Update ghcr.io/open-webui/open-webui Docker tag to v0.7.0

clusters/cl01tl/helm/argo-workflows/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: argo-workflows
   repository: https://argoproj.github.io/argo-helm
-  version: 0.46.4
+  version: 0.46.3
 - name: argo-events
   repository: https://argoproj.github.io/argo-helm
   version: 2.4.19
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.4.5
-digest: sha256:025ab1620b24c23d2e90e65ef7f919297c6d2fd2ee324a43afc5b0bd5ab79fbf
+digest: sha256:a173eb2acc1e305074b6f81161229a27e00fa7a2e7ea14f17bbc3fca444e65a4
-generated: "2026-01-10T11:01:50.673732071Z"
+generated: "2026-01-07T01:51:33.628737915Z"

clusters/cl01tl/helm/argo-workflows/Chart.yaml

@@ -18,7 +18,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: argo-workflows
-    version: 0.46.4
+    version: 0.46.3
     repository: https://argoproj.github.io/argo-helm
   - name: argo-events
     version: 2.4.19

clusters/cl01tl/helm/argocd/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: argo-cd
   repository: https://argoproj.github.io/argo-helm
-  version: 9.3.0
+  version: 9.2.4
-digest: sha256:583a5f07b4e6336fec3d9eb2a6069e7f49b91d954eac086289f1797376fc8ee8
+digest: sha256:ad9fc8f132ba717e9da4564ca1c90eab88c1d1ec251d015542b938f2bd5af7bd
-generated: "2026-01-12T14:01:51.562750794Z"
+generated: "2026-01-03T23:01:53.96861459Z"

clusters/cl01tl/helm/argocd/Chart.yaml

@@ -15,7 +15,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: argo-cd
-    version: 9.3.0
+    version: 9.2.4
     repository: https://argoproj.github.io/argo-helm
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 # renovate: github=argoproj/argo-cd

clusters/cl01tl/helm/blocky/values.yaml

@@ -182,10 +182,9 @@ blocky:
                 - https://v.firebog.net/hosts/Prigent-Ads.txt
               mal:
                 - https://v.firebog.net/hosts/Prigent-Crypto.txt
+                - https://osint.digitalside.it/Threat-Intel/lists/latestdomains.txt
               pro:
                 - https://raw.githubusercontent.com/hagezi/dns-blocklists/main/wildcard/pro.plus.txt
-              oisd:
-                - https://big.oisd.nl/domainswild
             allowlists:
               sus:
                 - |
@@ -217,12 +216,6 @@ blocky:
                   *.alexlebens.dev
                   *.boreal-beaufort.ts.net
                   *.discord.com
-              oisd:
-                - |
-                  *.alexlebens.net
-                  *.alexlebens.dev
-                  *.boreal-beaufort.ts.net
-                  *.discord.com
             clientGroupsBlock:
               default:
                 - sus
@@ -230,7 +223,6 @@ blocky:
                 - priv
                 - mal
                 - pro
-                - oisd
             blockType: zeroIp
             blockTTL: 1m
             loading:

clusters/cl01tl/helm/booklore/values.yaml

@@ -9,7 +9,7 @@ booklore:
         main:
           image:
             repository: ghcr.io/booklore-app/booklore
-            tag: v1.17.0
+            tag: v1.16.5
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/code-server/values.yaml

@@ -9,7 +9,7 @@ code-server:
         main:
           image:
             repository: ghcr.io/linuxserver/code-server
-            tag: 4.107.1@sha256:2c085dd3efc1dfe394a802c4b53a821be607e579e718886f7a337b8ece0b92ee
+            tag: 4.107.0@sha256:e2ebedc28ab9e2ebe08093cf7e78515f97822956ff7cbac3d86fb0bd9e4b6bca
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/generic-device-plugin/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: generic-device-plugin
   repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-  version: 0.20.13
+  version: 0.20.12
-digest: sha256:054451587566f9d2fc6b416f4cc876386c609f2c5d3aedfb1ae501393138ea17
+digest: sha256:5106fdc0ebe367913b62c27b6aefb27c1a47c0d6cae5ad6652da33bfb04e3661
-generated: "2026-01-13T01:01:46.604191953Z"
+generated: "2026-01-08T23:05:57.531250555Z"

clusters/cl01tl/helm/generic-device-plugin/Chart.yaml

@@ -15,6 +15,6 @@ maintainers:
 dependencies:
   - name: generic-device-plugin
     repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-    version: 0.20.13
+    version: 0.20.12
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 appVersion: 1.0.0

clusters/cl01tl/helm/home-assistant/values.yaml

@@ -21,7 +21,7 @@ home-assistant:
         code-server:
           image:
             repository: ghcr.io/linuxserver/code-server
-            tag: 4.107.1@sha256:2c085dd3efc1dfe394a802c4b53a821be607e579e718886f7a337b8ece0b92ee
+            tag: 4.107.0@sha256:e2ebedc28ab9e2ebe08093cf7e78515f97822956ff7cbac3d86fb0bd9e4b6bca
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: kube-prometheus-stack
   repository: oci://ghcr.io/prometheus-community/charts
-  version: 80.13.3
+  version: 80.13.2
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
   version: 4.6.0
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.0.1
-digest: sha256:43ec4f7e90e31f70ee36651b795f8e982abe07279068213ddfae54eefe2a3994
+digest: sha256:4e027483c7a7878dd6058c03c1af8def9d5b58c9248c752241e0e63fcdc4b637
-generated: "2026-01-11T00:04:17.413709338Z"
+generated: "2026-01-08T23:06:27.630366638Z"

clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml

@@ -20,7 +20,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: kube-prometheus-stack
-    version: 80.13.3
+    version: 80.13.2
     repository: oci://ghcr.io/prometheus-community/charts
   - name: app-template
     alias: ntfy-alertmanager

clusters/cl01tl/helm/local-path-provisioner/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: local-path-provisioner
   repository: https://charts.containeroo.ch
-  version: 0.0.35
+  version: 0.0.34
-digest: sha256:c59cc5a81e797a9e2ab0f8e6bf03cb3e4dfc740555631aa1d41b7def1d2c60c8
+digest: sha256:f4f946897660d5d65eb2a56144d907c0b48c9a72e20d10a73684eaeb0d50cfd3
-generated: "2026-01-10T19:01:45.394965495Z"
+generated: "2025-12-26T21:55:29.099967751Z"

clusters/cl01tl/helm/local-path-provisioner/Chart.yaml

@@ -15,7 +15,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: local-path-provisioner
-    version: 0.0.35
+    version: 0.0.34
     repository: https://charts.containeroo.ch
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 # renovate: github=rancher/local-path-provisioner

clusters/cl01tl/helm/ollama/values.yaml

@@ -117,7 +117,7 @@ ollama:
         main:
           image:
             repository: ghcr.io/open-webui/open-webui
-            tag: 0.7.2
+            tag: 0.7.0
             pullPolicy: IfNotPresent
           env:
             - name: ENV

clusters/cl01tl/helm/prometheus-operator-crds/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: prometheus-operator-crds
   repository: oci://ghcr.io/prometheus-community/charts
-  version: 26.0.0
+  version: 25.0.1
-digest: sha256:fb73bc68bbf8ab128ff7fc641413ce3f004677d351038517ed68f5b39eeafb08
+digest: sha256:33e08873d2d1558d7e3784d7f995c8134347ca590f54109b783ae5f6ad5e2ae5
-generated: "2026-01-09T20:11:58.398634666Z"
+generated: "2025-12-11T18:13:48.868551-06:00"

clusters/cl01tl/helm/prometheus-operator-crds/Chart.yaml

@@ -15,7 +15,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: prometheus-operator-crds
-    version: 26.0.0
+    version: 25.0.1
     repository: oci://ghcr.io/prometheus-community/charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/prometheus.png
 # renovate: github=prometheus-operator/prometheus-operator

clusters/cl01tl/helm/qbittorrent/values.yaml

@@ -28,7 +28,7 @@ qbittorrent:
         qbittorrent:
           image:
             repository: ghcr.io/linuxserver/qbittorrent
-            tag: 5.1.4@sha256:95114034a7f74672b76f795f6938921b0ca795f85b59b48691035dc66714f34c
+            tag: 5.1.4@sha256:e0cedcadd62f809efdeddfd32e4d1192f9a74e6e64ed6753bfc6e2c3ed4a714a
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/searxng/values.yaml

@@ -9,7 +9,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:35e3520e53621e22566330d876d2a36e4a556628b6567bf2706ceb211c6d9c07
+            tag: latest@sha256:256b113a44b26a293a24d864707753344ebe75687445a97ed0e8d701dec7af45
             pullPolicy: IfNotPresent
           env:
             - name: SEARXNG_BASE_URL
@@ -39,7 +39,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:35e3520e53621e22566330d876d2a36e4a556628b6567bf2706ceb211c6d9c07
+            tag: latest@sha256:256b113a44b26a293a24d864707753344ebe75687445a97ed0e8d701dec7af45
             pullPolicy: IfNotPresent
           env:
             - name: SEARXNG_BASE_URL

clusters/cl01tl/helm/slskd/values.yaml

@@ -122,7 +122,7 @@ slskd:
         main:
           image:
             repository: mrusse08/soularr
-            tag: latest@sha256:c1cfc6425c1cc141f5f99744611eeb1af32c85258df5e2a4974d7dbf6db76840
+            tag: latest@sha256:b41d4f8ec74e9eded55e0096ddb40ba155ff3288f87b50639d57e5ba4c980159
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/vaultwarden/values.yaml

@@ -9,7 +9,7 @@ vaultwarden:
         main:
           image:
             repository: vaultwarden/server
-            tag: 1.35.2
+            tag: 1.35.1
             pullPolicy: IfNotPresent
           env:
             - name: DOMAIN

hosts/ps08rp/blocky/config.yml

@@ -157,6 +157,7 @@ blocking:
       - https://v.firebog.net/hosts/Prigent-Ads.txt
     mal:
       - https://v.firebog.net/hosts/Prigent-Crypto.txt
+      - https://osint.digitalside.it/Threat-Intel/lists/latestdomains.txt
     pro:
       - https://raw.githubusercontent.com/hagezi/dns-blocklists/main/wildcard/pro.plus.txt
   allowlists:

hosts/ps09rp/blocky/config.yml

@@ -178,6 +178,7 @@ blocking:
       - https://v.firebog.net/hosts/Prigent-Ads.txt
     mal:
       - https://v.firebog.net/hosts/Prigent-Crypto.txt
+      - https://osint.digitalside.it/Threat-Intel/lists/latestdomains.txt
     pro:
       - https://raw.githubusercontent.com/hagezi/dns-blocklists/main/wildcard/pro.plus.txt
   allowlists:

hosts/ps10rp/blocky/config.yml

@@ -48,17 +48,6 @@ customDNS:
     www                             IN      CNAME   ps10rp
     homepage                        IN      CNAME   ps10rp
 
-clientLookup:
-  upstream: 192.168.5.1
-  singleNameOrder:
-    - 2
-    - 1
-  clients:
-    samsungtv:
-      - 192.168.5.77
-    firestick:
-      - 192.168.5.47
-
 blocking:
   denylists:
     sus:
@@ -73,6 +62,7 @@ blocking:
       - https://v.firebog.net/hosts/Prigent-Ads.txt
     mal:
       - https://v.firebog.net/hosts/Prigent-Crypto.txt
+      - https://osint.digitalside.it/Threat-Intel/lists/latestdomains.txt
     pro:
       - https://raw.githubusercontent.com/hagezi/dns-blocklists/main/wildcard/pro.txt
   allowlists:
@@ -104,11 +94,24 @@ blocking:
         *.lebens-home.net
         *.boreal-beaufort.ts.net
         *.discord.com
+    pro:
+      - |
+        *.alexlebens.net
+        *.alexlebens.dev
+        *.lebens-home.net
+        *.boreal-beaufort.ts.net
+        *.discord.com
+    streaming-allow:
+      - |
+        *.alexlebens.net
+        *.alexlebens.dev
+        *.lebens-home.net
+        *.boreal-beaufort.ts.net
         hulu.com
         *.hulu.com
         *.hulustream.com
         *.samsungcloudsolution.net
-        ads-*-darwin.hulustream.com
+        ads-[a-z]+-darwin.hulustream.com
         assets.huluim.com
         assetshuluimcom-a.akamaihd.net
         cws-hulu.conviva.com
@@ -118,15 +121,8 @@ blocking:
         dpm.demdex.net
         hulu.com.akadns.net.
         hulu.hb-api.omtrdc.net
-        tvx.adgrx.com
+        tvx.adgrx.com cdn
         unagi-na.amazon.com
-    pro:
-      - |
-        *.alexlebens.net
-        *.alexlebens.dev
-        *.lebens-home.net
-        *.boreal-beaufort.ts.net
-        *.discord.com
   clientGroupsBlock:
     default:
       - sus
@@ -134,10 +130,10 @@ blocking:
       - priv
       - mal
       - pro
-    samsungtv:
+    192.168.5.77:
-      - mal
+      - streaming-allow
-    firestick:
+    192.168.5.47:
-      - mal
+      - streaming-allow
   blockType: zeroIp
   blockTTL: 1m
   loading:

hosts/ps10rp/isponsorblocktv/config.json

@@ -0,0 +1,15 @@
+{
+    "devices": [],
+    "apikey": "",
+    "skip_categories": [
+        "sponsor"
+    ],
+    "channel_whitelist": [],
+    "skip_count_tracking": false,
+    "mute_ads": true,
+    "skip_ads": true,
+    "minimum_skip_length": 1,
+    "auto_play": false,
+    "join_name": "iSponsorBlockTV",
+    "use_proxy": true
+}