chore(deps): update dependency element-hq/synapse to v1.148.0

clusters/cl01tl/helm/authentik/Chart.lock

@@ -1,7 +1,7 @@
 dependencies:
 - name: authentik
   repository: https://charts.goauthentik.io/
-  version: 2026.2.0
+  version: 2025.12.4
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.3.0
@@ -11,5 +11,5 @@ dependencies:
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.0.4
-digest: sha256:c8602f093e78af87eac0c99d622f0815ec89ebc1305e097ca4d6f72b003ae57c
+digest: sha256:9e8f037f9d581ad83edde8d4a68672860cbe9d0192b10c37708710315a017469
-generated: "2026-02-25T03:06:14.95787836Z"
+generated: "2026-02-21T13:54:33.590892-06:00"

clusters/cl01tl/helm/authentik/Chart.yaml

@@ -21,7 +21,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: authentik
-    version: 2026.2.0
+    version: 2025.12.4
     repository: https://charts.goauthentik.io/
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts

clusters/cl01tl/helm/authentik/values.yaml

@@ -72,7 +72,7 @@ postgres-18-cluster:
   backup:
     objectStore:
       - name: garage-local
-        index: 2
+        index: 1
         destinationBucket: postgres-backups
         externalSecretCredentialPath: /garage/home-infra/postgres-backups
         isWALArchiver: true
@@ -91,7 +91,7 @@ postgres-18-cluster:
       #   isWALArchiver: false
     scheduledBackups:
       - name: live-backup
-        suspend: true
+        suspend: false
         immediate: true
         schedule: "0 0 0 * * *"
         backupName: garage-local

clusters/cl01tl/helm/bazarr/values.yaml

@@ -15,7 +15,7 @@ bazarr:
         main:
           image:
             repository: ghcr.io/linuxserver/bazarr
-            tag: 1.5.5@sha256:c381924dcfd79930e8f3ee75e024671185b810b0f71c984aa8712854c74c1bbb
+            tag: 1.5.5@sha256:1cf40186b1bc35bec87f4e4892d5d8c06086da331010be03e3459a86869c5e74
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/booklore/Chart.yaml

@@ -30,4 +30,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/booklore.png
 # renovate: datasource=github-releases depName=booklore-app/BookLore
-appVersion: v2.0.2
+appVersion: v1.18.5

clusters/cl01tl/helm/booklore/values.yaml

@@ -9,7 +9,7 @@ booklore:
         main:
           image:
             repository: ghcr.io/booklore-app/booklore
-            tag: v2.0.2
+            tag: v1.18.5
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/cert-manager/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: cert-manager
   repository: https://charts.jetstack.io
-  version: v1.19.4
+  version: v1.19.3
-digest: sha256:5c4a0a0568677bfcf4529e6ec6a005957cd1820fd5f1d1f108e74370d409fe88
+digest: sha256:114cb3c074866dd41725580ac14367f0aa03653f362ae156430f1dc0ee6ddd32
-generated: "2026-02-24T19:30:44.415585645Z"
+generated: "2026-02-02T23:06:15.144687867Z"

clusters/cl01tl/helm/cert-manager/Chart.yaml

@@ -14,8 +14,8 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: cert-manager
-    version: v1.19.4
+    version: v1.19.3
     repository: https://charts.jetstack.io
 icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/cert-manager.png
 # renovate: datasource=github-releases depName=cert-manager/cert-manager
-appVersion: v1.19.4
+appVersion: v1.19.3

clusters/cl01tl/helm/elastic-operator/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: eck-operator
   repository: https://helm.elastic.co
-  version: 3.3.1
+  version: 3.3.0
-digest: sha256:8585f3ea3e4cafc4ff2969ea7e797017b7cfe4becb3385f0b080725908c02f09
+digest: sha256:d2b00de6c03bf7624fdf496b326262149a2d2635012f14e900ed0724545c95d9
-generated: "2026-02-25T18:48:55.77034549Z"
+generated: "2026-02-03T18:05:00.461644575Z"

clusters/cl01tl/helm/elastic-operator/Chart.yaml

@@ -15,8 +15,8 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: eck-operator
-    version: 3.3.1
+    version: 3.3.0
     repository: https://helm.elastic.co
 icon: https://helm.elastic.co/icons/eck.png
 # renovate: datasource=github-releases depName=elastic/cloud-on-k8s
-appVersion: v3.3.1
+appVersion: v3.3.0

clusters/cl01tl/helm/element-web/Chart.yaml

@@ -24,4 +24,4 @@ dependencies:
     version: 2.3.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/element.png
 # renovate: datasource=github-releases depName=element-hq/element-web
-appVersion: v1.12.11
+appVersion: v1.12.10

clusters/cl01tl/helm/element-web/values.yaml

@@ -2,7 +2,7 @@ element-web:
   replicaCount: 1
   image:
     repository: vectorim/element-web
-    tag: v1.12.11
+    tag: v1.12.10
     pullPolicy: IfNotPresent
   defaultServer:
     url: https://matrix.alexlebens.dev

clusters/cl01tl/helm/gitea/values.yaml

@@ -251,7 +251,7 @@ valkey-renovate:
   image:
     registry: ghcr.io
     repository: valkey-io/valkey
-    tag: 9.0.3-alpine
+    tag: 9.0.2-alpine
   resources:
     requests:
       cpu: 10m

clusters/cl01tl/helm/grafana-operator/Chart.lock

@@ -1,7 +1,7 @@
 dependencies:
 - name: grafana-operator
   repository: https://grafana.github.io/helm-charts
-  version: 5.22.0
+  version: 5.21.4
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.7.0
@@ -11,5 +11,5 @@ dependencies:
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.0.4
-digest: sha256:ef0a64bd24d9c0d5e861fc949c173fecaaf418627b2bc64973547a9d577aa5cf
+digest: sha256:e93e3ce24fc395b07f64b9536a48c7b91e1a5de594406df9e5690c3b6b04f63a
-generated: "2026-02-24T19:40:11.951103549Z"
+generated: "2026-02-21T13:55:30.346865-06:00"

clusters/cl01tl/helm/grafana-operator/Chart.yaml

@@ -17,7 +17,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: grafana-operator
-    version: 5.22.0
+    version: 5.21.4
     repository: https://grafana.github.io/helm-charts
   - name: postgres-cluster
     alias: postgres-18-cluster
@@ -33,4 +33,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/grafana.png
 # renovate: datasource=github-releases depName=grafana/grafana-operator
-appVersion: v5.22.0
+appVersion: v5.21.4

clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: kube-prometheus-stack
   repository: oci://ghcr.io/prometheus-community/charts
-  version: 82.3.0
+  version: 82.2.1
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
   version: 4.6.2
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.0.4
-digest: sha256:41de0559e2f4e85a33ca006520cf67c85abaf5691f3cd0aacf7b66ba0d95ce50
+digest: sha256:710641602680cf6dd43d4651137e82758972e74a5f04d5d06934a7bf44f71a19
-generated: "2026-02-24T20:10:32.588038295Z"
+generated: "2026-02-23T18:03:59.859289978Z"

clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml

@@ -20,7 +20,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: kube-prometheus-stack
-    version: 82.3.0
+    version: 82.2.1
     repository: oci://ghcr.io/prometheus-community/charts
   - name: app-template
     alias: ntfy-alertmanager

clusters/cl01tl/helm/matrix-synapse/Chart.lock

@@ -1,7 +1,7 @@
 dependencies:
 - name: matrix-synapse
   repository: https://ananace.gitlab.io/charts
-  version: 3.12.22
+  version: 3.12.21
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
   version: 4.6.2
@@ -38,5 +38,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:50e77b928a33c3c154e49546f73b0547439aab81a9ccfe22abe61496d3d5582b
+digest: sha256:c90f4e4cf247a2fc0b1bc455ab8840f48e7fdf825aad3ebb3a41a9996ae4bc19
-generated: "2026-02-24T19:34:51.367657762Z"
+generated: "2026-02-21T13:56:27.155487-06:00"

clusters/cl01tl/helm/matrix-synapse/Chart.yaml

@@ -29,7 +29,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: matrix-synapse
-    version: 3.12.22
+    version: 3.12.21
     repository: https://ananace.gitlab.io/charts
   - name: app-template
     alias: matrix-hookshot

clusters/cl01tl/helm/music-grabber/values.yaml

@@ -9,7 +9,7 @@ music-grabber:
         main:
           image:
             repository: g33kphr33k/musicgrabber
-            tag: 2.2.1
+            tag: 2.1.2
             pullPolicy: IfNotPresent
           env:
             - name: MUSIC_DIR

clusters/cl01tl/helm/rook-ceph/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: rook-ceph
   repository: https://charts.rook.io/release
-  version: v1.19.2
+  version: v1.19.1
 - name: rook-ceph-cluster
   repository: https://charts.rook.io/release
-  version: v1.19.2
+  version: v1.19.1
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.3.0
-digest: sha256:32298e3004a4b411ded3a82a2eea31b350b8e8909bd193538fa3c6be0b8a0e94
+digest: sha256:99e0dea26a3c15cea01fb21fd0db36d3bef27de332858e5126f1b36310c2901e
-generated: "2026-02-24T20:18:18.200779597Z"
+generated: "2026-02-07T00:39:02.693159674Z"

clusters/cl01tl/helm/rook-ceph/Chart.yaml

@@ -16,10 +16,10 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: rook-ceph
-    version: v1.19.2
+    version: v1.19.1
     repository: https://charts.rook.io/release
   - name: rook-ceph-cluster
-    version: v1.19.2
+    version: v1.19.1
     repository: https://charts.rook.io/release
   - name: cloudflared
     alias: cloudflared-rgw
@@ -27,4 +27,4 @@ dependencies:
     version: 2.3.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ceph.png
 # renovate: datasource=github-releases depName=rook/rook
-appVersion: v1.19.2
+appVersion: v1.19.1

clusters/cl01tl/helm/sonarr-4k/templates/middleware.yaml

@@ -1,29 +0,0 @@
-apiVersion: traefik.io/v1alpha1
-kind: Middleware
-metadata:
-  name: oidc-forward-auth
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: oidc-forward-auth
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  forwardAuth:
-    address: http://ak-outpost-traefik-proxy-auth.authentik.svc.cluster.local:9000/outpost.goauthentik.io/auth/traefik
-    trustForwardHeader: true
-    authRequestHeaders:
-        - X-Forwarded-Proto
-    authResponseHeaders:
-      - Set-Cookie
-      - X-authentik-username
-      - X-authentik-groups
-      - X-authentik-entitlements
-      - X-authentik-email
-      - X-authentik-name
-      - X-authentik-uid
-      - X-authentik-jwt
-      - X-authentik-meta-jwks
-      - X-authentik-meta-outpost
-      - X-authentik-meta-provider
-      - X-authentik-meta-app
-      - X-authentik-meta-version

clusters/cl01tl/helm/sonarr-4k/values.yaml

@@ -88,12 +88,6 @@ sonarr-4k:
               name: sonarr-4k
               port: 80
               weight: 100
-          filters:
-            - type: ExtensionRef
-              extensionRef:
-                group: traefik.io
-                kind: Middleware
-                name: oidc-forward-auth
           matches:
             - path:
                 type: PathPrefix

clusters/cl01tl/helm/tailscale-operator/Chart.yaml

@@ -21,4 +21,4 @@ dependencies:
     repository: https://pkgs.tailscale.com/helmcharts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/tailscale-light.png
 # renovate: datasource=github-releases depName=tailscale/tailscale
-appVersion: v1.94.2
+appVersion: v1.94.1

clusters/cl01tl/helm/talos/values.yaml

@@ -69,7 +69,7 @@ etcd-backup:
         s3-prune:
           image:
             repository: d3fk/s3cmd
-            tag: latest@sha256:e83b0838f1bb144bc90fa98aa846cb36db62bc737832f3c5e02825b514059ffd
+            tag: latest@sha256:56a7122d9edbb82b372f10dc06809b7ae569ec7906f6b83b7d7b27fa8d638da2
             pullPolicy: IfNotPresent
           command:
             - /bin/sh
@@ -155,7 +155,7 @@ etcd-backup:
         s3-prune:
           image:
             repository: d3fk/s3cmd
-            tag: latest@sha256:e83b0838f1bb144bc90fa98aa846cb36db62bc737832f3c5e02825b514059ffd
+            tag: latest@sha256:56a7122d9edbb82b372f10dc06809b7ae569ec7906f6b83b7d7b27fa8d638da2
             pullPolicy: IfNotPresent
           command:
             - /bin/sh
@@ -241,7 +241,7 @@ etcd-backup:
         s3-prune:
           image:
             repository: d3fk/s3cmd
-            tag: latest@sha256:e83b0838f1bb144bc90fa98aa846cb36db62bc737832f3c5e02825b514059ffd
+            tag: latest@sha256:56a7122d9edbb82b372f10dc06809b7ae569ec7906f6b83b7d7b27fa8d638da2
             pullPolicy: IfNotPresent
           command:
             - /bin/sh

clusters/cl01tl/helm/vault/values.yaml

@@ -187,7 +187,7 @@ snapshot:
         s3-backup-local:
           image:
             repository: d3fk/s3cmd
-            tag: latest@sha256:e83b0838f1bb144bc90fa98aa846cb36db62bc737832f3c5e02825b514059ffd
+            tag: latest@sha256:56a7122d9edbb82b372f10dc06809b7ae569ec7906f6b83b7d7b27fa8d638da2
             pullPolicy: IfNotPresent
           command:
             - /bin/sh
@@ -208,7 +208,7 @@ snapshot:
         s3-backup-remote:
           image:
             repository: d3fk/s3cmd
-            tag: latest@sha256:e83b0838f1bb144bc90fa98aa846cb36db62bc737832f3c5e02825b514059ffd
+            tag: latest@sha256:56a7122d9edbb82b372f10dc06809b7ae569ec7906f6b83b7d7b27fa8d638da2
             pullPolicy: IfNotPresent
           command:
             - /bin/sh
@@ -229,7 +229,7 @@ snapshot:
         s3-backup-external:
           image:
             repository: d3fk/s3cmd
-            tag: latest@sha256:e83b0838f1bb144bc90fa98aa846cb36db62bc737832f3c5e02825b514059ffd
+            tag: latest@sha256:56a7122d9edbb82b372f10dc06809b7ae569ec7906f6b83b7d7b27fa8d638da2
             pullPolicy: IfNotPresent
           command:
             - /bin/sh