chore(deps): update harbor.alexlebens.net/images/site-profile docker tag to v3.14.0

clusters/cl01tl/helm/blocky/values.yaml

@@ -135,7 +135,6 @@ blocky:
               komodo                          IN      CNAME   traefik-cl01tl
               lidarr                          IN      CNAME   traefik-cl01tl
               mail                            IN      CNAME   traefik-cl01tl
-              medialyze                       IN      CNAME   traefik-cl01tl
               movie-roulette                  IN      CNAME   traefik-cl01tl
               music-grabber                   IN      CNAME   traefik-cl01tl
               navidrome                       IN      CNAME   traefik-cl01tl

clusters/cl01tl/helm/garage/values.yaml

@@ -34,7 +34,7 @@ garage:
         debug:
           image:
             repository: ubuntu
-            tag: resolute-20260312
+            tag: resolute-20260108
             pullPolicy: IfNotPresent
           command:
             - "sleep"

clusters/cl01tl/helm/gatus/values.yaml

@@ -227,9 +227,6 @@ gatus:
       - name: jellystat
         url: https://jellystat.alexlebens.net
         <<: *defaults
-      - name: medialyze
-        url: https://medialyze.alexlebens.net
-        <<: *defaults
       - name: authentik
         url: https://authentik.alexlebens.net
         <<: *defaults

clusters/cl01tl/helm/grafana-operator/Chart.lock

@@ -1,7 +1,7 @@
 dependencies:
 - name: grafana-operator
   repository: https://grafana.github.io/helm-charts
-  version: 5.22.2
+  version: 5.22.1
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.10.0
@@ -11,5 +11,5 @@ dependencies:
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.4.0
-digest: sha256:a3bf183bcecb4d4b5354fe91a549075997dccb41c193da9daec9ccbe4d659fe2
+digest: sha256:9cbba52d093e40b20917af87263e1fb0e478912440f660543f3527e70452edc7
-generated: "2026-03-18T10:04:15.165729555Z"
+generated: "2026-03-15T20:05:59.855514102Z"

clusters/cl01tl/helm/grafana-operator/Chart.yaml

@@ -17,7 +17,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: grafana-operator
-    version: 5.22.2
+    version: 5.22.1
     repository: https://grafana.github.io/helm-charts
   - name: postgres-cluster
     alias: postgres-18-cluster
@@ -33,4 +33,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/grafana.png
 # renovate: datasource=github-releases depName=grafana/grafana-operator
-appVersion: v5.22.2
+appVersion: v5.22.1

clusters/cl01tl/helm/homepage/values.yaml

@@ -477,12 +477,6 @@ homepage:
                   href: https://jellystat.alexlebens.net
                   siteMonitor: http://jellystat.jellystat:80
                   statusStyle: dot
-              - MediaLyze:
-                  icon: https://raw.githubusercontent.com/frederikemmer/MediaLyze/d8f69c0628bac7c047b90f91a66341648029c273/frontend/public/favicon.svg
-                  description: Jellyfin Media Monitoring
-                  href: https://medialyze.alexlebens.net
-                  siteMonitor: http://medialyze.medialyze:80
-                  statusStyle: dot
           - Services:
               - Auth (Public):
                   icon: sh-authentik.webp

clusters/cl01tl/helm/libation/values.yaml

@@ -35,7 +35,7 @@ libation:
         main:
           image:
             repository: ubuntu
-            tag: resolute-20260312
+            tag: resolute-20260108
             pullPolicy: IfNotPresent
           command:
             - "sleep"

clusters/cl01tl/helm/medialyze/Chart.lock

@@ -1,6 +0,0 @@
-dependencies:
-- name: app-template
-  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
-digest: sha256:17ac9bc0cc2eac395c630c22ab095e3e34e5d75a34523c3f39629ca1c56ecbc8
-generated: "2026-03-17T17:46:15.885193-05:00"

clusters/cl01tl/helm/medialyze/Chart.yaml

@@ -1,22 +0,0 @@
-apiVersion: v2
-name: medialyze
-version: 1.0.0
-description: MediaLyze
-keywords:
-  - medialyze
-  - jellyfin
-home: https://wiki.alexlebens.dev/
-sources:
-  - https://github.com/frederikemmer/MediaLyze
-  - https://github.com/frederikemmer/MediaLyze/pkgs/container/medialyze
-  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: app-template
-    alias: medialyze
-    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
-icon: https://raw.githubusercontent.com/frederikemmer/MediaLyze/d8f69c0628bac7c047b90f91a66341648029c273/frontend/public/favicon.svg
-# renovate: datasource=github-releases depName=frederikemmer/MediaLyze
-appVersion: 0.2.1

clusters/cl01tl/helm/medialyze/templates/persistent-volume-claim.yaml

@@ -1,17 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: medialyze-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: medialyze-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  volumeName: medialyze-nfs-storage
-  storageClassName: nfs-client
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 1Gi

clusters/cl01tl/helm/medialyze/templates/persistent-volume.yaml

@@ -1,23 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: medialyze-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: medialyze-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: nfs-client
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  nfs:
-    path: /volume2/Storage
-    server: synologybond.alexlebens.net
-  mountOptions:
-    - vers=4
-    - minorversion=1
-    - noac

clusters/cl01tl/helm/medialyze/values.yaml

@@ -1,85 +0,0 @@
-medialyze:
-  controllers:
-    main:
-      type: deployment
-      replicas: 1
-      strategy: Recreate
-      revisionHistoryLimit: 3
-      containers:
-        main:
-          image:
-            repository: ghcr.io/frederikemmer/medialyze
-            tag: 0.2.1
-            pullPolicy: IfNotPresent
-          env:
-            - name: HOST_PORT
-              value: 8080
-            - name: SCAN_RUNTIME_WORKER_COUNT
-              value: 2
-            - name: TZ
-              value: America/Chicago
-            - name: MEDIA_HOST_DIR
-              value: /media
-          resources:
-            requests:
-              cpu: 10m
-              memory: 128Mi
-  service:
-    main:
-      controller: main
-      ports:
-        http:
-          port: 80
-          targetPort: 8080
-          protocol: HTTP
-  route:
-    main:
-      kind: HTTPRoute
-      parentRefs:
-        - group: gateway.networking.k8s.io
-          kind: Gateway
-          name: traefik-gateway
-          namespace: traefik
-      hostnames:
-        - medialyze.alexlebens.net
-      rules:
-        - backendRefs:
-            - group: ''
-              kind: Service
-              name: medialyze
-              port: 80
-              weight: 100
-          matches:
-            - path:
-                type: PathPrefix
-                value: /
-  persistence:
-    data:
-      forceRename: medialyze-data
-      storageClass: ceph-block
-      accessMode: ReadWriteOnce
-      size: 1Gi
-      retain: true
-      advancedMounts:
-        main:
-          main:
-            - path: /config
-              readOnly: false
-    media:
-      existingClaim: medialyze-nfs-storage
-      advancedMounts:
-        main:
-          main:
-            - path: /media
-              readOnly: true
-volsync-target-data:
-  pvcTarget: medialyze-data
-  local:
-    enabled: true
-    schedule: 36 11 * * *
-  remote:
-    enabled: true
-    schedule: 36 12 * * *
-  external:
-    enabled: true
-    schedule: 36 14 * * *

clusters/cl01tl/helm/ntfy/Chart.yaml

@@ -20,4 +20,4 @@ dependencies:
     version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ntfy.png
 # renovate: datasource=github-releases depName=binwiederhier/ntfy
-appVersion: 2.19.2
+appVersion: 2.19.1

clusters/cl01tl/helm/ntfy/values.yaml

@@ -9,7 +9,7 @@ ntfy:
         main:
           image:
             repository: binwiederhier/ntfy
-            tag: v2.19.2
+            tag: v2.19.1
             pullPolicy: IfNotPresent
           args: ["serve"]
           env:

clusters/cl01tl/helm/ollama/Chart.yaml

@@ -31,4 +31,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ollama.png
 # renovate: datasource=github-releases depName=ollama/ollama
-appVersion: 0.18.1
+appVersion: 0.18.0

clusters/cl01tl/helm/ollama/values.yaml

@@ -22,7 +22,7 @@ ollama:
         main:
           image:
             repository: ollama/ollama
-            tag: 0.18.1
+            tag: 0.18.0
             pullPolicy: IfNotPresent
           env:
             - name: OLLAMA_KEEP_ALIVE
@@ -58,7 +58,7 @@ ollama:
         main:
           image:
             repository: ollama/ollama
-            tag: 0.18.1
+            tag: 0.18.0
             pullPolicy: IfNotPresent
           env:
             - name: OLLAMA_KEEP_ALIVE
@@ -94,7 +94,7 @@ ollama:
         main:
           image:
             repository: ollama/ollama
-            tag: 0.18.1
+            tag: 0.18.0
             pullPolicy: IfNotPresent
           env:
             - name: OLLAMA_KEEP_ALIVE

clusters/cl01tl/helm/talos/values.yaml

@@ -69,7 +69,7 @@ etcd-backup:
         s3-prune:
           image:
             repository: d3fk/s3cmd
-            tag: latest@sha256:e3965f8205dfb96fb00e66cee54a0d171f1829a3cc6a1bbb980ab076730e54be
+            tag: latest@sha256:a41234c2b43d6cfa0d51c9523a2d7925f7f21297a41d69932946c3e364d32b5e
             pullPolicy: IfNotPresent
           command:
             - /bin/sh
@@ -155,7 +155,7 @@ etcd-backup:
         s3-prune:
           image:
             repository: d3fk/s3cmd
-            tag: latest@sha256:e3965f8205dfb96fb00e66cee54a0d171f1829a3cc6a1bbb980ab076730e54be
+            tag: latest@sha256:a41234c2b43d6cfa0d51c9523a2d7925f7f21297a41d69932946c3e364d32b5e
             pullPolicy: IfNotPresent
           command:
             - /bin/sh
@@ -241,7 +241,7 @@ etcd-backup:
         s3-prune:
           image:
             repository: d3fk/s3cmd
-            tag: latest@sha256:e3965f8205dfb96fb00e66cee54a0d171f1829a3cc6a1bbb980ab076730e54be
+            tag: latest@sha256:a41234c2b43d6cfa0d51c9523a2d7925f7f21297a41d69932946c3e364d32b5e
             pullPolicy: IfNotPresent
           command:
             - /bin/sh

clusters/cl01tl/helm/trivy/values.yaml

@@ -2,13 +2,13 @@ trivy-operator:
   targetWorkloads: "pod,replicaset,replicationcontroller,statefulset,daemonset,cronjob,job"
   operator:
     replicas: 1
-    scanJobsConcurrentLimit: 1
+    scanJobsConcurrentLimit: 3
     vulnerabilityScannerEnabled: true
-    sbomGenerationEnabled: false
+    sbomGenerationEnabled: true
-    clusterSbomCacheEnabled: false
+    clusterSbomCacheEnabled: true
     configAuditScannerEnabled: true
     rbacAssessmentScannerEnabled: true
-    infraAssessmentScannerEnabled: false
+    infraAssessmentScannerEnabled: true
     clusterComplianceEnabled: false
     vulnerabilityScannerScanOnlyCurrentRevisions: true
     accessGlobalSecretsAndServiceAccount: true
@@ -47,10 +47,6 @@ trivy-operator:
           memory: 512Mi
       replicas: 1
   nodeCollector:
-    tolerations:
-      - key: node-role.kubernetes.io/control-plane
-        operator: Exists
-        effect: NoSchedule
     volumeMounts:
       - name: var-lib-etcd
         mountPath: /var/lib/etcd

clusters/cl01tl/helm/vault/values.yaml

@@ -187,7 +187,7 @@ snapshot:
         s3-backup-local:
           image:
             repository: d3fk/s3cmd
-            tag: latest@sha256:e3965f8205dfb96fb00e66cee54a0d171f1829a3cc6a1bbb980ab076730e54be
+            tag: latest@sha256:a41234c2b43d6cfa0d51c9523a2d7925f7f21297a41d69932946c3e364d32b5e
             pullPolicy: IfNotPresent
           command:
             - /bin/sh
@@ -208,7 +208,7 @@ snapshot:
         s3-backup-remote:
           image:
             repository: d3fk/s3cmd
-            tag: latest@sha256:e3965f8205dfb96fb00e66cee54a0d171f1829a3cc6a1bbb980ab076730e54be
+            tag: latest@sha256:a41234c2b43d6cfa0d51c9523a2d7925f7f21297a41d69932946c3e364d32b5e
             pullPolicy: IfNotPresent
           command:
             - /bin/sh
@@ -229,7 +229,7 @@ snapshot:
         s3-backup-external:
           image:
             repository: d3fk/s3cmd
-            tag: latest@sha256:e3965f8205dfb96fb00e66cee54a0d171f1829a3cc6a1bbb980ab076730e54be
+            tag: latest@sha256:a41234c2b43d6cfa0d51c9523a2d7925f7f21297a41d69932946c3e364d32b5e
             pullPolicy: IfNotPresent
           command:
             - /bin/sh

hosts/ps08rp/blocky/config.yml

@@ -110,7 +110,6 @@ customDNS:
     komodo                          IN      CNAME   traefik-cl01tl
     lidarr                          IN      CNAME   traefik-cl01tl
     mail                            IN      CNAME   traefik-cl01tl
-    medialyze                       IN      CNAME   traefik-cl01tl
     movie-roulette                  IN      CNAME   traefik-cl01tl
     music-grabber                   IN      CNAME   traefik-cl01tl
     navidrome                       IN      CNAME   traefik-cl01tl

hosts/ps09rp/blocky/config.yml

@@ -131,7 +131,6 @@ customDNS:
     komodo                          IN      CNAME   traefik-cl01tl
     lidarr                          IN      CNAME   traefik-cl01tl
     mail                            IN      CNAME   traefik-cl01tl
-    medialyze                       IN      CNAME   traefik-cl01tl
     movie-roulette                  IN      CNAME   traefik-cl01tl
     music-grabber                   IN      CNAME   traefik-cl01tl
     navidrome                       IN      CNAME   traefik-cl01tl