1 Commits

Author SHA1 Message Date
51a8736847 Update ghcr.io/immich-app/immich-server Docker tag to v1.136.0
All checks were successful
lint-test-helm / helm-lint (pull_request) Successful in 13s
2025-07-29 23:59:31 +00:00
150 changed files with 693 additions and 1076 deletions

View File

@@ -20,7 +20,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v5
uses: actions/checkout@v4
with:
fetch-depth: 0

View File

@@ -20,7 +20,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v5
uses: actions/checkout@v4
with:
fetch-depth: 0

View File

@@ -0,0 +1,40 @@
name: process-repository
on:
schedule:
- cron: "@daily"
jobs:
process-repository:
runs-on: ubuntu-latest
steps:
- name: Checkout Python Script
uses: actions/checkout@v4
with:
repository: alexlebens/workflow-scripts
ref: main
token: ${{ secrets.BOT_TOKEN }}
path: workflow-scripts
- name: Set up Python
uses: actions/setup-python@v5
with:
python-version: "3.13"
- name: Install dependencies
run: pip install requests immutabledict
- name: Run Script
env:
INSTANCE_URL: ${{ vars.INSTANCE_URL }}
OWNER: ${{ gitea.owner }}
REPOSITORY: ${{ gitea.repository }}
TOKEN: ${{ secrets.BOT_TOKEN }}
LOG_LEVEL: DEBUG
ISSUE_STALE_DAYS: 3
ISSUE_STALE_TAG: 16
ISSUE_EXCLUDE_TAG: 20
PULL_REQUEST_STALE_DAYS: 3
PULL_REQUEST_STALE_TAG: 16
PULL_REQUEST_REQUIRED_TAG: 15
run: python ./workflow-scripts/process-repository.py

View File

@@ -16,7 +16,7 @@ jobs:
container: ghcr.io/renovatebot/renovate:41
steps:
- name: Checkout
uses: actions/checkout@v5
uses: actions/checkout@v4
- name: Renovate
run: renovate

View File

@@ -9,7 +9,7 @@ actual:
main:
image:
repository: ghcr.io/actualbudget/actual
tag: 25.8.0
tag: 25.7.1
pullPolicy: IfNotPresent
env:
- name: TZ

View File

@@ -9,7 +9,7 @@ audiobookshelf:
main:
image:
repository: ghcr.io/advplyr/audiobookshelf
tag: 2.29.0
tag: 2.26.3
pullPolicy: IfNotPresent
env:
- name: TZ
@@ -21,7 +21,7 @@ audiobookshelf:
apprise-api:
image:
repository: caronc/apprise
tag: 1.2.1
tag: 1.2.0
pullPolicy: IfNotPresent
env:
- name: TZ

View File

@@ -15,7 +15,7 @@ bazarr:
main:
image:
repository: ghcr.io/linuxserver/bazarr
tag: 1.5.2@sha256:f9cb78eaec1d77017f5c3e5b7aa07106fe4433a77fd902d01e91213f7c991499
tag: 1.5.2@sha256:911483a9ec04de93e60e649a101eabab5d7c143bcb14fcddb32161d34016e11b
pullPolicy: IfNotPresent
env:
- name: TZ

View File

@@ -31,7 +31,7 @@ calibre-web-automated:
main:
image:
repository: ghcr.io/calibrain/calibre-web-automated-book-downloader
tag: latest@sha256:99e8d42199dd69cfb36498e4ca99c13c93ab513980ee33c1b9837aa1ab163fb9
tag: latest@sha256:518908641a2260249513f349eef9f30e580f8f428d1adfa830096b43a818e97b
pullPolicy: IfNotPresent
env:
- name: FLASK_PORT
@@ -41,7 +41,7 @@ calibre-web-automated:
- name: GID
value: 100
- name: USE_CF_BYPASS
value: false
value: true
- name: CLOUDFLARE_PROXY_URL
value: http://localhost:8000
- name: INGEST_DIR
@@ -55,7 +55,7 @@ calibre-web-automated:
bypass:
image:
repository: ghcr.io/sarperavci/cloudflarebypassforscraping
tag: latest@sha256:9ac4cd4d6d5dfc270a92502b92761d9039297abfb123f4a2a3abca5209d9eec5
tag: latest@sha256:bd326a3c6ae0b7ed3e405bbaa230e43e252f444c98f57d179f7a1d78f273748b
pullPolicy: IfNotPresent
resources:
requests:

View File

@@ -23,6 +23,6 @@ dependencies:
- name: cloudflared
alias: cloudflared
repository: oci://harbor.alexlebens.net/helm-charts
version: 1.20.1
version: 1.18.0
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/visual-studio-code.png
appVersion: 4.100.2

View File

@@ -9,7 +9,7 @@ code-server:
main:
image:
repository: ghcr.io/linuxserver/code-server
tag: 4.103.2@sha256:d85f12f63fbeb0b91d337f1b9fee0409b057d9fbb106b987305856112dc7873a
tag: 4.102.2@sha256:e93e459877c47affef393e81dd6bcd591af96363c0e96748aed4980b6d12de24
pullPolicy: IfNotPresent
env:
- name: TZ

View File

@@ -8,10 +8,12 @@ keywords:
home: https://wiki.alexlebens.dev/s/c2d242de-dcaa-4801-86a2-c4761dc8bf9b
sources:
- https://github.com/directus/directus
- https://github.com/valkey-io/valkey
- https://github.com/cloudflare/cloudflared
- https://github.com/cloudnative-pg/cloudnative-pg
- https://hub.docker.com/r/directus/directus
- https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
- https://github.com/bitnami/charts/tree/main/bitnami/valkey
- https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/cloudflared
- https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/postgres-cluster
maintainers:
@@ -21,10 +23,13 @@ dependencies:
alias: directus
repository: https://bjw-s-labs.github.io/helm-charts/
version: 4.2.0
- name: valkey
version: 3.0.22
repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
- name: cloudflared
alias: cloudflared-directus
repository: oci://harbor.alexlebens.net/helm-charts
version: 1.20.1
version: 1.18.0
- name: postgres-cluster
alias: postgres-17-cluster
version: 5.1.0

View File

@@ -68,10 +68,10 @@ spec:
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: directus-redis-config
name: directus-valkey-config
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: directus-redis-config
app.kubernetes.io/name: directus-valkey-config
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec:
@@ -83,14 +83,14 @@ spec:
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/directus/redis
key: /cl01tl/directus/valkey
metadataPolicy: None
property: user
- secretKey: password
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/directus/redis
key: /cl01tl/directus/valkey
metadataPolicy: None
property: password

View File

@@ -1,35 +0,0 @@
apiVersion: redis.redis.opstreelabs.in/v1beta2
kind: RedisReplication
metadata:
name: redis-replication-directus
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: redis-replication-directus
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec:
clusterSize: 3
podSecurityContext:
runAsUser: 1000
fsGroup: 1000
kubernetesConfig:
image: quay.io/opstree/redis:v8.0.3
imagePullPolicy: IfNotPresent
redisSecret:
name: directus-redis-config
key: password
resources:
requests:
cpu: 50m
memory: 128Mi
storage:
volumeClaimTemplate:
spec:
storageClassName: ceph-block
accessModes: ["ReadWriteOnce"]
resources:
requests:
storage: 1Gi
redisExporter:
enabled: true
image: quay.io/opstree/redis-exporter:v1.48.0

View File

@@ -20,24 +20,3 @@ spec:
bearerTokenSecret:
name: directus-metric-token
key: metric-token
---
apiVersion: monitoring.coreos.com/v1
kind: ServiceMonitor
metadata:
name: redis-replication-directus
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: redis-replication-directus
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
redis-operator: "true"
env: production
spec:
selector:
matchLabels:
redis_setup_type: replication
endpoints:
- port: redis-exporter
interval: 30s
scrapeTimeout: 10s

View File

@@ -9,7 +9,7 @@ directus:
main:
image:
repository: directus/directus
tag: 11.11.0
tag: 11.9.3
pullPolicy: IfNotPresent
env:
- name: PUBLIC_URL
@@ -66,18 +66,18 @@ directus:
- name: REDIS_ENABLED
value: true
- name: REDIS_HOST
value: redis-replication-directus-master
value: directus-valkey-primary
- name: REDIS_PORT
value: 6379
- name: REDIS_USERNAME
valueFrom:
secretKeyRef:
name: directus-redis-config
name: directus-valkey-config
key: user
- name: REDIS_PASSWORD
valueFrom:
secretKeyRef:
name: directus-redis-config
name: directus-valkey-config
key: password
- name: STORAGE_LOCATIONS
value: s3
@@ -149,6 +149,30 @@ directus:
port: 80
targetPort: 8055
protocol: TCP
valkey:
architecture: replication
auth:
enabled: true
existingSecret: directus-valkey-config
existingSecretPasswordKey: password
usePasswordFiles: false
primary:
resources:
requests:
cpu: 100m
memory: 64Mi
persistence:
enabled: true
size: 1Gi
replica:
replicaCount: 1
resources:
requests:
cpu: 100m
memory: 64Mi
persistence:
enabled: true
size: 1Gi
cloudflared-directus:
name: cloudflared-directus
existingSecretName: directus-cloudflared-secret

View File

@@ -9,7 +9,7 @@ eigenfocus:
main:
image:
repository: eigenfocus/eigenfocus
tag: 1.3.0-free
tag: 1.2.0-free
pullPolicy: IfNotPresent
env:
- name: DEFAULT_HOST_URL

View File

@@ -17,11 +17,11 @@ maintainers:
- name: alexlebens
dependencies:
- name: element-web
version: 1.4.18
version: 1.4.16
repository: https://ananace.gitlab.io/charts
- name: cloudflared
alias: cloudflared
repository: oci://harbor.alexlebens.net/helm-charts
version: 1.20.1
version: 1.18.0
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/element.png
appVersion: v1.11.100

View File

@@ -2,7 +2,7 @@ element-web:
replicaCount: 1
image:
repository: vectorim/element-web
tag: v1.11.110
tag: v1.11.106
pullPolicy: IfNotPresent
defaultServer:
url: https://matrix.alexlebens.dev

View File

@@ -24,7 +24,7 @@ dependencies:
- name: cloudflared
alias: cloudflared
repository: oci://harbor.alexlebens.net/helm-charts
version: 1.20.1
version: 1.18.0
- name: postgres-cluster
alias: postgres-17-cluster
version: 5.1.0

View File

@@ -80,7 +80,7 @@ freshrss:
main:
image:
repository: freshrss/freshrss
tag: 1.27.0
tag: 1.26.3
pullPolicy: IfNotPresent
env:
- name: PGID

View File

@@ -9,7 +9,7 @@ home-assistant:
main:
image:
repository: ghcr.io/home-assistant/home-assistant
tag: 2025.9.0
tag: 2025.7.4
pullPolicy: IfNotPresent
env:
- name: TZ
@@ -21,7 +21,7 @@ home-assistant:
code-server:
image:
repository: ghcr.io/linuxserver/code-server
tag: 4.103.2@sha256:d85f12f63fbeb0b91d337f1b9fee0409b057d9fbb106b987305856112dc7873a
tag: 4.102.2@sha256:e93e459877c47affef393e81dd6bcd591af96363c0e96748aed4980b6d12de24
pullPolicy: IfNotPresent
env:
- name: TZ

View File

@@ -22,6 +22,6 @@ dependencies:
- name: cloudflared
alias: cloudflared
repository: oci://harbor.alexlebens.net/helm-charts
version: 1.20.1
version: 1.18.0
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/homepage.png
appVersion: v1.2.0

View File

@@ -11,7 +11,7 @@ homepage:
main:
image:
repository: ghcr.io/gethomepage/homepage
tag: v1.4.6
tag: v1.4.0
pullPolicy: IfNotPresent
env:
- name: HOMEPAGE_ALLOWED_HOSTS

View File

@@ -15,7 +15,7 @@ homepage:
main:
image:
repository: ghcr.io/gethomepage/homepage
tag: v1.4.6
tag: v1.4.0
pullPolicy: IfNotPresent
env:
- name: HOMEPAGE_ALLOWED_HOSTS

View File

@@ -9,7 +9,7 @@ huntarr:
main:
image:
repository: ghcr.io/plexguide/huntarr
tag: 8.2.10
tag: 8.1.15
pullPolicy: IfNotPresent
env:
- name: TZ

View File

@@ -8,8 +8,10 @@ keywords:
home: https://wiki.alexlebens.dev/s/9377ae08-2041-4b6d-bc2b-61a4f5e8faae
sources:
- https://github.com/immich-app/immich
- https://github.com/valkey-io/valkey
- https://github.com/cloudnative-pg/cloudnative-pg
- https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
- https://github.com/bitnami/charts/tree/main/bitnami/valkey
- https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/postgres-cluster
maintainers:
- name: alexlebens
@@ -18,6 +20,9 @@ dependencies:
alias: immich
repository: https://bjw-s-labs.github.io/helm-charts/
version: 4.2.0
- name: valkey
version: 3.0.22
repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
- name: postgres-cluster
alias: postgres-16-cluster
version: 5.1.0

View File

@@ -1,32 +0,0 @@
apiVersion: redis.redis.opstreelabs.in/v1beta2
kind: RedisReplication
metadata:
name: redis-replication-immich
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: redis-replication-immich
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec:
clusterSize: 3
podSecurityContext:
runAsUser: 1000
fsGroup: 1000
kubernetesConfig:
image: quay.io/opstree/redis:v8.0.3
imagePullPolicy: IfNotPresent
resources:
requests:
cpu: 50m
memory: 128Mi
storage:
volumeClaimTemplate:
spec:
storageClassName: ceph-block
accessModes: ["ReadWriteOnce"]
resources:
requests:
storage: 1Gi
redisExporter:
enabled: true
image: quay.io/opstree/redis-exporter:v1.48.0

View File

@@ -21,24 +21,3 @@ spec:
interval: 3m
scrapeTimeout: 1m
path: /metrics
---
apiVersion: monitoring.coreos.com/v1
kind: ServiceMonitor
metadata:
name: redis-replication-immich
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: redis-replication-immich
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
redis-operator: "true"
env: production
spec:
selector:
matchLabels:
redis_setup_type: replication
endpoints:
- port: redis-exporter
interval: 30s
scrapeTimeout: 10s

View File

@@ -9,7 +9,7 @@ immich:
main:
image:
repository: ghcr.io/immich-app/immich-server
tag: v1.132.3
tag: v1.136.0
pullPolicy: IfNotPresent
env:
- name: TZ
@@ -21,7 +21,7 @@ immich:
- name: IMMICH_MACHINE_LEARNING_URL
value: http://immich-machine-learning.immich:3003
- name: REDIS_HOSTNAME
value: redis-replication-immich-master
value: immich-valkey-primary
- name: DB_VECTOR_EXTENSION
value: pgvecto.rs
- name: DB_HOSTNAME
@@ -188,6 +188,28 @@ immich:
main:
- path: /usr/src/app/upload
readOnly: false
valkey:
architecture: replication
auth:
enabled: false
usePasswordFiles: false
primary:
resources:
requests:
cpu: 100m
memory: 64Mi
persistence:
enabled: true
size: 1Gi
replica:
replicaCount: 1
resources:
requests:
cpu: 100m
memory: 64Mi
persistence:
enabled: true
size: 1Gi
postgres-16-cluster:
# Tensorchord
#--- https://github.com/immich-app/immich/discussions/9060

View File

@@ -22,11 +22,11 @@ dependencies:
repository: https://bjw-s-labs.github.io/helm-charts/
version: 4.2.0
- name: meilisearch
version: 0.17.0
version: 0.14.0
repository: https://meilisearch.github.io/meilisearch-kubernetes
- name: cloudflared
alias: cloudflared
repository: oci://harbor.alexlebens.net/helm-charts
version: 1.20.1
version: 1.18.0
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/webp/karakeep.webp
appVersion: 0.26.0

View File

@@ -16,7 +16,7 @@ libation:
main:
image:
repository: rmcrackan/libation
tag: 12.5.3
tag: 12.4.10
pullPolicy: IfNotPresent
env:
- name: SLEEP_TIME

View File

@@ -15,7 +15,7 @@ lidarr:
main:
image:
repository: ghcr.io/linuxserver/lidarr
tag: 2.13.3@sha256:186bc4d3f22bd6a71c235c1c7f57f90a8473f766278d9c929398fb5ce90eae7e
tag: 2.12.4@sha256:2231bc5581589de7c5373b19f7f16e1a5bfa48c5a365ca9b928e232b4c985dce
pullPolicy: IfNotPresent
env:
- name: TZ
@@ -31,7 +31,7 @@ lidarr:
metrics:
image:
repository: ghcr.io/onedr0p/exportarr
tag: v2.3.0
tag: v2.2.0
pullPolicy: IfNotPresent
args: ["lidarr"]
env:

View File

@@ -13,7 +13,7 @@ lidatube:
main:
image:
repository: thewicklowwolf/lidatube
tag: 0.2.34
tag: 0.2.30
pullPolicy: IfNotPresent
env:
- name: PUID

View File

@@ -25,7 +25,7 @@ dependencies:
- name: cloudflared
alias: cloudflared-outline
repository: oci://harbor.alexlebens.net/helm-charts
version: 1.20.1
version: 1.18.0
- name: postgres-cluster
alias: postgres-17-cluster
version: 5.1.0

View File

@@ -9,7 +9,7 @@ outline:
main:
image:
repository: outlinewiki/outline
tag: 0.87.3
tag: 0.85.1
pullPolicy: IfNotPresent
env:
- name: NODE_ENV
@@ -64,7 +64,7 @@ outline:
- name: PGSSLMODE
value: disable
- name: REDIS_URL
value: redis://redis-replication-outline-master.outline:6379
value: redis://redis-replication-outline-headless.outline:6379
- name: FILE_STORAGE
value: s3
- name: AWS_ACCESS_KEY_ID

View File

@@ -9,7 +9,7 @@ plex:
main:
image:
repository: ghcr.io/linuxserver/plex
tag: 1.42.1@sha256:28f18c27b6822328df994154dbf7c0f511032d9f91bbd10881030b706afd8593
tag: 1.41.9@sha256:3f124bbd4d58a588187a87b75427cba35d5de05a071f2252f908abbb95edf7bb
pullPolicy: IfNotPresent
env:
- name: TZ

View File

@@ -8,10 +8,12 @@ keywords:
home: https://wiki.alexlebens.dev/s/f483a06b-860b-423c-8d51-a1ce82e0fd43
sources:
- https://github.com/gitroomhq/postiz-app
- https://github.com/valkey-io/valkey
- https://github.com/cloudflare/cloudflared
- https://github.com/cloudnative-pg/cloudnative-pg
- https://github.com/gitroomhq/postiz-app/pkgs/container/postiz-app
- https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
- https://github.com/bitnami/charts/tree/main/bitnami/valkey
- https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/cloudflared
- https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/postgres-cluster
maintainers:
@@ -21,9 +23,12 @@ dependencies:
alias: postiz
repository: https://bjw-s-labs.github.io/helm-charts/
version: 4.2.0
- name: valkey
version: 3.0.22
repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
- name: cloudflared
repository: oci://harbor.alexlebens.net/helm-charts
version: 1.20.1
version: 1.18.0
- name: postgres-cluster
alias: postgres-17-cluster
version: 5.1.0

View File

@@ -24,10 +24,10 @@ spec:
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: postiz-redis-config
name: postiz-valkey-config
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: postiz-redis-config
app.kubernetes.io/name: postiz-valkey-config
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec:
@@ -35,27 +35,27 @@ spec:
kind: ClusterSecretStore
name: vault
data:
- secretKey: REDIS_URL
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/postiz/redis
metadataPolicy: None
property: REDIS_URL
- secretKey: user
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/postiz/redis
key: /cl01tl/postiz/valkey
metadataPolicy: None
property: user
- secretKey: password
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/postiz/redis
key: /cl01tl/postiz/valkey
metadataPolicy: None
property: password
- secretKey: REDIS_URL
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/postiz/valkey
metadataPolicy: None
property: REDIS_URL
---
apiVersion: external-secrets.io/v1

View File

@@ -1,35 +0,0 @@
apiVersion: redis.redis.opstreelabs.in/v1beta2
kind: RedisReplication
metadata:
name: redis-replication-postiz
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: redis-replication-postiz
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec:
clusterSize: 3
podSecurityContext:
runAsUser: 1000
fsGroup: 1000
kubernetesConfig:
image: quay.io/opstree/redis:v8.0.3
imagePullPolicy: IfNotPresent
redisSecret:
name: postiz-redis-config
key: password
resources:
requests:
cpu: 50m
memory: 128Mi
storage:
volumeClaimTemplate:
spec:
storageClassName: ceph-block
accessModes: ["ReadWriteOnce"]
resources:
requests:
storage: 1Gi
redisExporter:
enabled: true
image: quay.io/opstree/redis-exporter:v1.48.0

View File

@@ -1,19 +0,0 @@
apiVersion: monitoring.coreos.com/v1
kind: ServiceMonitor
metadata:
name: redis-replication-postiz
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: redis-replication-postiz
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
redis-operator: "true"
env: production
spec:
selector:
matchLabels:
redis_setup_type: replication
endpoints:
- port: redis-exporter
interval: 30s
scrapeTimeout: 10s

View File

@@ -9,7 +9,7 @@ postiz:
main:
image:
repository: ghcr.io/gitroomhq/postiz-app
tag: v2.5.4
tag: v2.0.6
pullPolicy: IfNotPresent
env:
- name: MAIN_URL
@@ -31,7 +31,7 @@ postiz:
- name: REDIS_URL
valueFrom:
secretKeyRef:
name: postiz-redis-config
name: postiz-valkey-config
key: REDIS_URL
- name: BACKEND_INTERNAL_URL
value: http://localhost:3000
@@ -102,6 +102,30 @@ postiz:
main:
- path: /uploads
readOnly: false
valkey:
architecture: replication
auth:
enabled: true
existingSecret: postiz-valkey-config
existingSecretPasswordKey: password
usePasswordFiles: false
primary:
resources:
requests:
cpu: 100m
memory: 64Mi
persistence:
enabled: true
size: 1Gi
replica:
replicaCount: 1
resources:
requests:
cpu: 100m
memory: 64Mi
persistence:
enabled: true
size: 1Gi
cloudflared:
name: cloudflared-postiz
existingSecretName: postiz-cloudflared-secret

View File

@@ -20,7 +20,7 @@ prowlarr:
main:
image:
repository: ghcr.io/linuxserver/prowlarr
tag: 2.0.5@sha256:4f2a6d597845b2f3e19284b1d982b3e0b4bd7c22472c2979c956aa198b83f472
tag: 1.37.0@sha256:d2462d470891c70073e31d158657a9b247b317c90238c40534d8be8f98671057
pullPolicy: IfNotPresent
env:
- name: TZ

View File

@@ -15,7 +15,7 @@ radarr-4k:
main:
image:
repository: ghcr.io/linuxserver/radarr
tag: 5.27.5@sha256:3ebb31bce86870dbcc15a5db3fba8864e302310cb2adb70476b0b64c1b3dc6dc
tag: 5.26.2@sha256:ae89f05ad7023258730ed62f5fcca63aab1e27ee5adcca1edb55d716f7cef356
pullPolicy: IfNotPresent
env:
- name: TZ
@@ -31,7 +31,7 @@ radarr-4k:
metrics:
image:
repository: ghcr.io/onedr0p/exportarr
tag: v2.3.0
tag: v2.2.0
pullPolicy: IfNotPresent
args: ["radarr"]
env:

View File

@@ -13,7 +13,7 @@ radarr-anime:
main:
image:
repository: ghcr.io/linuxserver/radarr
tag: 5.27.5@sha256:3ebb31bce86870dbcc15a5db3fba8864e302310cb2adb70476b0b64c1b3dc6dc
tag: 5.26.2@sha256:ae89f05ad7023258730ed62f5fcca63aab1e27ee5adcca1edb55d716f7cef356
pullPolicy: IfNotPresent
env:
- name: TZ
@@ -29,7 +29,7 @@ radarr-anime:
metrics:
image:
repository: ghcr.io/onedr0p/exportarr
tag: v2.3.0
tag: v2.2.0
pullPolicy: IfNotPresent
args: ["radarr"]
env:

View File

@@ -13,7 +13,7 @@ radarr-standup:
main:
image:
repository: ghcr.io/linuxserver/radarr
tag: 5.27.5@sha256:3ebb31bce86870dbcc15a5db3fba8864e302310cb2adb70476b0b64c1b3dc6dc
tag: 5.26.2@sha256:ae89f05ad7023258730ed62f5fcca63aab1e27ee5adcca1edb55d716f7cef356
pullPolicy: IfNotPresent
env:
- name: TZ
@@ -29,7 +29,7 @@ radarr-standup:
metrics:
image:
repository: ghcr.io/onedr0p/exportarr
tag: v2.3.0
tag: v2.2.0
pullPolicy: IfNotPresent
args: ["radarr"]
env:

View File

@@ -15,7 +15,7 @@ radarr:
main:
image:
repository: ghcr.io/linuxserver/radarr
tag: 5.27.5@sha256:3ebb31bce86870dbcc15a5db3fba8864e302310cb2adb70476b0b64c1b3dc6dc
tag: 5.26.2@sha256:ae89f05ad7023258730ed62f5fcca63aab1e27ee5adcca1edb55d716f7cef356
pullPolicy: IfNotPresent
env:
- name: TZ
@@ -31,7 +31,7 @@ radarr:
metrics:
image:
repository: ghcr.io/onedr0p/exportarr
tag: v2.3.0
tag: v2.2.0
pullPolicy: IfNotPresent
args: ["radarr"]
env:

View File

@@ -58,7 +58,7 @@ roundcube:
nginx:
image:
repository: nginx
tag: 1.29.1-alpine
tag: 1.29.0-alpine
pullPolicy: IfNotPresent
env:
- name: NGINX_HOST

View File

@@ -8,7 +8,9 @@ keywords:
home: https://wiki.alexlebens.dev/s/6c6da68a-8725-4439-93c8-990ce824be54
sources:
- https://github.com/searxng/searxng
- https://github.com/valkey-io/valkey
- https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
- https://github.com/bitnami/charts/tree/main/bitnami/valkey
maintainers:
- name: alexlebens
dependencies:
@@ -16,5 +18,8 @@ dependencies:
alias: searxng
repository: https://bjw-s-labs.github.io/helm-charts/
version: 4.2.0
- name: valkey
version: 3.0.22
repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/searxng.png
appVersion: 1.0.0

View File

@@ -1,32 +0,0 @@
apiVersion: redis.redis.opstreelabs.in/v1beta2
kind: RedisReplication
metadata:
name: redis-replication-searxng
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: redis-replication-searxng
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec:
clusterSize: 3
podSecurityContext:
runAsUser: 1000
fsGroup: 1000
kubernetesConfig:
image: quay.io/opstree/redis:v8.0.3
imagePullPolicy: IfNotPresent
resources:
requests:
cpu: 50m
memory: 128Mi
storage:
volumeClaimTemplate:
spec:
storageClassName: ceph-block
accessModes: ["ReadWriteOnce"]
resources:
requests:
storage: 1Gi
redisExporter:
enabled: true
image: quay.io/opstree/redis-exporter:v1.48.0

View File

@@ -1,19 +0,0 @@
apiVersion: monitoring.coreos.com/v1
kind: ServiceMonitor
metadata:
name: redis-replication-searxng
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: redis-replication-searxng
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
redis-operator: "true"
env: production
spec:
selector:
matchLabels:
redis_setup_type: replication
endpoints:
- port: redis-exporter
interval: 30s
scrapeTimeout: 10s

View File

@@ -9,7 +9,7 @@ searxng:
main:
image:
repository: searxng/searxng
tag: latest@sha256:4e9637874bcb714bb47c150256604273c16a2777b6bf7a14fb5a4e544731385d
tag: latest@sha256:8ee06648ea025780c4805cf58fd66e48245bf7e81466751afae4bf84e5ef29ca
pullPolicy: IfNotPresent
env:
- name: SEARXNG_BASE_URL
@@ -43,7 +43,7 @@ searxng:
main:
image:
repository: searxng/searxng
tag: latest@sha256:4e9637874bcb714bb47c150256604273c16a2777b6bf7a14fb5a4e544731385d
tag: latest@sha256:8ee06648ea025780c4805cf58fd66e48245bf7e81466751afae4bf84e5ef29ca
pullPolicy: IfNotPresent
env:
- name: SEARXNG_BASE_URL
@@ -53,7 +53,7 @@ searxng:
- name: SEARXNG_HOSTNAME
value: searxng.alexlebens.net
- name: SEARXNG_REDIS_URL
value: redis://redis-replication-searxng-master.searxng:6379/0
value: redis://searxng-valkey-primary.searxng:6379/0
- name: UWSGI_WORKERS
value: 4
- name: UWSGI_THREADS
@@ -111,3 +111,25 @@ searxng:
main:
- path: /etc/searxng
readOnly: false
valkey:
architecture: replication
auth:
enabled: false
usePasswordFiles: false
primary:
resources:
requests:
cpu: 100m
memory: 64Mi
persistence:
enabled: true
size: 1Gi
replica:
replicaCount: 1
resources:
requests:
cpu: 100m
memory: 64Mi
persistence:
enabled: true
size: 1Gi

View File

@@ -1,28 +0,0 @@
apiVersion: v2
name: site-documentation
version: 1.0.0
description: Site Documentation
keywords:
- site-documentation
- astro
home: https://wiki.alexlebens.dev/s/1c39adb6-e0c6-4b01-b71f-278631adf584
sources:
- https://github.com/alexlebens/site-documentation
- https://github.com/withastro/astro
- https://github.com/cloudflare/cloudflared
- https://github.com/alexlebens/site-documentation/pkgs/container/site-documentation
- https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
- https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/cloudflared
maintainers:
- name: alexlebens
dependencies:
- name: app-template
alias: site-documentation
repository: https://bjw-s-labs.github.io/helm-charts/
version: 4.2.0
- name: cloudflared
alias: cloudflared-site
repository: oci://harbor.alexlebens.net/helm-charts
version: 1.20.1
icon: https://d21zlbwtcn424f.cloudfront.net/logo-new-round.png
appVersion: 0.8.1

View File

@@ -1,21 +0,0 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: site-documentation-cloudflared-api-secret
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: site-documentation-cloudflared-api-secret
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
data:
- secretKey: cf-tunnel-token
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cloudflare/tunnels/site-documentation
metadataPolicy: None
property: token

View File

@@ -1,30 +0,0 @@
site-documentation:
global:
fullnameOverride: site-documentation
controllers:
main:
type: deployment
replicas: 3
strategy: RollingUpdate
revisionHistoryLimit: 3
containers:
main:
image:
repository: harbor.alexlebens.net/images/site-documentation
tag: 0.0.1
pullPolicy: IfNotPresent
resources:
requests:
cpu: 10m
memory: 128Mi
service:
main:
controller: main
ports:
http:
port: 80
targetPort: 4321
protocol: HTTP
cloudflared-site:
name: cloudflared-site
existingSecretName: site-documentation-cloudflared-api-secret

View File

@@ -23,6 +23,6 @@ dependencies:
- name: cloudflared
alias: cloudflared-site
repository: oci://harbor.alexlebens.net/helm-charts
version: 1.20.1
version: 1.18.0
icon: https://d21zlbwtcn424f.cloudfront.net/logo-new-round.png
appVersion: 2.0.1
appVersion: 0.8.1

View File

@@ -11,7 +11,7 @@ site-profile:
main:
image:
repository: harbor.alexlebens.net/images/site-profile
tag: 2.0.5
tag: 1.0.1
pullPolicy: IfNotPresent
resources:
requests:

View File

@@ -28,7 +28,7 @@ slskd:
main:
image:
repository: slskd/slskd
tag: 0.23.2
tag: 0.23.1
pullPolicy: IfNotPresent
env:
- name: TZ
@@ -94,7 +94,7 @@ slskd:
main:
image:
repository: mrusse08/soularr
tag: latest@sha256:894210817cd89dd410fa603be2744ca81c593b9eaa542639a7894f2df008a788
tag: latest@sha256:da225f2b1042865c7223b3ee3e6d53e496eecc24566f60e48ef239396f54898a
pullPolicy: IfNotPresent
env:
- name: TZ

View File

@@ -13,7 +13,7 @@ sonarr-4k:
main:
image:
repository: ghcr.io/linuxserver/sonarr
tag: 4.0.15@sha256:e00e87e0e7c24fdc992093756f120a6ab292790b6a637ff3641bf813091cd726
tag: 4.0.15@sha256:c0836f49c20000e603170dc95d74c2527e690d50309977d94fc171eaa49351a4
pullPolicy: IfNotPresent
env:
- name: TZ
@@ -29,7 +29,7 @@ sonarr-4k:
metrics:
image:
repository: ghcr.io/onedr0p/exportarr
tag: v2.3.0
tag: v2.2.0
pullPolicy: IfNotPresent
args: ["sonarr"]
env:

View File

@@ -13,7 +13,7 @@ sonarr-anime:
main:
image:
repository: ghcr.io/linuxserver/sonarr
tag: 4.0.15@sha256:e00e87e0e7c24fdc992093756f120a6ab292790b6a637ff3641bf813091cd726
tag: 4.0.15@sha256:c0836f49c20000e603170dc95d74c2527e690d50309977d94fc171eaa49351a4
pullPolicy: IfNotPresent
env:
- name: TZ
@@ -29,7 +29,7 @@ sonarr-anime:
metrics:
image:
repository: ghcr.io/onedr0p/exportarr
tag: v2.3.0
tag: v2.2.0
pullPolicy: IfNotPresent
args: ["sonarr"]
env:

View File

@@ -13,7 +13,7 @@ sonarr:
main:
image:
repository: ghcr.io/linuxserver/sonarr
tag: 4.0.15@sha256:e00e87e0e7c24fdc992093756f120a6ab292790b6a637ff3641bf813091cd726
tag: 4.0.15@sha256:c0836f49c20000e603170dc95d74c2527e690d50309977d94fc171eaa49351a4
pullPolicy: IfNotPresent
env:
- name: TZ
@@ -29,7 +29,7 @@ sonarr:
metrics:
image:
repository: ghcr.io/onedr0p/exportarr
tag: v2.3.0
tag: v2.2.0
pullPolicy: IfNotPresent
args: ["sonarr"]
env:

View File

@@ -11,7 +11,7 @@ tautulli:
main:
image:
repository: ghcr.io/tautulli/tautulli
tag: v2.15.3
tag: v2.15.2
pullPolicy: IfNotPresent
env:
- name: PUID

View File

@@ -9,7 +9,7 @@ tdarr:
main:
image:
repository: ghcr.io/haveagitgat/tdarr
tag: 2.46.01
tag: 2.45.01
pullPolicy: IfNotPresent
env:
- name: TZ
@@ -48,7 +48,7 @@ tdarr:
main:
image:
repository: ghcr.io/haveagitgat/tdarr_node
tag: 2.46.01
tag: 2.45.01
pullPolicy: IfNotPresent
env:
- name: TZ

View File

@@ -11,8 +11,10 @@ home: https://wiki.alexlebens.dev/s/9a5f89bb-3cae-43ab-b651-d39f69a05e93
sources:
- https://github.com/tubearchivist/tubearchivist
- https://github.com/elastic/elasticsearch
- https://github.com/valkey-io/valkey
- https://hub.docker.com/r/bbilly1/tubearchivist
- https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
- https://github.com/bitnami/charts/tree/main/bitnami/valkey
maintainers:
- name: alexlebens
dependencies:
@@ -20,5 +22,8 @@ dependencies:
alias: tubearchivist
repository: https://bjw-s-labs.github.io/helm-charts/
version: 4.2.0
- name: valkey
version: 3.0.22
repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/tube-archivist.png
appVersion: v0.5.2

View File

@@ -9,7 +9,7 @@ tubearchivist:
main:
image:
repository: bbilly1/tubearchivist
tag: v0.5.7
tag: v0.5.4
pullPolicy: IfNotPresent
env:
- name: TZ
@@ -23,7 +23,7 @@ tubearchivist:
- name: ES_DISABLE_VERIFY_SSL
value: true
- name: REDIS_CON
value: redis://redis-replication-tubearchivist-master.tubearchivist:6379
value: redis://tubearchivist-valkey-primary.tubearchivist:6379
- name: TA_HOST
value: https://tubearchivist.alexlebens.net http://tubearchivist.tubearchivist:80/
- name: TA_PORT
@@ -105,3 +105,25 @@ tubearchivist:
main:
- path: /youtube
readOnly: false
valkey:
architecture: replication
auth:
enabled: false
usePasswordFiles: false
primary:
resources:
requests:
cpu: 100m
memory: 64Mi
persistence:
enabled: true
size: 1Gi
replica:
replicaCount: 1
resources:
requests:
cpu: 100m
memory: 64Mi
persistence:
enabled: true
size: 1Gi

View File

@@ -25,7 +25,7 @@ dependencies:
- name: cloudflared
alias: cloudflared
repository: oci://harbor.alexlebens.net/helm-charts
version: 1.20.1
version: 1.18.0
- name: postgres-cluster
alias: postgres-17-cluster
version: 5.1.0

View File

@@ -9,7 +9,7 @@ vaultwarden:
main:
image:
repository: vaultwarden/server
tag: 1.34.3
tag: 1.34.2
pullPolicy: IfNotPresent
env:
- name: DOMAIN

View File

@@ -8,10 +8,12 @@ keywords:
- jellyfin
home: https://wiki.alexlebens.dev/s/74f31779-734e-42d0-852e-efd57ebdc797
sources:
- https://github.com/FuzzyGrim/Yamtrack
- https://github.com/FuzzyGrim/Yamtrack/
- https://github.com/valkey-io/valkey
- https://github.com/cloudnative-pg/cloudnative-pg
- https://github.com/FuzzyGrim/Yamtrack/pkgs/container/yamtrack
- https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
- https://github.com/bitnami/charts/tree/main/bitnami/valkey
- https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/postgres-cluster
maintainers:
- name: alexlebens
@@ -20,6 +22,9 @@ dependencies:
alias: yamtrack
repository: https://bjw-s-labs.github.io/helm-charts/
version: 4.2.0
- name: valkey
version: 3.0.22
repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
- name: postgres-cluster
alias: postgres-17-cluster
version: 5.1.0

View File

@@ -31,7 +31,7 @@ yamtrack:
name: yamtrack-config-secret
key: SECRET
- name: REDIS_URL
value: redis://redis-replication-yamtrack-master.yamtrack:6379
value: redis://redis-replication-yamtrack-headless.yamtrack:6379
- name: DB_USER
valueFrom:
secretKeyRef:
@@ -69,6 +69,28 @@ yamtrack:
port: 80
targetPort: 8000
protocol: HTTP
valkey:
architecture: replication
auth:
enabled: false
usePasswordFiles: false
primary:
resources:
requests:
cpu: 100m
memory: 64Mi
persistence:
enabled: true
size: 1Gi
replica:
replicaCount: 1
resources:
requests:
cpu: 100m
memory: 64Mi
persistence:
enabled: true
size: 1Gi
postgres-17-cluster:
mode: standalone
cluster:

View File

@@ -15,7 +15,7 @@ maintainers:
- name: alexlebens
dependencies:
- name: argo-cd
version: 8.3.3
version: 8.2.3
repository: https://argoproj.github.io/argo-helm
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
appVersion: 3.0.0

View File

@@ -18,7 +18,7 @@ maintainers:
- name: alexlebens
dependencies:
- name: argo-workflows
version: 0.45.23
version: 0.45.21
repository: https://argoproj.github.io/argo-helm
- name: argo-events
version: 2.4.16

View File

@@ -14,7 +14,7 @@ maintainers:
- name: alexlebens
dependencies:
- name: headlamp
version: 0.34.0
version: 0.33.0
repository: https://kubernetes-sigs.github.io/headlamp/
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/headlamp.png
appVersion: 0.30.1

View File

@@ -19,7 +19,7 @@ maintainers:
dependencies:
- name: gatus
repository: https://twin.github.io/helm-charts
version: 1.3.1
version: 1.3.0
- name: postgres-cluster
alias: postgres-17-cluster
version: 5.1.0

View File

@@ -7,7 +7,7 @@ gatus:
enabled: true
image:
repository: ghcr.io/twin/gatus
tag: v5.23.2
tag: v5.20.0
annotations:
reloader.stakater.com/auto: "true"
service:
@@ -310,7 +310,6 @@ gatus:
- name: postiz
url: https://postiz.alexlebens.dev
<<: *defaults
interval: 120s
group: external
- name: matrix
url: https://chat.alexlebens.dev

View File

@@ -12,13 +12,22 @@ sources:
- https://github.com/grafana/grafana-operator
- https://github.com/cloudnative-pg/cloudnative-pg
- https://github.com/grafana/grafana-operator/tree/master/deploy/helm/grafana-operator
- https://github.com/bitnami/charts/tree/main/bitnami/valkey
- https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/postgres-cluster
maintainers:
- name: alexlebens
dependencies:
- name: grafana-operator
version: v5.19.4
version: v5.18.0
repository: https://grafana.github.io/helm-charts
- name: valkey
alias: valkey-unified-alerting
version: 3.0.22
repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
- name: valkey
alias: valkey-remote-cache
version: 3.0.22
repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
- name: postgres-cluster
alias: postgres-17-cluster
version: 5.1.0

View File

@@ -45,10 +45,10 @@ spec:
password: ${DB_PASSWORD}
remote_cache:
type: redis
connstr: addr=redis-replication-remote-cache-master.grafana-operator:6379,pool_size=100,db=0,ssl=false
connstr: addr=remote-cache-valkey-primary.grafana-operator:6379,pool_size=100,db=0,ssl=false
unified_alerting:
enabled: "true"
ha_redis_address: redis-replication-unified-alerting-master.grafana-operator:6379
ha_redis_address: unified-alerting-valkey-primary.grafana-operator:6379
deployment:
spec:
replicas: 3

View File

@@ -1,66 +0,0 @@
apiVersion: redis.redis.opstreelabs.in/v1beta2
kind: RedisReplication
metadata:
name: redis-replication-unified-alerting
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: redis-replication-unified-alerting
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec:
clusterSize: 3
podSecurityContext:
runAsUser: 1000
fsGroup: 1000
kubernetesConfig:
image: quay.io/opstree/redis:v8.0.3
imagePullPolicy: IfNotPresent
resources:
requests:
cpu: 50m
memory: 128Mi
storage:
volumeClaimTemplate:
spec:
storageClassName: ceph-block
accessModes: ["ReadWriteOnce"]
resources:
requests:
storage: 1Gi
redisExporter:
enabled: true
image: quay.io/opstree/redis-exporter:v1.48.0
---
apiVersion: redis.redis.opstreelabs.in/v1beta2
kind: RedisReplication
metadata:
name: redis-replication-remote-cache
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: redis-replication-remote-cache
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec:
clusterSize: 3
podSecurityContext:
runAsUser: 1000
fsGroup: 1000
kubernetesConfig:
image: quay.io/opstree/redis:v8.0.3
imagePullPolicy: IfNotPresent
resources:
requests:
cpu: 50m
memory: 128Mi
storage:
volumeClaimTemplate:
spec:
storageClassName: ceph-block
accessModes: ["ReadWriteOnce"]
resources:
requests:
storage: 1Gi
redisExporter:
enabled: true
image: quay.io/opstree/redis-exporter:v1.48.0

View File

@@ -1,19 +0,0 @@
apiVersion: monitoring.coreos.com/v1
kind: ServiceMonitor
metadata:
name: redis-replication-grafana-operator
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: redis-replication-grafana-operator
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
redis-operator: "true"
env: production
spec:
selector:
matchLabels:
redis_setup_type: replication
endpoints:
- port: redis-exporter
interval: 30s
scrapeTimeout: 10s

View File

@@ -12,6 +12,50 @@ grafana-operator:
enabled: true
dashboard:
enabled: false
valkey-unified-alerting:
fullnameOverride: unified-alerting-valkey
architecture: standalone
auth:
enabled: false
usePasswordFiles: false
primary:
resources:
requests:
cpu: 100m
memory: 64Mi
persistence:
enabled: true
size: 1Gi
replica:
resources:
requests:
cpu: 100m
memory: 64Mi
persistence:
enabled: false
valkey-remote-cache:
fullnameOverride: remote-cache-valkey
architecture: replication
auth:
enabled: false
usePasswordFiles: false
primary:
resources:
requests:
cpu: 100m
memory: 64Mi
persistence:
enabled: true
size: 1Gi
replica:
replicaCount: 1
resources:
requests:
cpu: 100m
memory: 64Mi
persistence:
enabled: true
size: 1Gi
postgres-17-cluster:
mode: standalone
cluster:

View File

@@ -12,18 +12,21 @@ keywords:
home: https://wiki.alexlebens.dev/s/cd9fc3a4-aa88-4285-8886-91a6c5aecf7d
sources:
- https://github.com/prometheus/prometheus
- https://github.com/alexbakker/alertmanager-ntfy
- https://github.com/prometheus-community/helm-charts/tree/main/charts/kube-prometheus-stack
- https://github.com/bjw-s/helm-charts/blob/main/charts/other/app-template
- https://github.com/bitnami/charts/tree/main/bitnami/valkey
maintainers:
- name: alexlebens
dependencies:
- name: kube-prometheus-stack
version: 77.5.0
version: 75.15.1
repository: oci://ghcr.io/prometheus-community/charts
- name: app-template
alias: ntfy-alertmanager
repository: https://bjw-s-labs.github.io/helm-charts/
version: 4.2.0
- name: valkey
alias: valkey-ntfy-alertmanager
version: 3.0.22
repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/prometheus.png
appVersion: v0.82.0

View File

@@ -1,32 +0,0 @@
apiVersion: redis.redis.opstreelabs.in/v1beta2
kind: RedisReplication
metadata:
name: redis-replication-kube-prometheus-stack
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: redis-replication-kube-prometheus-stack
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec:
clusterSize: 3
podSecurityContext:
runAsUser: 1000
fsGroup: 1000
kubernetesConfig:
image: quay.io/opstree/redis:v8.0.3
imagePullPolicy: IfNotPresent
resources:
requests:
cpu: 50m
memory: 128Mi
storage:
volumeClaimTemplate:
spec:
storageClassName: ceph-block
accessModes: ["ReadWriteOnce"]
resources:
requests:
storage: 1Gi
redisExporter:
enabled: true
image: quay.io/opstree/redis-exporter:v1.48.0

View File

@@ -1,19 +0,0 @@
apiVersion: monitoring.coreos.com/v1
kind: ServiceMonitor
metadata:
name: redis-replication-kube-prometheus-stack
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: redis-replication-kube-prometheus-stack
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
redis-operator: "true"
env: production
spec:
selector:
matchLabels:
redis_setup_type: replication
endpoints:
- port: redis-exporter
interval: 30s
scrapeTimeout: 10s

View File

@@ -145,3 +145,26 @@ ntfy-alertmanager:
readOnly: true
mountPropagation: None
subPath: config
valkey-ntfy-alertmanager:
fullnameOverride: ntfy-alertmanager-valkey
architecture: replication
auth:
enabled: false
usePasswordFiles: false
primary:
resources:
requests:
cpu: 100m
memory: 64Mi
persistence:
enabled: true
size: 1Gi
replica:
replicaCount: 1
resources:
requests:
cpu: 100m
memory: 64Mi
persistence:
enabled: true
size: 1Gi

View File

@@ -16,7 +16,7 @@ maintainers:
- name: alexlebens
dependencies:
- name: loki
version: 6.38.0
version: 6.33.0
repository: https://grafana.github.io/helm-charts
- name: promtail
version: 6.17.0

View File

@@ -36,7 +36,7 @@ shelly-plug:
main:
image:
repository: php
tag: 8.4.12-apache-bookworm
tag: 8.4.10-apache-bookworm
pullPolicy: IfNotPresent
env:
- name: SHELLY_HOSTNAME

View File

@@ -16,7 +16,7 @@ maintainers:
- name: alexlebens
dependencies:
- name: trivy-operator
version: 0.30.0
version: 0.29.3
repository: https://aquasecurity.github.io/helm-charts/
icon: https://raw.githubusercontent.com/aquasecurity/trivy/main/docs/imgs/logo.png
appVersion: v0.26.1

View File

@@ -7,7 +7,7 @@ trivy-operator:
clusterSbomCacheEnabled: false
configAuditScannerEnabled: true
rbacAssessmentScannerEnabled: true
infraAssessmentScannerEnabled: false
infraAssessmentScannerEnabled: true
clusterComplianceEnabled: false
serviceMonitor:
enabled: true
@@ -16,7 +16,7 @@ trivy-operator:
image:
registry: mirror.gcr.io
repository: aquasec/trivy
tag: 0.66.0
tag: 0.64.1
storageClassEnabled: true
storageClassName: ceph-block
storageSize: "5Gi"

View File

@@ -9,7 +9,7 @@ unpoller:
main:
image:
repository: ghcr.io/unpoller/unpoller
tag: v2.15.4
tag: v2.15.3
pullPolicy: IfNotPresent
env:
- name: UP_UNIFI_CONTROLLER_0_SAVE_ALARMS

View File

@@ -21,12 +21,12 @@ maintainers:
- name: alexlebens
dependencies:
- name: authentik
version: 2025.8.1
version: 2025.6.4
repository: https://charts.goauthentik.io/
- name: cloudflared
alias: cloudflared
repository: oci://harbor.alexlebens.net/helm-charts
version: 1.20.1
version: 1.18.0
- name: postgres-cluster
alias: postgres-17-cluster
version: 5.1.0

View File

@@ -1,32 +0,0 @@
apiVersion: redis.redis.opstreelabs.in/v1beta2
kind: RedisReplication
metadata:
name: redis-replication-authentik
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: redis-replication-authentik
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec:
clusterSize: 3
podSecurityContext:
runAsUser: 1000
fsGroup: 1000
kubernetesConfig:
image: quay.io/opstree/redis:v8.0.3
imagePullPolicy: IfNotPresent
resources:
requests:
cpu: 50m
memory: 128Mi
storage:
volumeClaimTemplate:
spec:
storageClassName: ceph-block
accessModes: ["ReadWriteOnce"]
resources:
requests:
storage: 1Gi
redisExporter:
enabled: true
image: quay.io/opstree/redis-exporter:v1.48.0

View File

@@ -1,19 +0,0 @@
apiVersion: monitoring.coreos.com/v1
kind: ServiceMonitor
metadata:
name: redis-replication-authentik
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: redis-replication-authentik
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
redis-operator: "true"
env: production
spec:
selector:
matchLabels:
redis_setup_type: replication
endpoints:
- port: redis-exporter
interval: 30s
scrapeTimeout: 10s

View File

@@ -26,9 +26,6 @@ authentik:
secretKeyRef:
name: authentik-postgresql-17-cluster-app
key: password
authentik:
redis:
host: redis-replication-authentik-master
server:
name: server
replicas: 1
@@ -47,7 +44,7 @@ authentik:
postgresql:
enabled: false
redis:
enabled: false
enabled: true
cloudflared:
existingSecretName: authentik-cloudflared-secret
postgres-17-cluster:

View File

@@ -12,7 +12,7 @@ sources:
- https://github.com/external-secrets/external-secrets/tree/main/deploy/charts/external-secrets
dependencies:
- name: external-secrets
version: 0.19.2
version: 0.18.2
repository: https://charts.external-secrets.io
icon: https://avatars.githubusercontent.com/u/68335991?s=48&v=4
appVersion: 0.17.0

View File

@@ -12,6 +12,7 @@ sources:
- https://github.com/renovatebot/renovate
- https://github.com/Angatar/s3cmd
- https://github.com/meilisearch/meilisearch
- https://github.com/valkey-io/valkey
- https://github.com/cloudflare/cloudflared
- https://github.com/cloudnative-pg/cloudnative-pg
- https://hub.docker.com/r/gitea/gitea
@@ -20,13 +21,14 @@ sources:
- https://gitea.com/gitea/helm-chart
- https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
- https://github.com/meilisearch/meilisearch-kubernetes/tree/main/charts/meilisearch
- https://github.com/bitnami/charts/tree/main/bitnami/valkey
- https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/cloudflared
- https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/postgres-cluster
maintainers:
- name: alexlebens
dependencies:
- name: gitea
version: 12.2.0
version: 12.1.2
repository: https://dl.gitea.io/charts/
- name: gitea-actions
repository: oci://harbor.alexlebens.net/helm-charts
@@ -36,12 +38,19 @@ dependencies:
repository: https://bjw-s-labs.github.io/helm-charts/
version: 4.2.0
- name: meilisearch
version: 0.17.0
version: 0.14.0
repository: https://meilisearch.github.io/meilisearch-kubernetes
- name: valkey
version: 3.0.22
repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
- name: valkey
alias: valkey-renovate
version: 3.0.22
repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
- name: cloudflared
alias: cloudflared
repository: oci://harbor.alexlebens.net/helm-charts
version: 1.20.1
version: 1.18.0
- name: postgres-cluster
alias: postgres-17-cluster
version: 5.1.0

View File

@@ -1,66 +0,0 @@
apiVersion: redis.redis.opstreelabs.in/v1beta2
kind: RedisReplication
metadata:
name: redis-replication-gitea
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: redis-replication-gitea
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec:
clusterSize: 3
podSecurityContext:
runAsUser: 1000
fsGroup: 1000
kubernetesConfig:
image: quay.io/opstree/redis:v8.0.3
imagePullPolicy: IfNotPresent
resources:
requests:
cpu: 50m
memory: 128Mi
storage:
volumeClaimTemplate:
spec:
storageClassName: ceph-block
accessModes: ["ReadWriteOnce"]
resources:
requests:
storage: 5Gi
redisExporter:
enabled: true
image: quay.io/opstree/redis-exporter:v1.48.0
---
apiVersion: redis.redis.opstreelabs.in/v1beta2
kind: RedisReplication
metadata:
name: redis-replication-renovate
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: redis-replication-renovate
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec:
clusterSize: 3
podSecurityContext:
runAsUser: 1000
fsGroup: 1000
kubernetesConfig:
image: quay.io/opstree/redis:v8.0.3
imagePullPolicy: IfNotPresent
resources:
requests:
cpu: 50m
memory: 128Mi
storage:
volumeClaimTemplate:
spec:
storageClassName: ceph-block
accessModes: ["ReadWriteOnce"]
resources:
requests:
storage: 1Gi
redisExporter:
enabled: true
image: quay.io/opstree/redis-exporter:v1.48.0

View File

@@ -16,24 +16,3 @@ spec:
- { key: app.kubernetes.io/controller, operator: NotIn, values: [backup] }
endpoints:
- port: http
---
apiVersion: monitoring.coreos.com/v1
kind: ServiceMonitor
metadata:
name: redis-replication-gitea
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: redis-replication-gitea
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
redis-operator: "true"
env: production
spec:
selector:
matchLabels:
redis_setup_type: replication
endpoints:
- port: redis-exporter
interval: 30s
scrapeTimeout: 10s

View File

@@ -4,7 +4,7 @@ gitea:
replicaCount: 3
image:
repository: gitea/gitea
tag: 1.24.5
tag: 1.24.3
service:
http:
type: ClusterIP
@@ -18,7 +18,7 @@ gitea:
enabled: false
persistence:
storageClass: ceph-filesystem
size: 40Gi
size: 20Gi
accessModes:
- ReadWriteMany
extraVolumes:
@@ -76,13 +76,13 @@ gitea:
cache:
ENABLED: true
ADAPTER: redis
HOST: redis://redis-replication-gitea-master.gitea:6379
HOST: redis://gitea-valkey-primary.gitea:6379
queue:
TYPE: redis
CONN_STR: redis://redis-replication-gitea-master.gitea:6379
CONN_STR: redis://gitea-valkey-primary.gitea:6379
session:
PROVIDER: redis
PROVIDER_CONFIG: redis://redis-replication-gitea-master.gitea:6379
PROVIDER_CONFIG: redis://gitea-valkey-primary.gitea:6379
indexer:
ISSUE_INDEXER_ENABLED: true
ISSUE_INDEXER_TYPE: meilisearch
@@ -102,8 +102,6 @@ gitea:
THEMES: gitea-light,gitea-dark,gitea-auto,catppuccin-rosewater-auto,catppuccin-flamingo-auto,catppuccin-pink-auto,catppuccin-mauve-auto,catppuccin-red-auto,catppuccin-maroon-auto,catppuccin-peach-auto,catppuccin-yellow-auto,catppuccin-green-auto,catppuccin-teal-auto,catppuccin-sky-auto,catppuccin-sapphire-auto,catppuccin-blue-auto,catppuccin-lavender-auto,catppuccin-latte-rosewater,catppuccin-latte-flamingo,catppuccin-latte-pink,catppuccin-latte-mauve,catppuccin-latte-red,catppuccin-latte-maroon,catppuccin-latte-peach,catppuccin-latte-yellow,catppuccin-latte-green,catppuccin-latte-teal,catppuccin-latte-sky,catppuccin-latte-sapphire,catppuccin-latte-blue,catppuccin-latte-lavender,catppuccin-frappe-rosewater,catppuccin-frappe-flamingo,catppuccin-frappe-pink,catppuccin-frappe-mauve,catppuccin-frappe-red,catppuccin-frappe-maroon,catppuccin-frappe-peach,catppuccin-frappe-yellow,catppuccin-frappe-green,catppuccin-frappe-teal,catppuccin-frappe-sky,catppuccin-frappe-sapphire,catppuccin-frappe-blue,catppuccin-frappe-lavender,catppuccin-macchiato-rosewater,catppuccin-macchiato-flamingo,catppuccin-macchiato-pink,catppuccin-macchiato-mauve,catppuccin-macchiato-red,catppuccin-macchiato-maroon,catppuccin-macchiato-peach,catppuccin-macchiato-yellow,catppuccin-macchiato-green,catppuccin-macchiato-teal,catppuccin-macchiato-sky,catppuccin-macchiato-sapphire,catppuccin-macchiato-blue,catppuccin-macchiato-lavender,catppuccin-mocha-rosewater,catppuccin-mocha-flamingo,catppuccin-mocha-pink,catppuccin-mocha-mauve,catppuccin-mocha-red,catppuccin-mocha-maroon,catppuccin-mocha-peach,catppuccin-mocha-yellow,catppuccin-mocha-green,catppuccin-mocha-teal,catppuccin-mocha-sky,catppuccin-mocha-sapphire,catppuccin-mocha-blue,catppuccin-mocha-lavender
mirror:
DEFAULT_INTERVAL: 10m
repo-archive:
ENABLED: false
additionalConfigFromEnvs:
- name: GITEA__DATABASE__HOST
valueFrom:
@@ -193,8 +191,8 @@ backup:
initContainers:
backup:
image:
repository: bitnami/kubectl
tag: latest
repository: rancher/kubectl
tag: v1.33.3
pullPolicy: IfNotPresent
command:
- sh
@@ -211,7 +209,7 @@ backup:
s3-backup:
image:
repository: d3fk/s3cmd
tag: latest@sha256:eb0d4416fdb0dadbc29739b667c69914a1a53f29756f2fa3c05f549501d7b620
tag: latest@sha256:243e81a62890dcc76771240f38c7492365e72fee84b29692178337cfd80b2ce2
pullPolicy: IfNotPresent
command:
- /bin/sh
@@ -235,7 +233,7 @@ backup:
s3-prune:
image:
repository: d3fk/s3cmd
tag: latest@sha256:eb0d4416fdb0dadbc29739b667c69914a1a53f29756f2fa3c05f549501d7b620
tag: latest@sha256:243e81a62890dcc76771240f38c7492365e72fee84b29692178337cfd80b2ce2
pullPolicy: IfNotPresent
command:
- /bin/sh
@@ -313,6 +311,40 @@ meilisearch:
memory: 128Mi
serviceMonitor:
enabled: true
valkey:
architecture: replication
auth:
enabled: false
usePasswordFiles: false
primary:
resources:
requests:
cpu: 100m
memory: 64Mi
persistence:
enabled: true
size: 5Gi
replica:
resources:
requests:
cpu: 100m
memory: 64Mi
persistence:
enabled: true
size: 5Gi
valkey-renovate:
nameOverride: renovate-valkey
architecture: standalone
auth:
enabled: false
primary:
resources:
requests:
cpu: 100m
memory: 64Mi
persistence:
enabled: true
size: 1Gi
cloudflared:
existingSecretName: gitea-cloudflared-secret
postgres-17-cluster:

View File

@@ -16,6 +16,7 @@ sources:
- https://github.com/matrix-org/matrix-hookshot
- https://github.com/mautrix/discord
- https://github.com/mautrix/whatsapp
- https://github.com/valkey-io/valkey
- https://github.com/cloudflare/cloudflared
- https://github.com/cloudnative-pg/cloudnative-pg
- https://hub.docker.com/r/halfshot/matrix-hookshot
@@ -23,13 +24,14 @@ sources:
- https://mau.dev/mautrix/whatsapp/container_registry
- https://gitlab.com/ananace/charts/-/tree/master/charts/matrix-synapse
- https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
- https://github.com/bitnami/charts/tree/main/bitnami/valkey
- https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/cloudflared
- https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/postgres-cluster
maintainers:
- name: alexlebens
dependencies:
- name: matrix-synapse
version: 3.12.7
version: 3.12.5
repository: https://ananace.gitlab.io/charts
- name: app-template
alias: matrix-hookshot
@@ -43,13 +45,21 @@ dependencies:
# alias: mautrix-whatsapp
# repository: https://bjw-s-labs.github.io/helm-charts/
# version: 4.0.1
- name: valkey
alias: valkey-synapse
version: 3.0.22
repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
- name: valkey
alias: valkey-hookshot
version: 3.0.22
repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
- name: cloudflared
alias: cloudflared-synapse
version: 1.20.1
version: 1.18.0
repository: oci://harbor.alexlebens.net/helm-charts
- name: cloudflared
alias: cloudflared-hookshot
version: 1.20.1
version: 1.18.0
repository: oci://harbor.alexlebens.net/helm-charts
- name: postgres-cluster
alias: postgres-17-cluster

View File

@@ -179,10 +179,10 @@ spec:
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: matrix-synapse-redis-secret
name: matrix-synapse-valkey-secret
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: matrix-synapse-redis-secret
app.kubernetes.io/name: matrix-synapse-valkey-secret
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec:
@@ -194,7 +194,7 @@ spec:
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/matrix-synapse/redis
key: /cl01tl/matrix-synapse/valkey
metadataPolicy: None
property: password

View File

@@ -1,69 +0,0 @@
apiVersion: redis.redis.opstreelabs.in/v1beta2
kind: RedisReplication
metadata:
name: redis-replication-matrix-synapse
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: redis-replication-matrix-synapse
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec:
clusterSize: 3
podSecurityContext:
runAsUser: 1000
fsGroup: 1000
kubernetesConfig:
image: quay.io/opstree/redis:v8.0.3
imagePullPolicy: IfNotPresent
redisSecret:
name: matrix-synapse-redis-secret
key: password
resources:
requests:
cpu: 50m
memory: 128Mi
storage:
volumeClaimTemplate:
spec:
storageClassName: ceph-block
accessModes: ["ReadWriteOnce"]
resources:
requests:
storage: 1Gi
redisExporter:
enabled: true
image: quay.io/opstree/redis-exporter:v1.48.0
---
apiVersion: redis.redis.opstreelabs.in/v1beta2
kind: RedisReplication
metadata:
name: redis-replication-hookshot
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: redis-replication-hookshot
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec:
clusterSize: 3
podSecurityContext:
runAsUser: 1000
fsGroup: 1000
kubernetesConfig:
image: quay.io/opstree/redis:v8.0.3
imagePullPolicy: IfNotPresent
resources:
requests:
cpu: 50m
memory: 128Mi
storage:
volumeClaimTemplate:
spec:
storageClassName: ceph-block
accessModes: ["ReadWriteOnce"]
resources:
requests:
storage: 1Gi
redisExporter:
enabled: true
image: quay.io/opstree/redis-exporter:v1.48.0

View File

@@ -38,24 +38,3 @@ spec:
interval: 3m
scrapeTimeout: 1m
path: /metrics
---
apiVersion: monitoring.coreos.com/v1
kind: ServiceMonitor
metadata:
name: redis-replication-matrix-synapse
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: redis-replication-matrix-synapse
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
redis-operator: "true"
env: production
spec:
selector:
matchLabels:
redis_setup_type: replication
endpoints:
- port: redis-exporter
interval: 30s
scrapeTimeout: 10s

Some files were not shown because too many files have changed in this diff Show More