Update Helm release rook-ceph to v1.19.0 (#3342)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [rook-ceph](https://github.com/rook/rook) | minor | `v1.18.9` → `v1.19.0` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

### Release Notes

<details>
<summary>rook/rook (rook-ceph)</summary>

### [`v1.19.0`](https://github.com/rook/rook/releases/tag/v1.19.0)

[Compare Source](https://github.com/rook/rook/compare/v1.18.9...v1.19.0)

### Upgrade Guide

To upgrade from previous versions of Rook, see the [Rook upgrade guide](https://rook.github.io/docs/rook/v1.19/Upgrade/rook-upgrade/).

### Breaking Changes

- The supported Kubernetes versions are v1.30 - v1.35
- The minimum supported Ceph version is v19.2.0. Rook v1.18 clusters running Ceph v18 must upgrade
  to Ceph v19.2.0 or higher before upgrading Rook.
- The behavior of the `activeStandby` property in the `CephFilesystem` CRD has changed. When set to `false`, the standby MDS daemon deployment will be scaled down and removed, rather than only disabling the standby cache while the daemon remains running.
- Helm: The `rook-ceph-cluster` chart has changed where the Ceph image is defined, to allow separate settings for the repository and tag. For more details, see the [Rook upgrade guide](https://rook.io/docs/rook/v1.19/Upgrade/rook-upgrade/#breaking-changes-in-v119).
- In external mode, when users provide a Ceph admin keyring to Rook, Rook will no longer create CSI Ceph clients automatically. This approach will provide more consistency to configure external mode clusters via the same external Python script.

### Features

- Experimental: NVMe over Fabrics (NVMe-oF) allows RBD volumes to be exposed and accessed via the NVMe/TCP protocol. This enables both Kubernetes pods within the cluster and external clients outside the cluster to connect to Ceph block storage using standard NVMe-oF initiators, providing high-performance block storage access over the network. See the [NVMe-oF Configuration Guide](https://rook.io/docs/rook/latest-release/Storage-Configuration/Block-Storage-RBD/nvme-of/) to get started.
- CephCSI v3.16 Integration:
  - NVMe-oF CSI driver for provisioning and mounting volumes over the NVMe over Fabrics protocol
  - Improved fencing for RBD and CephFS volumes during [node failure](https://rook.io/docs/rook/latest-release/Storage-Configuration/Block-Storage-RBD/block-storage/#node-loss)
  - Block volume usage statistics
  - Configurable block encryption cipher
- Experimental: Allow concurrent reconciles of the CephCluster CR when there multiple clusters being managed by the same Rook operator. Concurrency is enabled by increasing the operator setting `ROOK_RECONCILE_CONCURRENT_CLUSTERS` to a value greater than `1`.
- Improved logging with namespaced names for the controllers for more consistency in troubleshooting the rook operator log.

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi42OS4yIiwidXBkYXRlZEluVmVyIjoiNDIuNjkuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiY2hhcnQiXX0=-->

Reviewed-on: #3342
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>

clusters/cl01tl/helm/authentik/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 2025.12.1
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
+  version: 2.1.9
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.4.5
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.0.1
-digest: sha256:a473d3cc3e54c917f3d14c96f3de72e81940c82b3fbe6ce316e4d28a7bdcc56d
+digest: sha256:458e9967330768b68649da4af69773adba3aed1a04316b9e67ef19612381d4b9
-generated: "2026-01-16T18:05:21.607549312Z"
+generated: "2026-01-17T17:30:18.453482605Z"

clusters/cl01tl/helm/authentik/Chart.yaml

@@ -25,7 +25,7 @@ dependencies:
     repository: https://charts.goauthentik.io/
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.6
+    version: 2.1.9
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.4.5

clusters/cl01tl/helm/blocky/values.yaml

@@ -113,8 +113,8 @@ blocky:
               ceph                            IN      CNAME   traefik-cl01tl
               code-server                     IN      CNAME   traefik-cl01tl
               ephemera                        IN      CNAME   traefik-cl01tl
+              excalidraw                      IN      CNAME   traefik-cl01tl
               feishin                         IN      CNAME   traefik-cl01tl
-              fladder                         IN      CNAME   traefik-cl01tl
               garage-s3                       IN      CNAME   traefik-cl01tl
               garage-webui                    IN      CNAME   traefik-cl01tl
               gatus                           IN      CNAME   traefik-cl01tl
@@ -134,7 +134,6 @@ blocky:
               komodo                          IN      CNAME   traefik-cl01tl
               lidarr                          IN      CNAME   traefik-cl01tl
               lidatube                        IN      CNAME   traefik-cl01tl
-              listenarr                       IN      CNAME   traefik-cl01tl
               mail                            IN      CNAME   traefik-cl01tl
               navidrome                       IN      CNAME   traefik-cl01tl
               ntfy                            IN      CNAME   traefik-cl01tl
@@ -161,7 +160,6 @@ blocky:
               sonarr-4k                       IN      CNAME   traefik-cl01tl
               sonarr-anime                    IN      CNAME   traefik-cl01tl
               stalwart                        IN      CNAME   traefik-cl01tl
-              tautulli                        IN      CNAME   traefik-cl01tl
               tdarr                           IN      CNAME   traefik-cl01tl
               tubearchivist                   IN      CNAME   traefik-cl01tl
               vault                           IN      CNAME   traefik-cl01tl

clusters/cl01tl/helm/code-server/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
+  version: 2.1.9
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:c988504ea0627250cc060576beac292d3292b012cdcca615a4cbaaf5ee976f02
+digest: sha256:d243a4062bd69c3e02536dbc8f0da06f8607a373a772bf521fa16ae10df331b7
-generated: "2026-01-16T18:45:47.220901906Z"
+generated: "2026-01-17T17:30:30.693066904Z"

clusters/cl01tl/helm/code-server/Chart.yaml

@@ -22,7 +22,7 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.6
+    version: 2.1.9
   - name: volsync-target
     alias: volsync-target-config
     version: 0.7.0

clusters/cl01tl/helm/code-server/values.yaml

@@ -9,7 +9,7 @@ code-server:
         main:
           image:
             repository: ghcr.io/linuxserver/code-server
-            tag: 4.108.0@sha256:982ef207e723fe04d001a9cfe58c545913c8271ae9fd4cb036fa004bfcc33631
+            tag: 4.108.1@sha256:e9ed472ff25e12a5ee3562684d073b29e508e472ef54e3558e19bf4ff99ef858
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/directus/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
+  version: 2.1.9
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.4.5
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.0.1
-digest: sha256:a6c475943e21a16f1978f93b944d952641d0a69aa42022d6ab91c1296d44c3f5
+digest: sha256:9ae9e0cb222e7ac2fca2bfe5367a4b011b0c83c1a0f98a01342f37fad62c2fe1
-generated: "2026-01-16T18:45:59.110701786Z"
+generated: "2026-01-17T17:30:43.212095428Z"

clusters/cl01tl/helm/directus/Chart.yaml

@@ -23,7 +23,7 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.6
+    version: 2.1.9
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.4.5

clusters/cl01tl/helm/element-web/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 1.4.27
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
+  version: 2.1.9
-digest: sha256:b8b4e36fb88254e7575bd3aff60721fbf44a13af33eff949b6bc011facfcec62
+digest: sha256:ef4b5256d6b405f08f33ec1a2bbda9f8427fcac0c69accd04c19fb4fe1871047
-generated: "2026-01-08T23:02:24.62763032Z"
+generated: "2026-01-17T17:30:57.57289288Z"

clusters/cl01tl/helm/element-web/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     repository: https://ananace.gitlab.io/charts
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.6
+    version: 2.1.9
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/element.png
 # renovate: github=element-hq/element-web
 appVersion: v1.12.6

clusters/cl01tl/helm/excalidraw/Chart.lock

@@ -0,0 +1,6 @@
+dependencies:
+- name: app-template
+  repository: https://bjw-s-labs.github.io/helm-charts/
+  version: 4.6.2
+digest: sha256:e05d84dd266b8b456a8bc7f9a2bb3ab01f4ac926efd1a58cf405b0cdab343d3f
+generated: "2026-01-17T18:27:08.062835-06:00"

clusters/cl01tl/helm/excalidraw/Chart.yaml

@@ -0,0 +1,21 @@
+apiVersion: v2
+name: excalidraw
+version: 1.0.0
+description: Excalidraw
+keywords:
+  - excalidraw
+home: https://wiki.alexlebens.dev/
+sources:
+  - https://github.com/excalidraw/excalidraw
+  - https://hub.docker.com/r/excalidraw/excalidraw
+  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
+maintainers:
+  - name: alexlebens
+dependencies:
+  - name: app-template
+    alias: excalidraw
+    repository: https://bjw-s-labs.github.io/helm-charts/
+    version: 4.6.2
+icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/excalidraw.png
+# renovate: github=excalidraw/excalidraw
+appVersion: 0.6.0

clusters/cl01tl/helm/excalidraw/values.yaml

@@ -0,0 +1,51 @@
+excalidraw:
+  controllers:
+    main:
+      type: deployment
+      replicas: 1
+      strategy: Recreate
+      revisionHistoryLimit: 3
+      containers:
+        main:
+          image:
+            repository: excalidraw/excalidraw
+            tag: latest@sha256:3c2513e830bb6e195147c05b34ecf8393d0ba2b1cc86e93b407a5777d6135c6c
+            pullPolicy: IfNotPresent
+          env:
+            - name: NODE_ENV
+              value: production
+            - name: TZ
+              value: America/Chicago
+          resources:
+            requests:
+              cpu: 10m
+              memory: 128Mi
+  service:
+    main:
+      controller: main
+      ports:
+        http:
+          port: 80
+          targetPort: 80
+          protocol: HTTP
+  route:
+    main:
+      kind: HTTPRoute
+      parentRefs:
+        - group: gateway.networking.k8s.io
+          kind: Gateway
+          name: traefik-gateway
+          namespace: traefik
+      hostnames:
+        - excalidraw.alexlebens.net
+      rules:
+        - backendRefs:
+            - group: ''
+              kind: Service
+              name: excalidraw
+              port: 80
+              weight: 100
+          matches:
+            - path:
+                type: PathPrefix
+                value: /

clusters/cl01tl/helm/freshrss/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
+  version: 2.1.9
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.4.5
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:fa0354899549c2bd40310f138126980825046d0d6d71acd7eb7ad121d94f8ccf
+digest: sha256:ded65efcf83f3c0cd3497839a1beddbc616081c286bdac6f584353813e7c8da8
-generated: "2026-01-16T18:46:20.598104939Z"
+generated: "2026-01-17T17:31:12.045290099Z"

clusters/cl01tl/helm/freshrss/Chart.yaml

@@ -23,7 +23,7 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.6
+    version: 2.1.9
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.4.5

clusters/cl01tl/helm/gatus/values.yaml

@@ -131,9 +131,6 @@ gatus:
       - name: jellyfin
         url: https://jellyfin.alexlebens.net
         <<: *defaults
-      - name: fladder
-        url: https://fladder.alexlebens.net
-        <<: *defaults
       - name: tubearchivist
         url: https://tubearchivist.alexlebens.net
         <<: *defaults
@@ -173,6 +170,9 @@ gatus:
       - name: kiwix
         url: https://kiwix.alexlebens.net
         <<: *defaults
+      - name: excalidraw
+        url: https://excalidraw.alexlebens.net
+        <<: *defaults
       - name: gitea
         url: https://gitea.alexlebens.net
         <<: *defaults
@@ -206,9 +206,6 @@ gatus:
       - name: alertmanager
         url: https://alertmanager.alexlebens.net
         <<: *defaults
-      - name: tautulli
-        url: https://tautulli.alexlebens.net
-        <<: *defaults
       - name: jellystat
         url: https://jellystat.alexlebens.net
         <<: *defaults
@@ -325,9 +322,6 @@ gatus:
       - name: shelfmark
         url: https://shelfmark.alexlebens.net
         <<: *defaults
-      - name: listenarr
-        url: https://listenarr.alexlebens.net
-        <<: *defaults
       - name: www
         url: https://www.alexlebens.dev
         <<: *defaults

clusters/cl01tl/helm/generic-device-plugin/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: generic-device-plugin
   repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-  version: 0.20.14
+  version: 0.20.17
-digest: sha256:fdb8cb0fae6f184b7d0396cf75cbd1ce8611904e4bf7c973ed6dd50e740f90d2
+digest: sha256:878766891eee5b4cea332c5eae87fc7fbd7eb7bfea90b408c48666e840b81408
-generated: "2026-01-14T00:04:49.992859554Z"
+generated: "2026-01-17T17:39:58.807224966Z"

clusters/cl01tl/helm/generic-device-plugin/Chart.yaml

@@ -15,6 +15,6 @@ maintainers:
 dependencies:
   - name: generic-device-plugin
     repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-    version: 0.20.14
+    version: 0.20.17
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 appVersion: 1.0.0

clusters/cl01tl/helm/gitea/Chart.lock

@@ -7,10 +7,10 @@ dependencies:
   version: 0.2.1
 - name: meilisearch
   repository: https://meilisearch.github.io/meilisearch-kubernetes
-  version: 0.21.0
+  version: 0.23.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
+  version: 2.1.9
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.4.5
@@ -23,5 +23,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:f38463ec7a583f7f47e76ae53d55d436657b834f70d34695f8347f640202ce46
+digest: sha256:d9faaa7a84d8d37c0bb1836dcd64e59368edf957d32a0db568d750f1136d7e4a
-generated: "2026-01-15T22:13:17.229320298Z"
+generated: "2026-01-20T16:01:37.816523129Z"

clusters/cl01tl/helm/gitea/Chart.yaml

@@ -32,11 +32,11 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
     version: 0.2.1
   - name: meilisearch
-    version: 0.21.0
+    version: 0.23.0
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.6
+    version: 2.1.9
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.4.5

clusters/cl01tl/helm/home-assistant/values.yaml

@@ -9,7 +9,7 @@ home-assistant:
         main:
           image:
             repository: ghcr.io/home-assistant/home-assistant
-            tag: 2026.1.1
+            tag: 2026.1.2
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -21,7 +21,7 @@ home-assistant:
         code-server:
           image:
             repository: ghcr.io/linuxserver/code-server
-            tag: 4.108.0@sha256:982ef207e723fe04d001a9cfe58c545913c8271ae9fd4cb036fa004bfcc33631
+            tag: 4.108.1@sha256:e9ed472ff25e12a5ee3562684d073b29e508e472ef54e3558e19bf4ff99ef858
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/homepage-dev/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
+  version: 2.1.9
-digest: sha256:d38a91baca59883b376f95fb9105bb3e38877f38e38c60196f5a44f30953f859
+digest: sha256:3dd7439a8874fcf8b12754907f187149287a2db04c5b9a595d32e6b64a5482db
-generated: "2026-01-16T18:46:54.599835994Z"
+generated: "2026-01-17T17:31:46.477375094Z"

clusters/cl01tl/helm/homepage-dev/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.6
+    version: 2.1.9
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/homepage.png
 # renovate: github=gethomepage/homepage
 appVersion: v1.8.0

clusters/cl01tl/helm/homepage-dev/values.yaml

@@ -11,7 +11,7 @@ homepage:
         main:
           image:
             repository: ghcr.io/gethomepage/homepage
-            tag: v1.8.0
+            tag: v1.9.0
             pullPolicy: IfNotPresent
           env:
             - name: HOMEPAGE_ALLOWED_HOSTS

clusters/cl01tl/helm/homepage/values.yaml

@@ -15,7 +15,7 @@ homepage:
         main:
           image:
             repository: ghcr.io/gethomepage/homepage
-            tag: v1.8.0
+            tag: v1.9.0
             pullPolicy: IfNotPresent
           env:
             - name: HOMEPAGE_ALLOWED_HOSTS
@@ -147,12 +147,6 @@ homepage:
                   href: https://yamtrack.alexlebens.net
                   siteMonitor: http://yamtrack.yamtrack:80
                   statusStyle: dot
-              - Movies and TV (Alt):
-                  icon: sh-fladder.webp
-                  description: Fladder, Jellyfin UI
-                  href: https://fladder.alexlebens.net
-                  siteMonitor: http://fladder.jellyfin:80
-                  statusStyle: dot
               - Movies and TV:
                   icon: sh-jellyfin.webp
                   description: Jellyfin
@@ -287,6 +281,12 @@ homepage:
                   href: https://kiwix.alexlebens.net
                   siteMonitor: http://kiwix.kiwix:80
                   statusStyle: dot
+              - Draw:
+                  icon: sh-excalidraw.webp
+                  description: Excalidraw
+                  href: https://excalidraw.alexlebens.net
+                  siteMonitor: http://excalidraw.excalidraw:80
+                  statusStyle: dot
           - Code:
               - Code (Public):
                   icon: sh-gitea.webp
@@ -394,12 +394,6 @@ homepage:
                         query: prometheus_tsdb_storage_blocks_bytes
                         format:
                           type: bytes
-              - Tautulli:
-                  icon: sh-tautulli.webp
-                  description: Plex Monitoring
-                  href: https://tautulli.alexlebens.net
-                  siteMonitor: http://tautulli.tautulli:80
-                  statusStyle: dot
               - Jellystat:
                   icon: sh-jellystat.webp
                   description: Jellyfin Monitoring
@@ -692,12 +686,6 @@ homepage:
                   href: https://ephemera.alexlebens.net
                   siteMonitor: http://ephemera.ephemera:80
                   statusStyle: dot
-              - Listenarr:
-                  icon: sh-audiobookrequest.webp
-                  description: Audiobooks
-                  href: https://listenarr.alexlebens.net
-                  siteMonitor: http://listenarr.listenarr:80
-                  statusStyle: dot
           - Other Homes:
               - Dev:
                   icon: sh-homepage.webp

clusters/cl01tl/helm/jellyfin/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: meilisearch
   repository: https://meilisearch.github.io/meilisearch-kubernetes
-  version: 0.21.0
+  version: 0.23.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:8acf0b3c4d9ef049b6a2bf84fa68894bcb744476d1954f8e92ab709a1cdee3e2
+digest: sha256:c31127c41d18fc2dbd0cd89968ea7df28ddc2548e629c5861124eeaa5ba6b246
-generated: "2026-01-16T18:47:41.804376042Z"
+generated: "2026-01-20T16:01:53.343188952Z"

clusters/cl01tl/helm/jellyfin/Chart.yaml

@@ -25,7 +25,7 @@ dependencies:
     repository: https://bjw-s-labs.github.io/helm-charts/
     version: 4.6.2
   - name: meilisearch
-    version: 0.21.0
+    version: 0.23.0
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/jellyfin/values.yaml

@@ -9,7 +9,7 @@ jellyfin:
         main:
           image:
             repository: ghcr.io/jellyfin/jellyfin
-            tag: 10.11.5
+            tag: 10.11.6
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -39,20 +39,6 @@ jellyfin:
                 secretKeyRef:
                   name: jellyfin-exporter-secret
                   key: token
-    fladder:
-      type: deployment
-      replicas: 1
-      strategy: Recreate
-      revisionHistoryLimit: 3
-      containers:
-        main:
-          image:
-            repository: ghcr.io/donutware/fladder
-            tag: v0.9.0
-            pullPolicy: IfNotPresent
-          env:
-            - name: BASE_URL
-              value: https://jellyfin.alexlebens.net/
   service:
     main:
       forceRename: jellyfin
@@ -66,14 +52,6 @@ jellyfin:
           port: 9594
           targetPort: 9594
           protocol: HTTP
-    fladder:
-      forceRename: fladder
-      controller: fladder
-      ports:
-        http:
-          port: 80
-          targetPort: 80
-          protocol: HTTP
   serviceMonitor:
     main:
       selector:
@@ -108,26 +86,6 @@ jellyfin:
             - path:
                 type: PathPrefix
                 value: /
-    fladder:
-      kind: HTTPRoute
-      parentRefs:
-        - group: gateway.networking.k8s.io
-          kind: Gateway
-          name: traefik-gateway
-          namespace: traefik
-      hostnames:
-        - fladder.alexlebens.net
-      rules:
-        - backendRefs:
-            - group: ''
-              kind: Service
-              name: fladder
-              port: 80
-              weight: 100
-          matches:
-            - path:
-                type: PathPrefix
-                value: /
   persistence:
     config:
       forceRename: jellyfin-config

clusters/cl01tl/helm/karakeep/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.6.2
 - name: meilisearch
   repository: https://meilisearch.github.io/meilisearch-kubernetes
-  version: 0.21.0
+  version: 0.23.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
+  version: 2.1.9
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:9a98de83b4829b6cabd34d0f6924b66fc9d13866b67370d2a8ba30b255a45b34
+digest: sha256:526ebcfdf6c7e99c16562dc841ea96c602dd3dd90fc7a1fe6bd2d8147b71ecca
-generated: "2026-01-16T18:48:07.534643037Z"
+generated: "2026-01-20T16:02:05.482993485Z"

clusters/cl01tl/helm/karakeep/Chart.yaml

@@ -22,11 +22,11 @@ dependencies:
     repository: https://bjw-s-labs.github.io/helm-charts/
     version: 4.6.2
   - name: meilisearch
-    version: 0.21.0
+    version: 0.23.0
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.6
+    version: 2.1.9
   - name: volsync-target
     alias: volsync-target-data
     version: 0.7.0

clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: kube-prometheus-stack
   repository: oci://ghcr.io/prometheus-community/charts
-  version: 80.14.4
+  version: 81.0.0
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
   version: 4.6.2
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.0.1
-digest: sha256:f582233a71130b7418d8f7256f5bce964d00f95619966eb9d9e50c355f358ec1
+digest: sha256:14197d65a6db43a466933c29b6c78e234dd46514254a2d24814e713ca9f3c919
-generated: "2026-01-16T19:04:09.338293828Z"
+generated: "2026-01-16T21:44:02.294108101Z"

clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml

@@ -20,7 +20,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: kube-prometheus-stack
-    version: 80.14.4
+    version: 81.0.0
     repository: oci://ghcr.io/prometheus-community/charts
   - name: app-template
     alias: ntfy-alertmanager

clusters/cl01tl/helm/listenarr/Chart.lock

@@ -1,9 +0,0 @@
-dependencies:
-- name: app-template
-  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
-- name: volsync-target
-  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-digest: sha256:3ca3de48695006c4a5bde214ee699677289b6a89ae1a92b6936c5f25d64ad25b
-generated: "2026-01-16T18:49:46.484482035Z"

clusters/cl01tl/helm/listenarr/Chart.yaml

@@ -1,25 +0,0 @@
-apiVersion: v2
-name: listenarr
-version: 1.0.0
-description: Listenarr
-keywords:
-  - listenarr
-  - audiobooks
-home: https://wiki.alexlebens.dev/
-sources:
-  - https://github.com/therobbiedavis/Listenarr
-  - https://hub.docker.com/r/therobbiedavis/listenarr
-  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: app-template
-    alias: listenarr
-    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
-  - name: volsync-target
-    alias: volsync-target-config
-    version: 0.7.0
-    repository: oci://harbor.alexlebens.net/helm-charts
-# renovate: github=therobbiedavis/Listenarr
-appVersion: 0.2.35

clusters/cl01tl/helm/listenarr/templates/persistent-volume-claim.yaml

@@ -1,17 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: listenarr-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: listenarr-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  volumeName: listenarr-nfs-storage
-  storageClassName: nfs-client
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 1Gi

clusters/cl01tl/helm/listenarr/templates/persistent-volume.yaml

@@ -1,23 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: listenarr-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: listenarr-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: nfs-client
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  nfs:
-    path: /volume2/Storage/Audiobooks
-    server: synologybond.alexlebens.net
-  mountOptions:
-    - vers=4
-    - minorversion=1
-    - noac

clusters/cl01tl/helm/listenarr/values.yaml

@@ -1,83 +0,0 @@
-listenarr:
-  controllers:
-    main:
-      type: deployment
-      replicas: 1
-      strategy: Recreate
-      revisionHistoryLimit: 3
-      containers:
-        main:
-          image:
-            repository: therobbiedavis/listenarr
-            tag: canary-0.2.35
-            pullPolicy: IfNotPresent
-          env:
-            - name: LISTENARR_PUBLIC_URL
-              value: https://listenarr.alexlebens.net
-          resources:
-            requests:
-              cpu: 50m
-              memory: 128Mi
-  service:
-    main:
-      controller: main
-      ports:
-        http:
-          port: 80
-          targetPort: 5000
-          protocol: HTTP
-  route:
-    main:
-      kind: HTTPRoute
-      parentRefs:
-        - group: gateway.networking.k8s.io
-          kind: Gateway
-          name: traefik-gateway
-          namespace: traefik
-      hostnames:
-        - listenarr.alexlebens.net
-      rules:
-        - backendRefs:
-            - group: ''
-              kind: Service
-              name: listenarr
-              port: 80
-              weight: 100
-          matches:
-            - path:
-                type: PathPrefix
-                value: /
-  persistence:
-    config:
-      forceRename: listenarr
-      storageClass: ceph-block
-      accessMode: ReadWriteOnce
-      size: 5Gi
-      retain: true
-      advancedMounts:
-        main:
-          main:
-            - path: /app/config
-              readOnly: false
-    media:
-      existingClaim: listenarr-nfs-storage
-      advancedMounts:
-        main:
-          main:
-            - path: /data
-              readOnly: false
-volsync-target-config:
-  pvcTarget: listenarr
-  moverSecurityContext:
-    runAsUser: 1000
-    runAsGroup: 1000
-    fsGroup: 1000
-    fsGroupChangePolicy: OnRootMismatch
-  local:
-    enabled: true
-    schedule: 42 8 * * *
-  remote:
-    enabled: false
-  external:
-    enabled: true
-    schedule: 42 9 * * *

clusters/cl01tl/helm/matrix-synapse/Chart.lock

@@ -13,10 +13,10 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
+  version: 2.1.9
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
+  version: 2.1.9
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.4.5
@@ -38,5 +38,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:eeb21483b2fc2d517039fff51bce1819c9765172eb2d185f67feb133495e8234
+digest: sha256:5d815aa1bb50fa1b6b85a6edda6017d0a8e3f6c23d804177a845bf206cd2d31b
-generated: "2026-01-16T18:49:57.823841472Z"
+generated: "2026-01-17T17:32:18.299163465Z"

clusters/cl01tl/helm/matrix-synapse/Chart.yaml

@@ -45,11 +45,11 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     alias: cloudflared-synapse
-    version: 2.1.6
+    version: 2.1.9
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: cloudflared
     alias: cloudflared-hookshot
-    version: 2.1.6
+    version: 2.1.9
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: postgres-cluster
     alias: postgres-18-cluster

clusters/cl01tl/helm/matrix-synapse/values.yaml

@@ -143,7 +143,7 @@ matrix-hookshot:
         main:
           image:
             repository: halfshot/matrix-hookshot
-            tag: 7.2.0
+            tag: 7.3.0
             pullPolicy: IfNotPresent
           resources:
             requests:
@@ -345,7 +345,7 @@ mautrix-whatsapp:
         main:
           image:
             repository: dock.mau.dev/mautrix/whatsapp
-            tag: v0.2512.0
+            tag: v0.2601.0
             pullPolicy: IfNotPresent
           resources:
             requests:

clusters/cl01tl/helm/ntfy/values.yaml

@@ -9,7 +9,7 @@ ntfy:
         main:
           image:
             repository: binwiederhier/ntfy
-            tag: v2.15.0
+            tag: v2.16.0
             pullPolicy: IfNotPresent
           args: ["serve"]
           env:

clusters/cl01tl/helm/outline/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
+  version: 2.1.9
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.4.5
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.0.1
-digest: sha256:d2d99fb492e5e8580f5d1871171f8148f41f8afb43cfb6cb4a2cd75dd87a8d85
+digest: sha256:3959ec0feb588553493636514562a4bd1dea651992da9cca1a598597909173b1
-generated: "2026-01-16T18:50:55.615098261Z"
+generated: "2026-01-17T17:32:35.576166942Z"

clusters/cl01tl/helm/outline/Chart.yaml

@@ -24,7 +24,7 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.6
+    version: 2.1.9
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.4.5

clusters/cl01tl/helm/outline/values.yaml

@@ -9,7 +9,7 @@ outline:
         main:
           image:
             repository: outlinewiki/outline
-            tag: 1.2.0
+            tag: 1.3.0
             pullPolicy: IfNotPresent
           env:
             - name: NODE_ENV

clusters/cl01tl/helm/plex/values.yaml

@@ -9,7 +9,7 @@ plex:
         main:
           image:
             repository: ghcr.io/linuxserver/plex
-            tag: 1.42.2@sha256:1720efa8e919a724ff3003cce7c1c0ae91a54e097ca3c8f6713a780c6fd73432
+            tag: 1.42.2@sha256:b19a5e34c6f8dd42abf88556b8aa5c8987c0c34820aaeaa320a02d8c17fdaab3
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/postiz/Chart.lock

@@ -4,7 +4,7 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
+  version: 2.1.9
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.4.5
@@ -17,5 +17,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:7464bbf3277649fb74a2c31b54c8428d97b1ef8049ad08bb85a15fb23eee5118
+digest: sha256:045adb256c2f942ade106b9cd451a665adf2661a0bfcd5203d8302828cf07dee
-generated: "2026-01-16T18:51:40.030862543Z"
+generated: "2026-01-17T17:32:50.110718413Z"

clusters/cl01tl/helm/postiz/Chart.yaml

@@ -23,7 +23,7 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.6
+    version: 2.1.9
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.4.5

clusters/cl01tl/helm/postiz/values.yaml

@@ -9,7 +9,7 @@ postiz:
         main:
           image:
             repository: ghcr.io/gitroomhq/postiz-app
-            tag: v2.12.0
+            tag: v2.12.1
             pullPolicy: IfNotPresent
           env:
             - name: MAIN_URL

clusters/cl01tl/helm/prowlarr/values.yaml

@@ -20,7 +20,7 @@ prowlarr:
         main:
           image:
             repository: ghcr.io/linuxserver/prowlarr
-            tag: 2.3.0@sha256:67a8aaedcfd6989f3030b937a6a07007310b1dfc7ee8df16d2cbfa48d1c1158c
+            tag: 2.3.0@sha256:d3e9307b320b6772749a2cf8fc2712e9e824c4930b034680ad4d08a9e2f25884
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/qbittorrent/templates/config-map.yaml

@@ -190,21 +190,21 @@ data:
       orphaned_dir: /qbittorrent/Orphaned
 
     cat:
+      -< COMPLETED: /mnt/store/Torrent/FINISHED/COMPLETED
+      -< IMPORT: /mnt/store/Torrent/FINISHED/IMPORT
+      -< SAVE: /mnt/store/Torrent/FINISHED/SAVE
+      -< ZIM: /mnt/store/Kiwix
       lidarr: /mnt/store/Torrent/FINISHED/LIDARR
       prowlarr: /mnt/store/Torrent/FINISHED/SAVE
-      radarr: /mnt/store/Torrent/FINISHED/RADARR
       radarr-4k: /mnt/store/Torrent/FINISHED/RADARR4K
       radarr-anime: /mnt/store/Torrent/FINISHED/RADARRANIME
       radarr-standup: /mnt/store/Torrent/FINISHED/RADARRSTANDUP
-      sonarr: /mnt/store/Torrent/FINISHED/SONARR
+      radarr: /mnt/store/Torrent/FINISHED/RADARR
+      shelfmark-audiobooks: /mnt/store/Torrent/FINISHED/SHELFMARKAUDIOBOOKS
+      shelfmark-books: /mnt/store/Torrent/FINISHED/SHELFMARKBOOKS
       sonarr-4k: /mnt/store/Torrent/FINISHED/SONARR4K
       sonarr-anime: /mnt/store/Torrent/FINISHED/SONARRANIME
-      shelfmark-books: /mnt/store/Torrent/FINISHED/SHELFMARKBOOKS
+      sonarr: /mnt/store/Torrent/FINISHED/SONARR
-      shelfmark-audiobooks: /mnt/store/Torrent/FINISHED/SHELFMARKAUDIOBOOKS
-      -< ZIM: /mnt/store/Kiwix
-      -< SAVE: /mnt/store/Torrent/FINISHED/SAVE
-      -< IMPORT: /mnt/store/Torrent/FINISHED/IMPORT
-      -< COMPLETED: /mnt/store/Torrent/FINISHED/COMPLETED
 
     tracker:
       alpharatio.cc:

clusters/cl01tl/helm/qbittorrent/values.yaml

@@ -28,7 +28,7 @@ qbittorrent:
         qbittorrent:
           image:
             repository: ghcr.io/linuxserver/qbittorrent
-            tag: 5.1.4@sha256:95114034a7f74672b76f795f6938921b0ca795f85b59b48691035dc66714f34c
+            tag: 5.1.4@sha256:f430d70c70d1547fded30fbc3181c4750cef354212a5138ab754eba9ba8bd9e1
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/rook-ceph/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: rook-ceph
   repository: https://charts.rook.io/release
-  version: v1.18.9
+  version: v1.19.0
 - name: rook-ceph-cluster
   repository: https://charts.rook.io/release
   version: v1.18.9
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
+  version: 2.1.9
-digest: sha256:fc0c562e0b47bd730251c2ed1ad48f1b0c57dfb730fd161fb905933817ba2c69
+digest: sha256:5eada0d10b6138b72829abf141431c050d49e76f25573be55f90539fcd6a33b9
-generated: "2026-01-14T21:08:53.897492563Z"
+generated: "2026-01-20T20:01:23.975681789Z"

clusters/cl01tl/helm/rook-ceph/Chart.yaml

@@ -16,7 +16,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: rook-ceph
-    version: v1.18.9
+    version: v1.19.0
     repository: https://charts.rook.io/release
   - name: rook-ceph-cluster
     version: v1.18.9
@@ -24,7 +24,7 @@ dependencies:
   - name: cloudflared
     alias: cloudflared-rgw
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.6
+    version: 2.1.9
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ceph.png
 # renovate: github=rook/rook
 appVersion: v1.18.8

clusters/cl01tl/helm/searxng/values.yaml

@@ -9,7 +9,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:445319b907a0e01d0ff5bf8192be396b1c439a47e12675d626ce29af1b439d93
+            tag: latest@sha256:b1d1e80c75adda484544b6162ee12b790813905430ac6f0d2ca3da83fe4de846
             pullPolicy: IfNotPresent
           env:
             - name: SEARXNG_BASE_URL
@@ -39,7 +39,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:445319b907a0e01d0ff5bf8192be396b1c439a47e12675d626ce29af1b439d93
+            tag: latest@sha256:b1d1e80c75adda484544b6162ee12b790813905430ac6f0d2ca3da83fe4de846
             pullPolicy: IfNotPresent
           env:
             - name: SEARXNG_BASE_URL

clusters/cl01tl/helm/seerr/values.yaml

@@ -1,7 +1,7 @@
 seerr-chart:
   image:
     tag: develop
-    sha: f96deeef25cfb7bb0ecaa90f324bf6dfb66a844e8ed38501764f4d982a152280
+    sha: 015bc6dc38244eca572ae34ea717c8f4826c582e124c937e0aa2b92fcb94e4f3
   probes:
     livenessProbe:
       initialDelaySeconds: 60

clusters/cl01tl/helm/shelfmark/Chart.lock

@@ -2,5 +2,8 @@ dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
   version: 4.6.2
-digest: sha256:a7d77df9ded68bf93307246daffdb76d6e19d0730dcfc41a34b153431c2177e3
+- name: volsync-target
-generated: "2026-01-16T18:53:35.024587132Z"
+  repository: oci://harbor.alexlebens.net/helm-charts
+  version: 0.7.0
+digest: sha256:ae9759dd77c556d6fd16837e2c0c35eb9ecff11a11b40c7c40b55eab9d0e73d0
+generated: "2026-01-18T21:29:37.140884-06:00"

clusters/cl01tl/helm/shelfmark/Chart.yaml

@@ -17,5 +17,9 @@ dependencies:
     alias: shelfmark
     repository: https://bjw-s-labs.github.io/helm-charts/
     version: 4.6.2
+  - name: volsync-target
+    alias: volsync-target-config
+    version: 0.7.0
+    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/shelfmark.webp
 appVersion: v1.0.1

clusters/cl01tl/helm/shelfmark/templates/persistent-volume-claim.yaml

@@ -15,3 +15,41 @@ spec:
   resources:
     requests:
       storage: 1Gi
+
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: shelfmark-audiobooks-nfs-storage
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: shelfmark-audiobooks-nfs-storage
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  volumeName: shelfmark-audiobooks-nfs-storage
+  storageClassName: nfs-client
+  accessModes:
+    - ReadWriteMany
+  resources:
+    requests:
+      storage: 1Gi
+
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: shelfmark-downloads-nfs-storage
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: shelfmark-downloads-nfs-storage
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  volumeName: shelfmark-downloads-nfs-storage
+  storageClassName: nfs-client
+  accessModes:
+    - ReadWriteMany
+  resources:
+    requests:
+      storage: 1Gi

clusters/cl01tl/helm/shelfmark/templates/persistent-volume.yaml

@@ -21,3 +21,53 @@ spec:
     - vers=4
     - minorversion=1
     - noac
+
+---
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: shelfmark-audiobooks-nfs-storage
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: shelfmark-audiobooks-nfs-storage
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  persistentVolumeReclaimPolicy: Retain
+  storageClassName: nfs-client
+  capacity:
+    storage: 1Gi
+  accessModes:
+    - ReadWriteMany
+  nfs:
+    path: /volume2/Storage/Audiobooks
+    server: synologybond.alexlebens.net
+  mountOptions:
+    - vers=4
+    - minorversion=1
+    - noac
+
+---
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: shelfmark-downloads-nfs-storage
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: shelfmark-downloads-nfs-storage
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  persistentVolumeReclaimPolicy: Retain
+  storageClassName: nfs-client
+  capacity:
+    storage: 1Gi
+  accessModes:
+    - ReadWriteMany
+  nfs:
+    path: /volume2/Storage/Torrent
+    server: synologybond.alexlebens.net
+  mountOptions:
+    - vers=4
+    - minorversion=1
+    - noac

clusters/cl01tl/helm/shelfmark/values.yaml

@@ -14,10 +14,8 @@ shelfmark:
           env:
             - name: FLASK_PORT
               value: 8084
-            - name: INGEST_DIR
-              value: /ingest
             - name: SEARCH_MODE
-              value: direct
+              value: universal
           probes:
             liveness:
               enabled: true
@@ -68,6 +66,7 @@ shelfmark:
                 value: /
   persistence:
     config:
+      forceRename: shelfmark
       storageClass: ceph-block
       accessMode: ReadWriteOnce
       size: 1Gi
@@ -84,13 +83,27 @@ shelfmark:
           main:
             - path: /ingest
               readOnly: false
+    audiobooks:
+      existingClaim: shelfmark-audiobooks-nfs-storage
+      advancedMounts:
+        main:
+          main:
+            - path: /audiobooks
+              readOnly: false
+    downloads:
+      existingClaim: shelfmark-downloads-nfs-storage
+      advancedMounts:
+        main:
+          main:
+            - path: /mnt/store/Torrent
+              readOnly: false
 volsync-target-config:
-  pvcTarget: shelfmark-config
+  pvcTarget: shelfmark
   local:
     enabled: true
-    schedule: 0 8 * * *
+    schedule: 38 11 * * *
   remote:
     enabled: false
   external:
     enabled: true
-    schedule: 0 9 * * *
+    schedule: 38 12 * * *

clusters/cl01tl/helm/shelly-plug/values.yaml

@@ -36,7 +36,7 @@ shelly-plug:
         main:
           image:
             repository: php
-            tag: 8.5.1-apache-bookworm
+            tag: 8.5.2-apache-bookworm
             pullPolicy: IfNotPresent
           env:
             - name: SHELLY_HOSTNAME

clusters/cl01tl/helm/site-documentation/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
+  version: 2.1.9
-digest: sha256:993713dffe77e7672731ad86c9ba882fa416fe501ae42eba75876c6abbec036c
+digest: sha256:07dc35c2faf680ef104ac0dd9075760d38f13ef84a62ed961134b5edd6d4b4dc
-generated: "2026-01-16T18:53:55.811317116Z"
+generated: "2026-01-17T17:33:18.84982234Z"

clusters/cl01tl/helm/site-documentation/Chart.yaml

@@ -22,6 +22,6 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.6
+    version: 2.1.9
 icon: https://d21zlbwtcn424f.cloudfront.net/logo-new-round.png
 appVersion: 0.0.5

clusters/cl01tl/helm/site-profile/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
+  version: 2.1.9
-digest: sha256:a964308b6deef2504397e857ca580c186d117a3659782a564f363828f2973c37
+digest: sha256:422da3236c2f071ee0e2e36b57a622e1b002c4e8cb67e4c1a01a9cc39aa2bbdf
-generated: "2026-01-16T18:54:06.609655376Z"
+generated: "2026-01-17T17:33:32.603049202Z"

clusters/cl01tl/helm/site-profile/Chart.yaml

@@ -22,6 +22,6 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.6
+    version: 2.1.9
 icon: https://d21zlbwtcn424f.cloudfront.net/logo-new-round.png
 appVersion: 2.1.2

clusters/cl01tl/helm/snapshot-controller/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: snapshot-controller
   repository: https://piraeus.io/helm-charts/
-  version: 5.0.1
+  version: 5.0.2
-digest: sha256:0d0fd7652c69fc528b62ec644eb890822cf0b1ae5b1fc7f9ca4d86628f7f9656
+digest: sha256:8b630b368aa731c6c7b1448f279949782046df630e20dea65ab818e935154c5a
-generated: "2026-01-16T19:00:12.703316399Z"
+generated: "2026-01-19T19:02:33.466378667Z"

clusters/cl01tl/helm/snapshot-controller/Chart.yaml

@@ -15,7 +15,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: snapshot-controller
-    version: 5.0.1
+    version: 5.0.2
     repository: https://piraeus.io/helm-charts/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 # renovate: github=kubernetes-csi/external-snapshotter

clusters/cl01tl/helm/stalwart/values.yaml

@@ -9,7 +9,7 @@ stalwart:
         main:
           image:
             repository: stalwartlabs/stalwart
-            tag: v0.15.3
+            tag: v0.15.4
             pullPolicy: IfNotPresent
           resources:
             requests:

clusters/cl01tl/helm/tautulli/Chart.lock

@@ -1,9 +0,0 @@
-dependencies:
-- name: app-template
-  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
-- name: volsync-target
-  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-digest: sha256:50badda5b51f1c82558bee67c3a647bdd356c9b7db06acfeef05501aaaabd911
-generated: "2026-01-16T18:55:22.993941938Z"

clusters/cl01tl/helm/tautulli/Chart.yaml

@@ -1,26 +0,0 @@
-apiVersion: v2
-name: tautulli
-version: 1.0.0
-description: Tautulli
-keywords:
-  - tautulli
-  - plex
-home: https://wiki.alexlebens.dev/s/b2f5d20a-b3c2-4e7a-b550-7b2855264408
-sources:
-  - https://github.com/Tautulli/Tautulli
-  - https://github.com/Tautulli/Tautulli/pkgs/container/tautulli
-  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: app-template
-    alias: tautulli
-    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
-  - name: volsync-target
-    alias: volsync-target-config
-    version: 0.7.0
-    repository: oci://harbor.alexlebens.net/helm-charts
-icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/tautulli.png
-# renovate: github=Tautulli/Tautulli
-appVersion: v2.16.0

clusters/cl01tl/helm/tautulli/values.yaml

@@ -1,179 +0,0 @@
-tautulli:
-  controllers:
-    main:
-      type: deployment
-      annotations:
-        reloader.stakater.com/auto: "true"
-      replicas: 1
-      strategy: Recreate
-      revisionHistoryLimit: 3
-      containers:
-        main:
-          image:
-            repository: ghcr.io/tautulli/tautulli
-            tag: v2.16.0
-            pullPolicy: IfNotPresent
-          env:
-            - name: PUID
-              value: 1001
-            - name: GUID
-              value: 1001
-            - name: TZ
-              value: US/Central
-          resources:
-            requests:
-              cpu: 10m
-              memory: 128Mi
-  configMaps:
-    scripts:
-      enabled: true
-      data:
-        select_tmdb_poster.py: |
-          #!/usr/bin/env python
-          # -*- coding: utf-8 -*-
-
-          '''
-          Description:  Selects the default TMDB poster if no poster is selected
-                        or the current poster is from Gracenote.
-          Author:       /u/SwiftPanda16
-          Requires:     plexapi
-          Usage:
-              * Change the posters for an entire library:
-                  python select_tmdb_poster.py --library "Movies"
-
-              * Change the poster for a specific item:
-                  python select_tmdb_poster.py --rating_key 1234
-
-              * By default locked posters are skipped. To update locked posters:
-                  python select_tmdb_poster.py --library "Movies" --include_locked
-
-          Tautulli script trigger:
-              * Notify on recently added
-          Tautulli script conditions:
-              * Filter which media to select the poster. Examples:
-                  [ Media Type | is | movie ]
-          Tautulli script arguments:
-              * Recently Added:
-                  --rating_key {rating_key}
-          '''
-
-          import argparse
-          import os
-          import plexapi.base
-          from plexapi.server import PlexServer
-          plexapi.base.USER_DONT_RELOAD_FOR_KEYS.add('fields')
-
-
-          # Environmental Variables
-          PLEX_URL = os.getenv('PLEX_URL')
-          PLEX_TOKEN = os.getenv('PLEX_TOKEN')
-
-
-          def select_tmdb_poster_library(library, include_locked=False):
-              for item in library.all(includeGuids=False):
-                  # Only reload for fields
-                  item.reload(**{k: 0 for k, v in item._INCLUDES.items()})
-                  select_tmdb_poster_item(item, include_locked=include_locked)
-
-
-          def select_tmdb_poster_item(item, include_locked=False):
-              if item.isLocked('thumb') and not include_locked:  # PlexAPI 4.5.10
-                  print(f"Locked poster for {item.title}. Skipping.")
-                  return
-
-              posters = item.posters()
-              selected_poster = next((p for p in posters if p.selected), None)
-
-              if selected_poster is None:
-                  print(f"WARNING: No poster selected for {item.title}.")
-              else:
-                  skipping = ' Skipping.' if selected_poster.provider != 'gracenote' else ''
-                  print(f"Poster provider is '{selected_poster.provider}' for {item.title}.{skipping}")
-
-              if posters and (selected_poster is None or selected_poster.provider == 'gracenote'):
-                  # Fallback to first poster if no TMDB posters are available
-                  tmdb_poster = next((p for p in posters if p.provider == 'tmdb'), posters[0])
-                  # Selecting the poster automatically locks it
-                  tmdb_poster.select()
-                  print(f"Selected {tmdb_poster.provider} poster for {item.title}.")
-
-
-          if __name__ == '__main__':
-              parser = argparse.ArgumentParser()
-              parser.add_argument('--rating_key', type=int)
-              parser.add_argument('--library')
-              parser.add_argument('--include_locked', action='store_true')
-              opts = parser.parse_args()
-
-              plex = PlexServer(PLEX_URL, PLEX_TOKEN)
-
-              if opts.rating_key:
-                  item = plex.fetchItem(opts.rating_key)
-                  select_tmdb_poster_item(item, opts.include_locked)
-              elif opts.library:
-                  library = plex.library.section(opts.library)
-                  select_tmdb_poster_library(library, opts.include_locked)
-              else:
-                  print("No --rating_key or --library specified. Exiting.")
-  service:
-    main:
-      controller: main
-      ports:
-        http:
-          port: 80
-          targetPort: 8181
-          protocol: HTTP
-  route:
-    main:
-      kind: HTTPRoute
-      parentRefs:
-        - group: gateway.networking.k8s.io
-          kind: Gateway
-          name: traefik-gateway
-          namespace: traefik
-      hostnames:
-        - tautulli.alexlebens.net
-      rules:
-        - backendRefs:
-            - group: ''
-              kind: Service
-              name: tautulli
-              port: 80
-              weight: 100
-          matches:
-            - path:
-                type: PathPrefix
-                value: /
-  persistence:
-    scripts:
-      enabled: true
-      type: configMap
-      name: tautulli-scripts
-      advancedMounts:
-        main:
-          main:
-            - path: /config/scripts/select_tmdb_poster.py
-              readOnly: true
-              mountPropagation: None
-              subPath: select_tmdb_poster.py
-    config:
-      forceRename: tautulli-config
-      storageClass: ceph-block
-      accessMode: ReadWriteOnce
-      size: 5Gi
-      retain: true
-      advancedMounts:
-        main:
-          main:
-            - path: /config
-              readOnly: false
-volsync-target-config:
-  pvcTarget: tautulli-config
-  local:
-    enabled: true
-    schedule: 34 11 * * *
-  remote:
-    enabled: false
-  external:
-    enabled: true
-    schedule: 34 12 * * *

clusters/cl01tl/helm/vaultwarden/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
+  version: 2.1.9
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.4.5
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:d38a685a6bcecb0267e5fa2de2b7c10929201398c7b1b9a06774e35ee5e9c956
+digest: sha256:800ed0149e316d8ea264a11e90ba3eb808d3623bc9825ad96dea85353bd0a62f
-generated: "2026-01-16T18:56:33.748685848Z"
+generated: "2026-01-17T17:33:46.236030792Z"

clusters/cl01tl/helm/vaultwarden/Chart.yaml

@@ -24,7 +24,7 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.6
+    version: 2.1.9
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.4.5

clusters/cl01tl/helm/whodb/values.yaml

@@ -8,7 +8,7 @@ whodb:
         main:
           image:
             repository: clidey/whodb
-            tag: 0.88.0
+            tag: 0.89.0
             pullPolicy: IfNotPresent
           env:
             - name: WHODB_OLLAMA_HOST

clusters/cl01tl/helm/yubal-playlist/templates/external-secret.yaml

@@ -34,6 +34,29 @@ spec:
         metadataPolicy: None
         property: password
 
+---
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: yubal-playlist-cookie
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: yubal-playlist-cookie
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  data:
+    - secretKey: cookies.txt
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /youtube/cookie
+        metadataPolicy: None
+        property: cookies
+
 ---
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret

clusters/cl01tl/helm/yubal-playlist/values.yaml

@@ -5,11 +5,28 @@ yubal-playlist:
       replicas: 1
       strategy: Recreate
       revisionHistoryLimit: 3
+      initContainers:
+        init-copy-cookie:
+          image:
+            repository: busybox
+            tag: 1.37.0
+            pullPolicy: IfNotPresent
+          command:
+            - /bin/sh
+            - -ec
+            - |
+              if [ ! -f "/app/ytdlp/cookies.txt" ]; then
+                echo ">> Coping files ..."
+                ls /app/ytdlp
+                cp -fv /app/ytdlp/cookies-ro.txt /app/ytdlp/cookies.txt
+                echo ">> Files in ytdlp:"
+                ls /app/ytdlp
+              fi
       containers:
         main:
           image:
             repository: harbor.alexlebens.net/images/yubal-playlist
-            tag: 0.1.4
+            tag: 0.1.10
             pullPolicy: IfNotPresent
           env:
             - name: YUBAL_TZ
@@ -139,10 +156,27 @@ yubal-playlist:
                 type: PathPrefix
                 value: /
   persistence:
-    cache:
+    cookie:
-      type: emptyDir
+      enabled: true
+      type: secret
+      name: yubal-playlist-cookie
       advancedMounts:
         main:
+          init-copy-cookie:
+            - path: /app/ytdlp/cookies-ro.txt
+              readOnly: true
+              mountPropagation: None
+              subPath: cookies.txt
+    config:
+      storageClass: ceph-block
+      accessMode: ReadWriteOnce
+      size: 1Gi
+      retain: true
+      advancedMounts:
+        main:
+          init-copy-cookie:
+            - path: /app/ytdlp
+              readOnly: false
           main:
             - path: /app/ytdlp
               readOnly: false

hosts/ps08rp/blocky/config.yml

@@ -88,8 +88,8 @@ customDNS:
     ceph                            IN      CNAME   traefik-cl01tl
     code-server                     IN      CNAME   traefik-cl01tl
     ephemera                        IN      CNAME   traefik-cl01tl
+    excalidraw                      IN      CNAME   traefik-cl01tl
     feishin                         IN      CNAME   traefik-cl01tl
-    fladder                         IN      CNAME   traefik-cl01tl
     garage-s3                       IN      CNAME   traefik-cl01tl
     garage-webui                    IN      CNAME   traefik-cl01tl
     gatus                           IN      CNAME   traefik-cl01tl
@@ -109,7 +109,6 @@ customDNS:
     komodo                          IN      CNAME   traefik-cl01tl
     lidarr                          IN      CNAME   traefik-cl01tl
     lidatube                        IN      CNAME   traefik-cl01tl
-    listenarr                       IN      CNAME   traefik-cl01tl
     mail                            IN      CNAME   traefik-cl01tl
     navidrome                       IN      CNAME   traefik-cl01tl
     ntfy                            IN      CNAME   traefik-cl01tl
@@ -136,7 +135,6 @@ customDNS:
     sonarr-4k                       IN      CNAME   traefik-cl01tl
     sonarr-anime                    IN      CNAME   traefik-cl01tl
     stalwart                        IN      CNAME   traefik-cl01tl
-    tautulli                        IN      CNAME   traefik-cl01tl
     tdarr                           IN      CNAME   traefik-cl01tl
     tubearchivist                   IN      CNAME   traefik-cl01tl
     vault                           IN      CNAME   traefik-cl01tl

hosts/ps08rp/traefik/compose.yaml

@@ -1,7 +1,7 @@
 ---
 services:
     traefik:
-        image: ghcr.io/traefik/traefik:v3.6.6
+        image: ghcr.io/traefik/traefik:v3.6.7
         container_name: traefik
         command:
             - "--global.checkNewVersion=false"

hosts/ps09rp/blocky/config.yml

@@ -109,8 +109,8 @@ customDNS:
     ceph                            IN      CNAME   traefik-cl01tl
     code-server                     IN      CNAME   traefik-cl01tl
     ephemera                        IN      CNAME   traefik-cl01tl
+    excalidraw                      IN      CNAME   traefik-cl01tl
     feishin                         IN      CNAME   traefik-cl01tl
-    fladder                         IN      CNAME   traefik-cl01tl
     garage-s3                       IN      CNAME   traefik-cl01tl
     garage-webui                    IN      CNAME   traefik-cl01tl
     gatus                           IN      CNAME   traefik-cl01tl
@@ -130,7 +130,6 @@ customDNS:
     komodo                          IN      CNAME   traefik-cl01tl
     lidarr                          IN      CNAME   traefik-cl01tl
     lidatube                        IN      CNAME   traefik-cl01tl
-    listenarr                       IN      CNAME   traefik-cl01tl
     mail                            IN      CNAME   traefik-cl01tl
     navidrome                       IN      CNAME   traefik-cl01tl
     ntfy                            IN      CNAME   traefik-cl01tl
@@ -157,7 +156,6 @@ customDNS:
     sonarr-4k                       IN      CNAME   traefik-cl01tl
     sonarr-anime                    IN      CNAME   traefik-cl01tl
     stalwart                        IN      CNAME   traefik-cl01tl
-    tautulli                        IN      CNAME   traefik-cl01tl
     tdarr                           IN      CNAME   traefik-cl01tl
     tubearchivist                   IN      CNAME   traefik-cl01tl
     vault                           IN      CNAME   traefik-cl01tl

hosts/ps09rp/traefik/compose.yaml

@@ -1,7 +1,7 @@
 ---
 services:
     traefik:
-        image: ghcr.io/traefik/traefik:v3.6.6
+        image: ghcr.io/traefik/traefik:v3.6.7
         container_name: traefik
         command:
             - "--global.checkNewVersion=false"

hosts/ps10rp/homepage/compose.yaml

@@ -32,7 +32,7 @@ services:
             - /var/run/docker.sock:/var/run/docker.sock:ro
 
     homepage:
-        image: ghcr.io/gethomepage/homepage:v1.8.0
+        image: ghcr.io/gethomepage/homepage:v1.9.0
         container_name: homepage
         labels:
             traefik.enable: true

hosts/ps10rp/traefik/compose.yaml

@@ -20,7 +20,7 @@ services:
             - /dev/net/tun:/dev/net/tun
 
     traefik:
-        image: ghcr.io/traefik/traefik:v3.6.6
+        image: ghcr.io/traefik/traefik:v3.6.7
         container_name: traefik
         command:
             - "--global.checkNewVersion=false"