Update Helm release argo-cd to v9.2.0

2025-12-24 19:26:30 +00:00
111 changed files with 788 additions and 1154 deletions
--- a/clusters/cl01tl/helm/actual/values.yaml
+++ b/clusters/cl01tl/helm/actual/values.yaml
@@ -77,9 +77,3 @@ actual:
              readOnly: false
 volsync-target-data:
  pvcTarget: actual-data
-  local:
-    enabled: false
-  remote:
-    enabled: false
-  external:
-    enabled: false
--- a/clusters/cl01tl/helm/argo-workflows/Chart.yaml
+++ b/clusters/cl01tl/helm/argo-workflows/Chart.yaml
@@ -25,7 +25,7 @@ dependencies:
    repository: https://argoproj.github.io/argo-helm
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.4.4
+    version: 7.4.3
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 # renovate: github=argoproj/argo-workflows
--- a/clusters/cl01tl/helm/argocd/Chart.lock
+++ b/clusters/cl01tl/helm/argocd/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: argo-cd
  repository: https://argoproj.github.io/argo-helm
-  version: 9.2.1
-digest: sha256:e2cb7a8af0a0ecef66b2808325c4fa179d1b598b54bedcdd4f144750fd7e65cb
-generated: "2025-12-25T16:01:15.118311807Z"
+  version: 9.2.0
+digest: sha256:1413d0b780ce108754e8ffef217631baf5a6e6ee50accf0ddaf288a2fac8c1ed
+generated: "2025-12-24T19:26:25.627880272Z"
--- a/clusters/cl01tl/helm/argocd/Chart.yaml
+++ b/clusters/cl01tl/helm/argocd/Chart.yaml
@@ -15,7 +15,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: argo-cd
-    version: 9.2.1
+    version: 9.2.0
    repository: https://argoproj.github.io/argo-helm
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 # renovate: github=argoproj/argo-cd
--- a/clusters/cl01tl/helm/audiobookshelf/values.yaml
+++ b/clusters/cl01tl/helm/audiobookshelf/values.yaml
@@ -123,17 +123,5 @@ audiobookshelf:
              readOnly: false
 volsync-target-config:
  pvcTarget: audiobookshelf-config
-  local:
-    enabled: false
-  remote:
-    enabled: false
-  external:
-    enabled: false
 volsync-target-metadata:
  pvcTarget: audiobookshelf-metadata
-  local:
-    enabled: false
-  remote:
-    enabled: false
-  external:
-    enabled: false
--- a/clusters/cl01tl/helm/authentik/Chart.yaml
+++ b/clusters/cl01tl/helm/authentik/Chart.yaml
@@ -28,7 +28,7 @@ dependencies:
    version: 2.1.4
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.4.4
+    version: 7.4.3
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: redis-replication
    version: 0.5.0
--- a/clusters/cl01tl/helm/authentik/values.yaml
+++ b/clusters/cl01tl/helm/authentik/values.yaml
@@ -109,7 +109,7 @@ redis-replication:
  existingSecret:
    enabled: false
  redisReplication:
-    clusterSize: 1
-  redisSentinel:
-    enabled: false
+    clusterSize: 3
+  redisSentinel:
+    enabled: true
    clusterSize: 3
--- a/clusters/cl01tl/helm/backrest/values.yaml
+++ b/clusters/cl01tl/helm/backrest/values.yaml
@@ -107,17 +107,5 @@ backrest:
              readOnly: true
 volsync-target-data:
  pvcTarget: backrest-data
-  local:
-    enabled: false
-  remote:
-    enabled: false
-  external:
-    enabled: false
 volsync-target-config:
  pvcTarget: backrest-config
-  local:
-    enabled: false
-  remote:
-    enabled: false
-  external:
-    enabled: false
--- a/clusters/cl01tl/helm/bazarr/values.yaml
+++ b/clusters/cl01tl/helm/bazarr/values.yaml
@@ -83,9 +83,3 @@ volsync-target-config:
    runAsGroup: 1000
    fsGroup: 1000
    fsGroupChangePolicy: OnRootMismatch
-  local:
-    enabled: false
-  remote:
-    enabled: false
-  external:
-    enabled: false
--- a/clusters/cl01tl/helm/blocky/values.yaml
+++ b/clusters/cl01tl/helm/blocky/values.yaml
@@ -96,9 +96,11 @@ blocky:
              cl01tl-endpoint                 IN      A       10.232.1.22
              cl01tl-endpoint                 IN      A       10.232.1.23

+              cl01tl-gateway                  IN      A       10.232.1.200
+
              traefik-cl01tl                  IN      A       10.232.1.21
              blocky                          IN      A       10.232.1.22
-              cilium-cl01tl                   IN      A       10.232.1.23
+              plex-lb                         IN      A       10.232.1.23

              ;; Application Names
              actual                          IN      CNAME   traefik-cl01tl
@@ -113,7 +115,6 @@ blocky:
              ceph                            IN      CNAME   traefik-cl01tl
              code-server                     IN      CNAME   traefik-cl01tl
              ephemera                        IN      CNAME   traefik-cl01tl
-              feishin                         IN      CNAME   traefik-cl01tl
              garage-s3                       IN      CNAME   traefik-cl01tl
              garage-webui                    IN      CNAME   traefik-cl01tl
              gatus                           IN      CNAME   traefik-cl01tl
@@ -124,7 +125,7 @@ blocky:
              home                            IN      CNAME   traefik-cl01tl
              home-assistant                  IN      CNAME   traefik-cl01tl
              home-assistant-code-server      IN      CNAME   traefik-cl01tl
-              hubble                          IN      CNAME   traefik-cl01tl
+              hubble                          IN      CNAME   cl01tl-gateway
              huntarr                         IN      CNAME   traefik-cl01tl
              immich                          IN      CNAME   traefik-cl01tl
              jellyfin                        IN      CNAME   traefik-cl01tl
@@ -135,7 +136,7 @@ blocky:
              lidatube                        IN      CNAME   traefik-cl01tl
              listenarr                       IN      CNAME   traefik-cl01tl
              mail                            IN      CNAME   traefik-cl01tl
-              navidrome                       IN      CNAME   traefik-cl01tl
+              n8n                             IN      CNAME   traefik-cl01tl
              ntfy                            IN      CNAME   traefik-cl01tl
              objects                         IN      CNAME   traefik-cl01tl
              ollama                          IN      CNAME   traefik-cl01tl
@@ -152,14 +153,12 @@ blocky:
              radarr-4k                       IN      CNAME   traefik-cl01tl
              radarr-anime                    IN      CNAME   traefik-cl01tl
              radarr-standup                  IN      CNAME   traefik-cl01tl
-              rayflume                        IN      CNAME   traefik-cl01tl
              searxng                         IN      CNAME   traefik-cl01tl
              seerr                           IN      CNAME   traefik-cl01tl
              slskd                           IN      CNAME   traefik-cl01tl
              sonarr                          IN      CNAME   traefik-cl01tl
              sonarr-4k                       IN      CNAME   traefik-cl01tl
              sonarr-anime                    IN      CNAME   traefik-cl01tl
-              soulsync                        IN      CNAME   traefik-cl01tl
              stalwart                        IN      CNAME   traefik-cl01tl
              tautulli                        IN      CNAME   traefik-cl01tl
              tdarr                           IN      CNAME   traefik-cl01tl
@@ -318,6 +317,6 @@ redis-replication:
  existingSecret:
    enabled: false
  redisReplication:
-    clusterSize: 1
+    clusterSize: 3
  redisSentinel:
    enabled: false
--- a/clusters/cl01tl/helm/booklore/values.yaml
+++ b/clusters/cl01tl/helm/booklore/values.yaml
@@ -202,12 +202,6 @@ mariadb-cluster:
            key: secret
 volsync-target-config:
  pvcTarget: booklore-config
-  local:
-    enabled: false
-  remote:
-    enabled: false
-  external:
-    enabled: false
 volsync-target-data:
  pvcTarget: booklore-data
  local:
--- a/clusters/cl01tl/helm/cilium/templates/cilium-l2-announcement-policy.yaml
+++ b/clusters/cl01tl/helm/cilium/templates/cilium-l2-announcement-policy.yaml
@@ -1,19 +0,0 @@
-apiVersion: "cilium.io/v2alpha1"
-kind: CiliumL2AnnouncementPolicy
-metadata:
-  name: general-l2-policy
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: general-l2-policy
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  nodeSelector:
-    matchExpressions:
-      - key: kubernetes.io/hostname
-        operator: Exists
-  interfaces:
-    - end0
-    - enp6s0
-  externalIPs: true
-  loadBalancerIPs: true
--- a/clusters/cl01tl/helm/cilium/templates/gateway.yaml
+++ b/clusters/cl01tl/helm/cilium/templates/gateway.yaml
@@ -1,7 +1,7 @@
 # apiVersion: gateway.networking.k8s.io/v1
 # kind: Gateway
 # metadata:
-#   name: cilium-tls-gateway
+#   name: tls-gateway
 #   namespace: {{ .Release.Namespace }}
 #   labels:
 #     app.kubernetes.io/name: tls-gateway
--- a/clusters/cl01tl/helm/cilium/values.yaml
+++ b/clusters/cl01tl/helm/cilium/values.yaml
@@ -26,7 +26,7 @@ cilium:
        - SYS_ADMIN
        - SYS_RESOURCE
  l2announcements:
-    enabled: true
+    enabled: false
  bgpControlPlane:
    enabled: false
    secretsNamespace:
--- a/clusters/cl01tl/helm/code-server/values.yaml
+++ b/clusters/cl01tl/helm/code-server/values.yaml
@@ -75,9 +75,3 @@ volsync-target-config:
    runAsGroup: 1000
    fsGroup: 1000
    fsGroupChangePolicy: OnRootMismatch
-  local:
-    enabled: false
-  remote:
-    enabled: false
-  external:
-    enabled: false
--- a/clusters/cl01tl/helm/directus/Chart.yaml
+++ b/clusters/cl01tl/helm/directus/Chart.yaml
@@ -26,7 +26,7 @@ dependencies:
    version: 2.1.4
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.4.4
+    version: 7.4.3
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: redis-replication
    version: 0.5.0
--- a/clusters/cl01tl/helm/directus/values.yaml
+++ b/clusters/cl01tl/helm/directus/values.yaml
@@ -216,7 +216,7 @@ redis-replication:
    name: directus-redis-config
    key: password
  redisReplication:
-    clusterSize: 1
-  redisSentinel:
-    enabled: false
+    clusterSize: 3
+  redisSentinel:
+    enabled: true
    clusterSize: 3
--- a/clusters/cl01tl/helm/ephemera/values.yaml
+++ b/clusters/cl01tl/helm/ephemera/values.yaml
@@ -9,7 +9,7 @@ ephemera:
        main:
          image:
            repository: ghcr.io/orwellianepilogue/ephemera
-            tag: 1.4.1
+            tag: 1.3.1
            pullPolicy: IfNotPresent
          env:
            - name: AA_BASE_URL
@@ -129,9 +129,3 @@ ephemera:
              readOnly: false
 volsync-target-config:
  pvcTarget: ephemera
-  local:
-    enabled: false
-  remote:
-    enabled: false
-  external:
-    enabled: false
--- a/clusters/cl01tl/helm/freshrss/Chart.yaml
+++ b/clusters/cl01tl/helm/freshrss/Chart.yaml
@@ -26,7 +26,7 @@ dependencies:
    version: 2.1.4
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.4.4
+    version: 7.4.3
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-data
--- a/clusters/cl01tl/helm/freshrss/values.yaml
+++ b/clusters/cl01tl/helm/freshrss/values.yaml
@@ -80,7 +80,7 @@ freshrss:
        main:
          image:
            repository: freshrss/freshrss
-            tag: 1.28.0
+            tag: 1.27.1
            pullPolicy: IfNotPresent
          env:
            - name: PGID
@@ -246,9 +246,3 @@ volsync-target-data:
      - 100
      - 109
      - 65539
-  local:
-    enabled: false
-  remote:
-    enabled: false
-  external:
-    enabled: false
--- a/clusters/cl01tl/helm/gatus/Chart.yaml
+++ b/clusters/cl01tl/helm/gatus/Chart.yaml
@@ -22,7 +22,7 @@ dependencies:
    version: 1.4.4
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.4.4
+    version: 7.4.3
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-data
--- a/clusters/cl01tl/helm/gatus/values.yaml
+++ b/clusters/cl01tl/helm/gatus/values.yaml
@@ -134,21 +134,15 @@ gatus:
      - name: tubearchivist
        url: https://tubearchivist.alexlebens.net
        <<: *defaults
-      - name: navidrome
-        url: https://navidrome.alexlebens.net
-        <<: *defaults
-      - name: feishin
-        url: https://feishin.alexlebens.net
-        <<: *defaults
-      - name: audiobookshelf
-        url: https://audiobookshelf.alexlebens.net
-        <<: *defaults
      - name: immich
        url: https://immich.alexlebens.net
        <<: *defaults
      - name: photoview
        url: https://photoview.alexlebens.net
        <<: *defaults
+      - name: audiobookshelf
+        url: https://audiobookshelf.alexlebens.net
+        <<: *defaults
      - name: booklore
        url: https://booklore.alexlebens.net
        <<: *defaults
@@ -185,6 +179,9 @@ gatus:
      - name: argo-workflows
        url: https://argo-workflows.alexlebens.net
        <<: *defaults
+      - name: n8n
+        url: https://n8n.alexlebens.net
+        <<: *defaults
      - name: omni-tools
        url: https://omni-tools.alexlebens.net
        <<: *defaults
@@ -313,12 +310,6 @@ gatus:
      - name: lidatube
        url: https://lidatube.alexlebens.net
        <<: *defaults
-      - name: rayflume
-        url: https://rayflume.alexlebens.net
-        <<: *defaults
-      - name: soulsync
-        url: https://soulsync.alexlebens.net
-        <<: *defaults
      - name: slskd
        url: https://slskd.alexlebens.net
        <<: *defaults
@@ -423,9 +414,3 @@ postgres-18-cluster:
      #   backupName: external
 volsync-target-data:
  pvcTarget: gatus
-  local:
-    enabled: false
-  remote:
-    enabled: false
-  external:
-    enabled: false
--- a/clusters/cl01tl/helm/gitea/Chart.yaml
+++ b/clusters/cl01tl/helm/gitea/Chart.yaml
@@ -39,7 +39,7 @@ dependencies:
    version: 2.1.4
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.4.4
+    version: 7.4.3
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: redis-replication
    alias: redis-replication-gitea
--- a/clusters/cl01tl/helm/gitea/values.yaml
+++ b/clusters/cl01tl/helm/gitea/values.yaml
@@ -1,7 +1,7 @@
 gitea:
  global:
    imageRegistry: registry.hub.docker.com
-  replicaCount: 2
+  replicaCount: 3
  image:
    repository: gitea/gitea
    tag: 1.25.3
--- a/clusters/cl01tl/helm/grafana-operator/Chart.yaml
+++ b/clusters/cl01tl/helm/grafana-operator/Chart.yaml
@@ -21,7 +21,7 @@ dependencies:
    repository: https://grafana.github.io/helm-charts
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.4.4
+    version: 7.4.3
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: redis-replication
    alias: redis-replication-unified-alerting
--- a/clusters/cl01tl/helm/harbor/Chart.yaml
+++ b/clusters/cl01tl/helm/harbor/Chart.yaml
@@ -21,7 +21,7 @@ dependencies:
    repository: https://helm.goharbor.io
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.4.4
+    version: 7.4.3
    repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
  - name: redis-replication
    version: 0.5.0
--- a/clusters/cl01tl/helm/harbor/values.yaml
+++ b/clusters/cl01tl/helm/harbor/values.yaml
@@ -142,7 +142,7 @@ redis-replication:
  existingSecret:
    enabled: false
  redisReplication:
-    clusterSize: 1
-  redisSentinel:
-    enabled: false
+    clusterSize: 3
+  redisSentinel:
+    enabled: true
    clusterSize: 3
--- a/clusters/cl01tl/helm/home-assistant/values.yaml
+++ b/clusters/cl01tl/helm/home-assistant/values.yaml
@@ -132,9 +132,3 @@ volsync-target-config:
    runAsGroup: 1000
    fsGroup: 1000
    fsGroupChangePolicy: OnRootMismatch
-  local:
-    enabled: false
-  remote:
-    enabled: false
-  external:
-    enabled: false
--- a/clusters/cl01tl/helm/homepage/values.yaml
+++ b/clusters/cl01tl/helm/homepage/values.yaml
@@ -129,6 +129,18 @@ homepage:
                maximumFractionDigits: 0
        services.yaml: |
          - Media:
+              - Plex:
+                  icon: sh-plex.webp
+                  description: Media server
+                  href: https://plex.alexlebens.net
+                  siteMonitor: http://plex.plex:32400
+                  statusStyle: dot
+              - Jellyfin:
+                  icon: sh-jellyfin.webp
+                  description: Media server
+                  href: https://jellyfin.alexlebens.net
+                  siteMonitor: http://jellyfin.jellyfin:80
+                  statusStyle: dot
              - Media Requests:
                  icon: sh-overseerr.webp
                  description: Overseerr
@@ -147,30 +159,12 @@ homepage:
                  href: https://yamtrack.alexlebens.net
                  siteMonitor: http://yamtrack.yamtrack:80
                  statusStyle: dot
-              - Movies and TV:
-                  icon: sh-jellyfin.webp
-                  description: Jellyfin
-                  href: https://jellyfin.alexlebens.net
-                  siteMonitor: http://jellyfin.jellyfin:80
-                  statusStyle: dot
              - Youtube Archive:
                  icon: sh-tube-archivist-light.webp
-                  description: TubeArchivist
+                  description: TubeAchivist
                  href: https://tubearchivist.alexlebens.net/login
                  siteMonitor: http://tubearchivist.tubearchivist:80
                  statusStyle: dot
-              - Music:
-                  icon: sh-feishin.webp
-                  description: Feishin
-                  href: https://feishin.alexlebens.net
-                  siteMonitor: http://navidrome-feishin.navidrome:80
-                  statusStyle: dot
-              - Podcasts and Audiobooks:
-                  icon: sh-audiobookshelf.webp
-                  description: Audiobookshelf
-                  href: https://audiobookshelf.alexlebens.net
-                  siteMonitor: http://audiobookshelf.audiobookshelf:80
-                  statusStyle: dot
              - Photos:
                  icon: sh-immich.webp
                  description: Immich
@@ -183,6 +177,12 @@ homepage:
                  href: https://photoview.alexlebens.net
                  siteMonitor: http://photoview.photoview:80
                  statusStyle: dot
+              - Podcasts and Audiobooks:
+                  icon: sh-audiobookshelf.webp
+                  description: Audiobookshelf
+                  href: https://audiobookshelf.alexlebens.net
+                  siteMonitor: http://audiobookshelf.audiobookshelf:80
+                  statusStyle: dot
              - Books:
                  icon: sh-booklore.webp
                  description: Booklore
@@ -331,6 +331,12 @@ homepage:
                  href: https://argo-workflows.alexlebens.net
                  siteMonitor: http://argo-workflows-server.argo-workflows:2746
                  statusStyle: dot
+              - API Workflows:
+                  icon: sh-n8n.webp
+                  description: n8n
+                  href: https://n8n.alexlebens.net
+                  siteMonitor: http://n8n-main.n8n:80
+                  statusStyle: dot
              - Uptime:
                  icon: sh-gatus.webp
                  description: Gatus
@@ -655,25 +661,13 @@ homepage:
                    url: http://lidarr.lidarr:80
                    key: {{ "{{HOMEPAGE_VAR_LIDARR_KEY}}" }}
                    fields: ["wanted", "queued", "artists"]
-              - RayFlume:
-                  icon: sh-youtubarr.webp
-                  description: Playlist to Lidarr Import
-                  href: https://rayflume.alexlebens.net
-                  siteMonitor: http://rayflume.rayflume:80
-                  statusStyle: dot
              - LidaTube:
                  icon: sh-lidatube.webp
                  description: Searches for Music
                  href: https://lidatube.alexlebens.net
                  siteMonitor: http://lidatube.lidatube:80
                  statusStyle: dot
-              - SoulSync:
-                  icon: sh-soulsync.webp
-                  description: Playlist Sync
-                  href: https://soulsync.alexlebens.net
-                  siteMonitor: http://soulsync.soulsync:80
-                  statusStyle: dot
-              - slskd:
+              - Soulseek:
                  icon: sh-slskd.webp
                  description: slskd
                  href: https://slskd.alexlebens.net
--- a/clusters/cl01tl/helm/huntarr/values.yaml
+++ b/clusters/cl01tl/helm/huntarr/values.yaml
@@ -60,9 +60,3 @@ huntarr:
              readOnly: false
 volsync-target-config:
  pvcTarget: huntarr-config
-  local:
-    enabled: false
-  remote:
-    enabled: false
-  external:
-    enabled: false
--- a/clusters/cl01tl/helm/immich/Chart.yaml
+++ b/clusters/cl01tl/helm/immich/Chart.yaml
@@ -20,7 +20,7 @@ dependencies:
    version: 4.5.0
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.4.4
+    version: 7.4.3
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: redis-replication
    version: 0.5.0
--- a/clusters/cl01tl/helm/immich/values.yaml
+++ b/clusters/cl01tl/helm/immich/values.yaml
@@ -226,9 +226,9 @@ redis-replication:
  existingSecret:
    enabled: false
  redisReplication:
-    clusterSize: 1
+    clusterSize: 3
  redisSentinel:
-    enabled: false
+    enabled: true
    clusterSize: 3
 volsync-target-data:
  pvcTarget: immich
--- a/clusters/cl01tl/helm/jellystat/Chart.yaml
+++ b/clusters/cl01tl/helm/jellystat/Chart.yaml
@@ -21,7 +21,7 @@ dependencies:
    version: 4.5.0
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.4.4
+    version: 7.4.3
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-data
--- a/clusters/cl01tl/helm/jellystat/values.yaml
+++ b/clusters/cl01tl/helm/jellystat/values.yaml
@@ -144,9 +144,3 @@ postgres-18-cluster:

 volsync-target-data:
  pvcTarget: jellystat-data
-  local:
-    enabled: false
-  remote:
-    enabled: false
-  external:
-    enabled: false
--- a/clusters/cl01tl/helm/karakeep/values.yaml
+++ b/clusters/cl01tl/helm/karakeep/values.yaml
@@ -170,9 +170,3 @@ meilisearch:
    enabled: true
 volsync-target-data:
  pvcTarget: karakeep
-  local:
-    enabled: false
-  remote:
-    enabled: false
-  external:
-    enabled: false
--- a/clusters/cl01tl/helm/komodo/Chart.yaml
+++ b/clusters/cl01tl/helm/komodo/Chart.yaml
@@ -23,7 +23,7 @@ dependencies:
    version: 4.5.0
  - name: postgres-cluster
    alias: postgresql-17-fdb-cluster
-    version: 7.4.4
+    version: 7.4.3
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/komodo.png
 # renovate: github=moghtech/komodo
--- a/clusters/cl01tl/helm/kube-prometheus-stack/values.yaml
+++ b/clusters/cl01tl/helm/kube-prometheus-stack/values.yaml
@@ -174,12 +174,12 @@ redis-replication:
  existingSecret:
    enabled: false
  redisReplication:
-    clusterSize: 1
+    clusterSize: 3
    volumeClaimTemplate:
      spec:
        resources:
          requests:
            storage: 10Gi
  redisSentinel:
-    enabled: false
+    enabled: true
    clusterSize: 3
--- a/clusters/cl01tl/helm/libation/values.yaml
+++ b/clusters/cl01tl/helm/libation/values.yaml
@@ -16,7 +16,7 @@ libation:
        main:
          image:
            repository: rmcrackan/libation
-            tag: 13.0.0
+            tag: 12.8.2
            pullPolicy: IfNotPresent
          env:
            - name: SLEEP_TIME
@@ -62,9 +62,3 @@ libation:
              readOnly: false
 volsync-target-config:
  pvcTarget: libation
-  local:
-    enabled: false
-  remote:
-    enabled: false
-  external:
-    enabled: false
--- a/clusters/cl01tl/helm/lidarr/Chart.yaml
+++ b/clusters/cl01tl/helm/lidarr/Chart.yaml
@@ -24,7 +24,7 @@ dependencies:
    version: 4.5.0
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.4.4
+    version: 7.4.3
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-config
--- a/clusters/cl01tl/helm/lidarr/values.yaml
+++ b/clusters/cl01tl/helm/lidarr/values.yaml
@@ -170,9 +170,3 @@ volsync-target-config:
    runAsGroup: 1000
    fsGroup: 1000
    fsGroupChangePolicy: OnRootMismatch
-  local:
-    enabled: false
-  remote:
-    enabled: false
-  external:
-    enabled: false
--- a/clusters/cl01tl/helm/lidatube/values.yaml
+++ b/clusters/cl01tl/helm/lidatube/values.yaml
@@ -92,9 +92,3 @@ volsync-target-config:
    runAsGroup: 1000
    fsGroup: 1000
    fsGroupChangePolicy: OnRootMismatch
-  local:
-    enabled: false
-  remote:
-    enabled: false
-  external:
-    enabled: false
--- a/clusters/cl01tl/helm/listenarr/values.yaml
+++ b/clusters/cl01tl/helm/listenarr/values.yaml
@@ -73,9 +73,3 @@ volsync-target-config:
    runAsGroup: 1000
    fsGroup: 1000
    fsGroupChangePolicy: OnRootMismatch
-  local:
-    enabled: false
-  remote:
-    enabled: false
-  external:
-    enabled: false
--- a/clusters/cl01tl/helm/local-path-provisioner/Chart.lock
+++ b/clusters/cl01tl/helm/local-path-provisioner/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: local-path-provisioner
  repository: https://charts.containeroo.ch
-  version: 0.0.34
-digest: sha256:f4f946897660d5d65eb2a56144d907c0b48c9a72e20d10a73684eaeb0d50cfd3
-generated: "2025-12-26T21:55:29.099967751Z"
+  version: 0.0.33
+digest: sha256:323aa6386161d2f5e2f3122082bc1dc63aeae96d2e02520b8d5dc63f80c3be1c
+generated: "2025-12-01T20:26:30.26287-06:00"
--- a/clusters/cl01tl/helm/local-path-provisioner/Chart.yaml
+++ b/clusters/cl01tl/helm/local-path-provisioner/Chart.yaml
@@ -15,7 +15,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: local-path-provisioner
-    version: 0.0.34
+    version: 0.0.33
    repository: https://charts.containeroo.ch
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 # renovate: github=rancher/local-path-provisioner
--- a/clusters/cl01tl/helm/local-path-provisioner/values.yaml
+++ b/clusters/cl01tl/helm/local-path-provisioner/values.yaml
@@ -1,7 +1,7 @@
 local-path-provisioner:
  image:
    repository: rancher/local-path-provisioner
-    tag: v0.0.33
+    tag: v0.0.32
  helperImage:
    repository: busybox
    tag: 1.37.0
--- a/clusters/cl01tl/helm/mariadb-operator/Chart.lock
+++ b/clusters/cl01tl/helm/mariadb-operator/Chart.lock
@@ -4,6 +4,6 @@ dependencies:
  version: 25.10.3
 - name: mariadb-operator-crds
  repository: https://helm.mariadb.com/mariadb-operator
-  version: 25.10.3
-digest: sha256:d32a1fb47160eccd389a71467a954f2eea59cad595db38a74243581af1c9c426
-generated: "2025-12-24T19:28:09.775077014Z"
+  version: 25.10.2
+digest: sha256:013c53bbc13fa7b7f3f25d82f3116332e19894a1b1fd796224a4c05f9382645f
+generated: "2025-12-24T18:26:55.204948602Z"
--- a/clusters/cl01tl/helm/mariadb-operator/Chart.yaml
+++ b/clusters/cl01tl/helm/mariadb-operator/Chart.yaml
@@ -18,7 +18,7 @@ dependencies:
    version: 25.10.3
    repository: https://helm.mariadb.com/mariadb-operator
  - name: mariadb-operator-crds
-    version: 25.10.3
+    version: 25.10.2
    repository: https://helm.mariadb.com/mariadb-operator
 icon: https://mariadb-operator.github.io/mariadb-operator/assets/mariadb_profile.svg
 # renovate: github=mariadb-operator/mariadb-operator
--- a/clusters/cl01tl/helm/matrix-synapse/Chart.yaml
+++ b/clusters/cl01tl/helm/matrix-synapse/Chart.yaml
@@ -53,7 +53,7 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.4.4
+    version: 7.4.3
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: redis-replication
    alias: redis-replication-matrix-synapse
--- a/clusters/cl01tl/helm/matrix-synapse/values.yaml
+++ b/clusters/cl01tl/helm/matrix-synapse/values.yaml
@@ -477,39 +477,15 @@ redis-replication-hookshot:
    clusterSize: 3
 volsync-target-synapse:
  pvcTarget: matrix-synapse
-  local:
-    enabled: false
-  remote:
-    enabled: false
-  external:
-    enabled: false
 volsync-target-hookshot:
  pvcTarget: matrix-hookshot
-  local:
-    enabled: false
-  remote:
-    enabled: false
-  external:
-    enabled: false
 volsync-target-discord:
  pvcTarget: mautrix-discord
  moverSecurityContext:
    runAsUser: 1337
    runAsGroup: 1337
-  local:
-    enabled: false
-  remote:
-    enabled: false
-  external:
-    enabled: false
 volsync-target-whatsapp:
  pvcTarget: mautrix-whatsapp
  moverSecurityContext:
    runAsUser: 1337
    runAsGroup: 1337
-  local:
-    enabled: false
-  remote:
-    enabled: false
-  external:
-    enabled: false
--- a/clusters/cl01tl/helm/rayflume/Chart.lock
+++ b/clusters/cl01tl/helm/rayflume/Chart.lock
@@ -2,11 +2,14 @@ dependencies:
 - name: app-template
  repository: https://bjw-s-labs.github.io/helm-charts/
  version: 4.5.0
+- name: postgres-cluster
+  repository: oci://harbor.alexlebens.net/helm-charts
+  version: 7.4.3
 - name: redis-replication
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.5.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.6.0
-digest: sha256:b6407c3cb6cb6b71d289f73e943111899c8e7711c3141c86774d103014543af2
-generated: "2025-12-25T21:03:03.423717-06:00"
+digest: sha256:044b0cda285583d8cb792725b75887041f82e5d6906566cd3677d2f67186d7f1
+generated: "2025-12-23T22:38:27.330827-06:00"
--- a/clusters/cl01tl/helm/n8n/Chart.yaml
+++ b/clusters/cl01tl/helm/n8n/Chart.yaml
@@ -0,0 +1,35 @@
+apiVersion: v2
+name: n8n
+version: 1.0.0
+description: n8n
+keywords:
+  - n8n
+  - automation
+home: https://wiki.alexlebens.dev/s/e4544bd4-c66a-420c-8020-c54b2078181a
+sources:
+  - https://github.com/n8n-io/n8n
+  - https://github.com/cloudnative-pg/cloudnative-pg
+  - https://github.com/n8n-io/n8n/pkgs/container/n8n
+  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
+  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/postgres-cluster
+maintainers:
+  - name: alexlebens
+dependencies:
+  - name: app-template
+    alias: n8n
+    repository: https://bjw-s-labs.github.io/helm-charts/
+    version: 4.5.0
+  - name: postgres-cluster
+    alias: postgres-18-cluster
+    version: 7.4.3
+    repository: oci://harbor.alexlebens.net/helm-charts
+  - name: redis-replication
+    version: 0.5.0
+    repository: oci://harbor.alexlebens.net/helm-charts
+  - name: volsync-target
+    alias: volsync-target-data
+    version: 0.6.0
+    repository: oci://harbor.alexlebens.net/helm-charts
+icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/n8n.png
+# renovate: github=n8n-io/n8n
+appVersion: 2.0.1
--- a/clusters/cl01tl/helm/soulsync/templates/external-secret.yaml
+++ b/clusters/cl01tl/helm/soulsync/templates/external-secret.yaml
@@ -1,10 +1,10 @@
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
-  name: soulsync-config-secret
+  name: n8n-config-secret
  namespace: {{ .Release.Namespace }}
  labels:
-    app.kubernetes.io/name: soulsync-config-secret
+    app.kubernetes.io/name: n8n-config-secret
    app.kubernetes.io/instance: {{ .Release.Name }}
    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
@@ -12,10 +12,10 @@ spec:
    kind: ClusterSecretStore
    name: vault
  data:
-    - secretKey: config.json
+    - secretKey: key
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
-        key: /cl01tl/soulsync/config
+        key: /cl01tl/n8n/config
        metadataPolicy: None
-        property: config.json
+        property: key
--- a/clusters/cl01tl/helm/n8n/values.yaml
+++ b/clusters/cl01tl/helm/n8n/values.yaml
@@ -0,0 +1,441 @@
+n8n:
+  controllers:
+    main:
+      type: deployment
+      replicas: 1
+      strategy: Recreate
+      revisionHistoryLimit: 3
+      containers:
+        main:
+          image:
+            repository: ghcr.io/n8n-io/n8n
+            tag: 2.2.1
+            pullPolicy: IfNotPresent
+          env:
+            - name: GENERIC_TIMEZONE
+              value: US/Central
+            - name: DB_TYPE
+              value: postgresdb
+            - name: DB_POSTGRESDB_DATABASE
+              valueFrom:
+                secretKeyRef:
+                  name: n8n-postgresql-18-cluster-app
+                  key: dbname
+            - name: DB_POSTGRESDB_HOST
+              valueFrom:
+                secretKeyRef:
+                  name: n8n-postgresql-18-cluster-app
+                  key: host
+            - name: DB_POSTGRESDB_PORT
+              valueFrom:
+                secretKeyRef:
+                  name: n8n-postgresql-18-cluster-app
+                  key: port
+            - name: DB_POSTGRESDB_USER
+              valueFrom:
+                secretKeyRef:
+                  name: n8n-postgresql-18-cluster-app
+                  key: user
+            - name: DB_POSTGRESDB_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: n8n-postgresql-18-cluster-app
+                  key: password
+            - name: N8N_METRICS
+              value: true
+            - name: QUEUE_HEALTH_CHECK_ACTIVE
+              value: true
+            - name: EXECUTIONS_MODE
+              value: queue
+            - name: QUEUE_BULL_REDIS_HOST
+              value: redis-replication-n8n-master.n8n
+            - name: N8N_ENCRYPTION_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: n8n-config-secret
+                  key: key
+            - name: WEBHOOK_URL
+              value: https://n8n.alexlebens.net/
+          probes:
+            liveness:
+              enabled: true
+              custom: true
+              spec:
+                httpGet:
+                  path: /healthz
+                  port: 5678
+                initialDelaySeconds: 0
+                periodSeconds: 10
+                timeoutSeconds: 1
+                failureThreshold: 3
+            readiness:
+              enabled: true
+              custom: true
+              spec:
+                httpGet:
+                  path: /healthz/readiness
+                  port: 5678
+                initialDelaySeconds: 0
+                periodSeconds: 10
+                timeoutSeconds: 1
+                failureThreshold: 3
+          resources:
+            requests:
+              cpu: 10m
+              memory: 128Mi
+    worker:
+      type: daemonset
+      revisionHistoryLimit: 3
+      pod:
+        nodeSelector:
+          kubernetes.io/arch: amd64
+      containers:
+        main:
+          image:
+            repository: ghcr.io/n8n-io/n8n
+            tag: 2.2.1
+            pullPolicy: IfNotPresent
+          command:
+            - n8n
+          args:
+            - worker
+            # - --concurrency=10
+          env:
+            - name: GENERIC_TIMEZONE
+              value: US/Central
+            - name: DB_TYPE
+              value: postgresdb
+            - name: DB_POSTGRESDB_DATABASE
+              valueFrom:
+                secretKeyRef:
+                  name: n8n-postgresql-18-cluster-app
+                  key: dbname
+            - name: DB_POSTGRESDB_HOST
+              valueFrom:
+                secretKeyRef:
+                  name: n8n-postgresql-18-cluster-app
+                  key: host
+            - name: DB_POSTGRESDB_PORT
+              valueFrom:
+                secretKeyRef:
+                  name: n8n-postgresql-18-cluster-app
+                  key: port
+            - name: DB_POSTGRESDB_USER
+              valueFrom:
+                secretKeyRef:
+                  name: n8n-postgresql-18-cluster-app
+                  key: user
+            - name: DB_POSTGRESDB_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: n8n-postgresql-18-cluster-app
+                  key: password
+            - name: N8N_METRICS
+              value: true
+            - name: N8N_RUNNERS_ENABLED
+              value: true
+            - name: N8N_BLOCK_ENV_ACCESS_IN_NODE
+              value: true
+            - name: N8N_GIT_NODE_DISABLE_BARE_REPOS
+              value: true
+            - name: QUEUE_HEALTH_CHECK_ACTIVE
+              value: true
+            - name: EXECUTIONS_MODE
+              value: queue
+            - name: QUEUE_BULL_REDIS_HOST
+              value: redis-replication-n8n-master.n8n
+            - name: N8N_ENCRYPTION_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: n8n-config-secret
+                  key: key
+            - name: WEBHOOK_URL
+              value: https://n8n.alexlebens.net/
+          probes:
+            liveness:
+              enabled: false
+              custom: true
+              spec:
+                httpGet:
+                  path: /healthz
+                  port: 5678
+                initialDelaySeconds: 60
+                periodSeconds: 10
+                timeoutSeconds: 1
+                failureThreshold: 3
+            readiness:
+              enabled: false
+              custom: true
+              spec:
+                httpGet:
+                  path: /healthz/readiness
+                  port: 5678
+                initialDelaySeconds: 60
+                periodSeconds: 10
+                timeoutSeconds: 1
+                failureThreshold: 3
+          resources:
+            requests:
+              cpu: 10m
+              memory: 128Mi
+    webhook:
+      type: daemonset
+      revisionHistoryLimit: 3
+      pod:
+        nodeSelector:
+          kubernetes.io/arch: amd64
+      containers:
+        main:
+          image:
+            repository: ghcr.io/n8n-io/n8n
+            tag: 2.2.1
+            pullPolicy: IfNotPresent
+          command:
+            - n8n
+          args:
+            - webhook
+          env:
+            - name: GENERIC_TIMEZONE
+              value: US/Central
+            - name: DB_TYPE
+              value: postgresdb
+            - name: DB_POSTGRESDB_DATABASE
+              valueFrom:
+                secretKeyRef:
+                  name: n8n-postgresql-18-cluster-app
+                  key: dbname
+            - name: DB_POSTGRESDB_HOST
+              valueFrom:
+                secretKeyRef:
+                  name: n8n-postgresql-18-cluster-app
+                  key: host
+            - name: DB_POSTGRESDB_PORT
+              valueFrom:
+                secretKeyRef:
+                  name: n8n-postgresql-18-cluster-app
+                  key: port
+            - name: DB_POSTGRESDB_USER
+              valueFrom:
+                secretKeyRef:
+                  name: n8n-postgresql-18-cluster-app
+                  key: user
+            - name: DB_POSTGRESDB_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: n8n-postgresql-18-cluster-app
+                  key: password
+            - name: N8N_METRICS
+              value: true
+            - name: QUEUE_HEALTH_CHECK_ACTIVE
+              value: true
+            - name: EXECUTIONS_MODE
+              value: queue
+            - name: QUEUE_BULL_REDIS_HOST
+              value: redis-replication-n8n-master.n8n
+            - name: N8N_ENCRYPTION_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: n8n-config-secret
+                  key: key
+            - name: WEBHOOK_URL
+              value: https://n8n.alexlebens.net/
+            - name: N8N_DIAGNOSTICS_ENABLED
+              value: false
+            - name: N8N_VERSION_NOTIFICATIONS_ENABLED
+              value: false
+          probes:
+            liveness:
+              enabled: true
+              custom: true
+              spec:
+                httpGet:
+                  path: /healthz
+                  port: 5678
+                initialDelaySeconds: 0
+                periodSeconds: 10
+                timeoutSeconds: 1
+                failureThreshold: 3
+            readiness:
+              enabled: true
+              custom: true
+              spec:
+                httpGet:
+                  path: /healthz/readiness
+                  port: 5678
+                initialDelaySeconds: 0
+                periodSeconds: 10
+                timeoutSeconds: 1
+                failureThreshold: 3
+          resources:
+            requests:
+              cpu: 10m
+              memory: 128Mi
+  service:
+    main:
+      controller: main
+      ports:
+        http:
+          port: 80
+          targetPort: 5678
+          protocol: HTTP
+    worker:
+      controller: worker
+      ports:
+        http:
+          port: 80
+          targetPort: 5678
+          protocol: HTTP
+    webhook:
+      controller: webhook
+      ports:
+        http:
+          port: 80
+          targetPort: 5678
+          protocol: HTTP
+  serviceMonitor:
+    main:
+      selector:
+        matchLabels:
+          app.kubernetes.io/name: n8n-main
+          app.kubernetes.io/instance: n8n-main
+      serviceName: '{{ include "bjw-s.common.lib.chart.names.fullname" $ }}'
+      endpoints:
+        - port: http
+          interval: 3m
+          scrapeTimeout: 1m
+          path: /metrics
+    worker:
+      selector:
+        matchLabels:
+          app.kubernetes.io/name: n8n-worker
+          app.kubernetes.io/instance: n8n-worker
+      serviceName: '{{ include "bjw-s.common.lib.chart.names.fullname" $ }}'
+      endpoints:
+        - port: http
+          interval: 3m
+          scrapeTimeout: 1m
+          path: /metrics
+    webhook:
+      selector:
+        matchLabels:
+          app.kubernetes.io/name: n8n-webhook
+          app.kubernetes.io/instance: n8n-webhook
+      serviceName: '{{ include "bjw-s.common.lib.chart.names.fullname" $ }}'
+      endpoints:
+        - port: http
+          interval: 3m
+          scrapeTimeout: 1m
+          path: /metrics
+  route:
+    main:
+      kind: HTTPRoute
+      parentRefs:
+        - group: gateway.networking.k8s.io
+          kind: Gateway
+          name: traefik-gateway
+          namespace: traefik
+      hostnames:
+        - n8n.alexlebens.net
+      rules:
+        - backendRefs:
+            - group: ''
+              kind: Service
+              name: n8n-main
+              port: 80
+              weight: 100
+          matches:
+            - path:
+                type: PathPrefix
+                value: /
+            - path:
+                type: PathPrefix
+                value: /webhook-test/
+        - backendRefs:
+            - group: ''
+              kind: Service
+              name: n8n-webhook
+              port: 80
+              weight: 100
+          matches:
+            - path:
+                type: PathPrefix
+                value: /webhook/
+            - path:
+                type: PathPrefix
+                value: /webhook-waiting/
+            - path:
+                type: PathPrefix
+                value: /form/
+  persistence:
+    data:
+      storageClass: ceph-block
+      accessMode: ReadWriteOnce
+      size: 5Gi
+      advancedMounts:
+        main:
+          main:
+            - path: /data
+              readOnly: false
+    cache:
+      type: emptyDir
+      advancedMounts:
+        worker:
+          main:
+            - path: /home/node/.n8n
+              readOnly: false
+        webhook:
+          main:
+            - path: /home/node/.n8n
+              readOnly: false
+postgres-18-cluster:
+  mode: recovery
+  recovery:
+    method: objectStore
+    objectStore:
+      index: 1
+  backup:
+    objectStore:
+      - name: garage-local
+        index: 1
+        destinationBucket: postgres-backups
+        externalSecretCredentialPath: /garage/home-infra/postgres-backups
+        isWALArchiver: true
+      # - name: garage-remote
+      #   index: 1
+      #   destinationBucket: postgres-backups
+      #   externalSecretCredentialPath: /garage/home-infra/postgres-backups
+      #   retentionPolicy: "90d"
+      #   data:
+      #     compression: bzip2
+      # - name: external
+      #   index: 1
+      #   endpointURL: https://nyc3.digitaloceanspaces.com
+      #   destinationBucket: postgres-backups-ce540ddf106d186bbddca68a
+      #   externalSecretCredentialPath: /garage/home-infra/postgres-backups
+      #   isWALArchiver: false
+    scheduledBackups:
+      - name: live-backup
+        suspend: false
+        immediate: true
+        schedule: "0 0 0 * * *"
+        backupName: garage-local
+      # - name: weekly-backup
+      #   suspend: true
+      #   immediate: true
+      #   schedule: "0 0 4 * * SAT"
+      #   backupName: garage-remote
+      # - name: daily-backup
+      #   suspend: true
+      #   immediate: true
+      #   schedule: "0 0 0 * * *"
+      #   backupName: external
+redis-replication:
+  existingSecret:
+    enabled: false
+  redisReplication:
+    clusterSize: 3
+  redisSentinel:
+    enabled: true
+    clusterSize: 3
+volsync-target-data:
+  pvcTarget: n8n
--- a/clusters/cl01tl/helm/navidrome/Chart.lock
+++ b/clusters/cl01tl/helm/navidrome/Chart.lock
@@ -1,9 +0,0 @@
-dependencies:
- name: app-template
-  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.5.0
- name: volsync-target
-  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
-digest: sha256:2d5e357064259b97afb7c8239d6d57da6f59c267a2a530262af9db32d228ae66
-generated: "2025-12-24T14:05:31.844353-06:00"
--- a/clusters/cl01tl/helm/navidrome/Chart.yaml
+++ b/clusters/cl01tl/helm/navidrome/Chart.yaml
@@ -1,27 +0,0 @@
-apiVersion: v2
-name: navidrome
-version: 1.0.0
-description: Navidrome
-keywords:
-  - navidrome
-  - feishin
-  - music
-home: https://wiki.alexlebens.dev/s/
-sources:
-  - https://github.com/navidrome/navidrome
-  - https://github.com/jeffvli/feishin
-  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: app-template
-    alias: navidrome
-    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.5.0
-  - name: volsync-target
-    alias: volsync-target-data
-    version: 0.6.0
-    repository: oci://harbor.alexlebens.net/helm-charts
-icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/navidrome.png
-# renovate: github=navidrome/navidrome
-appVersion: 1.42.2
--- a/clusters/cl01tl/helm/navidrome/templates/persistent-volume-claim.yaml
+++ b/clusters/cl01tl/helm/navidrome/templates/persistent-volume-claim.yaml
@@ -1,17 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: navidrome-music-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: navidrome-music-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  volumeName: navidrome-music-nfs-storage
-  storageClassName: nfs-client
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 1Gi
--- a/clusters/cl01tl/helm/navidrome/templates/persistent-volume.yaml
+++ b/clusters/cl01tl/helm/navidrome/templates/persistent-volume.yaml
@@ -1,23 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: navidrome-music-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: navidrome-music-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: nfs-client
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  nfs:
-    path: /volume2/Storage/Music
-    server: synologybond.alexlebens.net
-  mountOptions:
-    - vers=4
-    - minorversion=1
-    - noac
--- a/clusters/cl01tl/helm/navidrome/values.yaml
+++ b/clusters/cl01tl/helm/navidrome/values.yaml
@@ -1,161 +0,0 @@
-navidrome:
-  controllers:
-    main:
-      type: deployment
-      replicas: 1
-      strategy: Recreate
-      revisionHistoryLimit: 3
-      containers:
-        main:
-          image:
-            repository: deluan/navidrome
-            tag: 0.59.0@sha256:4edc8a1de3e042f30b78a478325839f4395177eb8201c27543dccc0eba674f23
-            pullPolicy: IfNotPresent
-          env:
-            - name: ND_MUSICFOLDER
-              value: /music
-            - name: ND_DATAFOLDER
-              value: /data
-            - name: ND_CACHEFOLDER
-              value: /cache
-            - name: ND_BASEURL
-              value: https://navidrome.alexlebens.net
-            - name: ND_ENABLEINSIGHTSCOLLECTOR
-              value: false
-            - name: ND_PROMETHEUS_ENABLED
-              value: true
-          resources:
-            limits:
-              gpu.intel.com/i915: 1
-            requests:
-              gpu.intel.com/i915: 1
-              cpu: 10m
-              memory: 128Mi
-    feishin:
-      type: deployment
-      replicas: 1
-      strategy: Recreate
-      revisionHistoryLimit: 3
-      containers:
-        main:
-          image:
-            repository: ghcr.io/jeffvli/feishin
-            tag: 1.0.1-beta.1@sha256:61239641f23a33f99c2858419b14afb66683f3cd82010363fba92be3993fd894
-            pullPolicy: IfNotPresent
-          env:
-            - name: SERVER_NAME
-              value: talos
-            - name: SERVER_LOCK
-              value: true
-            - name: SERVER_TYPE
-              value: navidrome
-            - name: SERVER_URL
-              value: https://navidrome.alexlebens.net
-  service:
-    main:
-      controller: main
-      ports:
-        http:
-          port: 80
-          targetPort: 4533
-          protocol: HTTP
-    feishin:
-      controller: feishin
-      ports:
-        http:
-          port: 80
-          targetPort: 9180
-          protocol: HTTP
-  serviceMonitor:
-    main:
-      selector:
-        matchLabels:
-          app.kubernetes.io/name: navidrome
-          app.kubernetes.io/instance: navidrome
-          app.kubernetes.io/service: navidrome-main
-      serviceName: '{{ include "bjw-s.common.lib.chart.names.fullname" $ }}'
-      endpoints:
-        - port: http
-          scheme: http
-          path: /metrics
-          interval: 30s
-          scrapeTimeout: 15s
-  route:
-    main:
-      kind: HTTPRoute
-      parentRefs:
-        - group: gateway.networking.k8s.io
-          kind: Gateway
-          name: traefik-gateway
-          namespace: traefik
-      hostnames:
-        - navidrome.alexlebens.net
-      rules:
-        - backendRefs:
-            - group: ''
-              kind: Service
-              name: navidrome-main
-              port: 80
-              weight: 100
-          matches:
-            - path:
-                type: PathPrefix
-                value: /
-    feishin:
-      kind: HTTPRoute
-      parentRefs:
-        - group: gateway.networking.k8s.io
-          kind: Gateway
-          name: traefik-gateway
-          namespace: traefik
-      hostnames:
-        - feishin.alexlebens.net
-      rules:
-        - backendRefs:
-            - group: ''
-              kind: Service
-              name: navidrome-feishin
-              port: 80
-              weight: 100
-          matches:
-            - path:
-                type: PathPrefix
-                value: /
-  persistence:
-    data:
-      forceRename: navidrome-data
-      storageClass: ceph-block
-      accessMode: ReadWriteOnce
-      size: 10Gi
-      advancedMounts:
-        main:
-          main:
-            - path: /data
-              readOnly: false
-    cache:
-      type: emptyDir
-      advancedMounts:
-        main:
-          main:
-            - path: /cache
-              readOnly: false
-    music:
-      existingClaim: navidrome-music-nfs-storage
-      advancedMounts:
-        main:
-          main:
-            - path: /music
-              readOnly: true
-volsync-target-data:
-  pvcTarget: navidrome-data
-  moverSecurityContext:
-    runAsUser: 1000
-    runAsGroup: 1000
-    fsGroup: 1000
-    fsGroupChangePolicy: OnRootMismatch
-  local:
-    enabled: false
-  remote:
-    enabled: false
-  external:
-    enabled: false
--- a/clusters/cl01tl/helm/ollama/Chart.yaml
+++ b/clusters/cl01tl/helm/ollama/Chart.yaml
@@ -23,7 +23,7 @@ dependencies:
    version: 4.5.0
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.4.4
+    version: 7.4.3
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-data
--- a/clusters/cl01tl/helm/ollama/values.yaml
+++ b/clusters/cl01tl/helm/ollama/values.yaml
@@ -306,9 +306,3 @@ volsync-target-data:
  moverSecurityContext:
    runAsUser: 1337
    runAsGroup: 1337
-  local:
-    enabled: false
-  remote:
-    enabled: false
-  external:
-    enabled: false
--- a/clusters/cl01tl/helm/outline/Chart.yaml
+++ b/clusters/cl01tl/helm/outline/Chart.yaml
@@ -27,7 +27,7 @@ dependencies:
    version: 2.1.4
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.4.4
+    version: 7.4.3
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: redis-replication
    version: 0.5.0
--- a/clusters/cl01tl/helm/outline/templates/object-bucket-claim.yaml
+++ b/clusters/cl01tl/helm/outline/templates/object-bucket-claim.yaml
@@ -1,30 +1,30 @@
-apiVersion: objectbucket.io/v1alpha1
-kind: ObjectBucketClaim
-metadata:
-  name: ceph-bucket-outline
-  labels:
-    app.kubernetes.io/name: ceph-bucket-outline
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  generateBucketName: bucket-outline
-  storageClassName: ceph-bucket
-  # additionalConfig:
-  #   bucketPolicy: |
-  #       {
-  #           "Version": "2012-10-17",
-  #           "Statement": [
-  #               {
-  #                   "Sid": "VisualEditor",
-  #                   "Effect": "Allow",
-  #                   "Action": [
-  #                       "s3:GetObjectAcl",
-  #                       "s3:DeleteObject",
-  #                       "s3:PutObject",
-  #                       "s3:GetObject",
-  #                       "s3:PutObjectAcl"
-  #                   ],
-  #                   "Resource": "arn:aws:s3:::bucket-outline-630c57e0-d475-4d78-926c-c1c082291d73/*"
-  #               }
-  #           ]
-  #       }
+# apiVersion: objectbucket.io/v1alpha1
+# kind: ObjectBucketClaim
+# metadata:
+#   name: ceph-bucket-outline
+#   labels:
+#     app.kubernetes.io/name: ceph-bucket-outline
+#     app.kubernetes.io/instance: {{ .Release.Name }}
+#     app.kubernetes.io/part-of: {{ .Release.Name }}
+# spec:
+#   generateBucketName: bucket-outline
+#   storageClassName: ceph-bucket
+#   additionalConfig:
+#     bucketPolicy: |
+#         {
+#             "Version": "2012-10-17",
+#             "Statement": [
+#                 {
+#                     "Sid": "VisualEditor",
+#                     "Effect": "Allow",
+#                     "Action": [
+#                         "s3:GetObjectAcl",
+#                         "s3:DeleteObject",
+#                         "s3:PutObject",
+#                         "s3:GetObject",
+#                         "s3:PutObjectAcl"
+#                     ],
+#                     "Resource": "arn:aws:s3:::bucket-outline-630c57e0-d475-4d78-926c-c1c082291d73/*"
+#                 }
+#             ]
+#         }
--- a/clusters/cl01tl/helm/outline/values.yaml
+++ b/clusters/cl01tl/helm/outline/values.yaml
@@ -188,7 +188,7 @@ redis-replication:
  existingSecret:
    enabled: false
  redisReplication:
-    clusterSize: 1
-  redisSentinel:
-    enabled: false
+    clusterSize: 3
+  redisSentinel:
+    enabled: true
    clusterSize: 3
--- a/clusters/cl01tl/helm/photoview/Chart.yaml
+++ b/clusters/cl01tl/helm/photoview/Chart.yaml
@@ -20,7 +20,7 @@ dependencies:
    version: 4.5.0
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.4.4
+    version: 7.4.3
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/photoview.png
 # renovate: github=photoview/photoview
--- a/clusters/cl01tl/helm/plex/values.yaml
+++ b/clusters/cl01tl/helm/plex/values.yaml
@@ -16,6 +16,8 @@ plex:
              value: US/Central
            - name: VERSION
              value: docker
+            - name: PLEX_CLAIM
+              value: claim-XmGK2o9x54PbCzQaqj-J
          resources:
            limits:
              gpu.intel.com/i915: 1
@@ -26,6 +28,7 @@ plex:
  service:
    main:
      controller: main
+      type: LoadBalancer
      ports:
        http:
          port: 32400
--- a/clusters/cl01tl/helm/postiz/Chart.yaml
+++ b/clusters/cl01tl/helm/postiz/Chart.yaml
@@ -26,7 +26,7 @@ dependencies:
    version: 2.1.4
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.4.4
+    version: 7.4.3
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: redis-replication
    version: 0.5.0
--- a/clusters/cl01tl/helm/postiz/values.yaml
+++ b/clusters/cl01tl/helm/postiz/values.yaml
@@ -173,23 +173,11 @@ redis-replication:
    name: postiz-redis-config
    key: password
  redisReplication:
-    clusterSize: 1
+    clusterSize: 3
  redisSentinel:
-    enabled: false
+    enabled: true
    clusterSize: 3
 volsync-target-config:
  pvcTarget: postiz-config
-  local:
-    enabled: false
-  remote:
-    enabled: false
-  external:
-    enabled: false
 volsync-target-upload:
  pvcTarget: postiz-uploads
-  local:
-    enabled: false
-  remote:
-    enabled: false
-  external:
-    enabled: false
--- a/clusters/cl01tl/helm/prowlarr/values.yaml
+++ b/clusters/cl01tl/helm/prowlarr/values.yaml
@@ -82,9 +82,3 @@ volsync-target-config:
      - 100
      - 109
      - 65539
-  local:
-    enabled: false
-  remote:
-    enabled: false
-  external:
-    enabled: false
--- a/clusters/cl01tl/helm/qbittorrent/values.yaml
+++ b/clusters/cl01tl/helm/qbittorrent/values.yaml
@@ -453,17 +453,5 @@ volsync-target-config:
      volumeSnapshotClassName: ceph-filesystem-snapshot
 volsync-target-qbit-manage-config:
  pvcTarget: qbittorrent-qbit-manage-config-data
-  local:
-    enabled: false
-  remote:
-    enabled: false
-  external:
-    enabled: false
 volsync-target-qui-config:
  pvcTarget: qbittorrent-qui-config-data
-  local:
-    enabled: false
-  remote:
-    enabled: false
-  external:
-    enabled: false
--- a/clusters/cl01tl/helm/radarr-4k/Chart.yaml
+++ b/clusters/cl01tl/helm/radarr-4k/Chart.yaml
@@ -27,7 +27,7 @@ dependencies:
    version: 4.5.0
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.4.4
+    version: 7.4.3
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-config
--- a/clusters/cl01tl/helm/radarr-4k/values.yaml
+++ b/clusters/cl01tl/helm/radarr-4k/values.yaml
@@ -170,9 +170,3 @@ volsync-target-config:
    runAsGroup: 1000
    fsGroup: 1000
    fsGroupChangePolicy: OnRootMismatch
-  local:
-    enabled: false
-  remote:
-    enabled: false
-  external:
-    enabled: false
--- a/clusters/cl01tl/helm/radarr-anime/Chart.yaml
+++ b/clusters/cl01tl/helm/radarr-anime/Chart.yaml
@@ -27,7 +27,7 @@ dependencies:
    version: 4.5.0
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.4.4
+    version: 7.4.3
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-config
--- a/clusters/cl01tl/helm/radarr-anime/values.yaml
+++ b/clusters/cl01tl/helm/radarr-anime/values.yaml
@@ -168,9 +168,3 @@ volsync-target-config:
    runAsGroup: 1000
    fsGroup: 1000
    fsGroupChangePolicy: OnRootMismatch
-  local:
-    enabled: false
-  remote:
-    enabled: false
-  external:
-    enabled: false
--- a/clusters/cl01tl/helm/radarr-standup/Chart.yaml
+++ b/clusters/cl01tl/helm/radarr-standup/Chart.yaml
@@ -26,7 +26,7 @@ dependencies:
    version: 4.5.0
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.4.4
+    version: 7.4.3
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-config
--- a/clusters/cl01tl/helm/radarr-standup/values.yaml
+++ b/clusters/cl01tl/helm/radarr-standup/values.yaml
@@ -168,9 +168,3 @@ volsync-target-config:
    runAsGroup: 1000
    fsGroup: 1000
    fsGroupChangePolicy: OnRootMismatch
-  local:
-    enabled: false
-  remote:
-    enabled: false
-  external:
-    enabled: false
--- a/clusters/cl01tl/helm/radarr/Chart.yaml
+++ b/clusters/cl01tl/helm/radarr/Chart.yaml
@@ -26,7 +26,7 @@ dependencies:
    version: 4.5.0
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.4.4
+    version: 7.4.3
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-config
--- a/clusters/cl01tl/helm/radarr/values.yaml
+++ b/clusters/cl01tl/helm/radarr/values.yaml
@@ -170,9 +170,3 @@ volsync-target-config:
    runAsGroup: 1000
    fsGroup: 1000
    fsGroupChangePolicy: OnRootMismatch
-  local:
-    enabled: false
-  remote:
-    enabled: false
-  external:
-    enabled: false
--- a/clusters/cl01tl/helm/rayflume/Chart.yaml
+++ b/clusters/cl01tl/helm/rayflume/Chart.yaml
@@ -1,27 +0,0 @@
-apiVersion: v2
-name: rayflume
-version: 1.0.0
-description: RayFlume
-keywords:
-  - rayflume
-  - music
-  - lidarr
-home: https://wiki.alexlebens.dev/s/
-sources:
-  - https://gitea.alexlebens.dev/alexlebens/RayFlume
-  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: app-template
-    alias: rayflume
-    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.5.0
-  - name: redis-replication
-    version: 0.5.0
-    repository: oci://harbor.alexlebens.net/helm-charts
-  - name: volsync-target
-    alias: volsync-target-data
-    version: 0.6.0
-    repository: oci://harbor.alexlebens.net/helm-charts
-appVersion: 0.0.3
--- a/clusters/cl01tl/helm/rayflume/templates/external-secret.yaml
+++ b/clusters/cl01tl/helm/rayflume/templates/external-secret.yaml
@@ -1,42 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: rayflume-config-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: rayflume-config-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: SECRET_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/rayflume/config
-        metadataPolicy: None
-        property: SECRET_KEY
-    - secretKey: LIDARR_TOKEN
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/rayflume/config
-        metadataPolicy: None
-        property: LIDARR_TOKEN
-    - secretKey: YOUTUBE_API_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/rayflume/config
-        metadataPolicy: None
-        property: YOUTUBE_API_KEY
-    - secretKey: MB_USER_AGENT
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/rayflume/config
-        metadataPolicy: None
-        property: MB_USER_AGENT
--- a/clusters/cl01tl/helm/rayflume/values.yaml
+++ b/clusters/cl01tl/helm/rayflume/values.yaml
@@ -1,102 +0,0 @@
-rayflume:
-  controllers:
-    main:
-      type: deployment
-      replicas: 1
-      strategy: Recreate
-      revisionHistoryLimit: 3
-      containers:
-        main:
-          image:
-            repository: harbor.alexlebens.net/images/rayflume
-            tag: 0.0.7
-            pullPolicy: IfNotPresent
-          env:
-            - name: DEBUG
-              value: True
-            - name: ALLOWED_HOSTS
-              value: rayflume.alexlebens.net,rayflume.rayflume
-            - name: SECRET_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: rayflume-config-secret
-                  key: SECRET_KEY
-            - name: LIDARR_TOKEN
-              valueFrom:
-                secretKeyRef:
-                  name: rayflume-config-secret
-                  key: LIDARR_TOKEN
-            - name: YOUTUBE_API_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: rayflume-config-secret
-                  key: YOUTUBE_API_KEY
-            - name: MB_USER_AGENT
-              valueFrom:
-                secretKeyRef:
-                  name: rayflume-config-secret
-                  key: MB_USER_AGENT
-            - name: CELERY_BROKER_URL
-              value: redis://redis-replication-rayflume-master.rayflume:6379/0
-            - name: CELERY_RESULT_BACKEND
-              value: redis://redis-replication-rayflume-master.rayflume:6379/0
-          resources:
-            requests:
-              cpu: 10m
-              memory: 64Mi
-  service:
-    main:
-      controller: main
-      ports:
-        http:
-          port: 80
-          targetPort: 80
-          protocol: HTTP
-  route:
-    main:
-      kind: HTTPRoute
-      parentRefs:
-        - group: gateway.networking.k8s.io
-          kind: Gateway
-          name: traefik-gateway
-          namespace: traefik
-      hostnames:
-        - rayflume.alexlebens.net
-      rules:
-        - backendRefs:
-            - group: ''
-              kind: Service
-              name: rayflume
-              port: 80
-              weight: 100
-          matches:
-            - path:
-                type: PathPrefix
-                value: /
-  persistence:
-    data:
-      forceRename: rayflume-data
-      storageClass: ceph-block
-      accessMode: ReadWriteOnce
-      size: 1Gi
-      advancedMounts:
-        main:
-          main:
-            - path: /data
-              readOnly: false
-redis-replication:
-  existingSecret:
-    enabled: false
-  redisReplication:
-    clusterSize: 1
-  redisSentinel:
-    enabled: false
-    clusterSize: 3
-volsync-target-data:
-  pvcTarget: rayflume-data
-  local:
-    enabled: false
-  remote:
-    enabled: false
-  external:
-    enabled: false
--- a/clusters/cl01tl/helm/roundcube/Chart.yaml
+++ b/clusters/cl01tl/helm/roundcube/Chart.yaml
@@ -21,7 +21,7 @@ dependencies:
    version: 4.5.0
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.4.4
+    version: 7.4.3
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-data
--- a/clusters/cl01tl/helm/roundcube/values.yaml
+++ b/clusters/cl01tl/helm/roundcube/values.yaml
@@ -270,9 +270,3 @@ postgres-18-cluster:
      #   backupName: external
 volsync-target-data:
  pvcTarget: roundcube-data
-  local:
-    enabled: false
-  remote:
-    enabled: false
-  external:
-    enabled: false
--- a/clusters/cl01tl/helm/searxng/values.yaml
+++ b/clusters/cl01tl/helm/searxng/values.yaml
@@ -9,7 +9,7 @@ searxng:
        main:
          image:
            repository: searxng/searxng
-            tag: latest@sha256:8d98d5c1b678714c3b20dacfab5ea5e3b67f79e50df6d5dbc92ed4f0a964ccbd
+            tag: latest@sha256:13de9d465bd2d9da6a6718f2a57d96e6e5fa3b8aba3c0bec077a5b7e5f24e4e9
            pullPolicy: IfNotPresent
          env:
            - name: SEARXNG_BASE_URL
@@ -39,7 +39,7 @@ searxng:
        main:
          image:
            repository: searxng/searxng
-            tag: latest@sha256:8d98d5c1b678714c3b20dacfab5ea5e3b67f79e50df6d5dbc92ed4f0a964ccbd
+            tag: latest@sha256:13de9d465bd2d9da6a6718f2a57d96e6e5fa3b8aba3c0bec077a5b7e5f24e4e9
            pullPolicy: IfNotPresent
          env:
            - name: SEARXNG_BASE_URL
@@ -219,9 +219,3 @@ searxng:
              readOnly: false
 volsync-target-data:
  pvcTarget: searxng-browser-data
-  local:
-    enabled: false
-  remote:
-    enabled: false
-  external:
-    enabled: false
--- a/clusters/cl01tl/helm/seerr/values.yaml
+++ b/clusters/cl01tl/helm/seerr/values.yaml
@@ -31,9 +31,3 @@ seerr-chart:
      memory: 128Mi
 volsync-target-config:
  pvcTarget: seerr-seerr-chart-config
-  local:
-    enabled: false
-  remote:
-    enabled: false
-  external:
-    enabled: false
--- a/clusters/cl01tl/helm/sonarr-4k/Chart.yaml
+++ b/clusters/cl01tl/helm/sonarr-4k/Chart.yaml
@@ -27,7 +27,7 @@ dependencies:
    version: 4.5.0
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.4.4
+    version: 7.4.3
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-config
--- a/clusters/cl01tl/helm/sonarr-4k/values.yaml
+++ b/clusters/cl01tl/helm/sonarr-4k/values.yaml
@@ -168,9 +168,3 @@ volsync-target-config:
    runAsGroup: 1000
    fsGroup: 1000
    fsGroupChangePolicy: OnRootMismatch
-  local:
-    enabled: false
-  remote:
-    enabled: false
-  external:
-    enabled: false
--- a/clusters/cl01tl/helm/sonarr-anime/Chart.yaml
+++ b/clusters/cl01tl/helm/sonarr-anime/Chart.yaml
@@ -26,7 +26,7 @@ dependencies:
    version: 4.5.0
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.4.4
+    version: 7.4.3
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-config
--- a/clusters/cl01tl/helm/sonarr-anime/values.yaml
+++ b/clusters/cl01tl/helm/sonarr-anime/values.yaml
@@ -168,9 +168,3 @@ volsync-target-config:
    runAsGroup: 1000
    fsGroup: 1000
    fsGroupChangePolicy: OnRootMismatch
-  local:
-    enabled: false
-  remote:
-    enabled: false
-  external:
-    enabled: false
--- a/clusters/cl01tl/helm/sonarr/Chart.yaml
+++ b/clusters/cl01tl/helm/sonarr/Chart.yaml
@@ -26,7 +26,7 @@ dependencies:
    version: 4.5.0
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.4.4
+    version: 7.4.3
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-config
--- a/clusters/cl01tl/helm/sonarr/values.yaml
+++ b/clusters/cl01tl/helm/sonarr/values.yaml
@@ -168,9 +168,3 @@ volsync-target-config:
    runAsGroup: 1000
    fsGroup: 1000
    fsGroupChangePolicy: OnRootMismatch
-  local:
-    enabled: false
-  remote:
-    enabled: false
-  external:
-    enabled: false
--- a/clusters/cl01tl/helm/soulsync/Chart.lock
+++ b/clusters/cl01tl/helm/soulsync/Chart.lock
@@ -1,12 +0,0 @@
-dependencies:
- name: app-template
-  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.5.0
- name: volsync-target
-  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
- name: volsync-target
-  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.0
-digest: sha256:60836915fb9a8028b084171ac4228520e9edc9ee6626b257c6d37db723d91f49
-generated: "2025-12-24T15:26:54.904687-06:00"
--- a/clusters/cl01tl/helm/soulsync/Chart.yaml
+++ b/clusters/cl01tl/helm/soulsync/Chart.yaml
@@ -1,29 +0,0 @@
-apiVersion: v2
-name: soulsync
-version: 1.0.0
-description: SoulSync
-keywords:
-  - soulsync
-  - music
-home: https://wiki.alexlebens.dev/s/
-sources:
-  - https://github.com/Nezreka/SoulSync
-  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: app-template
-    alias: soulsync
-    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.5.0
-  - name: volsync-target
-    alias: volsync-target-config
-    version: 0.6.0
-    repository: oci://harbor.alexlebens.net/helm-charts
-  - name: volsync-target
-    alias: volsync-target-database
-    version: 0.6.0
-    repository: oci://harbor.alexlebens.net/helm-charts
-icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/soulsync.png
-# renovate: github=Nezreka/SoulSync
-appVersion: 1.42.2
--- a/clusters/cl01tl/helm/soulsync/templates/persistent-volume-claim.yaml
+++ b/clusters/cl01tl/helm/soulsync/templates/persistent-volume-claim.yaml
@@ -1,36 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: soulsync-music-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: soulsync-music-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  volumeName: soulsync-music-nfs-storage
-  storageClassName: nfs-client
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 1Gi
-
---
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: soulsync-slskd-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: soulsync-slskd-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  volumeName: soulsync-slskd-nfs-storage
-  storageClassName: nfs-client
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 1Gi
--- a/clusters/cl01tl/helm/soulsync/templates/persistent-volume.yaml
+++ b/clusters/cl01tl/helm/soulsync/templates/persistent-volume.yaml
@@ -1,48 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: soulsync-music-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: soulsync-music-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: nfs-client
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  nfs:
-    path: /volume2/Storage/Music
-    server: synologybond.alexlebens.net
-  mountOptions:
-    - vers=4
-    - minorversion=1
-    - noac
-
---
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: soulsync-slskd-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: soulsync-slskd-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: nfs-client
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  nfs:
-    path: /volume2/Storage/slskd/Downloads
-    server: synologybond.alexlebens.net
-  mountOptions:
-    - vers=4
-    - minorversion=1
-    - noac
--- a/clusters/cl01tl/helm/soulsync/values.yaml
+++ b/clusters/cl01tl/helm/soulsync/values.yaml
@@ -1,166 +0,0 @@
-soulsync:
-  controllers:
-    main:
-      type: deployment
-      replicas: 0
-      strategy: Recreate
-      revisionHistoryLimit: 3
-      initContainers:
-        init-copy-config:
-          image:
-            repository: busybox
-            tag: 1.37.0
-            pullPolicy: IfNotPresent
-          resources:
-            requests:
-              cpu: 10m
-              memory: 128Mi
-          command:
-            - /bin/sh
-            - -ec
-            - |
-              echo ">> Coping files ..."
-              ls /tmp
-              cp -fv /tmp/config.json /app/config/config.json
-              echo ">> Files in config:"
-              ls /app/config
-      containers:
-        main:
-          image:
-            repository: boulderbadgedad/soulsync
-            tag: latest
-            pullPolicy: IfNotPresent
-          env:
-            - name: TZ
-              value: US/Central
-            - name: PUID
-              value: 1000
-            - name: PGID
-              value: 1000
-            - name: FLASK_ENV
-              value: production
-            - name: PYTHONPATH
-              value: /app
-            - name: SOULSYNC_CONFIG_PATH
-              value: /app/config/config.json
-          probes:
-            liveness:
-              enabled: true
-              custom: true
-              spec:
-                exec:
-                  command:
-                  - CMD
-                  - curl
-                  - -f
-                  - http://localhost:8888/
-                failureThreshold: 5
-                initialDelaySeconds: 60
-                periodSeconds: 30
-                successThreshold: 1
-                timeoutSeconds: 10
-          resources:
-            requests:
-              cpu: 100m
-              memory: 512Mi
-  service:
-    main:
-      controller: main
-      ports:
-        http:
-          port: 80
-          targetPort: 8008
-          protocol: HTTP
-  route:
-    main:
-      kind: HTTPRoute
-      parentRefs:
-        - group: gateway.networking.k8s.io
-          kind: Gateway
-          name: traefik-gateway
-          namespace: traefik
-      hostnames:
-        - soulsync.alexlebens.net
-      rules:
-        - backendRefs:
-            - group: ''
-              kind: Service
-              name: soulsync
-              port: 80
-              weight: 100
-          matches:
-            - path:
-                type: PathPrefix
-                value: /
-  persistence:
-    secret:
-      enabled: true
-      type: secret
-      name: soulsync-config-secret
-      advancedMounts:
-        main:
-          init-copy-config:
-            - path: /tmp/config.json
-              readOnly: true
-              mountPropagation: None
-              subPath: config.json
-    config:
-      forceRename: soulsync-config
-      storageClass: ceph-block
-      accessMode: ReadWriteOnce
-      size: 10Gi
-      advancedMounts:
-        main:
-          main:
-            - path: /app/config
-              readOnly: false
-          init-copy-config:
-            - path: /app/config
-              readOnly: false
-    database:
-      forceRename: soulsync-database
-      storageClass: ceph-block
-      accessMode: ReadWriteOnce
-      size: 10Gi
-      advancedMounts:
-        main:
-          main:
-            - path: /app/database
-              readOnly: false
-    downloads:
-      existingClaim: soulsync-slskd-nfs-storage
-      advancedMounts:
-        main:
-          main:
-            - path: /app/downloads
-              readOnly: false
-    transfer:
-      type: emptyDir
-      advancedMounts:
-        main:
-          main:
-            - path: /app/Transfer
-              readOnly: false
-    music:
-      existingClaim: soulsync-music-nfs-storage
-      advancedMounts:
-        main:
-          main:
-            - path: /music
-              readOnly: true
-volsync-target-config:
-  pvcTarget: soulsync-config
-  local:
-    enabled: false
-  remote:
-    enabled: false
-  external:
-    enabled: false
-volsync-target-database:
-  pvcTarget: soulsync-database
-  local:
-    enabled: false
-  remote:
-    enabled: false
-  external:
-    enabled: false
--- a/clusters/cl01tl/helm/stalwart/Chart.yaml
+++ b/clusters/cl01tl/helm/stalwart/Chart.yaml
@@ -23,7 +23,7 @@ dependencies:
    repository: https://bjw-s-labs.github.io/helm-charts/
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.4.4
+    version: 7.4.3
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: redis-replication
    version: 0.5.0
--- a/clusters/cl01tl/helm/stalwart/values.yaml
+++ b/clusters/cl01tl/helm/stalwart/values.yaml
@@ -118,15 +118,9 @@ redis-replication:
  existingSecret:
    enabled: false
  redisReplication:
-    clusterSize: 1
+    clusterSize: 3
  redisSentinel:
-    enabled: false
+    enabled: true
    clusterSize: 3
 volsync-target-config:
  pvcTarget: stalwart-config
-  local:
-    enabled: false
-  remote:
-    enabled: false
-  external:
-    enabled: false
--- a/clusters/cl01tl/helm/tautulli/values.yaml
+++ b/clusters/cl01tl/helm/tautulli/values.yaml
@@ -169,9 +169,3 @@ tautulli:
              readOnly: false
 volsync-target-config:
  pvcTarget: tautulli-config
-  local:
-    enabled: false
-  remote:
-    enabled: false
-  external:
-    enabled: false
--- a/clusters/cl01tl/helm/tdarr/values.yaml
+++ b/clusters/cl01tl/helm/tdarr/values.yaml
@@ -179,17 +179,5 @@ tdarr-exporter:
      memory: 256Mi
 volsync-target-config:
  pvcTarget: tdarr-config
-  local:
-    enabled: false
-  remote:
-    enabled: false
-  external:
-    enabled: false
 volsync-target-server:
  pvcTarget: tdarr-server
-  local:
-    enabled: false
-  remote:
-    enabled: false
-  external:
-    enabled: false
--- a/clusters/cl01tl/helm/trivy/Chart.lock
+++ b/clusters/cl01tl/helm/trivy/Chart.lock
@@ -0,0 +1,6 @@
+dependencies:
+- name: trivy-operator
+  repository: https://aquasecurity.github.io/helm-charts/
+  version: 0.31.0
+digest: sha256:5a71d5ff43d5e36ea500c5dcade70cddc874621ad49ffe7c10ba202a14b9c87f
+generated: "2025-12-01T19:56:01.513264-06:00"
--- a/Show More
+++ b/Show More