chore(deps): update harbor.alexlebens.net/images/site-profile docker tag to v3

clusters/cl01tl/helm/authentik/values.yaml

@@ -68,7 +68,7 @@ postgres-18-cluster:
   recovery:
     method: objectStore
     objectStore:
-      index: 2
+      index: 1
   backup:
     objectStore:
       - name: garage-local
@@ -91,7 +91,7 @@ postgres-18-cluster:
       #   isWALArchiver: false
     scheduledBackups:
       - name: live-backup
-        suspend: false
+        suspend: true
         immediate: true
         schedule: "0 0 0 * * *"
         backupName: garage-local

clusters/cl01tl/helm/booklore/Chart.yaml

@@ -30,4 +30,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/booklore.png
 # renovate: datasource=github-releases depName=booklore-app/BookLore
-appVersion: v2.2.0
+appVersion: v2.1.0

clusters/cl01tl/helm/booklore/values.yaml

@@ -9,7 +9,7 @@ booklore:
         main:
           image:
             repository: ghcr.io/booklore-app/booklore
-            tag: v2.2.0
+            tag: v2.1.0
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/directus/templates/external-secret.yaml

@@ -94,43 +94,6 @@ spec:
         metadataPolicy: None
         property: metric-token
 
----
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: directus-bucket-garage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: directus-bucket-garage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: ACCESS_KEY_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/directus-assets
-        metadataPolicy: None
-        property: ACCESS_KEY_ID
-    - secretKey: ACCESS_SECRET_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/directus-assets
-        metadataPolicy: None
-        property: ACCESS_SECRET_KEY
-    - secretKey: ACCESS_REGION
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/directus-assets
-        metadataPolicy: None
-        property: ACCESS_REGION
-
 ---
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret

clusters/cl01tl/helm/directus/values.yaml

@@ -90,22 +90,22 @@ directus:
             - name: STORAGE_S3_KEY
               valueFrom:
                 secretKeyRef:
-                  name: directus-bucket-garage
-                  key: ACCESS_KEY_ID
+                  name: ceph-bucket-directus
+                  key: AWS_ACCESS_KEY_ID
             - name: STORAGE_S3_SECRET
               valueFrom:
                 secretKeyRef:
-                  name: directus-bucket-garage
-                  key: ACCESS_SECRET_KEY
-            - name: STORAGE_S3_REGION
-              valueFrom:
-                secretKeyRef:
-                  name: directus-bucket-garage
-                  key: ACCESS_REGION
+                  name: ceph-bucket-directus
+                  key: AWS_SECRET_ACCESS_KEY
             - name: STORAGE_S3_BUCKET
-              value: directus-assets
+              valueFrom:
+                configMapKeyRef:
+                  name: ceph-bucket-directus
+                  key: BUCKET_NAME
+            - name: STORAGE_S3_REGION
+              value: us-east-1
             - name: STORAGE_S3_ENDPOINT
-              value: http://garage-main.garage:3000
+              value: http://rook-ceph-rgw-ceph-objectstore.rook-ceph.svc:80
             - name: STORAGE_S3_FORCE_PATH_STYLE
               value: true
             - name: AUTH_PROVIDERS

clusters/cl01tl/helm/element-web/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: element-web
   repository: https://ananace.gitlab.io/charts
-  version: 1.4.32
+  version: 1.4.31
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.4.0
-digest: sha256:49d9dd45eff7cbbc11644e4a8bd3c9d3bf84716ed034a76f097f0ba1fea4c934
-generated: "2026-03-11T16:04:17.556777286Z"
+digest: sha256:5066932d870c4803fca9bc4d7b686793e801d96b14026c299e467d8c107fb7eb
+generated: "2026-03-09T22:04:10.470135964Z"

clusters/cl01tl/helm/element-web/Chart.yaml

@@ -17,7 +17,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: element-web
-    version: 1.4.32
+    version: 1.4.31
     repository: https://ananace.gitlab.io/charts
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts

clusters/cl01tl/helm/freshrss/values.yaml

@@ -197,7 +197,7 @@ postgres-18-cluster:
   recovery:
     method: objectStore
     objectStore:
-      index: 2
+      index: 1
   backup:
     objectStore:
       - name: garage-local

clusters/cl01tl/helm/garage/templates/service.yaml

@@ -1,32 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: garage-main
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: garage-main
-    app.kubernetes.io/service: garage-main
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  ports:
-    - name: admin
-      port: 3903
-      protocol: TCP
-      targetPort: 3903
-    - name: rpc
-      port: 3901
-      protocol: TCP
-      targetPort: 3901
-    - name: s3
-      port: 3900
-      protocol: TCP
-      targetPort: 3900
-    - name: web
-      port: 3902
-      protocol: TCP
-      targetPort: 3902
-  selector:
-    app.kubernetes.io/instance: garage
-    app.kubernetes.io/name: garage
-    garage-type: server

clusters/cl01tl/helm/garage/values.yaml

@@ -118,9 +118,9 @@ garage:
             pullPolicy: IfNotPresent
           env:
             - name: API_BASE_URL
-              value: http://garage-main.garage:3903
+              value: http://garage-1.garage:3903
             - name: S3_ENDPOINT_URL
-              value: http://garage-main.garage:3900
+              value: http://garage-1.garage:3900
             - name: API_ADMIN_KEY
               valueFrom:
                 secretKeyRef:
@@ -225,6 +225,26 @@ garage:
           api_bind_addr = "[::]:3903"
           metrics_require_token = true
   service:
+    garage-main:
+      forceRename: garage-main
+      controller: server-2
+      ports:
+        s3:
+          port: 3900
+          targetPort: 3900
+          protocol: HTTP
+        rpc:
+          port: 3901
+          targetPort: 3901
+          protocol: HTTP
+        web:
+          port: 3902
+          targetPort: 3902
+          protocol : HTTP
+        admin:
+          port: 3903
+          targetPort: 3903
+          protocol: HTTP
     server-1:
       forceRename: garage-1
       controller: server-1

clusters/cl01tl/helm/harbor/values.yaml

@@ -101,7 +101,7 @@ postgres-18-cluster:
   recovery:
     method: objectStore
     objectStore:
-      index: 2
+      index: 1
   backup:
     objectStore:
       - name: garage-local

clusters/cl01tl/helm/komodo/values.yaml

@@ -205,7 +205,7 @@ postgresql-17-fdb-cluster:
   recovery:
     method: objectStore
     objectStore:
-      index: 2
+      index: 1
   backup:
     objectStore:
       - name: garage-local

clusters/cl01tl/helm/prowlarr/values.yaml

@@ -20,7 +20,7 @@ prowlarr:
         main:
           image:
             repository: ghcr.io/linuxserver/prowlarr
-            tag: 2.3.0@sha256:9ef5d8bf832edcacb6082f9262cb36087854e78eb7b1c3e1d4375056055b2d82
+            tag: 2.3.0@sha256:a8fe7b9c502f979146b6d0f22438b825c38e068241bb8a708c473062dffdbb03
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/site-profile/values.yaml

@@ -11,7 +11,7 @@ site-profile:
         main:
           image:
             repository: harbor.alexlebens.net/images/site-profile
-            tag: 3.1.0
+            tag: 3.0.0
             pullPolicy: IfNotPresent
           resources:
             requests: