Update ghcr.io/orwellianepilogue/ephemera Docker tag to v2

clusters/cl01tl/helm/actual/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 4.6.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:ff3e2f03e93cdd4593e28b9c8bd5b9ddb25548a20a070b2e202057f216207d03
-generated: "2026-01-16T18:44:37.399172263Z"
+digest: sha256:ab1b7688f41127681b66c0673c713b651c58ac7c06f123d53ea871b6df9cda9f
+generated: "2026-01-07T16:02:51.781699411Z"

clusters/cl01tl/helm/actual/Chart.yaml

@@ -16,7 +16,7 @@ dependencies:
   - name: app-template
     alias: actual
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 4.6.0
   - name: volsync-target
     alias: volsync-target-data
     version: 0.7.0

clusters/cl01tl/helm/argo-workflows/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: argo-workflows
   repository: https://argoproj.github.io/argo-helm
-  version: 0.47.1
+  version: 0.46.3
 - name: argo-events
   repository: https://argoproj.github.io/argo-helm
   version: 2.4.19
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.4.5
-digest: sha256:a4be166c9134150f6940f1e170fde0002a7c82ef6aaf51a90de15fbc742181c3
-generated: "2026-01-21T21:02:01.155313357Z"
+digest: sha256:a173eb2acc1e305074b6f81161229a27e00fa7a2e7ea14f17bbc3fca444e65a4
+generated: "2026-01-07T01:51:33.628737915Z"

clusters/cl01tl/helm/argo-workflows/Chart.yaml

@@ -18,7 +18,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: argo-workflows
-    version: 0.47.1
+    version: 0.46.3
     repository: https://argoproj.github.io/argo-helm
   - name: argo-events
     version: 2.4.19

clusters/cl01tl/helm/argocd/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: argo-cd
   repository: https://argoproj.github.io/argo-helm
-  version: 9.3.4
-digest: sha256:006518c10fc1636a5b0398de90d4a7687ae6c0bf4626c41d11b2bc3ad48ff416
-generated: "2026-01-14T23:02:04.617990687Z"
+  version: 9.2.4
+digest: sha256:ad9fc8f132ba717e9da4564ca1c90eab88c1d1ec251d015542b938f2bd5af7bd
+generated: "2026-01-03T23:01:53.96861459Z"

clusters/cl01tl/helm/argocd/Chart.yaml

@@ -15,7 +15,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: argo-cd
-    version: 9.3.4
+    version: 9.2.4
     repository: https://argoproj.github.io/argo-helm
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 # renovate: github=argoproj/argo-cd

clusters/cl01tl/helm/audiobookshelf/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 4.6.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:c8a988258b26187972a8b69767bf5df502d7e2b12710eb357ac15240d872fd37
-generated: "2026-01-16T18:44:48.982249243Z"
+digest: sha256:9ad54a69753a4bbfe53d1d7ed12551e89fe7bb8f90d96c1d3ff06ba200bc5202
+generated: "2026-01-07T16:03:05.987463264Z"

clusters/cl01tl/helm/audiobookshelf/Chart.yaml

@@ -18,7 +18,7 @@ dependencies:
   - name: app-template
     alias: audiobookshelf
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 4.6.0
   - name: volsync-target
     alias: volsync-target-config
     version: 0.7.0

clusters/cl01tl/helm/audiobookshelf/values.yaml

@@ -21,7 +21,7 @@ audiobookshelf:
         apprise-api:
           image:
             repository: caronc/apprise
-            tag: v1.3.1
+            tag: 1.3.0
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/authentik/Chart.lock

@@ -1,15 +1,15 @@
 dependencies:
 - name: authentik
   repository: https://charts.goauthentik.io/
-  version: 2025.12.1
+  version: 2025.10.3
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.9
+  version: 2.1.4
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.4.5
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.1
-digest: sha256:458e9967330768b68649da4af69773adba3aed1a04316b9e67ef19612381d4b9
-generated: "2026-01-17T17:30:18.453482605Z"
+  version: 0.5.0
+digest: sha256:d357b0a8f4351068d9ce7223ffd01a0921202cb2b41669421b8429bc3f7778eb
+generated: "2025-12-27T19:45:06.478084011Z"

clusters/cl01tl/helm/authentik/Chart.yaml

@@ -21,17 +21,17 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: authentik
-    version: 2025.12.1
+    version: 2025.10.3
     repository: https://charts.goauthentik.io/
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.9
+    version: 2.1.4
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.4.5
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
-    version: 1.0.1
+    version: 0.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/authentik.png
 # renovate: github=goauthentik/authentik

clusters/cl01tl/helm/authentik/values.yaml

@@ -110,5 +110,6 @@ redis-replication:
     enabled: false
   redisReplication:
     clusterSize: 3
-    sentinel:
-      enabled: true
+  redisSentinel:
+    enabled: true
+    clusterSize: 3

clusters/cl01tl/helm/backrest/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 4.6.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:18365b7dd3995703aad6928ce22dd1c3b8ffd5f1cccf54b8f1489ad111d13104
-generated: "2026-01-16T18:45:00.087995513Z"
+digest: sha256:816f9485a6ecce1710004fcf8b5422d519f7d7a02576ae5767bb3a6f365fcdcc
+generated: "2026-01-07T16:03:18.566019576Z"

clusters/cl01tl/helm/backrest/Chart.yaml

@@ -16,7 +16,7 @@ dependencies:
   - name: app-template
     alias: backrest
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 4.6.0
   - name: volsync-target
     alias: volsync-target-config
     version: 0.7.0

clusters/cl01tl/helm/backrest/values.yaml

@@ -8,7 +8,7 @@ backrest:
         main:
           image:
             repository: garethgeorge/backrest
-            tag: v1.11.1
+            tag: v1.10.1
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/bazarr/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 4.6.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:77d0e82601292b4173d355d18c0de82bb37684a3dc29d7c8af4169308f14de48
-generated: "2026-01-16T18:45:10.855338471Z"
+digest: sha256:de894b87644bc7fe271df181dc27c9c4aff6716c7d61afe897776a90c8d1156f
+generated: "2026-01-07T16:03:30.651964699Z"

clusters/cl01tl/helm/bazarr/Chart.yaml

@@ -18,7 +18,7 @@ dependencies:
   - name: app-template
     alias: bazarr
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 4.6.0
   - name: volsync-target
     alias: volsync-target-config
     version: 0.7.0

clusters/cl01tl/helm/bazarr/values.yaml

@@ -15,7 +15,7 @@ bazarr:
         main:
           image:
             repository: ghcr.io/linuxserver/bazarr
-            tag: 1.5.4@sha256:5af962ae633e97c8e008e4b6e638798de1420e8a9e8e6189beb108a52c6e942a
+            tag: 1.5.4@sha256:3785c9b813985821c9b56ee88c516d96b37dc21242c8f315f52e87c029735695
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/blocky/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 4.6.0
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.1
-digest: sha256:f3cc9b85524eb1a0c8aec92a87ad4dd1f2f59c5bb3474b569ce188827e40b3d0
-generated: "2026-01-16T18:45:21.852495393Z"
+  version: 0.5.0
+digest: sha256:defdf9a6c3b44f07e2232ed954e7c9986a2ffefce18b06a38a33456cef9578dd
+generated: "2026-01-07T16:03:45.057060212Z"

clusters/cl01tl/helm/blocky/Chart.yaml

@@ -16,9 +16,9 @@ dependencies:
   - name: app-template
     alias: blocky
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 4.6.0
   - name: redis-replication
-    version: 1.0.1
+    version: 0.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/blocky.png
 # renovate: github=0xerr0r/blocky

clusters/cl01tl/helm/blocky/values.yaml

@@ -112,8 +112,9 @@ blocky:
               booklore                        IN      CNAME   traefik-cl01tl
               ceph                            IN      CNAME   traefik-cl01tl
               code-server                     IN      CNAME   traefik-cl01tl
-              excalidraw                      IN      CNAME   traefik-cl01tl
+              ephemera                        IN      CNAME   traefik-cl01tl
               feishin                         IN      CNAME   traefik-cl01tl
+              fladder                         IN      CNAME   traefik-cl01tl
               garage-s3                       IN      CNAME   traefik-cl01tl
               garage-webui                    IN      CNAME   traefik-cl01tl
               gatus                           IN      CNAME   traefik-cl01tl
@@ -132,6 +133,8 @@ blocky:
               kiwix                           IN      CNAME   traefik-cl01tl
               komodo                          IN      CNAME   traefik-cl01tl
               lidarr                          IN      CNAME   traefik-cl01tl
+              lidatube                        IN      CNAME   traefik-cl01tl
+              listenarr                       IN      CNAME   traefik-cl01tl
               mail                            IN      CNAME   traefik-cl01tl
               navidrome                       IN      CNAME   traefik-cl01tl
               ntfy                            IN      CNAME   traefik-cl01tl
@@ -152,12 +155,12 @@ blocky:
               radarr-standup                  IN      CNAME   traefik-cl01tl
               searxng                         IN      CNAME   traefik-cl01tl
               seerr                           IN      CNAME   traefik-cl01tl
-              shelfmark                       IN      CNAME   traefik-cl01tl
               slskd                           IN      CNAME   traefik-cl01tl
               sonarr                          IN      CNAME   traefik-cl01tl
               sonarr-4k                       IN      CNAME   traefik-cl01tl
               sonarr-anime                    IN      CNAME   traefik-cl01tl
               stalwart                        IN      CNAME   traefik-cl01tl
+              tautulli                        IN      CNAME   traefik-cl01tl
               tdarr                           IN      CNAME   traefik-cl01tl
               tubearchivist                   IN      CNAME   traefik-cl01tl
               vault                           IN      CNAME   traefik-cl01tl
@@ -179,47 +182,35 @@ blocky:
                 - https://v.firebog.net/hosts/Prigent-Ads.txt
               mal:
                 - https://v.firebog.net/hosts/Prigent-Crypto.txt
+                - https://osint.digitalside.it/Threat-Intel/lists/latestdomains.txt
               pro:
                 - https://raw.githubusercontent.com/hagezi/dns-blocklists/main/wildcard/pro.plus.txt
-              oisd:
-                - https://big.oisd.nl/domainswild
             allowlists:
               sus:
                 - |
                   *.alexlebens.net
                   *.alexlebens.dev
                   *.boreal-beaufort.ts.net
-                  *.discord.com
               ads:
                 - |
                   *.alexlebens.net
                   *.alexlebens.dev
                   *.boreal-beaufort.ts.net
-                  *.discord.com
               priv:
                 - |
                   *.alexlebens.net
                   *.alexlebens.dev
                   *.boreal-beaufort.ts.net
-                  *.discord.com
               mal:
                 - |
                   *.alexlebens.net
                   *.alexlebens.dev
                   *.boreal-beaufort.ts.net
-                  *.discord.com
               pro:
                 - |
                   *.alexlebens.net
                   *.alexlebens.dev
                   *.boreal-beaufort.ts.net
-                  *.discord.com
-              oisd:
-                - |
-                  *.alexlebens.net
-                  *.alexlebens.dev
-                  *.boreal-beaufort.ts.net
-                  *.discord.com
             clientGroupsBlock:
               default:
                 - sus
@@ -227,7 +218,6 @@ blocky:
                 - priv
                 - mal
                 - pro
-                - oisd
             blockType: zeroIp
             blockTTL: 1m
             loading:
@@ -325,5 +315,9 @@ blocky:
               mountPropagation: None
               subPath: config.yml
 redis-replication:
+  existingSecret:
+    enabled: false
   redisReplication:
     clusterSize: 1
+  redisSentinel:
+    enabled: false

clusters/cl01tl/helm/booklore/Chart.lock

@@ -1,15 +1,15 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 4.6.0
 - name: mariadb-cluster
   repository: https://helm.mariadb.com/mariadb-operator
-  version: 25.10.4
+  version: 25.10.3
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:81601af110374e1571481873ace19f7bc694edb917ef35c1fbc623efe147a66d
-generated: "2026-01-16T18:45:33.641059484Z"
+digest: sha256:4c5fe2972b77d33dd85deeb589ab00cdbf85b08728fbd67acf5320b4d82706e2
+generated: "2026-01-07T16:04:06.614915286Z"

clusters/cl01tl/helm/booklore/Chart.yaml

@@ -16,9 +16,9 @@ dependencies:
   - name: app-template
     alias: booklore
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 4.6.0
   - name: mariadb-cluster
-    version: 25.10.4
+    version: 25.10.3
     repository: https://helm.mariadb.com/mariadb-operator
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/booklore/values.yaml

@@ -9,7 +9,7 @@ booklore:
         main:
           image:
             repository: ghcr.io/booklore-app/booklore
-            tag: v1.17.0
+            tag: v1.16.5
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/cilium/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: cilium
   repository: https://helm.cilium.io/
-  version: 1.18.6
-digest: sha256:8ea328ac238524b5b423e6289f5e25d05ef64e6aa19cfd5de238f1d5dd533e9b
-generated: "2026-01-14T11:02:31.272963463Z"
+  version: 1.18.5
+digest: sha256:b997853961dca1ed43d32b58b17e6e592581eb555db0b1457b168251cf3aaa45
+generated: "2025-12-17T16:05:05.870297681Z"

clusters/cl01tl/helm/cilium/Chart.yaml

@@ -15,7 +15,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: cilium
-    version: 1.18.6
+    version: 1.18.5
     repository: https://helm.cilium.io/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/cilium.png
 # renovate: github=cilium/cilium

clusters/cl01tl/helm/code-server/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 4.6.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.9
+  version: 2.1.4
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:d243a4062bd69c3e02536dbc8f0da06f8607a373a772bf521fa16ae10df331b7
-generated: "2026-01-17T17:30:30.693066904Z"
+digest: sha256:544f9590c8d5e2afe93e37623cba5e7479df70678b28ff59b433864895e323d2
+generated: "2026-01-07T16:04:30.495665285Z"

clusters/cl01tl/helm/code-server/Chart.yaml

@@ -19,10 +19,10 @@ dependencies:
   - name: app-template
     alias: code-server
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 4.6.0
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.9
+    version: 2.1.4
   - name: volsync-target
     alias: volsync-target-config
     version: 0.7.0

clusters/cl01tl/helm/code-server/values.yaml

@@ -9,7 +9,7 @@ code-server:
         main:
           image:
             repository: ghcr.io/linuxserver/code-server
-            tag: 4.108.1@sha256:e9ed472ff25e12a5ee3562684d073b29e508e472ef54e3558e19bf4ff99ef858
+            tag: 4.107.0@sha256:e2ebedc28ab9e2ebe08093cf7e78515f97822956ff7cbac3d86fb0bd9e4b6bca
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/democratic-csi-synology-iscsi/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: democratic-csi
   repository: https://democratic-csi.github.io/charts/
-  version: 0.15.1
-digest: sha256:e07d76a67023fb523e7d49730330995d0028faba9a4c7c3a6b87c5828921b3c3
-generated: "2026-01-08T20:33:17.610556446Z"
+  version: 0.15.0
+digest: sha256:6fe3d8ad7b990b07ed80a31c75a0a49db8da497c46a956c632615a2093d29d58
+generated: "2025-12-01T20:25:24.972076-06:00"

clusters/cl01tl/helm/democratic-csi-synology-iscsi/Chart.yaml

@@ -15,7 +15,7 @@ maintainers:
 dependencies:
   - name: democratic-csi
     repository: https://democratic-csi.github.io/charts/
-    version: 0.15.1
+    version: 0.15.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 # renovate: github=democratic-csi/democratic-csi
 appVersion: v1.9.4

clusters/cl01tl/helm/directus/Chart.lock

@@ -1,15 +1,15 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 4.6.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.9
+  version: 2.1.4
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.4.5
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.1
-digest: sha256:9ae9e0cb222e7ac2fca2bfe5367a4b011b0c83c1a0f98a01342f37fad62c2fe1
-generated: "2026-01-17T17:30:43.212095428Z"
+  version: 0.5.0
+digest: sha256:7b30608ed2a7641688e5fcfea2aa3b7e4f390f106b19c949f766418137ca1db4
+generated: "2026-01-07T16:04:55.257356422Z"

clusters/cl01tl/helm/directus/Chart.yaml

@@ -20,16 +20,16 @@ dependencies:
   - name: app-template
     alias: directus
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 4.6.0
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.9
+    version: 2.1.4
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.4.5
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
-    version: 1.0.1
+    version: 0.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/directus.png
 # renovate: github=directus/directus

clusters/cl01tl/helm/directus/values.yaml

@@ -9,7 +9,7 @@ directus:
         main:
           image:
             repository: directus/directus
-            tag: 11.14.1
+            tag: 11.14.0
             pullPolicy: IfNotPresent
           env:
             - name: PUBLIC_URL
@@ -217,5 +217,6 @@ redis-replication:
     key: password
   redisReplication:
     clusterSize: 3
-    sentinel:
-      enabled: true
+  redisSentinel:
+    enabled: true
+    clusterSize: 3

clusters/cl01tl/helm/element-web/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: element-web
   repository: https://ananace.gitlab.io/charts
-  version: 1.4.28
+  version: 1.4.26
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.9
-digest: sha256:13c8313cef781f8f003d827de514f261a5875377b35a36db438974144c2baf52
-generated: "2026-01-21T21:02:33.179007776Z"
+  version: 2.1.4
+digest: sha256:640ff55a95ff9fd12716bc76106d13189867832f905eaa393b5f67553bd8c961
+generated: "2025-12-17T19:05:53.062353-06:00"

clusters/cl01tl/helm/element-web/Chart.yaml

@@ -17,11 +17,11 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: element-web
-    version: 1.4.28
+    version: 1.4.26
     repository: https://ananace.gitlab.io/charts
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.9
+    version: 2.1.4
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/element.png
 # renovate: github=element-hq/element-web
 appVersion: v1.12.6

clusters/cl01tl/helm/element-web/values.yaml

@@ -2,7 +2,7 @@ element-web:
   replicaCount: 1
   image:
     repository: vectorim/element-web
-    tag: v1.12.8
+    tag: v1.12.7
     pullPolicy: IfNotPresent
   defaultServer:
     url: https://matrix.alexlebens.dev

clusters/cl01tl/helm/ephemera/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 4.6.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:ae9759dd77c556d6fd16837e2c0c35eb9ecff11a11b40c7c40b55eab9d0e73d0
-generated: "2026-01-18T21:29:37.140884-06:00"
+digest: sha256:42704958b1e19a1de627844a68ae5a5ef5547f2df268c49adaec93b183c9dba7
+generated: "2026-01-07T16:05:17.429175658Z"

clusters/cl01tl/helm/ephemera/Chart.yaml

@@ -0,0 +1,28 @@
+apiVersion: v2
+name: ephemera
+version: 1.0.0
+description: ephemera
+keywords:
+  - ephemera
+  - books
+home: https://wiki.alexlebens.dev/
+sources:
+  - https://github.com/OrwellianEpilogue/ephemera
+  - https://github.com/FlareSolverr/FlareSolverr
+  - https://github.com/orwellianepilogue/ephemera/pkgs/container/ephemera
+  - https://github.com/flaresolverr/FlareSolverr/pkgs/container/flaresolverr
+  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
+maintainers:
+  - name: alexlebens
+dependencies:
+  - name: app-template
+    alias: ephemera
+    repository: https://bjw-s-labs.github.io/helm-charts/
+    version: 4.6.0
+  - name: volsync-target
+    alias: volsync-target-config
+    version: 0.7.0
+    repository: oci://harbor.alexlebens.net/helm-charts
+icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ephemera.png
+# renovate: github=OrwellianEpilogue/ephemera
+appVersion: 1.3.1

clusters/cl01tl/helm/ephemera/templates/external-secret.yaml

@@ -0,0 +1,44 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: ephemera-key-secret
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: ephemera-key-secret
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  data:
+    - secretKey: key
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/ephemera/config
+        metadataPolicy: None
+        property: key
+
+---
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: ephemera-apprise-config
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: ephemera-apprise-config
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  data:
+    - secretKey: ntfy-url
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/ephemera/config
+        metadataPolicy: None
+        property: ntfy-url

clusters/cl01tl/helm/ephemera/templates/persistent-volume-claim.yaml

@@ -0,0 +1,17 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: ephemera-import-nfs-storage
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: ephemera-import-nfs-storage
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  volumeName: ephemera-import-nfs-storage
+  storageClassName: nfs-client
+  accessModes:
+    - ReadWriteMany
+  resources:
+    requests:
+      storage: 1Gi

clusters/cl01tl/helm/ephemera/templates/persistent-volume.yaml

@@ -0,0 +1,23 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: ephemera-import-nfs-storage
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: ephemera-import-nfs-storage
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  persistentVolumeReclaimPolicy: Retain
+  storageClassName: nfs-client
+  capacity:
+    storage: 1Gi
+  accessModes:
+    - ReadWriteMany
+  nfs:
+    path: /volume2/Storage/Books Import
+    server: synologybond.alexlebens.net
+  mountOptions:
+    - vers=4
+    - minorversion=1
+    - noac

clusters/cl01tl/helm/ephemera/values.yaml

@@ -12,10 +12,6 @@ ephemera:
             tag: 2.0.0
             pullPolicy: IfNotPresent
           env:
-            - name: ALLOWED_ORIGINS
-              value: https://ephemera.alexlebens.net
-            - name: BASE_URL
-              value: https://ephemera.alexlebens.net
             - name: AA_BASE_URL
               value: https://annas-archive.org
             # - name: AA_API_KEY
@@ -56,7 +52,7 @@ ephemera:
         apprise-api:
           image:
             repository: caronc/apprise
-            tag: v1.3.1
+            tag: 1.3.0
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/excalidraw/Chart.lock

@@ -1,6 +0,0 @@
-dependencies:
-- name: app-template
-  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
-digest: sha256:e05d84dd266b8b456a8bc7f9a2bb3ab01f4ac926efd1a58cf405b0cdab343d3f
-generated: "2026-01-17T18:27:08.062835-06:00"

clusters/cl01tl/helm/excalidraw/Chart.yaml

@@ -1,21 +0,0 @@
-apiVersion: v2
-name: excalidraw
-version: 1.0.0
-description: Excalidraw
-keywords:
-  - excalidraw
-home: https://wiki.alexlebens.dev/
-sources:
-  - https://github.com/excalidraw/excalidraw
-  - https://hub.docker.com/r/excalidraw/excalidraw
-  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: app-template
-    alias: excalidraw
-    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
-icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/excalidraw.png
-# renovate: github=excalidraw/excalidraw
-appVersion: 0.6.0

clusters/cl01tl/helm/excalidraw/values.yaml

@@ -1,51 +0,0 @@
-excalidraw:
-  controllers:
-    main:
-      type: deployment
-      replicas: 1
-      strategy: Recreate
-      revisionHistoryLimit: 3
-      containers:
-        main:
-          image:
-            repository: excalidraw/excalidraw
-            tag: latest@sha256:3c2513e830bb6e195147c05b34ecf8393d0ba2b1cc86e93b407a5777d6135c6c
-            pullPolicy: IfNotPresent
-          env:
-            - name: NODE_ENV
-              value: production
-            - name: TZ
-              value: America/Chicago
-          resources:
-            requests:
-              cpu: 10m
-              memory: 128Mi
-  service:
-    main:
-      controller: main
-      ports:
-        http:
-          port: 80
-          targetPort: 80
-          protocol: HTTP
-  route:
-    main:
-      kind: HTTPRoute
-      parentRefs:
-        - group: gateway.networking.k8s.io
-          kind: Gateway
-          name: traefik-gateway
-          namespace: traefik
-      hostnames:
-        - excalidraw.alexlebens.net
-      rules:
-        - backendRefs:
-            - group: ''
-              kind: Service
-              name: excalidraw
-              port: 80
-              weight: 100
-          matches:
-            - path:
-                type: PathPrefix
-                value: /

clusters/cl01tl/helm/external-dns/values.yaml

@@ -19,7 +19,7 @@ external-dns-unifi:
     webhook:
       image:
         repository: ghcr.io/kashalls/external-dns-unifi-webhook
-        tag: v0.8.1
+        tag: v0.8.0
       env:
         - name: UNIFI_HOST
           value: https://192.168.1.1

clusters/cl01tl/helm/freshrss/Chart.lock

@@ -1,15 +1,15 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 4.6.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.9
+  version: 2.1.4
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.4.5
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:ded65efcf83f3c0cd3497839a1beddbc616081c286bdac6f584353813e7c8da8
-generated: "2026-01-17T17:31:12.045290099Z"
+digest: sha256:79b74aab75bc2bbe71e3c598484d9fe6a115903106e09bd8b41355c004fd5795
+generated: "2026-01-07T16:05:38.90976743Z"

clusters/cl01tl/helm/freshrss/Chart.yaml

@@ -20,10 +20,10 @@ dependencies:
   - name: app-template
     alias: freshrss
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 4.6.0
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.9
+    version: 2.1.4
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.4.5

clusters/cl01tl/helm/garage/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
-digest: sha256:86536c14fa61870a64540b77f65afae8f4308e41a66eefae7fe85b83bf0df30e
-generated: "2026-01-16T18:46:33.321938614Z"
+  version: 4.6.0
+digest: sha256:2e75cf6b7bd49444935181cba2f3bfe43c0941f97452928ed19e40a70deacdb4
+generated: "2026-01-07T16:06:02.254142944Z"

clusters/cl01tl/helm/garage/Chart.yaml

@@ -17,7 +17,7 @@ dependencies:
   - name: app-template
     alias: garage
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 4.6.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 # renovate: github=deuxfleurs-org/garage
 appVersion: v2.1.0

clusters/cl01tl/helm/garage/values.yaml

@@ -34,7 +34,7 @@ garage:
         debug:
           image:
             repository: ubuntu
-            tag: resolute-20260106.1
+            tag: resolute-20251208
             pullPolicy: IfNotPresent
           command:
             - "sleep"

clusters/cl01tl/helm/gatus/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: gatus
   repository: https://twin.github.io/helm-charts
-  version: 1.4.5
+  version: 1.4.4
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.4.5
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:1325aa896eeba00563056dd8f2d1ce69aad9141be49158a3b17214e1c565ed9f
-generated: "2026-01-21T21:03:11.891167792Z"
+digest: sha256:ee32795b47519463ec6d1219bf4ec16784b1c42d98ae8a330e9650200d11c033
+generated: "2025-12-27T19:45:37.106953505Z"

clusters/cl01tl/helm/gatus/Chart.yaml

@@ -19,7 +19,7 @@ maintainers:
 dependencies:
   - name: gatus
     repository: https://twin.github.io/helm-charts
-    version: 1.4.5
+    version: 1.4.4
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.4.5

clusters/cl01tl/helm/gatus/values.yaml

@@ -131,6 +131,9 @@ gatus:
       - name: jellyfin
         url: https://jellyfin.alexlebens.net
         <<: *defaults
+      - name: fladder
+        url: https://fladder.alexlebens.net
+        <<: *defaults
       - name: tubearchivist
         url: https://tubearchivist.alexlebens.net
         <<: *defaults
@@ -170,9 +173,6 @@ gatus:
       - name: kiwix
         url: https://kiwix.alexlebens.net
         <<: *defaults
-      - name: excalidraw
-        url: https://excalidraw.alexlebens.net
-        <<: *defaults
       - name: gitea
         url: https://gitea.alexlebens.net
         <<: *defaults
@@ -206,6 +206,9 @@ gatus:
       - name: alertmanager
         url: https://alertmanager.alexlebens.net
         <<: *defaults
+      - name: tautulli
+        url: https://tautulli.alexlebens.net
+        <<: *defaults
       - name: jellystat
         url: https://jellystat.alexlebens.net
         <<: *defaults
@@ -310,14 +313,20 @@ gatus:
       - name: lidarr
         url: https://lidarr.alexlebens.net
         <<: *defaults
+      - name: lidatube
+        url: https://lidatube.alexlebens.net
+        <<: *defaults
       - name: yubal-playlist
         url: https://yubal-playlist.alexlebens.net
         <<: *defaults
       - name: slskd
         url: https://slskd.alexlebens.net
         <<: *defaults
-      - name: shelfmark
-        url: https://shelfmark.alexlebens.net
+      - name: ephemera
+        url: https://ephemera.alexlebens.net
+        <<: *defaults
+      - name: listenarr
+        url: https://listenarr.alexlebens.net
         <<: *defaults
       - name: www
         url: https://www.alexlebens.dev

clusters/cl01tl/helm/generic-device-plugin/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: generic-device-plugin
   repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-  version: 0.20.17
-digest: sha256:878766891eee5b4cea332c5eae87fc7fbd7eb7bfea90b408c48666e840b81408
-generated: "2026-01-17T17:39:58.807224966Z"
+  version: 0.20.11
+digest: sha256:638754658519c268ac93bef8dec82332cded8e99b734ef61db45ee63e4b7c6ce
+generated: "2025-12-30T22:23:45.633280279Z"

clusters/cl01tl/helm/generic-device-plugin/Chart.yaml

@@ -15,6 +15,6 @@ maintainers:
 dependencies:
   - name: generic-device-plugin
     repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-    version: 0.20.17
+    version: 0.20.11
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 appVersion: 1.0.0

clusters/cl01tl/helm/gitea/Chart.lock

@@ -7,21 +7,21 @@ dependencies:
   version: 0.2.1
 - name: meilisearch
   repository: https://meilisearch.github.io/meilisearch-kubernetes
-  version: 0.23.0
+  version: 0.20.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.9
+  version: 2.1.4
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.4.5
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.1
+  version: 0.5.0
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.1
+  version: 0.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:d9faaa7a84d8d37c0bb1836dcd64e59368edf957d32a0db568d750f1136d7e4a
-generated: "2026-01-20T16:01:37.816523129Z"
+digest: sha256:6636f6ead8089c19ad702fb58170d942e11150fdda9470f1b97f4f8fa533d00e
+generated: "2025-12-30T16:03:12.004386065Z"

clusters/cl01tl/helm/gitea/Chart.yaml

@@ -32,22 +32,22 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
     version: 0.2.1
   - name: meilisearch
-    version: 0.23.0
+    version: 0.20.0
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.9
+    version: 2.1.4
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.4.5
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     alias: redis-replication-gitea
-    version: 1.0.1
+    version: 0.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     alias: redis-replication-renovate
-    version: 1.0.1
+    version: 0.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-storage

clusters/cl01tl/helm/gitea/values.yaml

@@ -1,7 +1,7 @@
 gitea:
   global:
     imageRegistry: registry.hub.docker.com
-  replicaCount: 3
+  replicaCount: 1
   image:
     repository: gitea/gitea
     tag: 1.25.3
@@ -234,6 +234,9 @@ postgres-18-cluster:
       #   backupName: external
 redis-replication-gitea:
   replicationNameOverride: redis-replication-gitea
+  sentinelNameOverride: redis-sentinel-gitea
+  existingSecret:
+    enabled: false
   redisReplication:
     clusterSize: 3
     resources:
@@ -245,12 +248,17 @@ redis-replication-gitea:
         resources:
           requests:
             storage: 10Gi
-    sentinel:
-      enabled: true
+  redisSentinel:
+    enabled: true
+    clusterSize: 3
 redis-replication-renovate:
   replicationNameOverride: redis-replication-renovate
+  existingSecret:
+    enabled: false
   redisReplication:
     clusterSize: 1
+  redisSentinel:
+    enabled: false
 volsync-target-storage:
   pvcTarget: gitea-shared-storage
   moverSecurityContext:

clusters/cl01tl/helm/grafana-operator/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 7.4.5
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.1
+  version: 0.5.0
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.1
-digest: sha256:62c2a79644690c55ae04eb2706f73cf091c1948583a0e608b72987c0ae5efc2e
-generated: "2026-01-08T16:05:24.786103-06:00"
+  version: 0.5.0
+digest: sha256:1336c44a8a073fcde12d78cffd0bfc0c76367681f3aabc255f5b83e449d87a85
+generated: "2026-01-06T22:02:21.192222965Z"

clusters/cl01tl/helm/grafana-operator/Chart.yaml

@@ -25,11 +25,11 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     alias: redis-replication-unified-alerting
-    version: 1.0.1
+    version: 0.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     alias: redis-replication-remote-cache
-    version: 1.0.1
+    version: 0.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/grafana.png
 # renovate: github=grafana/grafana-operator

clusters/cl01tl/helm/grafana-operator/values.yaml

@@ -56,11 +56,19 @@ postgres-18-cluster:
       #   backupName: external
 redis-replication-unified-alerting:
   replicationNameOverride: redis-replication-unified-alerting
+  sentinelNameOverride: redis-sentinel-unified-alerting
+  existingSecret:
+    enabled: false
   redisReplication:
     clusterSize: 3
-    sentinel:
-      enabled: true
+  redisSentinel:
+    enabled: true
+    clusterSize: 3
 redis-replication-remote-cache:
   replicationNameOverride: redis-replication-remote-cache
+  existingSecret:
+    enabled: false
   redisReplication:
     clusterSize: 1
+  redisSentinel:
+    enabled: false

clusters/cl01tl/helm/harbor/Chart.lock

@@ -7,6 +7,6 @@ dependencies:
   version: 7.4.5
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.1
-digest: sha256:195fb663aa2e08bf0b3929a22c79f7e69426301a120594088f1ecbda9969bdc6
-generated: "2026-01-08T16:05:28.408647-06:00"
+  version: 0.5.0
+digest: sha256:1292d7c6233b48f285cedb81e59299837d4ff6a6845d2bfb08b5753f2c8e3644
+generated: "2025-12-27T19:46:14.927696731Z"

clusters/cl01tl/helm/harbor/Chart.yaml

@@ -24,7 +24,7 @@ dependencies:
     version: 7.4.5
     repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
   - name: redis-replication
-    version: 1.0.1
+    version: 0.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/harbor.png
 # renovate: github=goharbor/harbor

clusters/cl01tl/helm/harbor/values.yaml

@@ -41,12 +41,12 @@ harbor:
   portal:
     image:
       repository: goharbor/harbor-portal
-      tag: v2.14.2
+      tag: v2.14.1
     replicas: 2
   core:
     image:
       repository: goharbor/harbor-core
-      tag: v2.14.2
+      tag: v2.14.1
     replicas: 2
     existingSecret: harbor-secret
     secretName: harbor-secret
@@ -54,7 +54,7 @@ harbor:
   jobservice:
     image:
       repository: goharbor/harbor-jobservice
-      tag: v2.14.2
+      tag: v2.14.1
     replicas: 2
     jobLoggers:
       - stdout
@@ -63,11 +63,11 @@ harbor:
     registry:
       image:
         repository: goharbor/registry-photon
-        tag: v2.14.2
+        tag: v2.14.1
     controller:
       image:
         repository: goharbor/harbor-registryctl
-        tag: v2.14.2
+        tag: v2.14.1
     existingSecret: harbor-secret
     relativeurls: true
     credentials:
@@ -94,7 +94,7 @@ harbor:
   exporter:
     image:
       repository: goharbor/harbor-exporter
-      tag: v2.14.2
+      tag: v2.14.1
     replicas: 2
 postgres-18-cluster:
   mode: recovery
@@ -139,7 +139,10 @@ postgres-18-cluster:
       #   schedule: "0 0 0 * * *"
       #   backupName: external
 redis-replication:
+  existingSecret:
+    enabled: false
   redisReplication:
     clusterSize: 3
-    sentinel:
-      enabled: true
+  redisSentinel:
+    enabled: true
+    clusterSize: 3

clusters/cl01tl/helm/home-assistant/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 4.6.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:2ba5b6579e7296d663fd0dcb7dfb4fea67142413801f6fbc4125a0e731b45210
-generated: "2026-01-16T18:46:42.940648748Z"
+digest: sha256:baeefe09b5379e6b061e194efa697645dd39ef8a5c88dc268b663273db26089d
+generated: "2026-01-07T16:06:23.264463262Z"

clusters/cl01tl/helm/home-assistant/Chart.yaml

@@ -18,7 +18,7 @@ dependencies:
   - name: app-template
     alias: home-assistant
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 4.6.0
   - name: volsync-target
     alias: volsync-target-config
     version: 0.7.0

clusters/cl01tl/helm/home-assistant/values.yaml

@@ -9,7 +9,7 @@ home-assistant:
         main:
           image:
             repository: ghcr.io/home-assistant/home-assistant
-            tag: 2026.1.2
+            tag: 2026.1.0
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -21,7 +21,7 @@ home-assistant:
         code-server:
           image:
             repository: ghcr.io/linuxserver/code-server
-            tag: 4.108.1@sha256:e9ed472ff25e12a5ee3562684d073b29e508e472ef54e3558e19bf4ff99ef858
+            tag: 4.107.0@sha256:e2ebedc28ab9e2ebe08093cf7e78515f97822956ff7cbac3d86fb0bd9e4b6bca
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/homepage-dev/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 4.6.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.9
-digest: sha256:3dd7439a8874fcf8b12754907f187149287a2db04c5b9a595d32e6b64a5482db
-generated: "2026-01-17T17:31:46.477375094Z"
+  version: 2.1.4
+digest: sha256:4757805271f5c031f763b564b4a3af8a47819260fa29b3d4cca575cb95b42a9a
+generated: "2026-01-07T16:06:47.60716981Z"

clusters/cl01tl/helm/homepage-dev/Chart.yaml

@@ -18,10 +18,10 @@ dependencies:
   - name: app-template
     alias: homepage
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 4.6.0
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.9
+    version: 2.1.4
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/homepage.png
 # renovate: github=gethomepage/homepage
 appVersion: v1.8.0

clusters/cl01tl/helm/homepage-dev/values.yaml

@@ -11,7 +11,7 @@ homepage:
         main:
           image:
             repository: ghcr.io/gethomepage/homepage
-            tag: v1.9.0
+            tag: v1.8.0
             pullPolicy: IfNotPresent
           env:
             - name: HOMEPAGE_ALLOWED_HOSTS

clusters/cl01tl/helm/homepage/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
-digest: sha256:1f6cc724b7c88b5209d893b4b3c914e4064a5450e9bb6ca89ef5642199020f2b
-generated: "2026-01-16T18:47:06.186790637Z"
+  version: 4.6.0
+digest: sha256:56b034f03577c7516f9eebd3659b613d9a229090945aacfd710def728d945a92
+generated: "2026-01-07T16:07:07.252632221Z"

clusters/cl01tl/helm/homepage/Chart.yaml

@@ -16,7 +16,7 @@ dependencies:
   - name: app-template
     alias: homepage
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 4.6.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/homepage.png
 # renovate: github=gethomepage/homepage
 appVersion: v1.8.0

clusters/cl01tl/helm/homepage/values.yaml

@@ -15,7 +15,7 @@ homepage:
         main:
           image:
             repository: ghcr.io/gethomepage/homepage
-            tag: v1.9.0
+            tag: v1.8.0
             pullPolicy: IfNotPresent
           env:
             - name: HOMEPAGE_ALLOWED_HOSTS
@@ -147,6 +147,12 @@ homepage:
                   href: https://yamtrack.alexlebens.net
                   siteMonitor: http://yamtrack.yamtrack:80
                   statusStyle: dot
+              - Movies and TV:
+                  icon: sh-fladder.webp
+                  description: Fladder (Alt Jellyfin UI)
+                  href: https://fladder.alexlebens.net
+                  siteMonitor: http://fladder.jellyfin:80
+                  statusStyle: dot
               - Movies and TV:
                   icon: sh-jellyfin.webp
                   description: Jellyfin
@@ -281,12 +287,6 @@ homepage:
                   href: https://kiwix.alexlebens.net
                   siteMonitor: http://kiwix.kiwix:80
                   statusStyle: dot
-              - Draw:
-                  icon: sh-excalidraw.webp
-                  description: Excalidraw
-                  href: https://excalidraw.alexlebens.net
-                  siteMonitor: http://excalidraw.excalidraw:80
-                  statusStyle: dot
           - Code:
               - Code (Public):
                   icon: sh-gitea.webp
@@ -394,6 +394,12 @@ homepage:
                         query: prometheus_tsdb_storage_blocks_bytes
                         format:
                           type: bytes
+              - Tautulli:
+                  icon: sh-tautulli.webp
+                  description: Plex Monitoring
+                  href: https://tautulli.alexlebens.net
+                  siteMonitor: http://tautulli.tautulli:80
+                  statusStyle: dot
               - Jellystat:
                   icon: sh-jellystat.webp
                   description: Jellyfin Monitoring
@@ -661,6 +667,12 @@ homepage:
                   href: https://yubal-playlist.alexlebens.net
                   siteMonitor: http://yubal-playlist.yubal-playlist:80
                   statusStyle: dot
+              - LidaTube:
+                  icon: sh-lidatube.webp
+                  description: Searches for Music
+                  href: https://lidatube.alexlebens.net
+                  siteMonitor: http://lidatube.lidatube:80
+                  statusStyle: dot
               - slskd:
                   icon: sh-slskd.webp
                   description: slskd
@@ -668,11 +680,17 @@ homepage:
                   siteMonitor: http://slskd.slskd:5030
                   statusStyle: dot
           - Books:
-              - Shelfmark:
-                  icon: sh-shelfmark.webp
+              - Ephemera:
+                  icon: sh-ephemera.webp
                   description: Books
-                  href: https://shelfmark.alexlebens.net
-                  siteMonitor: http://shelfmark.shelfmark:80
+                  href: https://ephemera.alexlebens.net
+                  siteMonitor: http://ephemera.ephemera:80
+                  statusStyle: dot
+              - Listenarr:
+                  icon: sh-audiobookrequest.webp
+                  description: Audiobooks
+                  href: https://listenarr.alexlebens.net
+                  siteMonitor: http://listenarr.listenarr:80
                   statusStyle: dot
           - Other Homes:
               - Dev:

clusters/cl01tl/helm/huntarr/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 4.6.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:a3df74f75bbc4aa303a70031732c8727a19d516deb106996c035e30e8ef103c4
-generated: "2026-01-16T18:47:16.606690576Z"
+digest: sha256:f47bf91e2da0bdc60d0d90edcab3369d15d56cd25ff92e56b7c52b08ace0a959
+generated: "2026-01-07T16:07:25.946806985Z"

clusters/cl01tl/helm/huntarr/Chart.yaml

@@ -16,7 +16,7 @@ dependencies:
   - name: app-template
     alias: huntarr
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 4.6.0
   - name: volsync-target
     alias: volsync-target-config
     version: 0.7.0

clusters/cl01tl/helm/huntarr/values.yaml

@@ -9,7 +9,7 @@ huntarr:
         main:
           image:
             repository: ghcr.io/plexguide/huntarr
-            tag: 8.2.11
+            tag: 8.2.10
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/immich/Chart.lock

@@ -1,15 +1,15 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 4.6.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.4.5
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.1
+  version: 0.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:f72a93b81d636911a34bae2cf88f77fbe8c793a1cbe6371996bb0c907b7c8ac3
-generated: "2026-01-16T18:47:28.749588457Z"
+digest: sha256:6f960b8d9602ff621caee41fdf3d185b848c17dde882aa299cd8db76e45ea38a
+generated: "2026-01-07T16:07:44.317069622Z"

clusters/cl01tl/helm/immich/Chart.yaml

@@ -17,13 +17,13 @@ dependencies:
   - name: app-template
     alias: immich
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 4.6.0
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.4.5
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
-    version: 1.0.1
+    version: 0.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data

clusters/cl01tl/helm/immich/values.yaml

@@ -223,10 +223,13 @@ postgres-18-cluster:
       #   backupName: external
 
 redis-replication:
+  existingSecret:
+    enabled: false
   redisReplication:
     clusterSize: 3
-    sentinel:
-      enabled: true
+  redisSentinel:
+    enabled: true
+    clusterSize: 3
 volsync-target-data:
   pvcTarget: immich
   local:

clusters/cl01tl/helm/jellyfin/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 4.6.0
 - name: meilisearch
   repository: https://meilisearch.github.io/meilisearch-kubernetes
-  version: 0.23.0
+  version: 0.20.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:c31127c41d18fc2dbd0cd89968ea7df28ddc2548e629c5861124eeaa5ba6b246
-generated: "2026-01-20T16:01:53.343188952Z"
+digest: sha256:d9fcbbc6a95635c81ece57f7b1ab15a2505afed2bc52aef754431a9cedd06ae0
+generated: "2026-01-07T16:08:05.338907704Z"

clusters/cl01tl/helm/jellyfin/Chart.yaml

@@ -23,9 +23,9 @@ dependencies:
   - name: app-template
     alias: jellyfin
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 4.6.0
   - name: meilisearch
-    version: 0.23.0
+    version: 0.20.0
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/jellyfin/values.yaml

@@ -9,7 +9,7 @@ jellyfin:
         main:
           image:
             repository: ghcr.io/jellyfin/jellyfin
-            tag: 10.11.6
+            tag: 10.11.5
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -39,6 +39,20 @@ jellyfin:
                 secretKeyRef:
                   name: jellyfin-exporter-secret
                   key: token
+    fladder:
+      type: deployment
+      replicas: 1
+      strategy: Recreate
+      revisionHistoryLimit: 3
+      containers:
+        main:
+          image:
+            repository: ghcr.io/donutware/fladder
+            tag: v0.9.0
+            pullPolicy: IfNotPresent
+          env:
+            - name: BASE_URL
+              value: https://jellyfin.alexlebens.net/
   service:
     main:
       forceRename: jellyfin
@@ -52,6 +66,14 @@ jellyfin:
           port: 9594
           targetPort: 9594
           protocol: HTTP
+    fladder:
+      forceRename: fladder
+      controller: fladder
+      ports:
+        http:
+          port: 80
+          targetPort: 80
+          protocol: HTTP
   serviceMonitor:
     main:
       selector:
@@ -86,6 +108,26 @@ jellyfin:
             - path:
                 type: PathPrefix
                 value: /
+    fladder:
+      kind: HTTPRoute
+      parentRefs:
+        - group: gateway.networking.k8s.io
+          kind: Gateway
+          name: traefik-gateway
+          namespace: traefik
+      hostnames:
+        - fladder.alexlebens.net
+      rules:
+        - backendRefs:
+            - group: ''
+              kind: Service
+              name: fladder
+              port: 80
+              weight: 100
+          matches:
+            - path:
+                type: PathPrefix
+                value: /
   persistence:
     config:
       forceRename: jellyfin-config

clusters/cl01tl/helm/jellystat/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 4.6.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.4.5
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:928455407a1a4edef66f133342b0a5c0bc8e7cd2eeabdf5995615883114badef
-generated: "2026-01-16T18:47:56.158342425Z"
+digest: sha256:fd2cff20fcb1f3878d24395ac1dc038fef5d6aca819b8a4ddd4881a236633118
+generated: "2026-01-07T16:08:24.365150939Z"

clusters/cl01tl/helm/jellystat/Chart.yaml

@@ -18,7 +18,7 @@ dependencies:
   - name: app-template
     alias: jellystat
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 4.6.0
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.4.5

clusters/cl01tl/helm/karakeep/Chart.lock

@@ -1,15 +1,15 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 4.6.0
 - name: meilisearch
   repository: https://meilisearch.github.io/meilisearch-kubernetes
-  version: 0.23.0
+  version: 0.20.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.1.9
+  version: 2.1.4
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:526ebcfdf6c7e99c16562dc841ea96c602dd3dd90fc7a1fe6bd2d8147b71ecca
-generated: "2026-01-20T16:02:05.482993485Z"
+digest: sha256:6f39f9c04161444d4ca88e8d69e6b809523ad51a2bbe3d19c4aef3d6c8f23f3d
+generated: "2026-01-07T16:08:39.695436116Z"

clusters/cl01tl/helm/karakeep/Chart.yaml

@@ -20,13 +20,13 @@ dependencies:
   - name: app-template
     alias: karakeep
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 4.6.0
   - name: meilisearch
-    version: 0.23.0
+    version: 0.20.0
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.1.9
+    version: 2.1.4
   - name: volsync-target
     alias: volsync-target-data
     version: 0.7.0

clusters/cl01tl/helm/kiwix/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
-digest: sha256:aab81291201585c1169bd5d160768441b7c26670a78bcbefca6a781be0924576
-generated: "2026-01-16T18:48:20.708363828Z"
+  version: 4.6.0
+digest: sha256:3610d09b2d539fb7659b72134b3caec24c019baeeaf7e6ad95d9095fa5781036
+generated: "2026-01-07T16:08:56.687353235Z"

clusters/cl01tl/helm/kiwix/Chart.yaml

@@ -16,7 +16,7 @@ dependencies:
   - name: app-template
     alias: kiwix
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 4.6.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kiwix-dark.png
 # renovate: github=kiwix/kiwix-tools
 appVersion: 3.8.1

clusters/cl01tl/helm/komodo/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 4.6.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.4.5
-digest: sha256:f5b2b65ad217cc283e03c4dba42afa29c65d9d241d65f2d601bfdbd598b2a22e
-generated: "2026-01-16T18:48:31.647540475Z"
+digest: sha256:1a98d15491fe5b9e7de57076281583d42f2f7d3884ce25742c5d3c50a81ef2ce
+generated: "2026-01-07T16:09:11.923124552Z"

clusters/cl01tl/helm/komodo/Chart.yaml

@@ -20,7 +20,7 @@ dependencies:
   - name: app-template
     alias: komodo
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 4.6.0
   - name: postgres-cluster
     alias: postgresql-17-fdb-cluster
     version: 7.4.5

clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: kube-prometheus-stack
   repository: oci://ghcr.io/prometheus-community/charts
-  version: 81.2.0
+  version: 80.13.0
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
+  version: 4.6.0
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.1
-digest: sha256:540766bd8f4538d7257bc232e665c4dceab088ef1dc760849fe4a0a635dfc4ab
-generated: "2026-01-21T21:05:34.139720713Z"
+  version: 0.5.0
+digest: sha256:2cfdc65daf935996789b455aae2de6b4878c0a991f7b9354006aaa42adc5317e
+generated: "2026-01-07T16:09:30.390264104Z"

clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml

@@ -20,14 +20,14 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: kube-prometheus-stack
-    version: 81.2.0
+    version: 80.13.0
     repository: oci://ghcr.io/prometheus-community/charts
   - name: app-template
     alias: ntfy-alertmanager
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 4.6.0
   - name: redis-replication
-    version: 1.0.1
+    version: 0.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/prometheus.png
 # renovate: github=prometheus-operator/prometheus-operator

clusters/cl01tl/helm/kube-prometheus-stack/values.yaml

@@ -171,16 +171,15 @@ ntfy-alertmanager:
               mountPropagation: None
               subPath: config
 redis-replication:
+  existingSecret:
+    enabled: false
   redisReplication:
     clusterSize: 3
-    resources:
-      requests:
-        cpu: 20m
-        memory: 32Mi
     volumeClaimTemplate:
       spec:
         resources:
           requests:
             storage: 10Gi
-    sentinel:
-      enabled: true
+  redisSentinel:
+    enabled: true
+    clusterSize: 3

clusters/cl01tl/helm/kubelet-serving-cert-approver/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
-digest: sha256:c0c65eaac1dfcc33b70a59d12319dee96ccd28cdd9fb201cd091f1802b0b2892
-generated: "2026-01-16T18:48:53.976469964Z"
+  version: 4.6.0
+digest: sha256:2eb7309a6a72fddb7e85e1fbbc956dd1e57a10fc26328ff6e724ec1d33193bcc
+generated: "2026-01-07T16:09:49.87010962Z"

clusters/cl01tl/helm/kubelet-serving-cert-approver/Chart.yaml

@@ -17,7 +17,7 @@ dependencies:
   - name: app-template
     alias: kubelet-serving-cert-approver
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 4.6.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 # renovate: github=alex1989hu/kubelet-serving-cert-approver
 appVersion: 0.10.1

clusters/cl01tl/helm/kubelet-serving-cert-approver/values.yaml

@@ -38,7 +38,7 @@ kubelet-serving-cert-approver:
         main:
           image:
             repository: ghcr.io/alex1989hu/kubelet-serving-cert-approver
-            tag: 0.10.2
+            tag: 0.10.1
             pullPolicy: Always
           args:
             - serve

clusters/cl01tl/helm/kubernetes-cloudflare-ddns/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
-digest: sha256:6cba91672ca98d62208b3ff7cb1b7ffaaf44140bb3a54196c80126a82a0d2430
-generated: "2026-01-16T18:49:04.125289391Z"
+  version: 4.6.0
+digest: sha256:0ea3c66c1e52075913ca2931948211cbce6f006d50fcec95a9a318715a85c4af
+generated: "2026-01-07T16:10:10.966993943Z"

clusters/cl01tl/helm/kubernetes-cloudflare-ddns/Chart.yaml

@@ -18,7 +18,7 @@ dependencies:
   - name: app-template
     alias: kubernetes-cloudflare-ddns
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
+    version: 4.6.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/cloudflare.png
 # renovate: github=kubitodev/kubernetes-cloudflare-ddns
 appVersion: v2.0.0