chore(deps): update ollama to v0.19.0

feat: change to statefulset (#5281 )
Reviewed-on: #5281
2026-03-30 04:02:29 +00:00 · 2026-03-30 02:34:50 +00:00 · 2026-03-30 02:04:36 +00:00 · 2026-03-30 01:43:26 +00:00 · 2026-03-30 01:43:05 +00:00 · 2026-03-29 20:13:38 -05:00
28 changed files with 133 additions and 213 deletions
--- a/.gitea/workflows/renovate.yaml
+++ b/.gitea/workflows/renovate.yaml
@@ -13,7 +13,7 @@ on:
 jobs:
  renovate:
    runs-on: ubuntu-latest
-    container: ghcr.io/renovatebot/renovate:43.99.0@sha256:aae697086b93427dcde46eb92e08e334b018946ce19339bf044ce971ca1626e2
+    container: ghcr.io/renovatebot/renovate:43.99.1@sha256:06e7b4c3b24c79f75f47a8f4a4d5401d6fe741985b6a25b5a07472d184b78993
    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
--- a/clusters/cl01tl/helm/code-server/values.yaml
+++ b/clusters/cl01tl/helm/code-server/values.yaml
@@ -28,7 +28,7 @@ code-server:
          resources:
            requests:
              cpu: 1m
-              memory: 50Mi
+              memory: 40Mi
  service:
    main:
      controller: main
--- a/clusters/cl01tl/helm/directus/values.yaml
+++ b/clusters/cl01tl/helm/directus/values.yaml
@@ -143,7 +143,7 @@ directus:
          resources:
            requests:
              cpu: 10m
-              memory: 1Gi
+              memory: 300Mi
  service:
    main:
      controller: main
--- a/clusters/cl01tl/helm/foldergram/Chart.yaml
+++ b/clusters/cl01tl/helm/foldergram/Chart.yaml
@@ -24,4 +24,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://raw.githubusercontent.com/foldergram/foldergram/refs/heads/main/client/public/icon-512.png
 # renovate: datasource=github-releases depName=foldergram/foldergram
-appVersion: v1.0.8
+appVersion: v1.0.9
--- a/clusters/cl01tl/helm/freshrss/values.yaml
+++ b/clusters/cl01tl/helm/freshrss/values.yaml
@@ -79,7 +79,7 @@ freshrss:
          resources:
            requests:
              cpu: 1m
-              memory: 128Mi
+              memory: 100Mi
  service:
    main:
      controller: main
--- a/clusters/cl01tl/helm/garage/values.yaml
+++ b/clusters/cl01tl/helm/garage/values.yaml
@@ -28,7 +28,7 @@ garage:
          resources:
            requests:
              cpu: 10m
-              memory: 400Mi
+              memory: 200Mi
    server-2:
      type: deployment
      replicas: 1
@@ -57,7 +57,7 @@ garage:
          resources:
            requests:
              cpu: 10m
-              memory: 400Mi
+              memory: 200Mi
    server-3:
      type: deployment
      replicas: 1
@@ -86,7 +86,7 @@ garage:
          resources:
            requests:
              cpu: 10m
-              memory: 400Mi
+              memory: 200Mi
    webui:
      type: deployment
      replicas: 1
--- a/clusters/cl01tl/helm/grafana-operator/templates/grafana.yaml
+++ b/clusters/cl01tl/helm/grafana-operator/templates/grafana.yaml
@@ -61,7 +61,7 @@ spec:
              resources:
                requests:
                  cpu: 20m
-                  memory: 120Mi
+                  memory: 150Mi
              env:
                - name: AUTH_CLIENT_ID
                  valueFrom:
--- a/clusters/cl01tl/helm/harbor/Chart.yaml
+++ b/clusters/cl01tl/helm/harbor/Chart.yaml
@@ -4,15 +4,14 @@ version: 1.0.0
 description: Harbor
 keywords:
  - harbor
-  - images
-  - cache
-  - kubernetes
-home: https://wiki.alexlebens.dev/s/7e132c13-afee-48ec-b3dd-efd656d240c9
+  - image-registry
+home: https://docs.alexlebens.dev/applications/harbor/
 sources:
  - https://github.com/goharbor
-  - https://github.com/cloudnative-pg/cloudnative-pg
+  - https://github.com/orgs/goharbor/packages
  - https://github.com/goharbor/harbor-helm
  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/postgres-cluster
+  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/valkey
 maintainers:
  - name: alexlebens
 dependencies:
--- a/clusters/cl01tl/helm/harbor/templates/external-secret.yaml
+++ b/clusters/cl01tl/helm/harbor/templates/external-secret.yaml
@@ -14,85 +14,49 @@ spec:
  data:
    - secretKey: HARBOR_ADMIN_PASSWORD
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/harbor/config
-        metadataPolicy: None
        property: admin-password
    - secretKey: secretKey
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/harbor/config
-        metadataPolicy: None
        property: secretKey
    - secretKey: CSRF_KEY
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/harbor/core
-        metadataPolicy: None
        property: CSRF_KEY
    - secretKey: secret
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/harbor/core
-        metadataPolicy: None
        property: secret
    - secretKey: tls.crt
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/harbor/core
-        metadataPolicy: None
        property: tls.crt
    - secretKey: tls.key
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/harbor/core
-        metadataPolicy: None
        property: tls.key
    - secretKey: JOBSERVICE_SECRET
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/harbor/jobservice
-        metadataPolicy: None
        property: JOBSERVICE_SECRET
    - secretKey: REGISTRY_HTTP_SECRET
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/harbor/registry
-        metadataPolicy: None
        property: REGISTRY_HTTP_SECRET
    - secretKey: REGISTRY_REDIS_PASSWORD
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/harbor/registry
-        metadataPolicy: None
        property: REGISTRY_REDIS_PASSWORD
    - secretKey: REGISTRY_HTPASSWD
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/harbor/registry
-        metadataPolicy: None
        property: REGISTRY_HTPASSWD
    - secretKey: REGISTRY_CREDENTIAL_PASSWORD
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/harbor/registry
-        metadataPolicy: None
        property: REGISTRY_CREDENTIAL_PASSWORD
    - secretKey: REGISTRY_PASSWD
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/harbor/registry
-        metadataPolicy: None
        property: REGISTRY_CREDENTIAL_PASSWORD
--- a/clusters/cl01tl/helm/harbor/values.yaml
+++ b/clusters/cl01tl/helm/harbor/values.yaml
@@ -21,13 +21,9 @@ harbor:
        size: 100Gi
  existingSecretAdminPassword: harbor-secret
  existingSecretAdminPasswordKey: HARBOR_ADMIN_PASSWORD
-  internalTLS:
-    enabled: false
  ipFamily:
    ipv6:
      enabled: false
-    ipv4:
-      enabled: true
  updateStrategy:
    type: Recreate
  existingSecretSecretKey: harbor-secret
@@ -73,12 +69,12 @@ harbor:
    credentials:
      existingSecret: harbor-secret
    upload_purging:
-      enabled: true
      age: 72h
-      interval: 24h
-      dryrun: false
  trivy:
    enabled: true
+    image:
+      repository: ghcr.io/goharbor/trivy-adapter-photon
+      tag: v2.15.0@sha256:6fd6de9cfbbb04cb1d94722cfa01cf71b8994d3f9e7891d3b03a89a7536480ba
  database:
    type: external
    external:
@@ -109,32 +105,9 @@ postgres-18-cluster:
        destinationBucket: postgres-backups
        externalSecretCredentialPath: /garage/home-infra/postgres-backups
        isWALArchiver: true
-      # - name: garage-remote
-      #   index: 1
-      #   destinationBucket: postgres-backups
-      #   externalSecretCredentialPath: /garage/home-infra/postgres-backups
-      #   retentionPolicy: "90d"
-      #   data:
-      #     compression: bzip2
-      # - name: external
-      #   index: 1
-      #   endpointURL: https://nyc3.digitaloceanspaces.com
-      #   destinationBucket: postgres-backups-ce540ddf106d186bbddca68a
-      #   externalSecretCredentialPath: /garage/home-infra/postgres-backups
-      #   isWALArchiver: false
    scheduledBackups:
      - name: live-backup
        suspend: false
        immediate: true
        schedule: "0 35 14 * * *"
        backupName: garage-local
-      # - name: weekly-backup
-      #   suspend: true
-      #   immediate: true
-      #   schedule: "0 0 4 * * SAT"
-      #   backupName: garage-remote
-      # - name: daily-backup
-      #   suspend: true
-      #   immediate: true
-      #   schedule: "0 0 0 * * *"
-      #   backupName: external
--- a/clusters/cl01tl/helm/headlamp/Chart.yaml
+++ b/clusters/cl01tl/helm/headlamp/Chart.yaml
@@ -5,8 +5,7 @@ description: Headlamp
 keywords:
  - headlamp
  - dashboard
-  - kubernetes
-home: https://wiki.alexlebens.dev/s/6cc43960-78df-459d-aab6-433844249243
+home: https://docs.alexlebens.dev/applications/headlamp/
 sources:
  - https://github.com/headlamp-k8s/headlamp
  - https://github.com/headlamp-k8s/headlamp/tree/main/charts/headlamp
--- a/clusters/cl01tl/helm/headlamp/templates/external-secret.yaml
+++ b/clusters/cl01tl/helm/headlamp/templates/external-secret.yaml
@@ -14,43 +14,25 @@ spec:
  data:
    - secretKey: OIDC_CLIENT_ID
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /authentik/oidc/headlamp
-        metadataPolicy: None
        property: client
    - secretKey: OIDC_CLIENT_SECRET
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /authentik/oidc/headlamp
-        metadataPolicy: None
        property: secret
    - secretKey: OIDC_ISSUER_URL
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /authentik/oidc/headlamp
-        metadataPolicy: None
        property: issuer
    - secretKey: OIDC_SCOPES
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /authentik/oidc/headlamp
-        metadataPolicy: None
        property: scopes
    - secretKey: HEADLAMP_CONFIG_OIDC_VALIDATOR_IDP_ISSUER_URL
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /authentik/oidc/headlamp
-        metadataPolicy: None
        property: validator-issuer-url
    - secretKey: HEADLAMP_CONFIG_OIDC_VALIDATOR_CLIENT_ID
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /authentik/oidc/headlamp
-        metadataPolicy: None
        property: validator-client-id
--- a/clusters/cl01tl/helm/headlamp/templates/http-route.yaml
+++ b/clusters/cl01tl/helm/headlamp/templates/http-route.yaml
@@ -1,28 +0,0 @@
-apiVersion: gateway.networking.k8s.io/v1
-kind: HTTPRoute
-metadata:
-  name: headlamp
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: headlamp
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  parentRefs:
-    - group: gateway.networking.k8s.io
-      kind: Gateway
-      name: traefik-gateway
-      namespace: traefik
-  hostnames:
-    - headlamp.alexlebens.net
-  rules:
-    - matches:
-      - path:
-          type: PathPrefix
-          value: /
-      backendRefs:
-        - group: ''
-          kind: Service
-          name: headlamp
-          port: 80
-          weight: 100
--- a/clusters/cl01tl/helm/headlamp/values.yaml
+++ b/clusters/cl01tl/helm/headlamp/values.yaml
@@ -1,5 +1,9 @@
 headlamp:
  replicaCount: 2
+  image:
+    registry: ghcr.io
+    repository: headlamp-k8s/headlamp
+    tag: v0.41.0@sha256:89c6c65810bfde61796483c93c70d659104355593792bf55cab680d685da8eeb
  config:
    oidc:
      secret:
@@ -10,10 +14,30 @@ headlamp:
    watchPlugins: true
    # Bypasses: https://github.com/kubernetes-sigs/headlamp/issues/4883
    sessionTTL: null
+  httpRoute:
+    enabled: true
+    parentRefs:
+      - group: gateway.networking.k8s.io
+        kind: Gateway
+        name: traefik-gateway
+        namespace: traefik
+    hostnames:
+      - headlamp.alexlebens.net
+    rules:
+      - matches:
+        - path:
+            type: PathPrefix
+            value: /
+        backendRefs:
+          - group: ''
+            kind: Service
+            name: headlamp
+            port: 80
+            weight: 100
  resources:
    requests:
-      cpu: 10m
-      memory: 128Mi
+      cpu: 1m
+      memory: 80Mi
  pluginsManager:
    enabled: true
    securityContext:
--- a/clusters/cl01tl/helm/home-assistant/Chart.yaml
+++ b/clusters/cl01tl/helm/home-assistant/Chart.yaml
@@ -4,14 +4,13 @@ version: 1.0.0
 description: Home Assistant
 keywords:
  - home-assistant
-  - home
-  - automation
-home: https://wiki.alexlebens.dev/s/5462c17e-cd39-4082-ad01-94545a2fa3ca
+  - home-automation
+home: https://docs.alexlebens.dev/applications/home-assistant/
 sources:
-  - https://www.home-assistant.io/
  - https://github.com/home-assistant/core
  - https://github.com/home-assistant/core/pkgs/container/home-assistant
  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
+  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/volsync-target
 maintainers:
  - name: alexlebens
 dependencies:
--- a/clusters/cl01tl/helm/home-assistant/templates/external-secret.yaml
+++ b/clusters/cl01tl/helm/home-assistant/templates/external-secret.yaml
@@ -14,17 +14,11 @@ spec:
  data:
    - secretKey: PASSWORD
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/home-assistant/code-server/auth
-        metadataPolicy: None
        property: PASSWORD
    - secretKey: SUDO_PASSWORD
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/home-assistant/code-server/auth
-        metadataPolicy: None
        property: SUDO_PASSWORD

 ---
@@ -44,8 +38,5 @@ spec:
  data:
    - secretKey: bearer-token
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /cl01tl/home-assistant/auth
-        metadataPolicy: None
        property: bearer-token
--- a/clusters/cl01tl/helm/home-assistant/values.yaml
+++ b/clusters/cl01tl/helm/home-assistant/values.yaml
@@ -4,28 +4,29 @@ home-assistant:
      type: deployment
      replicas: 1
      strategy: Recreate
-      revisionHistoryLimit: 3
+      pod:
+        securityContext:
+          fsGroup: 1000
+          fsGroupChangePolicy: OnRootMismatch
      containers:
        main:
          image:
            repository: ghcr.io/home-assistant/home-assistant
-            tag: 2026.3.4
-            pullPolicy: IfNotPresent
+            tag: 2026.3.4@sha256:916682086154a7390114a9788782b8efb199852d4f7d47066722c2bc5d1829e6
          env:
            - name: TZ
-              value: US/Central
+              value: America/Chicago
          resources:
            requests:
-              cpu: 50m
-              memory: 512Mi
+              cpu: 1m
+              memory: 400Mi
        code-server:
          image:
            repository: ghcr.io/linuxserver/code-server
            tag: 4.112.0@sha256:4bb5b8ad22268001687c047f0f04933799fb03df1eb0e1e266ba15ed2d9f4e8b
-            pullPolicy: IfNotPresent
          env:
            - name: TZ
-              value: US/Central
+              value: America/Chicago
            - name: PUID
              value: 1000
            - name: PGID
@@ -35,10 +36,6 @@ home-assistant:
          envFrom:
            - secretRef:
                name: home-assistant-code-server-password-secret
-          resources:
-            requests:
-              cpu: 10m
-              memory: 128Mi
  service:
    main:
      controller: main
@@ -82,11 +79,8 @@ home-assistant:
        - home-assistant.alexlebens.net
      rules:
        - backendRefs:
-            - group: ''
-              kind: Service
-              name: home-assistant-main
+            - name: home-assistant-main
              port: 80
-              weight: 100
          matches:
            - path:
                type: PathPrefix
@@ -102,11 +96,8 @@ home-assistant:
        - home-assistant-code-server.alexlebens.net
      rules:
        - backendRefs:
-            - group: ''
-              kind: Service
-              name: home-assistant-code-server
+            - name: home-assistant-code-server
              port: 8443
-              weight: 100
          matches:
            - path:
                type: PathPrefix
--- a/clusters/cl01tl/helm/homepage/Chart.yaml
+++ b/clusters/cl01tl/helm/homepage/Chart.yaml
@@ -19,4 +19,4 @@ dependencies:
    version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/homepage.png
 # renovate: datasource=github-releases depName=gethomepage/homepage
-appVersion: v1.12.0
+appVersion: v1.12.1
--- a/clusters/cl01tl/helm/homepage/values.yaml
+++ b/clusters/cl01tl/helm/homepage/values.yaml
@@ -16,7 +16,7 @@ homepage:
        main:
          image:
            repository: ghcr.io/gethomepage/homepage
-            tag: v1.12.0
+            tag: v1.12.1
            pullPolicy: IfNotPresent
          env:
            - name: HOMEPAGE_ALLOWED_HOSTS
--- a/clusters/cl01tl/helm/music-grabber/Chart.yaml
+++ b/clusters/cl01tl/helm/music-grabber/Chart.yaml
@@ -17,4 +17,5 @@ dependencies:
    alias: music-grabber
    repository: https://bjw-s-labs.github.io/helm-charts/
    version: 4.6.2
-appVersion: 2.0.4
+# renovate: datasource=docker depName=g33kphr33k/musicgrabber
+appVersion: 2.5.3
--- a/clusters/cl01tl/helm/music-grabber/values.yaml
+++ b/clusters/cl01tl/helm/music-grabber/values.yaml
@@ -9,7 +9,7 @@ music-grabber:
        main:
          image:
            repository: g33kphr33k/musicgrabber
-            tag: 2.5.2
+            tag: 2.5.3
            pullPolicy: IfNotPresent
          env:
            - name: MUSIC_DIR
--- a/clusters/cl01tl/helm/ollama/Chart.yaml
+++ b/clusters/cl01tl/helm/ollama/Chart.yaml
@@ -31,4 +31,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ollama.png
 # renovate: datasource=github-releases depName=ollama/ollama
-appVersion: 0.18.3
+appVersion: 0.19.0
--- a/clusters/cl01tl/helm/ollama/values.yaml
+++ b/clusters/cl01tl/helm/ollama/values.yaml
@@ -22,7 +22,7 @@ ollama:
        main:
          image:
            repository: ollama/ollama
-            tag: 0.18.3
+            tag: 0.19.0
            pullPolicy: IfNotPresent
          env:
            - name: OLLAMA_KEEP_ALIVE
@@ -58,7 +58,7 @@ ollama:
        main:
          image:
            repository: ollama/ollama
-            tag: 0.18.3
+            tag: 0.19.0
            pullPolicy: IfNotPresent
          env:
            - name: OLLAMA_KEEP_ALIVE
@@ -94,7 +94,7 @@ ollama:
        main:
          image:
            repository: ollama/ollama
-            tag: 0.18.3
+            tag: 0.19.0
            pullPolicy: IfNotPresent
          env:
            - name: OLLAMA_KEEP_ALIVE
--- a/clusters/cl01tl/helm/postiz/values.yaml
+++ b/clusters/cl01tl/helm/postiz/values.yaml
@@ -9,7 +9,7 @@ postiz:
        main:
          image:
            repository: ghcr.io/gitroomhq/postiz-app
-            tag: v2.21.2
+            tag: v2.21.4
            pullPolicy: IfNotPresent
          env:
            - name: MAIN_URL
--- a/clusters/cl01tl/helm/searxng/values.yaml
+++ b/clusters/cl01tl/helm/searxng/values.yaml
@@ -9,7 +9,7 @@ searxng:
        main:
          image:
            repository: searxng/searxng
-            tag: latest@sha256:c026ed4cb1a29b21878fed2c13f4c31fa811b8b03d931aa8764e8528177e2862
+            tag: latest@sha256:4d7ed8b7035ecf827bd901ba6d32f5c32d8119bc09bb3cdafeb0ce58f1b951c1
            pullPolicy: IfNotPresent
          env:
            - name: SEARXNG_BASE_URL
@@ -39,7 +39,7 @@ searxng:
        main:
          image:
            repository: searxng/searxng
-            tag: latest@sha256:c026ed4cb1a29b21878fed2c13f4c31fa811b8b03d931aa8764e8528177e2862
+            tag: latest@sha256:4d7ed8b7035ecf827bd901ba6d32f5c32d8119bc09bb3cdafeb0ce58f1b951c1
            pullPolicy: IfNotPresent
          env:
            - name: SEARXNG_BASE_URL
--- a/clusters/cl01tl/helm/tdarr/values.yaml
+++ b/clusters/cl01tl/helm/tdarr/values.yaml
@@ -39,9 +39,28 @@ tdarr:
              cpu: 200m
              memory: 1Gi
    node:
-      type: daemonset
+      type: statefulset
+      replicas: 3
      revisionHistoryLimit: 3
+      statefulset:
+        volumeClaimTemplates:
+          - name: transcode-cache
+            accessMode: ReadWriteOnce
+            size: 20Gi
+            storageClass: local-path
+            globalMounts:
+              - path: /tcache
      pod:
+        affinity:
+          podAntiAffinity:
+            requiredDuringSchedulingIgnoredDuringExecution:
+              - labelSelector:
+                  matchExpressions:
+                    - key: app.kubernetes.io/instance
+                      operator: In
+                      values:
+                        - tdarr
+                topologyKey: kubernetes.io/hostname
        nodeSelector:
          intel.feature.node.kubernetes.io/gpu: "true"
      containers:
@@ -144,13 +163,6 @@ tdarr:
          main:
            - path: /tcache
              readOnly: false
-    node-cache:
-      type: emptyDir
-      advancedMounts:
-        node:
-          main:
-            - path: /tcache
-              readOnly: false
    media:
      existingClaim: tdarr-nfs-storage
      advancedMounts:
@@ -166,7 +178,7 @@ tdarr-exporter:
  image:
    name: homeylab/tdarr-exporter
    # renovate: datasource=docker depName=homeylab/tdarr-exporter
-    tag: 1.4.2
+    tag: 1.4.3
  metrics:
    serviceMonitor:
      enabled: true
--- a/hosts/ps10rp/homepage/compose.yaml
+++ b/hosts/ps10rp/homepage/compose.yaml
@@ -32,7 +32,7 @@ services:
            - /var/run/docker.sock:/var/run/docker.sock:ro

    homepage:
-        image: ghcr.io/gethomepage/homepage:v1.12.0@sha256:5bb66eac5d48f021fd60414add03aa123d1feb85770550ddb1d99a5b8851c6c2
+        image: ghcr.io/gethomepage/homepage:v1.12.1@sha256:9627769818fbfb14147d3e633e57cef9c27c0c5f07585f5a1d6c3d3425b3b33c
        container_name: homepage
        labels:
            traefik.enable: true
--- a/renovate.json
+++ b/renovate.json
@@ -3,10 +3,7 @@
  "extends": [
    "config:recommended",
    "mergeConfidence:all-badges",
-    ":rebaseStalePrs",
-    "group:recommended",
-    "group:monorepos",
-    "group:kubernetesMonorepo"
+    ":rebaseStalePrs"
  ],
  "timezone": "America/Chicago",
  "labels": [],
@@ -19,18 +16,28 @@
  ],
  "customManagers": [
    {
-      "description": "Generic Renovate tag matcher for Helm",
+      "description": "Renovate tag matcher for Helm chart appVersion",
      "customType": "regex",
      "managerFilePatterns": [
-        "(^|/)Chart\\.yaml$",
-        "(^|/)values\\.yaml$",
-        "(^|/)templates/.*\\.yaml$"
+        "/(^|/)Chart\\.yaml$/"
      ],
      "matchStrings": [
-        "#\\s*renovate:\\s*datasource=(?<datasource>[^\\s]+)\\s+depName=(?<depName>[^\\s]+)(?:\\s+versioning=(?<versioning>[^\\s]+))?\\s*[a-zA-Z0-9_-]+:\\s*[\"']?(?<currentValue>[^\"'\\s]+(?:@sha256:[a-f0-9]+)?)[\"']?"
+        "#\\s*renovate:\\s*datasource=(?<datasource>\\S+)\\s+depName=(?<depName>\\S+)(?:\\s+versioning=(?<versioning>\\S+))?\\s+appVersion:\\s*[\"']?(?<currentValue>[^\\s\"']+)[\"']?"
      ],
      "versioningTemplate": "{{#if versioning}}{{{versioning}}}{{else}}semver-coerced{{/if}}"
    },
+    {
+      "description": "Renovate tag matcher for Helm values and templates",
+      "customType": "regex",
+      "managerFilePatterns": [
+        "/(^|/)values\\.yaml$/",
+        "/(^|/)templates/.*\\.yaml$/"
+      ],
+      "matchStrings": [
+        "#\\s*renovate:\\s*datasource=(?<datasource>\\S+)\\s+depName=(?<depName>\\S+)(?:\\s+versioning=(?<versioning>\\S+))?\\s+tag:\\s*[\"']?(?<currentValue>[^@\\s\"']+)(?:@(?<currentDigest>sha256:[a-f0-9]+))?[\"']?"
+      ],
+      "versioningTemplate": "{{#if versioning}}{{{versioning}}}{{else}}docker{{/if}}"
+    },
    {
      "description": "Update Helm CLI version in GitHub Actions",
      "customType": "regex",
@@ -67,39 +74,48 @@
      "enabled": false
    },
    {
-      "description": "Universal dynamic labeling by datasource",
-      "matchPackageNames": [
-        "*"
+      "description": "Label Helm updates",
+      "matchDatasources": [
+        "helm"
      ],
      "addLabels": [
-        "{{{datasource}}}"
+        "helm"
+      ]
+    },
+    {
+      "description": "Label Docker updates",
+      "matchDatasources": [
+        "docker"
+      ],
+      "addLabels": [
+        "docker"
      ]
    },
    {
      "description": "Versioning for LinuxServer images",
      "versioning": "regex:^v?(?<major>\\d+)\\.(?<minor>\\d+)\\.(?<patch>\\d+)-ls(?<revision>\\d+)$",
      "matchPackageNames": [
-        "/^linuxserver\\//",
-        "/^ghcr\\.io/linuxserver\\//",
-        "/^lscr\\.io/linuxserver\\//"
+        "/^linuxserver//",
+        "/^ghcr\\.io/linuxserver//",
+        "/^lscr\\.io/linuxserver//"
      ]
    },
    {
      "description": "Group packages together by stripping all registry/namespace prefixes",
-      "matchManagers": [
+      "groupName": "{{#if packageName}}{{{replace '^.*/([^/]+)$' '$1' packageName}}}{{else}}{{{replace '^.*/([^/]+)$' '$1' depName}}}{{/if}}",
+      "groupSlug": "unified-{{{groupName}}}",
+      "matchPackageNames": [
        "*"
-      ],
-      "groupName": "{{#if packageName}}{{{replace '^.*?/(.*)$' '$1' packageName}}}{{else}}{{{replace '^.*?/(.*)$' '$1' depName}}}{{/if}}",
-      "groupSlug": "unified-{{{groupName}}}"
+      ]
    },
    {
-      "description": "Group for specific apps",
+      "description": "Group for specific apps, these have different package and repo names",
+      "groupName": "{{{replace '^.*(argo-cd|bazarr|cilium|code-server|dawarich|element-web|home-assistant|immich|komodo|postiz|rook-ceph|roundcube|rybbit|tdarr|traefik).*$' '$1' depName}}}",
+      "groupSlug": "unified-{{{groupName}}}",
      "matchPackageNames": [
-        "/(^|/)(argo-cd|bazarr|cilium|code-server|dawarich|element-web|home-assistant|immich|komodo|rook-ceph|tdarr|traefik)/",
-        "/^rook(-ceph|\\/rook|\\/ceph)/"
-      ],
-      "groupName": "{{{replace '^.*(argo-cd|bazarr|cilium|code-server|dawarich|element-web|home-assistant|immich|komodo|rook-ceph|tdarr|traefik).*$' '$1' depName}}}",
-      "groupSlug": "unified-{{{groupName}}}"
+        "/(^|/)(argo-cd|bazarr|cilium|code-server|dawarich|element-web|home-assistant|immich|komodo|postiz|rook-ceph|roundcube|rybbit|tdarr|traefik)/",
+        "/^rook(-ceph|/rook|/ceph)/"
+      ]
    },
    {
      "description": "Automerge helm chart lock files",
@@ -147,9 +163,6 @@
        "patch",
        "pinDigest"
      ],
-      "matchDatasources": [
-        "*"
-      ],
      "addLabels": [
        "{{{datasource}}}",
        "automerge"
Author	SHA1	Message	Date
Renovate Bot	d2b5728a2f	chore(deps): update ollama to v0.19.0 All checks were successful lint-test-helm / lint-helm (pull_request) Successful in 16s Details lint-test-helm / validate-kubeconform (pull_request) Successful in 42s Details	2026-03-30 04:02:29 +00:00
Alex Lebens	0810010c72	feat: change to statefulset (#5281 ) All checks were successful lint-test-helm / lint-helm (push) Successful in 1m16s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 3m3s Details Reviewed-on: #5281	2026-03-30 02:34:50 +00:00
Alex Lebens	deee5fe36d	feat: balance resources (#5279 ) All checks were successful lint-test-helm / lint-helm (push) Successful in 36s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 4m19s Details Reviewed-on: #5279	2026-03-30 02:04:36 +00:00
Alex Lebens	4130942c87	feat: refactor apps (#5277 ) All checks were successful lint-test-helm / lint-helm (push) Successful in 1m7s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 3m1s Details Reviewed-on: #5277	2026-03-30 01:43:26 +00:00
Renovate Bot	6f9d893d4a	chore(deps): update dependency gethomepage/homepage to v1.12.1 (#5257 ) Some checks failed lint-test-helm / validate-kubeconform (push) Has been cancelled Details lint-test-helm / lint-helm (push) Has been cancelled Details renovate / renovate (push) Has been cancelled Details This PR contains the following updates: \| Package \| Update \| Change \| \|---\|---\|---\| \| [gethomepage/homepage](https://github.com/gethomepage/homepage) \| patch \| `v1.12.0` → `v1.12.1` \| --- ### Release Notes <details> <summary>gethomepage/homepage (gethomepage/homepage)</summary> ### [`v1.12.1`](https://github.com/gethomepage/homepage/releases/tag/v1.12.1) [Compare Source](https://github.com/gethomepage/homepage/compare/v1.11.0...v1.12.1) #### What's Changed #### 🚀 Features - Feature: UniFi Drive (UNAS) service widget ([#6461](https://github.com/gethomepage/homepage/issues/6461)) [@stevenharris-dev](https://github.com/stevenharris-dev) - Chore: make unifi proxy more generic ([#6469](https://github.com/gethomepage/homepage/issues/6469)) [@shamoon](https://github.com/shamoon) - Enhancement: better support for raw values in block highlighting ([#6434](https://github.com/gethomepage/homepage/issues/6434)) [@shamoon](https://github.com/shamoon) - Tweak: sanitize calendar integration URLs from markup ([#6431](https://github.com/gethomepage/homepage/issues/6431)) [@shamoon](https://github.com/shamoon) #### 🐛 Fixes - Fix: remove trailing space from Watchtower widget loading label ([#6448](https://github.com/gethomepage/homepage/issues/6448)) [@toytag](https://github.com/toytag) - Fix: revert changes to qbittorrent widget endpoints ([#6467](https://github.com/gethomepage/homepage/issues/6467)) [@shamoon](https://github.com/shamoon) #### 🧰 Maintenance - Chore(deps): Bump picomatch from 2.3.1 to 2.3.2 in the npm\_and\_yarn group across 1 directory ([#6460](https://github.com/gethomepage/homepage/issues/6460)) @[dependabot\[bot\]](https://github.com/apps/dependabot) - Chore: return to gh runners ([#6462](https://github.com/gethomepage/homepage/issues/6462)) [@shamoon](https://github.com/shamoon) - Chore(deps): Bump the npm\_and\_yarn group across 1 directory with 5 updates ([#6445](https://github.com/gethomepage/homepage/issues/6445)) @[dependabot\[bot\]](https://github.com/apps/dependabot) - Chore(deps-dev): Bump eslint-plugin-prettier from 5.5.4 to 5.5.5 ([#6442](https://github.com/gethomepage/homepage/issues/6442)) @[dependabot\[bot\]](https://github.com/apps/dependabot) - Chore(deps): Bump urbackup-server-api from 0.91.0 to 0.92.2 ([#6444](https://github.com/gethomepage/homepage/issues/6444)) @[dependabot\[bot\]](https://github.com/apps/dependabot) - Chore(deps): Bump react-icons from 5.5.0 to 5.6.0 ([#6443](https://github.com/gethomepage/homepage/issues/6443)) @[dependabot\[bot\]](https://github.com/apps/dependabot) - Chore(deps): Bump swr from 2.4.0 to 2.4.1 ([#6441](https://github.com/gethomepage/homepage/issues/6441)) @[dependabot\[bot\]](https://github.com/apps/dependabot) - Chore(deps): Bump flatted from 3.3.3 to 3.4.2 in the npm\_and\_yarn group across 1 directory ([#6439](https://github.com/gethomepage/homepage/issues/6439)) @[dependabot\[bot\]](https://github.com/apps/dependabot) - Chore(deps): Bump next from 15.5.11 to 16.1.7 in the npm\_and\_yarn group across 1 directory ([#6438](https://github.com/gethomepage/homepage/issues/6438)) @[dependabot\[bot\]](https://github.com/apps/dependabot) - Chore(deps): Bump pnpm/action-setup from 4 to 5 ([#6436](https://github.com/gethomepage/homepage/issues/6436)) @[dependabot\[bot\]](https://github.com/apps/dependabot) - Chore(deps): Bump release-drafter/release-drafter from 6 to 7 ([#6429](https://github.com/gethomepage/homepage/issues/6429)) @[dependabot\[bot\]](https://github.com/apps/dependabot) - Chore: add release drafter ([#6424](https://github.com/gethomepage/homepage/issues/6424)) [@shamoon](https://github.com/shamoon) #### 🌐 Translations - New Crowdin translations by GitHub Action ([#6433](https://github.com/gethomepage/homepage/issues/6433)) @[github-actions\[bot\]](https://github.com/apps/github-actions) - New Crowdin translations by GitHub Action ([#6292](https://github.com/gethomepage/homepage/issues/6292)) @[github-actions\[bot\]](https://github.com/apps/github-actions) #### 📚 Documentation - Documentation: fix kubernetes config examples ([#6468](https://github.com/gethomepage/homepage/issues/6468)) [@mylegitches](https://github.com/mylegitches) </details> --- ### Configuration 📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 Automerge: Enabled. ♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 Ignore: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My45OS4wIiwidXBkYXRlZEluVmVyIjoiNDMuOTkuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiYXV0b21lcmdlIiwiZ2l0aHViLXJlbGVhc2VzIl19--> Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/5257 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>	2026-03-30 01:43:05 +00:00
Alex Lebens	add399bc0e	ci: reconfigure All checks were successful renovate / renovate (push) Successful in 2m31s Details	2026-03-29 20:13:38 -05:00
Alex Lebens	361db06caf	ci: reconfigure All checks were successful renovate / renovate (push) Successful in 1m51s Details	2026-03-29 16:26:26 -05:00
Renovate Bot	b4e7f8f979	chore(deps): update ghcr.io/gitroomhq/postiz-app docker tag to v2.21.4 (#5272 ) All checks were successful lint-test-helm / lint-helm (push) Successful in 58s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 1m49s Details	2026-03-29 17:02:11 +00:00
Alex Lebens	f0f4347269	ci: reconfigure All checks were successful renovate / renovate (push) Successful in 1m50s Details	2026-03-29 11:12:53 -05:00
Renovate Bot	74785439a2	chore(deps): update ghcr.io/renovatebot/renovate docker tag to v43.99.1 (#5270 ) All checks were successful renovate / renovate (push) Successful in 7m7s Details	2026-03-29 16:03:01 +00:00
Renovate Bot	6f3b2bf318	chore(deps): update ghcr.io/gitroomhq/postiz-app docker tag to v2.21.3 (#5266 ) All checks were successful lint-test-helm / lint-helm (push) Successful in 27s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details render-manifests / render-manifests (push) Successful in 13m23s Details renovate / renovate (push) Successful in 2m59s Details	2026-03-29 07:04:33 +00:00
Renovate Bot	83dd4fe089	chore(deps): update searxng/searxng:latest docker digest to 4d7ed8b (#5265 ) Some checks failed lint-test-helm / validate-kubeconform (push) Has been cancelled Details lint-test-helm / lint-helm (push) Has been cancelled Details renovate / renovate (push) Has been cancelled Details	2026-03-29 07:04:19 +00:00
Renovate Bot	84ff6621f9	chore(deps): update g33kphr33k/musicgrabber docker tag to v2.5.3 (#5262 ) All checks were successful lint-test-helm / lint-helm (push) Successful in 56s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 4m31s Details	2026-03-29 02:50:52 +00:00
Alex Lebens	f03ea1ed75	feat: update tag All checks were successful lint-test-helm / lint-helm (push) Successful in 12s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 2m47s Details	2026-03-28 21:16:52 -05:00
Alex Lebens	ef52acb01d	feat: change tag All checks were successful lint-test-helm / lint-helm (push) Successful in 30s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 1m50s Details	2026-03-28 21:02:13 -05:00
Alex Lebens	d80efaa56e	feat: add renovate tag for appVersion All checks were successful lint-test-helm / lint-helm (push) Successful in 18s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 1m25s Details	2026-03-28 20:58:08 -05:00
Alex Lebens	cbd41b40ef	ci: reconfigure All checks were successful renovate / renovate (push) Successful in 1m57s Details	2026-03-28 20:52:47 -05:00
Alex Lebens	39ed7d5135	ci: reconfigure All checks were successful renovate / renovate (push) Successful in 3m0s Details	2026-03-28 20:48:52 -05:00
Renovate Bot	e456bc0e36	chore(config): migrate Renovate config (#5258 ) Some checks failed renovate / renovate (push) Has been cancelled Details The Renovate config in this repository needs migrating. Typically this is because one or more configuration options you are using have been renamed. You don't need to merge this PR right away, because Renovate will continue to migrate these fields internally each time it runs. But later some of these fields may be fully deprecated and the migrations removed. So it's a good idea to merge this migration PR soon. 🔕 Ignore: Close this PR and you won't be reminded about config migration again, but one day your current config may no longer be valid. ❓ Got questions? Does something look wrong to you? Please don't hesitate to [request help here](https://github.com/renovatebot/renovate/discussions). --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). Reviewed-on: #5258 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>	2026-03-29 01:47:09 +00:00
Renovate Bot	b5ab4b117f	chore(deps): update dependency foldergram/foldergram to v1.0.9 (#5256 ) Some checks failed lint-test-helm / lint-helm (push) Successful in 15s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Has been cancelled Details	2026-03-29 01:43:49 +00:00
Renovate Bot	da271bc963	chore(deps): update homeylab/tdarr-exporter docker tag to v1.4.3 (#5252 ) All checks were successful lint-test-helm / lint-helm (push) Successful in 49s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 2m15s Details	2026-03-29 01:36:15 +00:00
Alex Lebens	d87d86ad81	ci: reconfigure Some checks failed renovate / renovate (push) Has been cancelled Details	2026-03-28 20:33:37 -05:00
Alex Lebens	1bca9d5f46	ci: reconfigure All checks were successful renovate / renovate (push) Successful in 3m5s Details	2026-03-28 20:20:06 -05:00
Renovate Bot	d2c22c3011	chore(config): migrate Renovate config (#5251 ) Some checks failed renovate / renovate (push) Has been cancelled Details The Renovate config in this repository needs migrating. Typically this is because one or more configuration options you are using have been renamed. You don't need to merge this PR right away, because Renovate will continue to migrate these fields internally each time it runs. But later some of these fields may be fully deprecated and the migrations removed. So it's a good idea to merge this migration PR soon. 🔕 Ignore: Close this PR and you won't be reminded about config migration again, but one day your current config may no longer be valid. ❓ Got questions? Does something look wrong to you? Please don't hesitate to [request help here](https://github.com/renovatebot/renovate/discussions). --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). Reviewed-on: #5251 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>	2026-03-29 01:19:52 +00:00
Alex Lebens	9fe16d7966	ci: reconfigure All checks were successful renovate / renovate (push) Successful in 3m0s Details	2026-03-28 20:12:51 -05:00
Alex Lebens	96d1d004a5	ci: reconfigure All checks were successful renovate / renovate (push) Successful in 25s Details	2026-03-28 20:09:42 -05:00
Alex Lebens	ef00c05fe6	ci: reconfigure All checks were successful renovate / renovate (push) Successful in 30s Details	2026-03-28 20:06:03 -05:00
Alex Lebens	fa8d85a826	ci: reconfigure All checks were successful renovate / renovate (push) Successful in 2m4s Details	2026-03-28 19:47:41 -05:00
Renovate Bot	f40b87ad7f	chore(deps): update ghcr.io/gethomepage/homepage docker tag to v1.12.1 (#5246 ) All checks were successful renovate / renovate (push) Successful in 2m40s Details	2026-03-29 00:43:52 +00:00
Renovate Bot	9619d79c91	chore(deps): update ghcr.io/gethomepage/homepage docker tag to v1.12.1 (#5246 ) All checks were successful lint-test-helm / lint-helm (push) Successful in 20s Details lint-test-docker / lint-docker-compose (push) Successful in 24s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 2m1s Details	2026-03-29 00:43:48 +00:00
Alex Lebens	a6b504278e	ci: reconfigure Some checks failed renovate / renovate (push) Has been cancelled Details	2026-03-28 19:41:21 -05:00
Alex Lebens	6d4509bebd	ci: reconfigure All checks were successful renovate / renovate (push) Successful in 3m41s Details	2026-03-28 19:32:51 -05:00
Alex Lebens	1aba43d0fb	ci: reconfigure All checks were successful renovate / renovate (push) Successful in 2m34s Details	2026-03-28 19:26:55 -05:00
Renovate Bot	f22d6eb208	chore(deps): update ghcr.io/foldergram/foldergram docker tag to v1.0.9 (#5241 ) Some checks failed renovate / renovate (push) Has been cancelled Details lint-test-helm / lint-helm (push) Successful in 1m21s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details	2026-03-29 00:26:37 +00:00