chore(deps): update deluan/navidrome docker tag to v0.60.0

clusters/cl01tl/helm/argo-workflows/Chart.yaml

@@ -29,4 +29,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 # renovate: datasource=github-releases depName=argoproj/argo-workflows
-appVersion: v4.0.0
+appVersion: v3.7.9

clusters/cl01tl/helm/argocd/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: argo-cd
   repository: https://argoproj.github.io/argo-helm
-  version: 9.4.1
+  version: 9.4.0
-digest: sha256:6686031538b67a4b79a89b90de06199758c4718a9b7e0a0e6863a5be8964ed9d
+digest: sha256:9313d45f1c8c22f25b445b10c3befde61bc7d6e3d9c7f49d857c0abf641b1636
-generated: "2026-02-05T20:06:46.998124019Z"
+generated: "2026-02-02T23:52:13.741194572Z"

clusters/cl01tl/helm/argocd/Chart.yaml

@@ -15,7 +15,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: argo-cd
-    version: 9.4.1
+    version: 9.4.0
     repository: https://argoproj.github.io/argo-helm
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 # renovate: datasource=github-releases depName=argoproj/argo-cd

clusters/cl01tl/helm/authentik/Chart.lock

@@ -10,6 +10,6 @@ dependencies:
   version: 7.5.0
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.4
+  version: 1.0.2
-digest: sha256:61110db108493eac486715c324a2233d3cd056ea623f8e5c5deda9bd828964e6
+digest: sha256:b0b8ed80dc7dcabb07c445ed8269e58c8b35188f755bea743bad9e86998fa336
-generated: "2026-02-03T20:35:32.880480215Z"
+generated: "2026-02-03T03:41:17.375019694Z"

clusters/cl01tl/helm/authentik/Chart.yaml

@@ -31,7 +31,7 @@ dependencies:
     version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
-    version: 1.0.4
+    version: 1.0.2
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/authentik.png
 # renovate: datasource=github-releases depName=goauthentik/authentik

clusters/cl01tl/helm/bazarr/values.yaml

@@ -15,7 +15,7 @@ bazarr:
         main:
           image:
             repository: ghcr.io/linuxserver/bazarr
-            tag: 1.5.5@sha256:d40ee61030a9afafddfdd58d160281b865bfcad7cb66e920116fd6fd40668cbb
+            tag: 1.5.5@sha256:f01f718d73be5b468da1ba03e6740c5584769df9d3fedef9f4a3c7eaf90c243f
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/blocky/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.6.2
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.4
+  version: 1.0.2
-digest: sha256:fe577fe52ae34540b1610c598f149eab49e44c640ed717cea5ad8fdf229e37f2
+digest: sha256:ab1e10670350a6014a2a838800f39f6bb869e1def78347c1e5c4ab1624acf33b
-generated: "2026-02-03T20:35:43.744062575Z"
+generated: "2026-02-03T00:23:54.901383454Z"

clusters/cl01tl/helm/blocky/Chart.yaml

@@ -18,7 +18,7 @@ dependencies:
     repository: https://bjw-s-labs.github.io/helm-charts/
     version: 4.6.2
   - name: redis-replication
-    version: 1.0.4
+    version: 1.0.2
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/blocky.png
 # renovate: datasource=github-releases depName=0xerr0r/blocky

clusters/cl01tl/helm/cilium/Chart.lock

@@ -3,4 +3,4 @@ dependencies:
   repository: https://helm.cilium.io/
   version: 1.18.6
 digest: sha256:8ea328ac238524b5b423e6289f5e25d05ef64e6aa19cfd5de238f1d5dd533e9b
-generated: "2026-02-05T12:00:20.15778-06:00"
+generated: "2026-01-14T11:02:31.272963463Z"

clusters/cl01tl/helm/cilium/Chart.yaml

@@ -19,4 +19,4 @@ dependencies:
     repository: https://helm.cilium.io/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/cilium.png
 # renovate: datasource=github-releases depName=cilium/cilium
-appVersion: 1.19.0
+appVersion: 1.18.6

clusters/cl01tl/helm/cilium/templates/cilium-bgp-advertisement.yaml

@@ -1,4 +1,4 @@
-# apiVersion: cilium.io/v2
+# apiVersion: cilium.io/v2alpha1
 # kind: CiliumBGPAdvertisement
 # metadata:
 #   name: cilium-bgp-advertisements

clusters/cl01tl/helm/cilium/templates/cilium-bgp-cluster-config.yaml

@@ -1,4 +1,4 @@
-# apiVersion: cilium.io/v2
+# apiVersion: cilium.io/v2alpha1
 # kind: CiliumBGPClusterConfig
 # metadata:
 #   name: cilium-bgp

clusters/cl01tl/helm/cilium/templates/cilium-bgp-peer-config.yaml

@@ -1,4 +1,4 @@
-# apiVersion: cilium.io/v2
+# apiVersion: cilium.io/v2alpha1
 # kind: CiliumBGPPeerConfig
 # metadata:
 #   name: cilium-peer

clusters/cl01tl/helm/cilium/templates/cilium-l2-announcement-policy.yaml

@@ -1,16 +1,17 @@
 # apiVersion: "cilium.io/v2alpha1"
 # kind: CiliumL2AnnouncementPolicy
 # metadata:
-#   name: node-gateway-l2-policy
+#   name: general-l2-policy
 #   namespace: {{ .Release.Namespace }}
 #   labels:
-#     app.kubernetes.io/name: node-gateway-l2-policy
+#     app.kubernetes.io/name: general-l2-policy
 #     app.kubernetes.io/instance: {{ .Release.Name }}
 #     app.kubernetes.io/part-of: {{ .Release.Name }}
 # spec:
 #   nodeSelector:
-#     matchLabels:
+#     matchExpressions:
-#       kubernetes.io/hostname: talos-ix7-xku
+#       - key: kubernetes.io/hostname
+#         operator: Exists
 #   interfaces:
 #     - end0
 #     - enp6s0

clusters/cl01tl/helm/cilium/templates/cilium-load-balancer-ip-pool.yaml

@@ -1,4 +1,4 @@
-apiVersion: cilium.io/v2
+apiVersion: "cilium.io/v2alpha1"
 kind: CiliumLoadBalancerIPPool
 metadata:
   name: default-ip-pool
@@ -15,7 +15,7 @@ spec:
       stop: "10.232.2.23"
 
 ---
-apiVersion: cilium.io/v2
+apiVersion: "cilium.io/v2alpha1"
 kind: CiliumLoadBalancerIPPool
 metadata:
   name: bgp-ip-pool

clusters/cl01tl/helm/cilium/templates/gateway.yaml

@@ -4,22 +4,25 @@
 #   name: cilium-tls-gateway
 #   namespace: {{ .Release.Namespace }}
 #   labels:
-#     app.kubernetes.io/name: cilium-tls-gateway
+#     app.kubernetes.io/name: tls-gateway
 #     app.kubernetes.io/instance: {{ .Release.Name }}
 #     app.kubernetes.io/part-of: {{ .Release.Name }}
 #   annotations:
 #     cert-manager.io/cluster-issuer: letsencrypt-issuer
-#     io.cilium/lb-ipam-ips: "10.232.1.23"
 # spec:
-#   addresses:
-#     - type: IPAddress
-#       value: 10.232.1.23
 #   gatewayClassName: cilium
 #   listeners:
 #     - allowedRoutes:
 #         namespaces:
 #           from: All
 #       hostname: '*.alexlebens.net'
+#       name: http
+#       port: 80
+#       protocol: HTTP
+#     - allowedRoutes:
+#         namespaces:
+#           from: All
+#       hostname: '*.alexlebens.net'
 #       name: https
 #       port: 443
 #       protocol: HTTPS
@@ -30,17 +33,3 @@
 #             name: https-gateway-cert
 #             namespace: kube-system
 #         mode: Terminate
-#     - allowedRoutes:
-#         namespaces:
-#           from: All
-#       hostname: 'alexlebens.net'
-#       name: https-domain
-#       port: 443
-#       protocol: HTTPS
-#       tls:
-#         certificateRefs:
-#           - group: ''
-#             kind: Secret
-#             name: https-gateway-cert
-#             namespace: kube-system
-#         mode: Terminate

clusters/cl01tl/helm/cilium/values.yaml

@@ -35,8 +35,6 @@ cilium:
       enabled: true
     routerIDAllocation:
       mode: "default"
-  bpf:
-    hostLegacyRouting: true
   devices: end0 enp6s0
   enableK8sEndpointSlice: true
   ciliumEndpointSlice:

clusters/cl01tl/helm/cloudnative-pg/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: cloudnative-pg
   repository: https://cloudnative-pg.io/charts/
-  version: 0.27.1
+  version: 0.27.0
 - name: plugin-barman-cloud
   repository: https://cloudnative-pg.io/charts/
-  version: 0.5.0
+  version: 0.4.0
-digest: sha256:e7089ffd089cae87529e28f0e71302b9fc4a869b389cbb6628f1c559644a3a10
+digest: sha256:5e2a32fa5ed8b180ae5e556d65c67eeb3dcf38e2974b0d668eff4ee3c83258ce
-generated: "2026-02-05T19:36:19.473447121Z"
+generated: "2025-12-30T21:01:48.755246408Z"

clusters/cl01tl/helm/cloudnative-pg/Chart.yaml

@@ -16,11 +16,11 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: cloudnative-pg
-    version: 0.27.1
+    version: 0.27.0
     repository: https://cloudnative-pg.io/charts/
   - name: plugin-barman-cloud
-    version: 0.5.0
+    version: 0.4.0
     repository: https://cloudnative-pg.io/charts/
 icon: https://avatars.githubusercontent.com/u/100373852?s=200&v=4
 # renovate: datasource=github-releases depName=cloudnative-pg/cloudnative-pg
-appVersion: 1.28.1
+appVersion: 1.28.0

clusters/cl01tl/helm/directus/Chart.lock

@@ -10,6 +10,6 @@ dependencies:
   version: 7.5.0
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.4
+  version: 1.0.2
-digest: sha256:c8812d427b060fc1b117ee14c92f37eb7a25a2f62b52b43184b90b74c161af48
+digest: sha256:3ac3d20d801f61a20f709cb1dcaadf7d50fc7bea5ea8d129a44ff68a1a75d9f9
-generated: "2026-02-03T20:35:55.199768508Z"
+generated: "2026-02-03T03:41:46.123281909Z"

clusters/cl01tl/helm/directus/Chart.yaml

@@ -29,7 +29,7 @@ dependencies:
     version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
-    version: 1.0.4
+    version: 1.0.2
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/directus.png
 # renovate: datasource=github-releases depName=directus/directus

clusters/cl01tl/helm/elastic-operator/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: eck-operator
   repository: https://helm.elastic.co
-  version: 3.3.0
+  version: 3.2.0
-digest: sha256:d2b00de6c03bf7624fdf496b326262149a2d2635012f14e900ed0724545c95d9
+digest: sha256:b27ba092ddfa078f763e409dd5db1144a269eff0f45af04f180d844f13466a34
-generated: "2026-02-03T18:05:00.461644575Z"
+generated: "2025-12-01T20:25:30.722424-06:00"

clusters/cl01tl/helm/elastic-operator/Chart.yaml

@@ -15,8 +15,8 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: eck-operator
-    version: 3.3.0
+    version: 3.2.0
     repository: https://helm.elastic.co
 icon: https://helm.elastic.co/icons/eck.png
 # renovate: datasource=github-releases depName=elastic/cloud-on-k8s
-appVersion: v3.3.0
+appVersion: v3.2.0

clusters/cl01tl/helm/external-secrets/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: external-secrets
   repository: https://charts.external-secrets.io
-  version: 1.3.2
+  version: 1.3.1
-digest: sha256:7b7c6dee59f2ea630f0e7a1124aeeda52cdff23769136300384b28210e03945a
+digest: sha256:3b10d4cfe0d38cba02fa79a0d7aed6611faeb68408f4ebb05099280a5f585883
-generated: "2026-02-03T21:41:32.061135319Z"
+generated: "2026-01-23T20:01:34.461022413Z"

clusters/cl01tl/helm/external-secrets/Chart.yaml

@@ -12,8 +12,8 @@ sources:
   - https://github.com/external-secrets/external-secrets/tree/main/deploy/charts/external-secrets
 dependencies:
   - name: external-secrets
-    version: 1.3.2
+    version: 1.3.1
     repository: https://charts.external-secrets.io
 icon: https://avatars.githubusercontent.com/u/68335991?s=48&v=4
 # renovate: datasource=github-releases depName=external-secrets/external-secrets
-appVersion: v1.3.2
+appVersion: v1.3.1

clusters/cl01tl/helm/freshrss/values.yaml

@@ -201,7 +201,7 @@ postgres-18-cluster:
   backup:
     objectStore:
       - name: garage-local
-        index: 2
+        index: 1
         destinationBucket: postgres-backups
         externalSecretCredentialPath: /garage/home-infra/postgres-backups
         isWALArchiver: true

clusters/cl01tl/helm/gitea/Chart.lock

@@ -7,7 +7,7 @@ dependencies:
   version: 0.2.1
 - name: meilisearch
   repository: https://meilisearch.github.io/meilisearch-kubernetes
-  version: 0.25.1
+  version: 0.24.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.2.2
@@ -16,12 +16,12 @@ dependencies:
   version: 7.5.0
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.4
+  version: 1.0.2
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.4
+  version: 1.0.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:e8940a4eb5bfe5aeb2d7bd8f328d7aee962d0a75c1d2aa4937401b16e5c29238
+digest: sha256:0e9ac80e0f60f388b12a042ca3aa07f869b121dad6e9d5ff435d28d97f567b1c
-generated: "2026-02-03T20:36:08.603489039Z"
+generated: "2026-02-03T03:42:29.872126936Z"

clusters/cl01tl/helm/gitea/Chart.yaml

@@ -32,7 +32,7 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
     version: 0.2.1
   - name: meilisearch
-    version: 0.25.1
+    version: 0.24.2
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
@@ -43,11 +43,11 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     alias: redis-replication-gitea
-    version: 1.0.4
+    version: 1.0.2
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     alias: redis-replication-renovate
-    version: 1.0.4
+    version: 1.0.2
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-storage

clusters/cl01tl/helm/grafana-operator/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 7.5.0
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.4
+  version: 1.0.2
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.4
+  version: 1.0.2
-digest: sha256:9ba81c06283d46ae577e40d0d030149307404a3ff35e6c2c8d0e738aeedfcc6a
+digest: sha256:a7a3239061f26f5c0e26a4b293ab5d00f18e56601f5c23ae502dd502804d964f
-generated: "2026-02-03T20:36:24.992188976Z"
+generated: "2026-02-03T00:24:53.179103964Z"

clusters/cl01tl/helm/grafana-operator/Chart.yaml

@@ -25,11 +25,11 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     alias: redis-replication-unified-alerting
-    version: 1.0.4
+    version: 1.0.2
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     alias: redis-replication-remote-cache
-    version: 1.0.4
+    version: 1.0.2
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/grafana.png
 # renovate: datasource=github-releases depName=grafana/grafana-operator

clusters/cl01tl/helm/harbor/Chart.lock

@@ -7,6 +7,6 @@ dependencies:
   version: 7.5.0
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.4
+  version: 1.0.2
-digest: sha256:a5986b8d12f26cb4d0c757e7d9946af180003d8a8a7bb4b399297cc7d5235790
+digest: sha256:b5f3e7f50dbbded48c041b171bfb8ba4de23ea990209798f32c13aaccadf685d
-generated: "2026-02-03T20:36:39.914082171Z"
+generated: "2026-02-03T00:25:16.778012644Z"

clusters/cl01tl/helm/harbor/Chart.yaml

@@ -24,7 +24,7 @@ dependencies:
     version: 7.5.0
     repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
   - name: redis-replication
-    version: 1.0.4
+    version: 1.0.2
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/harbor.png
 # renovate: datasource=github-releases depName=goharbor/harbor

clusters/cl01tl/helm/harbor/values.yaml

@@ -105,7 +105,7 @@ postgres-18-cluster:
   backup:
     objectStore:
       - name: garage-local
-        index: 2
+        index: 1
         destinationBucket: postgres-backups
         externalSecretCredentialPath: /garage/home-infra/postgres-backups
         isWALArchiver: true

clusters/cl01tl/helm/headlamp/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: headlamp
   repository: https://kubernetes-sigs.github.io/headlamp/
-  version: 0.40.0
+  version: 0.39.0
-digest: sha256:b7f8f176f8c4902130e87660adb39211fd5ca454f89f5a7e9ed577cd4c3a2255
+digest: sha256:870e456773199684c150585c12c2e18b3f0895ee8cc73481a53b23c8e94560b1
-generated: "2026-02-05T18:23:45.100522813Z"
+generated: "2025-12-20T00:03:40.10414707Z"

clusters/cl01tl/helm/headlamp/Chart.yaml

@@ -14,8 +14,8 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: headlamp
-    version: 0.40.0
+    version: 0.39.0
     repository: https://kubernetes-sigs.github.io/headlamp/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/headlamp.png
 # renovate: datasource=github-releases depName=headlamp-k8s/headlamp
-appVersion: v0.40.0
+appVersion: v0.39.0

clusters/cl01tl/helm/home-assistant/Chart.yaml

@@ -25,4 +25,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/home-assistant.png
 # renovate: datasource=github-releases depName=home-assistant/core
-appVersion: 2026.2.0
+appVersion: 2026.1.3

clusters/cl01tl/helm/home-assistant/values.yaml

@@ -9,7 +9,7 @@ home-assistant:
         main:
           image:
             repository: ghcr.io/home-assistant/home-assistant
-            tag: 2026.2.0
+            tag: 2026.1.3
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/homepage-dev/Chart.yaml

@@ -24,4 +24,4 @@ dependencies:
     version: 2.2.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/homepage.png
 # renovate: datasource=github-releases depName=gethomepage/homepage
-appVersion: v1.10.1
+appVersion: v1.9.0

clusters/cl01tl/helm/homepage-dev/values.yaml

@@ -11,7 +11,7 @@ homepage:
         main:
           image:
             repository: ghcr.io/gethomepage/homepage
-            tag: v1.10.1
+            tag: v1.9.0
             pullPolicy: IfNotPresent
           env:
             - name: HOMEPAGE_ALLOWED_HOSTS

clusters/cl01tl/helm/homepage/Chart.yaml

@@ -19,4 +19,4 @@ dependencies:
     version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/homepage.png
 # renovate: datasource=github-releases depName=gethomepage/homepage
-appVersion: v1.10.1
+appVersion: v1.9.0

clusters/cl01tl/helm/homepage/values.yaml

@@ -15,7 +15,7 @@ homepage:
         main:
           image:
             repository: ghcr.io/gethomepage/homepage
-            tag: v1.10.1
+            tag: v1.9.0
             pullPolicy: IfNotPresent
           env:
             - name: HOMEPAGE_ALLOWED_HOSTS

clusters/cl01tl/helm/huntarr/Chart.yaml

@@ -23,4 +23,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/huntarr.png
 # renovate: datasource=github-releases depName=plexguide/huntarr
-appVersion: 9.1.12
+appVersion: 9.1.8

clusters/cl01tl/helm/huntarr/values.yaml

@@ -9,7 +9,7 @@ huntarr:
         main:
           image:
             repository: ghcr.io/plexguide/huntarr
-            tag: 9.1.12
+            tag: 9.1.8
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/immich/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 7.5.0
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.4
+  version: 1.0.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:c2363283e3c7614dbb15fa6f5436716e435fa18f2ecd08dca1ac82bb01ab0696
+digest: sha256:1d446911f684db329a040313bd3d4e845f30986eae64f8937aa7c379a02cd476
-generated: "2026-02-03T20:36:59.006280506Z"
+generated: "2026-02-03T00:25:39.934229319Z"

clusters/cl01tl/helm/immich/Chart.yaml

@@ -23,7 +23,7 @@ dependencies:
     version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
-    version: 1.0.4
+    version: 1.0.2
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data
@@ -31,4 +31,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/immich.png
 # renovate: datasource=github-releases depName=immich-app/immich
-appVersion: v2.5.3
+appVersion: v2.5.2

clusters/cl01tl/helm/immich/values.yaml

@@ -9,7 +9,7 @@ immich:
         main:
           image:
             repository: ghcr.io/immich-app/immich-server
-            tag: v2.5.3
+            tag: v2.5.2
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/jellyfin/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: meilisearch
   repository: https://meilisearch.github.io/meilisearch-kubernetes
-  version: 0.25.1
+  version: 0.24.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:4b8625f5a6ccb09509e78b76508f87ac2b759ca8d02ed6d94937e8047458ce20
+digest: sha256:571a5976ea8890880216fd7482e6610304819f95dc9f630f56f2f783066d626e
-generated: "2026-02-03T18:05:45.036614395Z"
+generated: "2026-01-31T00:27:23.265680148Z"

clusters/cl01tl/helm/jellyfin/Chart.yaml

@@ -25,7 +25,7 @@ dependencies:
     repository: https://bjw-s-labs.github.io/helm-charts/
     version: 4.6.2
   - name: meilisearch
-    version: 0.25.1
+    version: 0.24.2
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/karakeep/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.6.2
 - name: meilisearch
   repository: https://meilisearch.github.io/meilisearch-kubernetes
-  version: 0.25.1
+  version: 0.24.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.2.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:5b1948702805bb46749615b98629185d495a8ff1d9d9e6bc52c972524fb6d2fa
+digest: sha256:830f747c69b3fc6187473574893bfcfb277c3b705a5f4603e97017e3ed3c23c5
-generated: "2026-02-03T18:06:00.958200599Z"
+generated: "2026-02-03T03:43:00.335621621Z"

clusters/cl01tl/helm/karakeep/Chart.yaml

@@ -22,7 +22,7 @@ dependencies:
     repository: https://bjw-s-labs.github.io/helm-charts/
     version: 4.6.2
   - name: meilisearch
-    version: 0.25.1
+    version: 0.24.2
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts

clusters/cl01tl/helm/komodo/values.yaml

@@ -208,7 +208,7 @@ postgresql-17-fdb-cluster:
   backup:
     objectStore:
       - name: garage-local
-        index: 2
+        index: 1
         destinationBucket: postgres-backups
         externalSecretCredentialPath: /garage/home-infra/postgres-backups
         isWALArchiver: true

clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: kube-prometheus-stack
   repository: oci://ghcr.io/prometheus-community/charts
-  version: 81.5.0
+  version: 81.4.2
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
   version: 4.6.2
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.4
+  version: 1.0.2
-digest: sha256:62ceeea1ed2f1f3a838e468665c3f291cb67ac547f3fa37863131f088736a750
+digest: sha256:d26edc5c6344d3807253f6e0f393932c3352571a5320f3649f546ead851f8ded
-generated: "2026-02-03T20:37:14.907439914Z"
+generated: "2026-02-03T00:26:01.8878774Z"

clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml

@@ -20,14 +20,14 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: kube-prometheus-stack
-    version: 81.5.0
+    version: 81.4.2
     repository: oci://ghcr.io/prometheus-community/charts
   - name: app-template
     alias: ntfy-alertmanager
     repository: https://bjw-s-labs.github.io/helm-charts/
     version: 4.6.2
   - name: redis-replication
-    version: 1.0.4
+    version: 1.0.2
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/prometheus.png
 # renovate: datasource=github-releases depName=prometheus-operator/prometheus-operator

clusters/cl01tl/helm/libation/Chart.yaml

@@ -24,4 +24,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/libation.png
 # renovate: datasource=github-releases depName=rmcrackan/Libation
-appVersion: 13.1.8
+appVersion: 13.1.7

clusters/cl01tl/helm/libation/values.yaml

@@ -16,7 +16,7 @@ libation:
         main:
           image:
             repository: rmcrackan/libation
-            tag: 13.1.8
+            tag: 13.1.7
             pullPolicy: IfNotPresent
           env:
             - name: SLEEP_TIME

clusters/cl01tl/helm/lidarr/values.yaml

@@ -15,7 +15,7 @@ lidarr:
         main:
           image:
             repository: ghcr.io/linuxserver/lidarr
-            tag: 3.1.2-nightly@sha256:adc776c4deb0b36909472a8d22ce00306b4a37f0d584407d846efd59060279ac
+            tag: 3.1.2-nightly@sha256:21aec279552ea35deaf86b4fbb68876d9a4f5cf53cefd6b0c667889153c778db
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/matrix-synapse/Chart.lock

@@ -22,10 +22,10 @@ dependencies:
   version: 7.5.0
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.4
+  version: 1.0.2
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.4
+  version: 1.0.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
@@ -38,5 +38,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:6675ba9bd3da7605e3c0243602035a96aabb76813c4d9659409580612522ba94
+digest: sha256:feb194c6ff73ff8be3208bac6eb177c2996f1a08cf39c1f15ed4006e6647cfce
-generated: "2026-02-03T20:37:32.102491987Z"
+generated: "2026-02-03T03:43:19.524605833Z"

clusters/cl01tl/helm/matrix-synapse/Chart.yaml

@@ -57,11 +57,11 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     alias: redis-replication-matrix-synapse
-    version: 1.0.4
+    version: 1.0.2
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     alias: redis-replication-hookshot
-    version: 1.0.4
+    version: 1.0.2
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-synapse

clusters/cl01tl/helm/outline/Chart.lock

@@ -10,6 +10,6 @@ dependencies:
   version: 7.5.0
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.4
+  version: 1.0.2
-digest: sha256:19b7ae1e31a51e8b7b47754eb5f9177fc5278c97904b38daffb9a0164c4300eb
+digest: sha256:91262ebe45463b53f50f8411c7677a14547fdbaca135b4db81d9ef5c1f3601f2
-generated: "2026-02-03T20:37:51.993316167Z"
+generated: "2026-02-03T03:43:35.742535808Z"

clusters/cl01tl/helm/outline/Chart.yaml

@@ -30,7 +30,7 @@ dependencies:
     version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
-    version: 1.0.4
+    version: 1.0.2
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/outline.png
 # renovate: datasource=github-releases depName=outline/outline

clusters/cl01tl/helm/postiz/Chart.lock

@@ -10,12 +10,12 @@ dependencies:
   version: 7.5.0
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.4
+  version: 1.0.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:058c2f37a1f4c8d836c3cfe84ee6a8f9dbee9a06d3f8a732c9f51af9efeff3b9
+digest: sha256:5ebb23e5b68ec0ee9332de8865a6c41b4da5871cb59dcc67422020f7c728b874
-generated: "2026-02-03T20:38:08.21964113Z"
+generated: "2026-02-03T03:43:50.478871007Z"

clusters/cl01tl/helm/postiz/Chart.yaml

@@ -29,7 +29,7 @@ dependencies:
     version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
-    version: 1.0.4
+    version: 1.0.2
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/prowlarr/values.yaml

@@ -20,7 +20,7 @@ prowlarr:
         main:
           image:
             repository: ghcr.io/linuxserver/prowlarr
-            tag: 2.3.0@sha256:5339e9050cfcc0cb5331e9c98610ed9d4ce70ef481a5461ea664a13dda3f1eb0
+            tag: 2.3.0@sha256:d3e9307b320b6772749a2cf8fc2712e9e824c4930b034680ad4d08a9e2f25884
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/roundcube/values.yaml

@@ -58,7 +58,7 @@ roundcube:
         nginx:
           image:
             repository: nginx
-            tag: 1.29.5-alpine-slim
+            tag: 1.29.4-alpine
             pullPolicy: IfNotPresent
           env:
             - name: NGINX_HOST

clusters/cl01tl/helm/site-profile/Chart.yaml

@@ -24,4 +24,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
     version: 2.2.2
 icon: https://d21zlbwtcn424f.cloudfront.net/logo-new-round.png
-appVersion: 2.3.2
+appVersion: 2.1.2

clusters/cl01tl/helm/site-profile/values.yaml

@@ -11,7 +11,7 @@ site-profile:
         main:
           image:
             repository: harbor.alexlebens.net/images/site-profile
-            tag: 2.3.2
+            tag: 2.2.5
             pullPolicy: IfNotPresent
           resources:
             requests:

clusters/cl01tl/helm/stalwart/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 7.5.0
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.4
+  version: 1.0.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:04214bcc4c4bef04ff27bc509c15e193bae2f1b0930e085d830b23492b374f3f
+digest: sha256:5f47bd1adb5c66d35378cb98dd843e6146c59df32aa3d985871eb41782168949
-generated: "2026-02-03T20:38:21.653594002Z"
+generated: "2026-02-03T00:27:15.80516876Z"

clusters/cl01tl/helm/stalwart/Chart.yaml

@@ -26,7 +26,7 @@ dependencies:
     version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
-    version: 1.0.4
+    version: 1.0.2
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/tailscale-operator/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: tailscale-operator
   repository: https://pkgs.tailscale.com/helmcharts
-  version: 1.94.1
+  version: 1.92.5
-digest: sha256:194c4f0a24b460064db0e2cda00226de0d85a764d9eaab26b1cbb337e7e9a750
+digest: sha256:75f2ca2d5932228c484b5f6b535d61786a0246c8c4d6947466d03a0c0a614ce0
-generated: "2026-02-05T19:56:58.797357494Z"
+generated: "2026-01-07T01:54:43.539104104Z"

clusters/cl01tl/helm/tailscale-operator/Chart.yaml

@@ -17,7 +17,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: tailscale-operator
-    version: 1.94.1
+    version: 1.92.5
     repository: https://pkgs.tailscale.com/helmcharts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/tailscale-light.png
 # renovate: datasource=github-releases depName=tailscale/tailscale

clusters/cl01tl/helm/talos/values.yaml

@@ -69,7 +69,7 @@ etcd-backup:
         s3-prune:
           image:
             repository: d3fk/s3cmd
-            tag: latest@sha256:e78ca093c593ff719b11bd42a8e640d0d9dd381bd6a9d579ed8ac8d31319a335
+            tag: latest@sha256:78f61d2df00e26ebadea17230af76a6c1252f20dce6659bd708e55700f175b6c
             pullPolicy: IfNotPresent
           command:
             - /bin/sh
@@ -155,7 +155,7 @@ etcd-backup:
         s3-prune:
           image:
             repository: d3fk/s3cmd
-            tag: latest@sha256:e78ca093c593ff719b11bd42a8e640d0d9dd381bd6a9d579ed8ac8d31319a335
+            tag: latest@sha256:78f61d2df00e26ebadea17230af76a6c1252f20dce6659bd708e55700f175b6c
             pullPolicy: IfNotPresent
           command:
             - /bin/sh
@@ -241,7 +241,7 @@ etcd-backup:
         s3-prune:
           image:
             repository: d3fk/s3cmd
-            tag: latest@sha256:e78ca093c593ff719b11bd42a8e640d0d9dd381bd6a9d579ed8ac8d31319a335
+            tag: latest@sha256:78f61d2df00e26ebadea17230af76a6c1252f20dce6659bd708e55700f175b6c
             pullPolicy: IfNotPresent
           command:
             - /bin/sh

clusters/cl01tl/helm/tubearchivist/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.6.2
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.4
+  version: 1.0.2
-digest: sha256:1efd55d2baf7ace4ce08d9a27c0e8f383432b0bd169d405d9fa014a193dece9e
+digest: sha256:c207db29f2ea77d26c36ac68ec72f61f8341fb19b8da6389e65bf45f0c223e11
-generated: "2026-02-03T20:38:37.678141816Z"
+generated: "2026-02-03T00:27:32.882899823Z"

clusters/cl01tl/helm/tubearchivist/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     repository: https://bjw-s-labs.github.io/helm-charts/
     version: 4.6.2
   - name: redis-replication
-    version: 1.0.4
+    version: 1.0.2
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/tube-archivist.png
 # renovate: datasource=github-releases depName=tubearchivist/tubearchivist

clusters/cl01tl/helm/unpoller/Chart.yaml

@@ -21,4 +21,4 @@ dependencies:
     version: 4.6.2
 icon: https://camo.githubusercontent.com/c5d07a5b3acfeac8e1c25bf56f440ffe032b86e4e7f15de82357f022a43fc927/68747470733a2f2f756e706f6c6c65722e636f6d2f696d672f6c6f676f2e706e67
 # renovate: datasource=github-releases depName=unpoller/unpoller
-appVersion: v2.33.0
+appVersion: v2.32.0

clusters/cl01tl/helm/unpoller/values.yaml

@@ -9,7 +9,7 @@ unpoller:
         main:
           image:
             repository: ghcr.io/unpoller/unpoller
-            tag: v2.33.0
+            tag: v2.32.0
             pullPolicy: IfNotPresent
           env:
             - name: UP_UNIFI_CONTROLLER_0_SAVE_ALARMS

clusters/cl01tl/helm/vault/values.yaml

@@ -12,7 +12,7 @@ vault:
     enabled: true
     image:
       repository: hashicorp/vault
-      tag: 1.21.3
+      tag: 1.21.2
     updateStrategyType: "RollingUpdate"
     logLevel: debug
     logFormat: standard
@@ -170,7 +170,7 @@ snapshot:
         snapshot:
           image:
             repository: hashicorp/vault
-            tag: 1.21.3
+            tag: 1.21.2
             pullPolicy: IfNotPresent
           command:
             - /bin/ash
@@ -187,7 +187,7 @@ snapshot:
         s3-backup-local:
           image:
             repository: d3fk/s3cmd
-            tag: latest@sha256:e78ca093c593ff719b11bd42a8e640d0d9dd381bd6a9d579ed8ac8d31319a335
+            tag: latest@sha256:78f61d2df00e26ebadea17230af76a6c1252f20dce6659bd708e55700f175b6c
             pullPolicy: IfNotPresent
           command:
             - /bin/sh
@@ -208,7 +208,7 @@ snapshot:
         s3-backup-remote:
           image:
             repository: d3fk/s3cmd
-            tag: latest@sha256:e78ca093c593ff719b11bd42a8e640d0d9dd381bd6a9d579ed8ac8d31319a335
+            tag: latest@sha256:78f61d2df00e26ebadea17230af76a6c1252f20dce6659bd708e55700f175b6c
             pullPolicy: IfNotPresent
           command:
             - /bin/sh
@@ -229,7 +229,7 @@ snapshot:
         s3-backup-external:
           image:
             repository: d3fk/s3cmd
-            tag: latest@sha256:e78ca093c593ff719b11bd42a8e640d0d9dd381bd6a9d579ed8ac8d31319a335
+            tag: latest@sha256:78f61d2df00e26ebadea17230af76a6c1252f20dce6659bd708e55700f175b6c
             pullPolicy: IfNotPresent
           command:
             - /bin/sh

clusters/cl01tl/helm/whodb/Chart.yaml

@@ -20,4 +20,4 @@ dependencies:
     version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/whodb.png
 # renovate: datasource=github-releases depName=clidey/whodb
-appVersion: 0.91.0
+appVersion: 0.90.0

clusters/cl01tl/helm/whodb/values.yaml

@@ -8,7 +8,7 @@ whodb:
         main:
           image:
             repository: clidey/whodb
-            tag: 0.91.0
+            tag: 0.90.0
             pullPolicy: IfNotPresent
           env:
             - name: WHODB_OLLAMA_HOST

clusters/cl01tl/helm/yamtrack/Chart.lock

@@ -7,6 +7,6 @@ dependencies:
   version: 7.5.0
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.4
+  version: 1.0.2
-digest: sha256:82e763a83f2bca5a220b28710a1c43bec9957b81aff9a0218d73b6a6df912737
+digest: sha256:2f0108191f0e7392fd7a4931784f9025c23344381e594a0d33c9a50e6d2dcbef
-generated: "2026-02-03T20:38:54.006291729Z"
+generated: "2026-02-03T00:27:48.654243664Z"

clusters/cl01tl/helm/yamtrack/Chart.yaml

@@ -25,7 +25,7 @@ dependencies:
     version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
-    version: 1.0.4
+    version: 1.0.2
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/yamtrack.png
 # renovate: datasource=github-releases depName=FuzzyGrim/Yamtrack

hosts/ps08rp/blocky/compose.yaml

@@ -1,7 +1,7 @@
 ---
 services:
     tailscale-blocky:
-        image: ghcr.io/tailscale/tailscale:v1.94.1
+        image: ghcr.io/tailscale/tailscale:v1.92.5
         container_name: tailscale-blocky
         cap_add:
             - net_admin

hosts/ps09rp/blocky/compose.yaml

@@ -1,7 +1,7 @@
 ---
 services:
     tailscale-blocky:
-        image: ghcr.io/tailscale/tailscale:v1.94.1
+        image: ghcr.io/tailscale/tailscale:v1.92.5
         container_name: tailscale-blocky
         cap_add:
             - net_admin

hosts/ps10rp/blocky/compose.yaml

@@ -1,7 +1,7 @@
 ---
 services:
     tailscale-blocky:
-        image: ghcr.io/tailscale/tailscale:v1.94.1
+        image: ghcr.io/tailscale/tailscale:v1.92.5
         container_name: tailscale-blocky
         cap_add:
             - net_admin

hosts/ps10rp/garage/compose.yaml

@@ -1,6 +1,6 @@
 services:
     tailscale-garage:
-        image: ghcr.io/tailscale/tailscale:v1.94.1
+        image: ghcr.io/tailscale/tailscale:v1.92.5
         container_name: tailscale-garage
         cap_add:
             - net_admin
@@ -20,7 +20,7 @@ services:
             - /dev/net/tun:/dev/net/tun
 
     tailscale-garage-ui:
-        image: ghcr.io/tailscale/tailscale:v1.94.1
+        image: ghcr.io/tailscale/tailscale:v1.92.5
         container_name: tailscale-garage-ui
         cap_add:
             - net_admin

hosts/ps10rp/gitea/compose.yaml

@@ -1,6 +1,6 @@
 services:
     tailscale-gitea:
-        image: ghcr.io/tailscale/tailscale:v1.94.1
+        image: ghcr.io/tailscale/tailscale:v1.92.5
         container_name: tailscale-gitea
         cap_add:
             - net_admin

hosts/ps10rp/homepage/compose.yaml

@@ -1,7 +1,7 @@
 ---
 services:
     tailscale-homepage:
-        image: ghcr.io/tailscale/tailscale:v1.94.1
+        image: ghcr.io/tailscale/tailscale:v1.92.5
         container_name: tailscale-homepage
         cap_add:
             - net_admin
@@ -32,7 +32,7 @@ services:
             - /var/run/docker.sock:/var/run/docker.sock:ro
 
     homepage:
-        image: ghcr.io/gethomepage/homepage:v1.10.1
+        image: ghcr.io/gethomepage/homepage:v1.9.0
         container_name: homepage
         labels:
             traefik.enable: true

hosts/ps10rp/komodo-periphery/compose.yaml

@@ -12,6 +12,8 @@ services:
             - TS_HOSTNAME=komodo-periphery-ps10rp
         env_file:
             - .ts-env
+        labels:
+            - "com.centurylinklabs.watchtower.scope=komodo"
         network_mode: service:komodo-periphery
         restart: always
         volumes:
@@ -19,6 +21,23 @@ services:
         devices:
             - /dev/net/tun:/dev/net/tun
 
+    watchtower:
+        image: ghcr.io/containrrr/watchtower:latest
+        container_name: komodo-periphery-watchtower
+        command: --scope komodo
+        environment:
+            - TZ=America/Chicago
+            - WATCHTOWER_HTTP_API_METRICS=true
+            - WATCHTOWER_HTTP_API_TOKEN=token
+            - WATCHTOWER_CLEANUP=true
+            - WATCHTOWER_POLL_INTERVAL=3600
+        labels:
+            - "com.centurylinklabs.watchtower.scope=komodo"
+        network_mode: service:komodo-periphery
+        restart: always
+        volumes:
+            - /var/run/docker.sock:/var/run/docker.sock
+
     komodo-periphery:
         image: ghcr.io/moghtech/komodo-periphery:latest
         container_name: komodo-periphery
@@ -26,6 +45,8 @@ services:
             - .env
         environment:
             - TZ=America/Chicago
+        labels:
+            - "com.centurylinklabs.watchtower.scope=komodo"
         restart: always
         volumes:
             - /var/run/docker.sock:/var/run/docker.sock

hosts/ps10rp/node-exporter/compose.yaml

@@ -1,7 +1,7 @@
 ---
 services:
     tailscale-node-exporter:
-        image: ghcr.io/tailscale/tailscale:v1.94.1
+        image: ghcr.io/tailscale/tailscale:v1.92.5
         container_name: tailscale-node-exporter
         cap_add:
             - net_admin

hosts/ps10rp/tailscale-subnet/compose.yaml

@@ -1,7 +1,7 @@
 ---
 services:
     tailscale:
-        image: ghcr.io/tailscale/tailscale:v1.94.1
+        image: ghcr.io/tailscale/tailscale:v1.92.5
         container_name: tailscale-subnet
         cap_add:
             - net_admin

hosts/ps10rp/traefik/compose.yaml

@@ -1,7 +1,7 @@
 ---
 services:
     tailscale-traefik:
-        image: ghcr.io/tailscale/tailscale:v1.94.1
+        image: ghcr.io/tailscale/tailscale:v1.92.5
         container_name: tailscale-traefik
         cap_add:
             - net_admin