Update Helm release external-dns to v1.20.0

Update searxng/searxng:latest Docker digest to 472dd0c (#3032 )
enable local
2026-01-02 16:02:15 +00:00 · 2026-01-02 08:01:46 +00:00 · 2026-01-01 23:53:30 -06:00 · 2026-01-01 23:53:16 -06:00 · 2026-01-01 23:50:25 -06:00 · 2026-01-01 23:41:24 -06:00
65 changed files with 123 additions and 460 deletions
--- a/clusters/cl01tl/helm/actual/values.yaml
+++ b/clusters/cl01tl/helm/actual/values.yaml
@@ -78,7 +78,7 @@ actual:
 volsync-target-data:
  pvcTarget: actual-data
  local:
-    enabled: false
+    enabled: true
    schedule: 0 8 * * *
  remote:
    enabled: false
--- a/clusters/cl01tl/helm/audiobookshelf/values.yaml
+++ b/clusters/cl01tl/helm/audiobookshelf/values.yaml
@@ -124,7 +124,7 @@ audiobookshelf:
 volsync-target-config:
  pvcTarget: audiobookshelf-config
  local:
-    enabled: false
+    enabled: true
    schedule: 2 8 * * *
  remote:
    enabled: false
@@ -134,7 +134,7 @@ volsync-target-config:
 volsync-target-metadata:
  pvcTarget: audiobookshelf-metadata
  local:
-    enabled: false
+    enabled: true
    schedule: 4 8 * * *
  remote:
    enabled: false
--- a/clusters/cl01tl/helm/authentik/values.yaml
+++ b/clusters/cl01tl/helm/authentik/values.yaml
@@ -109,7 +109,7 @@ redis-replication:
  existingSecret:
    enabled: false
  redisReplication:
-    clusterSize: 1
-  redisSentinel:
-    enabled: false
+    clusterSize: 3
+  redisSentinel:
+    enabled: true
    clusterSize: 3
--- a/clusters/cl01tl/helm/backrest/values.yaml
+++ b/clusters/cl01tl/helm/backrest/values.yaml
@@ -108,7 +108,7 @@ backrest:
 volsync-target-data:
  pvcTarget: backrest-data
  local:
-    enabled: false
+    enabled: true
    schedule: 6 8 * * *
  remote:
    enabled: false
@@ -118,7 +118,7 @@ volsync-target-data:
 volsync-target-config:
  pvcTarget: backrest-config
  local:
-    enabled: false
+    enabled: true
    schedule: 8 8 * * *
  remote:
    enabled: false
--- a/clusters/cl01tl/helm/bazarr/values.yaml
+++ b/clusters/cl01tl/helm/bazarr/values.yaml
@@ -84,7 +84,7 @@ volsync-target-config:
    fsGroup: 1000
    fsGroupChangePolicy: OnRootMismatch
  local:
-    enabled: false
+    enabled: true
    schedule: 10 8 * * *
  remote:
    enabled: false
--- a/clusters/cl01tl/helm/blocky/values.yaml
+++ b/clusters/cl01tl/helm/blocky/values.yaml
@@ -159,7 +159,6 @@ blocky:
              sonarr                          IN      CNAME   traefik-cl01tl
              sonarr-4k                       IN      CNAME   traefik-cl01tl
              sonarr-anime                    IN      CNAME   traefik-cl01tl
-              soulsync                        IN      CNAME   traefik-cl01tl
              stalwart                        IN      CNAME   traefik-cl01tl
              tautulli                        IN      CNAME   traefik-cl01tl
              tdarr                           IN      CNAME   traefik-cl01tl
--- a/clusters/cl01tl/helm/booklore/values.yaml
+++ b/clusters/cl01tl/helm/booklore/values.yaml
@@ -218,7 +218,7 @@ mariadb-cluster:
 volsync-target-config:
  pvcTarget: booklore-config
  local:
-    enabled: false
+    enabled: true
    schedule: 12 8 * * *
  remote:
    enabled: false
--- a/clusters/cl01tl/helm/cilium/templates/cilium-l2-announcement-policy.yaml
+++ b/clusters/cl01tl/helm/cilium/templates/cilium-l2-announcement-policy.yaml
@@ -1,19 +1,19 @@
-apiVersion: "cilium.io/v2alpha1"
-kind: CiliumL2AnnouncementPolicy
-metadata:
-  name: general-l2-policy
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: general-l2-policy
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  nodeSelector:
-    matchExpressions:
-      - key: kubernetes.io/hostname
-        operator: Exists
-  interfaces:
-    - end0
-    - enp6s0
-  externalIPs: true
-  loadBalancerIPs: true
+# apiVersion: "cilium.io/v2alpha1"
+# kind: CiliumL2AnnouncementPolicy
+# metadata:
+#   name: general-l2-policy
+#   namespace: {{ .Release.Namespace }}
+#   labels:
+#     app.kubernetes.io/name: general-l2-policy
+#     app.kubernetes.io/instance: {{ .Release.Name }}
+#     app.kubernetes.io/part-of: {{ .Release.Name }}
+# spec:
+#   nodeSelector:
+#     matchExpressions:
+#       - key: kubernetes.io/hostname
+#         operator: Exists
+#   interfaces:
+#     - end0
+#     - enp6s0
+#   externalIPs: true
+#   loadBalancerIPs: true
--- a/clusters/cl01tl/helm/cilium/values.yaml
+++ b/clusters/cl01tl/helm/cilium/values.yaml
@@ -26,7 +26,7 @@ cilium:
        - SYS_ADMIN
        - SYS_RESOURCE
  l2announcements:
-    enabled: true
+    enabled: false
  bgpControlPlane:
    enabled: false
    secretsNamespace:
--- a/clusters/cl01tl/helm/code-server/values.yaml
+++ b/clusters/cl01tl/helm/code-server/values.yaml
@@ -76,7 +76,7 @@ volsync-target-config:
    fsGroup: 1000
    fsGroupChangePolicy: OnRootMismatch
  local:
-    enabled: false
+    enabled: true
    schedule: 16 8 * * *
  remote:
    enabled: false
--- a/clusters/cl01tl/helm/directus/values.yaml
+++ b/clusters/cl01tl/helm/directus/values.yaml
@@ -216,7 +216,7 @@ redis-replication:
    name: directus-redis-config
    key: password
  redisReplication:
-    clusterSize: 1
-  redisSentinel:
-    enabled: false
+    clusterSize: 3
+  redisSentinel:
+    enabled: true
    clusterSize: 3
--- a/clusters/cl01tl/helm/ephemera/values.yaml
+++ b/clusters/cl01tl/helm/ephemera/values.yaml
@@ -130,7 +130,7 @@ ephemera:
 volsync-target-config:
  pvcTarget: ephemera
  local:
-    enabled: false
+    enabled: true
    schedule: 16 8 * * *
  remote:
    enabled: false
--- a/clusters/cl01tl/helm/external-dns/Chart.lock
+++ b/clusters/cl01tl/helm/external-dns/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: external-dns
  repository: https://kubernetes-sigs.github.io/external-dns/
-  version: 1.19.0
-digest: sha256:2216b442cc820ebe561d611fbcca3955d5c94e227a0b3288e5db9f8da7d6ac00
-generated: "2025-12-01T20:25:38.288305-06:00"
+  version: 1.20.0
+digest: sha256:0da4dec408239ea48de1d95fa8ad7701c4fdc0efe67baa8743507c75e62e2a47
+generated: "2026-01-02T16:02:10.536737681Z"
--- a/clusters/cl01tl/helm/external-dns/Chart.yaml
+++ b/clusters/cl01tl/helm/external-dns/Chart.yaml
@@ -16,7 +16,7 @@ maintainers:
 dependencies:
  - name: external-dns
    alias: external-dns-unifi
-    version: 1.19.0
+    version: 1.20.0
    repository: https://kubernetes-sigs.github.io/external-dns/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 # renovate: github=kubernetes-sigs/external-dns
--- a/clusters/cl01tl/helm/freshrss/values.yaml
+++ b/clusters/cl01tl/helm/freshrss/values.yaml
@@ -247,7 +247,7 @@ volsync-target-data:
      - 109
      - 65539
  local:
-    enabled: false
+    enabled: true
    schedule: 18 8 * * *
  remote:
    enabled: false
--- a/clusters/cl01tl/helm/garage/values.yaml
+++ b/clusters/cl01tl/helm/garage/values.yaml
@@ -403,20 +403,20 @@ garage:
              readOnly: true
              mountPropagation: None
              subPath: garage-1.toml
-    # db-1:
-    #   forceRename: garage-db-1
-    #   storageClass: ceph-block
-    #   accessMode: ReadWriteOnce
-    #   size: 50Gi
-    #   retain: true
-    #   advancedMounts:
-    #     server-1:
-    #       main:
-    #         - path: /var/lib/garage/meta
-    #           readOnly: false
-    #       debug:
-    #         - path: /var/lib/garage/meta
-    #           readOnly: false
+    db-1:
+      forceRename: garage-db-1
+      storageClass: ceph-block
+      accessMode: ReadWriteOnce
+      size: 50Gi
+      retain: true
+      advancedMounts:
+        server-1:
+          main:
+            - path: /var/lib/garage/meta
+              readOnly: false
+          debug:
+            - path: /var/lib/garage/meta
+              readOnly: false
    db-2:
      forceRename: garage-db-2
      storageClass: ceph-block
--- a/clusters/cl01tl/helm/gatus/values.yaml
+++ b/clusters/cl01tl/helm/gatus/values.yaml
@@ -316,9 +316,6 @@ gatus:
      - name: rayflume
        url: https://rayflume.alexlebens.net
        <<: *defaults
-      - name: soulsync
-        url: https://soulsync.alexlebens.net
-        <<: *defaults
      - name: slskd
        url: https://slskd.alexlebens.net
        <<: *defaults
@@ -424,7 +421,7 @@ postgres-18-cluster:
 volsync-target-data:
  pvcTarget: gatus
  local:
-    enabled: false
+    enabled: true
    schedule: 22 8 * * *
  remote:
    enabled: false
--- a/clusters/cl01tl/helm/harbor/values.yaml
+++ b/clusters/cl01tl/helm/harbor/values.yaml
@@ -142,7 +142,7 @@ redis-replication:
  existingSecret:
    enabled: false
  redisReplication:
-    clusterSize: 1
-  redisSentinel:
-    enabled: false
+    clusterSize: 3
+  redisSentinel:
+    enabled: true
    clusterSize: 3
--- a/clusters/cl01tl/helm/home-assistant/values.yaml
+++ b/clusters/cl01tl/helm/home-assistant/values.yaml
@@ -133,7 +133,7 @@ volsync-target-config:
    fsGroup: 1000
    fsGroupChangePolicy: OnRootMismatch
  local:
-    enabled: false
+    enabled: true
    schedule: 24 8 * * *
  remote:
    enabled: false
--- a/clusters/cl01tl/helm/homepage/values.yaml
+++ b/clusters/cl01tl/helm/homepage/values.yaml
@@ -667,12 +667,6 @@ homepage:
                  href: https://lidatube.alexlebens.net
                  siteMonitor: http://lidatube.lidatube:80
                  statusStyle: dot
-              - SoulSync:
-                  icon: sh-soulsync.webp
-                  description: Playlist Sync
-                  href: https://soulsync.alexlebens.net
-                  siteMonitor: http://soulsync.soulsync:80
-                  statusStyle: dot
              - slskd:
                  icon: sh-slskd.webp
                  description: slskd
--- a/clusters/cl01tl/helm/huntarr/values.yaml
+++ b/clusters/cl01tl/helm/huntarr/values.yaml
@@ -61,7 +61,7 @@ huntarr:
 volsync-target-config:
  pvcTarget: huntarr-config
  local:
-    enabled: false
+    enabled: true
    schedule: 26 8 * * *
  remote:
    enabled: false
--- a/clusters/cl01tl/helm/immich/values.yaml
+++ b/clusters/cl01tl/helm/immich/values.yaml
@@ -226,9 +226,9 @@ redis-replication:
  existingSecret:
    enabled: false
  redisReplication:
-    clusterSize: 1
+    clusterSize: 3
  redisSentinel:
-    enabled: false
+    enabled: true
    clusterSize: 3
 volsync-target-data:
  pvcTarget: immich
--- a/clusters/cl01tl/helm/jellyfin/values.yaml
+++ b/clusters/cl01tl/helm/jellyfin/values.yaml
@@ -142,7 +142,7 @@ meilisearch:
 volsync-target-config:
  pvcTarget: jellyfin-config
  local:
-    enabled: false
+    enabled: true
    schedule: 30 8 * * *
    restic:
      cacheCapacity: 10Gi
--- a/clusters/cl01tl/helm/jellystat/values.yaml
+++ b/clusters/cl01tl/helm/jellystat/values.yaml
@@ -144,7 +144,7 @@ postgres-18-cluster:
 volsync-target-data:
  pvcTarget: jellystat-data
  local:
-    enabled: false
+    enabled: true
    schedule: 32 8 * * *
  remote:
    enabled: false
--- a/clusters/cl01tl/helm/karakeep/values.yaml
+++ b/clusters/cl01tl/helm/karakeep/values.yaml
@@ -9,7 +9,7 @@ karakeep:
        main:
          image:
            repository: ghcr.io/karakeep-app/karakeep
-            tag: 0.29.3
+            tag: 0.30.0
            pullPolicy: IfNotPresent
          env:
            - name: DATA_DIR
@@ -171,7 +171,7 @@ meilisearch:
 volsync-target-data:
  pvcTarget: karakeep
  local:
-    enabled: false
+    enabled: true
    schedule: 34 8 * * *
  remote:
    enabled: false
--- a/clusters/cl01tl/helm/kube-prometheus-stack/values.yaml
+++ b/clusters/cl01tl/helm/kube-prometheus-stack/values.yaml
@@ -174,12 +174,12 @@ redis-replication:
  existingSecret:
    enabled: false
  redisReplication:
-    clusterSize: 1
+    clusterSize: 3
    volumeClaimTemplate:
      spec:
        resources:
          requests:
            storage: 10Gi
  redisSentinel:
-    enabled: false
+    enabled: true
    clusterSize: 3
--- a/clusters/cl01tl/helm/libation/values.yaml
+++ b/clusters/cl01tl/helm/libation/values.yaml
@@ -74,7 +74,7 @@ libation:
 volsync-target-config:
  pvcTarget: libation
  local:
-    enabled: false
+    enabled: true
    schedule: 36 8 * * *
  remote:
    enabled: false
--- a/clusters/cl01tl/helm/lidarr/values.yaml
+++ b/clusters/cl01tl/helm/lidarr/values.yaml
@@ -171,7 +171,7 @@ volsync-target-config:
    fsGroup: 1000
    fsGroupChangePolicy: OnRootMismatch
  local:
-    enabled: false
+    enabled: true
    schedule: 38 8 * * *
  remote:
    enabled: false
--- a/clusters/cl01tl/helm/lidatube/values.yaml
+++ b/clusters/cl01tl/helm/lidatube/values.yaml
@@ -93,7 +93,7 @@ volsync-target-config:
    fsGroup: 1000
    fsGroupChangePolicy: OnRootMismatch
  local:
-    enabled: false
+    enabled: true
    schedule: 40 8 * * *
  remote:
    enabled: false
--- a/clusters/cl01tl/helm/listenarr/values.yaml
+++ b/clusters/cl01tl/helm/listenarr/values.yaml
@@ -74,7 +74,7 @@ volsync-target-config:
    fsGroup: 1000
    fsGroupChangePolicy: OnRootMismatch
  local:
-    enabled: false
+    enabled: true
    schedule: 42 8 * * *
  remote:
    enabled: false
--- a/clusters/cl01tl/helm/local-path-provisioner/values.yaml
+++ b/clusters/cl01tl/helm/local-path-provisioner/values.yaml
@@ -13,26 +13,16 @@ local-path-provisioner:
    reclaimPolicy: Delete
    volumeBindingMode: WaitForFirstConsumer
  nodePathMap:
-    - node: talos-2di-ktg
+    - node: DEFAULT_PATH_FOR_NON_LISTED_NODES
      paths:
-        - /var/local-path-provisioner
-    - node: talos-9vs-6hh
-      paths:
-        - /var/local-path-provisioner
-    - node: talos-aoq-hpv
-      paths:
-        - /var/local-path-provisioner
+        - /var/mnt/local-storage
  affinity:
    nodeAffinity:
      requiredDuringSchedulingIgnoredDuringExecution:
        nodeSelectorTerms:
          - matchExpressions:
-            - key: kubernetes.io/hostname
-              operator: In
-              values:
-                - talos-2di-ktg
-                - talos-9vs-6hh
-                - talos-aoq-hpv
+              - key: node-role.kubernetes.io/local-storage-node
+                operator: Exists
  configmap:
    name: local-path-config
    setup: |-
--- a/clusters/cl01tl/helm/matrix-synapse/values.yaml
+++ b/clusters/cl01tl/helm/matrix-synapse/values.yaml
@@ -478,7 +478,7 @@ redis-replication-hookshot:
 volsync-target-synapse:
  pvcTarget: matrix-synapse
  local:
-    enabled: false
+    enabled: true
    schedule: 44 8 * * *
  remote:
    enabled: false
@@ -488,7 +488,7 @@ volsync-target-synapse:
 volsync-target-hookshot:
  pvcTarget: matrix-hookshot
  local:
-    enabled: false
+    enabled: true
    schedule: 46 8 * * *
  remote:
    enabled: false
@@ -501,7 +501,7 @@ volsync-target-discord:
    runAsUser: 1337
    runAsGroup: 1337
  local:
-    enabled: false
+    enabled: true
    schedule: 48 8 * * *
  remote:
    enabled: false
@@ -514,7 +514,7 @@ volsync-target-whatsapp:
    runAsUser: 1337
    runAsGroup: 1337
  local:
-    enabled: false
+    enabled: true
    schedule: 50 8 * * *
  remote:
    enabled: false
--- a/clusters/cl01tl/helm/navidrome/values.yaml
+++ b/clusters/cl01tl/helm/navidrome/values.yaml
@@ -161,7 +161,7 @@ volsync-target-data:
    fsGroup: 1000
    fsGroupChangePolicy: OnRootMismatch
  local:
-    enabled: false
+    enabled: true
    schedule: 52 8 * * *
  remote:
    enabled: false
--- a/clusters/cl01tl/helm/ollama/values.yaml
+++ b/clusters/cl01tl/helm/ollama/values.yaml
@@ -307,7 +307,7 @@ volsync-target-data:
    runAsUser: 1337
    runAsGroup: 1337
  local:
-    enabled: false
+    enabled: true
    schedule: 54 8 * * *
  remote:
    enabled: false
--- a/clusters/cl01tl/helm/outline/values.yaml
+++ b/clusters/cl01tl/helm/outline/values.yaml
@@ -188,7 +188,7 @@ redis-replication:
  existingSecret:
    enabled: false
  redisReplication:
-    clusterSize: 1
-  redisSentinel:
-    enabled: false
+    clusterSize: 3
+  redisSentinel:
+    enabled: true
    clusterSize: 3
--- a/clusters/cl01tl/helm/postiz/values.yaml
+++ b/clusters/cl01tl/helm/postiz/values.yaml
@@ -173,14 +173,14 @@ redis-replication:
    name: postiz-redis-config
    key: password
  redisReplication:
-    clusterSize: 1
+    clusterSize: 3
  redisSentinel:
-    enabled: false
+    enabled: true
    clusterSize: 3
 volsync-target-config:
  pvcTarget: postiz-config
  local:
-    enabled: false
+    enabled: true
    schedule: 56 8 * * *
  remote:
    enabled: false
@@ -190,7 +190,7 @@ volsync-target-config:
 volsync-target-upload:
  pvcTarget: postiz-uploads
  local:
-    enabled: false
+    enabled: true
    schedule: 58 8 * * *
  remote:
    enabled: false
--- a/clusters/cl01tl/helm/prowlarr/values.yaml
+++ b/clusters/cl01tl/helm/prowlarr/values.yaml
@@ -83,7 +83,7 @@ volsync-target-config:
      - 109
      - 65539
  local:
-    enabled: false
+    enabled: true
    schedule: 0 11 * * *
  remote:
    enabled: false
--- a/clusters/cl01tl/helm/qbittorrent/values.yaml
+++ b/clusters/cl01tl/helm/qbittorrent/values.yaml
@@ -437,7 +437,7 @@ volsync-target-config:
    fsGroup: 1000
    fsGroupChangePolicy: OnRootMismatch
  local:
-    enabled: false
+    enabled: true
    schedule: 2 11 * * *
    restic:
      copyMethod: Snapshot
@@ -458,7 +458,7 @@ volsync-target-config:
 volsync-target-qbit-manage-config:
  pvcTarget: qbittorrent-qbit-manage-config-data
  local:
-    enabled: false
+    enabled: true
    schedule: 4 11 * * *
  remote:
    enabled: false
@@ -468,7 +468,7 @@ volsync-target-qbit-manage-config:
 volsync-target-qui-config:
  pvcTarget: qbittorrent-qui-config-data
  local:
-    enabled: false
+    enabled: true
    schedule: 6 11 * * *
  remote:
    enabled: false
--- a/clusters/cl01tl/helm/radarr-4k/values.yaml
+++ b/clusters/cl01tl/helm/radarr-4k/values.yaml
@@ -171,7 +171,7 @@ volsync-target-config:
    fsGroup: 1000
    fsGroupChangePolicy: OnRootMismatch
  local:
-    enabled: false
+    enabled: true
    schedule: 10 11 * * *
  remote:
    enabled: false
--- a/clusters/cl01tl/helm/radarr-anime/values.yaml
+++ b/clusters/cl01tl/helm/radarr-anime/values.yaml
@@ -169,7 +169,7 @@ volsync-target-config:
    fsGroup: 1000
    fsGroupChangePolicy: OnRootMismatch
  local:
-    enabled: false
+    enabled: true
    schedule: 12 11 * * *
  remote:
    enabled: false
--- a/clusters/cl01tl/helm/radarr-standup/values.yaml
+++ b/clusters/cl01tl/helm/radarr-standup/values.yaml
@@ -169,7 +169,7 @@ volsync-target-config:
    fsGroup: 1000
    fsGroupChangePolicy: OnRootMismatch
  local:
-    enabled: false
+    enabled: true
    schedule: 14 11 * * *
  remote:
    enabled: false
--- a/clusters/cl01tl/helm/radarr/values.yaml
+++ b/clusters/cl01tl/helm/radarr/values.yaml
@@ -171,7 +171,7 @@ volsync-target-config:
    fsGroup: 1000
    fsGroupChangePolicy: OnRootMismatch
  local:
-    enabled: false
+    enabled: true
    schedule: 8 11 * * *
  remote:
    enabled: false
--- a/clusters/cl01tl/helm/rayflume/values.yaml
+++ b/clusters/cl01tl/helm/rayflume/values.yaml
@@ -95,7 +95,7 @@ redis-replication:
 volsync-target-data:
  pvcTarget: rayflume-data
  local:
-    enabled: false
+    enabled: true
    schedule: 16 11 * * *
  remote:
    enabled: false
--- a/clusters/cl01tl/helm/rook-ceph/values.yaml
+++ b/clusters/cl01tl/helm/rook-ceph/values.yaml
@@ -85,7 +85,8 @@ rook-ceph-cluster:
          cpu: 100m
          memory: 128Mi
    storage:
-      deviceFilter: sda
+      useAllDevices: false
+      devicePathFilter: "/dev/disk/by-partlabel/r-csi-disk"
      config:
        osdsPerDevice: "1"
    csi:
--- a/clusters/cl01tl/helm/roundcube/values.yaml
+++ b/clusters/cl01tl/helm/roundcube/values.yaml
@@ -271,7 +271,7 @@ postgres-18-cluster:
 volsync-target-data:
  pvcTarget: roundcube-data
  local:
-    enabled: false
+    enabled: true
    schedule: 16 11 * * *
  remote:
    enabled: false
--- a/clusters/cl01tl/helm/searxng/values.yaml
+++ b/clusters/cl01tl/helm/searxng/values.yaml
@@ -9,7 +9,7 @@ searxng:
        main:
          image:
            repository: searxng/searxng
-            tag: latest@sha256:1ad4159e74903f8870e3464df701b800a75bd2854f5d11b44ce09ee297f3c158
+            tag: latest@sha256:472dd0c84b8e2a05bca773b4a430b9fc9e4e92cd4fa0afaa223efab925ab752a
            pullPolicy: IfNotPresent
          env:
            - name: SEARXNG_BASE_URL
@@ -39,7 +39,7 @@ searxng:
        main:
          image:
            repository: searxng/searxng
-            tag: latest@sha256:1ad4159e74903f8870e3464df701b800a75bd2854f5d11b44ce09ee297f3c158
+            tag: latest@sha256:472dd0c84b8e2a05bca773b4a430b9fc9e4e92cd4fa0afaa223efab925ab752a
            pullPolicy: IfNotPresent
          env:
            - name: SEARXNG_BASE_URL
@@ -220,7 +220,7 @@ searxng:
 volsync-target-data:
  pvcTarget: searxng-browser-data
  local:
-    enabled: false
+    enabled: true
    schedule: 18 11 * * *
  remote:
    enabled: false
--- a/clusters/cl01tl/helm/seerr/values.yaml
+++ b/clusters/cl01tl/helm/seerr/values.yaml
@@ -32,7 +32,7 @@ seerr-chart:
 volsync-target-config:
  pvcTarget: seerr-seerr-chart-config
  local:
-    enabled: false
+    enabled: true
    schedule: 20 11 * * *
  remote:
    enabled: false
--- a/clusters/cl01tl/helm/sonarr-4k/values.yaml
+++ b/clusters/cl01tl/helm/sonarr-4k/values.yaml
@@ -169,7 +169,7 @@ volsync-target-config:
    fsGroup: 1000
    fsGroupChangePolicy: OnRootMismatch
  local:
-    enabled: false
+    enabled: true
    schedule: 24 11 * * *
  remote:
    enabled: false
--- a/clusters/cl01tl/helm/sonarr-anime/values.yaml
+++ b/clusters/cl01tl/helm/sonarr-anime/values.yaml
@@ -169,7 +169,7 @@ volsync-target-config:
    fsGroup: 1000
    fsGroupChangePolicy: OnRootMismatch
  local:
-    enabled: false
+    enabled: true
    schedule: 26 11 * * *
  remote:
    enabled: false
--- a/clusters/cl01tl/helm/sonarr/values.yaml
+++ b/clusters/cl01tl/helm/sonarr/values.yaml
@@ -169,7 +169,7 @@ volsync-target-config:
    fsGroup: 1000
    fsGroupChangePolicy: OnRootMismatch
  local:
-    enabled: false
+    enabled: true
    schedule: 22 11 * * *
  remote:
    enabled: false
--- a/clusters/cl01tl/helm/soulsync/Chart.lock
+++ b/clusters/cl01tl/helm/soulsync/Chart.lock
@@ -1,12 +0,0 @@
-dependencies:
- name: app-template
-  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.5.0
- name: volsync-target
-  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
- name: volsync-target
-  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-digest: sha256:3f2befd8dc0c7cc73090a5e1648d200a757dbc3e58f7735940fc11b172ada4f9
-generated: "2025-12-27T13:32:51.138317-06:00"
--- a/clusters/cl01tl/helm/soulsync/Chart.yaml
+++ b/clusters/cl01tl/helm/soulsync/Chart.yaml
@@ -1,29 +0,0 @@
-apiVersion: v2
-name: soulsync
-version: 1.0.0
-description: SoulSync
-keywords:
-  - soulsync
-  - music
-home: https://wiki.alexlebens.dev/s/
-sources:
-  - https://github.com/Nezreka/SoulSync
-  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: app-template
-    alias: soulsync
-    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.5.0
-  - name: volsync-target
-    alias: volsync-target-config
-    version: 0.7.0
-    repository: oci://harbor.alexlebens.net/helm-charts
-  - name: volsync-target
-    alias: volsync-target-database
-    version: 0.7.0
-    repository: oci://harbor.alexlebens.net/helm-charts
-icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/soulsync.png
-# renovate: github=Nezreka/SoulSync
-appVersion: 1.42.2
--- a/clusters/cl01tl/helm/soulsync/templates/external-secret.yaml
+++ b/clusters/cl01tl/helm/soulsync/templates/external-secret.yaml
@@ -1,21 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: soulsync-config-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: soulsync-config-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: config.json
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/soulsync/config
-        metadataPolicy: None
-        property: config.json
--- a/clusters/cl01tl/helm/soulsync/templates/persistent-volume-claim.yaml
+++ b/clusters/cl01tl/helm/soulsync/templates/persistent-volume-claim.yaml
@@ -1,36 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: soulsync-music-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: soulsync-music-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  volumeName: soulsync-music-nfs-storage
-  storageClassName: nfs-client
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 1Gi
-
---
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: soulsync-slskd-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: soulsync-slskd-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  volumeName: soulsync-slskd-nfs-storage
-  storageClassName: nfs-client
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 1Gi
--- a/clusters/cl01tl/helm/soulsync/templates/persistent-volume.yaml
+++ b/clusters/cl01tl/helm/soulsync/templates/persistent-volume.yaml
@@ -1,48 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: soulsync-music-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: soulsync-music-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: nfs-client
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  nfs:
-    path: /volume2/Storage/Music
-    server: synologybond.alexlebens.net
-  mountOptions:
-    - vers=4
-    - minorversion=1
-    - noac
-
---
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: soulsync-slskd-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: soulsync-slskd-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: nfs-client
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  nfs:
-    path: /volume2/Storage/slskd/Downloads
-    server: synologybond.alexlebens.net
-  mountOptions:
-    - vers=4
-    - minorversion=1
-    - noac
--- a/clusters/cl01tl/helm/soulsync/values.yaml
+++ b/clusters/cl01tl/helm/soulsync/values.yaml
@@ -1,170 +0,0 @@
-soulsync:
-  controllers:
-    main:
-      type: deployment
-      replicas: 0
-      strategy: Recreate
-      revisionHistoryLimit: 3
-      initContainers:
-        init-copy-config:
-          image:
-            repository: busybox
-            tag: 1.37.0
-            pullPolicy: IfNotPresent
-          resources:
-            requests:
-              cpu: 10m
-              memory: 128Mi
-          command:
-            - /bin/sh
-            - -ec
-            - |
-              echo ">> Coping files ..."
-              ls /tmp
-              cp -fv /tmp/config.json /app/config/config.json
-              echo ">> Files in config:"
-              ls /app/config
-      containers:
-        main:
-          image:
-            repository: boulderbadgedad/soulsync
-            tag: latest
-            pullPolicy: IfNotPresent
-          env:
-            - name: TZ
-              value: US/Central
-            - name: PUID
-              value: 1000
-            - name: PGID
-              value: 1000
-            - name: FLASK_ENV
-              value: production
-            - name: PYTHONPATH
-              value: /app
-            - name: SOULSYNC_CONFIG_PATH
-              value: /app/config/config.json
-          probes:
-            liveness:
-              enabled: true
-              custom: true
-              spec:
-                exec:
-                  command:
-                  - CMD
-                  - curl
-                  - -f
-                  - http://localhost:8888/
-                failureThreshold: 5
-                initialDelaySeconds: 60
-                periodSeconds: 30
-                successThreshold: 1
-                timeoutSeconds: 10
-          resources:
-            requests:
-              cpu: 100m
-              memory: 512Mi
-  service:
-    main:
-      controller: main
-      ports:
-        http:
-          port: 80
-          targetPort: 8008
-          protocol: HTTP
-  route:
-    main:
-      kind: HTTPRoute
-      parentRefs:
-        - group: gateway.networking.k8s.io
-          kind: Gateway
-          name: traefik-gateway
-          namespace: traefik
-      hostnames:
-        - soulsync.alexlebens.net
-      rules:
-        - backendRefs:
-            - group: ''
-              kind: Service
-              name: soulsync
-              port: 80
-              weight: 100
-          matches:
-            - path:
-                type: PathPrefix
-                value: /
-  persistence:
-    secret:
-      enabled: true
-      type: secret
-      name: soulsync-config-secret
-      advancedMounts:
-        main:
-          init-copy-config:
-            - path: /tmp/config.json
-              readOnly: true
-              mountPropagation: None
-              subPath: config.json
-    config:
-      forceRename: soulsync-config
-      storageClass: ceph-block
-      accessMode: ReadWriteOnce
-      size: 10Gi
-      advancedMounts:
-        main:
-          main:
-            - path: /app/config
-              readOnly: false
-          init-copy-config:
-            - path: /app/config
-              readOnly: false
-    database:
-      forceRename: soulsync-database
-      storageClass: ceph-block
-      accessMode: ReadWriteOnce
-      size: 10Gi
-      advancedMounts:
-        main:
-          main:
-            - path: /app/database
-              readOnly: false
-    downloads:
-      existingClaim: soulsync-slskd-nfs-storage
-      advancedMounts:
-        main:
-          main:
-            - path: /app/downloads
-              readOnly: false
-    transfer:
-      type: emptyDir
-      advancedMounts:
-        main:
-          main:
-            - path: /app/Transfer
-              readOnly: false
-    music:
-      existingClaim: soulsync-music-nfs-storage
-      advancedMounts:
-        main:
-          main:
-            - path: /music
-              readOnly: true
-volsync-target-config:
-  pvcTarget: soulsync-config
-  local:
-    enabled: false
-    schedule: 28 11 * * *
-  remote:
-    enabled: false
-  external:
-    enabled: true
-    schedule: 28 12 * * *
-volsync-target-database:
-  pvcTarget: soulsync-database
-  local:
-    enabled: false
-    schedule: 30 11 * * *
-  remote:
-    enabled: false
-  external:
-    enabled: true
-    schedule: 30 12 * * *
--- a/clusters/cl01tl/helm/stalwart/values.yaml
+++ b/clusters/cl01tl/helm/stalwart/values.yaml
@@ -118,14 +118,14 @@ redis-replication:
  existingSecret:
    enabled: false
  redisReplication:
-    clusterSize: 1
+    clusterSize: 3
  redisSentinel:
-    enabled: false
+    enabled: true
    clusterSize: 3
 volsync-target-config:
  pvcTarget: stalwart-config
  local:
-    enabled: false
+    enabled: true
    schedule: 32 11 * * *
  remote:
    enabled: false
--- a/clusters/cl01tl/helm/talos/values.yaml
+++ b/clusters/cl01tl/helm/talos/values.yaml
@@ -405,7 +405,7 @@ etcd-defrag:
        main:
          image:
            repository: ghcr.io/siderolabs/talosctl
-            tag: v1.11.6
+            tag: v1.12.0
            pullPolicy: IfNotPresent
          args:
            - etcd
@@ -438,7 +438,7 @@ etcd-defrag:
        main:
          image:
            repository: ghcr.io/siderolabs/talosctl
-            tag: v1.11.6
+            tag: v1.12.0
            pullPolicy: IfNotPresent
          args:
            - etcd
@@ -471,7 +471,7 @@ etcd-defrag:
        main:
          image:
            repository: ghcr.io/siderolabs/talosctl
-            tag: v1.11.6
+            tag: v1.12.0
            pullPolicy: IfNotPresent
          args:
            - etcd
--- a/clusters/cl01tl/helm/tautulli/values.yaml
+++ b/clusters/cl01tl/helm/tautulli/values.yaml
@@ -170,7 +170,7 @@ tautulli:
 volsync-target-config:
  pvcTarget: tautulli-config
  local:
-    enabled: false
+    enabled: true
    schedule: 34 11 * * *
  remote:
    enabled: false
--- a/clusters/cl01tl/helm/tdarr/values.yaml
+++ b/clusters/cl01tl/helm/tdarr/values.yaml
@@ -180,7 +180,7 @@ tdarr-exporter:
 volsync-target-config:
  pvcTarget: tdarr-config
  local:
-    enabled: false
+    enabled: true
    schedule: 36 11 * * *
  remote:
    enabled: false
@@ -190,7 +190,7 @@ volsync-target-config:
 volsync-target-server:
  pvcTarget: tdarr-server
  local:
-    enabled: false
+    enabled: true
    schedule: 38 11 * * *
  remote:
    enabled: false
--- a/clusters/cl01tl/helm/tubearchivist/values.yaml
+++ b/clusters/cl01tl/helm/tubearchivist/values.yaml
@@ -148,7 +148,7 @@ redis-replication:
  existingSecret:
    enabled: false
  redisReplication:
-    clusterSize: 1
+    clusterSize: 3
    resources:
      requests:
        cpu: 200m
@@ -159,5 +159,5 @@ redis-replication:
          requests:
            storage: 10Gi
  redisSentinel:
-    enabled: false
+    enabled: true
    clusterSize: 3
--- a/clusters/cl01tl/helm/vaultwarden/values.yaml
+++ b/clusters/cl01tl/helm/vaultwarden/values.yaml
@@ -9,7 +9,7 @@ vaultwarden:
        main:
          image:
            repository: vaultwarden/server
-            tag: 1.35.0
+            tag: 1.35.1
            pullPolicy: IfNotPresent
          env:
            - name: DOMAIN
--- a/clusters/cl01tl/helm/yamtrack/values.yaml
+++ b/clusters/cl01tl/helm/yamtrack/values.yaml
@@ -136,7 +136,7 @@ redis-replication:
  existingSecret:
    enabled: false
  redisReplication:
-    clusterSize: 1
-  redisSentinel:
-    enabled: false
+    clusterSize: 3
+  redisSentinel:
+    enabled: true
    clusterSize: 3
--- a/hosts/ps08rp/blocky/config.yml
+++ b/hosts/ps08rp/blocky/config.yml
@@ -135,7 +135,6 @@ customDNS:
    sonarr                          IN      CNAME   traefik-cl01tl
    sonarr-4k                       IN      CNAME   traefik-cl01tl
    sonarr-anime                    IN      CNAME   traefik-cl01tl
-    soulsync                        IN      CNAME   traefik-cl01tl
    stalwart                        IN      CNAME   traefik-cl01tl
    tautulli                        IN      CNAME   traefik-cl01tl
    tdarr                           IN      CNAME   traefik-cl01tl
--- a/hosts/ps09rp/blocky/config.yml
+++ b/hosts/ps09rp/blocky/config.yml
@@ -135,7 +135,6 @@ customDNS:
    sonarr                          IN      CNAME   traefik-cl01tl
    sonarr-4k                       IN      CNAME   traefik-cl01tl
    sonarr-anime                    IN      CNAME   traefik-cl01tl
-    soulsync                        IN      CNAME   traefik-cl01tl
    stalwart                        IN      CNAME   traefik-cl01tl
    tautulli                        IN      CNAME   traefik-cl01tl
    tdarr                           IN      CNAME   traefik-cl01tl