chore(deps): update helm release argo-workflows to v1

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [ghcr.io/gethomepage/homepage](https://github.com/gethomepage/homepage) | minor | `v1.10.1` → `v1.11.0` |

---

### Release Notes

<details>
<summary>gethomepage/homepage (ghcr.io/gethomepage/homepage)</summary>

### [`v1.11.0`](https://github.com/gethomepage/homepage/releases/tag/v1.11.0)

[Compare Source](https://github.com/gethomepage/homepage/compare/v1.10.1...v1.11.0)

##### What's Changed

- Chore(deps): Bump actions/checkout from 4 to 6 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6284](https://github.com/gethomepage/homepage/pull/6284)
- Chore(deps): Bump actions/setup-node from 4 to 6 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6285](https://github.com/gethomepage/homepage/pull/6285)
- Feature: add Tracearr widget for displaying active Plex streams by [@&#8203;Bothari](https://github.com/Bothari) in [#&#8203;6306](https://github.com/gethomepage/homepage/pull/6306)
- Improvement: better handle highlighting with units by [@&#8203;shamoon](https://github.com/shamoon) in [#&#8203;6318](https://github.com/gethomepage/homepage/pull/6318)
- Chore: rename Jellyseerr widget to Seerr and update references by [@&#8203;shamoon](https://github.com/shamoon) in [#&#8203;6322](https://github.com/gethomepage/homepage/pull/6322)
- Enhancement: jellyseer completed by [@&#8203;shamoon](https://github.com/shamoon) in [#&#8203;6329](https://github.com/gethomepage/homepage/pull/6329)
- Chore: merge Overseerr into Seerr, add aliases by [@&#8203;shamoon](https://github.com/shamoon) in [#&#8203;6330](https://github.com/gethomepage/homepage/pull/6330)
- Enhancement: add "Temperature" label to list of possible CPU sensors by [@&#8203;shamoon](https://github.com/shamoon) in [#&#8203;6331](https://github.com/gethomepage/homepage/pull/6331)
- Enhancement: cover more basic statuses in containers list by [@&#8203;shamoon](https://github.com/shamoon) in [#&#8203;6334](https://github.com/gethomepage/homepage/pull/6334)
- Feature: sparkyfitness service widget by [@&#8203;shamoon](https://github.com/shamoon) in [#&#8203;6346](https://github.com/gethomepage/homepage/pull/6346)
- Enhancement: fallback for missing si network stats by [@&#8203;shamoon](https://github.com/shamoon) in [#&#8203;6367](https://github.com/gethomepage/homepage/pull/6367)
- Fix: Await async proxy handlers by [@&#8203;shamoon](https://github.com/shamoon) in [#&#8203;6371](https://github.com/gethomepage/homepage/pull/6371)
- Fix: small fixes for Omada proxy by [@&#8203;shamoon](https://github.com/shamoon) in [#&#8203;6372](https://github.com/gethomepage/homepage/pull/6372)
- Chore: add security context, liveness probe and config mount to k8s deployment example by [@&#8203;hugosxm](https://github.com/hugosxm) in [#&#8203;6375](https://github.com/gethomepage/homepage/pull/6375)
- Enhancement: use lighter endpoints for qbittorrent by [@&#8203;shamoon](https://github.com/shamoon) in [#&#8203;6388](https://github.com/gethomepage/homepage/pull/6388)
- Chore(deps-dev): Bump prettier from 3.7.3 to 3.8.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6379](https://github.com/gethomepage/homepage/pull/6379)
- Chore(deps-dev): Bump jsdom from 26.1.0 to 28.1.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6378](https://github.com/gethomepage/homepage/pull/6378)
- Chore(deps): Bump ical.js from 2.1.0 to 2.2.1 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6377](https://github.com/gethomepage/homepage/pull/6377)
- Chore(deps): Bump docker/login-action from 3 to 4 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6385](https://github.com/gethomepage/homepage/pull/6385)
- Chore(deps): Bump next-i18next from 12.1.0 to 15.4.3 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6376](https://github.com/gethomepage/homepage/pull/6376)
- Chore(deps): Bump react and react-dom by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6380](https://github.com/gethomepage/homepage/pull/6380)
- Chore(deps): Bump docker/setup-qemu-action from 3.7.0 to 4.0.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6386](https://github.com/gethomepage/homepage/pull/6386)
- Chore(deps): Bump docker/metadata-action from 5 to 6 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6399](https://github.com/gethomepage/homepage/pull/6399)
- Chore(deps): Bump docker/setup-buildx-action from 3 to 4 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6398](https://github.com/gethomepage/homepage/pull/6398)
- Chore(deps): Bump docker/build-push-action from 6 to 7 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;6397](https://github.com/gethomepage/homepage/pull/6397)
- Change: use byterate for beszel network field by [@&#8203;shamoon](https://github.com/shamoon) in [#&#8203;6402](https://github.com/gethomepage/homepage/pull/6402)
- Enhancement: better Crowdsec auth parsing, caching, and retries by [@&#8203;shamoon](https://github.com/shamoon) in [#&#8203;6419](https://github.com/gethomepage/homepage/pull/6419)

##### New Contributors

- [@&#8203;Bothari](https://github.com/Bothari) made their first contribution in [#&#8203;6306](https://github.com/gethomepage/homepage/pull/6306)
- [@&#8203;hugosxm](https://github.com/hugosxm) made their first contribution in [#&#8203;6375](https://github.com/gethomepage/homepage/pull/6375)

**Full Changelog**: <https://github.com/gethomepage/homepage/compare/v1.10.1...v1.11.0>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41OS4yIiwidXBkYXRlZEluVmVyIjoiNDMuNTkuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=-->

Reviewed-on: #4728
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>

clusters/cl01tl/helm/actual/values.yaml

@@ -81,7 +81,8 @@ volsync-target-data:
     enabled: true
     schedule: 0 8 * * *
   remote:
-    enabled: false
-  external:
     enabled: true
     schedule: 0 9 * * *
+  external:
+    enabled: true
+    schedule: 0 10 * * *

clusters/cl01tl/helm/argo-workflows/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: argo-workflows
   repository: https://argoproj.github.io/argo-helm
-  version: 0.47.4
+  version: 1.0.2
 - name: argo-events
   repository: https://argoproj.github.io/argo-helm
   version: 2.4.20
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.8.0
+  version: 7.9.1
-digest: sha256:772ba83a6e0fa6a7e3633ff1fff0f8221b45a1f36ec890489cfa383330d99f81
+digest: sha256:31596af063744c13afac459184cd027d922d927f4191446eef63646bada28f8f
-generated: "2026-02-27T18:14:32.22595048Z"
+generated: "2026-03-14T20:55:11.149198507Z"

clusters/cl01tl/helm/argo-workflows/Chart.yaml

@@ -18,15 +18,15 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: argo-workflows
-    version: 0.47.4
+    version: 1.0.2
     repository: https://argoproj.github.io/argo-helm
   - name: argo-events
     version: 2.4.20
     repository: https://argoproj.github.io/argo-helm
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.8.0
+    version: 7.9.1
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 # renovate: datasource=github-releases depName=argoproj/argo-workflows
-appVersion: v4.0.1
+appVersion: v4.0.2

clusters/cl01tl/helm/argo-workflows/values.yaml

@@ -105,7 +105,7 @@ postgres-18-cluster:
       - name: live-backup
         suspend: false
         immediate: true
-        schedule: "0 0 0 * * *"
+        schedule: "0 0 14 * * *"
         backupName: garage-local
       # - name: weekly-backup
       #   suspend: true

clusters/cl01tl/helm/argocd/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: argo-cd
   repository: https://argoproj.github.io/argo-helm
-  version: 9.4.9
+  version: 9.4.10
-digest: sha256:5dbcd4491181bcedd914c0bb0dfa80af521703062898822b60a85e2a0a96e126
+digest: sha256:795aad956acef3f5efb8160390caf9b9792b7b4150d3a7984f1c5edbad92dfaa
-generated: "2026-03-09T17:01:48.010446725Z"
+generated: "2026-03-10T18:58:35.720448421Z"

clusters/cl01tl/helm/argocd/Chart.yaml

@@ -15,7 +15,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: argo-cd
-    version: 9.4.9
+    version: 9.4.10
     repository: https://argoproj.github.io/argo-helm
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 # renovate: datasource=github-releases depName=argoproj/argo-cd

clusters/cl01tl/helm/audiobookshelf/Chart.yaml

@@ -29,4 +29,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/audiobookshelf.png
 # renovate: datasource=github-releases depName=advplyr/audiobookshelf
-appVersion: 2.32.1
+appVersion: 2.33.0

clusters/cl01tl/helm/audiobookshelf/templates/persistent-volume-claim.yaml

@@ -1,14 +1,52 @@
 apiVersion: v1
 kind: PersistentVolumeClaim
 metadata:
-  name: audiobookshelf-nfs-storage
+  name: audiobookshelf-books-nfs-storage
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: audiobookshelf-nfs-storage
+    app.kubernetes.io/name: audiobookshelf-books-nfs-storage
     app.kubernetes.io/instance: {{ .Release.Name }}
     app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
-  volumeName: audiobookshelf-nfs-storage
+  volumeName: audiobookshelf-books-nfs-storage
+  storageClassName: nfs-client
+  accessModes:
+    - ReadWriteMany
+  resources:
+    requests:
+      storage: 1Gi
+
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: audiobookshelf-audiobooks-nfs-storage
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: audiobookshelf-audiobooks-nfs-storage
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  volumeName: audiobookshelf-audiobooks-nfs-storage
+  storageClassName: nfs-client
+  accessModes:
+    - ReadWriteMany
+  resources:
+    requests:
+      storage: 1Gi
+
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: audiobookshelf-podcasts-nfs-storage
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: audiobookshelf-podcasts-nfs-storage
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  volumeName: audiobookshelf-podcasts-nfs-storage
   storageClassName: nfs-client
   accessModes:
     - ReadWriteMany

clusters/cl01tl/helm/audiobookshelf/templates/persistent-volume.yaml

@@ -1,10 +1,10 @@
 apiVersion: v1
 kind: PersistentVolume
 metadata:
-  name: audiobookshelf-nfs-storage
+  name: audiobookshelf-books-nfs-storage
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: audiobookshelf-nfs-storage
+    app.kubernetes.io/name: audiobookshelf-books-nfs-storage
     app.kubernetes.io/instance: {{ .Release.Name }}
     app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
@@ -15,7 +15,57 @@ spec:
   accessModes:
     - ReadWriteMany
   nfs:
-    path: /volume2/Storage
+    path: /volume2/Storage/Books
+    server: synologybond.alexlebens.net
+  mountOptions:
+    - vers=4
+    - minorversion=1
+    - noac
+
+---
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: audiobookshelf-audiobooks-nfs-storage
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: audiobookshelf-audiobooks-nfs-storage
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  persistentVolumeReclaimPolicy: Retain
+  storageClassName: nfs-client
+  capacity:
+    storage: 1Gi
+  accessModes:
+    - ReadWriteMany
+  nfs:
+    path: /volume2/Storage/Audiobooks
+    server: synologybond.alexlebens.net
+  mountOptions:
+    - vers=4
+    - minorversion=1
+    - noac
+
+---
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: audiobookshelf-podcasts-nfs-storage
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: audiobookshelf-podcasts-nfs-storage
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  persistentVolumeReclaimPolicy: Retain
+  storageClassName: nfs-client
+  capacity:
+    storage: 1Gi
+  accessModes:
+    - ReadWriteMany
+  nfs:
+    path: /volume2/Storage/Podcasts
     server: synologybond.alexlebens.net
   mountOptions:
     - vers=4

clusters/cl01tl/helm/audiobookshelf/values.yaml

@@ -9,7 +9,7 @@ audiobookshelf:
         main:
           image:
             repository: ghcr.io/advplyr/audiobookshelf
-            tag: 2.32.1
+            tag: 2.33.0
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -114,12 +114,26 @@ audiobookshelf:
           main:
             - path: /metadata
               readOnly: false
-    audiobooks:
+    books:
-      existingClaim: audiobookshelf-nfs-storage
+      existingClaim: audiobookshelf-books-nfs-storage
       advancedMounts:
         main:
           main:
-            - path: /mnt/store/
+            - path: /mnt/store/Books
+              readOnly: false
+    audiobooks:
+      existingClaim: audiobookshelf-audiobooks-nfs-storage
+      advancedMounts:
+        main:
+          main:
+            - path: /mnt/store/Audiobooks
+              readOnly: false
+    podcasts:
+      existingClaim: audiobookshelf-podcasts-nfs-storage
+      advancedMounts:
+        main:
+          main:
+            - path: /mnt/store/Podcasts
               readOnly: false
 volsync-target-config:
   pvcTarget: audiobookshelf-config
@@ -127,17 +141,19 @@ volsync-target-config:
     enabled: true
     schedule: 2 8 * * *
   remote:
-    enabled: false
-  external:
     enabled: true
     schedule: 2 9 * * *
+  external:
+    enabled: true
+    schedule: 2 10 * * *
 volsync-target-metadata:
   pvcTarget: audiobookshelf-metadata
   local:
     enabled: true
     schedule: 4 8 * * *
   remote:
-    enabled: false
-  external:
     enabled: true
     schedule: 4 9 * * *
+  external:
+    enabled: true
+    schedule: 4 10 * * *

clusters/cl01tl/helm/authentik/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 2.4.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.8.0
+  version: 7.9.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.4.0
-digest: sha256:fad7059feb4ac80e06cd571a56215d56e4894eba69fb54aaa1e53ced9ec1b2b1
+digest: sha256:abb34b7bb54393236e695453aa1940497cb4def3d3a56a45ca004a22f8e05648
-generated: "2026-03-09T23:06:05.608952158Z"
+generated: "2026-03-11T22:55:49.936164674Z"

clusters/cl01tl/helm/authentik/Chart.yaml

@@ -28,7 +28,7 @@ dependencies:
     version: 2.4.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.8.0
+    version: 7.9.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey

clusters/cl01tl/helm/authentik/values.yaml

@@ -68,7 +68,7 @@ postgres-18-cluster:
   recovery:
     method: objectStore
     objectStore:
-      index: 1
+      index: 2
   backup:
     objectStore:
       - name: garage-local
@@ -91,9 +91,9 @@ postgres-18-cluster:
       #   isWALArchiver: false
     scheduledBackups:
       - name: live-backup
-        suspend: true
+        suspend: false
         immediate: true
-        schedule: "0 0 0 * * *"
+        schedule: "0 5 14 * * *"
         backupName: garage-local
       # - name: weekly-backup
       #   suspend: true

clusters/cl01tl/helm/backrest/Chart.yaml

@@ -27,4 +27,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/backrest.png
 # renovate: datasource=github-releases depName=garethgeorge/backrest
-appVersion: v1.12.0
+appVersion: v1.12.1

clusters/cl01tl/helm/backrest/values.yaml

@@ -8,7 +8,7 @@ backrest:
         main:
           image:
             repository: garethgeorge/backrest
-            tag: v1.12.0
+            tag: v1.12.1
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -111,17 +111,19 @@ volsync-target-data:
     enabled: true
     schedule: 6 8 * * *
   remote:
-    enabled: false
-  external:
     enabled: true
     schedule: 6 9 * * *
+  external:
+    enabled: true
+    schedule: 6 10 * * *
 volsync-target-config:
   pvcTarget: backrest-config
   local:
     enabled: true
     schedule: 8 8 * * *
   remote:
-    enabled: false
-  external:
     enabled: true
     schedule: 8 9 * * *
+  external:
+    enabled: true
+    schedule: 8 10 * * *

clusters/cl01tl/helm/bazarr/values.yaml

@@ -15,7 +15,7 @@ bazarr:
         main:
           image:
             repository: ghcr.io/linuxserver/bazarr
-            tag: 1.5.6@sha256:94eee5e3e14430b7b144d4556be73963a7daf6f1bddc25586627f426465482ce
+            tag: 1.5.6@sha256:05f9d5b24884f37120453dc1a008a47be244eebec32099ae1bd29032e75b67aa
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -87,7 +87,8 @@ volsync-target-config:
     enabled: true
     schedule: 10 8 * * *
   remote:
-    enabled: false
-  external:
     enabled: true
     schedule: 10 9 * * *
+  external:
+    enabled: true
+    schedule: 10 10 * * *

clusters/cl01tl/helm/blocky/values.yaml

@@ -135,6 +135,7 @@ blocky:
               komodo                          IN      CNAME   traefik-cl01tl
               lidarr                          IN      CNAME   traefik-cl01tl
               mail                            IN      CNAME   traefik-cl01tl
+              movie-roulette                  IN      CNAME   traefik-cl01tl
               music-grabber                   IN      CNAME   traefik-cl01tl
               navidrome                       IN      CNAME   traefik-cl01tl
               ntfy                            IN      CNAME   traefik-cl01tl

clusters/cl01tl/helm/booklore/Chart.yaml

@@ -30,4 +30,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/booklore.png
 # renovate: datasource=github-releases depName=booklore-app/BookLore
-appVersion: v2.1.0
+appVersion: v2.2.0

clusters/cl01tl/helm/booklore/templates/replication-destination.yaml

@@ -1,15 +0,0 @@
-apiVersion: volsync.backube/v1alpha1
-kind: ReplicationDestination
-metadata:
-  name: booklore-data-replication-destination
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: booklore-data-replication-destination
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  rsyncTLS:
-    copyMethod: Direct
-    accessModes: ["ReadWriteMany"]
-    destinationPVC: booklore-books-nfs-storage
-    keySecret: booklore-data-replication-secret

clusters/cl01tl/helm/booklore/templates/replication-source.yaml

@@ -1,17 +0,0 @@
-apiVersion: volsync.backube/v1alpha1
-kind: ReplicationSource
-metadata:
-  name: booklore-data-replication-source
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: booklore-data-replication-source
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  sourcePVC: booklore-data
-  trigger:
-    schedule: "0 0 * * *"
-  rsyncTLS:
-    keySecret: booklore-data-replication-secret
-    address: volsync-rsync-tls-dst-booklore-data-replication-destination
-    copyMethod: Snapshot

clusters/cl01tl/helm/booklore/values.yaml

@@ -9,7 +9,7 @@ booklore:
         main:
           image:
             repository: ghcr.io/booklore-app/booklore
-            tag: v2.1.0
+            tag: v2.2.0
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -225,10 +225,11 @@ volsync-target-config:
     enabled: true
     schedule: 12 8 * * *
   remote:
-    enabled: false
-  external:
     enabled: true
     schedule: 12 9 * * *
+  external:
+    enabled: true
+    schedule: 12 10 * * *
 volsync-target-data:
   pvcTarget: booklore-data
   local:
@@ -238,11 +239,11 @@ volsync-target-data:
       cacheCapacity: 10Gi
   remote:
     enabled: true
-    schedule: 14 10 * * *
+    schedule: 14 9 * * *
     restic:
       cacheCapacity: 10Gi
   external:
     enabled: true
-    schedule: 14 9 * * *
+    schedule: 14 10 * * *
     restic:
       cacheCapacity: 10Gi

clusters/cl01tl/helm/code-server/values.yaml

@@ -9,7 +9,7 @@ code-server:
         main:
           image:
             repository: ghcr.io/linuxserver/code-server
-            tag: 4.110.0@sha256:8473aa16fba93fccc3ca772173d095bccd2e44d4d3104467fee923df10d57cd2
+            tag: 4.111.0@sha256:12c04b41f601604795562ece2ac64cade7cfca632415f4bfb1742477e3226272
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -79,7 +79,8 @@ volsync-target-config:
     enabled: true
     schedule: 16 8 * * *
   remote:
-    enabled: false
-  external:
     enabled: true
     schedule: 16 9 * * *
+  external:
+    enabled: true
+    schedule: 16 10 * * *

clusters/cl01tl/helm/dawarich/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.8.0
+  version: 7.9.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.4.0
-digest: sha256:f21fb0c49396d888de95d0b4c59ed535437422c1b24e622bf074ed0fbb22e03a
+digest: sha256:9524709cf393c01f28b0d073ef6870a2f1afd46f3bc5f564e73c55450aba8dd0
-generated: "2026-03-09T23:06:27.025881262Z"
+generated: "2026-03-11T22:56:11.749729235Z"

clusters/cl01tl/helm/dawarich/Chart.yaml

@@ -18,7 +18,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.8.0
+    version: 7.9.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
@@ -26,4 +26,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/dawarich.png
 # renovate: datasource=github-releases depName=Freika/dawarich
-appVersion: 1.3.2
+appVersion: 1.3.3

clusters/cl01tl/helm/dawarich/values.yaml

@@ -9,7 +9,7 @@ dawarich:
         main:
           image:
             repository: freikin/dawarich
-            tag: 1.3.2
+            tag: 1.3.3
             pullPolicy: IfNotPresent
           command: ["web-entrypoint.sh"]
           args: ["bin/rails", "server", "-p", "3000", "-b", "::"]
@@ -106,7 +106,7 @@ dawarich:
         sidekiq:
           image:
             repository: freikin/dawarich
-            tag: 1.3.2
+            tag: 1.3.3
             pullPolicy: IfNotPresent
           command: ["sidekiq-entrypoint.sh"]
           args: ["sidekiq"]
@@ -330,7 +330,7 @@ postgres-18-cluster:
       - name: live-backup
         suspend: false
         immediate: true
-        schedule: "0 0 0 * * *"
+        schedule: "0 10 14 * * *"
         backupName: garage-local
       # - name: weekly-backup
       #   suspend: true

clusters/cl01tl/helm/directus/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.8.0
+  version: 7.9.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.4.0
-digest: sha256:2c38827f09e57aeff21409bf223edf3f889069db6d05c39f0404ed0c974cabb3
+digest: sha256:0b50b4938669a7210930d6ee86a9602611b54cd13774f3386dbad04b4771e7f4
-generated: "2026-03-09T23:06:37.271648311Z"
+generated: "2026-03-11T22:56:26.818980186Z"

clusters/cl01tl/helm/directus/Chart.yaml

@@ -23,7 +23,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.8.0
+    version: 7.9.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
@@ -31,4 +31,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/directus.png
 # renovate: datasource=github-releases depName=directus/directus
-appVersion: 11.16.0
+appVersion: 11.16.1

clusters/cl01tl/helm/directus/templates/external-secret.yaml

@@ -94,6 +94,43 @@ spec:
         metadataPolicy: None
         property: metric-token
 
+---
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: directus-bucket-garage
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: directus-bucket-garage
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  data:
+    - secretKey: ACCESS_KEY_ID
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/directus-assets
+        metadataPolicy: None
+        property: ACCESS_KEY_ID
+    - secretKey: ACCESS_SECRET_KEY
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/directus-assets
+        metadataPolicy: None
+        property: ACCESS_SECRET_KEY
+    - secretKey: ACCESS_REGION
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/directus-assets
+        metadataPolicy: None
+        property: ACCESS_REGION
+
 ---
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret

clusters/cl01tl/helm/directus/templates/object-bucket-claim.yaml

@@ -1,11 +0,0 @@
-apiVersion: objectbucket.io/v1alpha1
-kind: ObjectBucketClaim
-metadata:
-  name: ceph-bucket-directus
-  labels:
-    app.kubernetes.io/name: ceph-bucket-directus
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  generateBucketName: bucket-directus
-  storageClassName: ceph-bucket

clusters/cl01tl/helm/directus/values.yaml

@@ -9,7 +9,7 @@ directus:
         main:
           image:
             repository: directus/directus
-            tag: 11.16.0
+            tag: 11.16.1
             pullPolicy: IfNotPresent
           env:
             - name: PUBLIC_URL
@@ -90,22 +90,22 @@ directus:
             - name: STORAGE_S3_KEY
               valueFrom:
                 secretKeyRef:
-                  name: ceph-bucket-directus
+                  name: directus-bucket-garage
-                  key: AWS_ACCESS_KEY_ID
+                  key: ACCESS_KEY_ID
             - name: STORAGE_S3_SECRET
               valueFrom:
                 secretKeyRef:
-                  name: ceph-bucket-directus
+                  name: directus-bucket-garage
-                  key: AWS_SECRET_ACCESS_KEY
+                  key: ACCESS_SECRET_KEY
-            - name: STORAGE_S3_BUCKET
-              valueFrom:
-                configMapKeyRef:
-                  name: ceph-bucket-directus
-                  key: BUCKET_NAME
             - name: STORAGE_S3_REGION
-              value: us-east-1
+              valueFrom:
+                secretKeyRef:
+                  name: directus-bucket-garage
+                  key: ACCESS_REGION
+            - name: STORAGE_S3_BUCKET
+              value: directus-assets
             - name: STORAGE_S3_ENDPOINT
-              value: http://rook-ceph-rgw-ceph-objectstore.rook-ceph.svc:80
+              value: http://garage-main.garage:3900
             - name: STORAGE_S3_FORCE_PATH_STYLE
               value: true
             - name: AUTH_PROVIDERS
@@ -219,7 +219,7 @@ postgres-18-cluster:
       - name: live-backup
         suspend: false
         immediate: true
-        schedule: "0 0 0 * * *"
+        schedule: "0 15 14 * * *"
         backupName: garage-local
       # - name: weekly-backup
       #   suspend: true

clusters/cl01tl/helm/element-web/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: element-web
   repository: https://ananace.gitlab.io/charts
-  version: 1.4.31
+  version: 1.4.32
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.4.0
-digest: sha256:5066932d870c4803fca9bc4d7b686793e801d96b14026c299e467d8c107fb7eb
+digest: sha256:49d9dd45eff7cbbc11644e4a8bd3c9d3bf84716ed034a76f097f0ba1fea4c934
-generated: "2026-03-09T22:04:10.470135964Z"
+generated: "2026-03-11T16:04:17.556777286Z"

clusters/cl01tl/helm/element-web/Chart.yaml

@@ -17,7 +17,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: element-web
-    version: 1.4.31
+    version: 1.4.32
     repository: https://ananace.gitlab.io/charts
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts

clusters/cl01tl/helm/element-web/values.yaml

@@ -2,7 +2,7 @@ element-web:
   replicaCount: 1
   image:
     repository: vectorim/element-web
-    tag: v1.12.11
+    tag: v1.12.12
     pullPolicy: IfNotPresent
   defaultServer:
     url: https://matrix.alexlebens.dev

clusters/cl01tl/helm/freshrss/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 2.4.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.8.0
+  version: 7.9.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:99f1993c99c23ba5b3af6997d859cbb18f26343e424c1312f8b6169f285a3418
+digest: sha256:a3703e245881145524304af8a03c89d309c602479be3f7f8953c2fba120bf341
-generated: "2026-03-09T22:04:20.416597531Z"
+generated: "2026-03-11T22:56:41.856429843Z"

clusters/cl01tl/helm/freshrss/Chart.yaml

@@ -26,7 +26,7 @@ dependencies:
     version: 2.4.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.8.0
+    version: 7.9.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data

clusters/cl01tl/helm/freshrss/values.yaml

@@ -197,7 +197,7 @@ postgres-18-cluster:
   recovery:
     method: objectStore
     objectStore:
-      index: 1
+      index: 2
   backup:
     objectStore:
       - name: garage-local
@@ -222,7 +222,7 @@ postgres-18-cluster:
       - name: live-backup
         suspend: false
         immediate: true
-        schedule: "0 0 0 * * *"
+        schedule: "0 20 14 * * *"
         backupName: garage-local
       # - name: weekly-backup
       #   suspend: true
@@ -250,7 +250,8 @@ volsync-target-data:
     enabled: true
     schedule: 18 8 * * *
   remote:
-    enabled: false
-  external:
     enabled: true
     schedule: 18 9 * * *
+  external:
+    enabled: true
+    schedule: 18 10 * * *

clusters/cl01tl/helm/garage/templates/service.yaml

@@ -0,0 +1,32 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: garage-main
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: garage-main
+    app.kubernetes.io/service: garage-main
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  ports:
+    - name: admin
+      port: 3903
+      protocol: TCP
+      targetPort: 3903
+    - name: rpc
+      port: 3901
+      protocol: TCP
+      targetPort: 3901
+    - name: s3
+      port: 3900
+      protocol: TCP
+      targetPort: 3900
+    - name: web
+      port: 3902
+      protocol: TCP
+      targetPort: 3902
+  selector:
+    app.kubernetes.io/instance: garage
+    app.kubernetes.io/name: garage
+    garage-type: server

clusters/cl01tl/helm/garage/values.yaml

@@ -118,9 +118,9 @@ garage:
             pullPolicy: IfNotPresent
           env:
             - name: API_BASE_URL
-              value: http://garage-1.garage:3903
+              value: http://garage-main.garage:3903
             - name: S3_ENDPOINT_URL
-              value: http://garage-1.garage:3900
+              value: http://garage-main.garage:3900
             - name: API_ADMIN_KEY
               valueFrom:
                 secretKeyRef:
@@ -225,26 +225,6 @@ garage:
           api_bind_addr = "[::]:3903"
           metrics_require_token = true
   service:
-    garage-main:
-      forceRename: garage-main
-      controller: server-2
-      ports:
-        s3:
-          port: 3900
-          targetPort: 3900
-          protocol: HTTP
-        rpc:
-          port: 3901
-          targetPort: 3901
-          protocol: HTTP
-        web:
-          port: 3902
-          targetPort: 3902
-          protocol : HTTP
-        admin:
-          port: 3903
-          targetPort: 3903
-          protocol: HTTP
     server-1:
       forceRename: garage-1
       controller: server-1
@@ -322,8 +302,8 @@ garage:
       serviceName: '{{ include "bjw-s.common.lib.chart.names.fullname" $ }}'
       endpoints:
         - port: admin
-          interval: 1m
+          interval: 5m
-          scrapeTimeout: 30s
+          scrapeTimeout: 2m
           path: /metrics
           bearerTokenSecret:
             name: garage-token-secret

clusters/cl01tl/helm/gatus/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 1.5.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.8.0
+  version: 7.9.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:c0c46db33b89b7a53dd512d19d07623a1eaafcc93668f0afacbb8d8c56d71e47
+digest: sha256:2fe7c088e99a11e0c6dd09fe48bb1e292eb58e22d9f8ff681bb6c6790945d54e
-generated: "2026-03-06T01:07:17.642671539Z"
+generated: "2026-03-11T22:56:56.957400817Z"

clusters/cl01tl/helm/gatus/Chart.yaml

@@ -22,7 +22,7 @@ dependencies:
     version: 1.5.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.8.0
+    version: 7.9.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data

clusters/cl01tl/helm/gatus/values.yaml

@@ -137,6 +137,9 @@ gatus:
       - name: yamtrack
         url: https://yamtrack.alexlebens.net
         <<: *defaults
+      - name: movie-roulette
+        url: https://movie-roulette.alexlebens.net
+        <<: *defaults
       - name: jellyfin
         url: https://jellyfin.alexlebens.net
         <<: *defaults
@@ -427,7 +430,7 @@ postgres-18-cluster:
       - name: live-backup
         suspend: false
         immediate: true
-        schedule: "0 0 0 * * *"
+        schedule: "0 25 14 * * *"
         backupName: garage-local
       # - name: weekly-backup
       #   suspend: true
@@ -443,9 +446,10 @@ volsync-target-data:
   pvcTarget: gatus
   local:
     enabled: true
-    schedule: 22 8 * * *
+    schedule: 20 8 * * *
   remote:
-    enabled: false
+    enabled: true
+    schedule: 20 9 * * *
   external:
     enabled: true
-    schedule: 22 9 * * *
+    schedule: 20 10 * * *

clusters/cl01tl/helm/gitea/Chart.lock

@@ -13,7 +13,7 @@ dependencies:
   version: 2.4.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.8.0
+  version: 7.9.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.4.0
@@ -23,5 +23,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:177a591c68e99a6f63f8acaf904cfc444774814db4ccd3ac410be511d67bbf9c
+digest: sha256:8f243465537fe443e97a8813e23e95d3608a6a2898b93209d03cf43f4ca8cc5d
-generated: "2026-03-09T23:06:50.110952088Z"
+generated: "2026-03-11T22:57:17.026946319Z"

clusters/cl01tl/helm/gitea/Chart.yaml

@@ -40,7 +40,7 @@ dependencies:
     version: 2.4.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.8.0
+    version: 7.9.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey-gitea
@@ -56,4 +56,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/gitea.png
 # renovate: datasource=github-releases depName=go-gitea/gitea
-appVersion: 1.25.4
+appVersion: 1.25.5

clusters/cl01tl/helm/gitea/values.yaml

@@ -4,7 +4,7 @@ gitea:
   replicaCount: 3
   image:
     repository: gitea/gitea
-    tag: 1.25.4
+    tag: 1.25.5
   service:
     http:
       type: ClusterIP
@@ -222,7 +222,7 @@ postgres-18-cluster:
       - name: live-backup
         suspend: false
         immediate: true
-        schedule: "0 0 0 * * *"
+        schedule: "0 0 7 * * *"
         backupName: garage-local
       # - name: weekly-backup
       #   suspend: true
@@ -259,7 +259,7 @@ volsync-target-storage:
     fsGroupChangePolicy: OnRootMismatch
   local:
     enabled: true
-    schedule: 0 0 0 * * *
+    schedule: 0 0 7 * * *
     restic:
       pruneIntervalDays: 3
       retain:

clusters/cl01tl/helm/grafana-operator/Chart.lock

@@ -1,15 +1,15 @@
 dependencies:
 - name: grafana-operator
   repository: https://grafana.github.io/helm-charts
-  version: 5.22.0
+  version: 5.22.1
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.8.0
+  version: 7.9.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.4.0
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.4.0
-digest: sha256:6f4dc1456854cad04f387cef6e0a9c846e76eb811bf97f2b7b13877cb3f577bd
+digest: sha256:932d9b24ad52ab2a28311f522714ecbad2bedea512ce48d26fcb95cc74b51af9
-generated: "2026-03-09T23:07:06.293890171Z"
+generated: "2026-03-14T19:50:53.708173087Z"

clusters/cl01tl/helm/grafana-operator/Chart.yaml

@@ -17,11 +17,11 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: grafana-operator
-    version: 5.22.0
+    version: 5.22.1
     repository: https://grafana.github.io/helm-charts
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.8.0
+    version: 7.9.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey-unified-alerting
@@ -33,4 +33,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/grafana.png
 # renovate: datasource=github-releases depName=grafana/grafana-operator
-appVersion: v5.22.0
+appVersion: v5.22.1

clusters/cl01tl/helm/grafana-operator/values.yaml

@@ -42,7 +42,7 @@ postgres-18-cluster:
       - name: live-backup
         suspend: false
         immediate: true
-        schedule: "0 0 0 * * *"
+        schedule: "0 30 14 * * *"
         backupName: garage-local
       # - name: weekly-backup
       #   suspend: true

clusters/cl01tl/helm/harbor/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 1.18.2
 - name: postgres-cluster
   repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
-  version: 7.8.0
+  version: 7.9.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.4.0
-digest: sha256:ee8ed34cd53d8fa36497df28cba9cf16ef656250b0bc3ff6690fb958b22caf6f
+digest: sha256:898f51eabee5959b9e7ebe90640cb915cb2dee446e6a6649a29499fecab8b6c7
-generated: "2026-03-09T23:07:20.650108569Z"
+generated: "2026-03-11T22:58:00.955579445Z"

clusters/cl01tl/helm/harbor/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     repository: https://helm.goharbor.io
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.8.0
+    version: 7.9.1
     repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
   - name: valkey
     alias: valkey
@@ -29,4 +29,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/harbor.png
 # renovate: datasource=github-releases depName=goharbor/harbor
-appVersion: v2.14.2
+appVersion: v2.14.3

clusters/cl01tl/helm/harbor/values.yaml

@@ -41,12 +41,12 @@ harbor:
   portal:
     image:
       repository: goharbor/harbor-portal
-      tag: v2.14.2
+      tag: v2.14.3
     replicas: 2
   core:
     image:
       repository: goharbor/harbor-core
-      tag: v2.14.2
+      tag: v2.14.3
     replicas: 2
     existingSecret: harbor-secret
     secretName: harbor-secret
@@ -54,7 +54,7 @@ harbor:
   jobservice:
     image:
       repository: goharbor/harbor-jobservice
-      tag: v2.14.2
+      tag: v2.14.3
     replicas: 2
     jobLoggers:
       - stdout
@@ -63,11 +63,11 @@ harbor:
     registry:
       image:
         repository: goharbor/registry-photon
-        tag: v2.14.2
+        tag: v2.14.3
     controller:
       image:
         repository: goharbor/harbor-registryctl
-        tag: v2.14.2
+        tag: v2.14.3
     existingSecret: harbor-secret
     relativeurls: true
     credentials:
@@ -94,14 +94,14 @@ harbor:
   exporter:
     image:
       repository: goharbor/harbor-exporter
-      tag: v2.14.2
+      tag: v2.14.3
     replicas: 2
 postgres-18-cluster:
   mode: recovery
   recovery:
     method: objectStore
     objectStore:
-      index: 1
+      index: 2
   backup:
     objectStore:
       - name: garage-local
@@ -126,7 +126,7 @@ postgres-18-cluster:
       - name: live-backup
         suspend: false
         immediate: true
-        schedule: "0 0 0 * * *"
+        schedule: "0 35 14 * * *"
         backupName: garage-local
       # - name: weekly-backup
       #   suspend: true

clusters/cl01tl/helm/headlamp/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: headlamp
   repository: https://kubernetes-sigs.github.io/headlamp/
-  version: 0.40.0
+  version: 0.40.1
-digest: sha256:b7f8f176f8c4902130e87660adb39211fd5ca454f89f5a7e9ed577cd4c3a2255
+digest: sha256:723a57d6fe86a124b8bae7dfc1dde0c2abd60021837826b486054df00551dc03
-generated: "2026-02-05T18:23:45.100522813Z"
+generated: "2026-03-14T15:02:53.184950913Z"

clusters/cl01tl/helm/headlamp/Chart.yaml

@@ -14,7 +14,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: headlamp
-    version: 0.40.0
+    version: 0.40.1
     repository: https://kubernetes-sigs.github.io/headlamp/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/headlamp.png
 # renovate: datasource=github-releases depName=headlamp-k8s/headlamp

clusters/cl01tl/helm/headlamp/values.yaml

@@ -8,6 +8,8 @@ headlamp:
         enabled: true
         name: headlamp-oidc-secret
     watchPlugins: true
+    # Bypasses: https://github.com/kubernetes-sigs/headlamp/issues/4883
+    sessionTTL: null
   resources:
     requests:
       cpu: 10m

clusters/cl01tl/helm/home-assistant/values.yaml

@@ -21,7 +21,7 @@ home-assistant:
         code-server:
           image:
             repository: ghcr.io/linuxserver/code-server
-            tag: 4.110.0@sha256:8473aa16fba93fccc3ca772173d095bccd2e44d4d3104467fee923df10d57cd2
+            tag: 4.111.0@sha256:12c04b41f601604795562ece2ac64cade7cfca632415f4bfb1742477e3226272
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -134,9 +134,10 @@ volsync-target-config:
     fsGroupChangePolicy: OnRootMismatch
   local:
     enabled: true
-    schedule: 24 8 * * *
+    schedule: 22 8 * * *
   remote:
-    enabled: false
+    enabled: true
+    schedule: 22 9 * * *
   external:
     enabled: true
-    schedule: 24 9 * * *
+    schedule: 22 10 * * *

clusters/cl01tl/helm/homepage/Chart.yaml

@@ -19,4 +19,4 @@ dependencies:
     version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/homepage.png
 # renovate: datasource=github-releases depName=gethomepage/homepage
-appVersion: v1.10.1
+appVersion: v1.11.0

clusters/cl01tl/helm/homepage/values.yaml

@@ -16,7 +16,7 @@ homepage:
         main:
           image:
             repository: ghcr.io/gethomepage/homepage
-            tag: v1.10.1
+            tag: v1.11.0
             pullPolicy: IfNotPresent
           env:
             - name: HOMEPAGE_ALLOWED_HOSTS
@@ -160,6 +160,12 @@ homepage:
                   href: https://yamtrack.alexlebens.net
                   siteMonitor: http://yamtrack.yamtrack:80
                   statusStyle: dot
+              - Movie Roulette:
+                  icon: https://raw.githubusercontent.com/sahara101/Movie-Roulette/refs/heads/main/static/icons/icon.png
+                  description: Movie Roulette
+                  href: https://movie-roulette.alexlebens.net
+                  siteMonitor: http://movie-roulette.movie-roulette:80
+                  statusStyle: dot
               - Movies and TV:
                   icon: sh-jellyfin.webp
                   description: Jellyfin

clusters/cl01tl/helm/immich/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.8.0
+  version: 7.9.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.4.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:360f79209535cd9132b7db774aabd6492c2c287e62f00795e5f4ae4cc6a038c0
+digest: sha256:b886b0a1555ea75fbff52a58ccbf1659acbda20e933107bcbab9b00192aa25bd
-generated: "2026-03-09T23:07:40.320287247Z"
+generated: "2026-03-11T22:58:20.294240859Z"

clusters/cl01tl/helm/immich/Chart.yaml

@@ -20,7 +20,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.8.0
+    version: 7.9.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey

clusters/cl01tl/helm/immich/values.yaml

@@ -209,7 +209,7 @@ postgres-18-cluster:
       - name: live-backup
         suspend: false
         immediate: true
-        schedule: "0 0 0 * * *"
+        schedule: "0 40 14 * * *"
         backupName: garage-local
       # - name: weekly-backup
       #   suspend: true
@@ -225,16 +225,16 @@ volsync-target-data:
   pvcTarget: immich
   local:
     enabled: true
-    schedule: 28 8 * * *
+    schedule: 24 8 * * *
     restic:
       cacheCapacity: 10Gi
   remote:
     enabled: true
-    schedule: 28 10 * * *
+    schedule: 24 9 * * *
     restic:
       cacheCapacity: 10Gi
   external:
     enabled: true
-    schedule: 28 9 * * *
+    schedule: 24 10 * * *
     restic:
       cacheCapacity: 10Gi

clusters/cl01tl/helm/jellyfin/values.yaml

@@ -143,14 +143,16 @@ volsync-target-config:
   pvcTarget: jellyfin-config
   local:
     enabled: true
-    schedule: 30 8 * * *
+    schedule: 26 8 * * *
     restic:
       cacheCapacity: 10Gi
   remote:
+    enabled: true
+    schedule: 26 9 * * *
     restic:
       cacheCapacity: 10Gi
   external:
     enabled: true
-    schedule: 30 9 * * *
+    schedule: 26 10 * * *
     restic:
       cacheCapacity: 10Gi

clusters/cl01tl/helm/jellystat/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.8.0
+  version: 7.9.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:0f8868c6e89c0f283650db5446e8f36f162cb2179f62eb58e67b5b08c03ac84d
+digest: sha256:29b92b08c230d5f3abc13949b299acccd1e9f8ff7df1f691a5dec41df5405595
-generated: "2026-03-06T01:09:37.09922161Z"
+generated: "2026-03-11T22:58:35.766813121Z"

clusters/cl01tl/helm/jellystat/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.8.0
+    version: 7.9.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data

clusters/cl01tl/helm/jellystat/values.yaml

@@ -129,7 +129,7 @@ postgres-18-cluster:
       - name: live-backup
         suspend: false
         immediate: true
-        schedule: "0 0 0 * * *"
+        schedule: "0 45 14 * * *"
         backupName: garage-local
       # - name: weekly-backup
       #   suspend: true
@@ -145,9 +145,10 @@ volsync-target-data:
   pvcTarget: jellystat-data
   local:
     enabled: true
-    schedule: 32 8 * * *
+    schedule: 28 8 * * *
   remote:
-    enabled: false
+    enabled: true
+    schedule: 28 9 * * *
   external:
     enabled: true
-    schedule: 32 9 * * *
+    schedule: 28 10 * * *

clusters/cl01tl/helm/karakeep/templates/external-secret.yaml

@@ -57,6 +57,43 @@ spec:
         metadataPolicy: None
         property: secret
 
+---
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: karakeep-bucket-garage
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: karakeep-bucket-garage
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  data:
+    - secretKey: ACCESS_KEY_ID
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/karakeep-assets
+        metadataPolicy: None
+        property: ACCESS_KEY_ID
+    - secretKey: ACCESS_SECRET_KEY
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/karakeep-assets
+        metadataPolicy: None
+        property: ACCESS_SECRET_KEY
+    - secretKey: ACCESS_REGION
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /garage/home-infra/karakeep-assets
+        metadataPolicy: None
+        property: ACCESS_REGION
+
 ---
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret

clusters/cl01tl/helm/karakeep/templates/object-bucket-claim.yaml

@@ -1,11 +0,0 @@
-apiVersion: objectbucket.io/v1alpha1
-kind: ObjectBucketClaim
-metadata:
-  name: ceph-bucket-karakeep
-  labels:
-    app.kubernetes.io/name: ceph-bucket-karakeep
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  generateBucketName: bucket-karakeep
-  storageClassName: ceph-bucket

clusters/cl01tl/helm/karakeep/values.yaml

@@ -29,24 +29,24 @@ karakeep:
                   name: karakeep-key-secret
                   key: prometheus-token
             - name: ASSET_STORE_S3_ENDPOINT
-              value: http://rook-ceph-rgw-ceph-objectstore.rook-ceph.svc:80
+              value: http://garage-main.garage:3900
             - name: ASSET_STORE_S3_REGION
-              value: us-east-1
-            - name: ASSET_STORE_S3_BUCKET
               valueFrom:
-                configMapKeyRef:
+                secretKeyRef:
-                  name: ceph-bucket-karakeep
+                  name: karakeep-bucket-garage
-                  key: BUCKET_NAME
+                  key: ACCESS_REGION
+            - name: ASSET_STORE_S3_BUCKET
+              value: karakeep-assets
             - name: ASSET_STORE_S3_ACCESS_KEY_ID
               valueFrom:
                 secretKeyRef:
-                  name: ceph-bucket-karakeep
+                  name: karakeep-bucket-garage
-                  key: AWS_ACCESS_KEY_ID
+                  key: ACCESS_KEY_ID
             - name: ASSET_STORE_S3_SECRET_ACCESS_KEY
               valueFrom:
                 secretKeyRef:
-                  name: ceph-bucket-karakeep
+                  name: karakeep-bucket-garage
-                  key: AWS_SECRET_ACCESS_KEY
+                  key: ACCESS_SECRET_KEY
             - name: ASSET_STORE_S3_FORCE_PATH_STYLE
               value: true
             - name: MEILI_ADDR
@@ -172,9 +172,10 @@ volsync-target-data:
   pvcTarget: karakeep
   local:
     enabled: true
-    schedule: 34 8 * * *
+    schedule: 30 8 * * *
   remote:
-    enabled: false
+    enabled: true
+    schedule: 30 9 * * *
   external:
     enabled: true
-    schedule: 34 9 * * *
+    schedule: 30 10 * * *

clusters/cl01tl/helm/komodo/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.8.0
+  version: 7.9.1
-digest: sha256:dd1ccfe8d0bfc7248141d2f72806c6437572f21d818941e9071f58d1a0a47259
+digest: sha256:833a88f82c14f78d63abea99244f2473bee2f5124a533a898a34844956f62b27
-generated: "2026-02-27T18:17:12.586352018Z"
+generated: "2026-03-11T22:58:51.287064579Z"

clusters/cl01tl/helm/komodo/Chart.yaml

@@ -23,7 +23,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgresql-17-fdb-cluster
-    version: 7.8.0
+    version: 7.9.1
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/komodo.png
 # renovate: datasource=github-releases depName=moghtech/komodo

clusters/cl01tl/helm/komodo/values.yaml

@@ -205,7 +205,7 @@ postgresql-17-fdb-cluster:
   recovery:
     method: objectStore
     objectStore:
-      index: 1
+      index: 2
   backup:
     objectStore:
       - name: garage-local
@@ -230,7 +230,7 @@ postgresql-17-fdb-cluster:
       - name: live-backup
         suspend: false
         immediate: true
-        schedule: "0 0 0 * * *"
+        schedule: "0 50 14 * * *"
         backupName: garage-local
       # - name: weekly-backup
       #   suspend: true

clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: kube-prometheus-stack
   repository: oci://ghcr.io/prometheus-community/charts
-  version: 82.10.2
+  version: 82.10.3
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
   version: 4.6.2
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.4.0
-digest: sha256:9019f0e0bcbe5033457c9d402590b51a1b27e2e6141bfd5d84b9b30a5f666c98
+digest: sha256:37ffa4a21ed29703cae9c9f3fb029566a1dd6af6e0fe8cc3862a2226d6644114
-generated: "2026-03-09T23:07:53.50141436Z"
+generated: "2026-03-10T19:02:41.11005238Z"

clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml

@@ -20,7 +20,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: kube-prometheus-stack
-    version: 82.10.2
+    version: 82.10.3
     repository: oci://ghcr.io/prometheus-community/charts
   - name: app-template
     alias: ntfy-alertmanager

clusters/cl01tl/helm/libation/Chart.yaml

@@ -24,4 +24,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/libation.png
 # renovate: datasource=github-releases depName=rmcrackan/Libation
-appVersion: 13.2.1
+appVersion: 13.3.0

clusters/cl01tl/helm/libation/values.yaml

@@ -16,7 +16,7 @@ libation:
         main:
           image:
             repository: rmcrackan/libation
-            tag: 13.2.1
+            tag: 13.3.0
             pullPolicy: IfNotPresent
           env:
             - name: SLEEP_TIME
@@ -75,9 +75,10 @@ volsync-target-config:
   pvcTarget: libation
   local:
     enabled: true
-    schedule: 36 8 * * *
+    schedule: 32 8 * * *
   remote:
-    enabled: false
+    enabled: true
+    schedule: 32 9 * * *
   external:
     enabled: true
-    schedule: 36 9 * * *
+    schedule: 32 10 * * *

clusters/cl01tl/helm/lidarr/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.8.0
+  version: 7.9.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:4511a3475316ebf0bd5da452e69602b7d52746253c659a433e61851f51093285
+digest: sha256:d43b95fa1fc70c93541b9d73180406b31059c6cc45aa57a0cc8d9386c64833c3
-generated: "2026-03-06T01:10:55.882802086Z"
+generated: "2026-03-11T22:59:07.151659257Z"

clusters/cl01tl/helm/lidarr/Chart.yaml

@@ -24,7 +24,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.8.0
+    version: 7.9.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/lidarr/values.yaml

@@ -15,7 +15,7 @@ lidarr:
         main:
           image:
             repository: ghcr.io/linuxserver/lidarr
-            tag: 3.1.2-nightly@sha256:f64fabd1737d9c7d519e1a37aba97b2e110d717e1c497a6f9788766f9633cf8f
+            tag: 3.1.2-nightly@sha256:2b1b64f07214c6cf05bcfed999aa74ee23825e4bc2ef2c48aba1cd5d5bf968fe
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -167,7 +167,7 @@ postgres-18-cluster:
       - name: live-backup
         suspend: false
         immediate: true
-        schedule: "0 0 0 * * *"
+        schedule: "0 55 14 * * *"
         backupName: garage-local
       # - name: weekly-backup
       #   suspend: true
@@ -188,9 +188,10 @@ volsync-target-config:
     fsGroupChangePolicy: OnRootMismatch
   local:
     enabled: true
-    schedule: 38 8 * * *
+    schedule: 34 8 * * *
   remote:
-    enabled: false
+    enabled: true
+    schedule: 34 9 * * *
   external:
     enabled: true
-    schedule: 38 9 * * *
+    schedule: 34 10 * * *

clusters/cl01tl/helm/local-path-provisioner/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: local-path-provisioner
   repository: https://charts.containeroo.ch
-  version: 0.0.35
+  version: 0.0.36
-digest: sha256:c59cc5a81e797a9e2ab0f8e6bf03cb3e4dfc740555631aa1d41b7def1d2c60c8
+digest: sha256:ac212733a0ba2046767ad1718ca740d5aad3d1bfc49c5e7a5056c8414c1d65d4
-generated: "2026-01-10T19:01:45.394965495Z"
+generated: "2026-03-10T19:00:30.739038561Z"

clusters/cl01tl/helm/local-path-provisioner/Chart.yaml

@@ -15,7 +15,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: local-path-provisioner
-    version: 0.0.35
+    version: 0.0.36
     repository: https://charts.containeroo.ch
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 # renovate: datasource=github-releases depName=rancher/local-path-provisioner

clusters/cl01tl/helm/loki/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: loki
   repository: https://grafana.github.io/helm-charts
-  version: 6.53.0
+  version: 6.55.0
 - name: alloy
   repository: https://grafana.github.io/helm-charts
-  version: 1.6.1
+  version: 1.6.2
-digest: sha256:ec17a816dcdc476ad67cd056556d9a42a9fb8057ef75a928f8604939006e3416
+digest: sha256:463184dc134143723f8567a1ebd228353cf0253a139f0a4e76637ec65aa4aaf1
-generated: "2026-03-02T15:18:56.219024346Z"
+generated: "2026-03-14T18:16:47.779817047Z"

clusters/cl01tl/helm/loki/Chart.yaml

@@ -16,10 +16,10 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: loki
-    version: 6.53.0
+    version: 6.55.0
     repository: https://grafana.github.io/helm-charts
   - name: alloy
-    version: 1.6.1
+    version: 1.6.2
     repository: https://grafana.github.io/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/loki.png
 # renovate: datasource=github-releases depName=grafana/loki

clusters/cl01tl/helm/mariadb-operator/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 25.10.4
 - name: mariadb-operator-crds
   repository: https://helm.mariadb.com/mariadb-operator
-  version: 25.10.4
+  version: 26.3.0
-digest: sha256:fcb4433060885746dd43a5fb4d8b32163d50d97dc4614fbf4c82f966a1723304
+digest: sha256:a159f646b8f7501cc5285a508e21dcc96ced71722a3c911b1ee0c73ef7fc0e3a
-generated: "2026-01-08T21:21:13.446114122Z"
+generated: "2026-03-14T18:39:29.639188669Z"

clusters/cl01tl/helm/mariadb-operator/Chart.yaml

@@ -18,7 +18,7 @@ dependencies:
     version: 25.10.4
     repository: https://helm.mariadb.com/mariadb-operator
   - name: mariadb-operator-crds
-    version: 25.10.4
+    version: 26.3.0
     repository: https://helm.mariadb.com/mariadb-operator
 icon: https://mariadb-operator.github.io/mariadb-operator/assets/mariadb_profile.svg
 # renovate: datasource=github-releases depName=mariadb-operator/mariadb-operator

clusters/cl01tl/helm/matrix-synapse/Chart.lock

@@ -1,7 +1,7 @@
 dependencies:
 - name: matrix-synapse
   repository: https://ananace.gitlab.io/charts
-  version: 3.12.22
+  version: 3.12.23
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
   version: 4.6.2
@@ -19,7 +19,7 @@ dependencies:
   version: 2.4.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.8.0
+  version: 7.9.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.4.0
@@ -38,5 +38,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:fc6e3a04b828daf3a0861aec6a7a6d1c9a45fabaf29abd3fb3be2e8db4d0875b
+digest: sha256:fb87880d3de281064519117d8046d7de14f41450ec8ff8c3c603f0179004768e
-generated: "2026-03-09T23:08:07.610958823Z"
+generated: "2026-03-12T11:03:45.232564538Z"

clusters/cl01tl/helm/matrix-synapse/Chart.yaml

@@ -29,7 +29,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: matrix-synapse
-    version: 3.12.22
+    version: 3.12.23
     repository: https://ananace.gitlab.io/charts
   - name: app-template
     alias: matrix-hookshot
@@ -53,7 +53,7 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.8.0
+    version: 7.9.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey-matrix-synapse
@@ -81,4 +81,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/matrix.png
 # renovate: datasource=github-releases depName=element-hq/synapse
-appVersion: v1.149.0
+appVersion: v1.149.1

clusters/cl01tl/helm/matrix-synapse/values.yaml

@@ -434,7 +434,7 @@ postgres-18-cluster:
       - name: live-backup
         suspend: false
         immediate: true
-        schedule: "0 0 0 * * *"
+        schedule: "0 0 15 * * *"
         backupName: garage-local
       # - name: weekly-backup
       #   suspend: true
@@ -470,22 +470,24 @@ volsync-target-synapse:
   pvcTarget: matrix-synapse
   local:
     enabled: true
-    schedule: 44 8 * * *
+    schedule: 36 8 * * *
   remote:
-    enabled: false
+    enabled: true
+    schedule: 36 9 * * *
   external:
     enabled: true
-    schedule: 44 9 * * *
+    schedule: 36 10 * * *
 volsync-target-hookshot:
   pvcTarget: matrix-hookshot
   local:
     enabled: true
-    schedule: 46 8 * * *
+    schedule: 38 8 * * *
   remote:
-    enabled: false
+    enabled: true
+    schedule: 38 9 * * *
   external:
     enabled: true
-    schedule: 46 9 * * *
+    schedule: 38 10 * * *
 volsync-target-discord:
   pvcTarget: mautrix-discord
   moverSecurityContext:
@@ -493,12 +495,13 @@ volsync-target-discord:
     runAsGroup: 1337
   local:
     enabled: true
-    schedule: 48 8 * * *
+    schedule: 40 8 * * *
   remote:
-    enabled: false
+    enabled: true
+    schedule: 40 9 * * *
   external:
     enabled: true
-    schedule: 48 9 * * *
+    schedule: 40 10 * * *
 volsync-target-whatsapp:
   pvcTarget: mautrix-whatsapp
   moverSecurityContext:
@@ -506,9 +509,10 @@ volsync-target-whatsapp:
     runAsGroup: 1337
   local:
     enabled: true
-    schedule: 50 8 * * *
+    schedule: 42 8 * * *
   remote:
-    enabled: false
+    enabled: true
+    schedule: 42 9 * * *
   external:
     enabled: true
-    schedule: 50 9 * * *
+    schedule: 42 10 * * *

clusters/cl01tl/helm/movie-roulette/Chart.lock

@@ -0,0 +1,6 @@
+dependencies:
+- name: app-template
+  repository: https://bjw-s-labs.github.io/helm-charts/
+  version: 4.6.2
+digest: sha256:faa35ccfc18b2d47fad558e168bd3c68e64790fe2b1356881452ae4f5cd8b443
+generated: "2026-03-10T16:01:13.738843-05:00"

clusters/cl01tl/helm/movie-roulette/Chart.yaml

@@ -0,0 +1,22 @@
+apiVersion: v2
+name: movie-roulette
+version: 1.0.0
+description: Movie Roulette
+keywords:
+  - movie-roulette
+  - jellyfin
+home: https://wiki.alexlebens.dev/
+sources:
+  - https://github.com/sahara101/Movie-Roulette
+  - https://github.com/sahara101/Movie-Roulette/pkgs/container/movie-roulette
+  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
+maintainers:
+  - name: alexlebens
+dependencies:
+  - name: app-template
+    alias: movie-roulette
+    repository: https://bjw-s-labs.github.io/helm-charts/
+    version: 4.6.2
+icon: https://raw.githubusercontent.com/sahara101/Movie-Roulette/refs/heads/main/static/icons/icon.png
+# renovate: datasource=github-releases depName=sahara101/Movie-Roulette
+appVersion: v5.2.1

clusters/cl01tl/helm/movie-roulette/templates/external-secret.yaml

@@ -0,0 +1,42 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: movie-roulette-config-secret
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: movie-roulette-config-secret
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  data:
+    - secretKey: secret-key
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/movie-roulette/key
+        metadataPolicy: None
+        property: secret-key
+    - secretKey: jellyfin-key
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/jellyfin/movie-roulette
+        metadataPolicy: None
+        property: jellyfin-key
+    - secretKey: jellyfin-user
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/jellyfin/movie-roulette
+        metadataPolicy: None
+        property: user
+    - secretKey: seerr-key
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/seerr/key
+        metadataPolicy: None
+        property: key

clusters/cl01tl/helm/movie-roulette/values.yaml

@@ -0,0 +1,128 @@
+movie-roulette:
+  controllers:
+    main:
+      type: deployment
+      replicas: 1
+      strategy: Recreate
+      revisionHistoryLimit: 3
+      containers:
+        main:
+          image:
+            repository: ghcr.io/sahara101/movie-roulette
+            tag: v5.2.1
+            pullPolicy: IfNotPresent
+          env:
+            - name: FLASK_SECRET_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: movie-roulette-config-secret
+                  key: secret-key
+            - name: CORS_ALLOWED_ORIGINS
+              value: movie-roulette.alexlebens.net
+            - name: DISABLE_SETTINGS
+              value: "TRUE"
+            - name: AUTH_ENABLED
+              value: "TRUE"
+            - name: AUTH_SESSION_LIFETIME
+              value: "86400"
+            - name: JELLYFIN_URL
+              value: http://jellyfin.alexlebens.net
+            - name: JELLYFIN_API_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: movie-roulette-config-secret
+                  key: jellyfin-key
+            - name: JELLYFIN_USER_ID
+              valueFrom:
+                secretKeyRef:
+                  name: movie-roulette-config-secret
+                  key: jellyfin-user
+            - name: LOGIN_BACKDROP_ENABLED
+              value: "TRUE"
+            - name: HOMEPAGE_MODE
+              value: "FALSE"
+            - name: USE_LINKS
+              value: "TRUE"
+            - name: USE_FILTER
+              value: "TRUE"
+            - name: USE_WATCH_BUTTON
+              value: "TRUE"
+            - name: USE_NEXT_BUTTON
+              value: "TRUE"
+            - name: USE_GRID_VIEW
+              value: "true"
+            - name: ENABLE_MOBILE_TRUNCATION
+              value: "TRUE"
+            - name: SHOW_NOW_WATCHING_CARD
+              value: "FALSE"
+            - name: USE_HEROUI_THEME
+              value: "FALSE"
+            - name: ENABLE_MOVIE_LOGOS
+              value: "TRUE"
+            - name: LOAD_MOVIE_ON_START
+              value: "FALSE"
+            - name: SEERR_URL
+              value: http://seerr.alexlebens.net
+            - name: SEERR_API_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: movie-roulette-config-secret
+                  key: seerr-key
+            - name: REQUEST_SERVICE_DEFAULT
+              value: "seerr"
+          resources:
+            requests:
+              cpu: 10m
+              memory: 128Mi
+  service:
+    main:
+      controller: main
+      ports:
+        http:
+          port: 80
+          targetPort: 4000
+          protocol: HTTP
+  route:
+    main:
+      kind: HTTPRoute
+      parentRefs:
+        - group: gateway.networking.k8s.io
+          kind: Gateway
+          name: traefik-gateway
+          namespace: traefik
+      hostnames:
+        - movie-roulette.alexlebens.net
+      rules:
+        - backendRefs:
+            - group: ''
+              kind: Service
+              name: movie-roulette
+              port: 80
+              weight: 100
+          matches:
+            - path:
+                type: PathPrefix
+                value: /
+  persistence:
+    data:
+      forceRename: movie-roulette-data
+      storageClass: ceph-block
+      accessMode: ReadWriteOnce
+      size: 1Gi
+      retain: true
+      advancedMounts:
+        main:
+          main:
+            - path: /config
+              readOnly: false
+volsync-target-data:
+  pvcTarget: movie-roulette-data
+  local:
+    enabled: true
+    schedule: 44 8 * * *
+  remote:
+    enabled: true
+    schedule: 44 9 * * *
+  external:
+    enabled: true
+    schedule: 44 10 * * *

clusters/cl01tl/helm/music-grabber/values.yaml

@@ -9,7 +9,7 @@ music-grabber:
         main:
           image:
             repository: g33kphr33k/musicgrabber
-            tag: 2.3.5
+            tag: 2.4.3
             pullPolicy: IfNotPresent
           env:
             - name: MUSIC_DIR

clusters/cl01tl/helm/navidrome/values.yaml

@@ -178,9 +178,10 @@ volsync-target-data:
     fsGroupChangePolicy: OnRootMismatch
   local:
     enabled: true
-    schedule: 52 8 * * *
+    schedule: 46 8 * * *
   remote:
-    enabled: false
+    enabled: true
+    schedule: 46 9 * * *
   external:
     enabled: true
-    schedule: 52 9 * * *
+    schedule: 46 10 * * *

clusters/cl01tl/helm/ollama/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.8.0
+  version: 7.9.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:a6aa65545de5125a27cf0324f6e8cbd6d69471ca32f32083cc0f1d3fd49efa15
+digest: sha256:a3201fc53ddfbaeb5a81d08e9d20135fb59174879e20f0b4986b1b8540011e03
-generated: "2026-03-06T01:12:09.026288121Z"
+generated: "2026-03-11T22:59:44.389634096Z"

clusters/cl01tl/helm/ollama/Chart.yaml

@@ -23,7 +23,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.8.0
+    version: 7.9.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data
@@ -31,4 +31,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ollama.png
 # renovate: datasource=github-releases depName=ollama/ollama
-appVersion: 0.17.7
+appVersion: 0.18.0

clusters/cl01tl/helm/ollama/values.yaml

@@ -22,7 +22,7 @@ ollama:
         main:
           image:
             repository: ollama/ollama
-            tag: 0.17.7
+            tag: 0.18.0
             pullPolicy: IfNotPresent
           env:
             - name: OLLAMA_KEEP_ALIVE
@@ -58,7 +58,7 @@ ollama:
         main:
           image:
             repository: ollama/ollama
-            tag: 0.17.7
+            tag: 0.18.0
             pullPolicy: IfNotPresent
           env:
             - name: OLLAMA_KEEP_ALIVE
@@ -94,7 +94,7 @@ ollama:
         main:
           image:
             repository: ollama/ollama
-            tag: 0.17.7
+            tag: 0.18.0
             pullPolicy: IfNotPresent
           env:
             - name: OLLAMA_KEEP_ALIVE
@@ -289,7 +289,7 @@ postgres-18-cluster:
       - name: live-backup
         suspend: false
         immediate: true
-        schedule: "0 0 0 * * *"
+        schedule: "0 5 15 * * *"
         backupName: garage-local
       # - name: weekly-backup
       #   suspend: true
@@ -308,9 +308,10 @@ volsync-target-data:
     runAsGroup: 1337
   local:
     enabled: true
-    schedule: 54 8 * * *
+    schedule: 48 8 * * *
   remote:
-    enabled: false
+    enabled: true
+    schedule: 48 9 * * *
   external:
     enabled: true
-    schedule: 54 9 * * *
+    schedule: 48 10 * * *

clusters/cl01tl/helm/outline/Chart.lock

@@ -7,9 +7,12 @@ dependencies:
   version: 2.4.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.8.0
+  version: 7.9.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.4.0
-digest: sha256:315941cca92632a42d42fe2d98f01d3e8a18dbde1c729e466f76a446a7d93440
+- name: volsync-target
-generated: "2026-03-09T23:08:20.752831748Z"
+  repository: oci://harbor.alexlebens.net/helm-charts
+  version: 0.8.0
+digest: sha256:1f2e4e46e3ae2985ff3e7708c7d75a36f506f0402e02921d95f797ea0403db93
+generated: "2026-03-11T23:00:00.871137498Z"

clusters/cl01tl/helm/outline/Chart.yaml

@@ -27,12 +27,16 @@ dependencies:
     version: 2.4.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.8.0
+    version: 7.9.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
     version: 0.4.0
     repository: oci://harbor.alexlebens.net/helm-charts
+  - name: volsync-target
+    alias: volsync-target-data
+    version: 0.8.0
+    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/outline.png
 # renovate: datasource=github-releases depName=outline/outline
 appVersion: 1.5.0

clusters/cl01tl/helm/outline/templates/object-bucket-claim.yaml

@@ -1,30 +0,0 @@
-apiVersion: objectbucket.io/v1alpha1
-kind: ObjectBucketClaim
-metadata:
-  name: ceph-bucket-outline
-  labels:
-    app.kubernetes.io/name: ceph-bucket-outline
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  generateBucketName: bucket-outline
-  storageClassName: ceph-bucket
-  # additionalConfig:
-  #   bucketPolicy: |
-  #       {
-  #           "Version": "2012-10-17",
-  #           "Statement": [
-  #               {
-  #                   "Sid": "VisualEditor",
-  #                   "Effect": "Allow",
-  #                   "Action": [
-  #                       "s3:GetObjectAcl",
-  #                       "s3:DeleteObject",
-  #                       "s3:PutObject",
-  #                       "s3:GetObject",
-  #                       "s3:PutObjectAcl"
-  #                   ],
-  #                   "Resource": "arn:aws:s3:::bucket-outline-630c57e0-d475-4d78-926c-c1c082291d73/*"
-  #               }
-  #           ]
-  #       }

clusters/cl01tl/helm/outline/values.yaml

@@ -5,6 +5,9 @@ outline:
       replicas: 1
       strategy: Recreate
       revisionHistoryLimit: 3
+      pod:
+        securityContext:
+          fsGroup: 1001
       containers:
         main:
           image:
@@ -66,30 +69,7 @@ outline:
             - name: REDIS_URL
               value: redis://outline-valkey.outline:6379
             - name: FILE_STORAGE
-              value: s3
+              value: local
-            - name: AWS_ACCESS_KEY_ID
-              valueFrom:
-                secretKeyRef:
-                  name: ceph-bucket-outline
-                  key: AWS_ACCESS_KEY_ID
-            - name: AWS_SECRET_ACCESS_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: ceph-bucket-outline
-                  key: AWS_SECRET_ACCESS_KEY
-            - name: AWS_REGION
-              value: us-east-1
-            - name: AWS_S3_UPLOAD_BUCKET_NAME
-              valueFrom:
-                configMapKeyRef:
-                  name: ceph-bucket-outline
-                  key: BUCKET_NAME
-            - name: AWS_S3_UPLOAD_BUCKET_URL
-              value: https://objects.alexlebens.dev
-            - name: AWS_S3_FORCE_PATH_STYLE
-              value: true
-            - name: AWS_S3_ACL
-              value: private
             - name: FILE_STORAGE_UPLOAD_MAX_SIZE
               value: "26214400"
             - name: FORCE_HTTPS
@@ -142,6 +122,18 @@ outline:
           port: 3000
           targetPort: 3000
           protocol: HTTP
+  persistence:
+    data:
+      forceRename: outline-data
+      storageClass: ceph-block
+      accessMode: ReadWriteOnce
+      size: 5Gi
+      retain: true
+      advancedMounts:
+        main:
+          main:
+            - path: /var/lib/outline/data
+              readOnly: false
 postgres-18-cluster:
   mode: recovery
   recovery:
@@ -172,7 +164,7 @@ postgres-18-cluster:
       - name: live-backup
         suspend: false
         immediate: true
-        schedule: "0 0 0 * * *"
+        schedule: "0 10 15 * * *"
         backupName: garage-local
       # - name: weekly-backup
       #   suspend: true
@@ -184,3 +176,16 @@ postgres-18-cluster:
       #   immediate: true
       #   schedule: "0 0 0 * * *"
       #   backupName: external
+volsync-target-data:
+  pvcTarget: outline-data
+  moverSecurityContext:
+    fsGroup: 1001
+  local:
+    enabled: true
+    schedule: 50 8 * * *
+  remote:
+    enabled: true
+    schedule: 50 9 * * *
+  external:
+    enabled: true
+    schedule: 50 10 * * *

clusters/cl01tl/helm/photoview/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.8.0
+  version: 7.9.1
-digest: sha256:6f244ab97d43b183eeb3beac0bfa9f769c7f1035012d158d3123d64877adfc6f
+digest: sha256:e9b0673f31b8309beb326635e784964c41bafc10f3bde7eb17ea316d83076854
-generated: "2026-02-27T18:18:28.642875392Z"
+generated: "2026-03-11T23:00:19.541959816Z"

clusters/cl01tl/helm/photoview/Chart.yaml

@@ -20,7 +20,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.8.0
+    version: 7.9.1
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/photoview.png
 # renovate: datasource=github-releases depName=photoview/photoview