chore(deps): update ghcr.io/haveagitgat/tdarr docker tag to v2.65.01

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [harbor.alexlebens.net/images/site-documentation](https://gitea.alexlebens.dev/alexlebens/site-documentation) | minor | `0.5.0` → `0.6.0` |

---

### Release Notes

<details>
<summary>alexlebens/site-documentation (harbor.alexlebens.net/images/site-documentation)</summary>

### [`v0.6.0`](https://gitea.alexlebens.dev/alexlebens/site-documentation/blob/HEAD/CHANGELOG.md#060-2026-03-23)

[Compare Source](https://gitea.alexlebens.dev/alexlebens/site-documentation/compare/0.5.0...0.6.0)

##### Features

- add more apps ([ce3d1a4](ce3d1a4a27))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My44NC4yIiwidXBkYXRlZEluVmVyIjoiNDMuODQuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=-->

Reviewed-on: #5001
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>

clusters/cl01tl/helm/argo-workflows/Chart.yaml

@@ -11,7 +11,6 @@ home: https://docs.alexlebens.dev/applications/argo-workflows/
 sources:
   - https://github.com/argoproj/argo-workflows
   - https://github.com/argoproj/argo-events
-  - https://github.com/cloudnative-pg/cloudnative-pg
   - https://github.com/argoproj/argo-helm/tree/main/charts/argo-workflows
   - https://github.com/argoproj/argo-helm/tree/main/charts/argo-events
   - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/postgres-cluster

clusters/cl01tl/helm/argocd/values.yaml

@@ -103,7 +103,7 @@ argo-cd:
       enabled: true
       image:
         repository: haproxy
-        tag: 3.0.19-alpine@sha256:ec781a129b8c4837c76fcb26f7b585708966873b536b9d7aa7cbcc342ae8a76f
+        tag: 3.3.6-alpine@sha256:744be2dca649a44d490a4c565d36968d19482dd387f1bdd44c168f4322bc6b1e
       resources:
         requests:
           cpu: 10m

clusters/cl01tl/helm/audiobookshelf/Chart.yaml

@@ -7,11 +7,14 @@ keywords:
   - books
   - podcasts
   - audiobooks
-home: https://wiki.alexlebens.dev/s/d4d6719f-cd1c-4b6e-b78e-2d2d7a5097d7
+home: https://docs.alexlebens.dev/applications/audiobookshelf/
 sources:
   - https://github.com/advplyr/audiobookshelf
+  - https://github.com/caronc/apprise
   - https://github.com/advplyr/audiobookshelf/pkgs/container/audiobookshelf
+  - https://github.com/caronc/apprise-api/pkgs/container/apprise
   - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
+  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/volsync-target
 maintainers:
   - name: alexlebens
 dependencies:

clusters/cl01tl/helm/audiobookshelf/templates/external-secret.yaml

@@ -14,8 +14,5 @@ spec:
   data:
     - secretKey: ntfy-url
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cl01tl/audiobookshelf/apprise
-        metadataPolicy: None
         property: ntfy-url

clusters/cl01tl/helm/audiobookshelf/values.yaml

@@ -4,28 +4,25 @@ audiobookshelf:
       type: deployment
       replicas: 1
       strategy: Recreate
-      revisionHistoryLimit: 3
       containers:
         main:
           image:
             repository: ghcr.io/advplyr/audiobookshelf
-            tag: 2.33.1
-            pullPolicy: IfNotPresent
+            tag: 2.33.1@sha256:a4a5841bba093d81e5f4ad1eaedb4da3fda6dbb2528c552349da50ad1f7ae708
           env:
             - name: TZ
-              value: US/Central
+              value: America/Chicago
           resources:
             requests:
               cpu: 10m
-              memory: 128Mi
+              memory: 200Mi
         apprise-api:
           image:
-            repository: caronc/apprise
-            tag: v1.3.2
-            pullPolicy: IfNotPresent
+            repository: ghcr.io/caronc/apprise
+            tag: v1.3.2@sha256:1aafc2118b6eae5d70d17831d9a8a52adee7104fd6f2bb018e6421664699c903
           env:
             - name: TZ
-              value: US/Central
+              value: America/Chicago
             - name: PGID
               value: "1000"
             - name: PUID
@@ -41,10 +38,6 @@ audiobookshelf:
                 secretKeyRef:
                   name: audiobookshelf-apprise-config
                   key: ntfy-url
-          resources:
-            requests:
-              cpu: 10m
-              memory: 128Mi
   service:
     main:
       controller: main
@@ -82,11 +75,8 @@ audiobookshelf:
         - audiobookshelf.alexlebens.net
       rules:
         - backendRefs:
-            - group: ''
-              kind: Service
-              name: audiobookshelf
+            - name: audiobookshelf
               port: 80
-              weight: 100
           matches:
             - path:
                 type: PathPrefix
@@ -97,7 +87,6 @@ audiobookshelf:
       storageClass: ceph-block
       accessMode: ReadWriteOnce
       size: 2Gi
-      retain: true
       advancedMounts:
         main:
           main:
@@ -108,7 +97,6 @@ audiobookshelf:
       storageClass: ceph-block
       accessMode: ReadWriteOnce
       size: 10Gi
-      retain: true
       advancedMounts:
         main:
           main:

clusters/cl01tl/helm/authentik/Chart.yaml

@@ -6,17 +6,14 @@ keywords:
   - authentik
   - sso
   - oidc
-  - ldap
-  - idp
   - authentication
-home: https://wiki.alexlebens.dev/s/45ca5171-581f-41d2-b6fb-2b0915029a2d
+home: https://docs.alexlebens.dev/applications/authentik/
 sources:
   - https://github.com/goauthentik/authentik
-  - https://github.com/cloudflare/cloudflared
-  - https://github.com/cloudnative-pg/cloudnative-pg
   - https://github.com/goauthentik/helm
   - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/cloudflared
   - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/postgres-cluster
+  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/valkey
 maintainers:
   - name: alexlebens
 dependencies:

clusters/cl01tl/helm/authentik/templates/external-secret.yaml

@@ -14,8 +14,5 @@ spec:
   data:
     - secretKey: key
       remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
         key: /cl01tl/authentik/key
-        metadataPolicy: None
         property: key

clusters/cl01tl/helm/authentik/values.yaml

@@ -30,8 +30,23 @@ authentik:
     redis:
       host: authentik-valkey
   server:
-    name: server
-    replicas: 1
+    replicas: 2
+    resources:
+      requests:
+        cpu: 100m
+        memory: 700Mi
+    livenessProbe:
+      failureThreshold: 3
+      initialDelaySeconds: 15
+      periodSeconds: 10
+      successThreshold: 1
+      timeoutSeconds: 5
+    readinessProbe:
+      failureThreshold: 3
+      initialDelaySeconds: 15
+      periodSeconds: 10
+      successThreshold: 1
+      timeoutSeconds: 5
     metrics:
       enabled: true
       serviceMonitor:
@@ -39,8 +54,6 @@ authentik:
     route:
       main:
         enabled: true
-        apiVersion: gateway.networking.k8s.io/v1
-        kind: HTTPRoute
         hostnames:
           - authentik.alexlebens.net
         parentRefs:
@@ -48,21 +61,20 @@ authentik:
             kind: Gateway
             name: traefik-gateway
             namespace: traefik
-        httpsRedirect: false
-        matches:
-          - path:
-              type: PathPrefix
-              value: /
   worker:
     name: worker
-    replicas: 1
+    replicas: 2
+    resources:
+      requests:
+        cpu: 100m
+        memory: 512Mi
+    metrics:
+      enabled: true
+      serviceMonitor:
+        enabled: true
   prometheus:
     rules:
       enabled: true
-  postgresql:
-    enabled: false
-  redis:
-    enabled: false
 postgres-18-cluster:
   mode: recovery
   recovery:
@@ -76,32 +88,9 @@ postgres-18-cluster:
         destinationBucket: postgres-backups
         externalSecretCredentialPath: /garage/home-infra/postgres-backups
         isWALArchiver: true
-      # - name: garage-remote
-      #   index: 1
-      #   destinationBucket: postgres-backups
-      #   externalSecretCredentialPath: /garage/home-infra/postgres-backups
-      #   retentionPolicy: "90d"
-      #   data:
-      #     compression: bzip2
-      # - name: external
-      #   index: 1
-      #   endpointURL: https://nyc3.digitaloceanspaces.com
-      #   destinationBucket: postgres-backups-ce540ddf106d186bbddca68a
-      #   externalSecretCredentialPath: /garage/home-infra/postgres-backups
-      #   isWALArchiver: false
     scheduledBackups:
       - name: live-backup
         suspend: false
         immediate: true
         schedule: "0 5 14 * * *"
         backupName: garage-local
-      # - name: weekly-backup
-      #   suspend: true
-      #   immediate: true
-      #   schedule: "0 0 4 * * SAT"
-      #   backupName: garage-remote
-      # - name: daily-backup
-      #   suspend: true
-      #   immediate: true
-      #   schedule: "0 0 0 * * *"
-      #   backupName: external

clusters/cl01tl/helm/backrest/Chart.yaml

@@ -5,11 +5,12 @@ description: backrest
 keywords:
   - backrest
   - backup
-home: https://wiki.alexlebens.dev/
+home: https://docs.alexlebens.dev/applications/backrest/
 sources:
   - https://github.com/garethgeorge/backrest
-  - https://hub.docker.com/r/garethgeorge/backrest
+  - https://github.com/garethgeorge/backrest/pkgs/container/backrest
   - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
+  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/volsync-target
 maintainers:
   - name: alexlebens
 dependencies:

clusters/cl01tl/helm/backrest/values.yaml

@@ -7,9 +7,8 @@ backrest:
       containers:
         main:
           image:
-            repository: garethgeorge/backrest
-            tag: v1.12.1
-            pullPolicy: IfNotPresent
+            repository: ghcr.io/garethgeorge/backrest
+            tag: v1.12.1@sha256:f4d34bd6fa985d13bdb6c01c5d8727e07708899afa9567d800808357d77b9fb0
           env:
             - name: TZ
               value: America/Chicago
@@ -24,7 +23,7 @@ backrest:
           resources:
             requests:
               cpu: 10m
-              memory: 256Mi
+              memory: 80Mi
   service:
     main:
       controller: main
@@ -33,6 +32,19 @@ backrest:
           port: 80
           targetPort: 9898
           protocol: TCP
+  serviceMonitor:
+    main:
+      selector:
+        matchLabels:
+          app.kubernetes.io/name: backrest
+          app.kubernetes.io/instance: backrest
+      serviceName: '{{ include "bjw-s.common.lib.chart.names.fullname" $ }}'
+      endpoints:
+        - port: http
+          scheme: http
+          path: /metrics
+          interval: 300s
+          scrapeTimeout: 15s
   route:
     main:
       kind: HTTPRoute
@@ -45,11 +57,8 @@ backrest:
         - backrest.alexlebens.net
       rules:
         - backendRefs:
-            - group: ''
-              kind: Service
-              name: backrest
+            - name: backrest
               port: 80
-              weight: 100
           matches:
             - path:
                 type: PathPrefix
@@ -60,7 +69,6 @@ backrest:
       storageClass: ceph-block
       accessMode: ReadWriteOnce
       size: 10Gi
-      retain: true
       advancedMounts:
         main:
           main:
@@ -71,7 +79,6 @@ backrest:
       storageClass: ceph-block
       accessMode: ReadWriteOnce
       size: 1Gi
-      retain: true
       advancedMounts:
         main:
           main:

clusters/cl01tl/helm/bazarr/Chart.yaml

@@ -4,14 +4,14 @@ version: 1.0.0
 description: Bazarr
 keywords:
   - bazarr
-  - servarr
   - subtitles
-home: https://wiki.alexlebens.dev/s/
+home: https://docs.alexlebens.dev/applications/bazarr/
 sources:
   - https://github.com/morpheus65535/bazarr
   - https://github.com/linuxserver/docker-bazarr
   - https://github.com/linuxserver/docker-bazarr/pkgs/container/bazarr
   - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
+  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/volsync-target
 maintainers:
   - name: alexlebens
 dependencies:

clusters/cl01tl/helm/bazarr/values.yaml

@@ -4,7 +4,6 @@ bazarr:
       type: deployment
       replicas: 1
       strategy: Recreate
-      revisionHistoryLimit: 3
       pod:
         securityContext:
           runAsUser: 1000
@@ -16,10 +15,9 @@ bazarr:
           image:
             repository: ghcr.io/linuxserver/bazarr
             tag: 1.5.6@sha256:05f9d5b24884f37120453dc1a008a47be244eebec32099ae1bd29032e75b67aa
-            pullPolicy: IfNotPresent
           env:
             - name: TZ
-              value: US/Central
+              value: America/Chicago
             - name: PUID
               value: 1000
             - name: PGID
@@ -48,11 +46,8 @@ bazarr:
         - bazarr.alexlebens.net
       rules:
         - backendRefs:
-            - group: ''
-              kind: Service
-              name: bazarr
+            - name: bazarr
               port: 80
-              weight: 100
           matches:
             - path:
                 type: PathPrefix
@@ -63,7 +58,6 @@ bazarr:
       storageClass: ceph-block
       accessMode: ReadWriteOnce
       size: 5Gi
-      retain: true
       advancedMounts:
         main:
           main:

clusters/cl01tl/helm/blocky/Chart.yaml

@@ -5,11 +5,12 @@ description: Blocky
 keywords:
   - blocky
   - dns
-home: https://wiki.alexlebens.dev/s/cf70113d-20bc-48ad-afb8-1e22ed3fd62a
+home: https://docs.alexlebens.dev/applications/blocky/
 sources:
   - https://github.com/0xERR0R/blocky
-  - https://hub.docker.com/r/spx01/blocky
+  - https://github.com/0xERR0R/blocky/pkgs/container/blocky
   - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
+  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/valkey
 maintainers:
   - name: alexlebens
 dependencies:

clusters/cl01tl/helm/blocky/values.yaml

@@ -4,20 +4,18 @@ blocky:
       type: deployment
       replicas: 3
       strategy: RollingUpdate
-      revisionHistoryLimit: 3
       containers:
         main:
           image:
             repository: ghcr.io/0xerr0r/blocky
             tag: v0.29.0@sha256:a6d99f323d3036a99a3767a52ad612f4d8f3f31167492bfc14d4ea57b24cdfd0
-            pullPolicy: IfNotPresent
           env:
             - name: TZ
-              value: US/Central
+              value: America/Chicago
           resources:
             requests:
               cpu: 10m
-              memory: 128Mi
+              memory: 90Mi
   configMaps:
     config:
       enabled: true

clusters/cl01tl/helm/site-documentation/values.yaml

@@ -11,7 +11,7 @@ site-documentation:
         main:
           image:
             repository: harbor.alexlebens.net/images/site-documentation
-            tag: 0.3.0
+            tag: 0.6.0
             pullPolicy: IfNotPresent
           resources:
             requests:

clusters/cl01tl/helm/tdarr/values.yaml

@@ -9,7 +9,7 @@ tdarr:
         main:
           image:
             repository: ghcr.io/haveagitgat/tdarr
-            tag: 2.64.02
+            tag: 2.65.01
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/unpoller/Chart.yaml

@@ -21,4 +21,4 @@ dependencies:
     version: 4.6.2
 icon: https://camo.githubusercontent.com/c5d07a5b3acfeac8e1c25bf56f440ffe032b86e4e7f15de82357f022a43fc927/68747470733a2f2f756e706f6c6c65722e636f6d2f696d672f6c6f676f2e706e67
 # renovate: datasource=github-releases depName=unpoller/unpoller
-appVersion: v2.34.0
+appVersion: v2.35.0

clusters/cl01tl/helm/unpoller/values.yaml

@@ -9,7 +9,7 @@ unpoller:
         main:
           image:
             repository: ghcr.io/unpoller/unpoller
-            tag: v2.34.0
+            tag: v2.35.0
             pullPolicy: IfNotPresent
           env:
             - name: UP_UNIFI_CONTROLLER_0_SAVE_ALARMS

renovate.json

@@ -22,7 +22,8 @@
       ],
       "matchStrings": [
         "#\\s*renovate:\\s*datasource=(?<datasource>.*?) depName=(?<depName>.*?)\\s+appVersion:\\s*[\"']?(?<currentValue>[^\"'\\s]+)[\"']?"
-      ]
+      ],
+      "versioningTemplate": "{{#if versioning}}{{{versioning}}}{{else}}semver-coerced{{/if}}"
     },
     {
       "description": "Update images in templates",