chore(deps): update g33kphr33k/musicgrabber docker tag to v2.3.0

2026-03-05 12:04:20 +00:00
198 changed files with 726 additions and 861 deletions
--- a/clusters/cl01tl/helm/actual/Chart.lock
+++ b/clusters/cl01tl/helm/actual/Chart.lock
@@ -4,6 +4,6 @@ dependencies:
  version: 4.6.2
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.8.0
-digest: sha256:ff81b3d8fc831e4b8048f646fffcf597aa7410e52ecf27690eab8104047dbe6f
-generated: "2026-03-06T01:04:41.514235218Z"
+  version: 0.7.0
+digest: sha256:ff3e2f03e93cdd4593e28b9c8bd5b9ddb25548a20a070b2e202057f216207d03
+generated: "2026-01-16T18:44:37.399172263Z"
--- a/clusters/cl01tl/helm/actual/Chart.yaml
+++ b/clusters/cl01tl/helm/actual/Chart.yaml
@@ -19,7 +19,7 @@ dependencies:
    version: 4.6.2
  - name: volsync-target
    alias: volsync-target-data
-    version: 0.8.0
+    version: 0.7.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/actual-budget.png
 # renovate: datasource=github-releases depName=actualbudget/actual
--- a/clusters/cl01tl/helm/argocd/Chart.lock
+++ b/clusters/cl01tl/helm/argocd/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: argo-cd
  repository: https://argoproj.github.io/argo-helm
-  version: 9.4.10
-digest: sha256:795aad956acef3f5efb8160390caf9b9792b7b4150d3a7984f1c5edbad92dfaa
-generated: "2026-03-10T18:58:35.720448421Z"
+  version: 9.4.7
+digest: sha256:9fc78ed4a6a55f65e3250e687caf67ad09e852eb7b01313e372127e75f451a79
+generated: "2026-03-03T20:05:52.081769174Z"
--- a/clusters/cl01tl/helm/argocd/Chart.yaml
+++ b/clusters/cl01tl/helm/argocd/Chart.yaml
@@ -15,8 +15,8 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: argo-cd
-    version: 9.4.10
+    version: 9.4.7
    repository: https://argoproj.github.io/argo-helm
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 # renovate: datasource=github-releases depName=argoproj/argo-cd
-appVersion: v3.3.3
+appVersion: v3.3.2
--- a/clusters/cl01tl/helm/audiobookshelf/Chart.lock
+++ b/clusters/cl01tl/helm/audiobookshelf/Chart.lock
@@ -4,9 +4,9 @@ dependencies:
  version: 4.6.2
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.8.0
+  version: 0.7.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.8.0
-digest: sha256:7ee4cfdf7f908401c39b3cda0cf8783b25dcb9cf93e7c911609bab9e303ec5bf
-generated: "2026-03-06T01:05:03.534042627Z"
+  version: 0.7.0
+digest: sha256:c8a988258b26187972a8b69767bf5df502d7e2b12710eb357ac15240d872fd37
+generated: "2026-01-16T18:44:48.982249243Z"
--- a/clusters/cl01tl/helm/audiobookshelf/Chart.yaml
+++ b/clusters/cl01tl/helm/audiobookshelf/Chart.yaml
@@ -21,11 +21,11 @@ dependencies:
    version: 4.6.2
  - name: volsync-target
    alias: volsync-target-config
-    version: 0.8.0
+    version: 0.7.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-metadata
-    version: 0.8.0
+    version: 0.7.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/audiobookshelf.png
 # renovate: datasource=github-releases depName=advplyr/audiobookshelf
--- a/clusters/cl01tl/helm/audiobookshelf/values.yaml
+++ b/clusters/cl01tl/helm/audiobookshelf/values.yaml
@@ -21,7 +21,7 @@ audiobookshelf:
        apprise-api:
          image:
            repository: caronc/apprise
-            tag: v1.3.2
+            tag: v1.3.1
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/helm/authentik/Chart.lock
+++ b/clusters/cl01tl/helm/authentik/Chart.lock
@@ -4,12 +4,12 @@ dependencies:
  version: 2026.2.1
 - name: cloudflared
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.4.0
+  version: 2.3.0
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 7.8.0
- name: valkey
+- name: redis-replication
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.0
-digest: sha256:fad7059feb4ac80e06cd571a56215d56e4894eba69fb54aaa1e53ced9ec1b2b1
-generated: "2026-03-09T23:06:05.608952158Z"
+  version: 1.1.0
+digest: sha256:ee8c360d746800a6f3f41f64fd2f116224b305d8bcb8660ed2687c7987e59c37
+generated: "2026-03-04T00:37:25.727534823Z"
--- a/clusters/cl01tl/helm/authentik/Chart.yaml
+++ b/clusters/cl01tl/helm/authentik/Chart.yaml
@@ -25,14 +25,13 @@ dependencies:
    repository: https://charts.goauthentik.io/
  - name: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.4.0
+    version: 2.3.0
  - name: postgres-cluster
    alias: postgres-18-cluster
    version: 7.8.0
    repository: oci://harbor.alexlebens.net/helm-charts
-  - name: valkey
-    alias: valkey
-    version: 0.4.0
+  - name: redis-replication
+    version: 1.1.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/authentik.png
 # renovate: datasource=github-releases depName=goauthentik/authentik
--- a/clusters/cl01tl/helm/authentik/values.yaml
+++ b/clusters/cl01tl/helm/authentik/values.yaml
@@ -28,7 +28,7 @@ authentik:
            key: password
  authentik:
    redis:
-      host: authentik-valkey
+      host: redis-replication-authentik-master
  server:
    name: server
    replicas: 1
@@ -105,3 +105,10 @@ postgres-18-cluster:
      #   immediate: true
      #   schedule: "0 0 0 * * *"
      #   backupName: external
+redis-replication:
+  existingSecret:
+    enabled: false
+  redisReplication:
+    clusterSize: 3
+    sentinel:
+      enabled: true
--- a/clusters/cl01tl/helm/backrest/Chart.lock
+++ b/clusters/cl01tl/helm/backrest/Chart.lock
@@ -4,9 +4,9 @@ dependencies:
  version: 4.6.2
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.8.0
+  version: 0.7.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.8.0
-digest: sha256:f203538010828e77336f3cf39451a1072c90aeb8ece7c173a3476c49883b46d1
-generated: "2026-03-06T01:05:24.935421139Z"
+  version: 0.7.0
+digest: sha256:18365b7dd3995703aad6928ce22dd1c3b8ffd5f1cccf54b8f1489ad111d13104
+generated: "2026-01-16T18:45:00.087995513Z"
--- a/clusters/cl01tl/helm/backrest/Chart.yaml
+++ b/clusters/cl01tl/helm/backrest/Chart.yaml
@@ -19,11 +19,11 @@ dependencies:
    version: 4.6.2
  - name: volsync-target
    alias: volsync-target-config
-    version: 0.8.0
+    version: 0.7.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-data
-    version: 0.8.0
+    version: 0.7.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/backrest.png
 # renovate: datasource=github-releases depName=garethgeorge/backrest
--- a/clusters/cl01tl/helm/bazarr/Chart.lock
+++ b/clusters/cl01tl/helm/bazarr/Chart.lock
@@ -4,6 +4,6 @@ dependencies:
  version: 4.6.2
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.8.0
-digest: sha256:ce88e4cd451613c9dbc25d285700970789ff678452ef277f3c8465dbf6157f1f
-generated: "2026-03-06T01:05:44.405374459Z"
+  version: 0.7.0
+digest: sha256:77d0e82601292b4173d355d18c0de82bb37684a3dc29d7c8af4169308f14de48
+generated: "2026-01-16T18:45:10.855338471Z"
--- a/clusters/cl01tl/helm/bazarr/Chart.yaml
+++ b/clusters/cl01tl/helm/bazarr/Chart.yaml
@@ -21,7 +21,7 @@ dependencies:
    version: 4.6.2
  - name: volsync-target
    alias: volsync-target-config
-    version: 0.8.0
+    version: 0.7.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/bazarr.png
 # renovate: datasource=github-releases depName=morpheus65535/bazarr
--- a/clusters/cl01tl/helm/bazarr/values.yaml
+++ b/clusters/cl01tl/helm/bazarr/values.yaml
@@ -15,7 +15,7 @@ bazarr:
        main:
          image:
            repository: ghcr.io/linuxserver/bazarr
-            tag: 1.5.6@sha256:05f9d5b24884f37120453dc1a008a47be244eebec32099ae1bd29032e75b67aa
+            tag: 1.5.6@sha256:94eee5e3e14430b7b144d4556be73963a7daf6f1bddc25586627f426465482ce
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/helm/blocky/Chart.lock
+++ b/clusters/cl01tl/helm/blocky/Chart.lock
@@ -2,8 +2,8 @@ dependencies:
 - name: app-template
  repository: https://bjw-s-labs.github.io/helm-charts/
  version: 4.6.2
- name: valkey
+- name: redis-replication
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.0
-digest: sha256:a5b0099261d772b24a302a106d106cfa82ac07fa14564141e00cf107d708e859
-generated: "2026-03-09T23:06:16.853255429Z"
+  version: 1.1.0
+digest: sha256:27a4d0d6fc6622d47686fbf1dcae41c5f7e72157b0fa35abb11b375ab91f949f
+generated: "2026-03-04T00:37:53.921436029Z"
--- a/clusters/cl01tl/helm/blocky/Chart.yaml
+++ b/clusters/cl01tl/helm/blocky/Chart.yaml
@@ -17,9 +17,8 @@ dependencies:
    alias: blocky
    repository: https://bjw-s-labs.github.io/helm-charts/
    version: 4.6.2
-  - name: valkey
-    alias: valkey
-    version: 0.4.0
+  - name: redis-replication
+    version: 1.1.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/blocky.png
 # renovate: datasource=github-releases depName=0xerr0r/blocky
--- a/clusters/cl01tl/helm/blocky/values.yaml
+++ b/clusters/cl01tl/helm/blocky/values.yaml
@@ -135,7 +135,6 @@ blocky:
              komodo                          IN      CNAME   traefik-cl01tl
              lidarr                          IN      CNAME   traefik-cl01tl
              mail                            IN      CNAME   traefik-cl01tl
-              movie-roulette                  IN      CNAME   traefik-cl01tl
              music-grabber                   IN      CNAME   traefik-cl01tl
              navidrome                       IN      CNAME   traefik-cl01tl
              ntfy                            IN      CNAME   traefik-cl01tl
@@ -193,42 +192,36 @@ blocky:
                  *.alexlebens.dev
                  *.boreal-beaufort.ts.net
                  *.discord.com
-                  cdn.trackjs.com
              ads:
                - |
                  *.alexlebens.net
                  *.alexlebens.dev
                  *.boreal-beaufort.ts.net
                  *.discord.com
-                  cdn.trackjs.com
              priv:
                - |
                  *.alexlebens.net
                  *.alexlebens.dev
                  *.boreal-beaufort.ts.net
                  *.discord.com
-                  cdn.trackjs.com
              mal:
                - |
                  *.alexlebens.net
                  *.alexlebens.dev
                  *.boreal-beaufort.ts.net
                  *.discord.com
-                  cdn.trackjs.com
              pro:
                - |
                  *.alexlebens.net
                  *.alexlebens.dev
                  *.boreal-beaufort.ts.net
                  *.discord.com
-                  cdn.trackjs.com
              oisd:
                - |
                  *.alexlebens.net
                  *.alexlebens.dev
                  *.boreal-beaufort.ts.net
                  *.discord.com
-                  cdn.trackjs.com
            clientGroupsBlock:
              default:
                - sus
@@ -260,7 +253,7 @@ blocky:
            cacheTimeNegative: 30m

          redis:
-            address: blocky-valkey.blocky:6379
+            address: redis-replication-blocky-master.blocky:6379
            required: true

          prometheus:
@@ -333,3 +326,6 @@ blocky:
              readOnly: true
              mountPropagation: None
              subPath: config.yml
+redis-replication:
+  redisReplication:
+    clusterSize: 1
--- a/clusters/cl01tl/helm/booklore/Chart.lock
+++ b/clusters/cl01tl/helm/booklore/Chart.lock
@@ -7,9 +7,9 @@ dependencies:
  version: 25.10.4
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.8.0
+  version: 0.7.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.8.0
-digest: sha256:d4c7bf75f72f7eab4ad968bf9f55daac9392c9b2df08f8a27c5dc4f8fffb5f57
-generated: "2026-03-06T01:06:05.696573273Z"
+  version: 0.7.0
+digest: sha256:81601af110374e1571481873ace19f7bc694edb917ef35c1fbc623efe147a66d
+generated: "2026-01-16T18:45:33.641059484Z"
--- a/clusters/cl01tl/helm/booklore/Chart.yaml
+++ b/clusters/cl01tl/helm/booklore/Chart.yaml
@@ -22,12 +22,12 @@ dependencies:
    repository: https://helm.mariadb.com/mariadb-operator
  - name: volsync-target
    alias: volsync-target-config
-    version: 0.8.0
+    version: 0.7.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-data
-    version: 0.8.0
+    version: 0.7.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/booklore.png
 # renovate: datasource=github-releases depName=booklore-app/BookLore
-appVersion: v2.1.0
+appVersion: v2.0.5
--- a/clusters/cl01tl/helm/booklore/values.yaml
+++ b/clusters/cl01tl/helm/booklore/values.yaml
@@ -9,15 +9,11 @@ booklore:
        main:
          image:
            repository: ghcr.io/booklore-app/booklore
-            tag: v2.1.0
+            tag: v2.0.5
            pullPolicy: IfNotPresent
          env:
            - name: TZ
              value: America/Chicago
-            - name: USER_ID
-              value: 1000
-            - name: GROUP_ID
-              value: 1000
            - name: DATABASE_URL
              value: jdbc:mariadb://booklore-mariadb-cluster-primary.booklore:3306/booklore
            - name: DATABASE_USERNAME
--- a/clusters/cl01tl/helm/cert-manager/Chart.lock
+++ b/clusters/cl01tl/helm/cert-manager/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: cert-manager
  repository: https://charts.jetstack.io
-  version: v1.20.0
-digest: sha256:1543bd17649cb32982de3cce017fcbed1b44c41d50b76c6471b266f33e261c29
-generated: "2026-03-10T16:06:49.332999536Z"
+  version: v1.19.4
+digest: sha256:5c4a0a0568677bfcf4529e6ec6a005957cd1820fd5f1d1f108e74370d409fe88
+generated: "2026-02-24T19:30:44.415585645Z"
--- a/clusters/cl01tl/helm/cert-manager/Chart.yaml
+++ b/clusters/cl01tl/helm/cert-manager/Chart.yaml
@@ -14,8 +14,8 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: cert-manager
-    version: v1.20.0
+    version: v1.19.4
    repository: https://charts.jetstack.io
 icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/cert-manager.png
 # renovate: datasource=github-releases depName=cert-manager/cert-manager
-appVersion: v1.20.0
+appVersion: v1.19.4
--- a/clusters/cl01tl/helm/code-server/Chart.lock
+++ b/clusters/cl01tl/helm/code-server/Chart.lock
@@ -4,9 +4,9 @@ dependencies:
  version: 4.6.2
 - name: cloudflared
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.4.0
+  version: 2.3.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.8.0
-digest: sha256:dee0f52096efc543f4db3a5dc2732fd37ae9b7950b264e399a6e74c2f3e7cee6
-generated: "2026-03-09T22:04:00.58415637Z"
+  version: 0.7.0
+digest: sha256:a170a0695881a7eed9bc2b0fc8b7f7bce18919e9bea0c5342a35e5a1a5ffa406
+generated: "2026-02-07T00:36:52.387080745Z"
--- a/clusters/cl01tl/helm/code-server/Chart.yaml
+++ b/clusters/cl01tl/helm/code-server/Chart.yaml
@@ -22,10 +22,10 @@ dependencies:
    version: 4.6.2
  - name: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.4.0
+    version: 2.3.0
  - name: volsync-target
    alias: volsync-target-config
-    version: 0.8.0
+    version: 0.7.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/visual-studio-code.png
 # renovate: datasource=github-releases depName=linuxserver/docker-code-server
--- a/clusters/cl01tl/helm/code-server/values.yaml
+++ b/clusters/cl01tl/helm/code-server/values.yaml
@@ -9,7 +9,7 @@ code-server:
        main:
          image:
            repository: ghcr.io/linuxserver/code-server
-            tag: 4.110.0@sha256:8473aa16fba93fccc3ca772173d095bccd2e44d4d3104467fee923df10d57cd2
+            tag: 4.109.5@sha256:aa43fb2fc31127e9d2166e903c7f13792351e38658ba29645662a89ff04ff90d
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/helm/coredns/Chart.yaml
+++ b/clusters/cl01tl/helm/coredns/Chart.yaml
@@ -19,4 +19,4 @@ dependencies:
    repository: https://coredns.github.io/helm
 icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/coredns.png
 # renovate: datasource=github-releases depName=coredns/coredns
-appVersion: v1.14.2
+appVersion: v1.14.1
--- a/clusters/cl01tl/helm/dawarich/Chart.lock
+++ b/clusters/cl01tl/helm/dawarich/Chart.lock
@@ -7,6 +7,6 @@ dependencies:
  version: 7.8.0
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.0
-digest: sha256:f21fb0c49396d888de95d0b4c59ed535437422c1b24e622bf074ed0fbb22e03a
-generated: "2026-03-09T23:06:27.025881262Z"
+  version: 0.2.0
+digest: sha256:2682dcbc71417a103cf4c1ed920caac5b14272b021dc579fb8a3cf2fedfa0490
+generated: "2026-03-03T16:10:42.029406-06:00"
--- a/clusters/cl01tl/helm/dawarich/Chart.yaml
+++ b/clusters/cl01tl/helm/dawarich/Chart.yaml
@@ -22,8 +22,8 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: valkey
    alias: valkey
-    version: 0.4.0
+    version: 0.2.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/dawarich.png
 # renovate: datasource=github-releases depName=Freika/dawarich
-appVersion: 1.3.2
+appVersion: 1.3.1
--- a/clusters/cl01tl/helm/dawarich/values.yaml
+++ b/clusters/cl01tl/helm/dawarich/values.yaml
@@ -9,7 +9,7 @@ dawarich:
        main:
          image:
            repository: freikin/dawarich
-            tag: 1.3.2
+            tag: 1.3.1
            pullPolicy: IfNotPresent
          command: ["web-entrypoint.sh"]
          args: ["bin/rails", "server", "-p", "3000", "-b", "::"]
@@ -106,7 +106,7 @@ dawarich:
        sidekiq:
          image:
            repository: freikin/dawarich
-            tag: 1.3.2
+            tag: 1.3.1
            pullPolicy: IfNotPresent
          command: ["sidekiq-entrypoint.sh"]
          args: ["sidekiq"]
--- a/clusters/cl01tl/helm/descheduler/Chart.lock
+++ b/clusters/cl01tl/helm/descheduler/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: descheduler
  repository: https://kubernetes-sigs.github.io/descheduler/
-  version: 0.35.1
-digest: sha256:ed7cc8068b83ac483fda3a781227b35e12a34abdca214b5490e7036c89db1a95
-generated: "2026-03-09T21:21:45.788316167Z"
+  version: 0.35.0
+digest: sha256:afa0e5fe35f9287db619de604c82a22c3ab90dfcaa3a845ff30491e47c7a5846
+generated: "2026-02-19T23:03:22.794515683Z"
--- a/clusters/cl01tl/helm/descheduler/Chart.yaml
+++ b/clusters/cl01tl/helm/descheduler/Chart.yaml
@@ -14,8 +14,8 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: descheduler
-    version: 0.35.1
+    version: 0.35.0
    repository: https://kubernetes-sigs.github.io/descheduler/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 # renovate: datasource=github-releases depName=kubernetes-sigs/descheduler
-appVersion: v0.35.1
+appVersion: v0.35.0
--- a/clusters/cl01tl/helm/directus/Chart.lock
+++ b/clusters/cl01tl/helm/directus/Chart.lock
@@ -5,8 +5,8 @@ dependencies:
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 7.8.0
- name: valkey
+- name: redis-replication
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.0
-digest: sha256:2c38827f09e57aeff21409bf223edf3f889069db6d05c39f0404ed0c974cabb3
-generated: "2026-03-09T23:06:37.271648311Z"
+  version: 1.1.0
+digest: sha256:081224a2297891ecb7e7306d7da895a6e7988e9a28e7244f310231f60dd9f6c8
+generated: "2026-03-04T00:38:19.7054203Z"
--- a/clusters/cl01tl/helm/directus/Chart.yaml
+++ b/clusters/cl01tl/helm/directus/Chart.yaml
@@ -25,9 +25,8 @@ dependencies:
    alias: postgres-18-cluster
    version: 7.8.0
    repository: oci://harbor.alexlebens.net/helm-charts
-  - name: valkey
-    alias: valkey
-    version: 0.4.0
+  - name: redis-replication
+    version: 1.1.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/directus.png
 # renovate: datasource=github-releases depName=directus/directus
--- a/clusters/cl01tl/helm/directus/templates/external-secret.yaml
+++ b/clusters/cl01tl/helm/directus/templates/external-secret.yaml
@@ -98,10 +98,10 @@ spec:
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
-  name: directus-valkey-config
+  name: directus-redis-config
  namespace: {{ .Release.Namespace }}
  labels:
-    app.kubernetes.io/name: directus-valkey-config
+    app.kubernetes.io/name: directus-redis-config
    app.kubernetes.io/instance: {{ .Release.Name }}
    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
@@ -109,24 +109,17 @@ spec:
    kind: ClusterSecretStore
    name: vault
  data:
-    - secretKey: default
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/directus/valkey
-        metadataPolicy: None
-        property: password
    - secretKey: user
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
-        key: /cl01tl/directus/valkey
+        key: /cl01tl/directus/redis
        metadataPolicy: None
        property: user
    - secretKey: password
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
-        key: /cl01tl/directus/valkey
+        key: /cl01tl/directus/redis
        metadataPolicy: None
        property: password
--- a/clusters/cl01tl/helm/directus/values.yaml
+++ b/clusters/cl01tl/helm/directus/values.yaml
@@ -72,16 +72,16 @@ directus:
            - name: REDIS_ENABLED
              value: true
            - name: REDIS_HOST
-              value: directus-valkey
+              value: redis-replication-directus-master
            - name: REDIS_USERNAME
              valueFrom:
                secretKeyRef:
-                  name: directus-valkey-config
+                  name: directus-redis-config
                  key: user
            - name: REDIS_PASSWORD
              valueFrom:
                secretKeyRef:
-                  name: directus-valkey-config
+                  name: directus-redis-config
                  key: password
            - name: STORAGE_LOCATIONS
              value: s3
@@ -231,13 +231,12 @@ postgres-18-cluster:
      #   immediate: true
      #   schedule: "0 0 0 * * *"
      #   backupName: external
-valkey:
-  valkey:
-    auth:
+redis-replication:
+  existingSecret:
+    enabled: true
+    name: directus-redis-config
+    key: password
+  redisReplication:
+    clusterSize: 3
+    sentinel:
      enabled: true
-      usersExistingSecret: directus-valkey-config
-      aclUsers:
-        default:
-          permissions: "~* &* +@all"
-    metrics:
-      enabled: false
--- a/clusters/cl01tl/helm/element-web/Chart.lock
+++ b/clusters/cl01tl/helm/element-web/Chart.lock
@@ -4,6 +4,6 @@ dependencies:
  version: 1.4.31
 - name: cloudflared
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.4.0
-digest: sha256:5066932d870c4803fca9bc4d7b686793e801d96b14026c299e467d8c107fb7eb
-generated: "2026-03-09T22:04:10.470135964Z"
+  version: 2.3.0
+digest: sha256:7447f3828246d85acd5a2a75b6d086d8fbe29ee90ad61b96dd25de8dcfefbc4e
+generated: "2026-03-03T18:08:31.901975101Z"
--- a/clusters/cl01tl/helm/element-web/Chart.yaml
+++ b/clusters/cl01tl/helm/element-web/Chart.yaml
@@ -21,7 +21,7 @@ dependencies:
    repository: https://ananace.gitlab.io/charts
  - name: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.4.0
+    version: 2.3.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/element.png
 # renovate: datasource=github-releases depName=element-hq/element-web
-appVersion: v1.12.12
+appVersion: v1.12.11
--- a/clusters/cl01tl/helm/element-web/values.yaml
+++ b/clusters/cl01tl/helm/element-web/values.yaml
@@ -2,7 +2,7 @@ element-web:
  replicaCount: 1
  image:
    repository: vectorim/element-web
-    tag: v1.12.12
+    tag: v1.12.11
    pullPolicy: IfNotPresent
  defaultServer:
    url: https://matrix.alexlebens.dev
--- a/clusters/cl01tl/helm/external-secrets/Chart.lock
+++ b/clusters/cl01tl/helm/external-secrets/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: external-secrets
  repository: https://charts.external-secrets.io
-  version: 2.1.0
-digest: sha256:b19563d51f1922403185979c6c442531a7bb13d302e8438b5a18d450259b7245
-generated: "2026-03-07T18:02:23.908145348Z"
+  version: 2.0.1
+digest: sha256:f47905e03f649c28d29f7a381799fb2df1f0a7bf122af174aeba47ba94f34847
+generated: "2026-02-20T19:29:28.137671934Z"
--- a/clusters/cl01tl/helm/external-secrets/Chart.yaml
+++ b/clusters/cl01tl/helm/external-secrets/Chart.yaml
@@ -12,8 +12,8 @@ sources:
  - https://github.com/external-secrets/external-secrets/tree/main/deploy/charts/external-secrets
 dependencies:
  - name: external-secrets
-    version: 2.1.0
+    version: 2.0.1
    repository: https://charts.external-secrets.io
 icon: https://avatars.githubusercontent.com/u/68335991?s=48&v=4
 # renovate: datasource=github-releases depName=external-secrets/external-secrets
-appVersion: v2.1.0
+appVersion: v2.0.1
--- a/clusters/cl01tl/helm/freshrss/Chart.lock
+++ b/clusters/cl01tl/helm/freshrss/Chart.lock
@@ -4,12 +4,12 @@ dependencies:
  version: 4.6.2
 - name: cloudflared
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.4.0
+  version: 2.3.0
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 7.8.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.8.0
-digest: sha256:99f1993c99c23ba5b3af6997d859cbb18f26343e424c1312f8b6169f285a3418
-generated: "2026-03-09T22:04:20.416597531Z"
+  version: 0.7.0
+digest: sha256:e99b942b1c28deb0c120f5dec6d8a0dae8cb9714109c40cf08054af1467bc56f
+generated: "2026-02-27T18:15:22.681368568Z"
--- a/clusters/cl01tl/helm/freshrss/Chart.yaml
+++ b/clusters/cl01tl/helm/freshrss/Chart.yaml
@@ -23,14 +23,14 @@ dependencies:
    version: 4.6.2
  - name: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.4.0
+    version: 2.3.0
  - name: postgres-cluster
    alias: postgres-18-cluster
    version: 7.8.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-data
-    version: 0.8.0
+    version: 0.7.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/freshrss.png
 # renovate: datasource=github-releases depName=FreshRSS/FreshRSS
--- a/clusters/cl01tl/helm/gatus/Chart.lock
+++ b/clusters/cl01tl/helm/gatus/Chart.lock
@@ -7,6 +7,6 @@ dependencies:
  version: 7.8.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.8.0
-digest: sha256:c0c46db33b89b7a53dd512d19d07623a1eaafcc93668f0afacbb8d8c56d71e47
-generated: "2026-03-06T01:07:17.642671539Z"
+  version: 0.7.0
+digest: sha256:d7790fe1459aecff41e33719556aa370a3b5c3b4ae7c414268665c63ad3952f3
+generated: "2026-02-27T18:15:37.998212393Z"
--- a/clusters/cl01tl/helm/gatus/Chart.yaml
+++ b/clusters/cl01tl/helm/gatus/Chart.yaml
@@ -26,7 +26,7 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-data
-    version: 0.8.0
+    version: 0.7.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/gatus.png
 # renovate: datasource=github-releases depName=TwiN/gatus
--- a/clusters/cl01tl/helm/gatus/values.yaml
+++ b/clusters/cl01tl/helm/gatus/values.yaml
@@ -137,9 +137,6 @@ gatus:
      - name: yamtrack
        url: https://yamtrack.alexlebens.net
        <<: *defaults
-      - name: movie-roulette
-        url: https://movie-roulette.alexlebens.net
-        <<: *defaults
      - name: jellyfin
        url: https://jellyfin.alexlebens.net
        <<: *defaults
--- a/clusters/cl01tl/helm/generic-device-plugin/Chart.lock
+++ b/clusters/cl01tl/helm/generic-device-plugin/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: generic-device-plugin
  repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-  version: 0.20.21
-digest: sha256:4f1359a01b8b85722ab1805426a86f3ea64d0134513ce14fe9c55f3f918a21fb
-generated: "2026-03-09T23:02:42.799515974Z"
+  version: 0.20.20
+digest: sha256:8841709955381394b6304b7c53345692517e419c197ddc59b66a505ae742ec04
+generated: "2026-03-03T03:03:20.457381608Z"
--- a/clusters/cl01tl/helm/generic-device-plugin/Chart.yaml
+++ b/clusters/cl01tl/helm/generic-device-plugin/Chart.yaml
@@ -15,6 +15,6 @@ maintainers:
 dependencies:
  - name: generic-device-plugin
    repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-    version: 0.20.21
+    version: 0.20.20
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 appVersion: 1.0.0
--- a/clusters/cl01tl/helm/gitea/Chart.lock
+++ b/clusters/cl01tl/helm/gitea/Chart.lock
@@ -7,21 +7,21 @@ dependencies:
  version: 0.0.3
 - name: meilisearch
  repository: https://meilisearch.github.io/meilisearch-kubernetes
-  version: 0.27.0
+  version: 0.26.0
 - name: cloudflared
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.4.0
+  version: 2.3.0
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 7.8.0
- name: valkey
+- name: redis-replication
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.0
+  version: 1.1.0
 - name: valkey
-  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.0
+  repository: https://valkey.io/valkey-helm
+  version: 0.9.3
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.8.0
-digest: sha256:177a591c68e99a6f63f8acaf904cfc444774814db4ccd3ac410be511d67bbf9c
-generated: "2026-03-09T23:06:50.110952088Z"
+  version: 0.7.0
+digest: sha256:9d89745fb4c694706585f7bf6652a45307ad3e528f0f6bd0225ed44282567438
+generated: "2026-03-04T00:38:48.956491426Z"
--- a/clusters/cl01tl/helm/gitea/Chart.yaml
+++ b/clusters/cl01tl/helm/gitea/Chart.yaml
@@ -33,26 +33,26 @@ dependencies:
    repository: https://dl.gitea.com/charts/
    version: 0.0.3
  - name: meilisearch
-    version: 0.27.0
+    version: 0.26.0
    repository: https://meilisearch.github.io/meilisearch-kubernetes
  - name: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.4.0
+    version: 2.3.0
  - name: postgres-cluster
    alias: postgres-18-cluster
    version: 7.8.0
    repository: oci://harbor.alexlebens.net/helm-charts
-  - name: valkey
-    alias: valkey-gitea
-    version: 0.4.0
+  - name: redis-replication
+    alias: redis-replication-gitea
+    version: 1.1.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: valkey
    alias: valkey-renovate
-    version: 0.4.0
-    repository: oci://harbor.alexlebens.net/helm-charts
+    version: 0.9.3
+    repository: https://valkey.io/valkey-helm
  - name: volsync-target
    alias: volsync-target-storage
-    version: 0.8.0
+    version: 0.7.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/gitea.png
 # renovate: datasource=github-releases depName=go-gitea/gitea
--- a/clusters/cl01tl/helm/gitea/values.yaml
+++ b/clusters/cl01tl/helm/gitea/values.yaml
@@ -70,13 +70,13 @@ gitea:
      cache:
        ENABLED: true
        ADAPTER: redis
-        HOST: redis://gitea-valkey.gitea:6379
+        HOST: redis://redis-replication-gitea-master.gitea:6379
      queue:
        TYPE: redis
-        CONN_STR: redis://gitea-valkey.gitea:6379
+        CONN_STR: redis://redis-replication-gitea-master.gitea:6379
      session:
        PROVIDER: redis
-        PROVIDER_CONFIG: redis://gitea-valkey.gitea:6379
+        PROVIDER_CONFIG: redis://redis-replication-gitea-master.gitea:6379
      indexer:
        ISSUE_INDEXER_ENABLED: true
        ISSUE_INDEXER_TYPE: meilisearch
@@ -145,7 +145,7 @@ gitea-actions:
        log:
          level: debug
        cache:
-          enabled: true
+          enabled: false
        runner:
          labels:
            - "ubuntu-latest:docker://harbor.alexlebens.net/proxy-hub.docker/gitea/runner-images:ubuntu-24.04"
@@ -234,22 +234,40 @@ postgres-18-cluster:
      #   immediate: true
      #   schedule: "0 0 0 * * *"
      #   backupName: external
-valkey-gitea:
-  valkey:
+redis-replication-gitea:
+  replicationNameOverride: redis-replication-gitea
+  redisReplication:
+    clusterSize: 3
    resources:
      requests:
        cpu: 20m
-        memory: 256Mi
-    dataStorage:
-      requestedSize: 10Gi
-    replica:
-      persistence:
-        size: 10Gi
+        memory: 400Mi
+    volumeClaimTemplate:
+      spec:
+        resources:
+          requests:
+            storage: 10Gi
+    sentinel:
+      enabled: true
 valkey-renovate:
-  valkey:
-    nameOverride: valkey-renovate
-    replica:
-      enabled: false
+  image:
+    registry: ghcr.io
+    repository: valkey-io/valkey
+    tag: 9.0.3-alpine
+  resources:
+    requests:
+      cpu: 10m
+      memory: 32Mi
+  dataStorage:
+    enabled: false
+  replica:
+    enabled: false
+  metrics:
+    enabled: true
+    serviceMonitor:
+      enabled: true
+    podMonitor:
+      enabled: true
 volsync-target-storage:
  pvcTarget: gitea-shared-storage
  moverSecurityContext:
--- a/clusters/cl01tl/helm/grafana-operator/Chart.lock
+++ b/clusters/cl01tl/helm/grafana-operator/Chart.lock
@@ -5,11 +5,11 @@ dependencies:
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 7.8.0
- name: valkey
+- name: redis-replication
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.0
- name: valkey
+  version: 1.1.0
+- name: redis-replication
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.0
-digest: sha256:6f4dc1456854cad04f387cef6e0a9c846e76eb811bf97f2b7b13877cb3f577bd
-generated: "2026-03-09T23:07:06.293890171Z"
+  version: 1.1.0
+digest: sha256:ad859d46d684dcb166896c336d899da35bad32dc12ec64e327fbd366c77d81d7
+generated: "2026-03-04T00:39:30.940857832Z"
--- a/clusters/cl01tl/helm/grafana-operator/Chart.yaml
+++ b/clusters/cl01tl/helm/grafana-operator/Chart.yaml
@@ -23,13 +23,13 @@ dependencies:
    alias: postgres-18-cluster
    version: 7.8.0
    repository: oci://harbor.alexlebens.net/helm-charts
-  - name: valkey
-    alias: valkey-unified-alerting
-    version: 0.4.0
+  - name: redis-replication
+    alias: redis-replication-unified-alerting
+    version: 1.1.0
    repository: oci://harbor.alexlebens.net/helm-charts
-  - name: valkey
-    alias: valkey-remote-cache
-    version: 0.4.0
+  - name: redis-replication
+    alias: redis-replication-remote-cache
+    version: 1.1.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/grafana.png
 # renovate: datasource=github-releases depName=grafana/grafana-operator
--- a/clusters/cl01tl/helm/grafana-operator/templates/grafana-dashboard.yaml
+++ b/clusters/cl01tl/helm/grafana-operator/templates/grafana-dashboard.yaml
@@ -301,6 +301,44 @@ spec:
  resyncPeriod: 1h
  url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/service/harbor.json

+---
+apiVersion: grafana.integreatly.org/v1beta1
+kind: GrafanaDashboard
+metadata:
+  name: grafana-dashboard-redis-replication
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: grafana-dashboard-redis-replication
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  instanceSelector:
+    matchLabels:
+      app: grafana-main
+  contentCacheDuration: 1h
+  folderUID: grafana-folder-service
+  resyncPeriod: 1h
+  url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/service/redis-replication.json
+
+---
+apiVersion: grafana.integreatly.org/v1beta1
+kind: GrafanaDashboard
+metadata:
+  name: grafana-dashboard-redis-operator
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: grafana-dashboard-redis-operator
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  instanceSelector:
+    matchLabels:
+      app: grafana-main
+  contentCacheDuration: 1h
+  folderUID: grafana-folder-service
+  resyncPeriod: 1h
+  url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/service/redis-operator.json
+
 ---
 apiVersion: grafana.integreatly.org/v1beta1
 kind: GrafanaDashboard
--- a/clusters/cl01tl/helm/grafana-operator/templates/grafana.yaml
+++ b/clusters/cl01tl/helm/grafana-operator/templates/grafana.yaml
@@ -45,10 +45,10 @@ spec:
      password: ${DB_PASSWORD}
    remote_cache:
      type: redis
-      connstr: addr=grafana-operator-valkey-remote-cache.grafana-operator:6379,pool_size=100,db=0,ssl=false
+      connstr: addr=redis-replication-remote-cache-master.grafana-operator:6379,pool_size=100,db=0,ssl=false
    unified_alerting:
      enabled: "true"
-      ha_redis_address: grafana-operator-valkey-unified-alerting.grafana-operator:6379
+      ha_redis_address: redis-replication-unified-alerting-master.grafana-operator:6379
  deployment:
    spec:
      replicas: 3
--- a/clusters/cl01tl/helm/grafana-operator/values.yaml
+++ b/clusters/cl01tl/helm/grafana-operator/values.yaml
@@ -54,11 +54,13 @@ postgres-18-cluster:
      #   immediate: true
      #   schedule: "0 0 0 * * *"
      #   backupName: external
-valkey-unified-alerting:
-  valkey:
-    nameOverride: valkey-unified-alerting
-valkey-remote-cache:
-  valkey:
-    nameOverride: valkey-remote-cache
-    replica:
-      enabled: false
+redis-replication-unified-alerting:
+  replicationNameOverride: redis-replication-unified-alerting
+  redisReplication:
+    clusterSize: 3
+    sentinel:
+      enabled: true
+redis-replication-remote-cache:
+  replicationNameOverride: redis-replication-remote-cache
+  redisReplication:
+    clusterSize: 1
--- a/clusters/cl01tl/helm/harbor/Chart.lock
+++ b/clusters/cl01tl/helm/harbor/Chart.lock
@@ -5,8 +5,8 @@ dependencies:
 - name: postgres-cluster
  repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
  version: 7.8.0
- name: valkey
+- name: redis-replication
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.0
-digest: sha256:ee8ed34cd53d8fa36497df28cba9cf16ef656250b0bc3ff6690fb958b22caf6f
-generated: "2026-03-09T23:07:20.650108569Z"
+  version: 1.1.0
+digest: sha256:5ed0bf7a628fafdf2adc742b80ba900fd836e56682e9c3c37c4959cc56a91e4b
+generated: "2026-03-04T00:40:00.093022723Z"
--- a/clusters/cl01tl/helm/harbor/Chart.yaml
+++ b/clusters/cl01tl/helm/harbor/Chart.yaml
@@ -23,10 +23,9 @@ dependencies:
    alias: postgres-18-cluster
    version: 7.8.0
    repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
-  - name: valkey
-    alias: valkey
-    version: 0.4.0
+  - name: redis-replication
+    version: 1.1.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/harbor.png
 # renovate: datasource=github-releases depName=goharbor/harbor
-appVersion: v2.14.3
+appVersion: v2.14.2
--- a/clusters/cl01tl/helm/harbor/values.yaml
+++ b/clusters/cl01tl/helm/harbor/values.yaml
@@ -41,12 +41,12 @@ harbor:
  portal:
    image:
      repository: goharbor/harbor-portal
-      tag: v2.14.3
+      tag: v2.14.2
    replicas: 2
  core:
    image:
      repository: goharbor/harbor-core
-      tag: v2.14.3
+      tag: v2.14.2
    replicas: 2
    existingSecret: harbor-secret
    secretName: harbor-secret
@@ -54,7 +54,7 @@ harbor:
  jobservice:
    image:
      repository: goharbor/harbor-jobservice
-      tag: v2.14.3
+      tag: v2.14.2
    replicas: 2
    jobLoggers:
      - stdout
@@ -63,11 +63,11 @@ harbor:
    registry:
      image:
        repository: goharbor/registry-photon
-        tag: v2.14.3
+        tag: v2.14.2
    controller:
      image:
        repository: goharbor/harbor-registryctl
-        tag: v2.14.3
+        tag: v2.14.2
    existingSecret: harbor-secret
    relativeurls: true
    credentials:
@@ -90,11 +90,11 @@ harbor:
  redis:
    type: external
    external:
-      addr: harbor-valkey.harbor:6379
+      addr: "redis-replication-harbor-master.harbor:6379"
  exporter:
    image:
      repository: goharbor/harbor-exporter
-      tag: v2.14.3
+      tag: v2.14.2
    replicas: 2
 postgres-18-cluster:
  mode: recovery
@@ -138,3 +138,8 @@ postgres-18-cluster:
      #   immediate: true
      #   schedule: "0 0 0 * * *"
      #   backupName: external
+redis-replication:
+  redisReplication:
+    clusterSize: 3
+    sentinel:
+      enabled: true
--- a/clusters/cl01tl/helm/home-assistant/Chart.lock
+++ b/clusters/cl01tl/helm/home-assistant/Chart.lock
@@ -4,6 +4,6 @@ dependencies:
  version: 4.6.2
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.8.0
-digest: sha256:dc33c006806b1ac93403a6e77c12e013cac6cf64586bc1d26c54841e6ddf7d2c
-generated: "2026-03-06T01:08:23.774548766Z"
+  version: 0.7.0
+digest: sha256:2ba5b6579e7296d663fd0dcb7dfb4fea67142413801f6fbc4125a0e731b45210
+generated: "2026-01-16T18:46:42.940648748Z"
--- a/clusters/cl01tl/helm/home-assistant/Chart.yaml
+++ b/clusters/cl01tl/helm/home-assistant/Chart.yaml
@@ -21,8 +21,8 @@ dependencies:
    version: 4.6.2
  - name: volsync-target
    alias: volsync-target-config
-    version: 0.8.0
+    version: 0.7.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/home-assistant.png
 # renovate: datasource=github-releases depName=home-assistant/core
-appVersion: 2026.3.1
+appVersion: 2026.3.0
--- a/clusters/cl01tl/helm/home-assistant/values.yaml
+++ b/clusters/cl01tl/helm/home-assistant/values.yaml
@@ -9,7 +9,7 @@ home-assistant:
        main:
          image:
            repository: ghcr.io/home-assistant/home-assistant
-            tag: 2026.3.1
+            tag: 2026.3.0
            pullPolicy: IfNotPresent
          env:
            - name: TZ
@@ -21,7 +21,7 @@ home-assistant:
        code-server:
          image:
            repository: ghcr.io/linuxserver/code-server
-            tag: 4.110.0@sha256:8473aa16fba93fccc3ca772173d095bccd2e44d4d3104467fee923df10d57cd2
+            tag: 4.109.5@sha256:aa43fb2fc31127e9d2166e903c7f13792351e38658ba29645662a89ff04ff90d
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/helm/homepage/values.yaml
+++ b/clusters/cl01tl/helm/homepage/values.yaml
@@ -36,24 +36,6 @@ homepage:
    config:
      enabled: true
      data:
-        custom.css: |
-            html {
-                font-size: 18px;
-            }
-            ul#myTab {
-                background-color: rgba(240, 230, 215, 0.12) !important;
-                color: white !important;
-            }
-            li.service div.service-card,
-            li.bookmark a.rounded-md {
-                color: white !important;
-                background-color: rgba(240, 230, 215, 0.12) !important;
-                transition: all 150ms ease !important;
-            }
-            li.service div.service-card:hover,
-            li.bookmark a.rounded-md:hover {
-                background-color: rgba(240, 230, 215, 0.18) !important;
-            }
        docker.yaml: ""
        kubernetes.yaml: |
          mode: cluster
@@ -65,6 +47,7 @@ homepage:
          color: slate
          background:
            image: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/background.jpg
+            brightness: 50
          theme: dark
          disableCollapse: true
          layout:
@@ -160,12 +143,6 @@ homepage:
                  href: https://yamtrack.alexlebens.net
                  siteMonitor: http://yamtrack.yamtrack:80
                  statusStyle: dot
-              - Movie Roulette:
-                  icon: https://raw.githubusercontent.com/sahara101/Movie-Roulette/refs/heads/main/static/icons/icon.png
-                  description: Movie Roulette
-                  href: https://movie-roulette.alexlebens.net
-                  siteMonitor: http://movie-roulette.movie-roulette:80
-                  statusStyle: dot
              - Movies and TV:
                  icon: sh-jellyfin.webp
                  description: Jellyfin
@@ -851,10 +828,10 @@ homepage:
      advancedMounts:
        main:
          main:
-            - path: /app/config/custom.css
+            - path: /app/config/bookmarks.yaml
              readOnly: true
              mountPropagation: None
-              subPath: custom.css
+              subPath: bookmarks.yaml
            - path: /app/config/docker.yaml
              readOnly: true
              mountPropagation: None
@@ -863,6 +840,10 @@ homepage:
              readOnly: true
              mountPropagation: None
              subPath: kubernetes.yaml
+            - path: /app/config/services.yaml
+              readOnly: true
+              mountPropagation: None
+              subPath: services.yaml
            - path: /app/config/settings.yaml
              readOnly: true
              mountPropagation: None
@@ -871,11 +852,3 @@ homepage:
              readOnly: true
              mountPropagation: None
              subPath: widgets.yaml
-            - path: /app/config/services.yaml
-              readOnly: true
-              mountPropagation: None
-              subPath: services.yaml
-            - path: /app/config/bookmarks.yaml
-              readOnly: true
-              mountPropagation: None
-              subPath: bookmarks.yaml
--- a/clusters/cl01tl/helm/immich/Chart.lock
+++ b/clusters/cl01tl/helm/immich/Chart.lock
@@ -5,11 +5,11 @@ dependencies:
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 7.8.0
- name: valkey
+- name: redis-replication
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.0
+  version: 1.1.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.8.0
-digest: sha256:360f79209535cd9132b7db774aabd6492c2c287e62f00795e5f4ae4cc6a038c0
-generated: "2026-03-09T23:07:40.320287247Z"
+  version: 0.7.0
+digest: sha256:8c204b4e38b60693c1ed5a80ea441567bc074aebf3282591b987087024ecd3bc
+generated: "2026-03-04T00:40:31.462721535Z"
--- a/clusters/cl01tl/helm/immich/Chart.yaml
+++ b/clusters/cl01tl/helm/immich/Chart.yaml
@@ -22,13 +22,12 @@ dependencies:
    alias: postgres-18-cluster
    version: 7.8.0
    repository: oci://harbor.alexlebens.net/helm-charts
-  - name: valkey
-    alias: valkey
-    version: 0.4.0
+  - name: redis-replication
+    version: 1.1.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-data
-    version: 0.8.0
+    version: 0.7.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/immich.png
 # renovate: datasource=github-releases depName=immich-app/immich
--- a/clusters/cl01tl/helm/immich/values.yaml
+++ b/clusters/cl01tl/helm/immich/values.yaml
@@ -19,7 +19,7 @@ immich:
            - name: IMMICH_CONFIG_FILE
              value: /config/immich.json
            - name: REDIS_HOSTNAME
-              value: immich-valkey
+              value: redis-replication-immich-master
            - name: DB_VECTOR_EXTENSION
              value: vectorchord
            - name: DB_HOSTNAME
@@ -221,6 +221,12 @@ postgres-18-cluster:
      #   immediate: true
      #   schedule: "0 0 0 * * *"
      #   backupName: external
+
+redis-replication:
+  redisReplication:
+    clusterSize: 3
+    sentinel:
+      enabled: true
 volsync-target-data:
  pvcTarget: immich
  local:
--- a/clusters/cl01tl/helm/jellyfin/Chart.lock
+++ b/clusters/cl01tl/helm/jellyfin/Chart.lock
@@ -4,9 +4,9 @@ dependencies:
  version: 4.6.2
 - name: meilisearch
  repository: https://meilisearch.github.io/meilisearch-kubernetes
-  version: 0.27.0
+  version: 0.26.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.8.0
-digest: sha256:ca384647a640ae717ac874a2627f00ac9a1e5c97ff5eeb8f326ebdd471ab1623
-generated: "2026-03-09T15:04:08.648165537Z"
+  version: 0.7.0
+digest: sha256:68e88cb0f8b9569d8b53dcc63d47c31320aa0f10173eb938e5b56e8b84b0caec
+generated: "2026-03-04T00:24:27.958585796Z"
--- a/clusters/cl01tl/helm/jellyfin/Chart.yaml
+++ b/clusters/cl01tl/helm/jellyfin/Chart.yaml
@@ -25,11 +25,11 @@ dependencies:
    repository: https://bjw-s-labs.github.io/helm-charts/
    version: 4.6.2
  - name: meilisearch
-    version: 0.27.0
+    version: 0.26.0
    repository: https://meilisearch.github.io/meilisearch-kubernetes
  - name: volsync-target
    alias: volsync-target-config
-    version: 0.8.0
+    version: 0.7.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/jellyfin.png
 # renovate: datasource=github-releases depName=jellyfin/jellyfin
--- a/clusters/cl01tl/helm/jellystat/Chart.lock
+++ b/clusters/cl01tl/helm/jellystat/Chart.lock
@@ -7,6 +7,6 @@ dependencies:
  version: 7.8.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.8.0
-digest: sha256:0f8868c6e89c0f283650db5446e8f36f162cb2179f62eb58e67b5b08c03ac84d
-generated: "2026-03-06T01:09:37.09922161Z"
+  version: 0.7.0
+digest: sha256:34b82ccec2d4666175e0952d03f9467e3966c1a9a15661c6ceeed2b492c9d82d
+generated: "2026-02-27T18:16:58.512565338Z"
--- a/clusters/cl01tl/helm/jellystat/Chart.yaml
+++ b/clusters/cl01tl/helm/jellystat/Chart.yaml
@@ -25,7 +25,7 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-data
-    version: 0.8.0
+    version: 0.7.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/jellystat.png
 # renovate: datasource=github-releases depName=CyferShepard/Jellystat
--- a/clusters/cl01tl/helm/karakeep/Chart.lock
+++ b/clusters/cl01tl/helm/karakeep/Chart.lock
@@ -4,12 +4,12 @@ dependencies:
  version: 4.6.2
 - name: meilisearch
  repository: https://meilisearch.github.io/meilisearch-kubernetes
-  version: 0.27.0
+  version: 0.26.0
 - name: cloudflared
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.4.0
+  version: 2.3.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.8.0
-digest: sha256:75f92316d4b6229d00e3dfa39ed5026ad39a28f833321cd3887a2048cdac34c7
-generated: "2026-03-09T22:04:48.630821646Z"
+  version: 0.7.0
+digest: sha256:771c49ed1981152cc94725f772eb30e973410b858dcc6e9f335054934649347d
+generated: "2026-03-04T00:24:56.137773017Z"
--- a/clusters/cl01tl/helm/karakeep/Chart.yaml
+++ b/clusters/cl01tl/helm/karakeep/Chart.yaml
@@ -22,14 +22,14 @@ dependencies:
    repository: https://bjw-s-labs.github.io/helm-charts/
    version: 4.6.2
  - name: meilisearch
-    version: 0.27.0
+    version: 0.26.0
    repository: https://meilisearch.github.io/meilisearch-kubernetes
  - name: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.4.0
+    version: 2.3.0
  - name: volsync-target
    alias: volsync-target-data
-    version: 0.8.0
+    version: 0.7.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/webp/karakeep.webp
 # renovate: datasource=github-releases depName=karakeep-app/karakeep
--- a/clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock
+++ b/clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock
@@ -1,12 +1,12 @@
 dependencies:
 - name: kube-prometheus-stack
  repository: oci://ghcr.io/prometheus-community/charts
-  version: 82.10.3
+  version: 82.9.0
 - name: app-template
  repository: https://bjw-s-labs.github.io/helm-charts/
  version: 4.6.2
- name: valkey
+- name: redis-replication
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.0
-digest: sha256:37ffa4a21ed29703cae9c9f3fb029566a1dd6af6e0fe8cc3862a2226d6644114
-generated: "2026-03-10T19:02:41.11005238Z"
+  version: 1.1.0
+digest: sha256:7bb97029b1c2588ec93e5a9e267ff189489397048393ed4c871c5e42208cc660
+generated: "2026-03-05T04:51:19.209422923Z"
--- a/clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml
+++ b/clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml
@@ -20,15 +20,14 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: kube-prometheus-stack
-    version: 82.10.3
+    version: 82.9.0
    repository: oci://ghcr.io/prometheus-community/charts
  - name: app-template
    alias: ntfy-alertmanager
    repository: https://bjw-s-labs.github.io/helm-charts/
    version: 4.6.2
-  - name: valkey
-    alias: valkey
-    version: 0.4.0
+  - name: redis-replication
+    version: 1.1.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/prometheus.png
 # renovate: datasource=github-releases depName=prometheus-operator/prometheus-operator
--- a/clusters/cl01tl/helm/kube-prometheus-stack/values.yaml
+++ b/clusters/cl01tl/helm/kube-prometheus-stack/values.yaml
@@ -170,10 +170,17 @@ ntfy-alertmanager:
              readOnly: true
              mountPropagation: None
              subPath: config
-valkey:
-  valkey:
-    dataStorage:
-      requestedSize: 10Gi
-    replica:
-      persistence:
-        size: 10Gi
+redis-replication:
+  redisReplication:
+    clusterSize: 3
+    resources:
+      requests:
+        cpu: 20m
+        memory: 32Mi
+    volumeClaimTemplate:
+      spec:
+        resources:
+          requests:
+            storage: 10Gi
+    sentinel:
+      enabled: true
--- a/clusters/cl01tl/helm/libation/Chart.lock
+++ b/clusters/cl01tl/helm/libation/Chart.lock
@@ -4,6 +4,6 @@ dependencies:
  version: 4.6.2
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.8.0
-digest: sha256:0cdd20ce501fafcd8fdedb4115352eed88c578713de6b325d661ec630b14ef17
-generated: "2026-03-06T01:10:32.425014216Z"
+  version: 0.7.0
+digest: sha256:2062e2b2bd3858edb894fc41dc3946b6e991734a3bfb6215d3a4562e9d919ca6
+generated: "2026-01-16T18:49:13.859329796Z"
--- a/clusters/cl01tl/helm/libation/Chart.yaml
+++ b/clusters/cl01tl/helm/libation/Chart.yaml
@@ -20,8 +20,8 @@ dependencies:
    version: 4.6.2
  - name: volsync-target
    alias: volsync-target-config
-    version: 0.8.0
+    version: 0.7.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/libation.png
 # renovate: datasource=github-releases depName=rmcrackan/Libation
-appVersion: 13.2.1
+appVersion: 13.1.10
--- a/clusters/cl01tl/helm/libation/values.yaml
+++ b/clusters/cl01tl/helm/libation/values.yaml
@@ -16,7 +16,7 @@ libation:
        main:
          image:
            repository: rmcrackan/libation
-            tag: 13.2.1
+            tag: 13.1.10
            pullPolicy: IfNotPresent
          env:
            - name: SLEEP_TIME
--- a/clusters/cl01tl/helm/lidarr/Chart.lock
+++ b/clusters/cl01tl/helm/lidarr/Chart.lock
@@ -7,6 +7,6 @@ dependencies:
  version: 7.8.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.8.0
-digest: sha256:4511a3475316ebf0bd5da452e69602b7d52746253c659a433e61851f51093285
-generated: "2026-03-06T01:10:55.882802086Z"
+  version: 0.7.0
+digest: sha256:a38acc5cf042d553608a6e8deafee1cb09e4c8ad7222c6ce482ffaaf6fe2c384
+generated: "2026-02-27T18:17:26.460296811Z"
--- a/clusters/cl01tl/helm/lidarr/Chart.yaml
+++ b/clusters/cl01tl/helm/lidarr/Chart.yaml
@@ -28,7 +28,7 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-config
-    version: 0.8.0
+    version: 0.7.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/lidarr.png
 appVersion: 3.1.2-nightly
--- a/clusters/cl01tl/helm/local-path-provisioner/Chart.lock
+++ b/clusters/cl01tl/helm/local-path-provisioner/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: local-path-provisioner
  repository: https://charts.containeroo.ch
-  version: 0.0.36
-digest: sha256:ac212733a0ba2046767ad1718ca740d5aad3d1bfc49c5e7a5056c8414c1d65d4
-generated: "2026-03-10T19:00:30.739038561Z"
+  version: 0.0.35
+digest: sha256:c59cc5a81e797a9e2ab0f8e6bf03cb3e4dfc740555631aa1d41b7def1d2c60c8
+generated: "2026-01-10T19:01:45.394965495Z"
--- a/clusters/cl01tl/helm/local-path-provisioner/Chart.yaml
+++ b/clusters/cl01tl/helm/local-path-provisioner/Chart.yaml
@@ -15,8 +15,8 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: local-path-provisioner
-    version: 0.0.36
+    version: 0.0.35
    repository: https://charts.containeroo.ch
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 # renovate: datasource=github-releases depName=rancher/local-path-provisioner
-appVersion: v0.0.35
+appVersion: v0.0.34
--- a/clusters/cl01tl/helm/local-path-provisioner/values.yaml
+++ b/clusters/cl01tl/helm/local-path-provisioner/values.yaml
@@ -1,7 +1,7 @@
 local-path-provisioner:
  image:
    repository: rancher/local-path-provisioner
-    tag: v0.0.35
+    tag: v0.0.34
  helperImage:
    repository: busybox
    tag: 1.37.0
--- a/clusters/cl01tl/helm/loki/Chart.lock
+++ b/clusters/cl01tl/helm/loki/Chart.lock
@@ -4,6 +4,6 @@ dependencies:
  version: 6.53.0
 - name: alloy
  repository: https://grafana.github.io/helm-charts
-  version: 1.6.2
-digest: sha256:88b8ace6bcbcbff4b04727499705fbe94de7fe4b8f0b8aa254a1e7d1d2c65fac
-generated: "2026-03-10T18:56:19.38475079Z"
+  version: 1.6.1
+digest: sha256:ec17a816dcdc476ad67cd056556d9a42a9fb8057ef75a928f8604939006e3416
+generated: "2026-03-02T15:18:56.219024346Z"
--- a/clusters/cl01tl/helm/loki/Chart.yaml
+++ b/clusters/cl01tl/helm/loki/Chart.yaml
@@ -19,7 +19,7 @@ dependencies:
    version: 6.53.0
    repository: https://grafana.github.io/helm-charts
  - name: alloy
-    version: 1.6.2
+    version: 1.6.1
    repository: https://grafana.github.io/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/loki.png
 # renovate: datasource=github-releases depName=grafana/loki
--- a/clusters/cl01tl/helm/matrix-synapse/Chart.lock
+++ b/clusters/cl01tl/helm/matrix-synapse/Chart.lock
@@ -13,30 +13,30 @@ dependencies:
  version: 4.6.2
 - name: cloudflared
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.4.0
+  version: 2.3.0
 - name: cloudflared
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.4.0
+  version: 2.3.0
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 7.8.0
- name: valkey
+- name: redis-replication
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.0
- name: valkey
+  version: 1.1.0
+- name: redis-replication
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.0
+  version: 1.1.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.8.0
+  version: 0.7.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.8.0
+  version: 0.7.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.8.0
+  version: 0.7.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.8.0
-digest: sha256:fc6e3a04b828daf3a0861aec6a7a6d1c9a45fabaf29abd3fb3be2e8db4d0875b
-generated: "2026-03-09T23:08:07.610958823Z"
+  version: 0.7.0
+digest: sha256:e3859f34f4118a400eab5dea94e1c5d92571ac01d225c18a9ad11cf39a5264c0
+generated: "2026-03-04T00:41:24.789655138Z"
--- a/clusters/cl01tl/helm/matrix-synapse/Chart.yaml
+++ b/clusters/cl01tl/helm/matrix-synapse/Chart.yaml
@@ -45,40 +45,40 @@ dependencies:
    version: 4.6.2
  - name: cloudflared
    alias: cloudflared-synapse
-    version: 2.4.0
+    version: 2.3.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: cloudflared
    alias: cloudflared-hookshot
-    version: 2.4.0
+    version: 2.3.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: postgres-cluster
    alias: postgres-18-cluster
    version: 7.8.0
    repository: oci://harbor.alexlebens.net/helm-charts
-  - name: valkey
-    alias: valkey-matrix-synapse
-    version: 0.4.0
+  - name: redis-replication
+    alias: redis-replication-matrix-synapse
+    version: 1.1.0
    repository: oci://harbor.alexlebens.net/helm-charts
-  - name: valkey
-    alias: valkey-hookshot
-    version: 0.4.0
+  - name: redis-replication
+    alias: redis-replication-hookshot
+    version: 1.1.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-synapse
-    version: 0.8.0
+    version: 0.7.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-hookshot
-    version: 0.8.0
+    version: 0.7.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-discord
-    version: 0.8.0
+    version: 0.7.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-whatsapp
-    version: 0.8.0
+    version: 0.7.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/matrix.png
 # renovate: datasource=github-releases depName=element-hq/synapse
-appVersion: v1.149.0
+appVersion: v1.148.0
--- a/clusters/cl01tl/helm/matrix-synapse/templates/external-secret.yaml
+++ b/clusters/cl01tl/helm/matrix-synapse/templates/external-secret.yaml
@@ -180,10 +180,10 @@ spec:
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
-  name: matrix-synapse-valkey-secret
+  name: matrix-synapse-redis-secret
  namespace: {{ .Release.Namespace }}
  labels:
-    app.kubernetes.io/name: matrix-synapse-valkey-secret
+    app.kubernetes.io/name: matrix-synapse-redis-secret
    app.kubernetes.io/instance: {{ .Release.Name }}
    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
@@ -191,13 +191,6 @@ spec:
    kind: ClusterSecretStore
    name: vault
  data:
-    - secretKey: default
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/matrix-synapse/redis
-        metadataPolicy: None
-        property: password
    - secretKey: password
      remoteRef:
        conversionStrategy: Default
--- a/clusters/cl01tl/helm/matrix-synapse/values.yaml
+++ b/clusters/cl01tl/helm/matrix-synapse/values.yaml
@@ -112,9 +112,9 @@ matrix-synapse:
  redis:
    enabled: false
  externalRedis:
-    host: matrix-synapse-valkey
+    host: redis-replication-matrix-synapse-master
    port: 6379
-    existingSecret: matrix-synapse-valkey-secret
+    existingSecret: matrix-synapse-redis-secret
    existingSecretPasswordKey: password
  persistence:
    enabled: true
@@ -453,19 +453,22 @@ postgres-18-cluster:
    - name: mautrix-whatsapp
      ensure: present
      owner: app
-valkey-matrix-synapse:
-  valkey:
-    auth:
+redis-replication-matrix-synapse:
+  replicationNameOverride: redis-replication-matrix-synapse
+  existingSecret:
+    enabled: true
+    name: matrix-synapse-redis-secret
+    key: password
+  redisReplication:
+    clusterSize: 3
+    sentinel:
+      enabled: true
+redis-replication-hookshot:
+  replicationNameOverride: redis-replication-hookshot
+  redisReplication:
+    clusterSize: 3
+    sentinel:
      enabled: true
-      usersExistingSecret: matrix-synapse-valkey-secret
-      aclUsers:
-        default:
-          permissions: "~* &* +@all"
-    metrics:
-      enabled: false
-valkey-hookshot:
-  valkey:
-    nameOverride: valkey-hookshot
 volsync-target-synapse:
  pvcTarget: matrix-synapse
  local:
--- a/clusters/cl01tl/helm/movie-roulette/Chart.lock
+++ b/clusters/cl01tl/helm/movie-roulette/Chart.lock
@@ -1,6 +0,0 @@
-dependencies:
- name: app-template
-  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
-digest: sha256:faa35ccfc18b2d47fad558e168bd3c68e64790fe2b1356881452ae4f5cd8b443
-generated: "2026-03-10T16:01:13.738843-05:00"
--- a/clusters/cl01tl/helm/movie-roulette/Chart.yaml
+++ b/clusters/cl01tl/helm/movie-roulette/Chart.yaml
@@ -1,22 +0,0 @@
-apiVersion: v2
-name: movie-roulette
-version: 1.0.0
-description: Movie Roulette
-keywords:
-  - movie-roulette
-  - jellyfin
-home: https://wiki.alexlebens.dev/
-sources:
-  - https://github.com/sahara101/Movie-Roulette
-  - https://github.com/sahara101/Movie-Roulette/pkgs/container/movie-roulette
-  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: app-template
-    alias: movie-roulette
-    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
-icon: https://raw.githubusercontent.com/sahara101/Movie-Roulette/refs/heads/main/static/icons/icon.png
-# renovate: datasource=github-releases depName=sahara101/Movie-Roulette
-appVersion: v5.2.1
--- a/clusters/cl01tl/helm/movie-roulette/templates/external-secret.yaml
+++ b/clusters/cl01tl/helm/movie-roulette/templates/external-secret.yaml
@@ -1,42 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: movie-roulette-config-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: movie-roulette-config-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: secret-key
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/movie-roulette/key
-        metadataPolicy: None
-        property: secret-key
-    - secretKey: jellyfin-key
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/jellyfin/movie-roulette
-        metadataPolicy: None
-        property: jellyfin-key
-    - secretKey: jellyfin-user
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/jellyfin/movie-roulette
-        metadataPolicy: None
-        property: user
-    - secretKey: seerr-key
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/seerr/key
-        metadataPolicy: None
-        property: key
--- a/clusters/cl01tl/helm/movie-roulette/values.yaml
+++ b/clusters/cl01tl/helm/movie-roulette/values.yaml
@@ -1,127 +0,0 @@
-movie-roulette:
-  controllers:
-    main:
-      type: deployment
-      replicas: 1
-      strategy: Recreate
-      revisionHistoryLimit: 3
-      containers:
-        main:
-          image:
-            repository: ghcr.io/sahara101/movie-roulette
-            tag: v5.2.1
-            pullPolicy: IfNotPresent
-          env:
-            - name: FLASK_SECRET_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: movie-roulette-config-secret
-                  key: secret-key
-            - name: CORS_ALLOWED_ORIGINS
-              value: movie-roulette.alexlebens.net
-            - name: DISABLE_SETTINGS
-              value: "TRUE"
-            - name: AUTH_ENABLED
-              value: "TRUE"
-            - name: AUTH_SESSION_LIFETIME
-              value: "86400"
-            - name: JELLYFIN_URL
-              value: http://jellyfin.alexlebens.net
-            - name: JELLYFIN_API_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: movie-roulette-config-secret
-                  key: jellyfin-key
-            - name: JELLYFIN_USER_ID
-              valueFrom:
-                secretKeyRef:
-                  name: movie-roulette-config-secret
-                  key: jellyfin-user
-            - name: LOGIN_BACKDROP_ENABLED
-              value: "TRUE"
-            - name: HOMEPAGE_MODE
-              value: "FALSE"
-            - name: USE_LINKS
-              value: "TRUE"
-            - name: USE_FILTER
-              value: "TRUE"
-            - name: USE_WATCH_BUTTON
-              value: "TRUE"
-            - name: USE_NEXT_BUTTON
-              value: "TRUE"
-            - name: USE_GRID_VIEW
-              value: "true"
-            - name: ENABLE_MOBILE_TRUNCATION
-              value: "TRUE"
-            - name: SHOW_NOW_WATCHING_CARD
-              value: "FALSE"
-            - name: USE_HEROUI_THEME
-              value: "FALSE"
-            - name: ENABLE_MOVIE_LOGOS
-              value: "TRUE"
-            - name: LOAD_MOVIE_ON_START
-              value: "FALSE"
-            - name: SEERR_URL
-              value: http://seerr.alexlebens.net
-            - name: SEERR_API_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: movie-roulette-config-secret
-                  key: seerr-key
-            - name: REQUEST_SERVICE_DEFAULT
-              value: "seerr"
-          resources:
-            requests:
-              cpu: 10m
-              memory: 128Mi
-  service:
-    main:
-      controller: main
-      ports:
-        http:
-          port: 80
-          targetPort: 4000
-          protocol: HTTP
-  route:
-    main:
-      kind: HTTPRoute
-      parentRefs:
-        - group: gateway.networking.k8s.io
-          kind: Gateway
-          name: traefik-gateway
-          namespace: traefik
-      hostnames:
-        - movie-roulette.alexlebens.net
-      rules:
-        - backendRefs:
-            - group: ''
-              kind: Service
-              name: movie-roulette
-              port: 80
-              weight: 100
-          matches:
-            - path:
-                type: PathPrefix
-                value: /
-  persistence:
-    data:
-      forceRename: movie-roulette-data
-      storageClass: ceph-block
-      accessMode: ReadWriteOnce
-      size: 1Gi
-      retain: true
-      advancedMounts:
-        main:
-          main:
-            - path: /config
-              readOnly: false
-volsync-target-data:
-  pvcTarget: movie-roulette-data
-  local:
-    enabled: true
-    schedule: 44 11 * * *
-  remote:
-    enabled: false
-  external:
-    enabled: true
-    schedule: 44 12 * * *
--- a/clusters/cl01tl/helm/music-grabber/values.yaml
+++ b/clusters/cl01tl/helm/music-grabber/values.yaml
@@ -9,7 +9,7 @@ music-grabber:
        main:
          image:
            repository: g33kphr33k/musicgrabber
-            tag: 2.3.5
+            tag: 2.3.0
            pullPolicy: IfNotPresent
          env:
            - name: MUSIC_DIR
@@ -85,10 +85,6 @@ music-grabber:
              value: 8080
            - name: DNS_UPSTREAM_RESOLVER_TYPE
              value: dot
-            - name: HTTPPROXY
-              value: "off"
-            - name: SHADOWSOCKS
-              value: "off"
          securityContext:
            privileged: True
            capabilities:
--- a/clusters/cl01tl/helm/navidrome/Chart.lock
+++ b/clusters/cl01tl/helm/navidrome/Chart.lock
@@ -4,6 +4,6 @@ dependencies:
  version: 4.6.2
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.8.0
-digest: sha256:3b6e648a74401f6dcf3b2ac3f918f1f1dc688f54adfa3dd45a3533273dc59330
-generated: "2026-03-06T01:11:46.695039576Z"
+  version: 0.7.0
+digest: sha256:4fd0a3f951f6cdbf6acf054139362276dbc83b22049b02c80c5e1a1b76936ed1
+generated: "2026-01-16T18:50:11.585166046Z"
--- a/clusters/cl01tl/helm/navidrome/Chart.yaml
+++ b/clusters/cl01tl/helm/navidrome/Chart.yaml
@@ -20,7 +20,7 @@ dependencies:
    version: 4.6.2
  - name: volsync-target
    alias: volsync-target-data
-    version: 0.8.0
+    version: 0.7.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/navidrome.png
 # renovate: datasource=github-releases depName=navidrome/navidrome
--- a/clusters/cl01tl/helm/nfs/Chart.lock
+++ b/clusters/cl01tl/helm/nfs/Chart.lock
@@ -0,0 +1,6 @@
+dependencies:
+- name: nfs-subdir-external-provisioner
+  repository: https://kubernetes-sigs.github.io/nfs-subdir-external-provisioner/
+  version: 4.0.18
+digest: sha256:85aecf4bc7f9f545d6ac9dfb6d698d0fe93bb0c8f66c4e950e549bc9933277fb
+generated: "2025-12-01T20:26:41.614361-06:00"
--- a/clusters/cl01tl/helm/nfs/Chart.yaml
+++ b/clusters/cl01tl/helm/nfs/Chart.yaml
@@ -0,0 +1,22 @@
+apiVersion: v2
+name: nfs-subdir-external-provisioner
+version: 1.0.0
+description: NFS Subdir External Provisioner
+keywords:
+  - nfs-subdir-external-provisioner
+  - nfs
+  - storage
+  - kubernetes
+home: https://wiki.alexlebens.dev/s/ac647404-3987-4875-a34c-9398ea75b841
+sources:
+  - https://github.com/kubernetes-sigs/nfs-subdir-external-provisioner
+  - https://github.com/kubernetes-sigs/nfs-subdir-external-provisioner/tree/master/charts/nfs-subdir-external-provisioner
+maintainers:
+  - name: alexlebens
+dependencies:
+  - name: nfs-subdir-external-provisioner
+    version: 4.0.18
+    repository: https://kubernetes-sigs.github.io/nfs-subdir-external-provisioner/
+icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
+# renovate: datasource=github-releases depName=kubernetes-sigs/nfs-subdir-external-provisioner
+appVersion: 4.0.18
--- a/clusters/cl01tl/helm/nfs/values.yaml
+++ b/clusters/cl01tl/helm/nfs/values.yaml
@@ -0,0 +1,8 @@
+nfs-subdir-external-provisioner:
+  nfs:
+    server: 10.232.1.64
+    path: /volume2/Talos
+    mountOptions:
+      - hard
+      - vers=4
+      - minorversion=1
--- a/clusters/cl01tl/helm/ntfy/Chart.yaml
+++ b/clusters/cl01tl/helm/ntfy/Chart.yaml
@@ -20,4 +20,4 @@ dependencies:
    version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ntfy.png
 # renovate: datasource=github-releases depName=binwiederhier/ntfy
-appVersion: 2.18.0
+appVersion: 2.17.0
--- a/Show More
+++ b/Show More