: datasource=github-releases depName=moghtech/komodo
-appVersion: v2.1.2
+appVersion: v2.2.0
--- a/clusters/cl01tl/helm/komodo/values.yaml
+++ b/clusters/cl01tl/helm/komodo/values.yaml
@@ -8,7 +8,7 @@ komodo:
        main:
          image:
            repository: ghcr.io/moghtech/komodo-core
-            tag: 2.1.2@sha256:8a7dbba232e4e49797bb412be5f78207c89fcf22cc2727b38631ae30f7518a4c
+            tag: 2.2.0@sha256:833880ca8b1a6c1c133efb07e8633525bf63094b4faa72700cf52f60fd69e6c6
          env:
            - name: COMPOSE_LOGGING_DRIVER
              value: local
--- a/clusters/cl01tl/helm/libation/Chart.yaml
+++ b/clusters/cl01tl/helm/libation/Chart.yaml
@@ -26,4 +26,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/libation.png
 # renovate: datasource=github-releases depName=rmcrackan/Libation
-appVersion: 13.3.6
+appVersion: 13.4.1
--- a/clusters/cl01tl/helm/libation/values.yaml
+++ b/clusters/cl01tl/helm/libation/values.yaml
@@ -12,7 +12,7 @@ libation:
        main:
          image:
            repository: rmcrackan/libation
-            tag: 13.3.6@sha256:54695675b9e838b7448c99f7fa03f5c34e0e35c7d7c82c44663959888be9c1b6
+            tag: 13.4.1@sha256:41cf509a8a1592c01c37cb4dc0d5a2e0c84faab20ecd8927f6bb3d73b237981b
          env:
            - name: SLEEP_TIME
              value: "-1"
--- a/clusters/cl01tl/helm/loki/Chart.lock
+++ b/clusters/cl01tl/helm/loki/Chart.lock
@@ -1,9 +1,9 @@
 dependencies:
 - name: loki
  repository: oci://ghcr.io/grafana-community/helm-charts
-  version: 13.5.0
+  version: 13.6.1
 - name: alloy
  repository: https://grafana.github.io/helm-charts
-  version: 1.8.0
-digest: sha256:bef475f5b6770e4b582b4499e38417789b2bb59ce0ee93c0390daef780e5728d
-generated: "2026-05-02T19:36:44.416322-05:00"
+  version: 1.8.1
+digest: sha256:2590c2358db4fc9313f9c506998f4e851ee291ae9c1419f1fe5bb9a73d464e60
+generated: "2026-05-07T19:56:09.168096358Z"
--- a/clusters/cl01tl/helm/loki/Chart.yaml
+++ b/clusters/cl01tl/helm/loki/Chart.yaml
@@ -15,10 +15,10 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: loki
-    version: 13.5.0
+    version: 13.6.1
    repository: oci://ghcr.io/grafana-community/helm-charts
  - name: alloy
-    version: 1.8.0
+    version: 1.8.1
    repository: https://grafana.github.io/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/loki.png
 # renovate: datasource=github-releases depName=grafana/loki
--- a/clusters/cl01tl/helm/matrix-synapse/Chart.yaml
+++ b/clusters/cl01tl/helm/matrix-synapse/Chart.yaml
@@ -78,4 +78,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/matrix.png
 # renovate: datasource=github-releases depName=element-hq/synapse
-appVersion: vv1.152.0
+appVersion: vv1.152.1
--- a/clusters/cl01tl/helm/matrix-synapse/values.yaml
+++ b/clusters/cl01tl/helm/matrix-synapse/values.yaml
@@ -1,7 +1,7 @@
 matrix-synapse:
  image:
    repository: ghcr.io/element-hq/synapse
-    tag: v1.152.0@sha256:6216aaa0a111fedc007002c0e595b2b913dc7bdfc59442d1e04b72912fa23a9c
+    tag: v1.152.1@sha256:ea13612748d2c3cd7d37314e4d2bb3833831e7fe9c1cc2ba2a05a0e51ab78297
  serverName: alexlebens.dev
  publicServerName: matrix.alexlebens.dev
  argoCD: true
--- a/clusters/cl01tl/helm/medialyze/Chart.yaml
+++ b/clusters/cl01tl/helm/medialyze/Chart.yaml
@@ -24,4 +24,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://raw.githubusercontent.com/frederikemmer/MediaLyze/d8f69c0628bac7c047b90f91a66341648029c273/frontend/public/favicon.svg
 # renovate: datasource=github-releases depName=frederikemmer/MediaLyze
-appVersion: 0.10.1
+appVersion: 0.10.2
--- a/clusters/cl01tl/helm/ntfy/values.yaml
+++ b/clusters/cl01tl/helm/ntfy/values.yaml
@@ -127,7 +127,7 @@ postgres-18-cluster:
 rclone-ntfy-attachments-remote:
  cronJob:
    suspend: false
-    schedule: 50 0 * * *
+    schedule: 0 1 * * *
  rclone:
    source:
      bucketName: ntfy-attachments
--- a/clusters/cl01tl/helm/openbao/values.yaml
+++ b/clusters/cl01tl/helm/openbao/values.yaml
@@ -243,7 +243,7 @@ rclone-openbao-backups-remote:
  nameOverride: openbao-backups-remote-rclone
  cronJob:
    suspend: false
-    schedule: 0 1 * * *
+    schedule: 30 6 * * 4
  rclone:
    source:
      bucketName: openbao-backups
@@ -268,13 +268,12 @@ rclone-openbao-backups-external:
  nameOverride: openbao-backups-external-rclone
  cronJob:
    suspend: false
-    schedule: 10 1 * * *
+    schedule: 0 6 * * 4
  rclone:
    source:
      bucketName: openbao-backups
    destination:
      bucketName: openbao-backups-038053cd180284dc
-      providerType: Other
  prune:
    enabled: true
    ageToPrune: 90d
--- a/clusters/cl01tl/helm/rclone/Chart.lock
+++ b/clusters/cl01tl/helm/rclone/Chart.lock
@@ -2,5 +2,8 @@ dependencies:
 - name: rclone-bucket
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.7.0
-digest: sha256:870599db3a25d2be6c107fed1481aec87a97db4b1fb7ce9668098e89c2877327
-generated: "2026-05-07T01:21:28.932348257Z"
+- name: rclone-bucket
+  repository: oci://harbor.alexlebens.net/helm-charts
+  version: 0.7.0
+digest: sha256:28ae198008893310d81c9452c799cb178d3d3cb54bd65936b6e12cf495f2840c
+generated: "2026-05-07T15:17:54.435967-05:00"
--- a/clusters/cl01tl/helm/rclone/Chart.yaml
+++ b/clusters/cl01tl/helm/rclone/Chart.yaml
@@ -13,6 +13,10 @@ sources:
 maintainers:
  - name: alexlebens
 dependencies:
+  - name: rclone-bucket
+    alias: rclone-web-assets-local
+    repository: oci://harbor.alexlebens.net/helm-charts
+    version: 0.7.0
  - name: rclone-bucket
    alias: rclone-web-assets-remote
    repository: oci://harbor.alexlebens.net/helm-charts
--- a/clusters/cl01tl/helm/rclone/values.yaml
+++ b/clusters/cl01tl/helm/rclone/values.yaml
@@ -1,144 +1,49 @@
-rclone:
-  controllers:
-    postgres-backups:
-      type: cronjob
-      cronjob:
-        suspend: false
-        timeZone: America/Chicago
-        schedule: 40 0 * * *
-        backoffLimit: 3
-        parallelism: 1
-      containers:
-        sync:
-          image:
-            repository: rclone/rclone
-            tag: 1.74.0@sha256:d2e0e88359d0b2e67cfcd2c43d5405185eb8adfc207079df27c42da82c5207bc
-          args:
-            - sync
-            - src:postgres-backups
-            - dest:postgres-backups
-            - --s3-no-check-bucket
-            - --max-age
-            - 30d
-            - --include
-            - "/cl01tl/*/*/*/base/**"
-            - --exclude
-            - "**/walls/**"
-            - --verbose
-          env:
-            - name: RCLONE_S3_PROVIDER
-              value: Other
-            - name: RCLONE_CONFIG_SRC_TYPE
-              value: s3
-            - name: RCLONE_CONFIG_SRC_PROVIDER
-              value: Other
-            - name: RCLONE_CONFIG_SRC_ENV_AUTH
-              value: false
-            - name: RCLONE_CONFIG_SRC_ACCESS_KEY_ID
-              valueFrom:
-                secretKeyRef:
-                  name: garage-postgres-backups-secret
-                  key: ACCESS_KEY_ID
-            - name: RCLONE_CONFIG_SRC_SECRET_ACCESS_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: garage-postgres-backups-secret
-                  key: ACCESS_SECRET_KEY
-            - name: RCLONE_CONFIG_SRC_REGION
-              valueFrom:
-                secretKeyRef:
-                  name: garage-postgres-backups-secret
-                  key: ACCESS_REGION
-            - name: RCLONE_CONFIG_SRC_ENDPOINT
-              valueFrom:
-                secretKeyRef:
-                  name: garage-postgres-backups-secret
-                  key: SRC_ENDPOINT
-            - name: RCLONE_CONFIG_SRC_S3_FORCE_PATH_STYLE
-              value: true
-            - name: RCLONE_CONFIG_DEST_TYPE
-              value: s3
-            - name: RCLONE_CONFIG_DEST_PROVIDER
-              value: Other
-            - name: RCLONE_CONFIG_DEST_ENV_AUTH
-              value: false
-            - name: RCLONE_CONFIG_DEST_ACCESS_KEY_ID
-              valueFrom:
-                secretKeyRef:
-                  name: garage-postgres-backups-secret
-                  key: ACCESS_KEY_ID
-            - name: RCLONE_CONFIG_DEST_SECRET_ACCESS_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: garage-postgres-backups-secret
-                  key: ACCESS_SECRET_KEY
-            - name: RCLONE_CONFIG_DEST_REGION
-              valueFrom:
-                secretKeyRef:
-                  name: garage-postgres-backups-secret
-                  key: ACCESS_REGION
-            - name: RCLONE_CONFIG_DEST_ENDPOINT
-              valueFrom:
-                secretKeyRef:
-                  name: garage-postgres-backups-secret
-                  key: DEST_ENDPOINT
-            - name: RCLONE_CONFIG_SRC_DEST_FORCE_PATH_STYLE
-              value: true
-        prune:
-          image:
-            repository: rclone/rclone
-            tag: 1.74.0@sha256:d2e0e88359d0b2e67cfcd2c43d5405185eb8adfc207079df27c42da82c5207bc
-          args:
-            - delete
-            - dest:postgres-backups
-            - --min-age
-            - 30d
-            - --verbose
-          env:
-            - name: RCLONE_CONFIG_DEST_TYPE
-              value: s3
-            - name: RCLONE_CONFIG_DEST_PROVIDER
-              value: Other
-            - name: RCLONE_CONFIG_DEST_ENV_AUTH
-              value: false
-            - name: RCLONE_CONFIG_DEST_ACCESS_KEY_ID
-              valueFrom:
-                secretKeyRef:
-                  name: garage-postgres-backups-secret
-                  key: ACCESS_KEY_ID
-            - name: RCLONE_CONFIG_DEST_SECRET_ACCESS_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: garage-postgres-backups-secret
-                  key: ACCESS_SECRET_KEY
-            - name: RCLONE_CONFIG_DEST_REGION
-              valueFrom:
-                secretKeyRef:
-                  name: garage-postgres-backups-secret
-                  key: ACCESS_REGION
-            - name: RCLONE_CONFIG_DEST_ENDPOINT
-              valueFrom:
-                secretKeyRef:
-                  name: garage-postgres-backups-secret
-                  key: DEST_ENDPOINT
-            - name: RCLONE_CONFIG_SRC_S3_FORCE_PATH_STYLE
-              value: true
-rclone-web-assets-remote:
+rclone-web-assets-local:
  cronJob:
    suspend: false
-    schedule: 30 0 * * *
+    schedule: 0 6 * * 5
  rclone:
    source:
-      bucketName: web-assets
+      bucketName: web-assets-770aef58c931fcf4
    destination:
      bucketName: web-assets
  secret:
    externalSecret:
      source:
        credentials:
-          path: /garage/home-infra/web-assets
+          path: /backblaze/home-infra/web-assets
+          keyIdProperty: AWS_ACCESS_KEY_ID
+          secretKeyProperty: AWS_SECRET_ACCESS_KEY
+          regionProperty: AWS_REGION
        config:
-          path: /garage/config
+          path: /backblaze/config
+          endpointProperty: ENDPOINT
+      destination:
+        credentials:
+          path: /garage/home-infra/web-assets
+        config:
+          path: /garage/config
+          endpointProperty: ENDPOINT_LOCAL
+rclone-web-assets-remote:
+  cronJob:
+    suspend: false
+    schedule: 0 6 * * 6
+  rclone:
+    source:
+      bucketName: web-assets-770aef58c931fcf4
+    destination:
+      bucketName: web-assets
+  secret:
+    externalSecret:
+      source:
+        credentials:
+          path: /backblaze/home-infra/web-assets
+          keyIdProperty: AWS_ACCESS_KEY_ID
+          secretKeyProperty: AWS_SECRET_ACCESS_KEY
+          regionProperty: AWS_REGION
+        config:
+          path: /backblaze/config
+          endpointProperty: ENDPOINT
      destination:
        credentials:
          path: /garage/home-infra/web-assets
--- a/clusters/cl01tl/helm/rybbit/values.yaml
+++ b/clusters/cl01tl/helm/rybbit/values.yaml
@@ -112,7 +112,7 @@ rybbit:
        main:
          image:
            repository: clickhouse/clickhouse-server
-            tag: 26.4.1@sha256:1688b8976802967d4754307b408d00ee57fe0396b40c6ffc195be228699e4fc2
+            tag: 26.4.2@sha256:6d8f358747b59f7db044749eaf951e828e75cc16f9c487f855b114272c44b82c
          env:
            - name: CLICKHOUSE_DB
              value: analytics
--- a/clusters/cl01tl/helm/searxng/values.yaml
+++ b/clusters/cl01tl/helm/searxng/values.yaml
@@ -10,7 +10,7 @@ searxng:
        main:
          image:
            repository: searxng/searxng
-            tag: latest@sha256:34d13094b1150bba739e16c95b7334040a524aadb557fbdbc41a42827aae5f8b
+            tag: latest@sha256:ae455704c4edb2dc750b80efad9476ca41a21a55fd5d870f90a23c5ca6fc11af
          env:
            - name: SEARXNG_BASE_URL
              value: http://searxng-api.searxng:8080
@@ -38,7 +38,7 @@ searxng:
        main:
          image:
            repository: searxng/searxng
-            tag: latest@sha256:34d13094b1150bba739e16c95b7334040a524aadb557fbdbc41a42827aae5f8b
+            tag: latest@sha256:ae455704c4edb2dc750b80efad9476ca41a21a55fd5d870f90a23c5ca6fc11af
          env:
            - name: SEARXNG_BASE_URL
              value: https://searxng.alexlebens.net/
--- a/hosts/ps10rp/komodo-periphery/compose.yaml
+++ b/hosts/ps10rp/komodo-periphery/compose.yaml
@@ -20,7 +20,7 @@ services:
            - /dev/net/tun:/dev/net/tun

    komodo-periphery:
-        image: ghcr.io/moghtech/komodo-periphery:2.1.2@sha256:8ac9f2ef9c1461b95c862d445da00253005e7094d1e30f5b7b04b8d60ca7a3d6
+        image: ghcr.io/moghtech/komodo-periphery:2.2.0@sha256:7fb1a4807d125ce036a17d37c940b4001402afcaf342a2c720c98d096b1b54da
        container_name: komodo-periphery
        init: true
        env_file:
Author	SHA1	Message	Date
Renovate Bot	06e9ba533f	chore(deps): update dependency goharbor/harbor to v2.15.1 Some checks are pending renovate/stability-days Updates have not met minimum release age requirement Details lint-test-helm / validate-kubeconform (pull_request) Has been skipped Details lint-test-helm / lint-helm (pull_request) Successful in 2m5s Details	2026-05-07 20:42:12 +00:00
Alex Lebens	77029c38bd	Merge pull request 'chore(deps): update headlamp to v0.42.0' (#6620 ) from renovate/unified-headlamp into main Some checks are pending lint-test-helm / lint-helm (push) Successful in 37s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Has started running Details Reviewed-on: #6620	2026-05-07 20:40:15 +00:00
Renovate Bot	53d58eacd0	chore(deps): update headlamp to v0.42.0	2026-05-07 20:40:15 +00:00
Alex Lebens	aa825f8400	Merge pull request 'chore(deps): update komodo to v2.2.0' (#6628 ) from renovate/unified-komodo into main Some checks failed lint-test-docker / lint-docker-compose (push) Failing after 1s Details lint-test-helm / lint-helm (push) Failing after 0s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Failing after 0s Details Reviewed-on: #6628	2026-05-07 20:38:19 +00:00
Renovate Bot	1a13f7afc1	chore(deps): update komodo to v2.2.0	2026-05-07 20:38:19 +00:00
Renovate Bot	d622e571ea	Merge pull request 'chore(deps): update dependency frederikemmer/medialyze to v0.10.2' (#6643 ) from renovate/unified-medialyze into main Some checks failed renovate / renovate (push) Failing after 0s Details lint-test-helm / lint-helm (push) Successful in 22s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details	2026-05-07 20:28:27 +00:00
Renovate Bot	46c398d7fc	chore(deps): update dependency frederikemmer/medialyze to v0.10.2 Some checks are pending renovate/stability-days Updates have not met minimum release age requirement Details lint-test-helm / lint-helm (pull_request) Successful in 27s Details lint-test-helm / validate-kubeconform (pull_request) Successful in 25s Details render-manifests / render-manifests (pull_request) Successful in 38s Details	2026-05-07 20:28:11 +00:00
Renovate Bot	96d10c4bc7	Merge pull request 'chore(deps): update dependency element-hq/synapse to v1.152.1' (#6639 ) from renovate/unified-synapse into main Some checks failed lint-test-helm / lint-helm (push) Successful in 27s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Has been cancelled Details	2026-05-07 20:25:17 +00:00
Renovate Bot	bf78c017ce	chore(deps): update dependency element-hq/synapse to v1.152.1	2026-05-07 20:25:17 +00:00
Renovate Bot	ea36d2fefe	Merge pull request 'chore(deps): update clickhouse/clickhouse-server docker tag to v26.4.2' (#6638 ) from renovate/unified-clickhouse-server into main Some checks failed lint-test-helm / lint-helm (push) Failing after 1s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Failing after 0s Details	2026-05-07 20:24:58 +00:00
Renovate Bot	3538496fad	chore(deps): update clickhouse/clickhouse-server docker tag to v26.4.2 Some checks failed renovate/stability-days Updates have not met minimum release age requirement Details lint-test-helm / lint-helm (pull_request) Successful in 27s Details render-manifests / render-manifests (pull_request) Successful in 50s Details lint-test-helm / validate-kubeconform (pull_request) Failing after 10m2s Details	2026-05-07 20:24:45 +00:00
Alex Lebens	72c2183ca3	Merge pull request 'feat: migrate to backblaze' (#6636 ) from tmp/rclone-7 into main Some checks failed lint-test-helm / lint-helm (push) Successful in 25s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Has been cancelled Details Reviewed-on: #6636	2026-05-07 20:20:07 +00:00
Alex Lebens	458e8f0e4e	fix: wrong alias All checks were successful lint-test-helm / lint-helm (pull_request) Successful in 22s Details lint-test-helm / validate-kubeconform (pull_request) Successful in 22s Details render-manifests / render-manifests (pull_request) Successful in 49s Details	2026-05-07 15:18:01 -05:00
Alex Lebens	3737e2e60a	feat: migrate to backblaze Some checks failed lint-test-helm / lint-helm (pull_request) Failing after 26s Details lint-test-helm / validate-kubeconform (pull_request) Has been skipped Details	2026-05-07 15:13:54 -05:00
Renovate Bot	32c282b40e	Merge pull request 'chore(deps): update helm release generic-device-plugin to v0.20.33' (#6633 ) from renovate/unified-generic-device-plugin into main All checks were successful lint-test-helm / lint-helm (push) Successful in 25s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 31m16s Details	2026-05-07 19:58:02 +00:00
Renovate Bot	5d63008a0f	chore(deps): update helm release generic-device-plugin to v0.20.33	2026-05-07 19:58:02 +00:00
Renovate Bot	9606d07e77	Merge pull request 'chore(deps): update helm release argo-cd to v9.5.12' (#6632 ) from renovate/unified-argo-cd into main Some checks failed lint-test-helm / lint-helm (push) Failing after 1s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Has been cancelled Details	2026-05-07 19:57:19 +00:00
Renovate Bot	265b64d398	chore(deps): update helm release argo-cd to v9.5.12	2026-05-07 19:57:19 +00:00
Renovate Bot	75f83a6f4f	Merge pull request 'chore(deps): update helm release alloy to v1.8.1' (#6631 ) from renovate/unified-alloy into main Some checks failed lint-test-helm / lint-helm (push) Failing after 0s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Has been cancelled Details	2026-05-07 19:56:42 +00:00
Renovate Bot	d2492a10ad	chore(deps): update helm release alloy to v1.8.1	2026-05-07 19:56:42 +00:00
Renovate Bot	d97cc53a94	Merge pull request 'chore(deps): update goharbor/registry-photon docker tag to v2.15.1' (#6630 ) from renovate/unified-registry-photon into main Some checks failed lint-test-helm / lint-helm (push) Failing after 1s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Has been cancelled Details	2026-05-07 19:55:59 +00:00
Renovate Bot	8c1336c137	chore(deps): update goharbor/registry-photon docker tag to v2.15.1	2026-05-07 19:55:59 +00:00
Renovate Bot	f85f4bed30	Merge pull request 'chore(deps): update ghcr.io/renovatebot/renovate docker tag to v43.169.3' (#6629 ) from renovate/unified-renovate into main Some checks failed renovate / renovate (push) Has been cancelled Details	2026-05-07 19:55:33 +00:00
Renovate Bot	3a144c77a7	chore(deps): update ghcr.io/renovatebot/renovate docker tag to v43.169.3	2026-05-07 19:55:04 +00:00
Renovate Bot	f8e26e461d	Merge pull request 'chore(deps): update ghcr.io/renovatebot/renovate docker tag to v43.169.2' (#6627 ) from renovate/unified-renovate into main All checks were successful renovate / renovate (push) Successful in 18m3s Details	2026-05-07 19:04:10 +00:00
Renovate Bot	05750d3f2e	chore(deps): update ghcr.io/renovatebot/renovate docker tag to v43.169.2	2026-05-07 19:03:45 +00:00
Renovate Bot	25b5254d91	Merge pull request 'chore(deps): update ghcr.io/renovatebot/renovate docker tag to v43.169.1' (#6626 ) from renovate/unified-renovate into main All checks were successful renovate / renovate (push) Successful in 5m16s Details	2026-05-07 18:04:09 +00:00
Renovate Bot	f00eb8103f	chore(deps): update ghcr.io/renovatebot/renovate docker tag to v43.169.1	2026-05-07 18:03:42 +00:00
Renovate Bot	db4a3ae12e	Merge pull request 'chore(deps): update searxng/searxng:latest docker digest to ae45570' (#6625 ) from renovate/unified-searxng into main All checks were successful lint-test-helm / lint-helm (push) Successful in 2m25s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 4m29s Details	2026-05-07 15:03:49 +00:00
Renovate Bot	33425e55fa	chore(deps): update searxng/searxng:latest docker digest to ae45570 All checks were successful lint-test-helm / lint-helm (pull_request) Successful in 33s Details lint-test-helm / validate-kubeconform (pull_request) Has been skipped Details render-manifests / render-manifests (pull_request) Successful in 52s Details	2026-05-07 15:03:16 +00:00
Renovate Bot	1d7faeaee9	Merge pull request 'chore(deps): update ghcr.io/renovatebot/renovate docker tag to v43.169.0' (#6624 ) from renovate/unified-renovate into main All checks were successful renovate / renovate (push) Successful in 4m14s Details render-manifests / render-manifests (push) Successful in 4m49s Details	2026-05-07 14:04:45 +00:00
Renovate Bot	72c896c5d7	chore(deps): update ghcr.io/renovatebot/renovate docker tag to v43.169.0	2026-05-07 14:04:45 +00:00
Renovate Bot	f2a3c5921f	Merge pull request 'chore(deps): update ghcr.io/element-hq/synapse docker tag to v1.152.1' (#6622 ) from renovate/unified-synapse into main Some checks failed lint-test-helm / lint-helm (push) Successful in 30s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Has been cancelled Details	2026-05-07 14:04:04 +00:00
Renovate Bot	d7a210a585	chore(deps): update ghcr.io/element-hq/synapse docker tag to v1.152.1	2026-05-07 14:04:04 +00:00
Renovate Bot	dcd9525f70	Merge pull request 'chore(deps): update searxng/searxng:latest docker digest to 88abccd' (#6621 ) from renovate/unified-searxng into main Some checks failed renovate / renovate (push) Failing after 1s Details lint-test-helm / validate-kubeconform (push) Has been cancelled Details lint-test-helm / lint-helm (push) Has been cancelled Details	2026-05-07 14:03:42 +00:00
Renovate Bot	9732f5afa3	chore(deps): update searxng/searxng:latest docker digest to 88abccd All checks were successful render-manifests / render-manifests (pull_request) Successful in 1m0s Details lint-test-helm / lint-helm (pull_request) Successful in 1m46s Details lint-test-helm / validate-kubeconform (pull_request) Has been skipped Details	2026-05-07 14:03:28 +00:00
Renovate Bot	dfb5a0f88b	Merge pull request 'chore(deps): update ghcr.io/renovatebot/renovate docker tag to v43.168.6' (#6619 ) from renovate/unified-renovate into main All checks were successful renovate / renovate (push) Successful in 5m11s Details	2026-05-07 12:04:06 +00:00
Renovate Bot	ce6b048252	chore(deps): update ghcr.io/renovatebot/renovate docker tag to v43.168.6	2026-05-07 12:04:06 +00:00
Renovate Bot	374e3ec909	Merge pull request 'chore(deps): update searxng/searxng:latest docker digest to 10e87bf' (#6618 ) from renovate/unified-searxng into main Some checks failed renovate / renovate (push) Failing after 0s Details lint-test-helm / lint-helm (push) Successful in 19s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details	2026-05-07 12:03:45 +00:00
Renovate Bot	eaf748c2b6	chore(deps): update searxng/searxng:latest docker digest to 10e87bf Some checks failed lint-test-helm / lint-helm (pull_request) Successful in 25s Details lint-test-helm / validate-kubeconform (pull_request) Failing after 0s Details render-manifests / render-manifests (pull_request) Successful in 2m33s Details	2026-05-07 12:03:22 +00:00
Renovate Bot	3650ce0ebe	Merge pull request 'chore(deps): update loki docker tag to v13.6.1' (#6551 ) from renovate/unified-loki into main All checks were successful lint-test-helm / lint-helm (push) Successful in 32s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 4m31s Details	2026-05-07 05:02:27 +00:00
Renovate Bot	707507e689	chore(deps): update loki docker tag to v13.6.1 All checks were successful lint-test-helm / lint-helm (pull_request) Successful in 29s Details lint-test-helm / validate-kubeconform (pull_request) Successful in 24s Details render-manifests / render-manifests (pull_request) Successful in 1m6s Details	2026-05-07 04:06:37 +00:00
Renovate Bot	fa7d23347b	Merge pull request 'chore(deps): update libation to v13.4.1' (#6531 ) from renovate/unified-libation into main All checks were successful lint-test-helm / lint-helm (push) Successful in 16s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 20m12s Details	2026-05-07 04:03:25 +00:00
Renovate Bot	958e355b9c	chore(deps): update libation to v13.4.1 All checks were successful lint-test-helm / lint-helm (pull_request) Successful in 2m12s Details lint-test-helm / validate-kubeconform (pull_request) Successful in 1m22s Details render-manifests / render-manifests (pull_request) Successful in 45s Details	2026-05-07 03:05:01 +00:00