Update Helm release traefik to v37.3.0

2025-11-14 02:12:09 +00:00
50 changed files with 77 additions and 1087 deletions
--- a/clusters/cl01tl/applications/booklore/Chart.yaml
+++ b/clusters/cl01tl/applications/booklore/Chart.yaml
@@ -1,24 +0,0 @@
-apiVersion: v2
-name: booklore
-version: 1.0.0
-description: booklore
-keywords:
-  - booklore
-  - books
-home: https://wiki.alexlebens.dev/
-sources:
-  - https://github.com/booklore-app/BookLore
-  - https://github.com/booklore-app/booklore/pkgs/container/booklore
-  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: app-template
-    alias: booklore
-    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
-  - name: mariadb-cluster
-    version: 25.10.2
-    repository: https://helm.mariadb.com/mariadb-operator
-icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/booklore.png
-appVersion: v.1.10.0
--- a/clusters/cl01tl/applications/booklore/templates/external-secret.yaml
+++ b/clusters/cl01tl/applications/booklore/templates/external-secret.yaml
@@ -1,138 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: booklore-database-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: booklore-database-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: password
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/booklore/database
-        metadataPolicy: None
-        property: password
-
---
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: booklore-config-backup-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: booklore-config-backup-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  target:
-    template:
-      mergePolicy: Merge
-      engineVersion: v2
-      data:
-        RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/booklore/booklore-config"
-  data:
-    - secretKey: BUCKET_ENDPOINT
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/volsync/restic/config
-        metadataPolicy: None
-        property: S3_BUCKET_ENDPOINT
-    - secretKey: RESTIC_PASSWORD
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/volsync/restic/config
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
-    - secretKey: AWS_DEFAULT_REGION
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/volsync/restic/config
-        metadataPolicy: None
-        property: AWS_DEFAULT_REGION
-    - secretKey: AWS_ACCESS_KEY_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
-        property: access_key
-    - secretKey: AWS_SECRET_ACCESS_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
-        property: secret_key
-
---
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: booklore-mariadb-cluster-backup-secret-external
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: booklore-mariadb-cluster-backup-secret-external
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: access
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /digital-ocean/home-infra/mariadb-backups
-        metadataPolicy: None
-        property: access
-    - secretKey: secret
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /digital-ocean/home-infra/mariadb-backups
-        metadataPolicy: None
-        property: secret
-
---
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: booklore-mariadb-cluster-backup-secret-garage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: booklore-mariadb-cluster-backup-secret-garage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: access
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/mariadb-backups
-        metadataPolicy: None
-        property: access
-    - secretKey: secret
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/mariadb-backups
-        metadataPolicy: None
-        property: secret
--- a/clusters/cl01tl/applications/booklore/templates/http-route.yaml
+++ b/clusters/cl01tl/applications/booklore/templates/http-route.yaml
@@ -1,28 +0,0 @@
-apiVersion: gateway.networking.k8s.io/v1
-kind: HTTPRoute
-metadata:
-  name: http-route-booklore
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: http-route-booklore
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  parentRefs:
-    - group: gateway.networking.k8s.io
-      kind: Gateway
-      name: traefik-gateway
-      namespace: traefik
-  hostnames:
-    - booklore.alexlebens.net
-  rules:
-    - matches:
-      - path:
-          type: PathPrefix
-          value: /
-      backendRefs:
-        - group: ''
-          kind: Service
-          name: booklore
-          port: 80
-          weight: 100
--- a/clusters/cl01tl/applications/booklore/templates/persistent-volume-claim.yaml
+++ b/clusters/cl01tl/applications/booklore/templates/persistent-volume-claim.yaml
@@ -1,36 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: booklore-books-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: booklore-books-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  volumeName: booklore-books-nfs-storage
-  storageClassName: nfs-client
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 1Gi
-
---
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: booklore-books-import-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: booklore-books-import-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  volumeName: booklore-books-import-nfs-storage
-  storageClassName: nfs-client
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 1Gi
--- a/clusters/cl01tl/applications/booklore/templates/persistent-volume.yaml
+++ b/clusters/cl01tl/applications/booklore/templates/persistent-volume.yaml
@@ -1,48 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: booklore-books-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: booklore-books-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: nfs-client
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  nfs:
-    path: /volume2/Storage/Books
-    server: synologybond.alexlebens.net
-  mountOptions:
-    - vers=4
-    - minorversion=1
-    - noac
-
---
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: booklore-books-import-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: booklore-books-import-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: nfs-client
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  nfs:
-    path: /volume2/Storage/Books Import
-    server: synologybond.alexlebens.net
-  mountOptions:
-    - vers=4
-    - minorversion=1
-    - noac
--- a/clusters/cl01tl/applications/booklore/templates/replication-source.yaml
+++ b/clusters/cl01tl/applications/booklore/templates/replication-source.yaml
@@ -1,26 +0,0 @@
-apiVersion: volsync.backube/v1alpha1
-kind: ReplicationSource
-metadata:
-  name: booklore-config-backup-source
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: booklore-config-backup-source
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  sourcePVC: booklore-config
-  trigger:
-    schedule: 0 4 * * *
-  restic:
-    pruneIntervalDays: 7
-    repository: booklore-config-backup-secret
-    retain:
-      hourly: 1
-      daily: 3
-      weekly: 2
-      monthly: 2
-      yearly: 4
-    copyMethod: Snapshot
-    storageClassName: ceph-block
-    volumeSnapshotClassName: ceph-blockpool-snapshot
-    cacheCapacity: 10Gi
--- a/clusters/cl01tl/applications/booklore/values.yaml
+++ b/clusters/cl01tl/applications/booklore/values.yaml
@@ -1,145 +0,0 @@
-booklore:
-  controllers:
-    main:
-      type: deployment
-      replicas: 1
-      strategy: Recreate
-      revisionHistoryLimit: 3
-      containers:
-        main:
-          image:
-            repository: ghcr.io/booklore-app/booklore
-            tag: v1.10.0
-            pullPolicy: IfNotPresent
-          env:
-            - name: TZ
-              value: America/Chicago
-            - name: DATABASE_URL
-              value: jdbc:mariadb://booklore-mariadb-cluster-primary.booklore:3306/booklore
-            - name: DATABASE_USERNAME
-              value: booklore
-            - name: DATABASE_PASSWORD
-              valueFrom:
-                secretKeyRef:
-                  name: booklore-database-secret
-                  key: password
-            - name: BOOKLORE_PORT
-              value: 6060
-            - name: SWAGGER_ENABLED
-              value: false
-          resources:
-            requests:
-              cpu: 50m
-              memory: 128Mi
-  service:
-    main:
-      controller: main
-      ports:
-        http:
-          port: 80
-          targetPort: 6060
-          protocol: HTTP
-  persistence:
-    config:
-      storageClass: ceph-block
-      accessMode: ReadWriteOnce
-      size: 5Gi
-      retain: true
-      advancedMounts:
-        main:
-          main:
-            - path: /app/data
-              readOnly: false
-    books:
-      existingClaim: booklore-books-nfs-storage
-      advancedMounts:
-        main:
-          main:
-            - path: /books
-              readOnly: false
-    books-import:
-      existingClaim: booklore-books-import-nfs-storage
-      advancedMounts:
-        main:
-          main:
-            - path: /bookdrop
-              readOnly: false
-mariadb-cluster:
-  mariadb:
-    rootPasswordSecretKeyRef:
-      generate: false
-      name: booklore-database-secret
-      key: password
-    storage:
-      size: 5Gi
-    replicas: 3
-    galera:
-      enabled: true
-  databases:
-    - name: booklore
-      characterSet: utf8
-      collate: utf8_general_ci
-      cleanupPolicy: Delete
-      requeueInterval: 10h
-  users:
-    - name: booklore
-      passwordSecretKeyRef:
-        name: booklore-database-secret
-        key: password
-      host: '%'
-      cleanupPolicy: Delete
-      requeueInterval: 10h
-      retryInterval: 30s
-  grants:
-    - name: booklore
-      privileges:
-        - "ALL PRIVILEGES"
-      database: "booklore"
-      table: "*"
-      username: booklore
-      grantOption: true
-      host: '%'
-      cleanupPolicy: Delete
-      requeueInterval: 10h
-      retryInterval: 30s
-  physicalBackups:
-    - name: backup-external
-      schedule:
-        cron: "0 0 * * 0"
-        suspend: false
-        immediate: true
-      compression: gzip
-      maxRetention: 720h
-      storage:
-        s3:
-          bucket: mariadb-backups-b230a2f5aecf080a4b372c08
-          prefix: cl01tl/booklore
-          endpoint: nyc3.digitaloceanspaces.com
-          region: us-east-1
-          accessKeyIdSecretKeyRef:
-            name: booklore-mariadb-cluster-backup-secret-external
-            key: access
-          secretAccessKeySecretKeyRef:
-            name: booklore-mariadb-cluster-backup-secret-external
-            key: secret
-          tls:
-            enabled: true
-    - name: backup-garage
-      schedule:
-        cron: "0 0 * * *"
-        suspend: false
-        immediate: true
-      compression: gzip
-      maxRetention: 360h
-      storage:
-        s3:
-          bucket: mariadb-backups
-          prefix: cl01tl/booklore
-          endpoint: garage-main.garage:3900
-          region: us-east-1
-          accessKeyIdSecretKeyRef:
-            name: booklore-mariadb-cluster-backup-secret-garage
-            key: access
-          secretAccessKeySecretKeyRef:
-            name: booklore-mariadb-cluster-backup-secret-garage
-            key: secret
--- a/clusters/cl01tl/applications/calibre-web-automated/values.yaml
+++ b/clusters/cl01tl/applications/calibre-web-automated/values.yaml
@@ -55,7 +55,7 @@ calibre-web-automated:
        bypass:
          image:
            repository: ghcr.io/sarperavci/cloudflarebypassforscraping
-            tag: latest@sha256:f113570afd4924f10338890571a75e662d5d1b7deed7696ac40f7e063688eb48
+            tag: latest@sha256:c34ef70a768ddf35c057f893c5392b8f65465fc4fbac634ba68a16d6a9dd0cbb
            pullPolicy: IfNotPresent
          resources:
            requests:
--- a/clusters/cl01tl/applications/ephemera/Chart.yaml
+++ b/clusters/cl01tl/applications/ephemera/Chart.yaml
@@ -1,23 +0,0 @@
-apiVersion: v2
-name: ephemera
-version: 1.0.0
-description: ephemera
-keywords:
-  - ephemera
-  - books
-home: https://wiki.alexlebens.dev/
-sources:
-  - https://github.com/OrwellianEpilogue/ephemera
-  - https://github.com/FlareSolverr/FlareSolverr
-  - https://github.com/orwellianepilogue/ephemera/pkgs/container/ephemera
-  - https://github.com/flaresolverr/FlareSolverr/pkgs/container/flaresolverr
-  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: app-template
-    alias: ephemera
-    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
-icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ephemera.png
-appVersion: 1.3.1
--- a/clusters/cl01tl/applications/ephemera/templates/external-secret.yaml
+++ b/clusters/cl01tl/applications/ephemera/templates/external-secret.yaml
@@ -1,78 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: ephemera-key-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: ephemera-key-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: key
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/ephemera/config
-        metadataPolicy: None
-        property: key
-
---
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: ephemera-config-backup-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: ephemera-config-backup-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  target:
-    template:
-      mergePolicy: Merge
-      engineVersion: v2
-      data:
-        RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/ephemera/ephemera-config"
-  data:
-    - secretKey: BUCKET_ENDPOINT
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/volsync/restic/config
-        metadataPolicy: None
-        property: S3_BUCKET_ENDPOINT
-    - secretKey: RESTIC_PASSWORD
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/volsync/restic/config
-        metadataPolicy: None
-        property: RESTIC_PASSWORD
-    - secretKey: AWS_DEFAULT_REGION
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/volsync/restic/config
-        metadataPolicy: None
-        property: AWS_DEFAULT_REGION
-    - secretKey: AWS_ACCESS_KEY_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
-        property: access_key
-    - secretKey: AWS_SECRET_ACCESS_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /digital-ocean/home-infra/volsync-backups
-        metadataPolicy: None
-        property: secret_key
--- a/clusters/cl01tl/applications/ephemera/templates/http-route.yaml
+++ b/clusters/cl01tl/applications/ephemera/templates/http-route.yaml
@@ -1,28 +0,0 @@
-apiVersion: gateway.networking.k8s.io/v1
-kind: HTTPRoute
-metadata:
-  name: http-route-ephemera
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: http-route-ephemera
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  parentRefs:
-    - group: gateway.networking.k8s.io
-      kind: Gateway
-      name: traefik-gateway
-      namespace: traefik
-  hostnames:
-    - ephemera.alexlebens.net
-  rules:
-    - matches:
-      - path:
-          type: PathPrefix
-          value: /
-      backendRefs:
-        - group: ''
-          kind: Service
-          name: ephemera
-          port: 80
-          weight: 100
--- a/clusters/cl01tl/applications/ephemera/templates/persistent-volume-claim.yaml
+++ b/clusters/cl01tl/applications/ephemera/templates/persistent-volume-claim.yaml
@@ -1,17 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: ephemera-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: ephemera-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  volumeName: ephemera-nfs-storage
-  storageClassName: nfs-client
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 1Gi
--- a/clusters/cl01tl/applications/ephemera/templates/persistent-volume.yaml
+++ b/clusters/cl01tl/applications/ephemera/templates/persistent-volume.yaml
@@ -1,23 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: ephemera-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: ephemera-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: nfs-client
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  nfs:
-    path: /volume2/Storage/Books Import
-    server: synologybond.alexlebens.net
-  mountOptions:
-    - vers=4
-    - minorversion=1
-    - noac
--- a/clusters/cl01tl/applications/ephemera/templates/replication-source.yaml
+++ b/clusters/cl01tl/applications/ephemera/templates/replication-source.yaml
@@ -1,26 +0,0 @@
-apiVersion: volsync.backube/v1alpha1
-kind: ReplicationSource
-metadata:
-  name: ephemera-config-backup-source
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: ephemera-config-backup-source
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  sourcePVC: ephemera-config
-  trigger:
-    schedule: 0 4 * * *
-  restic:
-    pruneIntervalDays: 7
-    repository: ephemera-config-backup-secret
-    retain:
-      hourly: 1
-      daily: 3
-      weekly: 2
-      monthly: 2
-      yearly: 4
-    copyMethod: Snapshot
-    storageClassName: ceph-block
-    volumeSnapshotClassName: ceph-blockpool-snapshot
-    cacheCapacity: 10Gi
--- a/clusters/cl01tl/applications/ephemera/values.yaml
+++ b/clusters/cl01tl/applications/ephemera/values.yaml
@@ -1,118 +0,0 @@
-ephemera:
-  controllers:
-    main:
-      type: deployment
-      replicas: 1
-      strategy: Recreate
-      revisionHistoryLimit: 3
-      containers:
-        main:
-          image:
-            repository: ghcr.io/orwellianepilogue/ephemera
-            tag: 1.3.1
-            pullPolicy: IfNotPresent
-          env:
-            - name: AA_BASE_URL
-              value: 8080
-            - name: AA_API_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: ephemera-key-secret
-                  key: key
-            - name: FLARESOLVERR_URL
-              value: http://127.0.0.1:8191
-            - name: LG_BASE_URL
-              value: https://gen.com
-            - name: PUID
-              value: 0
-            - name: PGID
-              value: 0
-          probes:
-            liveness:
-              enabled: true
-              custom: true
-              spec:
-                exec:
-                  command:
-                  - CMD
-                  - wget
-                  - --no-verbose
-                  - --tries=1
-                  - --spider
-                  - http://127.0.0.1:8286/health
-                failureThreshold: 5
-                initialDelaySeconds: 60
-                periodSeconds: 10
-                successThreshold: 1
-                timeoutSeconds: 10
-          resources:
-            requests:
-              cpu: 50m
-              memory: 128Mi
-        flaresolverr:
-          image:
-            repository: ghcr.io/flaresolverr/flaresolverr
-            tag: v3.4.5
-            pullPolicy: IfNotPresent
-          env:
-            - name: LOG_LEVEL
-              value: info
-            - name: LOG_HTML
-              value: false
-            - name: CAPTCHA_SOLVER
-              value: none
-            - name: TZ
-              value: America/Chicago
-          probes:
-            liveness:
-              enabled: true
-              custom: true
-              spec:
-                exec:
-                  command:
-                  - CMD
-                  - curl
-                  - -f
-                  - http://127.0.0.1:8191/health
-                failureThreshold: 5
-                initialDelaySeconds: 60
-                periodSeconds: 10
-                successThreshold: 1
-                timeoutSeconds: 10
-          resources:
-            requests:
-              cpu: 10m
-              memory: 128Mi
-  service:
-    main:
-      controller: main
-      ports:
-        http:
-          port: 80
-          targetPort: 8286
-          protocol: HTTP
-  persistence:
-    config:
-      storageClass: ceph-block
-      accessMode: ReadWriteOnce
-      size: 5Gi
-      retain: true
-      advancedMounts:
-        main:
-          main:
-            - path: /app/data
-              readOnly: false
-    cache:
-      type: emptyDir
-      advancedMounts:
-        main:
-          main:
-            - path: /app/downloads
-              readOnly: false
-    books-import:
-      existingClaim: ephemera-nfs-storage
-      advancedMounts:
-        main:
-          main:
-            - path: /app/ingest
-              readOnly: false
--- a/clusters/cl01tl/applications/homepage/values.yaml
+++ b/clusters/cl01tl/applications/homepage/values.yaml
@@ -76,9 +76,6 @@ homepage:
            - Storage:
                tab: Services
                icon: mdi-database-#ffffff
-            - Servarr:
-                tab: Services
-                icon: mdi-multimedia-#ffffff
            - TV Shows:
                tab: Servarr
                icon: mdi-television-#ffffff
@@ -88,9 +85,9 @@ homepage:
            - Music:
                tab: Servarr
                icon: mdi-music-box-multiple-#ffffff
-            - Books:
+            - Services (Servarr):
                tab: Servarr
-                icon: mdi-book-open-variant-#ffffff
+                icon: mdi-radar-#ffffff
            - External Services:
                tab: Bookmarks
                icon: mdi-cloud-#ffffff
@@ -183,12 +180,6 @@ homepage:
                  href: https://calibre.alexlebens.net
                  siteMonitor: http://calibre-web-automated-main.calibre-web-automated:8083
                  statusStyle: dot
-              - Books (Booklore):
-                  icon: sh-booklore.webp
-                  description: Booklore
-                  href: https://booklore.alexlebens.net
-                  siteMonitor: http://booklore.booklore:80
-                  statusStyle: dot
          - Public:
              - Site:
                  icon: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/logo-new-round.png
@@ -537,44 +528,6 @@ homepage:
                  href: https://backrest.alexlebens.net
                  siteMonitor: http://backrest.backrest:80
                  statusStyle: dot
-          - Servarr:
-              - qUI:
-                  icon: https://raw.githubusercontent.com/autobrr/qui/8487c818886df9abb2b1456f43b54e0ba180a2bd/web/public/icons.svg
-                  description: qbitorrent
-                  href: https://qui.alexlebens.net
-                  siteMonitor: http://qbittorrent-qui.qbittorrent:80
-                  statusStyle: dot
-                  widget:
-                    type: qbittorrent
-                    url: http://qbittorrent.qbittorrent:8080
-                    enableLeechProgress: true
-              - Prowlarr:
-                  icon: sh-prowlarr.webp
-                  description: Indexers
-                  href: https://prowlarr.alexlebens.net
-                  siteMonitor: http://prowlarr.prowlarr:80
-                  statusStyle: dot
-              - Huntarr:
-                  icon: https://raw.githubusercontent.com/plexguide/Huntarr.io/main/frontend/static/logo/128.png
-                  description: Content upgrader
-                  href: https://huntarr.alexlebens.net
-                  siteMonitor: http://huntarr.huntarr:80
-                  statusStyle: dot
-              - Bazarr:
-                  icon: sh-bazarr.webp
-                  description: Subtitles
-                  href: https://bazarr.alexlebens.net
-                  siteMonitor: http://bazarr.bazarr:80
-                  statusStyle: dot
-              - Tdarr:
-                  icon: sh-tdarr.webp
-                  description: Media transcoding and health checks
-                  href: https://tdarr.alexlebens.net
-                  siteMonitor: http://tdarr-web.tdarr:8265
-                  statusStyle: dot
-                  widget:
-                    type: tdarr
-                    url: http://tdarr-web.tdarr:8265
          - TV Shows:
              - Sonarr:
                  icon: sh-sonarr.webp
@@ -685,25 +638,50 @@ homepage:
                  href: https://slskd.alexlebens.net
                  siteMonitor: http://slskd.slskd:5030
                  statusStyle: dot
-          - Books:
-              - Ephemera:
-                  icon: sh-ephemera.webp
-                  description: Books
-                  href: https://ephemera.alexlebens.net
-                  siteMonitor: http://ephemera.ephemera:80
+          - Services (Servarr):
+              - qUI:
+                  icon: https://raw.githubusercontent.com/autobrr/qui/8487c818886df9abb2b1456f43b54e0ba180a2bd/web/public/icons.svg
+                  description: qbitorrent
+                  href: https://qui.alexlebens.net
+                  siteMonitor: http://qbittorrent-qui.qbittorrent:80
+                  statusStyle: dot
+                  widget:
+                    type: qbittorrent
+                    url: http://qbittorrent.qbittorrent:8080
+                    enableLeechProgress: true
+              - Prowlarr:
+                  icon: sh-prowlarr.webp
+                  description: Indexers
+                  href: https://prowlarr.alexlebens.net
+                  siteMonitor: http://prowlarr.prowlarr:80
+                  statusStyle: dot
+              - Bazarr:
+                  icon: sh-bazarr.webp
+                  description: Indexers
+                  href: https://bazarr.alexlebens.net
+                  siteMonitor: http://bazarr.bazarr:80
+                  statusStyle: dot
+              - Huntarr:
+                  icon: https://raw.githubusercontent.com/plexguide/Huntarr.io/main/frontend/static/logo/128.png
+                  description: Indexers
+                  href: https://huntarr.alexlebens.net
+                  siteMonitor: http://huntarr.huntarr:80
                  statusStyle: dot
              - CWA Downloader:
-                  icon: sh-cwa-book-downloader.webp
-                  description: Books
+                  icon: sh-calibre.webp
+                  description: Calibre Web Automated Book Downloader
                  href: https://calibre-downloader.alexlebens.net
                  siteMonitor: http://calibre-web-automated-downloader.calibre-web-automated:8084
                  statusStyle: dot
-              - Listenarr:
-                  icon: sh-audiobookrequest.webp
-                  description: Audiobooks
-                  href: https://listenarr.alexlebens.net
-                  siteMonitor: http://listenarr.listenarr:80
+              - Tdarr:
+                  icon: sh-tdarr.webp
+                  description: Media transcoding and health checks
+                  href: https://tdarr.alexlebens.net
+                  siteMonitor: http://tdarr-web.tdarr:8265
                  statusStyle: dot
+                  widget:
+                    type: tdarr
+                    url: http://tdarr-web.tdarr:8265
          - Other Homes:
              - Dev:
                  icon: sh-homepage.webp
--- a/clusters/cl01tl/applications/karakeep/values.yaml
+++ b/clusters/cl01tl/applications/karakeep/values.yaml
@@ -9,7 +9,7 @@ karakeep:
        main:
          image:
            repository: ghcr.io/karakeep-app/karakeep
-            tag: 0.28.0
+            tag: 0.27.1
            pullPolicy: IfNotPresent
          env:
            - name: DATA_DIR
--- a/clusters/cl01tl/applications/listenarr/Chart.yaml
+++ b/clusters/cl01tl/applications/listenarr/Chart.yaml
@@ -1,20 +0,0 @@
-apiVersion: v2
-name: listenarr
-version: 1.0.0
-description: Listenarr
-keywords:
-  - listenarr
-  - audiobooks
-home: https://wiki.alexlebens.dev/
-sources:
-  - https://github.com/therobbiedavis/Listenarr
-  - https://hub.docker.com/r/therobbiedavis/listenarr
-  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: app-template
-    alias: listenarr
-    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
-appVersion: 0.2.35
--- a/clusters/cl01tl/applications/listenarr/templates/http-route.yaml
+++ b/clusters/cl01tl/applications/listenarr/templates/http-route.yaml
@@ -1,28 +0,0 @@
-apiVersion: gateway.networking.k8s.io/v1
-kind: HTTPRoute
-metadata:
-  name: http-route-listenarr
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: http-route-listenarr
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  parentRefs:
-    - group: gateway.networking.k8s.io
-      kind: Gateway
-      name: traefik-gateway
-      namespace: traefik
-  hostnames:
-    - listenarr.alexlebens.net
-  rules:
-    - matches:
-      - path:
-          type: PathPrefix
-          value: /
-      backendRefs:
-        - group: ''
-          kind: Service
-          name: listenarr
-          port: 80
-          weight: 100
--- a/clusters/cl01tl/applications/listenarr/templates/persistent-volume-claim.yaml
+++ b/clusters/cl01tl/applications/listenarr/templates/persistent-volume-claim.yaml
@@ -1,17 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: listenarr-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: listenarr-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  volumeName: listenarr-nfs-storage
-  storageClassName: nfs-client
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 1Gi
--- a/clusters/cl01tl/applications/listenarr/templates/persistent-volume.yaml
+++ b/clusters/cl01tl/applications/listenarr/templates/persistent-volume.yaml
@@ -1,23 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: listenarr-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: listenarr-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: nfs-client
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  nfs:
-    path: /volume2/Storage/Audiobooks
-    server: synologybond.alexlebens.net
-  mountOptions:
-    - vers=4
-    - minorversion=1
-    - noac
--- a/clusters/cl01tl/applications/listenarr/values.yaml
+++ b/clusters/cl01tl/applications/listenarr/values.yaml
@@ -1,46 +0,0 @@
-listenarr:
-  controllers:
-    main:
-      type: deployment
-      replicas: 1
-      strategy: Recreate
-      revisionHistoryLimit: 3
-      containers:
-        main:
-          image:
-            repository: therobbiedavis/listenarr
-            tag: canary-0.2.35
-            pullPolicy: IfNotPresent
-          env:
-            - name: LISTENARR_PUBLIC_URL
-              value: https://listenarr.alexlebens.net
-          resources:
-            requests:
-              cpu: 50m
-              memory: 128Mi
-  service:
-    main:
-      controller: main
-      ports:
-        http:
-          port: 80
-          targetPort: 5000
-          protocol: HTTP
-  persistence:
-    config:
-      storageClass: ceph-block
-      accessMode: ReadWriteOnce
-      size: 5Gi
-      retain: true
-      advancedMounts:
-        main:
-          main:
-            - path: /app/config
-              readOnly: false
-    media:
-      existingClaim: listenarr-nfs-storage
-      advancedMounts:
-        main:
-          main:
-            - path: /data
-              readOnly: true
--- a/clusters/cl01tl/applications/outline/values.yaml
+++ b/clusters/cl01tl/applications/outline/values.yaml
@@ -9,7 +9,7 @@ outline:
        main:
          image:
            repository: outlinewiki/outline
-            tag: 1.1.0
+            tag: 1.0.1
            pullPolicy: IfNotPresent
          env:
            - name: NODE_ENV
--- a/clusters/cl01tl/applications/searxng/values.yaml
+++ b/clusters/cl01tl/applications/searxng/values.yaml
@@ -9,7 +9,7 @@ searxng:
        main:
          image:
            repository: searxng/searxng
-            tag: latest@sha256:d5a54dde3968851d6a15f394bd1d64e0ac5e440e6b21c73bddf215dfcd82fe16
+            tag: latest@sha256:d477c0460cc06afa57541f24c7adcae3846303a125c3ae785b9893c9c2c2186f
            pullPolicy: IfNotPresent
          env:
            - name: SEARXNG_BASE_URL
@@ -43,7 +43,7 @@ searxng:
        main:
          image:
            repository: searxng/searxng
-            tag: latest@sha256:d5a54dde3968851d6a15f394bd1d64e0ac5e440e6b21c73bddf215dfcd82fe16
+            tag: latest@sha256:d477c0460cc06afa57541f24c7adcae3846303a125c3ae785b9893c9c2c2186f
            pullPolicy: IfNotPresent
          env:
            - name: SEARXNG_BASE_URL
--- a/clusters/cl01tl/applications/tdarr/values.yaml
+++ b/clusters/cl01tl/applications/tdarr/values.yaml
@@ -9,7 +9,7 @@ tdarr:
        main:
          image:
            repository: ghcr.io/haveagitgat/tdarr
-            tag: 2.54.01
+            tag: 2.51.03
            pullPolicy: IfNotPresent
          env:
            - name: TZ
@@ -48,7 +48,7 @@ tdarr:
        main:
          image:
            repository: ghcr.io/haveagitgat/tdarr_node
-            tag: 2.54.01
+            tag: 2.51.03
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/deployment/argocd/Chart.yaml
+++ b/clusters/cl01tl/deployment/argocd/Chart.yaml
@@ -15,7 +15,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: argo-cd
-    version: 9.1.3
+    version: 9.1.1
    repository: https://argoproj.github.io/argo-helm
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 appVersion: 3.0.0
--- a/clusters/cl01tl/deployment/stack/values.yaml
+++ b/clusters/cl01tl/deployment/stack/values.yaml
@@ -100,11 +100,6 @@ applicationSet:
      syncOptions:
        serverSideApply: true
  - name: storage
-    ignoreDifferences:
-      - group: ""
-        kind: Service
-        jqPathExpressions:
-          - .spec.externalName
    syncPolicy:
      automated:
        prune: true
--- a/clusters/cl01tl/management/argo-workflows/Chart.yaml
+++ b/clusters/cl01tl/management/argo-workflows/Chart.yaml
@@ -18,7 +18,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: argo-workflows
-    version: 0.45.28
+    version: 0.45.27
    repository: https://argoproj.github.io/argo-helm
  - name: argo-events
    version: 2.4.17
--- a/clusters/cl01tl/management/komodo/values.yaml
+++ b/clusters/cl01tl/management/komodo/values.yaml
@@ -95,7 +95,7 @@ komodo:
        main:
          image:
            repository: ghcr.io/ferretdb/ferretdb
-            tag: 2.7.0
+            tag: 2.5.0
            pullPolicy: IfNotPresent
          env:
            - name: FERRETDB_POSTGRESQL_URL
--- a/clusters/cl01tl/monitoring/gatus/values.yaml
+++ b/clusters/cl01tl/monitoring/gatus/values.yaml
@@ -7,7 +7,7 @@ gatus:
    enabled: true
  image:
    repository: ghcr.io/twin/gatus
-    tag: v5.31.0
+    tag: v5.30.0
  annotations:
    reloader.stakater.com/auto: "true"
  service:
--- a/clusters/cl01tl/monitoring/loki/Chart.yaml
+++ b/clusters/cl01tl/monitoring/loki/Chart.yaml
@@ -16,7 +16,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: loki
-    version: 6.46.0
+    version: 6.44.0
    repository: https://grafana.github.io/helm-charts
  - name: promtail
    version: 6.17.1
--- a/clusters/cl01tl/platform/ntfy/values.yaml
+++ b/clusters/cl01tl/platform/ntfy/values.yaml
@@ -9,7 +9,7 @@ ntfy:
        main:
          image:
            repository: binwiederhier/ntfy
-            tag: v2.15.0
+            tag: v2.14.0
            pullPolicy: IfNotPresent
          args: ["serve"]
          env:
--- a/clusters/cl01tl/platform/ollama/values.yaml
+++ b/clusters/cl01tl/platform/ollama/values.yaml
@@ -22,7 +22,7 @@ ollama:
        main:
          image:
            repository: ollama/ollama
-            tag: 0.12.11
+            tag: 0.12.10
            pullPolicy: IfNotPresent
          env:
            - name: OLLAMA_KEEP_ALIVE
@@ -58,7 +58,7 @@ ollama:
        main:
          image:
            repository: ollama/ollama
-            tag: 0.12.11
+            tag: 0.12.10
            pullPolicy: IfNotPresent
          env:
            - name: OLLAMA_KEEP_ALIVE
@@ -94,7 +94,7 @@ ollama:
        main:
          image:
            repository: ollama/ollama
-            tag: 0.12.11
+            tag: 0.12.10
            pullPolicy: IfNotPresent
          env:
            - name: OLLAMA_KEEP_ALIVE
--- a/clusters/cl01tl/platform/qbittorrent/values.yaml
+++ b/clusters/cl01tl/platform/qbittorrent/values.yaml
@@ -28,7 +28,7 @@ qbittorrent:
        qbittorrent:
          image:
            repository: ghcr.io/linuxserver/qbittorrent
-            tag: 5.1.2@sha256:7034f73a3c6fa4ea40fd67df462939d1665d765231b572523921c98c2db5362e
+            tag: 5.1.2@sha256:029c00d12f493a15530f7ac6bb0dede12e490a8cf4357d2616f78e68dcab2fdd
            pullPolicy: IfNotPresent
          env:
            - name: TZ
@@ -186,7 +186,7 @@ qbittorrent:
        qui:
          image:
            repository: ghcr.io/autobrr/qui
-            tag: v1.7.0
+            tag: v1.6.1
            pullPolicy: IfNotPresent
          env:
            - name: QUI__METRICS_ENABLED
--- a/clusters/cl01tl/services/blocky/values.yaml
+++ b/clusters/cl01tl/services/blocky/values.yaml
@@ -111,12 +111,10 @@ blocky:
              authentik                       IN      CNAME   traefik-cl01tl
              backrest                        IN      CNAME   traefik-cl01tl
              bazarr                          IN      CNAME   traefik-cl01tl
-              booklore                        IN      CNAME   traefik-cl01tl
              calibre                         IN      CNAME   traefik-cl01tl
              calibre-downloader              IN      CNAME   traefik-cl01tl
              ceph                            IN      CNAME   traefik-cl01tl
              code-server                     IN      CNAME   traefik-cl01tl
-              ephemera                        IN      CNAME   traefik-cl01tl
              garage-s3                       IN      CNAME   traefik-cl01tl
              garage-webui                    IN      CNAME   traefik-cl01tl
              gatus                           IN      CNAME   traefik-cl01tl
@@ -137,7 +135,6 @@ blocky:
              kronic                          IN      CNAME   traefik-cl01tl
              lidarr                          IN      CNAME   traefik-cl01tl
              lidatube                        IN      CNAME   traefik-cl01tl
-              listenarr                       IN      CNAME   traefik-cl01tl
              mail                            IN      CNAME   traefik-cl01tl
              n8n                             IN      CNAME   traefik-cl01tl
              ntfy                            IN      CNAME   traefik-cl01tl
--- a/clusters/cl01tl/storage/backrest/templates/persistent-volume-claim.yaml
+++ b/clusters/cl01tl/storage/backrest/templates/persistent-volume-claim.yaml
@@ -15,22 +15,3 @@ spec:
  resources:
    requests:
      storage: 1Gi
-
---
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: backrest-nfs-share
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: backrest-nfs-share
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  volumeName: backrest-nfs-share
-  storageClassName: nfs-client
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 1Gi
--- a/clusters/cl01tl/storage/backrest/templates/persistent-volume.yaml
+++ b/clusters/cl01tl/storage/backrest/templates/persistent-volume.yaml
@@ -21,28 +21,3 @@ spec:
    - vers=4
    - minorversion=1
    - noac
-
---
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: backrest-nfs-share
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: backrest-nfs-share
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: nfs-client
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  nfs:
-    path: /volume2/Share
-    server: synologybond.alexlebens.net
-  mountOptions:
-    - vers=4
-    - minorversion=1
-    - noac
--- a/clusters/cl01tl/storage/backrest/values.yaml
+++ b/clusters/cl01tl/storage/backrest/values.yaml
@@ -73,12 +73,5 @@ backrest:
      advancedMounts:
        main:
          main:
-            - path: /mnt/storage
-              readOnly: true
-    share:
-      existingClaim: backrest-nfs-share
-      advancedMounts:
-        main:
-          main:
-            - path: /mnt/share
+            - path: /userdata
              readOnly: true
--- a/clusters/cl01tl/storage/mariadb-operator/Chart.yaml
+++ b/clusters/cl01tl/storage/mariadb-operator/Chart.yaml
@@ -1,24 +0,0 @@
-apiVersion: v2
-name: mariadb-operator
-version: 1.0.0
-description: MariaDB Operator
-keywords:
-  - mariadb-operator
-  - database
-  - storage
-  - kubernetes
-home: https://wiki.alexlebens.dev/
-sources:
-  - https://github.com/mariadb-operator/mariadb-operator
-  - https://github.com/mariadb-operator/mariadb-operator/tree/main/deploy/charts/mariadb-operator
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: mariadb-operator
-    version: 25.10.2
-    repository: https://helm.mariadb.com/mariadb-operator
-  - name: mariadb-operator-crds
-    version: 25.10.2
-    repository: https://helm.mariadb.com/mariadb-operator
-icon: https://mariadb-operator.github.io/mariadb-operator/assets/mariadb_profile.svg
-appVersion: 25.10.2
--- a/clusters/cl01tl/storage/mariadb-operator/values.yaml
+++ b/clusters/cl01tl/storage/mariadb-operator/values.yaml
@@ -1,11 +0,0 @@
-mariadb-operator:
-  ha:
-    enabled: true
-    replicas: 3
-  metrics:
-    enabled: true
-    serviceMonitor:
-      enabled: true
-  pdb:
-    enabled: true
-    maxUnavailable: 1
--- a/clusters/cl01tl/storage/pgadmin/values.yaml
+++ b/clusters/cl01tl/storage/pgadmin/values.yaml
@@ -28,7 +28,7 @@ pgadmin4:
            runAsGroup: 5050
          image:
            repository: dpage/pgadmin4
-            tag: "9.10"
+            tag: "9.9"
            pullPolicy: IfNotPresent
          env:
            - name: PGADMIN_CONFIG_ENHANCED_COOKIE_PROTECTION
--- a/clusters/cl01tl/storage/rook-ceph/Chart.yaml
+++ b/clusters/cl01tl/storage/rook-ceph/Chart.yaml
@@ -16,10 +16,10 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: rook-ceph
-    version: v1.18.7
+    version: v1.18.6
    repository: https://charts.rook.io/release
  - name: rook-ceph-cluster
-    version: v1.18.7
+    version: v1.18.6
    repository: https://charts.rook.io/release
  - name: cloudflared
    alias: cloudflared-rgw
--- a/clusters/cl01tl/storage/rook-ceph/values.yaml
+++ b/clusters/cl01tl/storage/rook-ceph/values.yaml
@@ -3,8 +3,8 @@ rook-ceph:
    enabled: true
  csi:
    rookUseCsiOperator: true
-    cephFSKernelMountOptions: "ms_mode=secure"
    enableMetadata: true
+    cephFSKernelMountOptions: "ms_mode=secure"
    provisionerReplicas: 3
    serviceMonitor:
      enabled: true
@@ -13,6 +13,7 @@ rook-ceph:
    enabled: true

 rook-ceph-cluster:
+  operatorNamespace: rook-ceph
  toolbox:
    enabled: true
  monitoring:
@@ -21,11 +22,12 @@ rook-ceph-cluster:
    prometheusRuleOverrides:
      CephNodeDiskspaceWarning:
        disabled: true
-  cephImage:
-    # https://quay.io/repository/ceph/ceph?tab=tags
-    repository: quay.io/ceph/ceph
-    tag: v19.2.3-20250717
  cephClusterSpec:
+    cephVersion:
+      # https://quay.io/repository/ceph/ceph?tab=tags
+      image: quay.io/ceph/ceph:v19.2.3-20250717
+    mon:
+      count: 3
    mgr:
      count: 1
      modules:
@@ -83,9 +85,11 @@ rook-ceph-cluster:
          cpu: 100m
          memory: 128Mi
    storage:
+      useAllNodes: true
+      useAllDevices: true
      deviceFilter: sda
      config:
-        osdsPerDevice: "1"
+          osdsPerDevice: "1"
    csi:
      readAffinity:
        enabled: true
--- a/clusters/cl01tl/storage/whodb/values.yaml
+++ b/clusters/cl01tl/storage/whodb/values.yaml
@@ -8,7 +8,7 @@ whodb:
        main:
          image:
            repository: clidey/whodb
-            tag: 0.75.0
+            tag: 0.72.0
            pullPolicy: IfNotPresent
          env:
            - name: WHODB_OLLAMA_HOST
--- a/hosts/ps08rp/blocky/config.yml
+++ b/hosts/ps08rp/blocky/config.yml
@@ -87,12 +87,10 @@ customDNS:
    authentik                       IN      CNAME   traefik-cl01tl
    backrest                        IN      CNAME   traefik-cl01tl
    bazarr                          IN      CNAME   traefik-cl01tl
-    booklore                        IN      CNAME   traefik-cl01tl
    calibre                         IN      CNAME   traefik-cl01tl
    calibre-downloader              IN      CNAME   traefik-cl01tl
    ceph                            IN      CNAME   traefik-cl01tl
    code-server                     IN      CNAME   traefik-cl01tl
-    ephemera                        IN      CNAME   traefik-cl01tl
    garage-s3                       IN      CNAME   traefik-cl01tl
    garage-webui                    IN      CNAME   traefik-cl01tl
    gatus                           IN      CNAME   traefik-cl01tl
@@ -113,7 +111,6 @@ customDNS:
    kronic                          IN      CNAME   traefik-cl01tl
    lidarr                          IN      CNAME   traefik-cl01tl
    lidatube                        IN      CNAME   traefik-cl01tl
-    listenarr                       IN      CNAME   traefik-cl01tl
    mail                            IN      CNAME   traefik-cl01tl
    n8n                             IN      CNAME   traefik-cl01tl
    ntfy                            IN      CNAME   traefik-cl01tl
--- a/hosts/ps08rp/traefik/compose.yaml
+++ b/hosts/ps08rp/traefik/compose.yaml
@@ -1,7 +1,7 @@
 ---
 services:
    traefik:
-        image: ghcr.io/traefik/traefik:v3.6.0
+        image: ghcr.io/traefik/traefik:v3.5.4
        container_name: traefik
        command:
            - "--global.checkNewVersion=false"
--- a/hosts/ps09rp/blocky/config.yml
+++ b/hosts/ps09rp/blocky/config.yml
@@ -87,12 +87,10 @@ customDNS:
    authentik                       IN      CNAME   traefik-cl01tl
    backrest                        IN      CNAME   traefik-cl01tl
    bazarr                          IN      CNAME   traefik-cl01tl
-    booklore                        IN      CNAME   traefik-cl01tl
    calibre                         IN      CNAME   traefik-cl01tl
    calibre-downloader              IN      CNAME   traefik-cl01tl
    ceph                            IN      CNAME   traefik-cl01tl
    code-server                     IN      CNAME   traefik-cl01tl
-    ephemera                        IN      CNAME   traefik-cl01tl
    garage-s3                       IN      CNAME   traefik-cl01tl
    garage-webui                    IN      CNAME   traefik-cl01tl
    gatus                           IN      CNAME   traefik-cl01tl
@@ -113,7 +111,6 @@ customDNS:
    kronic                          IN      CNAME   traefik-cl01tl
    lidarr                          IN      CNAME   traefik-cl01tl
    lidatube                        IN      CNAME   traefik-cl01tl
-    listenarr                       IN      CNAME   traefik-cl01tl
    mail                            IN      CNAME   traefik-cl01tl
    n8n                             IN      CNAME   traefik-cl01tl
    ntfy                            IN      CNAME   traefik-cl01tl
--- a/hosts/ps09rp/traefik/compose.yaml
+++ b/hosts/ps09rp/traefik/compose.yaml
@@ -1,7 +1,7 @@
 ---
 services:
    traefik:
-        image: ghcr.io/traefik/traefik:v3.6.0
+        image: ghcr.io/traefik/traefik:v3.5.4
        container_name: traefik
        command:
            - "--global.checkNewVersion=false"
--- a/hosts/ps10rp/gitea/compose.yaml
+++ b/hosts/ps10rp/gitea/compose.yaml
@@ -19,7 +19,7 @@ services:
            - /dev/net/tun:/dev/net/tun

    postgresql:
-        image: docker.io/postgres:17.7-alpine3.21
+        image: docker.io/postgres:17.6-alpine3.21
        container_name: gitea-postgres
        env_file:
            - .env
--- a/hosts/ps10rp/traefik/compose.yaml
+++ b/hosts/ps10rp/traefik/compose.yaml
@@ -20,7 +20,7 @@ services:
            - /dev/net/tun:/dev/net/tun

    traefik:
-        image: ghcr.io/traefik/traefik:v3.6.0
+        image: ghcr.io/traefik/traefik:v3.5.4
        container_name: traefik
        command:
            - "--global.checkNewVersion=false"