add pull policy

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [rook-ceph-cluster](https://github.com/rook/rook) | minor | `v1.18.9` → `v1.19.0` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

### Release Notes

<details>
<summary>rook/rook (rook-ceph-cluster)</summary>

### [`v1.19.0`](https://github.com/rook/rook/releases/tag/v1.19.0)

[Compare Source](https://github.com/rook/rook/compare/v1.18.9...v1.19.0)

### Upgrade Guide

To upgrade from previous versions of Rook, see the [Rook upgrade guide](https://rook.github.io/docs/rook/v1.19/Upgrade/rook-upgrade/).

### Breaking Changes

- The supported Kubernetes versions are v1.30 - v1.35
- The minimum supported Ceph version is v19.2.0. Rook v1.18 clusters running Ceph v18 must upgrade
  to Ceph v19.2.0 or higher before upgrading Rook.
- The behavior of the `activeStandby` property in the `CephFilesystem` CRD has changed. When set to `false`, the standby MDS daemon deployment will be scaled down and removed, rather than only disabling the standby cache while the daemon remains running.
- Helm: The `rook-ceph-cluster` chart has changed where the Ceph image is defined, to allow separate settings for the repository and tag. For more details, see the [Rook upgrade guide](https://rook.io/docs/rook/v1.19/Upgrade/rook-upgrade/#breaking-changes-in-v119).
- In external mode, when users provide a Ceph admin keyring to Rook, Rook will no longer create CSI Ceph clients automatically. This approach will provide more consistency to configure external mode clusters via the same external Python script.

### Features

- Experimental: NVMe over Fabrics (NVMe-oF) allows RBD volumes to be exposed and accessed via the NVMe/TCP protocol. This enables both Kubernetes pods within the cluster and external clients outside the cluster to connect to Ceph block storage using standard NVMe-oF initiators, providing high-performance block storage access over the network. See the [NVMe-oF Configuration Guide](https://rook.io/docs/rook/latest-release/Storage-Configuration/Block-Storage-RBD/nvme-of/) to get started.
- CephCSI v3.16 Integration:
  - NVMe-oF CSI driver for provisioning and mounting volumes over the NVMe over Fabrics protocol
  - Improved fencing for RBD and CephFS volumes during [node failure](https://rook.io/docs/rook/latest-release/Storage-Configuration/Block-Storage-RBD/block-storage/#node-loss)
  - Block volume usage statistics
  - Configurable block encryption cipher
- Experimental: Allow concurrent reconciles of the CephCluster CR when there multiple clusters being managed by the same Rook operator. Concurrency is enabled by increasing the operator setting `ROOK_RECONCILE_CONCURRENT_CLUSTERS` to a value greater than `1`.
- Improved logging with namespaced names for the controllers for more consistency in troubleshooting the rook operator log.

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi42OS4yIiwidXBkYXRlZEluVmVyIjoiNDIuNjkuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiY2hhcnQiXX0=-->

Reviewed-on: #3343
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>

clusters/cl01tl/helm/actual/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.0
+  version: 4.6.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:ab1b7688f41127681b66c0673c713b651c58ac7c06f123d53ea871b6df9cda9f
+digest: sha256:ff3e2f03e93cdd4593e28b9c8bd5b9ddb25548a20a070b2e202057f216207d03
-generated: "2026-01-07T16:02:51.781699411Z"
+generated: "2026-01-16T18:44:37.399172263Z"

clusters/cl01tl/helm/actual/Chart.yaml

@@ -16,7 +16,7 @@ dependencies:
   - name: app-template
     alias: actual
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.0
+    version: 4.6.2
   - name: volsync-target
     alias: volsync-target-data
     version: 0.7.0

clusters/cl01tl/helm/argocd/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: argo-cd
   repository: https://argoproj.github.io/argo-helm
-  version: 9.3.3
+  version: 9.3.4
-digest: sha256:525e5f408c3e7f8962f9586a938f355c141115d5a3101fc17fd84a84533c9c1f
+digest: sha256:006518c10fc1636a5b0398de90d4a7687ae6c0bf4626c41d11b2bc3ad48ff416
-generated: "2026-01-14T21:03:21.857508064Z"
+generated: "2026-01-14T23:02:04.617990687Z"

clusters/cl01tl/helm/argocd/Chart.yaml

@@ -15,7 +15,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: argo-cd
-    version: 9.3.3
+    version: 9.3.4
     repository: https://argoproj.github.io/argo-helm
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 # renovate: github=argoproj/argo-cd

clusters/cl01tl/helm/audiobookshelf/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.0
+  version: 4.6.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:9ad54a69753a4bbfe53d1d7ed12551e89fe7bb8f90d96c1d3ff06ba200bc5202
+digest: sha256:c8a988258b26187972a8b69767bf5df502d7e2b12710eb357ac15240d872fd37
-generated: "2026-01-07T16:03:05.987463264Z"
+generated: "2026-01-16T18:44:48.982249243Z"

clusters/cl01tl/helm/audiobookshelf/Chart.yaml

@@ -18,7 +18,7 @@ dependencies:
   - name: app-template
     alias: audiobookshelf
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.0
+    version: 4.6.2
   - name: volsync-target
     alias: volsync-target-config
     version: 0.7.0

clusters/cl01tl/helm/authentik/Chart.lock

@@ -1,15 +1,15 @@
 dependencies:
 - name: authentik
   repository: https://charts.goauthentik.io/
-  version: 2025.10.3
+  version: 2025.12.1
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
+  version: 2.1.9
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.4.5
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.0.1
-digest: sha256:b9fe766e223b1f65430c64c02f94c1f97ad7149a5a9acc7bab8339615706293f
+digest: sha256:458e9967330768b68649da4af69773adba3aed1a04316b9e67ef19612381d4b9
-generated: "2026-01-08T23:01:41.173354097Z"
+generated: "2026-01-17T17:30:18.453482605Z"

clusters/cl01tl/helm/authentik/Chart.yaml

@@ -21,11 +21,11 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: authentik
-    version: 2025.10.3
+    version: 2025.12.1
     repository: https://charts.goauthentik.io/
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.6
+    version: 2.1.9
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.4.5

clusters/cl01tl/helm/backrest/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.0
+  version: 4.6.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:816f9485a6ecce1710004fcf8b5422d519f7d7a02576ae5767bb3a6f365fcdcc
+digest: sha256:18365b7dd3995703aad6928ce22dd1c3b8ffd5f1cccf54b8f1489ad111d13104
-generated: "2026-01-07T16:03:18.566019576Z"
+generated: "2026-01-16T18:45:00.087995513Z"

clusters/cl01tl/helm/backrest/Chart.yaml

@@ -16,7 +16,7 @@ dependencies:
   - name: app-template
     alias: backrest
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.0
+    version: 4.6.2
   - name: volsync-target
     alias: volsync-target-config
     version: 0.7.0

clusters/cl01tl/helm/backrest/values.yaml

@@ -8,7 +8,7 @@ backrest:
         main:
           image:
             repository: garethgeorge/backrest
-            tag: v1.10.1
+            tag: v1.11.1
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/bazarr/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.0
+  version: 4.6.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:de894b87644bc7fe271df181dc27c9c4aff6716c7d61afe897776a90c8d1156f
+digest: sha256:77d0e82601292b4173d355d18c0de82bb37684a3dc29d7c8af4169308f14de48
-generated: "2026-01-07T16:03:30.651964699Z"
+generated: "2026-01-16T18:45:10.855338471Z"

clusters/cl01tl/helm/bazarr/Chart.yaml

@@ -18,7 +18,7 @@ dependencies:
   - name: app-template
     alias: bazarr
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.0
+    version: 4.6.2
   - name: volsync-target
     alias: volsync-target-config
     version: 0.7.0

clusters/cl01tl/helm/blocky/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.0
+  version: 4.6.2
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.0.1
-digest: sha256:e9dde2592347a72ab8b7154efcd12654fb0865c4e791c5bbea27f56b390a6b50
+digest: sha256:f3cc9b85524eb1a0c8aec92a87ad4dd1f2f59c5bb3474b569ce188827e40b3d0
-generated: "2026-01-08T15:47:39.239057-06:00"
+generated: "2026-01-16T18:45:21.852495393Z"

clusters/cl01tl/helm/blocky/Chart.yaml

@@ -16,7 +16,7 @@ dependencies:
   - name: app-template
     alias: blocky
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.0
+    version: 4.6.2
   - name: redis-replication
     version: 1.0.1
     repository: oci://harbor.alexlebens.net/helm-charts

clusters/cl01tl/helm/blocky/values.yaml

@@ -113,8 +113,8 @@ blocky:
               ceph                            IN      CNAME   traefik-cl01tl
               code-server                     IN      CNAME   traefik-cl01tl
               ephemera                        IN      CNAME   traefik-cl01tl
+              excalidraw                      IN      CNAME   traefik-cl01tl
               feishin                         IN      CNAME   traefik-cl01tl
-              fladder                         IN      CNAME   traefik-cl01tl
               garage-s3                       IN      CNAME   traefik-cl01tl
               garage-webui                    IN      CNAME   traefik-cl01tl
               gatus                           IN      CNAME   traefik-cl01tl
@@ -134,7 +134,6 @@ blocky:
               komodo                          IN      CNAME   traefik-cl01tl
               lidarr                          IN      CNAME   traefik-cl01tl
               lidatube                        IN      CNAME   traefik-cl01tl
-              listenarr                       IN      CNAME   traefik-cl01tl
               mail                            IN      CNAME   traefik-cl01tl
               navidrome                       IN      CNAME   traefik-cl01tl
               ntfy                            IN      CNAME   traefik-cl01tl
@@ -155,12 +154,12 @@ blocky:
               radarr-standup                  IN      CNAME   traefik-cl01tl
               searxng                         IN      CNAME   traefik-cl01tl
               seerr                           IN      CNAME   traefik-cl01tl
+              shelfmark                       IN      CNAME   traefik-cl01tl
               slskd                           IN      CNAME   traefik-cl01tl
               sonarr                          IN      CNAME   traefik-cl01tl
               sonarr-4k                       IN      CNAME   traefik-cl01tl
               sonarr-anime                    IN      CNAME   traefik-cl01tl
               stalwart                        IN      CNAME   traefik-cl01tl
-              tautulli                        IN      CNAME   traefik-cl01tl
               tdarr                           IN      CNAME   traefik-cl01tl
               tubearchivist                   IN      CNAME   traefik-cl01tl
               vault                           IN      CNAME   traefik-cl01tl

clusters/cl01tl/helm/booklore/Chart.lock

@@ -1,7 +1,7 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.0
+  version: 4.6.2
 - name: mariadb-cluster
   repository: https://helm.mariadb.com/mariadb-operator
   version: 25.10.4
@@ -11,5 +11,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:bce787056cbe11ac5291393a0e51f64e8e20bf665885580b8f6be79fd2be3e12
+digest: sha256:81601af110374e1571481873ace19f7bc694edb917ef35c1fbc623efe147a66d
-generated: "2026-01-08T21:50:26.303731301Z"
+generated: "2026-01-16T18:45:33.641059484Z"

clusters/cl01tl/helm/booklore/Chart.yaml

@@ -16,7 +16,7 @@ dependencies:
   - name: app-template
     alias: booklore
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.0
+    version: 4.6.2
   - name: mariadb-cluster
     version: 25.10.4
     repository: https://helm.mariadb.com/mariadb-operator

clusters/cl01tl/helm/code-server/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.0
+  version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
+  version: 2.1.9
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:62df4e053f3b887bae03f79ef3cb158b7e7147f8b0fba0bca019d4ca16c12ade
+digest: sha256:d243a4062bd69c3e02536dbc8f0da06f8607a373a772bf521fa16ae10df331b7
-generated: "2026-01-08T23:01:55.996749204Z"
+generated: "2026-01-17T17:30:30.693066904Z"

clusters/cl01tl/helm/code-server/Chart.yaml

@@ -19,10 +19,10 @@ dependencies:
   - name: app-template
     alias: code-server
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.0
+    version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.6
+    version: 2.1.9
   - name: volsync-target
     alias: volsync-target-config
     version: 0.7.0

clusters/cl01tl/helm/code-server/values.yaml

@@ -9,7 +9,7 @@ code-server:
         main:
           image:
             repository: ghcr.io/linuxserver/code-server
-            tag: 4.108.0@sha256:982ef207e723fe04d001a9cfe58c545913c8271ae9fd4cb036fa004bfcc33631
+            tag: 4.108.1@sha256:e9ed472ff25e12a5ee3562684d073b29e508e472ef54e3558e19bf4ff99ef858
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/directus/Chart.lock

@@ -1,15 +1,15 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.0
+  version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
+  version: 2.1.9
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.4.5
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.0.1
-digest: sha256:4a666a87c07396ff40393f5d78658ee543ac442270868b65f350e6ad30bbcb5f
+digest: sha256:9ae9e0cb222e7ac2fca2bfe5367a4b011b0c83c1a0f98a01342f37fad62c2fe1
-generated: "2026-01-08T23:02:12.156604855Z"
+generated: "2026-01-17T17:30:43.212095428Z"

clusters/cl01tl/helm/directus/Chart.yaml

@@ -20,10 +20,10 @@ dependencies:
   - name: app-template
     alias: directus
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.0
+    version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.6
+    version: 2.1.9
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.4.5

clusters/cl01tl/helm/directus/values.yaml

@@ -9,7 +9,7 @@ directus:
         main:
           image:
             repository: directus/directus
-            tag: 11.14.0
+            tag: 11.14.1
             pullPolicy: IfNotPresent
           env:
             - name: PUBLIC_URL

clusters/cl01tl/helm/element-web/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 1.4.27
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
+  version: 2.1.9
-digest: sha256:b8b4e36fb88254e7575bd3aff60721fbf44a13af33eff949b6bc011facfcec62
+digest: sha256:ef4b5256d6b405f08f33ec1a2bbda9f8427fcac0c69accd04c19fb4fe1871047
-generated: "2026-01-08T23:02:24.62763032Z"
+generated: "2026-01-17T17:30:57.57289288Z"

clusters/cl01tl/helm/element-web/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     repository: https://ananace.gitlab.io/charts
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.6
+    version: 2.1.9
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/element.png
 # renovate: github=element-hq/element-web
 appVersion: v1.12.6

clusters/cl01tl/helm/ephemera/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.0
+  version: 4.6.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:42704958b1e19a1de627844a68ae5a5ef5547f2df268c49adaec93b183c9dba7
+digest: sha256:c270dc80232d53598370e68d969ddcb71f26eb6910b7bb51761b88127e065f5a
-generated: "2026-01-07T16:05:17.429175658Z"
+generated: "2026-01-16T18:46:10.06351851Z"

clusters/cl01tl/helm/ephemera/Chart.yaml

@@ -18,7 +18,7 @@ dependencies:
   - name: app-template
     alias: ephemera
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.0
+    version: 4.6.2
   - name: volsync-target
     alias: volsync-target-config
     version: 0.7.0

clusters/cl01tl/helm/excalidraw/Chart.lock

@@ -0,0 +1,6 @@
+dependencies:
+- name: app-template
+  repository: https://bjw-s-labs.github.io/helm-charts/
+  version: 4.6.2
+digest: sha256:e05d84dd266b8b456a8bc7f9a2bb3ab01f4ac926efd1a58cf405b0cdab343d3f
+generated: "2026-01-17T18:27:08.062835-06:00"

clusters/cl01tl/helm/excalidraw/Chart.yaml

@@ -0,0 +1,21 @@
+apiVersion: v2
+name: excalidraw
+version: 1.0.0
+description: Excalidraw
+keywords:
+  - excalidraw
+home: https://wiki.alexlebens.dev/
+sources:
+  - https://github.com/excalidraw/excalidraw
+  - https://hub.docker.com/r/excalidraw/excalidraw
+  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
+maintainers:
+  - name: alexlebens
+dependencies:
+  - name: app-template
+    alias: excalidraw
+    repository: https://bjw-s-labs.github.io/helm-charts/
+    version: 4.6.2
+icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/excalidraw.png
+# renovate: github=excalidraw/excalidraw
+appVersion: 0.6.0

clusters/cl01tl/helm/excalidraw/values.yaml

@@ -0,0 +1,51 @@
+excalidraw:
+  controllers:
+    main:
+      type: deployment
+      replicas: 1
+      strategy: Recreate
+      revisionHistoryLimit: 3
+      containers:
+        main:
+          image:
+            repository: excalidraw/excalidraw
+            tag: latest@sha256:3c2513e830bb6e195147c05b34ecf8393d0ba2b1cc86e93b407a5777d6135c6c
+            pullPolicy: IfNotPresent
+          env:
+            - name: NODE_ENV
+              value: production
+            - name: TZ
+              value: America/Chicago
+          resources:
+            requests:
+              cpu: 10m
+              memory: 128Mi
+  service:
+    main:
+      controller: main
+      ports:
+        http:
+          port: 80
+          targetPort: 80
+          protocol: HTTP
+  route:
+    main:
+      kind: HTTPRoute
+      parentRefs:
+        - group: gateway.networking.k8s.io
+          kind: Gateway
+          name: traefik-gateway
+          namespace: traefik
+      hostnames:
+        - excalidraw.alexlebens.net
+      rules:
+        - backendRefs:
+            - group: ''
+              kind: Service
+              name: excalidraw
+              port: 80
+              weight: 100
+          matches:
+            - path:
+                type: PathPrefix
+                value: /

clusters/cl01tl/helm/external-dns/values.yaml

@@ -19,7 +19,7 @@ external-dns-unifi:
     webhook:
       image:
         repository: ghcr.io/kashalls/external-dns-unifi-webhook
-        tag: v0.8.0
+        tag: v0.8.1
       env:
         - name: UNIFI_HOST
           value: https://192.168.1.1

clusters/cl01tl/helm/freshrss/Chart.lock

@@ -1,15 +1,15 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.0
+  version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
+  version: 2.1.9
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.4.5
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:7e108ab93ab55445a290dcc83bad550f37e718168d52f98be76962a138bc2a05
+digest: sha256:ded65efcf83f3c0cd3497839a1beddbc616081c286bdac6f584353813e7c8da8
-generated: "2026-01-08T23:02:37.83037073Z"
+generated: "2026-01-17T17:31:12.045290099Z"

clusters/cl01tl/helm/freshrss/Chart.yaml

@@ -20,10 +20,10 @@ dependencies:
   - name: app-template
     alias: freshrss
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.0
+    version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.6
+    version: 2.1.9
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.4.5

clusters/cl01tl/helm/garage/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.0
+  version: 4.6.2
-digest: sha256:2e75cf6b7bd49444935181cba2f3bfe43c0941f97452928ed19e40a70deacdb4
+digest: sha256:86536c14fa61870a64540b77f65afae8f4308e41a66eefae7fe85b83bf0df30e
-generated: "2026-01-07T16:06:02.254142944Z"
+generated: "2026-01-16T18:46:33.321938614Z"

clusters/cl01tl/helm/garage/Chart.yaml

@@ -17,7 +17,7 @@ dependencies:
   - name: app-template
     alias: garage
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.0
+    version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 # renovate: github=deuxfleurs-org/garage
 appVersion: v2.1.0

clusters/cl01tl/helm/garage/values.yaml

@@ -34,7 +34,7 @@ garage:
         debug:
           image:
             repository: ubuntu
-            tag: resolute-20251208
+            tag: resolute-20260106.1
             pullPolicy: IfNotPresent
           command:
             - "sleep"

clusters/cl01tl/helm/gatus/values.yaml

@@ -131,9 +131,6 @@ gatus:
       - name: jellyfin
         url: https://jellyfin.alexlebens.net
         <<: *defaults
-      - name: fladder
-        url: https://fladder.alexlebens.net
-        <<: *defaults
       - name: tubearchivist
         url: https://tubearchivist.alexlebens.net
         <<: *defaults
@@ -173,6 +170,9 @@ gatus:
       - name: kiwix
         url: https://kiwix.alexlebens.net
         <<: *defaults
+      - name: excalidraw
+        url: https://excalidraw.alexlebens.net
+        <<: *defaults
       - name: gitea
         url: https://gitea.alexlebens.net
         <<: *defaults
@@ -206,9 +206,6 @@ gatus:
       - name: alertmanager
         url: https://alertmanager.alexlebens.net
         <<: *defaults
-      - name: tautulli
-        url: https://tautulli.alexlebens.net
-        <<: *defaults
       - name: jellystat
         url: https://jellystat.alexlebens.net
         <<: *defaults
@@ -322,11 +319,8 @@ gatus:
       - name: slskd
         url: https://slskd.alexlebens.net
         <<: *defaults
-      - name: ephemera
+      - name: shelfmark
-        url: https://ephemera.alexlebens.net
+        url: https://shelfmark.alexlebens.net
-        <<: *defaults
-      - name: listenarr
-        url: https://listenarr.alexlebens.net
         <<: *defaults
       - name: www
         url: https://www.alexlebens.dev

clusters/cl01tl/helm/generic-device-plugin/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: generic-device-plugin
   repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-  version: 0.20.14
+  version: 0.20.17
-digest: sha256:fdb8cb0fae6f184b7d0396cf75cbd1ce8611904e4bf7c973ed6dd50e740f90d2
+digest: sha256:878766891eee5b4cea332c5eae87fc7fbd7eb7bfea90b408c48666e840b81408
-generated: "2026-01-14T00:04:49.992859554Z"
+generated: "2026-01-17T17:39:58.807224966Z"

clusters/cl01tl/helm/generic-device-plugin/Chart.yaml

@@ -15,6 +15,6 @@ maintainers:
 dependencies:
   - name: generic-device-plugin
     repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-    version: 0.20.14
+    version: 0.20.17
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 appVersion: 1.0.0

clusters/cl01tl/helm/gitea/Chart.lock

@@ -7,10 +7,10 @@ dependencies:
   version: 0.2.1
 - name: meilisearch
   repository: https://meilisearch.github.io/meilisearch-kubernetes
-  version: 0.20.0
+  version: 0.23.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
+  version: 2.1.9
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.4.5
@@ -23,5 +23,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:36c3e2511a1163b6055af6ceeef65862df3de0426da8029145eb9274d34748ad
+digest: sha256:d9faaa7a84d8d37c0bb1836dcd64e59368edf957d32a0db568d750f1136d7e4a
-generated: "2026-01-08T23:02:52.334136773Z"
+generated: "2026-01-20T16:01:37.816523129Z"

clusters/cl01tl/helm/gitea/Chart.yaml

@@ -32,11 +32,11 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
     version: 0.2.1
   - name: meilisearch
-    version: 0.20.0
+    version: 0.23.0
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.6
+    version: 2.1.9
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.4.5

clusters/cl01tl/helm/harbor/values.yaml

@@ -41,12 +41,12 @@ harbor:
   portal:
     image:
       repository: goharbor/harbor-portal
-      tag: v2.14.1
+      tag: v2.14.2
     replicas: 2
   core:
     image:
       repository: goharbor/harbor-core
-      tag: v2.14.1
+      tag: v2.14.2
     replicas: 2
     existingSecret: harbor-secret
     secretName: harbor-secret
@@ -54,7 +54,7 @@ harbor:
   jobservice:
     image:
       repository: goharbor/harbor-jobservice
-      tag: v2.14.1
+      tag: v2.14.2
     replicas: 2
     jobLoggers:
       - stdout
@@ -63,11 +63,11 @@ harbor:
     registry:
       image:
         repository: goharbor/registry-photon
-        tag: v2.14.1
+        tag: v2.14.2
     controller:
       image:
         repository: goharbor/harbor-registryctl
-        tag: v2.14.1
+        tag: v2.14.2
     existingSecret: harbor-secret
     relativeurls: true
     credentials:
@@ -94,7 +94,7 @@ harbor:
   exporter:
     image:
       repository: goharbor/harbor-exporter
-      tag: v2.14.1
+      tag: v2.14.2
     replicas: 2
 postgres-18-cluster:
   mode: recovery

clusters/cl01tl/helm/home-assistant/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.0
+  version: 4.6.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:baeefe09b5379e6b061e194efa697645dd39ef8a5c88dc268b663273db26089d
+digest: sha256:2ba5b6579e7296d663fd0dcb7dfb4fea67142413801f6fbc4125a0e731b45210
-generated: "2026-01-07T16:06:23.264463262Z"
+generated: "2026-01-16T18:46:42.940648748Z"

clusters/cl01tl/helm/home-assistant/Chart.yaml

@@ -18,7 +18,7 @@ dependencies:
   - name: app-template
     alias: home-assistant
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.0
+    version: 4.6.2
   - name: volsync-target
     alias: volsync-target-config
     version: 0.7.0

clusters/cl01tl/helm/home-assistant/values.yaml

@@ -9,7 +9,7 @@ home-assistant:
         main:
           image:
             repository: ghcr.io/home-assistant/home-assistant
-            tag: 2026.1.1
+            tag: 2026.1.2
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -21,7 +21,7 @@ home-assistant:
         code-server:
           image:
             repository: ghcr.io/linuxserver/code-server
-            tag: 4.108.0@sha256:982ef207e723fe04d001a9cfe58c545913c8271ae9fd4cb036fa004bfcc33631
+            tag: 4.108.1@sha256:e9ed472ff25e12a5ee3562684d073b29e508e472ef54e3558e19bf4ff99ef858
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/homepage-dev/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.0
+  version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
+  version: 2.1.9
-digest: sha256:407c44f708da679b81f9c12db03dd4152456aef87d8161a60652156d0e61a88d
+digest: sha256:3dd7439a8874fcf8b12754907f187149287a2db04c5b9a595d32e6b64a5482db
-generated: "2026-01-08T23:03:12.666369272Z"
+generated: "2026-01-17T17:31:46.477375094Z"

clusters/cl01tl/helm/homepage-dev/Chart.yaml

@@ -18,10 +18,10 @@ dependencies:
   - name: app-template
     alias: homepage
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.0
+    version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.6
+    version: 2.1.9
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/homepage.png
 # renovate: github=gethomepage/homepage
 appVersion: v1.8.0

clusters/cl01tl/helm/homepage-dev/values.yaml

@@ -11,7 +11,7 @@ homepage:
         main:
           image:
             repository: ghcr.io/gethomepage/homepage
-            tag: v1.8.0
+            tag: v1.9.0
             pullPolicy: IfNotPresent
           env:
             - name: HOMEPAGE_ALLOWED_HOSTS

clusters/cl01tl/helm/homepage/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.0
+  version: 4.6.2
-digest: sha256:56b034f03577c7516f9eebd3659b613d9a229090945aacfd710def728d945a92
+digest: sha256:1f6cc724b7c88b5209d893b4b3c914e4064a5450e9bb6ca89ef5642199020f2b
-generated: "2026-01-07T16:07:07.252632221Z"
+generated: "2026-01-16T18:47:06.186790637Z"

clusters/cl01tl/helm/homepage/Chart.yaml

@@ -16,7 +16,7 @@ dependencies:
   - name: app-template
     alias: homepage
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.0
+    version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/homepage.png
 # renovate: github=gethomepage/homepage
 appVersion: v1.8.0

clusters/cl01tl/helm/homepage/values.yaml

@@ -15,7 +15,7 @@ homepage:
         main:
           image:
             repository: ghcr.io/gethomepage/homepage
-            tag: v1.8.0
+            tag: v1.9.0
             pullPolicy: IfNotPresent
           env:
             - name: HOMEPAGE_ALLOWED_HOSTS
@@ -147,12 +147,6 @@ homepage:
                   href: https://yamtrack.alexlebens.net
                   siteMonitor: http://yamtrack.yamtrack:80
                   statusStyle: dot
-              - Movies and TV (Alt):
-                  icon: sh-fladder.webp
-                  description: Fladder, Jellyfin UI
-                  href: https://fladder.alexlebens.net
-                  siteMonitor: http://fladder.jellyfin:80
-                  statusStyle: dot
               - Movies and TV:
                   icon: sh-jellyfin.webp
                   description: Jellyfin
@@ -287,6 +281,12 @@ homepage:
                   href: https://kiwix.alexlebens.net
                   siteMonitor: http://kiwix.kiwix:80
                   statusStyle: dot
+              - Draw:
+                  icon: sh-excalidraw.webp
+                  description: Excalidraw
+                  href: https://excalidraw.alexlebens.net
+                  siteMonitor: http://excalidraw.excalidraw:80
+                  statusStyle: dot
           - Code:
               - Code (Public):
                   icon: sh-gitea.webp
@@ -394,12 +394,6 @@ homepage:
                         query: prometheus_tsdb_storage_blocks_bytes
                         format:
                           type: bytes
-              - Tautulli:
-                  icon: sh-tautulli.webp
-                  description: Plex Monitoring
-                  href: https://tautulli.alexlebens.net
-                  siteMonitor: http://tautulli.tautulli:80
-                  statusStyle: dot
               - Jellystat:
                   icon: sh-jellystat.webp
                   description: Jellyfin Monitoring
@@ -680,18 +674,18 @@ homepage:
                   siteMonitor: http://slskd.slskd:5030
                   statusStyle: dot
           - Books:
+              - Shelfmark:
+                  icon: sh-shelfmark.webp
+                  description: Books
+                  href: https://shelfmark.alexlebens.net
+                  siteMonitor: http://shelfmark.shelfmark:80
+                  statusStyle: dot
               - Ephemera:
                   icon: sh-ephemera.webp
                   description: Books
                   href: https://ephemera.alexlebens.net
                   siteMonitor: http://ephemera.ephemera:80
                   statusStyle: dot
-              - Listenarr:
-                  icon: sh-audiobookrequest.webp
-                  description: Audiobooks
-                  href: https://listenarr.alexlebens.net
-                  siteMonitor: http://listenarr.listenarr:80
-                  statusStyle: dot
           - Other Homes:
               - Dev:
                   icon: sh-homepage.webp

clusters/cl01tl/helm/huntarr/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.0
+  version: 4.6.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:f47bf91e2da0bdc60d0d90edcab3369d15d56cd25ff92e56b7c52b08ace0a959
+digest: sha256:a3df74f75bbc4aa303a70031732c8727a19d516deb106996c035e30e8ef103c4
-generated: "2026-01-07T16:07:25.946806985Z"
+generated: "2026-01-16T18:47:16.606690576Z"

clusters/cl01tl/helm/huntarr/Chart.yaml

@@ -16,7 +16,7 @@ dependencies:
   - name: app-template
     alias: huntarr
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.0
+    version: 4.6.2
   - name: volsync-target
     alias: volsync-target-config
     version: 0.7.0

clusters/cl01tl/helm/immich/Chart.lock

@@ -1,7 +1,7 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.0
+  version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.4.5
@@ -11,5 +11,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:5635eb2aff4f8a1a4152c14822995cebec4907eb58c5fe3eb7c7dbeea089f2c1
+digest: sha256:f72a93b81d636911a34bae2cf88f77fbe8c793a1cbe6371996bb0c907b7c8ac3
-generated: "2026-01-08T16:05:42.767481-06:00"
+generated: "2026-01-16T18:47:28.749588457Z"

clusters/cl01tl/helm/immich/Chart.yaml

@@ -17,7 +17,7 @@ dependencies:
   - name: app-template
     alias: immich
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.0
+    version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.4.5

clusters/cl01tl/helm/jellyfin/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.0
+  version: 4.6.2
 - name: meilisearch
   repository: https://meilisearch.github.io/meilisearch-kubernetes
-  version: 0.20.0
+  version: 0.23.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:d9fcbbc6a95635c81ece57f7b1ab15a2505afed2bc52aef754431a9cedd06ae0
+digest: sha256:c31127c41d18fc2dbd0cd89968ea7df28ddc2548e629c5861124eeaa5ba6b246
-generated: "2026-01-07T16:08:05.338907704Z"
+generated: "2026-01-20T16:01:53.343188952Z"

clusters/cl01tl/helm/jellyfin/Chart.yaml

@@ -23,9 +23,9 @@ dependencies:
   - name: app-template
     alias: jellyfin
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.0
+    version: 4.6.2
   - name: meilisearch
-    version: 0.20.0
+    version: 0.23.0
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/jellyfin/values.yaml

@@ -9,7 +9,7 @@ jellyfin:
         main:
           image:
             repository: ghcr.io/jellyfin/jellyfin
-            tag: 10.11.5
+            tag: 10.11.6
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -39,20 +39,6 @@ jellyfin:
                 secretKeyRef:
                   name: jellyfin-exporter-secret
                   key: token
-    fladder:
-      type: deployment
-      replicas: 1
-      strategy: Recreate
-      revisionHistoryLimit: 3
-      containers:
-        main:
-          image:
-            repository: ghcr.io/donutware/fladder
-            tag: v0.9.0
-            pullPolicy: IfNotPresent
-          env:
-            - name: BASE_URL
-              value: https://jellyfin.alexlebens.net/
   service:
     main:
       forceRename: jellyfin
@@ -66,14 +52,6 @@ jellyfin:
           port: 9594
           targetPort: 9594
           protocol: HTTP
-    fladder:
-      forceRename: fladder
-      controller: fladder
-      ports:
-        http:
-          port: 80
-          targetPort: 80
-          protocol: HTTP
   serviceMonitor:
     main:
       selector:
@@ -108,26 +86,6 @@ jellyfin:
             - path:
                 type: PathPrefix
                 value: /
-    fladder:
-      kind: HTTPRoute
-      parentRefs:
-        - group: gateway.networking.k8s.io
-          kind: Gateway
-          name: traefik-gateway
-          namespace: traefik
-      hostnames:
-        - fladder.alexlebens.net
-      rules:
-        - backendRefs:
-            - group: ''
-              kind: Service
-              name: fladder
-              port: 80
-              weight: 100
-          matches:
-            - path:
-                type: PathPrefix
-                value: /
   persistence:
     config:
       forceRename: jellyfin-config

clusters/cl01tl/helm/jellystat/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.0
+  version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.4.5
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:fd2cff20fcb1f3878d24395ac1dc038fef5d6aca819b8a4ddd4881a236633118
+digest: sha256:928455407a1a4edef66f133342b0a5c0bc8e7cd2eeabdf5995615883114badef
-generated: "2026-01-07T16:08:24.365150939Z"
+generated: "2026-01-16T18:47:56.158342425Z"

clusters/cl01tl/helm/jellystat/Chart.yaml

@@ -18,7 +18,7 @@ dependencies:
   - name: app-template
     alias: jellystat
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.0
+    version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.4.5

clusters/cl01tl/helm/karakeep/Chart.lock

@@ -1,15 +1,15 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.0
+  version: 4.6.2
 - name: meilisearch
   repository: https://meilisearch.github.io/meilisearch-kubernetes
-  version: 0.20.0
+  version: 0.23.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
+  version: 2.1.9
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:d8b5b42608537e20f34d109bc624c68e27879488f8ef78df2681a70808bfba87
+digest: sha256:526ebcfdf6c7e99c16562dc841ea96c602dd3dd90fc7a1fe6bd2d8147b71ecca
-generated: "2026-01-08T23:03:25.51925384Z"
+generated: "2026-01-20T16:02:05.482993485Z"

clusters/cl01tl/helm/karakeep/Chart.yaml

@@ -20,13 +20,13 @@ dependencies:
   - name: app-template
     alias: karakeep
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.0
+    version: 4.6.2
   - name: meilisearch
-    version: 0.20.0
+    version: 0.23.0
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.6
+    version: 2.1.9
   - name: volsync-target
     alias: volsync-target-data
     version: 0.7.0

clusters/cl01tl/helm/kiwix/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.0
+  version: 4.6.2
-digest: sha256:3610d09b2d539fb7659b72134b3caec24c019baeeaf7e6ad95d9095fa5781036
+digest: sha256:aab81291201585c1169bd5d160768441b7c26670a78bcbefca6a781be0924576
-generated: "2026-01-07T16:08:56.687353235Z"
+generated: "2026-01-16T18:48:20.708363828Z"

clusters/cl01tl/helm/kiwix/Chart.yaml

@@ -16,7 +16,7 @@ dependencies:
   - name: app-template
     alias: kiwix
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.0
+    version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kiwix-dark.png
 # renovate: github=kiwix/kiwix-tools
 appVersion: 3.8.1

clusters/cl01tl/helm/komodo/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.0
+  version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.4.5
-digest: sha256:1a98d15491fe5b9e7de57076281583d42f2f7d3884ce25742c5d3c50a81ef2ce
+digest: sha256:f5b2b65ad217cc283e03c4dba42afa29c65d9d241d65f2d601bfdbd598b2a22e
-generated: "2026-01-07T16:09:11.923124552Z"
+generated: "2026-01-16T18:48:31.647540475Z"

clusters/cl01tl/helm/komodo/Chart.yaml

@@ -20,7 +20,7 @@ dependencies:
   - name: app-template
     alias: komodo
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.0
+    version: 4.6.2
   - name: postgres-cluster
     alias: postgresql-17-fdb-cluster
     version: 7.4.5

clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: kube-prometheus-stack
   repository: oci://ghcr.io/prometheus-community/charts
-  version: 80.14.3
+  version: 81.0.0
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.0
+  version: 4.6.2
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.0.1
-digest: sha256:842426b4a0ca86412aeeca55c8bd6ffb23b9c28cacb569452203b283c36ceb4e
+digest: sha256:14197d65a6db43a466933c29b6c78e234dd46514254a2d24814e713ca9f3c919
-generated: "2026-01-14T21:05:55.356279227Z"
+generated: "2026-01-16T21:44:02.294108101Z"

clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml

@@ -20,12 +20,12 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: kube-prometheus-stack
-    version: 80.14.3
+    version: 81.0.0
     repository: oci://ghcr.io/prometheus-community/charts
   - name: app-template
     alias: ntfy-alertmanager
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.0
+    version: 4.6.2
   - name: redis-replication
     version: 1.0.1
     repository: oci://harbor.alexlebens.net/helm-charts

clusters/cl01tl/helm/kubelet-serving-cert-approver/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.0
+  version: 4.6.2
-digest: sha256:2eb7309a6a72fddb7e85e1fbbc956dd1e57a10fc26328ff6e724ec1d33193bcc
+digest: sha256:c0c65eaac1dfcc33b70a59d12319dee96ccd28cdd9fb201cd091f1802b0b2892
-generated: "2026-01-07T16:09:49.87010962Z"
+generated: "2026-01-16T18:48:53.976469964Z"

clusters/cl01tl/helm/kubelet-serving-cert-approver/Chart.yaml

@@ -17,7 +17,7 @@ dependencies:
   - name: app-template
     alias: kubelet-serving-cert-approver
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.0
+    version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 # renovate: github=alex1989hu/kubelet-serving-cert-approver
 appVersion: 0.10.1

clusters/cl01tl/helm/kubelet-serving-cert-approver/values.yaml

@@ -38,7 +38,7 @@ kubelet-serving-cert-approver:
         main:
           image:
             repository: ghcr.io/alex1989hu/kubelet-serving-cert-approver
-            tag: 0.10.1
+            tag: 0.10.2
             pullPolicy: Always
           args:
             - serve

clusters/cl01tl/helm/kubernetes-cloudflare-ddns/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.0
+  version: 4.6.2
-digest: sha256:0ea3c66c1e52075913ca2931948211cbce6f006d50fcec95a9a318715a85c4af
+digest: sha256:6cba91672ca98d62208b3ff7cb1b7ffaaf44140bb3a54196c80126a82a0d2430
-generated: "2026-01-07T16:10:10.966993943Z"
+generated: "2026-01-16T18:49:04.125289391Z"

clusters/cl01tl/helm/kubernetes-cloudflare-ddns/Chart.yaml

@@ -18,7 +18,7 @@ dependencies:
   - name: app-template
     alias: kubernetes-cloudflare-ddns
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.0
+    version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/cloudflare.png
 # renovate: github=kubitodev/kubernetes-cloudflare-ddns
 appVersion: v2.0.0

clusters/cl01tl/helm/libation/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.0
+  version: 4.6.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:dd6ed45f7b53be06c74491078cf316c727f978299c047da9eebb016c09048b01
+digest: sha256:2062e2b2bd3858edb894fc41dc3946b6e991734a3bfb6215d3a4562e9d919ca6
-generated: "2026-01-07T16:10:30.714422761Z"
+generated: "2026-01-16T18:49:13.859329796Z"

clusters/cl01tl/helm/libation/Chart.yaml

@@ -17,7 +17,7 @@ dependencies:
   - name: app-template
     alias: libation
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.0
+    version: 4.6.2
   - name: volsync-target
     alias: volsync-target-config
     version: 0.7.0

clusters/cl01tl/helm/libation/values.yaml

@@ -35,7 +35,7 @@ libation:
         main:
           image:
             repository: ubuntu
-            tag: resolute-20251208
+            tag: resolute-20260106.1
             pullPolicy: IfNotPresent
           command:
             - "sleep"

clusters/cl01tl/helm/lidarr/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.0
+  version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.4.5
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:61f25033d05a7895926b537475781413eca5e15369d12d8fcf00f742cbcfca8a
+digest: sha256:d7583dd8f6a47c4f398ebe47aa41c629d0ec2c0e677be9e37fd0953f4724ad4b
-generated: "2026-01-07T16:10:49.70965961Z"
+generated: "2026-01-16T18:49:25.353322562Z"

clusters/cl01tl/helm/lidarr/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
   - name: app-template
     alias: lidarr
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.0
+    version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.4.5

clusters/cl01tl/helm/lidarr/values.yaml

@@ -15,7 +15,7 @@ lidarr:
         main:
           image:
             repository: ghcr.io/linuxserver/lidarr
-            tag: 3.1.0@sha256:0922867151c5175f394f4d865f6b3e63e8c05141132188e8790a1e66358e7196
+            tag: 3.1.0@sha256:be65454ba890ad01a93b01cfc178adfa1a397b487bfdce2ac23bd956c473d10d
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/lidatube/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.0
+  version: 4.6.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:48e0956baa90ff379bf0cb7fa8e97cb9e316271982d971154cc6f2b14bdc1498
+digest: sha256:0653646f92831c02fe62daa89c471cd9baa62f2b5514c176347dd0d7c8087fba
-generated: "2026-01-07T16:11:08.529122192Z"
+generated: "2026-01-16T18:49:35.891116655Z"

clusters/cl01tl/helm/lidatube/Chart.yaml

@@ -17,7 +17,7 @@ dependencies:
   - name: app-template
     alias: lidatube
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.0
+    version: 4.6.2
   - name: volsync-target
     alias: volsync-target-config
     version: 0.7.0

clusters/cl01tl/helm/listenarr/templates/persistent-volume-claim.yaml

@@ -1,17 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: listenarr-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: listenarr-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  volumeName: listenarr-nfs-storage
-  storageClassName: nfs-client
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 1Gi

clusters/cl01tl/helm/listenarr/templates/persistent-volume.yaml

@@ -1,23 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: listenarr-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: listenarr-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: nfs-client
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  nfs:
-    path: /volume2/Storage/Audiobooks
-    server: synologybond.alexlebens.net
-  mountOptions:
-    - vers=4
-    - minorversion=1
-    - noac

clusters/cl01tl/helm/listenarr/values.yaml

@@ -1,83 +0,0 @@
-listenarr:
-  controllers:
-    main:
-      type: deployment
-      replicas: 1
-      strategy: Recreate
-      revisionHistoryLimit: 3
-      containers:
-        main:
-          image:
-            repository: therobbiedavis/listenarr
-            tag: canary-0.2.35
-            pullPolicy: IfNotPresent
-          env:
-            - name: LISTENARR_PUBLIC_URL
-              value: https://listenarr.alexlebens.net
-          resources:
-            requests:
-              cpu: 50m
-              memory: 128Mi
-  service:
-    main:
-      controller: main
-      ports:
-        http:
-          port: 80
-          targetPort: 5000
-          protocol: HTTP
-  route:
-    main:
-      kind: HTTPRoute
-      parentRefs:
-        - group: gateway.networking.k8s.io
-          kind: Gateway
-          name: traefik-gateway
-          namespace: traefik
-      hostnames:
-        - listenarr.alexlebens.net
-      rules:
-        - backendRefs:
-            - group: ''
-              kind: Service
-              name: listenarr
-              port: 80
-              weight: 100
-          matches:
-            - path:
-                type: PathPrefix
-                value: /
-  persistence:
-    config:
-      forceRename: listenarr
-      storageClass: ceph-block
-      accessMode: ReadWriteOnce
-      size: 5Gi
-      retain: true
-      advancedMounts:
-        main:
-          main:
-            - path: /app/config
-              readOnly: false
-    media:
-      existingClaim: listenarr-nfs-storage
-      advancedMounts:
-        main:
-          main:
-            - path: /data
-              readOnly: false
-volsync-target-config:
-  pvcTarget: listenarr
-  moverSecurityContext:
-    runAsUser: 1000
-    runAsGroup: 1000
-    fsGroup: 1000
-    fsGroupChangePolicy: OnRootMismatch
-  local:
-    enabled: true
-    schedule: 42 8 * * *
-  remote:
-    enabled: false
-  external:
-    enabled: true
-    schedule: 42 9 * * *

clusters/cl01tl/helm/matrix-synapse/Chart.lock

@@ -4,19 +4,19 @@ dependencies:
   version: 3.12.17
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.0
+  version: 4.6.2
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.0
+  version: 4.6.2
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.0
+  version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
+  version: 2.1.9
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
+  version: 2.1.9
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.4.5
@@ -38,5 +38,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:96d373b5c7b5a648c7b5af8770ee62d286a81cd3b79751ef20f2abc072a655bc
+digest: sha256:5d815aa1bb50fa1b6b85a6edda6017d0a8e3f6c23d804177a845bf206cd2d31b
-generated: "2026-01-08T23:03:42.203560963Z"
+generated: "2026-01-17T17:32:18.299163465Z"

clusters/cl01tl/helm/matrix-synapse/Chart.yaml

@@ -33,23 +33,23 @@ dependencies:
     repository: https://ananace.gitlab.io/charts
   - name: app-template
     alias: matrix-hookshot
-    version: 4.6.0
+    version: 4.6.2
     repository: https://bjw-s-labs.github.io/helm-charts/
   - name: app-template
     alias: mautrix-discord
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.0
+    version: 4.6.2
   - name: app-template
     alias: mautrix-whatsapp
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.0
+    version: 4.6.2
   - name: cloudflared
     alias: cloudflared-synapse
-    version: 2.1.6
+    version: 2.1.9
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: cloudflared
     alias: cloudflared-hookshot
-    version: 2.1.6
+    version: 2.1.9
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: postgres-cluster
     alias: postgres-18-cluster

clusters/cl01tl/helm/matrix-synapse/values.yaml

@@ -143,7 +143,7 @@ matrix-hookshot:
         main:
           image:
             repository: halfshot/matrix-hookshot
-            tag: 7.2.0
+            tag: 7.3.0
             pullPolicy: IfNotPresent
           resources:
             requests:
@@ -345,7 +345,7 @@ mautrix-whatsapp:
         main:
           image:
             repository: dock.mau.dev/mautrix/whatsapp
-            tag: v0.2512.0
+            tag: v0.2601.0
             pullPolicy: IfNotPresent
           resources:
             requests:

clusters/cl01tl/helm/navidrome/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.0
+  version: 4.6.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:d7616426d8783ab83ba289a5acdd3b2373823701a164c63fcf262391aaddf7fc
+digest: sha256:4fd0a3f951f6cdbf6acf054139362276dbc83b22049b02c80c5e1a1b76936ed1
-generated: "2026-01-07T16:12:18.800776591Z"
+generated: "2026-01-16T18:50:11.585166046Z"

clusters/cl01tl/helm/navidrome/Chart.yaml

@@ -17,7 +17,7 @@ dependencies:
   - name: app-template
     alias: navidrome
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.0
+    version: 4.6.2
   - name: volsync-target
     alias: volsync-target-data
     version: 0.7.0

clusters/cl01tl/helm/ntfy/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.0
+  version: 4.6.2
-digest: sha256:b0a16afb467556e3f9665dad53b6e554bf81fb2eb5d4ae92c35addb5029632af
+digest: sha256:30d747f8b08ed690202fda39ab6e19bd74ebc45548847a087ddbf175abe1438c
-generated: "2026-01-07T16:12:35.13834857Z"
+generated: "2026-01-16T18:50:22.233502056Z"

clusters/cl01tl/helm/ntfy/Chart.yaml

@@ -17,7 +17,7 @@ dependencies:
   - name: app-template
     alias: ntfy
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.0
+    version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ntfy.png
 # renovate: github=binwiederhier/ntfy
 appVersion: 2.15.0

clusters/cl01tl/helm/ntfy/values.yaml

@@ -9,7 +9,7 @@ ntfy:
         main:
           image:
             repository: binwiederhier/ntfy
-            tag: v2.15.0
+            tag: v2.16.0
             pullPolicy: IfNotPresent
           args: ["serve"]
           env:

clusters/cl01tl/helm/ollama/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.0
+  version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.4.5
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:a1e8e9e95178085230954ebeb44ef3963a767a93317d7b948f7bc1f879753ff8
+digest: sha256:fd7328fc35715eb9941d4e005c0240ca9ed6554a61e67a41413d5122fd90f7fe
-generated: "2026-01-07T16:12:54.038774984Z"
+generated: "2026-01-16T18:50:32.743576567Z"

clusters/cl01tl/helm/ollama/Chart.yaml

@@ -20,7 +20,7 @@ dependencies:
   - name: app-template
     alias: ollama
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.0
+    version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.4.5

clusters/cl01tl/helm/ollama/values.yaml

@@ -22,7 +22,7 @@ ollama:
         main:
           image:
             repository: ollama/ollama
-            tag: 0.13.5
+            tag: 0.14.2
             pullPolicy: IfNotPresent
           env:
             - name: OLLAMA_KEEP_ALIVE
@@ -58,7 +58,7 @@ ollama:
         main:
           image:
             repository: ollama/ollama
-            tag: 0.13.5
+            tag: 0.14.2
             pullPolicy: IfNotPresent
           env:
             - name: OLLAMA_KEEP_ALIVE
@@ -94,7 +94,7 @@ ollama:
         main:
           image:
             repository: ollama/ollama
-            tag: 0.13.5
+            tag: 0.14.2
             pullPolicy: IfNotPresent
           env:
             - name: OLLAMA_KEEP_ALIVE

clusters/cl01tl/helm/omni-tools/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.0
+  version: 4.6.2
-digest: sha256:218e52dcc8d4d228e566db6690e10abacec07f0de52beb3bfe73c7d30f843adc
+digest: sha256:2c1f6cb930b21f98ab7701113256ffb451f8c9964eade4aa58bc67825706d89b
-generated: "2026-01-07T16:13:14.255129329Z"
+generated: "2026-01-16T18:50:44.111614338Z"

clusters/cl01tl/helm/omni-tools/Chart.yaml

@@ -15,7 +15,7 @@ dependencies:
   - name: app-template
     alias: omni-tools
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.0
+    version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/omnitools.png
 # renovate: github=iib0011/omni-tools
 appVersion: 0.6.0

clusters/cl01tl/helm/outline/Chart.lock

@@ -1,15 +1,15 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.0
+  version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.6
+  version: 2.1.9
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.4.5
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.0.1
-digest: sha256:d792717a0bc3e338d2ae22575677c0042456e7fd86202be2401cce78b5704e8c
+digest: sha256:3959ec0feb588553493636514562a4bd1dea651992da9cca1a598597909173b1
-generated: "2026-01-08T23:03:56.590541379Z"
+generated: "2026-01-17T17:32:35.576166942Z"

clusters/cl01tl/helm/outline/Chart.yaml

@@ -21,10 +21,10 @@ dependencies:
   - name: app-template
     alias: outline
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.0
+    version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.6
+    version: 2.1.9
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.4.5