chore(deps): update helm release cilium to v1.19.2

tmp/booklore (#5034 )
Reviewed-on: #5034
2026-03-24 03:46:56 +00:00 · 2026-03-24 03:44:24 +00:00 · 2026-03-24 03:28:49 +00:00 · 2026-03-24 02:54:59 +00:00 · 2026-03-23 21:49:41 -05:00 · 2026-03-24 02:44:26 +00:00
22 changed files with 105 additions and 146 deletions
--- a/clusters/cl01tl/helm/audiobookshelf/values.yaml
+++ b/clusters/cl01tl/helm/audiobookshelf/values.yaml
@@ -4,6 +4,10 @@ audiobookshelf:
      type: deployment
      replicas: 1
      strategy: Recreate
+      pod:
+        securityContext:
+          fsGroup: 1000
+          fsGroupChangePolicy: OnRootMismatch
      containers:
        main:
          image:
--- a/clusters/cl01tl/helm/blocky/values.yaml
+++ b/clusters/cl01tl/helm/blocky/values.yaml
@@ -108,7 +108,6 @@ blocky:
              authentik                       IN      CNAME   traefik-cl01tl
              backrest                        IN      CNAME   traefik-cl01tl
              bazarr                          IN      CNAME   traefik-cl01tl
-              booklore                        IN      CNAME   traefik-cl01tl
              ceph                            IN      CNAME   traefik-cl01tl
              code-server                     IN      CNAME   traefik-cl01tl
              dawarich                        IN      CNAME   traefik-cl01tl
@@ -121,6 +120,7 @@ blocky:
              gatus                           IN      CNAME   traefik-cl01tl
              gitea                           IN      CNAME   traefik-cl01tl
              grafana                         IN      CNAME   traefik-cl01tl
+              grimmory                        IN      CNAME   traefik-cl01tl
              harbor                          IN      CNAME   traefik-cl01tl
              headlamp                        IN      CNAME   traefik-cl01tl
              home                            IN      CNAME   traefik-cl01tl
--- a/clusters/cl01tl/helm/cilium/Chart.lock
+++ b/clusters/cl01tl/helm/cilium/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: cilium
  repository: https://helm.cilium.io/
-  version: 1.18.6
-digest: sha256:8ea328ac238524b5b423e6289f5e25d05ef64e6aa19cfd5de238f1d5dd533e9b
-generated: "2026-02-05T12:00:20.15778-06:00"
+  version: 1.19.2
+digest: sha256:11f8eef4733b70c2b9a91ce39fe3c1ea1ad3fa3c46750efb015e03ff6ea3655b
+generated: "2026-03-24T03:46:51.217460551Z"
--- a/clusters/cl01tl/helm/cilium/Chart.yaml
+++ b/clusters/cl01tl/helm/cilium/Chart.yaml
@@ -15,7 +15,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: cilium
-    version: 1.18.6
+    version: 1.19.2
    repository: https://helm.cilium.io/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/cilium.png
 # renovate: datasource=github-releases depName=cilium/cilium
--- a/clusters/cl01tl/helm/gatus/values.yaml
+++ b/clusters/cl01tl/helm/gatus/values.yaml
@@ -164,8 +164,8 @@ gatus:
      - name: foldergram
        url: https://foldergram.alexlebens.net
        <<: *defaults
-      - name: booklore
-        url: https://booklore.alexlebens.net
+      - name: grimmory
+        url: https://grimmory.alexlebens.net
        <<: *defaults
      - name: directus
        url: https://directus.alexlebens.net
--- a/clusters/cl01tl/helm/generic-device-plugin/Chart.lock
+++ b/clusters/cl01tl/helm/generic-device-plugin/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: generic-device-plugin
  repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-  version: 0.20.24
-digest: sha256:36bf651c24198d299458046aaf449e9fb50942e1143389092a746357d402b731
-generated: "2026-03-20T01:18:36.687250976Z"
+  version: 0.20.25
+digest: sha256:04f987ed54b51b4401ab056b4627cfce7d1fe660bb496a459e975f4dcc8ff466
+generated: "2026-03-24T00:12:00.102697457Z"
--- a/clusters/cl01tl/helm/generic-device-plugin/Chart.yaml
+++ b/clusters/cl01tl/helm/generic-device-plugin/Chart.yaml
@@ -15,6 +15,6 @@ maintainers:
 dependencies:
  - name: generic-device-plugin
    repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-    version: 0.20.24
+    version: 0.20.25
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 appVersion: 1.0.0
--- a/clusters/cl01tl/helm/grimmory/Chart.lock
+++ b/clusters/cl01tl/helm/grimmory/Chart.lock
@@ -8,8 +8,5 @@ dependencies:
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.8.0
- name: volsync-target
-  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.8.0
-digest: sha256:e65fa008c652092da5431e9780eb2a87c944298a12e58e432efad61c9e826da5
-generated: "2026-03-14T23:57:22.721295098Z"
+digest: sha256:6ee403da03c1bcc0289a9abdef0508344072d51173da996eda69b8305d5feefa
+generated: "2026-03-23T20:35:19.743257-05:00"
--- a/clusters/cl01tl/helm/grimmory/Chart.yaml
+++ b/clusters/cl01tl/helm/grimmory/Chart.yaml
@@ -1,23 +1,22 @@
 apiVersion: v2
-name: booklore
+name: grimmory
 version: 1.0.0
-description: booklore
+description: Grimmory
 keywords:
-  - booklore
  - grimmory
  - books
-home: https://wiki.alexlebens.dev/
+home: https://docs.alexlebens.dev/applications/grimmory/
 sources:
-  - https://github.com/booklore-app/BookLore
  - https://github.com/grimmory-tools/grimmory
-  - https://github.com/booklore-app/booklore/pkgs/container/booklore
  - https://github.com/grimmory-tools/grimmory/pkgs/container/grimmory
  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
+  - https://github.com/mariadb-operator/mariadb-operator/tree/main/deploy/charts/mariadb-cluster
+  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/volsync-target
 maintainers:
  - name: alexlebens
 dependencies:
  - name: app-template
-    alias: booklore
+    alias: grimmory
    repository: https://bjw-s-labs.github.io/helm-charts/
    version: 4.6.2
  - name: mariadb-cluster
@@ -27,10 +26,6 @@ dependencies:
    alias: volsync-target-config
    version: 0.8.0
    repository: oci://harbor.alexlebens.net/helm-charts
-  - name: volsync-target
-    alias: volsync-target-data
-    version: 0.8.0
-    repository: oci://harbor.alexlebens.net/helm-charts
-icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/booklore.png
+icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/grimmory.png
 # renovate: datasource=github-releases depName=grimmory-tools/grimmory
 appVersion: v2.3.0
--- a/clusters/cl01tl/helm/grimmory/templates/external-secret.yaml
+++ b/clusters/cl01tl/helm/grimmory/templates/external-secret.yaml
@@ -1,10 +1,10 @@
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
-  name: booklore-database-secret
+  name: grimmory-database-secret
  namespace: {{ .Release.Namespace }}
  labels:
-    app.kubernetes.io/name: booklore-database-secret
+    app.kubernetes.io/name: grimmory-database-secret
    app.kubernetes.io/instance: {{ .Release.Name }}
    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
@@ -14,20 +14,17 @@ spec:
  data:
    - secretKey: password
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/booklore/database
-        metadataPolicy: None
+        key: /cl01tl/grimmory/database
        property: password

 ---
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
-  name: booklore-data-replication-secret
+  name: grimmory-data-replication-secret
  namespace: {{ .Release.Namespace }}
  labels:
-    app.kubernetes.io/name: booklore-data-replication-secret
+    app.kubernetes.io/name: grimmory-data-replication-secret
    app.kubernetes.io/instance: {{ .Release.Name }}
    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
@@ -37,20 +34,17 @@ spec:
  data:
    - secretKey: psk.txt
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/booklore/replication
-        metadataPolicy: None
+        key: /cl01tl/grimmory/replication
        property: psk.txt

 ---
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
-  name: booklore-mariadb-cluster-backup-secret-external
+  name: grimmory-mariadb-cluster-backup-secret-external
  namespace: {{ .Release.Namespace }}
  labels:
-    app.kubernetes.io/name: booklore-mariadb-cluster-backup-secret-external
+    app.kubernetes.io/name: grimmory-mariadb-cluster-backup-secret-external
    app.kubernetes.io/instance: {{ .Release.Name }}
    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
@@ -60,27 +54,21 @@ spec:
  data:
    - secretKey: access
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /digital-ocean/home-infra/mariadb-backups
-        metadataPolicy: None
        property: access
    - secretKey: secret
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /digital-ocean/home-infra/mariadb-backups
-        metadataPolicy: None
        property: secret

 ---
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
-  name: booklore-mariadb-cluster-backup-secret-garage
+  name: grimmory-mariadb-cluster-backup-secret-garage
  namespace: {{ .Release.Namespace }}
  labels:
-    app.kubernetes.io/name: booklore-mariadb-cluster-backup-secret-garage
+    app.kubernetes.io/name: grimmory-mariadb-cluster-backup-secret-garage
    app.kubernetes.io/instance: {{ .Release.Name }}
    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
@@ -90,15 +78,9 @@ spec:
  data:
    - secretKey: access
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /garage/home-infra/mariadb-backups
-        metadataPolicy: None
        property: access
    - secretKey: secret
      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
        key: /garage/home-infra/mariadb-backups
-        metadataPolicy: None
        property: secret
--- a/clusters/cl01tl/helm/grimmory/templates/namespace.yaml
+++ b/clusters/cl01tl/helm/grimmory/templates/namespace.yaml
@@ -1,11 +1,11 @@
 apiVersion: v1
 kind: Namespace
 metadata:
-  name: booklore
+  name: grimmory
  annotations:
    volsync.backube/privileged-movers: "true"
  labels:
-    app.kubernetes.io/name: booklore
+    app.kubernetes.io/name: grimmory
    app.kubernetes.io/instance: {{ .Release.Name }}
    app.kubernetes.io/part-of: {{ .Release.Name }}
    pod-security.kubernetes.io/audit: privileged
--- a/clusters/cl01tl/helm/grimmory/templates/persistent-volume-claim.yaml
+++ b/clusters/cl01tl/helm/grimmory/templates/persistent-volume-claim.yaml
@@ -1,14 +1,14 @@
 apiVersion: v1
 kind: PersistentVolumeClaim
 metadata:
-  name: booklore-books-nfs-storage
+  name: grimmory-books-nfs-storage
  namespace: {{ .Release.Namespace }}
  labels:
-    app.kubernetes.io/name: booklore-books-nfs-storage
+    app.kubernetes.io/name: grimmory-books-nfs-storage
    app.kubernetes.io/instance: {{ .Release.Name }}
    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
-  volumeName: booklore-books-nfs-storage
+  volumeName: grimmory-books-nfs-storage
  storageClassName: nfs-client
  accessModes:
    - ReadWriteMany
@@ -20,14 +20,14 @@ spec:
 apiVersion: v1
 kind: PersistentVolumeClaim
 metadata:
-  name: booklore-books-import-nfs-storage
+  name: grimmory-books-import-nfs-storage
  namespace: {{ .Release.Namespace }}
  labels:
-    app.kubernetes.io/name: booklore-books-import-nfs-storage
+    app.kubernetes.io/name: grimmory-books-import-nfs-storage
    app.kubernetes.io/instance: {{ .Release.Name }}
    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
-  volumeName: booklore-books-import-nfs-storage
+  volumeName: grimmory-books-import-nfs-storage
  storageClassName: nfs-client
  accessModes:
    - ReadWriteMany
--- a/clusters/cl01tl/helm/grimmory/templates/persistent-volume.yaml
+++ b/clusters/cl01tl/helm/grimmory/templates/persistent-volume.yaml
@@ -1,10 +1,10 @@
 apiVersion: v1
 kind: PersistentVolume
 metadata:
-  name: booklore-books-nfs-storage
+  name: grimmory-books-nfs-storage
  namespace: {{ .Release.Namespace }}
  labels:
-    app.kubernetes.io/name: booklore-books-nfs-storage
+    app.kubernetes.io/name: grimmory-books-nfs-storage
    app.kubernetes.io/instance: {{ .Release.Name }}
    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
@@ -26,10 +26,10 @@ spec:
 apiVersion: v1
 kind: PersistentVolume
 metadata:
-  name: booklore-books-import-nfs-storage
+  name: grimmory-books-import-nfs-storage
  namespace: {{ .Release.Namespace }}
  labels:
-    app.kubernetes.io/name: booklore-books-import-nfs-storage
+    app.kubernetes.io/name: grimmory-books-import-nfs-storage
    app.kubernetes.io/instance: {{ .Release.Name }}
    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
--- a/clusters/cl01tl/helm/grimmory/values.yaml
+++ b/clusters/cl01tl/helm/grimmory/values.yaml
@@ -1,16 +1,18 @@
-booklore:
+grimmory:
  controllers:
    main:
      type: deployment
      replicas: 1
      strategy: Recreate
-      revisionHistoryLimit: 3
+      pod:
+        securityContext:
+          fsGroup: 1000
+          fsGroupChangePolicy: OnRootMismatch
      containers:
        main:
          image:
            repository: ghcr.io/grimmory-tools/grimmory
-            tag: v2.3.0
-            pullPolicy: IfNotPresent
+            tag: v2.3.0@sha256:9014247f591074529894f81115ca40f899db697e89f72c2fe91ec530e3f19597
          env:
            - name: TZ
              value: America/Chicago
@@ -19,22 +21,22 @@ booklore:
            - name: GROUP_ID
              value: 1000
            - name: DATABASE_URL
-              value: jdbc:mariadb://booklore-mariadb-cluster-primary.booklore:3306/booklore
+              value: jdbc:mariadb://grimmory-mariadb-cluster-primary.grimmory:3306/booklore
            - name: DATABASE_USERNAME
-              value: booklore
+              value: grimmory
            - name: DATABASE_PASSWORD
              valueFrom:
                secretKeyRef:
-                  name: booklore-database-secret
+                  name: grimmory-database-secret
                  key: password
-            - name: BOOKLORE_PORT
+            - name: GRIMMORY_PORT
              value: 6060
            - name: SWAGGER_ENABLED
              value: false
          resources:
            requests:
-              cpu: 50m
-              memory: 128Mi
+              cpu: 10m
+              memory: 1Gi
  service:
    main:
      controller: main
@@ -52,41 +54,26 @@ booklore:
          name: traefik-gateway
          namespace: traefik
      hostnames:
-        - booklore.alexlebens.net
+        - grimmory.alexlebens.net
      rules:
        - backendRefs:
-            - group: ''
-              kind: Service
-              name: booklore
+            - name: grimmory
              port: 80
-              weight: 100
          matches:
            - path:
                type: PathPrefix
                value: /
  persistence:
    config:
-      forceRename: booklore-config
+      forceRename: grimmory-config
      storageClass: ceph-block
      accessMode: ReadWriteOnce
      size: 5Gi
-      retain: true
      advancedMounts:
        main:
          main:
            - path: /app/data
              readOnly: false
-    data:
-      forceRename: booklore-data
-      storageClass: ceph-block
-      accessMode: ReadWriteOnce
-      size: 10Gi
-      retain: true
-      advancedMounts:
-        main:
-          main:
-            - path: /data
-              readOnly: false
    books-import:
      type: emptyDir
      advancedMounts:
@@ -94,8 +81,15 @@ booklore:
          main:
            - path: /bookdrop
              readOnly: false
+    data:
+      existingClaim: grimmory-books-nfs-storage
+      advancedMounts:
+        main:
+          main:
+            - path: /data
+              readOnly: false
    ingest:
-      existingClaim: booklore-books-import-nfs-storage
+      existingClaim: grimmory-books-import-nfs-storage
      advancedMounts:
        main:
          main:
@@ -105,7 +99,7 @@ mariadb-cluster:
  mariadb:
    rootPasswordSecretKeyRef:
      generate: false
-      name: booklore-database-secret
+      name: grimmory-database-secret
      key: password
    storage:
      size: 5Gi
@@ -115,14 +109,14 @@ mariadb-cluster:
    bootstrapFrom:
      s3:
        bucket: mariadb-backups-b230a2f5aecf080a4b372c08
-        prefix: cl01tl/booklore
+        prefix: cl01tl/grimmory
        endpoint: nyc3.digitaloceanspaces.com
        region: us-east-1
        accessKeyIdSecretKeyRef:
-          name: booklore-mariadb-cluster-backup-secret-external
+          name: grimmory-mariadb-cluster-backup-secret-external
          key: access
        secretAccessKeySecretKeyRef:
-          name: booklore-mariadb-cluster-backup-secret-external
+          name: grimmory-mariadb-cluster-backup-secret-external
          key: secret
        tls:
          enabled: true
@@ -134,21 +128,22 @@ mariadb-cluster:
      cleanupPolicy: Delete
      requeueInterval: 10h
  users:
-    - name: booklore
+    - name: grimmory
      passwordSecretKeyRef:
-        name: booklore-database-secret
+        name: grimmory-database-secret
        key: password
      host: '%'
+      maxUserConnections: 100
      cleanupPolicy: Delete
      requeueInterval: 10h
      retryInterval: 30s
  grants:
-    - name: booklore
+    - name: grimmory
      privileges:
        - "ALL PRIVILEGES"
      database: "booklore"
      table: "*"
-      username: booklore
+      username: grimmory
      grantOption: true
      host: '%'
      cleanupPolicy: Delete
@@ -166,14 +161,14 @@ mariadb-cluster:
      storage:
        s3:
          bucket: mariadb-backups-b230a2f5aecf080a4b372c08
-          prefix: cl01tl/booklore
+          prefix: cl01tl/grimmory
          endpoint: nyc3.digitaloceanspaces.com
          region: us-east-1
          accessKeyIdSecretKeyRef:
-            name: booklore-mariadb-cluster-backup-secret-external
+            name: grimmory-mariadb-cluster-backup-secret-external
            key: access
          secretAccessKeySecretKeyRef:
-            name: booklore-mariadb-cluster-backup-secret-external
+            name: grimmory-mariadb-cluster-backup-secret-external
            key: secret
          tls:
            enabled: true
@@ -188,14 +183,14 @@ mariadb-cluster:
      storage:
        s3:
          bucket: mariadb-backups
-          prefix: cl01tl/booklore
+          prefix: cl01tl/grimmory
          endpoint: garage-ps10rp.boreal-beaufort.ts.net:3900
          region: us-east-1
          accessKeyIdSecretKeyRef:
-            name: booklore-mariadb-cluster-backup-secret-garage
+            name: grimmory-mariadb-cluster-backup-secret-garage
            key: access
          secretAccessKeySecretKeyRef:
-            name: booklore-mariadb-cluster-backup-secret-garage
+            name: grimmory-mariadb-cluster-backup-secret-garage
            key: secret
          tls:
            enabled: true
@@ -210,17 +205,20 @@ mariadb-cluster:
      storage:
        s3:
          bucket: mariadb-backups
-          prefix: cl01tl/booklore
+          prefix: cl01tl/grimmory
          endpoint: garage-main.garage:3900
          region: us-east-1
          accessKeyIdSecretKeyRef:
-            name: booklore-mariadb-cluster-backup-secret-garage
+            name: grimmory-mariadb-cluster-backup-secret-garage
            key: access
          secretAccessKeySecretKeyRef:
-            name: booklore-mariadb-cluster-backup-secret-garage
+            name: grimmory-mariadb-cluster-backup-secret-garage
            key: secret
 volsync-target-config:
-  pvcTarget: booklore-config
+  pvcTarget: grimmory-config
+  moverSecurityContext:
+    fsGroup: 1000
+    fsGroupChangePolicy: OnRootMismatch
  local:
    enabled: true
    schedule: 12 8 * * *
@@ -230,20 +228,3 @@ volsync-target-config:
  external:
    enabled: true
    schedule: 12 10 * * *
-volsync-target-data:
-  pvcTarget: booklore-data
-  local:
-    enabled: true
-    schedule: 14 8 * * *
-    restic:
-      cacheCapacity: 10Gi
-  remote:
-    enabled: true
-    schedule: 14 9 * * *
-    restic:
-      cacheCapacity: 10Gi
-  external:
-    enabled: true
-    schedule: 14 10 * * *
-    restic:
-      cacheCapacity: 10Gi
--- a/clusters/cl01tl/helm/homepage/values.yaml
+++ b/clusters/cl01tl/helm/homepage/values.yaml
@@ -211,8 +211,8 @@ homepage:
              - Books:
                  icon: sh-booklore.webp
                  description: Grimmory
-                  href: https://booklore.alexlebens.net
-                  siteMonitor: http://booklore.booklore:80
+                  href: https://grimmory.alexlebens.net
+                  siteMonitor: http://grimmory.grimmory:80
                  statusStyle: dot
          - Public:
              - Site:
--- a/clusters/cl01tl/helm/shelfmark/templates/external-secret.yaml
+++ b/clusters/cl01tl/helm/shelfmark/templates/external-secret.yaml
@@ -12,14 +12,14 @@ spec:
    kind: ClusterSecretStore
    name: vault
  data:
-    - secretKey: booklore-user
+    - secretKey: grimmory-user
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        key: /cl01tl/shelfmark/booklore
        metadataPolicy: None
        property: user
-    - secretKey: booklore-password
+    - secretKey: grimmory-password
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
--- a/clusters/cl01tl/helm/shelfmark/values.yaml
+++ b/clusters/cl01tl/helm/shelfmark/values.yaml
@@ -17,7 +17,7 @@ shelfmark:
            - name: DOCKERMODE
              value: true
            - name: CALIBRE_WEB_URL
-              value: https://booklore.alexlebens.net
+              value: https://grimmory.alexlebens.net
            - name: AUDIOBOOK_LIBRARY_URL
              value: https://audiobookshelf.alexlebens.net
            - name: SEARCH_MODE
@@ -29,17 +29,17 @@ shelfmark:
            - name: BOOKS_OUTPUT_MODE
              value: booklore
            - name: BOOKLORE_HOST
-              value: http://booklore.booklore:80
+              value: http://grimmory.grimmory:80
            - name: BOOKLORE_USERNAME
              valueFrom:
                secretKeyRef:
                  name: shelfmark-config-secret
-                  key: booklore-user
+                  key: grimmory-user
            - name: BOOKLORE_PASSWORD
              valueFrom:
                secretKeyRef:
                  name: shelfmark-config-secret
-                  key: booklore-password
+                  key: grimmory-password
            - name: BOOKLORE_DESTINATION
              value: library
            - name: BOOKLORE_LIBRARY_ID
--- a/clusters/cl01tl/helm/tdarr/values.yaml
+++ b/clusters/cl01tl/helm/tdarr/values.yaml
@@ -9,7 +9,7 @@ tdarr:
        main:
          image:
            repository: ghcr.io/haveagitgat/tdarr
-            tag: 2.64.02
+            tag: 2.65.01
            pullPolicy: IfNotPresent
          env:
            - name: TZ
@@ -48,7 +48,7 @@ tdarr:
        main:
          image:
            repository: ghcr.io/haveagitgat/tdarr_node
-            tag: 2.64.02
+            tag: 2.65.01
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/helm/unpoller/Chart.yaml
+++ b/clusters/cl01tl/helm/unpoller/Chart.yaml
@@ -21,4 +21,4 @@ dependencies:
    version: 4.6.2
 icon: https://camo.githubusercontent.com/c5d07a5b3acfeac8e1c25bf56f440ffe032b86e4e7f15de82357f022a43fc927/68747470733a2f2f756e706f6c6c65722e636f6d2f696d672f6c6f676f2e706e67
 # renovate: datasource=github-releases depName=unpoller/unpoller
-appVersion: v2.36.0
+appVersion: v2.37.0
--- a/clusters/cl01tl/helm/unpoller/values.yaml
+++ b/clusters/cl01tl/helm/unpoller/values.yaml
@@ -9,7 +9,7 @@ unpoller:
        main:
          image:
            repository: ghcr.io/unpoller/unpoller
-            tag: v2.36.0
+            tag: v2.37.0
            pullPolicy: IfNotPresent
          env:
            - name: UP_UNIFI_CONTROLLER_0_SAVE_ALARMS
--- a/hosts/ps08rp/blocky/config.yml
+++ b/hosts/ps08rp/blocky/config.yml
@@ -85,7 +85,6 @@ customDNS:
    authentik                       IN      CNAME   traefik-cl01tl
    backrest                        IN      CNAME   traefik-cl01tl
    bazarr                          IN      CNAME   traefik-cl01tl
-    booklore                        IN      CNAME   traefik-cl01tl
    ceph                            IN      CNAME   traefik-cl01tl
    code-server                     IN      CNAME   traefik-cl01tl
    dawarich                        IN      CNAME   traefik-cl01tl
@@ -98,6 +97,7 @@ customDNS:
    gatus                           IN      CNAME   traefik-cl01tl
    gitea                           IN      CNAME   traefik-cl01tl
    grafana                         IN      CNAME   traefik-cl01tl
+    grimmory                        IN      CNAME   traefik-cl01tl
    harbor                          IN      CNAME   traefik-cl01tl
    headlamp                        IN      CNAME   traefik-cl01tl
    home                            IN      CNAME   traefik-cl01tl
--- a/hosts/ps09rp/blocky/config.yml
+++ b/hosts/ps09rp/blocky/config.yml
@@ -106,7 +106,6 @@ customDNS:
    authentik                       IN      CNAME   traefik-cl01tl
    backrest                        IN      CNAME   traefik-cl01tl
    bazarr                          IN      CNAME   traefik-cl01tl
-    booklore                        IN      CNAME   traefik-cl01tl
    ceph                            IN      CNAME   traefik-cl01tl
    code-server                     IN      CNAME   traefik-cl01tl
    dawarich                        IN      CNAME   traefik-cl01tl
@@ -119,6 +118,7 @@ customDNS:
    gatus                           IN      CNAME   traefik-cl01tl
    gitea                           IN      CNAME   traefik-cl01tl
    grafana                         IN      CNAME   traefik-cl01tl
+    grimmory                        IN      CNAME   traefik-cl01tl
    harbor                          IN      CNAME   traefik-cl01tl
    headlamp                        IN      CNAME   traefik-cl01tl
    home                            IN      CNAME   traefik-cl01tl
Author	SHA1	Message	Date
Renovate Bot	e2b5aa898d	chore(deps): update helm release cilium to v1.19.2 All checks were successful lint-test-helm / lint-helm (pull_request) Successful in 17s Details lint-test-helm / validate-kubeconform (pull_request) Successful in 23s Details	2026-03-24 03:46:56 +00:00
Alex Lebens	36ac6266ca	tmp/booklore (#5034 ) Some checks are pending lint-test-docker / lint-docker-compose (push) Successful in 23s Details lint-test-helm / lint-helm (push) Successful in 26s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Has started running Details Reviewed-on: #5034	2026-03-24 03:44:24 +00:00
Alex Lebens	e20bc4b2cf	tmp/grimmory-5 (#5032 ) All checks were successful lint-test-helm / lint-helm (push) Successful in 24s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 2m14s Details Reviewed-on: #5032	2026-03-24 03:28:49 +00:00
Alex Lebens	5706150396	feat: change to boot from grimmory (#5030 ) All checks were successful lint-test-helm / lint-helm (push) Successful in 14s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 1m9s Details Reviewed-on: #5030	2026-03-24 02:54:59 +00:00
Alex Lebens	d4d75563ed	feat: change user All checks were successful lint-test-helm / lint-helm (push) Successful in 13s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 1m59s Details	2026-03-23 21:49:41 -05:00
Alex Lebens	5643260b63	feat: scale (#5027 ) All checks were successful lint-test-helm / lint-helm (push) Successful in 13s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 2m18s Details Reviewed-on: #5027	2026-03-24 02:44:26 +00:00
Alex Lebens	2c354902d7	tmp/grimmory-2 (#5025 ) All checks were successful lint-test-helm / lint-helm (push) Successful in 23s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 1m44s Details Reviewed-on: #5025	2026-03-24 02:25:28 +00:00
Alex Lebens	3f9743ee3f	fix: add mover contect (#5023 ) All checks were successful lint-test-helm / lint-helm (push) Successful in 24s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 2m27s Details Reviewed-on: #5023	2026-03-24 02:10:14 +00:00
Alex Lebens	1b61891d18	Add Grimmory as separate from Booklore (#5020 ) All checks were successful lint-test-helm / lint-helm (push) Successful in 53s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details lint-test-docker / lint-docker-compose (push) Successful in 1m17s Details renovate / renovate (push) Successful in 1m15s Details Reviewed-on: #5020	2026-03-24 01:50:24 +00:00
Renovate Bot	0f844bb80c	chore(deps): update ghcr.io/haveagitgat/tdarr_node docker tag to v2.65.01 (#5003 ) All checks were successful lint-test-helm / lint-helm (push) Successful in 29s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 1m44s Details This PR contains the following updates: \| Package \| Update \| Change \| \|---\|---\|---\| \| [ghcr.io/haveagitgat/tdarr_node](https://github.com/HaveAGitGat/tdarr_express_be) \| minor \| `2.64.02` → `2.65.01` \| --- ### Configuration 📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied. ♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 Ignore: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My44NC4yIiwidXBkYXRlZEluVmVyIjoiNDMuODQuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=--> Reviewed-on: #5003 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>	2026-03-24 01:48:01 +00:00
Renovate Bot	72cd322005	chore(deps): update ghcr.io/haveagitgat/tdarr docker tag to v2.65.01 (#5002 ) All checks were successful lint-test-helm / lint-helm (push) Successful in 14s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 1m42s Details This PR contains the following updates: \| Package \| Update \| Change \| \|---\|---\|---\| \| [ghcr.io/haveagitgat/tdarr](https://github.com/HaveAGitGat/tdarr_express_be) \| minor \| `2.64.02` → `2.65.01` \| --- ### Configuration 📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied. ♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 Ignore: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My44NC4yIiwidXBkYXRlZEluVmVyIjoiNDMuODQuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=--> Reviewed-on: #5002 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>	2026-03-24 01:45:48 +00:00
Renovate Bot	4c60e63411	chore(deps): update unpoller/unpoller to v2.37.0 (#5019 ) Some checks failed lint-test-helm / lint-helm (push) Successful in 21s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Has been cancelled Details This PR contains the following updates: \| Package \| Update \| Change \| \|---\|---\|---\| \| [ghcr.io/unpoller/unpoller](https://github.com/unpoller/unpoller) \| minor \| `v2.36.0` → `v2.37.0` \| \| [unpoller/unpoller](https://github.com/unpoller/unpoller) \| minor \| `v2.36.0` → `v2.37.0` \| --- ### Release Notes <details> <summary>unpoller/unpoller (ghcr.io/unpoller/unpoller)</summary> ### [`v2.37.0`](https://github.com/unpoller/unpoller/releases/tag/v2.37.0) [Compare Source](https://github.com/unpoller/unpoller/compare/v2.36.0...v2.37.0) ##### Changelog - [`a81a6e6`](`a81a6e6e16`) feat: add port anomaly metrics (closes [#929](https://github.com/unpoller/unpoller/issues/929)) ([#982](https://github.com/unpoller/unpoller/issues/982)) - [`643c108`](`643c108674`) feat: add network topology metrics (closes [#931](https://github.com/unpoller/unpoller/issues/931)) ([#981](https://github.com/unpoller/unpoller/issues/981)) - [`f3d4e21`](`f3d4e21e0e`) build(deps): bump google.golang.org/grpc from 1.79.2 to 1.79.3 ([#980](https://github.com/unpoller/unpoller/issues/980)) - [`6b33b6b`](`6b33b6b97b`) feat: firewall policy metrics across all output plugins (closes [#928](https://github.com/unpoller/unpoller/issues/928)) ([#979](https://github.com/unpoller/unpoller/issues/979)) - [`521c2f8`](`521c2f88bc`) feat(otelunifi): add OpenTelemetry output plugin ([#978](https://github.com/unpoller/unpoller/issues/978)) - [`4c34180`](`4c34180047`) feat(clients): add MIMO spatial stream metrics for WiFi clients ([#977](https://github.com/unpoller/unpoller/issues/977)) </details> --- ### Configuration 📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied. ♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 Ignore: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My44NC4yIiwidXBkYXRlZEluVmVyIjoiNDMuODQuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=--> Reviewed-on: https://gitea.alexlebens.dev/alexlebens/infrastructure/pulls/5019 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>	2026-03-24 01:44:35 +00:00
Renovate Bot	8e64d73e75	chore(deps): update sahara101/movie-roulette to v5.3.0 (#5012 ) All checks were successful lint-test-helm / lint-helm (push) Successful in 27s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 2m37s Details This PR contains the following updates: \| Package \| Update \| Change \| \|---\|---\|---\| \| ghcr.io/sahara101/movie-roulette \| minor \| `v5.2.1` → `v5.3.0` \| \| [sahara101/Movie-Roulette](https://github.com/sahara101/Movie-Roulette) \| minor \| `v5.2.1` → `v5.3.0` \| --- ### Release Notes <details> <summary>sahara101/Movie-Roulette (sahara101/Movie-Roulette)</summary> ### [`v5.3.0`](https://github.com/sahara101/Movie-Roulette/releases/tag/v5.3.0) [Compare Source](https://github.com/sahara101/Movie-Roulette/compare/v5.2.1...v5.3.0) #### New Features - Enrichment Cache — persistent background cache pre-fetches TMDb credits, external links, trailers, and movie logos at startup; movie cards load instantly without secondary API calls (`_enriched` flag skips all async fetches) - Session-Based Seen Tracking — random selection avoids repeating movies within the same browser tab session; resets automatically when the full pool is exhausted with a toast notification - Media Server Web Client — client-picker now includes the configured media server as a direct watch option; opens the movie's detail page in Plex/Jellyfin/Emby web UI in a new tab - Animated Login Logo — app icon replaced with a looping silent MP4 on the login screen - PWA Splash Screen — standalone home-screen launches show a custom dark splash for 1.5s, dismissed once per session #### Visual Overhaul - Color System — full amber palette replacing all purple/indigo across both HeroUI themes; buttons, glows, progress bars, focus rings, and aurora orbs all updated - Typography — three-font system: Geist (UI), Instrument Serif (movie titles), Geist Mono (numbers/metadata) - Cinema Poster Mode — full-bleed blurred backdrop, glassmorphism info bars, editorial director layout, spring-eased progress bar - Filter Island — filter controls unified into a glass pill with active-count badge and spring-entrance dropdown - Icon Button Animations — Next, Power, and service-switcher icons spin 360° on hover (disabled on touch devices) #### Bug Fixes - Collection warning count mismatch — badge and modal heading now consistently exclude Trakt-watched movies; Trakt-watched previous movies hidden from modal list (no action needed) - Collection warning shown for all-handled collections — button correctly hidden when every previous movie is watched locally or on Trakt and all other collection movies are in library or on Trakt - Collection warning slow to appear — moved to async `/api/collection_status` endpoint; no longer blocks movie response - TMDb collection cache never expiring — weekly APScheduler job clears `lru_cache` so new sequels appear without restart - Next-movie background flash — images preloaded before DOM update; old movie stays visible until new assets are ready - Service switch leaves stale filters — switching service now resets filters and session seen-list - Apple TV pairing on macOS Docker — optional IP Address field uses `--scan-hosts` for direct unicast pairing; failure now reports EOF/TIMEOUT reason with atvremote output - Apple TV device name/model — stored on pairing and shown in settings instead of raw UUID - PWA icons showing white background — all icons rebuilt with `#222222` background; 1024×1024 maskable icon added for macOS dock - Auth session writes on every request — session values only written when they actually change #### Changes - Default settings — fresh installs: Movie Logos off, Login Backdrops on, Load on Start on, Poster Mode set to Screensaver Full Changelog: <https://github.com/sahara101/Movie-Roulette/compare/v5.2.1...v5.3.0> </details> --- ### Configuration 📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied. ♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 Ignore: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My44NC4yIiwidXBkYXRlZEluVmVyIjoiNDMuODQuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiaW1hZ2UiXX0=--> Reviewed-on: #5012 Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net> Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>	2026-03-24 01:38:41 +00:00
Renovate Bot	6c91f9ef88	chore(deps): update helm release generic-device-plugin to v0.20.25 (#5017 ) All checks were successful lint-test-helm / lint-helm (push) Successful in 16s Details lint-test-helm / validate-kubeconform (push) Has been skipped Details renovate / renovate (push) Successful in 1m26s Details	2026-03-24 00:12:26 +00:00