chore(deps): update vectorim/element-web docker tag to v1.12.12

clusters/cl01tl/helm/actual/values.yaml

@@ -81,8 +81,7 @@ volsync-target-data:
     enabled: true
     schedule: 0 8 * * *
   remote:
-    enabled: true
+    enabled: false
-    schedule: 0 9 * * *
   external:
     enabled: true
-    schedule: 0 10 * * *
+    schedule: 0 9 * * *

clusters/cl01tl/helm/audiobookshelf/values.yaml

@@ -127,19 +127,17 @@ volsync-target-config:
     enabled: true
     schedule: 2 8 * * *
   remote:
-    enabled: true
+    enabled: false
-    schedule: 2 9 * * *
   external:
     enabled: true
-    schedule: 2 10 * * *
+    schedule: 2 9 * * *
 volsync-target-metadata:
   pvcTarget: audiobookshelf-metadata
   local:
     enabled: true
     schedule: 4 8 * * *
   remote:
-    enabled: true
+    enabled: false
-    schedule: 4 9 * * *
   external:
     enabled: true
-    schedule: 4 10 * * *
+    schedule: 4 9 * * *

clusters/cl01tl/helm/authentik/values.yaml

@@ -68,7 +68,7 @@ postgres-18-cluster:
   recovery:
     method: objectStore
     objectStore:
-      index: 2
+      index: 1
   backup:
     objectStore:
       - name: garage-local
@@ -91,7 +91,7 @@ postgres-18-cluster:
       #   isWALArchiver: false
     scheduledBackups:
       - name: live-backup
-        suspend: false
+        suspend: true
         immediate: true
         schedule: "0 0 0 * * *"
         backupName: garage-local

clusters/cl01tl/helm/backrest/values.yaml

@@ -111,19 +111,17 @@ volsync-target-data:
     enabled: true
     schedule: 6 8 * * *
   remote:
-    enabled: true
+    enabled: false
-    schedule: 6 9 * * *
   external:
     enabled: true
-    schedule: 6 10 * * *
+    schedule: 6 9 * * *
 volsync-target-config:
   pvcTarget: backrest-config
   local:
     enabled: true
     schedule: 8 8 * * *
   remote:
-    enabled: true
+    enabled: false
-    schedule: 8 9 * * *
   external:
     enabled: true
-    schedule: 8 10 * * *
+    schedule: 8 9 * * *

clusters/cl01tl/helm/bazarr/values.yaml

@@ -15,7 +15,7 @@ bazarr:
         main:
           image:
             repository: ghcr.io/linuxserver/bazarr
-            tag: 1.5.6@sha256:05f9d5b24884f37120453dc1a008a47be244eebec32099ae1bd29032e75b67aa
+            tag: 1.5.6@sha256:94eee5e3e14430b7b144d4556be73963a7daf6f1bddc25586627f426465482ce
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -87,8 +87,7 @@ volsync-target-config:
     enabled: true
     schedule: 10 8 * * *
   remote:
-    enabled: true
+    enabled: false
-    schedule: 10 9 * * *
   external:
     enabled: true
-    schedule: 10 10 * * *
+    schedule: 10 9 * * *

clusters/cl01tl/helm/blocky/values.yaml

@@ -135,7 +135,6 @@ blocky:
               komodo                          IN      CNAME   traefik-cl01tl
               lidarr                          IN      CNAME   traefik-cl01tl
               mail                            IN      CNAME   traefik-cl01tl
-              movie-roulette                  IN      CNAME   traefik-cl01tl
               music-grabber                   IN      CNAME   traefik-cl01tl
               navidrome                       IN      CNAME   traefik-cl01tl
               ntfy                            IN      CNAME   traefik-cl01tl

clusters/cl01tl/helm/booklore/Chart.yaml

@@ -30,4 +30,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/booklore.png
 # renovate: datasource=github-releases depName=booklore-app/BookLore
-appVersion: v2.2.0
+appVersion: v2.1.0

clusters/cl01tl/helm/booklore/values.yaml

@@ -9,7 +9,7 @@ booklore:
         main:
           image:
             repository: ghcr.io/booklore-app/booklore
-            tag: v2.2.0
+            tag: v2.1.0
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -225,11 +225,10 @@ volsync-target-config:
     enabled: true
     schedule: 12 8 * * *
   remote:
-    enabled: true
+    enabled: false
-    schedule: 12 9 * * *
   external:
     enabled: true
-    schedule: 12 10 * * *
+    schedule: 12 9 * * *
 volsync-target-data:
   pvcTarget: booklore-data
   local:
@@ -239,11 +238,11 @@ volsync-target-data:
       cacheCapacity: 10Gi
   remote:
     enabled: true
-    schedule: 14 9 * * *
+    schedule: 14 10 * * *
     restic:
       cacheCapacity: 10Gi
   external:
     enabled: true
-    schedule: 14 10 * * *
+    schedule: 14 9 * * *
     restic:
       cacheCapacity: 10Gi

clusters/cl01tl/helm/code-server/values.yaml

@@ -79,8 +79,7 @@ volsync-target-config:
     enabled: true
     schedule: 16 8 * * *
   remote:
-    enabled: true
+    enabled: false
-    schedule: 16 9 * * *
   external:
     enabled: true
-    schedule: 16 10 * * *
+    schedule: 16 9 * * *

clusters/cl01tl/helm/directus/Chart.yaml

@@ -31,4 +31,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/directus.png
 # renovate: datasource=github-releases depName=directus/directus
-appVersion: 11.16.1
+appVersion: 11.16.0

clusters/cl01tl/helm/directus/templates/external-secret.yaml

@@ -94,43 +94,6 @@ spec:
         metadataPolicy: None
         property: metric-token
 
----
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: directus-bucket-garage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: directus-bucket-garage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: ACCESS_KEY_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/directus-assets
-        metadataPolicy: None
-        property: ACCESS_KEY_ID
-    - secretKey: ACCESS_SECRET_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/directus-assets
-        metadataPolicy: None
-        property: ACCESS_SECRET_KEY
-    - secretKey: ACCESS_REGION
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/directus-assets
-        metadataPolicy: None
-        property: ACCESS_REGION
-
 ---
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret

clusters/cl01tl/helm/directus/templates/object-bucket-claim.yaml

@@ -0,0 +1,11 @@
+apiVersion: objectbucket.io/v1alpha1
+kind: ObjectBucketClaim
+metadata:
+  name: ceph-bucket-directus
+  labels:
+    app.kubernetes.io/name: ceph-bucket-directus
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  generateBucketName: bucket-directus
+  storageClassName: ceph-bucket

clusters/cl01tl/helm/directus/values.yaml

@@ -9,7 +9,7 @@ directus:
         main:
           image:
             repository: directus/directus
-            tag: 11.16.1
+            tag: 11.16.0
             pullPolicy: IfNotPresent
           env:
             - name: PUBLIC_URL
@@ -90,22 +90,22 @@ directus:
             - name: STORAGE_S3_KEY
               valueFrom:
                 secretKeyRef:
-                  name: directus-bucket-garage
+                  name: ceph-bucket-directus
-                  key: ACCESS_KEY_ID
+                  key: AWS_ACCESS_KEY_ID
             - name: STORAGE_S3_SECRET
               valueFrom:
                 secretKeyRef:
-                  name: directus-bucket-garage
+                  name: ceph-bucket-directus
-                  key: ACCESS_SECRET_KEY
+                  key: AWS_SECRET_ACCESS_KEY
-            - name: STORAGE_S3_REGION
-              valueFrom:
-                secretKeyRef:
-                  name: directus-bucket-garage
-                  key: ACCESS_REGION
             - name: STORAGE_S3_BUCKET
-              value: directus-assets
+              valueFrom:
+                configMapKeyRef:
+                  name: ceph-bucket-directus
+                  key: BUCKET_NAME
+            - name: STORAGE_S3_REGION
+              value: us-east-1
             - name: STORAGE_S3_ENDPOINT
-              value: http://garage-main.garage:3900
+              value: http://rook-ceph-rgw-ceph-objectstore.rook-ceph.svc:80
             - name: STORAGE_S3_FORCE_PATH_STYLE
               value: true
             - name: AUTH_PROVIDERS

clusters/cl01tl/helm/element-web/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: element-web
   repository: https://ananace.gitlab.io/charts
-  version: 1.4.32
+  version: 1.4.31
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.4.0
-digest: sha256:49d9dd45eff7cbbc11644e4a8bd3c9d3bf84716ed034a76f097f0ba1fea4c934
+digest: sha256:5066932d870c4803fca9bc4d7b686793e801d96b14026c299e467d8c107fb7eb
-generated: "2026-03-11T16:04:17.556777286Z"
+generated: "2026-03-09T22:04:10.470135964Z"

clusters/cl01tl/helm/element-web/Chart.yaml

@@ -17,7 +17,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: element-web
-    version: 1.4.32
+    version: 1.4.31
     repository: https://ananace.gitlab.io/charts
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts

clusters/cl01tl/helm/freshrss/values.yaml

@@ -197,7 +197,7 @@ postgres-18-cluster:
   recovery:
     method: objectStore
     objectStore:
-      index: 2
+      index: 1
   backup:
     objectStore:
       - name: garage-local
@@ -250,8 +250,7 @@ volsync-target-data:
     enabled: true
     schedule: 18 8 * * *
   remote:
-    enabled: true
+    enabled: false
-    schedule: 18 9 * * *
   external:
     enabled: true
-    schedule: 18 10 * * *
+    schedule: 18 9 * * *

clusters/cl01tl/helm/garage/templates/service.yaml

@@ -1,32 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: garage-main
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: garage-main
-    app.kubernetes.io/service: garage-main
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  ports:
-    - name: admin
-      port: 3903
-      protocol: TCP
-      targetPort: 3903
-    - name: rpc
-      port: 3901
-      protocol: TCP
-      targetPort: 3901
-    - name: s3
-      port: 3900
-      protocol: TCP
-      targetPort: 3900
-    - name: web
-      port: 3902
-      protocol: TCP
-      targetPort: 3902
-  selector:
-    app.kubernetes.io/instance: garage
-    app.kubernetes.io/name: garage
-    garage-type: server

clusters/cl01tl/helm/garage/values.yaml

@@ -118,9 +118,9 @@ garage:
             pullPolicy: IfNotPresent
           env:
             - name: API_BASE_URL
-              value: http://garage-main.garage:3903
+              value: http://garage-1.garage:3903
             - name: S3_ENDPOINT_URL
-              value: http://garage-main.garage:3900
+              value: http://garage-1.garage:3900
             - name: API_ADMIN_KEY
               valueFrom:
                 secretKeyRef:
@@ -225,6 +225,26 @@ garage:
           api_bind_addr = "[::]:3903"
           metrics_require_token = true
   service:
+    garage-main:
+      forceRename: garage-main
+      controller: server-2
+      ports:
+        s3:
+          port: 3900
+          targetPort: 3900
+          protocol: HTTP
+        rpc:
+          port: 3901
+          targetPort: 3901
+          protocol: HTTP
+        web:
+          port: 3902
+          targetPort: 3902
+          protocol : HTTP
+        admin:
+          port: 3903
+          targetPort: 3903
+          protocol: HTTP
     server-1:
       forceRename: garage-1
       controller: server-1

clusters/cl01tl/helm/gatus/values.yaml

@@ -137,9 +137,6 @@ gatus:
       - name: yamtrack
         url: https://yamtrack.alexlebens.net
         <<: *defaults
-      - name: movie-roulette
-        url: https://movie-roulette.alexlebens.net
-        <<: *defaults
       - name: jellyfin
         url: https://jellyfin.alexlebens.net
         <<: *defaults
@@ -446,10 +443,9 @@ volsync-target-data:
   pvcTarget: gatus
   local:
     enabled: true
-    schedule: 20 8 * * *
+    schedule: 22 8 * * *
   remote:
-    enabled: true
+    enabled: false
-    schedule: 20 9 * * *
   external:
     enabled: true
-    schedule: 20 10 * * *
+    schedule: 22 9 * * *

clusters/cl01tl/helm/harbor/Chart.yaml

@@ -29,4 +29,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/harbor.png
 # renovate: datasource=github-releases depName=goharbor/harbor
-appVersion: v2.14.3
+appVersion: v2.14.2

clusters/cl01tl/helm/harbor/values.yaml

@@ -41,12 +41,12 @@ harbor:
   portal:
     image:
       repository: goharbor/harbor-portal
-      tag: v2.14.3
+      tag: v2.14.2
     replicas: 2
   core:
     image:
       repository: goharbor/harbor-core
-      tag: v2.14.3
+      tag: v2.14.2
     replicas: 2
     existingSecret: harbor-secret
     secretName: harbor-secret
@@ -54,7 +54,7 @@ harbor:
   jobservice:
     image:
       repository: goharbor/harbor-jobservice
-      tag: v2.14.3
+      tag: v2.14.2
     replicas: 2
     jobLoggers:
       - stdout
@@ -63,11 +63,11 @@ harbor:
     registry:
       image:
         repository: goharbor/registry-photon
-        tag: v2.14.3
+        tag: v2.14.2
     controller:
       image:
         repository: goharbor/harbor-registryctl
-        tag: v2.14.3
+        tag: v2.14.2
     existingSecret: harbor-secret
     relativeurls: true
     credentials:
@@ -94,14 +94,14 @@ harbor:
   exporter:
     image:
       repository: goharbor/harbor-exporter
-      tag: v2.14.3
+      tag: v2.14.2
     replicas: 2
 postgres-18-cluster:
   mode: recovery
   recovery:
     method: objectStore
     objectStore:
-      index: 2
+      index: 1
   backup:
     objectStore:
       - name: garage-local

clusters/cl01tl/helm/home-assistant/values.yaml

@@ -134,10 +134,9 @@ volsync-target-config:
     fsGroupChangePolicy: OnRootMismatch
   local:
     enabled: true
-    schedule: 22 8 * * *
+    schedule: 24 8 * * *
   remote:
-    enabled: true
+    enabled: false
-    schedule: 22 9 * * *
   external:
     enabled: true
-    schedule: 22 10 * * *
+    schedule: 24 9 * * *

clusters/cl01tl/helm/homepage/values.yaml

@@ -160,12 +160,6 @@ homepage:
                   href: https://yamtrack.alexlebens.net
                   siteMonitor: http://yamtrack.yamtrack:80
                   statusStyle: dot
-              - Movie Roulette:
-                  icon: https://raw.githubusercontent.com/sahara101/Movie-Roulette/refs/heads/main/static/icons/icon.png
-                  description: Movie Roulette
-                  href: https://movie-roulette.alexlebens.net
-                  siteMonitor: http://movie-roulette.movie-roulette:80
-                  statusStyle: dot
               - Movies and TV:
                   icon: sh-jellyfin.webp
                   description: Jellyfin

clusters/cl01tl/helm/immich/values.yaml

@@ -225,16 +225,16 @@ volsync-target-data:
   pvcTarget: immich
   local:
     enabled: true
-    schedule: 24 8 * * *
+    schedule: 28 8 * * *
     restic:
       cacheCapacity: 10Gi
   remote:
     enabled: true
-    schedule: 24 9 * * *
+    schedule: 28 10 * * *
     restic:
       cacheCapacity: 10Gi
   external:
     enabled: true
-    schedule: 24 10 * * *
+    schedule: 28 9 * * *
     restic:
       cacheCapacity: 10Gi

clusters/cl01tl/helm/jellyfin/values.yaml

@@ -143,16 +143,14 @@ volsync-target-config:
   pvcTarget: jellyfin-config
   local:
     enabled: true
-    schedule: 26 8 * * *
+    schedule: 30 8 * * *
     restic:
       cacheCapacity: 10Gi
   remote:
-    enabled: true
-    schedule: 26 9 * * *
     restic:
       cacheCapacity: 10Gi
   external:
     enabled: true
-    schedule: 26 10 * * *
+    schedule: 30 9 * * *
     restic:
       cacheCapacity: 10Gi

clusters/cl01tl/helm/jellystat/values.yaml

@@ -145,10 +145,9 @@ volsync-target-data:
   pvcTarget: jellystat-data
   local:
     enabled: true
-    schedule: 28 8 * * *
+    schedule: 32 8 * * *
   remote:
-    enabled: true
+    enabled: false
-    schedule: 28 9 * * *
   external:
     enabled: true
-    schedule: 28 10 * * *
+    schedule: 32 9 * * *

clusters/cl01tl/helm/karakeep/templates/external-secret.yaml

@@ -57,43 +57,6 @@ spec:
         metadataPolicy: None
         property: secret
 
----
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: karakeep-bucket-garage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: karakeep-bucket-garage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: ACCESS_KEY_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/karakeep-assets
-        metadataPolicy: None
-        property: ACCESS_KEY_ID
-    - secretKey: ACCESS_SECRET_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/karakeep-assets
-        metadataPolicy: None
-        property: ACCESS_SECRET_KEY
-    - secretKey: ACCESS_REGION
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/karakeep-assets
-        metadataPolicy: None
-        property: ACCESS_REGION
-
 ---
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret

clusters/cl01tl/helm/karakeep/templates/object-bucket-claim.yaml

@@ -0,0 +1,11 @@
+apiVersion: objectbucket.io/v1alpha1
+kind: ObjectBucketClaim
+metadata:
+  name: ceph-bucket-karakeep
+  labels:
+    app.kubernetes.io/name: ceph-bucket-karakeep
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  generateBucketName: bucket-karakeep
+  storageClassName: ceph-bucket

clusters/cl01tl/helm/karakeep/values.yaml

@@ -29,24 +29,24 @@ karakeep:
                   name: karakeep-key-secret
                   key: prometheus-token
             - name: ASSET_STORE_S3_ENDPOINT
-              value: http://garage-main.garage:3900
+              value: http://rook-ceph-rgw-ceph-objectstore.rook-ceph.svc:80
             - name: ASSET_STORE_S3_REGION
-              valueFrom:
+              value: us-east-1
-                secretKeyRef:
-                  name: karakeep-bucket-garage
-                  key: ACCESS_REGION
             - name: ASSET_STORE_S3_BUCKET
-              value: karakeep-assets
+              valueFrom:
+                configMapKeyRef:
+                  name: ceph-bucket-karakeep
+                  key: BUCKET_NAME
             - name: ASSET_STORE_S3_ACCESS_KEY_ID
               valueFrom:
                 secretKeyRef:
-                  name: karakeep-bucket-garage
+                  name: ceph-bucket-karakeep
-                  key: ACCESS_KEY_ID
+                  key: AWS_ACCESS_KEY_ID
             - name: ASSET_STORE_S3_SECRET_ACCESS_KEY
               valueFrom:
                 secretKeyRef:
-                  name: karakeep-bucket-garage
+                  name: ceph-bucket-karakeep
-                  key: ACCESS_SECRET_KEY
+                  key: AWS_SECRET_ACCESS_KEY
             - name: ASSET_STORE_S3_FORCE_PATH_STYLE
               value: true
             - name: MEILI_ADDR
@@ -172,10 +172,9 @@ volsync-target-data:
   pvcTarget: karakeep
   local:
     enabled: true
-    schedule: 30 8 * * *
+    schedule: 34 8 * * *
   remote:
-    enabled: true
+    enabled: false
-    schedule: 30 9 * * *
   external:
     enabled: true
-    schedule: 30 10 * * *
+    schedule: 34 9 * * *

clusters/cl01tl/helm/komodo/values.yaml

@@ -205,7 +205,7 @@ postgresql-17-fdb-cluster:
   recovery:
     method: objectStore
     objectStore:
-      index: 2
+      index: 1
   backup:
     objectStore:
       - name: garage-local

clusters/cl01tl/helm/libation/values.yaml

@@ -75,10 +75,9 @@ volsync-target-config:
   pvcTarget: libation
   local:
     enabled: true
-    schedule: 32 8 * * *
+    schedule: 36 8 * * *
   remote:
-    enabled: true
+    enabled: false
-    schedule: 32 9 * * *
   external:
     enabled: true
-    schedule: 32 10 * * *
+    schedule: 36 9 * * *

clusters/cl01tl/helm/lidarr/values.yaml

@@ -15,7 +15,7 @@ lidarr:
         main:
           image:
             repository: ghcr.io/linuxserver/lidarr
-            tag: 3.1.2-nightly@sha256:2b1b64f07214c6cf05bcfed999aa74ee23825e4bc2ef2c48aba1cd5d5bf968fe
+            tag: 3.1.2-nightly@sha256:f64fabd1737d9c7d519e1a37aba97b2e110d717e1c497a6f9788766f9633cf8f
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -188,10 +188,9 @@ volsync-target-config:
     fsGroupChangePolicy: OnRootMismatch
   local:
     enabled: true
-    schedule: 34 8 * * *
+    schedule: 38 8 * * *
   remote:
-    enabled: true
+    enabled: false
-    schedule: 34 9 * * *
   external:
     enabled: true
-    schedule: 34 10 * * *
+    schedule: 38 9 * * *

clusters/cl01tl/helm/local-path-provisioner/Chart.yaml

@@ -19,4 +19,4 @@ dependencies:
     repository: https://charts.containeroo.ch
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 # renovate: datasource=github-releases depName=rancher/local-path-provisioner
-appVersion: v0.0.35
+appVersion: v0.0.34

clusters/cl01tl/helm/local-path-provisioner/values.yaml

@@ -1,7 +1,7 @@
 local-path-provisioner:
   image:
     repository: rancher/local-path-provisioner
-    tag: v0.0.35
+    tag: v0.0.34
   helperImage:
     repository: busybox
     tag: 1.37.0

clusters/cl01tl/helm/matrix-synapse/values.yaml

@@ -470,24 +470,22 @@ volsync-target-synapse:
   pvcTarget: matrix-synapse
   local:
     enabled: true
-    schedule: 36 8 * * *
+    schedule: 44 8 * * *
   remote:
-    enabled: true
+    enabled: false
-    schedule: 36 9 * * *
   external:
     enabled: true
-    schedule: 36 10 * * *
+    schedule: 44 9 * * *
 volsync-target-hookshot:
   pvcTarget: matrix-hookshot
   local:
     enabled: true
-    schedule: 38 8 * * *
+    schedule: 46 8 * * *
   remote:
-    enabled: true
+    enabled: false
-    schedule: 38 9 * * *
   external:
     enabled: true
-    schedule: 38 10 * * *
+    schedule: 46 9 * * *
 volsync-target-discord:
   pvcTarget: mautrix-discord
   moverSecurityContext:
@@ -495,13 +493,12 @@ volsync-target-discord:
     runAsGroup: 1337
   local:
     enabled: true
-    schedule: 40 8 * * *
+    schedule: 48 8 * * *
   remote:
-    enabled: true
+    enabled: false
-    schedule: 40 9 * * *
   external:
     enabled: true
-    schedule: 40 10 * * *
+    schedule: 48 9 * * *
 volsync-target-whatsapp:
   pvcTarget: mautrix-whatsapp
   moverSecurityContext:
@@ -509,10 +506,9 @@ volsync-target-whatsapp:
     runAsGroup: 1337
   local:
     enabled: true
-    schedule: 42 8 * * *
+    schedule: 50 8 * * *
   remote:
-    enabled: true
+    enabled: false
-    schedule: 42 9 * * *
   external:
     enabled: true
-    schedule: 42 10 * * *
+    schedule: 50 9 * * *

clusters/cl01tl/helm/movie-roulette/Chart.lock

@@ -1,6 +0,0 @@
-dependencies:
-- name: app-template
-  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
-digest: sha256:faa35ccfc18b2d47fad558e168bd3c68e64790fe2b1356881452ae4f5cd8b443
-generated: "2026-03-10T16:01:13.738843-05:00"

clusters/cl01tl/helm/movie-roulette/Chart.yaml

@@ -1,22 +0,0 @@
-apiVersion: v2
-name: movie-roulette
-version: 1.0.0
-description: Movie Roulette
-keywords:
-  - movie-roulette
-  - jellyfin
-home: https://wiki.alexlebens.dev/
-sources:
-  - https://github.com/sahara101/Movie-Roulette
-  - https://github.com/sahara101/Movie-Roulette/pkgs/container/movie-roulette
-  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: app-template
-    alias: movie-roulette
-    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
-icon: https://raw.githubusercontent.com/sahara101/Movie-Roulette/refs/heads/main/static/icons/icon.png
-# renovate: datasource=github-releases depName=sahara101/Movie-Roulette
-appVersion: v5.2.1

clusters/cl01tl/helm/movie-roulette/templates/external-secret.yaml

@@ -1,42 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: movie-roulette-config-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: movie-roulette-config-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: secret-key
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/movie-roulette/key
-        metadataPolicy: None
-        property: secret-key
-    - secretKey: jellyfin-key
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/jellyfin/movie-roulette
-        metadataPolicy: None
-        property: jellyfin-key
-    - secretKey: jellyfin-user
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/jellyfin/movie-roulette
-        metadataPolicy: None
-        property: user
-    - secretKey: seerr-key
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/seerr/key
-        metadataPolicy: None
-        property: key

clusters/cl01tl/helm/movie-roulette/values.yaml

@@ -1,128 +0,0 @@
-movie-roulette:
-  controllers:
-    main:
-      type: deployment
-      replicas: 1
-      strategy: Recreate
-      revisionHistoryLimit: 3
-      containers:
-        main:
-          image:
-            repository: ghcr.io/sahara101/movie-roulette
-            tag: v5.2.1
-            pullPolicy: IfNotPresent
-          env:
-            - name: FLASK_SECRET_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: movie-roulette-config-secret
-                  key: secret-key
-            - name: CORS_ALLOWED_ORIGINS
-              value: movie-roulette.alexlebens.net
-            - name: DISABLE_SETTINGS
-              value: "TRUE"
-            - name: AUTH_ENABLED
-              value: "TRUE"
-            - name: AUTH_SESSION_LIFETIME
-              value: "86400"
-            - name: JELLYFIN_URL
-              value: http://jellyfin.alexlebens.net
-            - name: JELLYFIN_API_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: movie-roulette-config-secret
-                  key: jellyfin-key
-            - name: JELLYFIN_USER_ID
-              valueFrom:
-                secretKeyRef:
-                  name: movie-roulette-config-secret
-                  key: jellyfin-user
-            - name: LOGIN_BACKDROP_ENABLED
-              value: "TRUE"
-            - name: HOMEPAGE_MODE
-              value: "FALSE"
-            - name: USE_LINKS
-              value: "TRUE"
-            - name: USE_FILTER
-              value: "TRUE"
-            - name: USE_WATCH_BUTTON
-              value: "TRUE"
-            - name: USE_NEXT_BUTTON
-              value: "TRUE"
-            - name: USE_GRID_VIEW
-              value: "true"
-            - name: ENABLE_MOBILE_TRUNCATION
-              value: "TRUE"
-            - name: SHOW_NOW_WATCHING_CARD
-              value: "FALSE"
-            - name: USE_HEROUI_THEME
-              value: "FALSE"
-            - name: ENABLE_MOVIE_LOGOS
-              value: "TRUE"
-            - name: LOAD_MOVIE_ON_START
-              value: "FALSE"
-            - name: SEERR_URL
-              value: http://seerr.alexlebens.net
-            - name: SEERR_API_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: movie-roulette-config-secret
-                  key: seerr-key
-            - name: REQUEST_SERVICE_DEFAULT
-              value: "seerr"
-          resources:
-            requests:
-              cpu: 10m
-              memory: 128Mi
-  service:
-    main:
-      controller: main
-      ports:
-        http:
-          port: 80
-          targetPort: 4000
-          protocol: HTTP
-  route:
-    main:
-      kind: HTTPRoute
-      parentRefs:
-        - group: gateway.networking.k8s.io
-          kind: Gateway
-          name: traefik-gateway
-          namespace: traefik
-      hostnames:
-        - movie-roulette.alexlebens.net
-      rules:
-        - backendRefs:
-            - group: ''
-              kind: Service
-              name: movie-roulette
-              port: 80
-              weight: 100
-          matches:
-            - path:
-                type: PathPrefix
-                value: /
-  persistence:
-    data:
-      forceRename: movie-roulette-data
-      storageClass: ceph-block
-      accessMode: ReadWriteOnce
-      size: 1Gi
-      retain: true
-      advancedMounts:
-        main:
-          main:
-            - path: /config
-              readOnly: false
-volsync-target-data:
-  pvcTarget: movie-roulette-data
-  local:
-    enabled: true
-    schedule: 44 8 * * *
-  remote:
-    enabled: true
-    schedule: 44 9 * * *
-  external:
-    enabled: true
-    schedule: 44 10 * * *

clusters/cl01tl/helm/navidrome/values.yaml

@@ -178,10 +178,9 @@ volsync-target-data:
     fsGroupChangePolicy: OnRootMismatch
   local:
     enabled: true
-    schedule: 46 8 * * *
+    schedule: 52 8 * * *
   remote:
-    enabled: true
+    enabled: false
-    schedule: 46 9 * * *
   external:
     enabled: true
-    schedule: 46 10 * * *
+    schedule: 52 9 * * *

clusters/cl01tl/helm/ollama/values.yaml

@@ -308,10 +308,9 @@ volsync-target-data:
     runAsGroup: 1337
   local:
     enabled: true
-    schedule: 48 8 * * *
+    schedule: 54 8 * * *
   remote:
-    enabled: true
+    enabled: false
-    schedule: 48 9 * * *
   external:
     enabled: true
-    schedule: 48 10 * * *
+    schedule: 54 9 * * *

clusters/cl01tl/helm/outline/Chart.lock

@@ -11,8 +11,5 @@ dependencies:
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.4.0
-- name: volsync-target
+digest: sha256:315941cca92632a42d42fe2d98f01d3e8a18dbde1c729e466f76a446a7d93440
-  repository: oci://harbor.alexlebens.net/helm-charts
+generated: "2026-03-09T23:08:20.752831748Z"
-  version: 0.8.0
-digest: sha256:e1f1a6ebdee3146e028c4df1762a4c60c1e62733a91e54d615190f8138be117d
-generated: "2026-03-11T16:37:32.297394-05:00"

clusters/cl01tl/helm/outline/Chart.yaml

@@ -33,10 +33,6 @@ dependencies:
     alias: valkey
     version: 0.4.0
     repository: oci://harbor.alexlebens.net/helm-charts
-  - name: volsync-target
-    alias: volsync-target-data
-    version: 0.8.0
-    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/outline.png
 # renovate: datasource=github-releases depName=outline/outline
 appVersion: 1.5.0

clusters/cl01tl/helm/outline/templates/object-bucket-claim.yaml

@@ -0,0 +1,30 @@
+apiVersion: objectbucket.io/v1alpha1
+kind: ObjectBucketClaim
+metadata:
+  name: ceph-bucket-outline
+  labels:
+    app.kubernetes.io/name: ceph-bucket-outline
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  generateBucketName: bucket-outline
+  storageClassName: ceph-bucket
+  # additionalConfig:
+  #   bucketPolicy: |
+  #       {
+  #           "Version": "2012-10-17",
+  #           "Statement": [
+  #               {
+  #                   "Sid": "VisualEditor",
+  #                   "Effect": "Allow",
+  #                   "Action": [
+  #                       "s3:GetObjectAcl",
+  #                       "s3:DeleteObject",
+  #                       "s3:PutObject",
+  #                       "s3:GetObject",
+  #                       "s3:PutObjectAcl"
+  #                   ],
+  #                   "Resource": "arn:aws:s3:::bucket-outline-630c57e0-d475-4d78-926c-c1c082291d73/*"
+  #               }
+  #           ]
+  #       }

clusters/cl01tl/helm/outline/values.yaml

@@ -5,9 +5,6 @@ outline:
       replicas: 1
       strategy: Recreate
       revisionHistoryLimit: 3
-      pod:
-        securityContext:
-          fsGroup: 1001
       containers:
         main:
           image:
@@ -69,7 +66,30 @@ outline:
             - name: REDIS_URL
               value: redis://outline-valkey.outline:6379
             - name: FILE_STORAGE
-              value: local
+              value: s3
+            - name: AWS_ACCESS_KEY_ID
+              valueFrom:
+                secretKeyRef:
+                  name: ceph-bucket-outline
+                  key: AWS_ACCESS_KEY_ID
+            - name: AWS_SECRET_ACCESS_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: ceph-bucket-outline
+                  key: AWS_SECRET_ACCESS_KEY
+            - name: AWS_REGION
+              value: us-east-1
+            - name: AWS_S3_UPLOAD_BUCKET_NAME
+              valueFrom:
+                configMapKeyRef:
+                  name: ceph-bucket-outline
+                  key: BUCKET_NAME
+            - name: AWS_S3_UPLOAD_BUCKET_URL
+              value: https://objects.alexlebens.dev
+            - name: AWS_S3_FORCE_PATH_STYLE
+              value: true
+            - name: AWS_S3_ACL
+              value: private
             - name: FILE_STORAGE_UPLOAD_MAX_SIZE
               value: "26214400"
             - name: FORCE_HTTPS
@@ -122,18 +142,6 @@ outline:
           port: 3000
           targetPort: 3000
           protocol: HTTP
-  persistence:
-    data:
-      forceRename: outline-data
-      storageClass: ceph-block
-      accessMode: ReadWriteOnce
-      size: 5Gi
-      retain: true
-      advancedMounts:
-        main:
-          main:
-            - path: /var/lib/outline/data
-              readOnly: false
 postgres-18-cluster:
   mode: recovery
   recovery:
@@ -176,16 +184,3 @@ postgres-18-cluster:
       #   immediate: true
       #   schedule: "0 0 0 * * *"
       #   backupName: external
-volsync-target-data:
-  pvcTarget: outline-data
-  moverSecurityContext:
-    fsGroup: 1001
-  local:
-    enabled: true
-    schedule: 50 8 * * *
-  remote:
-    enabled: true
-    schedule: 50 9 * * *
-  external:
-    enabled: true
-    schedule: 50 10 * * *

clusters/cl01tl/helm/postiz/Chart.yaml

@@ -42,4 +42,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/postiz.png
 # renovate: datasource=github-releases depName=gitroomhq/postiz-app
-appVersion: v2.20.2
+appVersion: v2.20.1

clusters/cl01tl/helm/postiz/values.yaml

@@ -9,7 +9,7 @@ postiz:
         main:
           image:
             repository: ghcr.io/gitroomhq/postiz-app
-            tag: v2.20.2
+            tag: v2.20.1
             pullPolicy: IfNotPresent
           env:
             - name: MAIN_URL

clusters/cl01tl/helm/prowlarr/values.yaml

@@ -20,7 +20,7 @@ prowlarr:
         main:
           image:
             repository: ghcr.io/linuxserver/prowlarr
-            tag: 2.3.0@sha256:9ef5d8bf832edcacb6082f9262cb36087854e78eb7b1c3e1d4375056055b2d82
+            tag: 2.3.0@sha256:a8fe7b9c502f979146b6d0f22438b825c38e068241bb8a708c473062dffdbb03
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/rook-ceph/Chart.yaml

@@ -21,6 +21,10 @@ dependencies:
   - name: rook-ceph-cluster
     version: v1.19.2
     repository: https://charts.rook.io/release
+  - name: cloudflared
+    alias: cloudflared-rgw
+    repository: oci://harbor.alexlebens.net/helm-charts
+    version: 2.4.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ceph.png
 # renovate: datasource=github-releases depName=rook/rook
 appVersion: v1.19.2

clusters/cl01tl/helm/rook-ceph/values.yaml

@@ -177,4 +177,51 @@ rook-ceph-cluster:
     name: ceph-blockpool-snapshot
     isDefault: true
     deletionPolicy: Delete
-  cephObjectStores: []
+  cephObjectStores:
+    - name: ceph-objectstore
+      spec:
+        metadataPool:
+          failureDomain: host
+          replicated:
+            size: 3
+        dataPool:
+          failureDomain: host
+          erasureCoded:
+            dataChunks: 2
+            codingChunks: 1
+          parameters:
+            bulk: "true"
+        preservePoolsOnDelete: true
+        gateway:
+          port: 80
+          resources:
+            requests:
+              cpu: "1000m"
+              memory: "1Gi"
+          instances: 1
+          priorityClassName: system-cluster-critical
+        hosting:
+          dnsNames:
+            - objects.alexlebens.dev
+            - objects.alexlebens.net
+      storageClass:
+        enabled: true
+        name: ceph-bucket
+        reclaimPolicy: Delete
+        volumeBindingMode: "Immediate"
+        parameters:
+          region: us-east-1
+      route:
+        enabled: true
+        port: 80
+        host:
+          name: objects.alexlebens.net
+          path: /
+          pathType: PathPrefix
+        parentRefs:
+          - group: gateway.networking.k8s.io
+            kind: Gateway
+            name: traefik-gateway
+            namespace: traefik
+cloudflared-rgw:
+  name: rgw

clusters/cl01tl/helm/s3-exporter/templates/external-secret.yaml

@@ -34,6 +34,43 @@ spec:
         metadataPolicy: None
         property: AWS_REGION
 
+---
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: s3-ceph-directus-secret
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: s3-ceph-directus-secret
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  data:
+    - secretKey: AWS_ACCESS_KEY_ID
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/directus/ceph
+        metadataPolicy: None
+        property: AWS_ACCESS_KEY_ID
+    - secretKey: AWS_SECRET_ACCESS_KEY
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/directus/ceph
+        metadataPolicy: None
+        property: AWS_SECRET_ACCESS_KEY
+    - secretKey: BUCKET_HOST
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/directus/ceph
+        metadataPolicy: None
+        property: BUCKET_HOST
+
 ---
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret

clusters/cl01tl/helm/s3-exporter/values.yaml

@@ -39,6 +39,45 @@ s3-exporter:
             requests:
               cpu: 10m
               memory: 64Mi
+    ceph-directus:
+      type: deployment
+      replicas: 1
+      strategy: Recreate
+      revisionHistoryLimit: 3
+      containers:
+        main:
+          image:
+            repository: molu8bits/s3bucket_exporter
+            tag: 1.0.2
+            pullPolicy: IfNotPresent
+          env:
+            - name: S3_NAME
+              value: ceph-directus
+            - name: S3_ENDPOINT
+              valueFrom:
+                secretKeyRef:
+                  name: s3-ceph-directus-secret
+                  key: BUCKET_HOST
+            - name: S3_ACCESS_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: s3-ceph-directus-secret
+                  key: AWS_ACCESS_KEY_ID
+            - name: S3_SECRET_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: s3-ceph-directus-secret
+                  key: AWS_SECRET_ACCESS_KEY
+            - name: S3_REGION
+              value: us-east-1
+            - name: LOG_LEVEL
+              value: info
+            - name: S3_FORCE_PATH_STYLE
+              value: true
+          resources:
+            requests:
+              cpu: 10m
+              memory: 64Mi
     garage-local:
       type: deployment
       replicas: 1
@@ -119,6 +158,13 @@ s3-exporter:
           port: 9655
           targetPort: 9655
           protocol: TCP
+    ceph-directus:
+      controller: ceph-directus
+      ports:
+        metrics:
+          port: 9655
+          targetPort: 9655
+          protocol: TCP
     garage-local:
       controller: garage-local
       ports:
@@ -146,6 +192,18 @@ s3-exporter:
           interval: 5m
           scrapeTimeout: 120s
           path: /metrics
+    ceph-directus:
+      selector:
+        matchLabels:
+          app.kubernetes.io/name: s3-exporter
+          app.kubernetes.io/instance: s3-exporter
+          app.kubernetes.io/service: s3-exporter-ceph-directus
+      serviceName: s3-exporter-ceph-directus
+      endpoints:
+        - port: metrics
+          interval: 5m
+          scrapeTimeout: 120s
+          path: /metrics
     garage-local:
       selector:
         matchLabels:

clusters/cl01tl/helm/site-profile/values.yaml

@@ -11,7 +11,7 @@ site-profile:
         main:
           image:
             repository: harbor.alexlebens.net/images/site-profile
-            tag: 3.1.0
+            tag: 2.25.0
             pullPolicy: IfNotPresent
           resources:
             requests:

clusters/cl01tl/helm/talos/values.yaml

@@ -69,7 +69,7 @@ etcd-backup:
         s3-prune:
           image:
             repository: d3fk/s3cmd
-            tag: latest@sha256:a41234c2b43d6cfa0d51c9523a2d7925f7f21297a41d69932946c3e364d32b5e
+            tag: latest@sha256:986493326094dba12e166ca89f4be93de05e9184725d40f222ffa015ff7bf552
             pullPolicy: IfNotPresent
           command:
             - /bin/sh
@@ -155,7 +155,7 @@ etcd-backup:
         s3-prune:
           image:
             repository: d3fk/s3cmd
-            tag: latest@sha256:a41234c2b43d6cfa0d51c9523a2d7925f7f21297a41d69932946c3e364d32b5e
+            tag: latest@sha256:986493326094dba12e166ca89f4be93de05e9184725d40f222ffa015ff7bf552
             pullPolicy: IfNotPresent
           command:
             - /bin/sh
@@ -241,7 +241,7 @@ etcd-backup:
         s3-prune:
           image:
             repository: d3fk/s3cmd
-            tag: latest@sha256:a41234c2b43d6cfa0d51c9523a2d7925f7f21297a41d69932946c3e364d32b5e
+            tag: latest@sha256:986493326094dba12e166ca89f4be93de05e9184725d40f222ffa015ff7bf552
             pullPolicy: IfNotPresent
           command:
             - /bin/sh
@@ -405,7 +405,7 @@ etcd-defrag:
         main:
           image:
             repository: ghcr.io/siderolabs/talosctl
-            tag: v1.12.5
+            tag: v1.12.4
             pullPolicy: IfNotPresent
           args:
             - etcd
@@ -438,7 +438,7 @@ etcd-defrag:
         main:
           image:
             repository: ghcr.io/siderolabs/talosctl
-            tag: v1.12.5
+            tag: v1.12.4
             pullPolicy: IfNotPresent
           args:
             - etcd
@@ -471,7 +471,7 @@ etcd-defrag:
         main:
           image:
             repository: ghcr.io/siderolabs/talosctl
-            tag: v1.12.5
+            tag: v1.12.4
             pullPolicy: IfNotPresent
           args:
             - etcd

clusters/cl01tl/helm/vault/values.yaml

@@ -187,7 +187,7 @@ snapshot:
         s3-backup-local:
           image:
             repository: d3fk/s3cmd
-            tag: latest@sha256:a41234c2b43d6cfa0d51c9523a2d7925f7f21297a41d69932946c3e364d32b5e
+            tag: latest@sha256:986493326094dba12e166ca89f4be93de05e9184725d40f222ffa015ff7bf552
             pullPolicy: IfNotPresent
           command:
             - /bin/sh
@@ -208,7 +208,7 @@ snapshot:
         s3-backup-remote:
           image:
             repository: d3fk/s3cmd
-            tag: latest@sha256:a41234c2b43d6cfa0d51c9523a2d7925f7f21297a41d69932946c3e364d32b5e
+            tag: latest@sha256:986493326094dba12e166ca89f4be93de05e9184725d40f222ffa015ff7bf552
             pullPolicy: IfNotPresent
           command:
             - /bin/sh
@@ -229,7 +229,7 @@ snapshot:
         s3-backup-external:
           image:
             repository: d3fk/s3cmd
-            tag: latest@sha256:a41234c2b43d6cfa0d51c9523a2d7925f7f21297a41d69932946c3e364d32b5e
+            tag: latest@sha256:986493326094dba12e166ca89f4be93de05e9184725d40f222ffa015ff7bf552
             pullPolicy: IfNotPresent
           command:
             - /bin/sh

hosts/ps08rp/blocky/config.yml

@@ -110,7 +110,6 @@ customDNS:
     komodo                          IN      CNAME   traefik-cl01tl
     lidarr                          IN      CNAME   traefik-cl01tl
     mail                            IN      CNAME   traefik-cl01tl
-    movie-roulette                  IN      CNAME   traefik-cl01tl
     music-grabber                   IN      CNAME   traefik-cl01tl
     navidrome                       IN      CNAME   traefik-cl01tl
     ntfy                            IN      CNAME   traefik-cl01tl

hosts/ps09rp/blocky/config.yml

@@ -131,7 +131,6 @@ customDNS:
     komodo                          IN      CNAME   traefik-cl01tl
     lidarr                          IN      CNAME   traefik-cl01tl
     mail                            IN      CNAME   traefik-cl01tl
-    movie-roulette                  IN      CNAME   traefik-cl01tl
     music-grabber                   IN      CNAME   traefik-cl01tl
     navidrome                       IN      CNAME   traefik-cl01tl
     ntfy                            IN      CNAME   traefik-cl01tl