chore(deps): pin ollama/ollama docker tag to d00473c

2026-05-10 03:28:34 +00:00
65 changed files with 116 additions and 160 deletions
--- a/.gitea/workflows/renovate.yaml
+++ b/.gitea/workflows/renovate.yaml
@@ -13,7 +13,7 @@ on:
 jobs:
  renovate:
    runs-on: ubuntu-js
-    container: ghcr.io/renovatebot/renovate:43.177.5@sha256:b68a89192a1143d526dfce02ef9abb610810c602ec674f3542be3d1811484cde
+    container: ghcr.io/renovatebot/renovate:43.170.18@sha256:976d49d41e750ad97e634e50b3c6cfafebce0176778bf80af9e092d228e744a8
    steps:
      - name: Checkout
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
--- a/clusters/cl01tl/helm/argocd/Chart.yaml
+++ b/clusters/cl01tl/helm/argocd/Chart.yaml
@@ -17,4 +17,4 @@ dependencies:
    repository: https://argoproj.github.io/argo-helm
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 # renovate: datasource=github-releases depName=argoproj/argo-cd
-appVersion: v3.4.2
+appVersion: v3.4.1
--- a/clusters/cl01tl/helm/argocd/values.yaml
+++ b/clusters/cl01tl/helm/argocd/values.yaml
@@ -103,7 +103,7 @@ argo-cd:
      enabled: true
      image:
        repository: haproxy
-        tag: 3.3.10-alpine@sha256:3201152205e9d02557ab3c8ecfcf0d378126eec0a5d1b0950ea22af31ee10bf2
+        tag: 3.3.9-alpine@sha256:9d05c0d68ede409faf4855a8f40d7bfc54833a83bfd02d9344d09b5d27f79155
      resources:
        requests:
          cpu: 5m
--- a/clusters/cl01tl/helm/authentik/Chart.lock
+++ b/clusters/cl01tl/helm/authentik/Chart.lock
@@ -1,7 +1,7 @@
 dependencies:
 - name: authentik
  repository: https://charts.goauthentik.io/
-  version: 2026.2.3
+  version: 2026.2.2
 - name: cloudflared
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 3.2.2
@@ -11,5 +11,5 @@ dependencies:
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.8.0
-digest: sha256:f690cd3742371fda919b728b2b65071eb301d8bef6bbcf013e5eb3998d1e66b6
-generated: "2026-05-13T00:09:37.476993903Z"
+digest: sha256:340c981f2958295a952b124bc2f14f6d655901dd3e32f90dc9cefe1685195cff
+generated: "2026-05-08T22:56:30.727245582Z"
--- a/clusters/cl01tl/helm/authentik/Chart.yaml
+++ b/clusters/cl01tl/helm/authentik/Chart.yaml
@@ -18,7 +18,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: authentik
-    version: 2026.2.3
+    version: 2026.2.2
    repository: https://charts.goauthentik.io/
  - name: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
--- a/clusters/cl01tl/helm/cilium/Chart.lock
+++ b/clusters/cl01tl/helm/cilium/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: cilium
  repository: https://helm.cilium.io/
-  version: 1.18.9
-digest: sha256:f7d127bed9b2c9154f25ffdc36ef7477ac8c8b12aeb92c5f4c20be5abd49ec11
-generated: "2026-05-10T19:25:36.71023-05:00"
+  version: 1.18.6
+digest: sha256:8ea328ac238524b5b423e6289f5e25d05ef64e6aa19cfd5de238f1d5dd533e9b
+generated: "2026-02-05T12:00:20.15778-06:00"
--- a/clusters/cl01tl/helm/cilium/Chart.yaml
+++ b/clusters/cl01tl/helm/cilium/Chart.yaml
@@ -14,8 +14,8 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: cilium
-    version: 1.18.9
+    version: 1.18.6
    repository: https://helm.cilium.io/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/cilium.png
 # renovate: datasource=github-releases depName=cilium/cilium
-appVersion: 1.18.9
+appVersion: 1.18.6
--- a/clusters/cl01tl/helm/cilium/templates/cilium-load-balancer-ip-pool.yaml
+++ b/clusters/cl01tl/helm/cilium/templates/cilium-load-balancer-ip-pool.yaml
@@ -10,3 +10,18 @@ spec:
  blocks:
    - start: "10.232.1.21"
      stop: "10.232.1.23"
+
+---
+apiVersion: cilium.io/v2
+kind: CiliumLoadBalancerIPPool
+metadata:
+  name: bgp-ip-pool
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: bgp-ip-pool
+    {{- include "custom.labels" . | nindent 4 }}
+spec:
+  blocks:
+    - start: "10.232.2.100"
+      stop: "10.232.2.200"
+  disabled: true
--- a/clusters/cl01tl/helm/cilium/values.yaml
+++ b/clusters/cl01tl/helm/cilium/values.yaml
@@ -25,14 +25,20 @@ cilium:
        - NET_ADMIN
        - SYS_ADMIN
        - SYS_RESOURCE
+  bgpControlPlane:
+    enabled: false
  bpf:
    hostLegacyRouting: true
-    masquerade: false
  devices: end0 enp6s0
  ciliumEndpointSlice:
    enabled: true
  gatewayAPI:
-    enabled: false
+    enabled: true
+    enableAppProtocol: true
+    enableAlpn: true
+    secretsNamespace:
+      create: false
+      name: kube-system
  socketLB:
    enabled: true
    hostNamespaceOnly: true
--- a/clusters/cl01tl/helm/cloudnative-pg/Chart.lock
+++ b/clusters/cl01tl/helm/cloudnative-pg/Chart.lock
@@ -1,7 +1,7 @@
 dependencies:
 - name: cloudnative-pg
  repository: https://cloudnative-pg.io/charts/
-  version: 0.28.2
+  version: 0.28.0
 - name: plugin-barman-cloud
  repository: https://cloudnative-pg.io/charts/
  version: 0.6.0
@@ -11,5 +11,5 @@ dependencies:
 - name: rclone-bucket
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.11.3
-digest: sha256:a08719a82de76d62cddfec163dbc9feecfbea83ab406f3750d25d4deaf586f0c
-generated: "2026-05-13T00:10:14.309341878Z"
+digest: sha256:3f9cc2b51d4f30e63162b06d886415b78e37945946f8e6db642b1e94f9a917a0
+generated: "2026-05-09T02:54:37.702578041Z"
--- a/clusters/cl01tl/helm/cloudnative-pg/Chart.yaml
+++ b/clusters/cl01tl/helm/cloudnative-pg/Chart.yaml
@@ -18,7 +18,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: cloudnative-pg
-    version: 0.28.2
+    version: 0.28.0
    repository: https://cloudnative-pg.io/charts/
  - name: plugin-barman-cloud
    version: 0.6.0
--- a/clusters/cl01tl/helm/dawarich/templates/external-secret.yaml
+++ b/clusters/cl01tl/helm/dawarich/templates/external-secret.yaml
@@ -50,26 +50,3 @@ spec:
      remoteRef:
        key: /cl01tl/authentik/oidc/dawarich
        property: secret
-
---
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: dawarich-metrics-credentials
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: dawarich-metrics-credentials
-    {{- include "custom.labels" . | nindent 4 }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: openbao
-  data:
-    - secretKey: user
-      remoteRef:
-        key: /cl01tl/dawarich/metrics
-        property: user
-    - secretKey: password
-      remoteRef:
-        key: /cl01tl/dawarich/metrics
-        property: password
--- a/clusters/cl01tl/helm/dawarich/values.yaml
+++ b/clusters/cl01tl/helm/dawarich/values.yaml
@@ -78,16 +78,6 @@ dawarich:
              value: 0.0.0.0
            - name: PROMETHEUS_EXPORTER_PORT
              value: 9394
-            - name: METRICS_USERNAME
-              valueFrom:
-                secretKeyRef:
-                  name: dawarich-metrics-credentials
-                  key: user
-            - name: METRICS_PASSWORD
-              valueFrom:
-                secretKeyRef:
-                  name: dawarich-metrics-credentials
-                  key: password
            - name: SECRET_KEY_BASE
              valueFrom:
                secretKeyRef:
@@ -203,16 +193,6 @@ dawarich:
              value: 0.0.0.0
            - name: PROMETHEUS_EXPORTER_PORT
              value: 9394
-            - name: METRICS_USERNAME
-              valueFrom:
-                secretKeyRef:
-                  name: dawarich-metrics-credentials
-                  key: user
-            - name: METRICS_PASSWORD
-              valueFrom:
-                secretKeyRef:
-                  name: dawarich-metrics-credentials
-                  key: password
            - name: SECRET_KEY_BASE
              valueFrom:
                secretKeyRef:
@@ -276,13 +256,6 @@ dawarich:
          interval: 30s
          scrapeTimeout: 15s
          path: /metrics
-          basicAuth:
-            password:
-              name: dawarich-metrics-credentials
-              key: password
-            username:
-              name: dawarich-metrics-credentials
-              key: user
  route:
    main:
      kind: HTTPRoute
--- a/clusters/cl01tl/helm/element-web/values.yaml
+++ b/clusters/cl01tl/helm/element-web/values.yaml
@@ -2,7 +2,7 @@ element-web:
  replicaCount: 1
  image:
    repository: ghcr.io/element-hq/element-web
-    tag: v1.12.18@sha256:c21772a1eabeededa19be591343f548995e458ec34ba8f27425ae923c10af82e
+    tag: v1.12.17@sha256:f4a81a24d49a9c5b97e02e77a3013ec799873e500e69041078a28be98e4f1280
  defaultServer:
    url: https://matrix.alexlebens.dev
    name: alexlebens.dev
--- a/clusters/cl01tl/helm/eraser/values.yaml
+++ b/clusters/cl01tl/helm/eraser/values.yaml
@@ -50,7 +50,7 @@ eraser-metrics:
        main:
          image:
            repository: ghcr.io/open-telemetry/opentelemetry-collector-releases/opentelemetry-collector
-            tag: 0.152.0@sha256:f358f8028c6eb44f765444de1c8899b4f97d7ba54be5264a8753f2c182bc5757
+            tag: 0.151.0@sha256:49a12827519134ed72881a64247ea43fbf4bdac50cfa41ceb495fc1c684451e2
          command:
            - /otelcol
            - --config=/conf/otel-collector-config.yaml
--- a/clusters/cl01tl/helm/freshrss/Chart.yaml
+++ b/clusters/cl01tl/helm/freshrss/Chart.yaml
@@ -33,4 +33,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/freshrss.png
 # renovate: datasource=github-releases depName=FreshRSS/FreshRSS
-appVersion: 1.29.0
+appVersion: 1.28.1
--- a/clusters/cl01tl/helm/freshrss/values.yaml
+++ b/clusters/cl01tl/helm/freshrss/values.yaml
@@ -8,7 +8,7 @@ freshrss:
        main:
          image:
            repository: freshrss/freshrss
-            tag: 1.29.0@sha256:cca8988d05cd449e1c6c69405971b1e6fc2c2116ceeb45c9fa3fc33837997a75
+            tag: 1.28.1@sha256:9100f649f5c946f589f54cdb9be7a65996528f48f691ef90eb262a0e06e5a522
          env:
            - name: PGID
              value: "568"
--- a/clusters/cl01tl/helm/generic-device-plugin/Chart.lock
+++ b/clusters/cl01tl/helm/generic-device-plugin/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: generic-device-plugin
  repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-  version: 0.21.3
-digest: sha256:2122d1fdfa7e596323caae612325eebbdb0337f6d2a290c3a0ce8f4c3fbbbbd5
-generated: "2026-05-13T00:11:06.857277817Z"
+  version: 0.21.2
+digest: sha256:711b3c3b3433e0358609b98a2fedad17fea5ecb34d07c18a61393756b03f2cb5
+generated: "2026-05-08T22:23:52.971515743Z"
--- a/clusters/cl01tl/helm/generic-device-plugin/Chart.yaml
+++ b/clusters/cl01tl/helm/generic-device-plugin/Chart.yaml
@@ -14,6 +14,6 @@ maintainers:
 dependencies:
  - name: generic-device-plugin
    repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-    version: 0.21.3
+    version: 0.21.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 appVersion: 1.0.0
--- a/clusters/cl01tl/helm/homepage/Chart.yaml
+++ b/clusters/cl01tl/helm/homepage/Chart.yaml
@@ -19,4 +19,4 @@ dependencies:
    version: 5.0.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/homepage.png
 # renovate: datasource=github-releases depName=gethomepage/homepage
-appVersion: v1.13.1
+appVersion: v1.13.0
--- a/clusters/cl01tl/helm/homepage/values.yaml
+++ b/clusters/cl01tl/helm/homepage/values.yaml
@@ -14,7 +14,7 @@ homepage:
        main:
          image:
            repository: ghcr.io/gethomepage/homepage
-            tag: v1.13.1@sha256:d8d784e5090111b6e4c56dfd90e272d2953a2094e87349f647165df0fa6c4401
+            tag: v1.13.0@sha256:690ac1f79e33000c176c2a28229ed00b49b44781e8a63f280a8ece22c161f099
          env:
            - name: HOMEPAGE_ALLOWED_HOSTS
              value: home.alexlebens.net
@@ -268,10 +268,10 @@ homepage:
                  siteMonitor: http://ollama-web.ollama:80
                  statusStyle: dot
              - AI Image:
-                  icon: sh-invoke-ai.webp
-                  description: Invoke AI
-                  href: https://invoke-ai-pd05wd.boreal-beaufort.ts.net/app
-                  siteMonitor: https://invoke-ai-pd05wd.boreal-beaufort.ts.net
+                  icon: https://user-images.githubusercontent.com/36368048/196280761-1535f413-a91e-4b6a-af6a-b890f8ae204c.png
+                  description: Stable Diffusion
+                  href: https://stable-diffusion-pd05wd.boreal-beaufort.ts.net
+                  siteMonitor: https://stable-diffusion-pd05wd.boreal-beaufort.ts.net
                  statusStyle: dot
              - Search:
                  icon: sh-searxng.webp
--- a/clusters/cl01tl/helm/jellyfin/values.yaml
+++ b/clusters/cl01tl/helm/jellyfin/values.yaml
@@ -40,7 +40,7 @@ jellyfin:
        exporter:
          image:
            repository: rebelcore/jellyfin-exporter
-            tag: v1.5.1@sha256:a42181c7faf593ce11761916f669bc5b3598e43d2c5b8bd4381934f2df83bbd7
+            tag: v1.5.0@sha256:37e6d389654180ad9e1661210a48fee71a6dc355a160670235a00329da0dbf80
          args:
            - '--jellyfin.address=http://127.0.0.1:8096'
            - '--jellyfin.token=$(TOKEN)'
--- a/clusters/cl01tl/helm/karakeep/values.yaml
+++ b/clusters/cl01tl/helm/karakeep/values.yaml
@@ -85,9 +85,9 @@ karakeep:
            - name: OLLAMA_KEEP_ALIVE
              value: 5m
            - name: INFERENCE_TEXT_MODEL
-              value: gemma4:e4b
+              value: gemma3:4b
            - name: INFERENCE_IMAGE_MODEL
-              value: gemma4:e4b
+              value: granite3.2-vision:2b
            - name: EMBEDDING_TEXT_MODEL
              value: mxbai-embed-large
            - name: INFERENCE_JOB_TIMEOUT_SEC
--- a/clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock
+++ b/clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock
@@ -1,15 +1,15 @@
 dependencies:
 - name: kube-prometheus-stack
  repository: oci://ghcr.io/prometheus-community/charts
-  version: 85.0.2
+  version: 84.5.0
 - name: prometheus-operator-crds
  repository: oci://ghcr.io/prometheus-community/charts
-  version: 29.0.0
+  version: 28.0.1
 - name: app-template
  repository: https://bjw-s-labs.github.io/helm-charts/
  version: 5.0.0
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.8.0
-digest: sha256:8ac7065eceeff40ab6da60d8abd939031cc3e4677c0cfa353cd11a3e1bac25b6
-generated: "2026-05-12T18:05:16.45686921Z"
+digest: sha256:393093164e2cc0e94111c86181bcbfb4f605f9eeeb9a1fd1960ba5fc764902ee
+generated: "2026-05-08T02:31:55.970087487Z"
--- a/clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml
+++ b/clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml
@@ -20,10 +20,10 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: kube-prometheus-stack
-    version: 85.0.2
+    version: 84.5.0
    repository: oci://ghcr.io/prometheus-community/charts
  - name: prometheus-operator-crds
-    version: 29.0.0
+    version: 28.0.1
    repository: oci://ghcr.io/prometheus-community/charts
  - name: app-template
    alias: ntfy-alertmanager
--- a/clusters/cl01tl/helm/loki/Chart.lock
+++ b/clusters/cl01tl/helm/loki/Chart.lock
@@ -1,9 +1,9 @@
 dependencies:
 - name: loki
  repository: oci://ghcr.io/grafana-community/helm-charts
-  version: 13.7.1
+  version: 13.6.2
 - name: alloy
  repository: https://grafana.github.io/helm-charts
  version: 1.8.1
-digest: sha256:7635db4699ae4b7ba2ce3ab525403923e603f546d73c519a8d42d0bd7784de09
-generated: "2026-05-13T16:06:18.46513961Z"
+digest: sha256:a4e74753a5cc3122473b8bcc984ae5bd7d0d2c05da1e98c8c1d5bb96abb1ada1
+generated: "2026-05-09T01:39:35.695293602Z"
--- a/clusters/cl01tl/helm/loki/Chart.yaml
+++ b/clusters/cl01tl/helm/loki/Chart.yaml
@@ -15,7 +15,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: loki
-    version: 13.7.1
+    version: 13.6.2
    repository: oci://ghcr.io/grafana-community/helm-charts
  - name: alloy
    version: 1.8.1
--- a/clusters/cl01tl/helm/medialyze/Chart.yaml
+++ b/clusters/cl01tl/helm/medialyze/Chart.yaml
@@ -24,4 +24,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://raw.githubusercontent.com/frederikemmer/MediaLyze/d8f69c0628bac7c047b90f91a66341648029c273/frontend/public/favicon.svg
 # renovate: datasource=github-releases depName=frederikemmer/MediaLyze
-appVersion: 0.11.0
+appVersion: 0.10.4
--- a/clusters/cl01tl/helm/medialyze/values.yaml
+++ b/clusters/cl01tl/helm/medialyze/values.yaml
@@ -12,7 +12,7 @@ medialyze:
        main:
          image:
            repository: ghcr.io/frederikemmer/medialyze
-            tag: 0.11.0@sha256:9c900b398ddab3e96729738186c7c50690567b38a119851570db59d606176043
+            tag: 0.10.4@sha256:d5d7b670a8d46a8093f897e2675f93f54c5229e003ca8a136a9fed67702d1c92
          env:
            - name: HOST_PORT
              value: 8080
--- a/clusters/cl01tl/helm/music-grabber/Chart.yaml
+++ b/clusters/cl01tl/helm/music-grabber/Chart.yaml
@@ -24,4 +24,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/music-grabber.png
 # renovate: datasource=docker depName=g33kphr33k/musicgrabber
-appVersion: 2.8.8
+appVersion: 2.8.6
--- a/clusters/cl01tl/helm/music-grabber/values.yaml
+++ b/clusters/cl01tl/helm/music-grabber/values.yaml
@@ -12,7 +12,7 @@ music-grabber:
        main:
          image:
            repository: g33kphr33k/musicgrabber
-            tag: 2.8.8@sha256:72dd1056fab07c873276c854bea08b8ef07bb54b8fbe0413047d8701d2abc146
+            tag: 2.8.6@sha256:b35f49f56994e8fb4a7e25844e869d6c2e2e3d7419ecc43bfe70478d051c8301
          env:
            - name: MUSIC_DIR
              value: /mnt/store/Music Grabber/
--- a/clusters/cl01tl/helm/ollama/values.yaml
+++ b/clusters/cl01tl/helm/ollama/values.yaml
@@ -21,7 +21,7 @@ ollama:
        main:
          image:
            repository: ollama/ollama
-            tag: 0.23.3@sha256:9b519ed11930ba9a3c6123f8546b8f553e247ea6ce58739a4878f913996e7a67
+            tag: 0.23.2@sha256:d00473cb58f0082c07cd6ed0d326a8a86f443ab69c51f8fc2b1a41687d45c661
          env:
            - name: OLLAMA_KEEP_ALIVE
              value: 24h
@@ -55,7 +55,7 @@ ollama:
        main:
          image:
            repository: ollama/ollama
-            tag: 0.23.3@sha256:9b519ed11930ba9a3c6123f8546b8f553e247ea6ce58739a4878f913996e7a67
+            tag: 0.23.2@sha256:d00473cb58f0082c07cd6ed0d326a8a86f443ab69c51f8fc2b1a41687d45c661
          env:
            - name: OLLAMA_KEEP_ALIVE
              value: 24h
@@ -89,7 +89,7 @@ ollama:
        main:
          image:
            repository: ollama/ollama
-            tag: 0.23.3@sha256:9b519ed11930ba9a3c6123f8546b8f553e247ea6ce58739a4878f913996e7a67
+            tag: 0.23.2@sha256:d00473cb58f0082c07cd6ed0d326a8a86f443ab69c51f8fc2b1a41687d45c661
          env:
            - name: OLLAMA_KEEP_ALIVE
              value: 24h
@@ -110,7 +110,7 @@ ollama:
        main:
          image:
            repository: ghcr.io/open-webui/open-webui
-            tag: v0.9.5@sha256:e045bde3b004cc7f8c319412345eb56c87ea6ac57031534a31ca37ad5424beb3
+            tag: v0.9.4@sha256:172e1fe0e89af2a07f42f2b1d943f30c8ddd7b9c2e182f3678b4790cdb83abea
          env:
            - name: ENV
              value: prod
--- a/clusters/cl01tl/helm/plex/Chart.yaml
+++ b/clusters/cl01tl/helm/plex/Chart.yaml
@@ -20,4 +20,4 @@ dependencies:
    version: 5.0.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/plex.png
 # renovate: datasource=github-releases depName=linuxserver/docker-plex
-appVersion: 1.43.1.10611-1e34174b1-ls305
+appVersion: 1.43.1.10611-1e34174b1-ls304
--- a/clusters/cl01tl/helm/plex/values.yaml
+++ b/clusters/cl01tl/helm/plex/values.yaml
@@ -22,7 +22,7 @@ plex:
        main:
          image:
            repository: ghcr.io/linuxserver/plex
-            tag: 1.43.1.10611-1e34174b1-ls305@sha256:8d937dd32659bb1defa02d713a3b1cc99919f12aa17a072d588e770a6f1d7d26
+            tag: 1.43.1.10611-1e34174b1-ls304@sha256:c5e295f023b4e92b3ca467626dbc2ba8a9b5e53934810df74d99c14e38ae1857
          env:
            - name: TZ
              value: America/Chicago
--- a/clusters/cl01tl/helm/radarr-4k/Chart.yaml
+++ b/clusters/cl01tl/helm/radarr-4k/Chart.yaml
@@ -33,4 +33,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/radarr-4k.png
 # renovate: datasource=github-releases depName=linuxserver/docker-radarr
-appVersion: 6.1.1.10360-ls302
+appVersion: 6.1.1.10360-ls301
--- a/clusters/cl01tl/helm/radarr-4k/values.yaml
+++ b/clusters/cl01tl/helm/radarr-4k/values.yaml
@@ -14,7 +14,7 @@ radarr-4k:
        main:
          image:
            repository: ghcr.io/linuxserver/radarr
-            tag: 6.1.1.10360-ls302@sha256:15417a594ebda4c660a9fa9748e7199d33e2d17b31bbc5ad7ba2e86f0b414763
+            tag: 6.1.1.10360-ls301@sha256:659e5f20500948b1491f31dd85c6f99a43508ce3e46595793e1e15aa955bf6d7
          env:
            - name: TZ
              value: America/Chicago
--- a/clusters/cl01tl/helm/radarr-anime/Chart.yaml
+++ b/clusters/cl01tl/helm/radarr-anime/Chart.yaml
@@ -33,4 +33,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/radarr-anime.png
 # renovate: datasource=github-releases depName=linuxserver/docker-radarr
-appVersion: 6.1.1.10360-ls302
+appVersion: 6.1.1.10360-ls301
--- a/clusters/cl01tl/helm/radarr-anime/values.yaml
+++ b/clusters/cl01tl/helm/radarr-anime/values.yaml
@@ -14,7 +14,7 @@ radarr-anime:
        main:
          image:
            repository: ghcr.io/linuxserver/radarr
-            tag: 6.1.1.10360-ls302@sha256:15417a594ebda4c660a9fa9748e7199d33e2d17b31bbc5ad7ba2e86f0b414763
+            tag: 6.1.1.10360-ls301@sha256:659e5f20500948b1491f31dd85c6f99a43508ce3e46595793e1e15aa955bf6d7
          env:
            - name: TZ
              value: America/Chicago
--- a/clusters/cl01tl/helm/radarr-standup/Chart.yaml
+++ b/clusters/cl01tl/helm/radarr-standup/Chart.yaml
@@ -33,4 +33,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/radarr.png
 # renovate: datasource=github-releases depName=linuxserver/docker-radarr
-appVersion: 6.1.1.10360-ls302
+appVersion: 6.1.1.10360-ls301
--- a/clusters/cl01tl/helm/radarr-standup/values.yaml
+++ b/clusters/cl01tl/helm/radarr-standup/values.yaml
@@ -14,7 +14,7 @@ radarr-standup:
        main:
          image:
            repository: ghcr.io/linuxserver/radarr
-            tag: 6.1.1.10360-ls302@sha256:15417a594ebda4c660a9fa9748e7199d33e2d17b31bbc5ad7ba2e86f0b414763
+            tag: 6.1.1.10360-ls301@sha256:659e5f20500948b1491f31dd85c6f99a43508ce3e46595793e1e15aa955bf6d7
          env:
            - name: TZ
              value: America/Chicago
--- a/clusters/cl01tl/helm/radarr/Chart.yaml
+++ b/clusters/cl01tl/helm/radarr/Chart.yaml
@@ -33,4 +33,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/radarr.png
 # renovate: datasource=github-releases depName=linuxserver/docker-radarr
-appVersion: 6.1.1.10360-ls302
+appVersion: 6.1.1.10360-ls301
--- a/clusters/cl01tl/helm/radarr/values.yaml
+++ b/clusters/cl01tl/helm/radarr/values.yaml
@@ -14,7 +14,7 @@ radarr:
        main:
          image:
            repository: ghcr.io/linuxserver/radarr
-            tag: 6.1.1.10360-ls302@sha256:15417a594ebda4c660a9fa9748e7199d33e2d17b31bbc5ad7ba2e86f0b414763
+            tag: 6.1.1.10360-ls301@sha256:659e5f20500948b1491f31dd85c6f99a43508ce3e46595793e1e15aa955bf6d7
          env:
            - name: TZ
              value: America/Chicago
--- a/clusters/cl01tl/helm/searxng/values.yaml
+++ b/clusters/cl01tl/helm/searxng/values.yaml
@@ -10,7 +10,7 @@ searxng:
        main:
          image:
            repository: searxng/searxng
-            tag: latest@sha256:e37c25170d9f5947b16713af33e0ab41f0e6e6e73685e19c30fc6bb63562f801
+            tag: latest@sha256:b5d4892daf19736acdefc34a67bb06dd702638beb282e993aeb612e0953c2d54
          env:
            - name: SEARXNG_BASE_URL
              value: http://searxng-api.searxng:8080
@@ -38,7 +38,7 @@ searxng:
        main:
          image:
            repository: searxng/searxng
-            tag: latest@sha256:e37c25170d9f5947b16713af33e0ab41f0e6e6e73685e19c30fc6bb63562f801
+            tag: latest@sha256:b5d4892daf19736acdefc34a67bb06dd702638beb282e993aeb612e0953c2d54
          env:
            - name: SEARXNG_BASE_URL
              value: https://searxng.alexlebens.net/
--- a/clusters/cl01tl/helm/shelfmark/Chart.yaml
+++ b/clusters/cl01tl/helm/shelfmark/Chart.yaml
@@ -24,4 +24,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/shelfmark.png
 # renovate: datasource=github-releases depName=calibrain/shelfmark
-appVersion: v1.3.0
+appVersion: v1.2.3
--- a/clusters/cl01tl/helm/shelfmark/values.yaml
+++ b/clusters/cl01tl/helm/shelfmark/values.yaml
@@ -12,7 +12,7 @@ shelfmark:
        main:
          image:
            repository: ghcr.io/calibrain/shelfmark
-            tag: v1.3.0@sha256:e891eda444b261da48a839db652034bce4e20ac09c167f14adf939dedf96b572
+            tag: v1.2.3@sha256:bd6cb4bfa14a917e76945c22ed2c376d64cf7fdb74632435db713d42ca597b20
          env:
            - name: FLASK_PORT
              value: 8084
--- a/clusters/cl01tl/helm/site-documentation/values.yaml
+++ b/clusters/cl01tl/helm/site-documentation/values.yaml
@@ -10,7 +10,7 @@ site-documentation:
        main:
          image:
            repository: harbor.alexlebens.net/images/site-documentation
-            tag: 0.31.0@sha256:9e819b8b2d18437080fed5bbe9a2b42e0abdd457dcdd0e894ff98a728e056062
+            tag: 0.29.0@sha256:5b1390542baa3367f7646dcec79b96ce2341f3fd16314017c44046e792121bfa
          resources:
            requests:
              cpu: 10m
--- a/clusters/cl01tl/helm/site-profile/values.yaml
+++ b/clusters/cl01tl/helm/site-profile/values.yaml
@@ -10,7 +10,7 @@ site-profile:
        main:
          image:
            repository: harbor.alexlebens.net/images/site-profile
-            tag: 3.20.2@sha256:38dc06984b895fa5efe4ab913990c39c7b603a8daa0bcb06b30d96255be98cc3
+            tag: 3.20.1@sha256:b93c69d662380b9aea223198dad59de92fd1106b449920aa9ea3e6653f6cf814
          resources:
            requests:
              cpu: 10m
--- a/clusters/cl01tl/helm/stack/templates/application.yaml
+++ b/clusters/cl01tl/helm/stack/templates/application.yaml
@@ -68,7 +68,7 @@ spec:
        - .spec.endpoints[]?.relabelings[]?.action
  syncPolicy:
    automated:
-      enabled: false
+      enabled: true
      prune: true
      selfHeal: false
    retry:
--- a/clusters/cl01tl/helm/tailscale-operator/templates/service.yaml
+++ b/clusters/cl01tl/helm/tailscale-operator/templates/service.yaml
@@ -116,18 +116,3 @@ metadata:
 spec:
  externalName: placeholder
  type: ExternalName
-
---
-apiVersion: v1
-kind: Service
-metadata:
-  name: invoke-ai-pd05wd
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: invoke-ai-pd05wd
-    {{- include "custom.labels" . | nindent 4 }}
-  annotations:
-    tailscale.com/tailnet-fqdn: invoke-ai-pd05wd.boreal-beaufort.ts.net
-spec:
-  externalName: placeholder
-  type: ExternalName
--- a/clusters/cl01tl/helm/talos/values.yaml
+++ b/clusters/cl01tl/helm/talos/values.yaml
@@ -401,7 +401,7 @@ etcd-defrag:
        main:
          image:
            repository: ghcr.io/siderolabs/talosctl
-            tag: v1.13.2@sha256:6382e6f6f8b08ab7c5cc9f77446cfd79975fe0055c0a6d73455a9dc6a6c4b98d
+            tag: v1.13.0@sha256:cf5be4c584572787eda0f5818404d2380f041b1022ce85454b25d4e01334fba6
          args:
            - etcd
            - defrag
@@ -430,7 +430,7 @@ etcd-defrag:
        main:
          image:
            repository: ghcr.io/siderolabs/talosctl
-            tag: v1.13.2@sha256:6382e6f6f8b08ab7c5cc9f77446cfd79975fe0055c0a6d73455a9dc6a6c4b98d
+            tag: v1.13.0@sha256:cf5be4c584572787eda0f5818404d2380f041b1022ce85454b25d4e01334fba6
          args:
            - etcd
            - defrag
@@ -459,7 +459,7 @@ etcd-defrag:
        main:
          image:
            repository: ghcr.io/siderolabs/talosctl
-            tag: v1.13.2@sha256:6382e6f6f8b08ab7c5cc9f77446cfd79975fe0055c0a6d73455a9dc6a6c4b98d
+            tag: v1.13.0@sha256:cf5be4c584572787eda0f5818404d2380f041b1022ce85454b25d4e01334fba6
          args:
            - etcd
            - defrag
--- a/clusters/cl01tl/helm/tdarr/values.yaml
+++ b/clusters/cl01tl/helm/tdarr/values.yaml
@@ -12,7 +12,7 @@ tdarr:
        main:
          image:
            repository: ghcr.io/haveagitgat/tdarr
-            tag: 2.73.01@sha256:8130752e768bb034167065d6185ba291623486231f708f441452e24416c929b8
+            tag: 2.72.01@sha256:fd9abc79b06a14e4ed0940aade7a92afe734d3188104fa085d5cde3eaf778b2f
          env:
            - name: TZ
              value: America/Chicago
@@ -68,7 +68,7 @@ tdarr:
        main:
          image:
            repository: ghcr.io/haveagitgat/tdarr_node
-            tag: 2.73.01@sha256:8d7fccd5d31a4523b13018b7c4a949c2656158e0abece7a3b04f489b4690af38
+            tag: 2.72.01@sha256:3c1ce8bd74c5fe0dc8d345bdd373eb68b9138fbb34478d126646bb04f1522ce5
          env:
            - name: TZ
              value: America/Chicago
--- a/clusters/cl01tl/helm/traefik/Chart.lock
+++ b/clusters/cl01tl/helm/traefik/Chart.lock
@@ -1,9 +1,9 @@
 dependencies:
 - name: traefik
  repository: https://traefik.github.io/charts
-  version: 40.2.0
+  version: 40.0.0
 - name: traefik-crds
  repository: https://traefik.github.io/charts
  version: 1.18.0
-digest: sha256:cd86f011115f49e452e58db5b84407d53922fa7f9124692c9f386de1d39307cd
-generated: "2026-05-13T14:11:38.99873827Z"
+digest: sha256:d887af2faf8b07488d6c4c3731337768492292d99edf69040498e24efe5b0a65
+generated: "2026-05-06T23:28:40.081576086Z"
--- a/clusters/cl01tl/helm/traefik/Chart.yaml
+++ b/clusters/cl01tl/helm/traefik/Chart.yaml
@@ -14,11 +14,11 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: traefik
-    version: 40.2.0
+    version: 40.0.0
    repository: https://traefik.github.io/charts
  - name: traefik-crds
    version: 1.18.0
    repository: https://traefik.github.io/charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/traefik.png
 # renovate: datasource=github-releases depName=traefik/traefik
-appVersion: v3.7.1
+appVersion: v3.7.0
--- a/clusters/cl01tl/helm/traefik/values.yaml
+++ b/clusters/cl01tl/helm/traefik/values.yaml
@@ -2,7 +2,7 @@ traefik:
  image:
    registry: docker.io
    repository: traefik
-    tag: v3.7.1@sha256:09d3ef496d61fd830905fce5035c8a9505c2d3849632cffe13e5a43b34526f90
+    tag: v3.7.0@sha256:eb328e2c806c53aafbbace6c451fa54d268961261a85452fcf0fb752a30c17be
  deployment:
    kind: DaemonSet
  ingressClass:
--- a/clusters/cl01tl/helm/tubearchivist/templates/elasticsearch.yaml
+++ b/clusters/cl01tl/helm/tubearchivist/templates/elasticsearch.yaml
@@ -8,7 +8,7 @@ metadata:
    {{- include "custom.labels" . | nindent 4 }}
 spec:
  # renovate: datasource=docker depName=elasticsearch
-  version: 9.4.1
+  version: 9.4.0
  auth:
    fileRealm:
      - secretName: tubearchivist-elasticsearch-config
--- a/clusters/cl01tl/helm/unpoller/Chart.yaml
+++ b/clusters/cl01tl/helm/unpoller/Chart.yaml
@@ -20,4 +20,4 @@ dependencies:
    version: 5.0.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/ubiquiti-unifi.png
 # renovate: datasource=github-releases depName=unpoller/unpoller
-appVersion: v3.2.0
+appVersion: v3.1.2
--- a/clusters/cl01tl/helm/unpoller/values.yaml
+++ b/clusters/cl01tl/helm/unpoller/values.yaml
@@ -8,7 +8,7 @@ unpoller:
        main:
          image:
            repository: ghcr.io/unpoller/unpoller
-            tag: v3.2.0@sha256:bf7bdcc59fcdaa4699687007aa3ec24ddb3c9d9521f392d8c7aa2bea1bdb781a
+            tag: v3.1.2@sha256:d63bd939ea46cbf76f3a5d21c668426202a389ebaa89e200c4906712f9b8dd22
          env:
            - name: UP_UNIFI_CONTROLLER_0_SAVE_ALARMS
              value: 'true'
--- a/clusters/cl01tl/helm/whodb/values.yaml
+++ b/clusters/cl01tl/helm/whodb/values.yaml
@@ -7,7 +7,7 @@ whodb:
        main:
          image:
            repository: clidey/whodb
-            tag: 0.109.0@sha256:ccb400cb7d0e287d482980dd9df59e36ada7a94cce692af2120d29ca295f3dc4
+            tag: 0.107.0@sha256:20fb865bd0972bf56600c9e16715a3b5f30fef77defc19d74efcf72218d5f567
          env:
            - name: WHODB_OLLAMA_HOST
              value: ollama-server-2.ollama
--- a/hosts/pd05wd/invoke-ai/compose.yaml
+++ b/hosts/pd05wd/invoke-ai/compose.yaml
@@ -1,6 +1,6 @@
 services:
    tailscale-invoke-ai:
-        image: ghcr.io/tailscale/tailscale:v1.96.5@sha256:dbeff02d2337344b351afac203427218c4d0a06c43fc10a865184063498472a6
+        image: ghcr.io/tailscale/tailscale:v1.96.5
        container_name: tailscale-invoke-ai
        cap_add:
            - net_admin
@@ -21,7 +21,7 @@ services:
            - /dev/net/tun:/dev/net/tun

    invoke-ai:
-        image: ghcr.io/invoke-ai/invokeai:main-cuda@sha256:6d4c2edc3013ce7001008707722620bc7306325c4de59620ac470aa63e80448b
+        image: ghcr.io/invoke-ai/invokeai:main-cuda
        container_name: stable-diffusion
        environment:
            - INVOKEAI_ROOT=~/invokeai
--- a/hosts/pd05wd/ollama/compose.yaml
+++ b/hosts/pd05wd/ollama/compose.yaml
@@ -1,7 +1,7 @@
 ---
 services:
    tailscale-ollama:
-        image: ghcr.io/tailscale/tailscale:v1.96.5@sha256:dbeff02d2337344b351afac203427218c4d0a06c43fc10a865184063498472a6
+        image: ghcr.io/tailscale/tailscale:v1.96.5
        container_name: tailscale-ollama
        cap_add:
            - net_admin
@@ -20,7 +20,7 @@ services:
            - /dev/net/tun:/dev/net/tun

    ollama:
-        image: ollama/ollama:0.23.3@sha256:9b519ed11930ba9a3c6123f8546b8f553e247ea6ce58739a4878f913996e7a67
+        image: ollama/ollama:0.23.2@sha256:d00473cb58f0082c07cd6ed0d326a8a86f443ab69c51f8fc2b1a41687d45c661
        container_name: ollama
        environment:
            - OLLAMA_KEEP_ALIVE=24h
--- a/hosts/pd05wd/stable-diffusion/compose.yaml
+++ b/hosts/pd05wd/stable-diffusion/compose.yaml
@@ -1,7 +1,7 @@
 ---
 services:
    tailscale-stable-diffusion:
-        image: ghcr.io/tailscale/tailscale:v1.96.5@sha256:dbeff02d2337344b351afac203427218c4d0a06c43fc10a865184063498472a6
+        image: ghcr.io/tailscale/tailscale:v1.96.5
        container_name: tailscale-stable-diffusion
        cap_add:
            - net_admin
@@ -22,7 +22,7 @@ services:
            - /dev/net/tun:/dev/net/tun

    stable-diffusion:
-        image: ghcr.io/ai-dock/stable-diffusion-webui:latest-cuda@sha256:bc4b2b12ac8d030cc5daf25e2c32517709b7c15f59a32685c4c1a14a9606eb42
+        image: ghcr.io/ai-dock/stable-diffusion-webui:latest-cuda
        container_name: stable-diffusion
        environment:
            - WEBUI_ARGS="--api --listen"
--- a/hosts/ps08rp/traefik/compose.yaml
+++ b/hosts/ps08rp/traefik/compose.yaml
@@ -1,7 +1,7 @@
 ---
 services:
    traefik:
-        image: ghcr.io/traefik/traefik:v3.7.1@sha256:09d3ef496d61fd830905fce5035c8a9505c2d3849632cffe13e5a43b34526f90
+        image: ghcr.io/traefik/traefik:v3.7.0@sha256:eb328e2c806c53aafbbace6c451fa54d268961261a85452fcf0fb752a30c17be
        container_name: traefik
        command:
            - "--global.checkNewVersion=false"
--- a/hosts/ps09rp/traefik/compose.yaml
+++ b/hosts/ps09rp/traefik/compose.yaml
@@ -1,7 +1,7 @@
 ---
 services:
    traefik:
-        image: ghcr.io/traefik/traefik:v3.7.1@sha256:09d3ef496d61fd830905fce5035c8a9505c2d3849632cffe13e5a43b34526f90
+        image: ghcr.io/traefik/traefik:v3.7.0@sha256:eb328e2c806c53aafbbace6c451fa54d268961261a85452fcf0fb752a30c17be
        container_name: traefik
        command:
            - "--global.checkNewVersion=false"
--- a/hosts/ps10rp/homepage/compose.yaml
+++ b/hosts/ps10rp/homepage/compose.yaml
@@ -32,7 +32,7 @@ services:
            - /var/run/docker.sock:/var/run/docker.sock:ro

    homepage:
-        image: ghcr.io/gethomepage/homepage:v1.13.1@sha256:d8d784e5090111b6e4c56dfd90e272d2953a2094e87349f647165df0fa6c4401
+        image: ghcr.io/gethomepage/homepage:v1.13.0@sha256:690ac1f79e33000c176c2a28229ed00b49b44781e8a63f280a8ece22c161f099
        container_name: homepage
        labels:
            traefik.enable: true
--- a/hosts/ps10rp/traefik/compose.yaml
+++ b/hosts/ps10rp/traefik/compose.yaml
@@ -20,7 +20,7 @@ services:
            - /dev/net/tun:/dev/net/tun

    traefik:
-        image: ghcr.io/traefik/traefik:v3.7.1@sha256:09d3ef496d61fd830905fce5035c8a9505c2d3849632cffe13e5a43b34526f90
+        image: ghcr.io/traefik/traefik:v3.7.0@sha256:eb328e2c806c53aafbbace6c451fa54d268961261a85452fcf0fb752a30c17be
        container_name: traefik
        command:
            - "--global.checkNewVersion=false"