Update clidey/whodb Docker tag to v0.89.0

clusters/cl01tl/helm/argo-workflows/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: argo-workflows
   repository: https://argoproj.github.io/argo-helm
-  version: 0.47.1
+  version: 0.47.0
 - name: argo-events
   repository: https://argoproj.github.io/argo-helm
   version: 2.4.19
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.4.5
-digest: sha256:a4be166c9134150f6940f1e170fde0002a7c82ef6aaf51a90de15fbc742181c3
+digest: sha256:c36845d5688e28e6f6c6b6f2e17b40514f2adb937f2c6077deadfec9e6b294fe
-generated: "2026-01-21T21:02:01.155313357Z"
+generated: "2026-01-14T21:30:10.440164554Z"

clusters/cl01tl/helm/argo-workflows/Chart.yaml

@@ -18,7 +18,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: argo-workflows
-    version: 0.47.1
+    version: 0.47.0
     repository: https://argoproj.github.io/argo-helm
   - name: argo-events
     version: 2.4.19

clusters/cl01tl/helm/audiobookshelf/values.yaml

@@ -21,7 +21,7 @@ audiobookshelf:
         apprise-api:
           image:
             repository: caronc/apprise
-            tag: v1.3.1
+            tag: 1.3.0
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/bazarr/values.yaml

@@ -15,7 +15,7 @@ bazarr:
         main:
           image:
             repository: ghcr.io/linuxserver/bazarr
-            tag: 1.5.4@sha256:5af962ae633e97c8e008e4b6e638798de1420e8a9e8e6189beb108a52c6e942a
+            tag: 1.5.4@sha256:7d0a091a63889ce1e4ac4c90595ebd2c50ba5a5df7039a4f4d2be6c2aed6d4ae
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/blocky/values.yaml

@@ -112,6 +112,7 @@ blocky:
               booklore                        IN      CNAME   traefik-cl01tl
               ceph                            IN      CNAME   traefik-cl01tl
               code-server                     IN      CNAME   traefik-cl01tl
+              ephemera                        IN      CNAME   traefik-cl01tl
               excalidraw                      IN      CNAME   traefik-cl01tl
               feishin                         IN      CNAME   traefik-cl01tl
               garage-s3                       IN      CNAME   traefik-cl01tl
@@ -132,6 +133,7 @@ blocky:
               kiwix                           IN      CNAME   traefik-cl01tl
               komodo                          IN      CNAME   traefik-cl01tl
               lidarr                          IN      CNAME   traefik-cl01tl
+              lidatube                        IN      CNAME   traefik-cl01tl
               mail                            IN      CNAME   traefik-cl01tl
               navidrome                       IN      CNAME   traefik-cl01tl
               ntfy                            IN      CNAME   traefik-cl01tl

clusters/cl01tl/helm/element-web/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: element-web
   repository: https://ananace.gitlab.io/charts
-  version: 1.4.28
+  version: 1.4.27
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.1.9
-digest: sha256:13c8313cef781f8f003d827de514f261a5875377b35a36db438974144c2baf52
+digest: sha256:ef4b5256d6b405f08f33ec1a2bbda9f8427fcac0c69accd04c19fb4fe1871047
-generated: "2026-01-21T21:02:33.179007776Z"
+generated: "2026-01-17T17:30:57.57289288Z"

clusters/cl01tl/helm/element-web/Chart.yaml

@@ -17,7 +17,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: element-web
-    version: 1.4.28
+    version: 1.4.27
     repository: https://ananace.gitlab.io/charts
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts

clusters/cl01tl/helm/ephemera/Chart.lock

@@ -0,0 +1,9 @@
+dependencies:
+- name: app-template
+  repository: https://bjw-s-labs.github.io/helm-charts/
+  version: 4.6.2
+- name: volsync-target
+  repository: oci://harbor.alexlebens.net/helm-charts
+  version: 0.7.0
+digest: sha256:c270dc80232d53598370e68d969ddcb71f26eb6910b7bb51761b88127e065f5a
+generated: "2026-01-16T18:46:10.06351851Z"

clusters/cl01tl/helm/ephemera/Chart.yaml

@@ -0,0 +1,28 @@
+apiVersion: v2
+name: ephemera
+version: 1.0.0
+description: ephemera
+keywords:
+  - ephemera
+  - books
+home: https://wiki.alexlebens.dev/
+sources:
+  - https://github.com/OrwellianEpilogue/ephemera
+  - https://github.com/FlareSolverr/FlareSolverr
+  - https://github.com/orwellianepilogue/ephemera/pkgs/container/ephemera
+  - https://github.com/flaresolverr/FlareSolverr/pkgs/container/flaresolverr
+  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
+maintainers:
+  - name: alexlebens
+dependencies:
+  - name: app-template
+    alias: ephemera
+    repository: https://bjw-s-labs.github.io/helm-charts/
+    version: 4.6.2
+  - name: volsync-target
+    alias: volsync-target-config
+    version: 0.7.0
+    repository: oci://harbor.alexlebens.net/helm-charts
+icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ephemera.png
+# renovate: github=OrwellianEpilogue/ephemera
+appVersion: 1.3.1

clusters/cl01tl/helm/ephemera/templates/external-secret.yaml

@@ -0,0 +1,44 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: ephemera-key-secret
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: ephemera-key-secret
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  data:
+    - secretKey: key
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/ephemera/config
+        metadataPolicy: None
+        property: key
+
+---
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: ephemera-apprise-config
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: ephemera-apprise-config
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  data:
+    - secretKey: ntfy-url
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/ephemera/config
+        metadataPolicy: None
+        property: ntfy-url

clusters/cl01tl/helm/ephemera/templates/persistent-volume-claim.yaml

@@ -0,0 +1,17 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: ephemera-import-nfs-storage
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: ephemera-import-nfs-storage
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  volumeName: ephemera-import-nfs-storage
+  storageClassName: nfs-client
+  accessModes:
+    - ReadWriteMany
+  resources:
+    requests:
+      storage: 1Gi

clusters/cl01tl/helm/ephemera/templates/persistent-volume.yaml

@@ -0,0 +1,23 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: ephemera-import-nfs-storage
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: ephemera-import-nfs-storage
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  persistentVolumeReclaimPolicy: Retain
+  storageClassName: nfs-client
+  capacity:
+    storage: 1Gi
+  accessModes:
+    - ReadWriteMany
+  nfs:
+    path: /volume2/Storage/Books Import
+    server: synologybond.alexlebens.net
+  mountOptions:
+    - vers=4
+    - minorversion=1
+    - noac

clusters/cl01tl/helm/ephemera/values.yaml

@@ -56,7 +56,7 @@ ephemera:
         apprise-api:
           image:
             repository: caronc/apprise
-            tag: v1.3.1
+            tag: 1.3.0
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/gatus/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: gatus
   repository: https://twin.github.io/helm-charts
-  version: 1.4.5
+  version: 1.4.4
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.4.5
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:1325aa896eeba00563056dd8f2d1ce69aad9141be49158a3b17214e1c565ed9f
+digest: sha256:ee32795b47519463ec6d1219bf4ec16784b1c42d98ae8a330e9650200d11c033
-generated: "2026-01-21T21:03:11.891167792Z"
+generated: "2025-12-27T19:45:37.106953505Z"

clusters/cl01tl/helm/gatus/Chart.yaml

@@ -19,7 +19,7 @@ maintainers:
 dependencies:
   - name: gatus
     repository: https://twin.github.io/helm-charts
-    version: 1.4.5
+    version: 1.4.4
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.4.5

clusters/cl01tl/helm/gatus/values.yaml

@@ -310,6 +310,9 @@ gatus:
       - name: lidarr
         url: https://lidarr.alexlebens.net
         <<: *defaults
+      - name: lidatube
+        url: https://lidatube.alexlebens.net
+        <<: *defaults
       - name: yubal-playlist
         url: https://yubal-playlist.alexlebens.net
         <<: *defaults

clusters/cl01tl/helm/gitea/values.yaml

@@ -1,7 +1,7 @@
 gitea:
   global:
     imageRegistry: registry.hub.docker.com
-  replicaCount: 3
+  replicaCount: 1
   image:
     repository: gitea/gitea
     tag: 1.25.3

clusters/cl01tl/helm/homepage/values.yaml

@@ -661,6 +661,12 @@ homepage:
                   href: https://yubal-playlist.alexlebens.net
                   siteMonitor: http://yubal-playlist.yubal-playlist:80
                   statusStyle: dot
+              - LidaTube:
+                  icon: sh-lidatube.webp
+                  description: Searches for Music
+                  href: https://lidatube.alexlebens.net
+                  siteMonitor: http://lidatube.lidatube:80
+                  statusStyle: dot
               - slskd:
                   icon: sh-slskd.webp
                   description: slskd
@@ -674,6 +680,12 @@ homepage:
                   href: https://shelfmark.alexlebens.net
                   siteMonitor: http://shelfmark.shelfmark:80
                   statusStyle: dot
+              - Ephemera:
+                  icon: sh-ephemera.webp
+                  description: Books
+                  href: https://ephemera.alexlebens.net
+                  siteMonitor: http://ephemera.ephemera:80
+                  statusStyle: dot
           - Other Homes:
               - Dev:
                   icon: sh-homepage.webp

clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: kube-prometheus-stack
   repository: oci://ghcr.io/prometheus-community/charts
-  version: 81.2.0
+  version: 81.0.0
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
   version: 4.6.2
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.0.1
-digest: sha256:540766bd8f4538d7257bc232e665c4dceab088ef1dc760849fe4a0a635dfc4ab
+digest: sha256:14197d65a6db43a466933c29b6c78e234dd46514254a2d24814e713ca9f3c919
-generated: "2026-01-21T21:05:34.139720713Z"
+generated: "2026-01-16T21:44:02.294108101Z"

clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml

@@ -20,7 +20,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: kube-prometheus-stack
-    version: 81.2.0
+    version: 81.0.0
     repository: oci://ghcr.io/prometheus-community/charts
   - name: app-template
     alias: ntfy-alertmanager

clusters/cl01tl/helm/lidatube/Chart.lock

@@ -0,0 +1,9 @@
+dependencies:
+- name: app-template
+  repository: https://bjw-s-labs.github.io/helm-charts/
+  version: 4.6.2
+- name: volsync-target
+  repository: oci://harbor.alexlebens.net/helm-charts
+  version: 0.7.0
+digest: sha256:0653646f92831c02fe62daa89c471cd9baa62f2b5514c176347dd0d7c8087fba
+generated: "2026-01-16T18:49:35.891116655Z"

clusters/cl01tl/helm/lidatube/Chart.yaml

@@ -0,0 +1,27 @@
+apiVersion: v2
+name: lidatube
+version: 1.0.0
+description: LidaTube
+keywords:
+  - lidatube
+  - music
+  - yt-dlp
+home: https://wiki.alexlebens.dev/s/10d95030-85be-4ced-a8d7-b4aaeca9bee6
+sources:
+  - https://github.com/TheWicklowWolf/LidaTube
+  - https://registry.hub.docker.com/r/thewicklowwolf/lidatube
+  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
+maintainers:
+  - name: alexlebens
+dependencies:
+  - name: app-template
+    alias: lidatube
+    repository: https://bjw-s-labs.github.io/helm-charts/
+    version: 4.6.2
+  - name: volsync-target
+    alias: volsync-target-config
+    version: 0.7.0
+    repository: oci://harbor.alexlebens.net/helm-charts
+icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/lidatube.png
+# renovate: github=TheWicklowWolf/LidaTube
+appVersion: 0.2.42

clusters/cl01tl/helm/lidatube/templates/external-secret.yaml

@@ -0,0 +1,21 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: lidatube-secret
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: lidatube-secret
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  data:
+    - secretKey: lidarr_api_key
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/lidarr2/key
+        metadataPolicy: None
+        property: key

clusters/cl01tl/helm/lidatube/templates/persistent-volume-claim.yaml

@@ -0,0 +1,17 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: lidatube-nfs-storage
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: lidatube-nfs-storage
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  volumeName: lidatube-nfs-storage
+  storageClassName: nfs-client
+  accessModes:
+    - ReadWriteMany
+  resources:
+    requests:
+      storage: 1Gi

clusters/cl01tl/helm/lidatube/templates/persistent-volume.yaml

@@ -0,0 +1,23 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: lidatube-nfs-storage
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: lidatube-nfs-storage
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  persistentVolumeReclaimPolicy: Retain
+  storageClassName: nfs-client
+  capacity:
+    storage: 1Gi
+  accessModes:
+    - ReadWriteMany
+  nfs:
+    path: /volume2/Storage/Music
+    server: synologybond.alexlebens.net
+  mountOptions:
+    - vers=4
+    - minorversion=1
+    - noac

clusters/cl01tl/helm/lidatube/values.yaml

@@ -0,0 +1,102 @@
+lidatube:
+  controllers:
+    main:
+      type: deployment
+      replicas: 1
+      strategy: Recreate
+      revisionHistoryLimit: 3
+      pod:
+        securityContext:
+          fsGroup: 1000
+          fsGroupChangePolicy: OnRootMismatch
+      containers:
+        main:
+          image:
+            repository: thewicklowwolf/lidatube
+            tag: 0.2.42
+            pullPolicy: IfNotPresent
+          env:
+            - name: PUID
+              value: 1000
+            - name: PGID
+              value: 1000
+            - name: lidarr_address
+              value: http://lidarr.lidarr:80
+            - name: lidarr_api_key
+              valueFrom:
+                secretKeyRef:
+                  name: lidatube-secret
+                  key: lidarr_api_key
+            - name: sleep_interval
+              value: 360
+            - name: sync_schedule
+              value: 4
+            - name: attempt_lidarr_import
+              value: true
+          resources:
+            requests:
+              cpu: 10m
+              memory: 128Mi
+  service:
+    main:
+      controller: main
+      ports:
+        http:
+          port: 80
+          targetPort: 5000
+          protocol: HTTP
+  route:
+    main:
+      kind: HTTPRoute
+      parentRefs:
+        - group: gateway.networking.k8s.io
+          kind: Gateway
+          name: traefik-gateway
+          namespace: traefik
+      hostnames:
+        - lidatube.alexlebens.net
+      rules:
+        - backendRefs:
+            - group: ''
+              kind: Service
+              name: lidatube
+              port: 80
+              weight: 100
+          matches:
+            - path:
+                type: PathPrefix
+                value: /
+  persistence:
+    config:
+      forceRename: lidatube-config
+      storageClass: ceph-block
+      accessMode: ReadWriteOnce
+      size: 5Gi
+      retain: true
+      advancedMounts:
+        main:
+          main:
+            - path: /lidatube/config
+              readOnly: false
+    music:
+      existingClaim: lidatube-nfs-storage
+      advancedMounts:
+        main:
+          main:
+            - path: /lidatube/downloads
+              readOnly: false
+volsync-target-config:
+  pvcTarget: lidatube-config
+  moverSecurityContext:
+    runAsUser: 1000
+    runAsGroup: 1000
+    fsGroup: 1000
+    fsGroupChangePolicy: OnRootMismatch
+  local:
+    enabled: true
+    schedule: 40 8 * * *
+  remote:
+    enabled: false
+  external:
+    enabled: true
+    schedule: 40 9 * * *

clusters/cl01tl/helm/loki/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: loki
   repository: https://grafana.github.io/helm-charts
-  version: 6.51.0
+  version: 6.49.0
 - name: alloy
   repository: https://grafana.github.io/helm-charts
   version: 1.5.2
-digest: sha256:cd5fe2b0439fa752d8de751a4ddf5ae21658bb08f8587e90818ccbbf21de48e2
+digest: sha256:169af5a754de8ab848da0de07e5990a5a47de91252f27d12e5e4f672cfa62e59
-generated: "2026-01-21T22:02:30.018948035Z"
+generated: "2026-01-13T17:02:14.361658012Z"

clusters/cl01tl/helm/loki/Chart.yaml

@@ -16,7 +16,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: loki
-    version: 6.51.0
+    version: 6.49.0
     repository: https://grafana.github.io/helm-charts
   - name: alloy
     version: 1.5.2

clusters/cl01tl/helm/matrix-synapse/Chart.lock

@@ -1,7 +1,7 @@
 dependencies:
 - name: matrix-synapse
   repository: https://ananace.gitlab.io/charts
-  version: 3.12.18
+  version: 3.12.17
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
   version: 4.6.2
@@ -38,5 +38,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:a9be74ba09a849b7118688fbaf15a119fa9883b68beeae678a0cb06e284a4a95
+digest: sha256:5d815aa1bb50fa1b6b85a6edda6017d0a8e3f6c23d804177a845bf206cd2d31b
-generated: "2026-01-21T21:04:05.210233742Z"
+generated: "2026-01-17T17:32:18.299163465Z"

clusters/cl01tl/helm/matrix-synapse/Chart.yaml

@@ -29,7 +29,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: matrix-synapse
-    version: 3.12.18
+    version: 3.12.17
     repository: https://ananace.gitlab.io/charts
   - name: app-template
     alias: matrix-hookshot

clusters/cl01tl/helm/navidrome/templates/persistent-volume-claim.yaml

@@ -34,22 +34,3 @@ spec:
   resources:
     requests:
       storage: 1Gi
-
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: navidrome-music-single-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: navidrome-music-single-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  volumeName: navidrome-music-single-nfs-storage
-  storageClassName: nfs-client
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 1Gi

clusters/cl01tl/helm/navidrome/templates/persistent-volume.yaml

@@ -46,28 +46,3 @@ spec:
     - vers=4
     - minorversion=1
     - noac
-
----
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: navidrome-music-single-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: navidrome-music-single-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: nfs-client
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  nfs:
-    path: /volume2/Storage/Music Singles/
-    server: synologybond.alexlebens.net
-  mountOptions:
-    - vers=4
-    - minorversion=1
-    - noac

clusters/cl01tl/helm/navidrome/values.yaml

@@ -153,13 +153,6 @@ navidrome:
           main:
             - path: /music-youtube
               readOnly: true
-    music-single:
-      existingClaim: navidrome-music-single-nfs-storage
-      advancedMounts:
-        main:
-          main:
-            - path: /music-single
-              readOnly: true
 volsync-target-data:
   pvcTarget: navidrome-data
   moverSecurityContext:

clusters/cl01tl/helm/ollama/values.yaml

@@ -22,7 +22,7 @@ ollama:
         main:
           image:
             repository: ollama/ollama
-            tag: 0.14.3
+            tag: 0.14.2
             pullPolicy: IfNotPresent
           env:
             - name: OLLAMA_KEEP_ALIVE
@@ -58,7 +58,7 @@ ollama:
         main:
           image:
             repository: ollama/ollama
-            tag: 0.14.3
+            tag: 0.14.2
             pullPolicy: IfNotPresent
           env:
             - name: OLLAMA_KEEP_ALIVE
@@ -94,7 +94,7 @@ ollama:
         main:
           image:
             repository: ollama/ollama
-            tag: 0.14.3
+            tag: 0.14.2
             pullPolicy: IfNotPresent
           env:
             - name: OLLAMA_KEEP_ALIVE

clusters/cl01tl/helm/qbittorrent/values.yaml

@@ -179,7 +179,7 @@ qbittorrent:
         apprise-api:
           image:
             repository: caronc/apprise
-            tag: v1.3.1
+            tag: 1.3.0
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/rook-ceph/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: rook-ceph
   repository: https://charts.rook.io/release
-  version: v1.19.0
+  version: v1.18.9
 - name: rook-ceph-cluster
   repository: https://charts.rook.io/release
-  version: v1.19.0
+  version: v1.18.9
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.1.9
-digest: sha256:5b8916442408af1061658af638b77a9f57fa8b6bc1d93ff982b899116daa0b21
+digest: sha256:57aea8e9711bfea8484ad395d5a5ff2a0e4d2a7c962cf9a2c49095f6a721376d
-generated: "2026-01-20T20:41:34.660986403Z"
+generated: "2026-01-17T17:33:03.998798829Z"

clusters/cl01tl/helm/rook-ceph/Chart.yaml

@@ -16,10 +16,10 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: rook-ceph
-    version: v1.19.0
+    version: v1.18.9
     repository: https://charts.rook.io/release
   - name: rook-ceph-cluster
-    version: v1.19.0
+    version: v1.18.9
     repository: https://charts.rook.io/release
   - name: cloudflared
     alias: cloudflared-rgw

clusters/cl01tl/helm/rook-ceph/values.yaml

@@ -25,7 +25,6 @@ rook-ceph-cluster:
     # https://quay.io/repository/ceph/ceph?tab=tags
     repository: quay.io/ceph/ceph
     tag: v19.2.3-20250717
-    imagePullPolicy: IfNotPresent
   cephClusterSpec:
     mgr:
       count: 2

clusters/cl01tl/helm/talos/values.yaml

@@ -69,7 +69,7 @@ etcd-backup:
         s3-prune:
           image:
             repository: d3fk/s3cmd
-            tag: latest@sha256:9d734319c7df50cf340b4182e469fa83a70b8d4d11c268fe91155f9df36d3b16
+            tag: latest@sha256:deacfab8a8447de5b6dff85448004c6c5af1f60c19c5e2eaa7d1c2a6bb12ff43
             pullPolicy: IfNotPresent
           command:
             - /bin/sh
@@ -155,7 +155,7 @@ etcd-backup:
         s3-prune:
           image:
             repository: d3fk/s3cmd
-            tag: latest@sha256:9d734319c7df50cf340b4182e469fa83a70b8d4d11c268fe91155f9df36d3b16
+            tag: latest@sha256:deacfab8a8447de5b6dff85448004c6c5af1f60c19c5e2eaa7d1c2a6bb12ff43
             pullPolicy: IfNotPresent
           command:
             - /bin/sh
@@ -241,7 +241,7 @@ etcd-backup:
         s3-prune:
           image:
             repository: d3fk/s3cmd
-            tag: latest@sha256:9d734319c7df50cf340b4182e469fa83a70b8d4d11c268fe91155f9df36d3b16
+            tag: latest@sha256:deacfab8a8447de5b6dff85448004c6c5af1f60c19c5e2eaa7d1c2a6bb12ff43
             pullPolicy: IfNotPresent
           command:
             - /bin/sh

clusters/cl01tl/helm/vault/values.yaml

@@ -187,7 +187,7 @@ snapshot:
         s3-backup-local:
           image:
             repository: d3fk/s3cmd
-            tag: latest@sha256:9d734319c7df50cf340b4182e469fa83a70b8d4d11c268fe91155f9df36d3b16
+            tag: latest@sha256:deacfab8a8447de5b6dff85448004c6c5af1f60c19c5e2eaa7d1c2a6bb12ff43
             pullPolicy: IfNotPresent
           command:
             - /bin/sh
@@ -208,7 +208,7 @@ snapshot:
         s3-backup-remote:
           image:
             repository: d3fk/s3cmd
-            tag: latest@sha256:9d734319c7df50cf340b4182e469fa83a70b8d4d11c268fe91155f9df36d3b16
+            tag: latest@sha256:deacfab8a8447de5b6dff85448004c6c5af1f60c19c5e2eaa7d1c2a6bb12ff43
             pullPolicy: IfNotPresent
           command:
             - /bin/sh
@@ -229,7 +229,7 @@ snapshot:
         s3-backup-external:
           image:
             repository: d3fk/s3cmd
-            tag: latest@sha256:9d734319c7df50cf340b4182e469fa83a70b8d4d11c268fe91155f9df36d3b16
+            tag: latest@sha256:deacfab8a8447de5b6dff85448004c6c5af1f60c19c5e2eaa7d1c2a6bb12ff43
             pullPolicy: IfNotPresent
           command:
             - /bin/sh

hosts/ps08rp/blocky/config.yml

@@ -87,6 +87,7 @@ customDNS:
     booklore                        IN      CNAME   traefik-cl01tl
     ceph                            IN      CNAME   traefik-cl01tl
     code-server                     IN      CNAME   traefik-cl01tl
+    ephemera                        IN      CNAME   traefik-cl01tl
     excalidraw                      IN      CNAME   traefik-cl01tl
     feishin                         IN      CNAME   traefik-cl01tl
     garage-s3                       IN      CNAME   traefik-cl01tl
@@ -107,6 +108,7 @@ customDNS:
     kiwix                           IN      CNAME   traefik-cl01tl
     komodo                          IN      CNAME   traefik-cl01tl
     lidarr                          IN      CNAME   traefik-cl01tl
+    lidatube                        IN      CNAME   traefik-cl01tl
     mail                            IN      CNAME   traefik-cl01tl
     navidrome                       IN      CNAME   traefik-cl01tl
     ntfy                            IN      CNAME   traefik-cl01tl

hosts/ps09rp/blocky/config.yml

@@ -108,6 +108,7 @@ customDNS:
     booklore                        IN      CNAME   traefik-cl01tl
     ceph                            IN      CNAME   traefik-cl01tl
     code-server                     IN      CNAME   traefik-cl01tl
+    ephemera                        IN      CNAME   traefik-cl01tl
     excalidraw                      IN      CNAME   traefik-cl01tl
     feishin                         IN      CNAME   traefik-cl01tl
     garage-s3                       IN      CNAME   traefik-cl01tl
@@ -128,6 +129,7 @@ customDNS:
     kiwix                           IN      CNAME   traefik-cl01tl
     komodo                          IN      CNAME   traefik-cl01tl
     lidarr                          IN      CNAME   traefik-cl01tl
+    lidatube                        IN      CNAME   traefik-cl01tl
     mail                            IN      CNAME   traefik-cl01tl
     navidrome                       IN      CNAME   traefik-cl01tl
     ntfy                            IN      CNAME   traefik-cl01tl