Update ghcr.io/moghtech/komodo-core Docker tag to v1.19.1

2025-08-26 20:03:41 +00:00
210 changed files with 848 additions and 1808 deletions
--- a/.gitea/workflows/lint-test-docker.yaml
+++ b/.gitea/workflows/lint-test-docker.yaml
@@ -37,7 +37,7 @@ jobs:

      - name: Set up Node.js
        if: steps.check-branch-exists.outputs.exists == 'true'
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v4
        with:
          node-version: '22'

--- a/clusters/cl01tl/applications/actual/Chart.yaml
+++ b/clusters/cl01tl/applications/actual/Chart.yaml
@@ -16,6 +16,6 @@ dependencies:
  - name: app-template
    alias: actual
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.2.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/actual-budget.png
 appVersion: v25.5.0
--- a/clusters/cl01tl/applications/actual/values.yaml
+++ b/clusters/cl01tl/applications/actual/values.yaml
@@ -9,7 +9,7 @@ actual:
        main:
          image:
            repository: ghcr.io/actualbudget/actual
-            tag: 25.10.0
+            tag: 25.8.0
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/applications/audiobookshelf/Chart.yaml
+++ b/clusters/cl01tl/applications/audiobookshelf/Chart.yaml
@@ -18,6 +18,6 @@ dependencies:
  - name: app-template
    alias: audiobookshelf
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.2.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/audiobookshelf.png
 appVersion: 2.21.0
--- a/clusters/cl01tl/applications/audiobookshelf/values.yaml
+++ b/clusters/cl01tl/applications/audiobookshelf/values.yaml
@@ -9,7 +9,7 @@ audiobookshelf:
        main:
          image:
            repository: ghcr.io/advplyr/audiobookshelf
-            tag: 2.30.0
+            tag: 2.29.0
            pullPolicy: IfNotPresent
          env:
            - name: TZ
@@ -21,7 +21,7 @@ audiobookshelf:
        apprise-api:
          image:
            repository: caronc/apprise
-            tag: 1.2.2
+            tag: 1.2.1
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/applications/bazarr/Chart.yaml
+++ b/clusters/cl01tl/applications/bazarr/Chart.yaml
@@ -18,6 +18,6 @@ dependencies:
  - name: app-template
    alias: bazarr
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.2.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/bazarr.png
 appVersion: 1.5.2
--- a/clusters/cl01tl/applications/bazarr/values.yaml
+++ b/clusters/cl01tl/applications/bazarr/values.yaml
@@ -15,7 +15,7 @@ bazarr:
        main:
          image:
            repository: ghcr.io/linuxserver/bazarr
-            tag: 1.5.3@sha256:a93c3595410f5c5791a126d7705cd8a29f3ce882338eef304cb8bece3ef2580b
+            tag: 1.5.2@sha256:d37a88fb1751c7b9a9fc4d134b8e96c1e32821ee38630770e6a9112cf47fbe55
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/applications/calibre-web-automated/Chart.yaml
+++ b/clusters/cl01tl/applications/calibre-web-automated/Chart.yaml
@@ -16,6 +16,6 @@ dependencies:
  - name: app-template
    alias: calibre-web-automated
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.2.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/calibre-web.png
 appVersion: V3.0.4
--- a/clusters/cl01tl/applications/calibre-web-automated/values.yaml
+++ b/clusters/cl01tl/applications/calibre-web-automated/values.yaml
@@ -31,7 +31,7 @@ calibre-web-automated:
        main:
          image:
            repository: ghcr.io/calibrain/calibre-web-automated-book-downloader
-            tag: latest@sha256:c2850991e99e278269003d92efa86e865f7df039093fbd03e85141b035cf7a80
+            tag: latest@sha256:2d7b7606f7bf92a93377d2bc9bd7d3e7c9b43c108705d544c350ecb9ecc0220b
            pullPolicy: IfNotPresent
          env:
            - name: FLASK_PORT
@@ -55,7 +55,7 @@ calibre-web-automated:
        bypass:
          image:
            repository: ghcr.io/sarperavci/cloudflarebypassforscraping
-            tag: latest@sha256:c34ef70a768ddf35c057f893c5392b8f65465fc4fbac634ba68a16d6a9dd0cbb
+            tag: latest@sha256:9ac4cd4d6d5dfc270a92502b92761d9039297abfb123f4a2a3abca5209d9eec5
            pullPolicy: IfNotPresent
          resources:
            requests:
--- a/clusters/cl01tl/applications/code-server/Chart.yaml
+++ b/clusters/cl01tl/applications/code-server/Chart.yaml
@@ -19,10 +19,10 @@ dependencies:
  - name: app-template
    alias: code-server
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.2.0
  - name: cloudflared
    alias: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.22.1
+    version: 1.20.1
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/visual-studio-code.png
 appVersion: 4.100.2
--- a/clusters/cl01tl/applications/code-server/values.yaml
+++ b/clusters/cl01tl/applications/code-server/values.yaml
@@ -9,7 +9,7 @@ code-server:
        main:
          image:
            repository: ghcr.io/linuxserver/code-server
-            tag: 4.105.1@sha256:aea1f1c92e70b84204e928d73378e8782b3a23af73b419efff0ac7f39b6c73f2
+            tag: 4.103.2@sha256:d85f12f63fbeb0b91d337f1b9fee0409b057d9fbb106b987305856112dc7873a
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/applications/directus/Chart.yaml
+++ b/clusters/cl01tl/applications/directus/Chart.yaml
@@ -20,14 +20,14 @@ dependencies:
  - name: app-template
    alias: directus
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.2.0
  - name: cloudflared
    alias: cloudflared-directus
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.22.1
+    version: 1.20.1
  - name: postgres-cluster
    alias: postgres-17-cluster
-    version: 6.13.0
+    version: 5.1.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/directus.png
 appVersion: 11.7.2
--- a/clusters/cl01tl/applications/directus/templates/external-secret.yaml
+++ b/clusters/cl01tl/applications/directus/templates/external-secret.yaml
@@ -176,33 +176,3 @@ spec:
        key: /digital-ocean/home-infra/postgres-backups
        metadataPolicy: None
        property: secret
-
---
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: directus-postgresql-17-cluster-backup-secret-weekly
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: directus-postgresql-17-cluster-backup-secret-weekly
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: ACCESS_KEY_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/postgres-backups
-        metadataPolicy: None
-        property: ACCESS_KEY_ID
-    - secretKey: ACCESS_SECRET_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/postgres-backups
-        metadataPolicy: None
-        property: ACCESS_SECRET_KEY
--- a/clusters/cl01tl/applications/directus/templates/redis-replication.yaml
+++ b/clusters/cl01tl/applications/directus/templates/redis-replication.yaml
@@ -13,7 +13,7 @@ spec:
    runAsUser: 1000
    fsGroup: 1000
  kubernetesConfig:
-    image: quay.io/opstree/redis:v8.2.1
+    image: quay.io/opstree/redis:v8.0.3
    imagePullPolicy: IfNotPresent
    redisSecret:
      name: directus-redis-config
@@ -32,4 +32,4 @@ spec:
            storage: 1Gi
  redisExporter:
    enabled: true
-    image: quay.io/opstree/redis-exporter:v1.76.0
+    image: quay.io/opstree/redis-exporter:v1.48.0
--- a/clusters/cl01tl/applications/directus/templates/redis-sentinel.yaml
+++ b/clusters/cl01tl/applications/directus/templates/redis-sentinel.yaml
@@ -1,30 +0,0 @@
-apiVersion: redis.redis.opstreelabs.in/v1beta2
-kind: RedisSentinel
-metadata:
-  name: redis-sentinel-directus
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: redis-sentinel-directus
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  clusterSize: 3
-  podSecurityContext:
-    runAsUser: 1000
-    fsGroup: 1000
-  redisSentinelConfig:
-    redisReplicationName: redis-replication-directus
-    redisReplicationPassword:
-      secretKeyRef:
-        name: directus-redis-config
-        key: password
-  kubernetesConfig:
-    image: quay.io/opstree/redis-sentinel:v7.0.15
-    imagePullPolicy: IfNotPresent
-    redisSecret:
-      name: directus-redis-config
-      key: password
-    resources:
-      requests:
-        cpu: 10m
-        memory: 128Mi
--- a/clusters/cl01tl/applications/directus/values.yaml
+++ b/clusters/cl01tl/applications/directus/values.yaml
@@ -9,7 +9,7 @@ directus:
        main:
          image:
            repository: directus/directus
-            tag: 11.12.0
+            tag: 11.10.2
            pullPolicy: IfNotPresent
          env:
            - name: PUBLIC_URL
@@ -63,16 +63,12 @@ directus:
                secretKeyRef:
                  name: directus-postgresql-17-cluster-app
                  key: password
-            - name: SYNCHRONIZATION_STORE
-              value: redis
-            - name: CACHE_ENABLED
-              value: true
-            - name: CACHE_STORE
-              value: redis
            - name: REDIS_ENABLED
              value: true
            - name: REDIS_HOST
              value: redis-replication-directus-master
+            - name: REDIS_PORT
+              value: 6379
            - name: REDIS_USERNAME
              valueFrom:
                secretKeyRef:
@@ -157,7 +153,7 @@ cloudflared-directus:
  name: cloudflared-directus
  existingSecretName: directus-cloudflared-secret
 postgres-17-cluster:
-  mode: recovery
+  mode: standalone
  cluster:
    storage:
      storageClass: local-path
@@ -170,30 +166,14 @@ postgres-17-cluster:
  recovery:
    method: objectStore
    objectStore:
+      endpointURL: https://nyc3.digitaloceanspaces.com
      destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/directus/directus-postgresql-17-cluster
-      index: 1
+      endpointCredentials: directus-postgresql-17-cluster-backup-secret
+      recoveryIndex: 2
  backup:
-    objectStore:
-      - name: external
-        destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/directus/directus-postgresql-17-cluster
-        index: 1
-        retentionPolicy: "2d"
-      - name: garage
-        destinationPath: s3://postgres-backups/cl01tl/directus/directus-postgresql-17-cluster
-        index: 1
-        endpointURL: https://garage-ps10rp.boreal-beaufort.ts.net:3900
-        endpointCredentials: directus-postgresql-17-cluster-backup-secret-weekly
-        retentionPolicy: "30d"
-        isWALArchiver: false
-        data:
-          compression: bzip2
-          jobs: 2
-    scheduledBackups:
-      - name: daily-backup
-        suspend: false
-        schedule: "0 0 0 * * *"
-        backupName: external
-      - name: weekly-backup
-        suspend: false
-        schedule: "0 0 4 * * SAT"
-        backupName: garage
+    enabled: true
+    endpointURL: https://nyc3.digitaloceanspaces.com
+    destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/directus/directus-postgresql-17-cluster
+    endpointCredentials: directus-postgresql-17-cluster-backup-secret
+    backupIndex: 2
+    retentionPolicy: "7d"
--- a/clusters/cl01tl/applications/eigenfocus/Chart.yaml
+++ b/clusters/cl01tl/applications/eigenfocus/Chart.yaml
@@ -0,0 +1,21 @@
+apiVersion: v2
+name: eigenfocus
+version: 1.0.0
+description: Eigenfocus
+keywords:
+  - eigenfocus
+  - projects
+home: https://wiki.alexlebens.dev/s/82548c75-cefe-4ad2-b60c-0b101127c31b
+sources:
+  - https://github.com/Eigenfocus/eigenfocus
+  - https://hub.docker.com/r/eigenfocus/eigenfocus
+  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
+maintainers:
+  - name: alexlebens
+dependencies:
+  - name: app-template
+    alias: eigenfocus
+    repository: https://bjw-s-labs.github.io/helm-charts/
+    version: 4.2.0
+icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/eigenfocus.png
+appVersion: 1.1.0
--- a/clusters/cl01tl/applications/eigenfocus/templates/external-secret.yaml
+++ b/clusters/cl01tl/applications/eigenfocus/templates/external-secret.yaml
@@ -0,0 +1,55 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: eigenfocus-data-backup-secret
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: eigenfocus-data-backup-secret
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  target:
+    template:
+      mergePolicy: Merge
+      engineVersion: v2
+      data:
+        RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/eigenfocus/eigenfocus-data"
+  data:
+    - secretKey: BUCKET_ENDPOINT
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/volsync/restic/config
+        metadataPolicy: None
+        property: S3_BUCKET_ENDPOINT
+    - secretKey: RESTIC_PASSWORD
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/volsync/restic/config
+        metadataPolicy: None
+        property: RESTIC_PASSWORD
+    - secretKey: AWS_DEFAULT_REGION
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/volsync/restic/config
+        metadataPolicy: None
+        property: AWS_DEFAULT_REGION
+    - secretKey: AWS_ACCESS_KEY_ID
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /digital-ocean/home-infra/volsync-backups
+        metadataPolicy: None
+        property: access_key
+    - secretKey: AWS_SECRET_ACCESS_KEY
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /digital-ocean/home-infra/volsync-backups
+        metadataPolicy: None
+        property: secret_key
--- a/clusters/cl01tl/applications/eigenfocus/templates/http-route.yaml
+++ b/clusters/cl01tl/applications/eigenfocus/templates/http-route.yaml
@@ -0,0 +1,28 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: http-route-eigenfocus
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: http-route-eigenfocus
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  parentRefs:
+    - group: gateway.networking.k8s.io
+      kind: Gateway
+      name: traefik-gateway
+      namespace: traefik
+  hostnames:
+    - eigenfocus.alexlebens.net
+  rules:
+    - matches:
+      - path:
+          type: PathPrefix
+          value: /
+      backendRefs:
+        - group: ''
+          kind: Service
+          name: eigenfocus
+          port: 80
+          weight: 100
--- a/clusters/cl01tl/applications/eigenfocus/templates/replication-source.yaml
+++ b/clusters/cl01tl/applications/eigenfocus/templates/replication-source.yaml
@@ -0,0 +1,25 @@
+apiVersion: volsync.backube/v1alpha1
+kind: ReplicationSource
+metadata:
+  name: eigenfocus-data-backup-source
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: eigenfocus-data-backup-source
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  sourcePVC: eigenfocus-data
+  trigger:
+    schedule: 0 4 * * *
+  restic:
+    pruneIntervalDays: 7
+    repository: eigenfocus-data-backup-secret
+    retain:
+      hourly: 1
+      daily: 3
+      weekly: 2
+      monthly: 2
+      yearly: 4
+    copyMethod: Snapshot
+    storageClassName: ceph-block
+    volumeSnapshotClassName: ceph-blockpool-snapshot
--- a/clusters/cl01tl/applications/eigenfocus/values.yaml
+++ b/clusters/cl01tl/applications/eigenfocus/values.yaml
@@ -0,0 +1,40 @@
+eigenfocus:
+  controllers:
+    main:
+      type: deployment
+      replicas: 1
+      strategy: Recreate
+      revisionHistoryLimit: 3
+      containers:
+        main:
+          image:
+            repository: eigenfocus/eigenfocus
+            tag: 1.3.0-free
+            pullPolicy: IfNotPresent
+          env:
+            - name: DEFAULT_HOST_URL
+              value: https://eigenfocus.alexlebens.net
+          resources:
+            requests:
+              cpu: 10m
+              memory: 128Mi
+  service:
+    main:
+      controller: main
+      ports:
+        http:
+          port: 80
+          targetPort: 3000
+          protocol: HTTP
+  persistence:
+    data:
+      forceRename: eigenfocus-data
+      storageClass: ceph-block
+      accessMode: ReadWriteOnce
+      size: 2Gi
+      retain: true
+      advancedMounts:
+        main:
+          main:
+            - path: /eigenfocus-app/app-data
+              readOnly: false
--- a/clusters/cl01tl/applications/element-web/Chart.yaml
+++ b/clusters/cl01tl/applications/element-web/Chart.yaml
@@ -17,11 +17,11 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: element-web
-    version: 1.4.22
+    version: 1.4.17
    repository: https://ananace.gitlab.io/charts
  - name: cloudflared
    alias: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.22.1
+    version: 1.20.1
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/element.png
 appVersion: v1.11.100
--- a/clusters/cl01tl/applications/element-web/values.yaml
+++ b/clusters/cl01tl/applications/element-web/values.yaml
@@ -2,7 +2,7 @@ element-web:
  replicaCount: 1
  image:
    repository: vectorim/element-web
-    tag: v1.12.2
+    tag: v1.11.109
    pullPolicy: IfNotPresent
  defaultServer:
    url: https://matrix.alexlebens.dev
--- a/clusters/cl01tl/applications/freshrss/Chart.yaml
+++ b/clusters/cl01tl/applications/freshrss/Chart.yaml
@@ -20,14 +20,14 @@ dependencies:
  - name: app-template
    alias: freshrss
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.2.0
  - name: cloudflared
    alias: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.22.1
+    version: 1.20.1
  - name: postgres-cluster
    alias: postgres-17-cluster
-    version: 6.13.0
+    version: 5.1.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/freshrss.png
 appVersion: 1.26.2
--- a/clusters/cl01tl/applications/freshrss/templates/external-secret.yaml
+++ b/clusters/cl01tl/applications/freshrss/templates/external-secret.yaml
@@ -180,33 +180,3 @@ spec:
        key: /digital-ocean/home-infra/postgres-backups
        metadataPolicy: None
        property: secret
-
---
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: freshrss-postgresql-17-cluster-backup-secret-weekly
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: freshrss-postgresql-17-cluster-backup-secret-weekly
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: ACCESS_KEY_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/postgres-backups
-        metadataPolicy: None
-        property: ACCESS_KEY_ID
-    - secretKey: ACCESS_SECRET_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/postgres-backups
-        metadataPolicy: None
-        property: ACCESS_SECRET_KEY
--- a/clusters/cl01tl/applications/freshrss/values.yaml
+++ b/clusters/cl01tl/applications/freshrss/values.yaml
@@ -11,7 +11,7 @@ freshrss:
            runAsUser: 0
          image:
            repository: alpine
-            tag: 3.22.2
+            tag: 3.22.1
            pullPolicy: IfNotPresent
          command:
            - /bin/sh
@@ -35,7 +35,7 @@ freshrss:
            runAsUser: 0
          image:
            repository: alpine
-            tag: 3.22.2
+            tag: 3.22.1
            pullPolicy: IfNotPresent
          command:
            - /bin/sh
@@ -59,7 +59,7 @@ freshrss:
            runAsUser: 0
          image:
            repository: alpine
-            tag: 3.22.2
+            tag: 3.22.1
            pullPolicy: IfNotPresent
          command:
            - /bin/sh
@@ -80,7 +80,7 @@ freshrss:
        main:
          image:
            repository: freshrss/freshrss
-            tag: 1.27.1
+            tag: 1.27.0
            pullPolicy: IfNotPresent
          env:
            - name: PGID
@@ -194,7 +194,7 @@ freshrss:
 cloudflared:
  existingSecretName: freshrss-cloudflared-secret
 postgres-17-cluster:
-  mode: recovery
+  mode: standalone
  cluster:
    storage:
      storageClass: local-path
@@ -207,30 +207,14 @@ postgres-17-cluster:
  recovery:
    method: objectStore
    objectStore:
+      endpointURL: https://nyc3.digitaloceanspaces.com
      destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/freshrss/freshrss-postgresql-17-cluster
-      index: 1
+      endpointCredentials: freshrss-postgresql-17-cluster-backup-secret
+      recoveryIndex: 3
  backup:
-    objectStore:
-      - name: external
-        destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/freshrss/freshrss-postgresql-17-cluster
-        index: 1
-        retentionPolicy: "2d"
-      - name: garage
-        destinationPath: s3://postgres-backups/cl01tl/freshrss/freshrss-postgresql-17-cluster
-        index: 1
-        endpointURL: https://garage-ps10rp.boreal-beaufort.ts.net:3900
-        endpointCredentials: freshrss-postgresql-17-cluster-backup-secret-weekly
-        retentionPolicy: "30d"
-        isWALArchiver: false
-        data:
-          compression: bzip2
-          jobs: 2
-    scheduledBackups:
-      - name: daily-backup
-        suspend: false
-        schedule: "0 0 0 * * *"
-        backupName: external
-      - name: weekly-backup
-        suspend: false
-        schedule: "0 0 4 * * SAT"
-        backupName: garage
+    enabled: true
+    endpointURL: https://nyc3.digitaloceanspaces.com
+    destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/freshrss/freshrss-postgresql-17-cluster
+    endpointCredentials: freshrss-postgresql-17-cluster-backup-secret
+    backupIndex: 3
+    retentionPolicy: "7d"
--- a/clusters/cl01tl/applications/home-assistant/Chart.yaml
+++ b/clusters/cl01tl/applications/home-assistant/Chart.yaml
@@ -18,6 +18,6 @@ dependencies:
  - name: app-template
    alias: home-assistant
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.2.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/home-assistant.png
 appVersion: 2025.5.2
--- a/clusters/cl01tl/applications/home-assistant/values.yaml
+++ b/clusters/cl01tl/applications/home-assistant/values.yaml
@@ -9,7 +9,7 @@ home-assistant:
        main:
          image:
            repository: ghcr.io/home-assistant/home-assistant
-            tag: 2025.10.3
+            tag: 2025.8.3
            pullPolicy: IfNotPresent
          env:
            - name: TZ
@@ -21,7 +21,7 @@ home-assistant:
        code-server:
          image:
            repository: ghcr.io/linuxserver/code-server
-            tag: 4.105.1@sha256:aea1f1c92e70b84204e928d73378e8782b3a23af73b419efff0ac7f39b6c73f2
+            tag: 4.103.2@sha256:d85f12f63fbeb0b91d337f1b9fee0409b057d9fbb106b987305856112dc7873a
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/applications/homepage-dev/Chart.yaml
+++ b/clusters/cl01tl/applications/homepage-dev/Chart.yaml
@@ -18,10 +18,10 @@ dependencies:
  - name: app-template
    alias: homepage
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.2.0
  - name: cloudflared
    alias: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.22.1
+    version: 1.20.1
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/homepage.png
 appVersion: v1.2.0
--- a/clusters/cl01tl/applications/homepage-dev/values.yaml
+++ b/clusters/cl01tl/applications/homepage-dev/values.yaml
@@ -11,7 +11,7 @@ homepage:
        main:
          image:
            repository: ghcr.io/gethomepage/homepage
-            tag: v1.5.0
+            tag: v1.4.6
            pullPolicy: IfNotPresent
          env:
            - name: HOMEPAGE_ALLOWED_HOSTS
--- a/clusters/cl01tl/applications/homepage/Chart.yaml
+++ b/clusters/cl01tl/applications/homepage/Chart.yaml
@@ -16,6 +16,6 @@ dependencies:
  - name: app-template
    alias: homepage
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.2.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/homepage.png
 appVersion: v1.2.0
--- a/clusters/cl01tl/applications/homepage/templates/service.yaml
+++ b/clusters/cl01tl/applications/homepage/templates/service.yaml
@@ -28,19 +28,3 @@ metadata:
 spec:
  externalName: placeholder
  type: ExternalName
-
---
-apiVersion: v1
-kind: Service
-metadata:
-  name: garage-ps10rp
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: garage-ps10rp
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-  annotations:
-    tailscale.com/tailnet-fqdn: garage-ps10rp.boreal-beaufort.ts.net
-spec:
-  externalName: placeholder
-  type: ExternalName
--- a/clusters/cl01tl/applications/homepage/values.yaml
+++ b/clusters/cl01tl/applications/homepage/values.yaml
@@ -15,7 +15,7 @@ homepage:
        main:
          image:
            repository: ghcr.io/gethomepage/homepage
-            tag: v1.5.0
+            tag: v1.4.6
            pullPolicy: IfNotPresent
          env:
            - name: HOMEPAGE_ALLOWED_HOSTS
@@ -132,21 +132,21 @@ homepage:
                  href: https://plex.alexlebens.net
                  siteMonitor: http://plex.plex:32400
                  statusStyle: dot
-              - Jellyfin:
-                  icon: sh-jellyfin.webp
-                  description: Media server
-                  href: https://jellyfin.alexlebens.net
-                  siteMonitor: http://jellyfin.jellyfin:80
-                  statusStyle: dot
              - Media Requests:
                  icon: sh-overseerr.webp
                  description: Overseer
                  href: https://overseerr.alexlebens.net
                  siteMonitor: http://overseerr.overseerr:80
                  statusStyle: dot
-              - Media Tracking:
+              - Jellyfin:
+                  icon: sh-jellyfin.webp
+                  description: Media server
+                  href: https://jellyfin.alexlebens.net
+                  siteMonitor: http://jellyfin.jellyfin:80
+                  statusStyle: dot
+              - Yamtrack:
                  icon: sh-yamtrack.webp
-                  description: Yamtrack
+                  description: Watched Media Tracking
                  href: https://yamtrack.alexlebens.net
                  siteMonitor: http://yamtrack.yamtrack:80
                  statusStyle: dot
@@ -242,6 +242,12 @@ homepage:
                  href: https://actual.alexlebens.net
                  siteMonitor: http://actual.actual:80
                  statusStyle: dot
+              - Project Management:
+                  icon: sh-eigenfocus.webp
+                  description: Eigenfocus
+                  href: https://eigenfocus.alexlebens.net
+                  siteMonitor: http://eigenfocus.eigenfocus:80
+                  statusStyle: dot
              - AI:
                  icon: sh-ollama.webp
                  description: Ollama
@@ -288,8 +294,8 @@ homepage:
              - Code (ps10rp):
                  icon: sh-gitea.webp
                  description: Gitea
-                  href: https://gitea-ps10rp.boreal-beaufort.ts.net
-                  siteMonitor: https://gitea-ps10rp.boreal-beaufort.ts.net
+                  href: https://gitea.lebens-home.net
+                  siteMonitor: https://gitea.lebens-home.net
                  statusStyle: dot
              - IDE (Public):
                  icon: sh-visual-studio-code.webp
@@ -313,7 +319,7 @@ homepage:
                  icon: sh-komodo-light.webp
                  description: Komodo
                  href: https://komodo.alexlebens.net
-                  siteMonitor: http://komodo-main.komodo:80
+                  siteMonitor: http://komodo.komodo:80
                  statusStyle: dot
          - Automation:
              - Deployment Workflows:
@@ -492,12 +498,6 @@ homepage:
                  href: https://ceph.alexlebens.net
                  siteMonitor: http://rook-ceph-mgr-dashboard.rook-ceph:7000
                  statusStyle: dot
-              - Remote Storage:
-                  icon: sh-garage.webp
-                  description: Garage
-                  href: https://garage-ps10rp.boreal-beaufort.ts.net
-                  siteMonitor: https://garage-ps10rp.boreal-beaufort.ts.net
-                  statusStyle: dot
              - Database:
                  icon: sh-pgadmin-light.webp
                  description: PGAdmin
@@ -627,11 +627,11 @@ homepage:
                  siteMonitor: http://slskd.slskd:5030
                  statusStyle: dot
          - Services (Servarr):
-              - qUI:
-                  icon: https://raw.githubusercontent.com/autobrr/qui/8487c818886df9abb2b1456f43b54e0ba180a2bd/web/public/icons.svg
-                  description: qbitorrent
-                  href: https://qui.alexlebens.net
-                  siteMonitor: http://qbittorrent-qui.qbittorrent:80
+              - qBittorrent:
+                  icon: sh-qbittorrent.webp
+                  description: P2P Downloads
+                  href: https://qbittorrent.alexlebens.net
+                  siteMonitor: http://qbittorrent.qbittorrent:8080
                  statusStyle: dot
                  widget:
                    type: qbittorrent
--- a/clusters/cl01tl/applications/huntarr/Chart.yaml
+++ b/clusters/cl01tl/applications/huntarr/Chart.yaml
@@ -16,6 +16,6 @@ dependencies:
  - name: app-template
    alias: huntarr
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.2.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/huntarr.png
 appVersion: 7.0.0
--- a/clusters/cl01tl/applications/huntarr/values.yaml
+++ b/clusters/cl01tl/applications/huntarr/values.yaml
@@ -31,7 +31,7 @@ huntarr:
      forceRename: huntarr-config
      storageClass: ceph-block
      accessMode: ReadWriteOnce
-      size: 5Gi
+      size: 1Gi
      advancedMounts:
        main:
          main:
--- a/clusters/cl01tl/applications/immich/Chart.yaml
+++ b/clusters/cl01tl/applications/immich/Chart.yaml
@@ -17,10 +17,10 @@ dependencies:
  - name: app-template
    alias: immich
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.2.0
  - name: postgres-cluster
-    alias: postgres-17-cluster
-    version: 6.13.0
+    alias: postgres-16-cluster
+    version: 5.1.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/immich.png
-appVersion: v2.0.1
+appVersion: v1.132.3
--- a/clusters/cl01tl/applications/immich/templates/external-secrets.yaml
+++ b/clusters/cl01tl/applications/immich/templates/external-secrets.yaml
@@ -24,10 +24,10 @@ spec:
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
-  name: immich-postgresql-17-cluster-backup-secret
+  name: immich-postgresql-16-cluster-backup-secret
  namespace: {{ .Release.Namespace }}
  labels:
-    app.kubernetes.io/name: immich-postgresql-17-cluster-backup-secret
+    app.kubernetes.io/name: immich-postgresql-16-cluster-backup-secret
    app.kubernetes.io/instance: {{ .Release.Name }}
    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
@@ -49,33 +49,3 @@ spec:
        key: /digital-ocean/home-infra/postgres-backups
        metadataPolicy: None
        property: secret
-
---
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: immich-postgresql-17-cluster-backup-secret-weekly
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: immich-postgresql-17-cluster-backup-secret-weekly
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: ACCESS_KEY_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/postgres-backups
-        metadataPolicy: None
-        property: ACCESS_KEY_ID
-    - secretKey: ACCESS_SECRET_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/postgres-backups
-        metadataPolicy: None
-        property: ACCESS_SECRET_KEY
--- a/clusters/cl01tl/applications/immich/values.yaml
+++ b/clusters/cl01tl/applications/immich/values.yaml
@@ -9,7 +9,7 @@ immich:
        main:
          image:
            repository: ghcr.io/immich-app/immich-server
-            tag: v2.1.0
+            tag: v1.132.3
            pullPolicy: IfNotPresent
          env:
            - name: TZ
@@ -23,31 +23,31 @@ immich:
            - name: REDIS_HOSTNAME
              value: redis-replication-immich-master
            - name: DB_VECTOR_EXTENSION
-              value: vectorchord
+              value: pgvecto.rs
            - name: DB_HOSTNAME
              valueFrom:
                secretKeyRef:
-                  name: immich-postgresql-17-cluster-app
+                  name: immich-postgresql-16-cluster-app
                  key: host
            - name: DB_DATABASE_NAME
              valueFrom:
                secretKeyRef:
-                  name: immich-postgresql-17-cluster-app
+                  name: immich-postgresql-16-cluster-app
                  key: dbname
            - name: DB_PORT
              valueFrom:
                secretKeyRef:
-                  name: immich-postgresql-17-cluster-app
+                  name: immich-postgresql-16-cluster-app
                  key: port
            - name: DB_USERNAME
              valueFrom:
                secretKeyRef:
-                  name: immich-postgresql-17-cluster-app
+                  name: immich-postgresql-16-cluster-app
                  key: user
            - name: DB_PASSWORD
              valueFrom:
                secretKeyRef:
-                  name: immich-postgresql-17-cluster-app
+                  name: immich-postgresql-16-cluster-app
                  key: password
          probes:
            liveness:
@@ -99,7 +99,7 @@ immich:
        main:
          image:
            repository: ghcr.io/immich-app/immich-machine-learning
-            tag: v2.1.0
+            tag: v1.134.0
            pullPolicy: IfNotPresent
          env:
            - name: TRANSFORMERS_CACHE
@@ -188,16 +188,26 @@ immich:
          main:
            - path: /usr/src/app/upload
              readOnly: false
-postgres-17-cluster:
+postgres-16-cluster:
+  # Tensorchord
+  #--- https://github.com/immich-app/immich/discussions/9060
+  #--- https://docs.pgvecto.rs/admin/kubernetes.html
+  #--- https://github.com/tensorchord/cloudnative-pgvecto.rs
+  #--- https://github.com/immich-app/immich/discussions/17025
+  type: tensorchord
  mode: recovery
  cluster:
    image:
-      repository: ghcr.io/tensorchord/cloudnative-vectorchord
-      tag: 17.5-0.4.3
+      repository: ghcr.io/tensorchord/cloudnative-pgvecto.rs
+      tag: 16.3-v0.2.1
    storage:
      storageClass: local-path
    walStorage:
      storageClass: local-path
+    resources:
+      requests:
+        memory: 384Mi
+        cpu: 200m
    monitoring:
      enabled: true
      prometheusRule:
@@ -205,41 +215,17 @@ postgres-17-cluster:
    postgresql:
      parameters:
        shared_buffers: 256MB
-      shared_preload_libraries:
-        - "vchord.so"
-    initdb:
-      postInitSQL:
-        - CREATE EXTENSION IF NOT EXISTS "vector";
-        - CREATE EXTENSION IF NOT EXISTS "vchord" CASCADE;
-        - CREATE EXTENSION IF NOT EXISTS "cube" CASCADE;
-        - CREATE EXTENSION IF NOT EXISTS "earthdistance" CASCADE;
  recovery:
    method: objectStore
    objectStore:
+      endpointURL: https://nyc3.digitaloceanspaces.com
      destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/immich/immich-postgresql-17-cluster
-      index: 2
+      endpointCredentials: immich-postgresql-17-cluster-backup-secret
+      recoveryIndex: 2
  backup:
-    objectStore:
-      - name: external
-        destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/immich/immich-postgresql-17-cluster
-        index: 2
-        retentionPolicy: "2d"
-      - name: garage
-        destinationPath: s3://postgres-backups/cl01tl/immich/immich-postgresql-17-cluster
-        index: 1
-        endpointURL: https://garage-ps10rp.boreal-beaufort.ts.net:3900
-        endpointCredentials: immich-postgresql-17-cluster-backup-secret-weekly
-        retentionPolicy: "30d"
-        isWALArchiver: false
-        data:
-          compression: bzip2
-          jobs: 2
-    scheduledBackups:
-      - name: daily-backup
-        suspend: false
-        schedule: "0 0 0 * * *"
-        backupName: external
-      - name: weekly-backup
-        suspend: false
-        schedule: "0 0 4 * * SAT"
-        backupName: garage
+    enabled: true
+    endpointURL: https://nyc3.digitaloceanspaces.com
+    destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/immich/immich-postgresql-16-cluster
+    endpointCredentials: immich-postgresql-16-cluster-backup-secret
+    backupIndex: 2
+    retentionPolicy: "7d"
--- a/clusters/cl01tl/applications/jellyfin/Chart.yaml
+++ b/clusters/cl01tl/applications/jellyfin/Chart.yaml
@@ -20,6 +20,6 @@ dependencies:
  - name: app-template
    alias: jellyfin
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.2.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/jellyfin.png
 appVersion: 10.10.7
--- a/clusters/cl01tl/applications/jellyfin/values.yaml
+++ b/clusters/cl01tl/applications/jellyfin/values.yaml
@@ -9,7 +9,7 @@ jellyfin:
        main:
          image:
            repository: ghcr.io/jellyfin/jellyfin
-            tag: 10.11.0
+            tag: 10.10.7
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/applications/jellystat/Chart.yaml
+++ b/clusters/cl01tl/applications/jellystat/Chart.yaml
@@ -18,10 +18,10 @@ dependencies:
  - name: app-template
    alias: jellystat
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.2.0
  - name: postgres-cluster
    alias: postgres-17-cluster
-    version: 6.13.0
+    version: 5.1.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/jellystat.png
 appVersion: 1.1.6
--- a/clusters/cl01tl/applications/jellystat/templates/external-secret.yaml
+++ b/clusters/cl01tl/applications/jellystat/templates/external-secret.yaml
@@ -120,33 +120,3 @@ spec:
        key: /digital-ocean/home-infra/postgres-backups
        metadataPolicy: None
        property: secret
-
---
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: jellystat-postgresql-17-cluster-backup-secret-weekly
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: jellystat-postgresql-17-cluster-backup-secret-weekly
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: ACCESS_KEY_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/postgres-backups
-        metadataPolicy: None
-        property: ACCESS_KEY_ID
-    - secretKey: ACCESS_SECRET_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/postgres-backups
-        metadataPolicy: None
-        property: ACCESS_SECRET_KEY
--- a/clusters/cl01tl/applications/jellystat/values.yaml
+++ b/clusters/cl01tl/applications/jellystat/values.yaml
@@ -79,7 +79,7 @@ jellystat:
            - path: /app/backend/backup-data
              readOnly: false
 postgres-17-cluster:
-  mode: recovery
+  mode: standalone
  cluster:
    storage:
      storageClass: local-path
@@ -92,30 +92,14 @@ postgres-17-cluster:
  recovery:
    method: objectStore
    objectStore:
+      endpointURL: https://nyc3.digitaloceanspaces.com
      destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/jellystat/jellystat-postgresql-17-cluster
-      index: 1
+      endpointCredentials: jellystat-postgresql-17-cluster-backup-secret
+      recoveryIndex: 2
  backup:
-    objectStore:
-      - name: external
-        destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/jellystat/jellystat-postgresql-17-cluster
-        index: 1
-        retentionPolicy: "2d"
-      - name: garage
-        destinationPath: s3://postgres-backups/cl01tl/jellystat/jellystat-postgresql-17-cluster
-        index: 1
-        endpointURL: https://garage-ps10rp.boreal-beaufort.ts.net:3900
-        endpointCredentials: jellystat-postgresql-17-cluster-backup-secret-weekly
-        retentionPolicy: "30d"
-        isWALArchiver: false
-        data:
-          compression: bzip2
-          jobs: 2
-    scheduledBackups:
-      - name: daily-backup
-        suspend: false
-        schedule: "0 0 0 * * *"
-        backupName: external
-      - name: weekly-backup
-        suspend: false
-        schedule: "0 0 4 * * SAT"
-        backupName: garage
+    enabled: true
+    endpointURL: https://nyc3.digitaloceanspaces.com
+    destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/jellystat/jellystat-postgresql-17-cluster
+    endpointCredentials: jellystat-postgresql-17-cluster-backup-secret
+    backupIndex: 2
+    retentionPolicy: "3d"
--- a/clusters/cl01tl/applications/karakeep/Chart.yaml
+++ b/clusters/cl01tl/applications/karakeep/Chart.yaml
@@ -20,13 +20,13 @@ dependencies:
  - name: app-template
    alias: karakeep
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.2.0
  - name: meilisearch
-    version: 0.17.1
+    version: 0.15.0
    repository: https://meilisearch.github.io/meilisearch-kubernetes
  - name: cloudflared
    alias: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.22.1
+    version: 1.20.1
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/webp/karakeep.webp
 appVersion: 0.26.0
--- a/clusters/cl01tl/applications/karakeep/values.yaml
+++ b/clusters/cl01tl/applications/karakeep/values.yaml
@@ -9,7 +9,7 @@ karakeep:
        main:
          image:
            repository: ghcr.io/karakeep-app/karakeep
-            tag: 0.27.1
+            tag: 0.26.0
            pullPolicy: IfNotPresent
          env:
            - name: DATA_DIR
--- a/clusters/cl01tl/applications/kiwix/Chart.yaml
+++ b/clusters/cl01tl/applications/kiwix/Chart.yaml
@@ -16,6 +16,6 @@ dependencies:
  - name: app-template
    alias: kiwix
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.2.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kiwix-dark.png
 appVersion: 3.7.0
--- a/clusters/cl01tl/applications/libation/Chart.yaml
+++ b/clusters/cl01tl/applications/libation/Chart.yaml
@@ -17,6 +17,6 @@ dependencies:
  - name: app-template
    alias: libation
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.2.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/libation.png
 appVersion: 12.4.3
--- a/clusters/cl01tl/applications/libation/values.yaml
+++ b/clusters/cl01tl/applications/libation/values.yaml
@@ -16,7 +16,7 @@ libation:
        main:
          image:
            repository: rmcrackan/libation
-            tag: 12.5.5
+            tag: 12.5.3
            pullPolicy: IfNotPresent
          env:
            - name: SLEEP_TIME
--- a/clusters/cl01tl/applications/lidarr/Chart.yaml
+++ b/clusters/cl01tl/applications/lidarr/Chart.yaml
@@ -21,10 +21,10 @@ dependencies:
  - name: app-template
    alias: lidarr
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.2.0
  - name: postgres-cluster
    alias: postgres-17-cluster
-    version: 6.13.0
+    version: 5.1.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/lidarr.png
-appVersion: 2.13.3
+appVersion: 2.11.2
--- a/clusters/cl01tl/applications/lidarr/templates/external-secret.yaml
+++ b/clusters/cl01tl/applications/lidarr/templates/external-secret.yaml
@@ -83,33 +83,3 @@ spec:
        key: /digital-ocean/home-infra/postgres-backups
        metadataPolicy: None
        property: secret
-
---
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: lidarr-postgresql-17-cluster-backup-secret-weekly
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: lidarr-postgresql-17-cluster-backup-secret-weekly
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: ACCESS_KEY_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/postgres-backups
-        metadataPolicy: None
-        property: ACCESS_KEY_ID
-    - secretKey: ACCESS_SECRET_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/postgres-backups
-        metadataPolicy: None
-        property: ACCESS_SECRET_KEY
--- a/clusters/cl01tl/applications/lidarr/values.yaml
+++ b/clusters/cl01tl/applications/lidarr/values.yaml
@@ -15,7 +15,7 @@ lidarr:
        main:
          image:
            repository: ghcr.io/linuxserver/lidarr
-            tag: 2.14.5@sha256:5f58fcb45a15cb33ef153f74b14c724ba073553afdc9b078e7701f15b7ce1433
+            tag: 2.12.4@sha256:9f14ac890945e8964e2d2fa3eff6dc8d52fdfdb70502bdf8d6cdd369bd1aaca1
            pullPolicy: IfNotPresent
          env:
            - name: TZ
@@ -85,20 +85,21 @@ lidarr:
              readOnly: false
 postgres-17-cluster:
  nameOverride: lidarr2-postgresql-17
-  mode: recovery
+  mode: standalone
  cluster:
    storage:
      storageClass: local-path
    walStorage:
      storageClass: local-path
-    monitoring:
-      enabled: true
-      prometheusRule:
-        enabled: true
    resources:
      requests:
        memory: 1Gi
        cpu: 200m
+    monitoring:
+      enabled: true
+      prometheusRule:
+        enabled: true
+  bootstrap:
    initdb:
      postInitSQL:
        - CREATE DATABASE "lidarr-main" OWNER "app";
@@ -106,32 +107,14 @@ postgres-17-cluster:
  recovery:
    method: objectStore
    objectStore:
+      endpointURL: https://nyc3.digitaloceanspaces.com
      destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/lidarr2/lidarr2-postgresql-17-cluster
-      index: 1
      endpointCredentials: lidarr-postgresql-17-cluster-backup-secret
+      recoveryIndex: 3
  backup:
-    objectStore:
-      - name: external
-        destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/lidarr2/lidarr2-postgresql-17-cluster
-        index: 1
-        endpointCredentials: lidarr-postgresql-17-cluster-backup-secret
-        retentionPolicy: "1d"
-      - name: garage
-        destinationPath: s3://postgres-backups/cl01tl/lidarr/lidarr2-postgresql-17-cluster
-        index: 1
-        endpointURL: https://garage-ps10rp.boreal-beaufort.ts.net:3900
-        endpointCredentials: lidarr2-postgresql-17-cluster-backup-secret-weekly
-        retentionPolicy: "30d"
-        isWALArchiver: false
-        data:
-          compression: bzip2
-          jobs: 2
-    scheduledBackups:
-      - name: daily-backup
-        suspend: false
-        schedule: "0 0 */12 * * *"
-        backupName: external
-      - name: weekly-backup
-        suspend: false
-        schedule: "0 0 4 * * SAT"
-        backupName: garage
+    enabled: true
+    endpointURL: https://nyc3.digitaloceanspaces.com
+    destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/lidarr2/lidarr2-postgresql-17-cluster
+    endpointCredentials: lidarr-postgresql-17-cluster-backup-secret
+    backupIndex: 3
+    retentionPolicy: "3d"
--- a/clusters/cl01tl/applications/lidatube/Chart.yaml
+++ b/clusters/cl01tl/applications/lidatube/Chart.yaml
@@ -17,6 +17,6 @@ dependencies:
  - name: app-template
    alias: lidatube
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.2.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/lidatube.png
 appVersion: 0.2.22
--- a/clusters/cl01tl/applications/lidatube/values.yaml
+++ b/clusters/cl01tl/applications/lidatube/values.yaml
@@ -13,7 +13,7 @@ lidatube:
        main:
          image:
            repository: thewicklowwolf/lidatube
-            tag: 0.2.39
+            tag: 0.2.33
            pullPolicy: IfNotPresent
          env:
            - name: PUID
--- a/clusters/cl01tl/applications/omni-tools/Chart.yaml
+++ b/clusters/cl01tl/applications/omni-tools/Chart.yaml
@@ -15,6 +15,6 @@ dependencies:
  - name: app-template
    alias: omni-tools
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.2.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/omnitools.png
 appVersion: 0.4.0
--- a/clusters/cl01tl/applications/omni-tools/values.yaml
+++ b/clusters/cl01tl/applications/omni-tools/values.yaml
@@ -9,7 +9,7 @@ omni-tools:
        main:
          image:
            repository: iib0011/omni-tools
-            tag: 0.6.0
+            tag: 0.5.0
            pullPolicy: IfNotPresent
          resources:
            requests:
--- a/clusters/cl01tl/applications/outline/Chart.yaml
+++ b/clusters/cl01tl/applications/outline/Chart.yaml
@@ -21,14 +21,14 @@ dependencies:
  - name: app-template
    alias: outline
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.2.0
  - name: cloudflared
    alias: cloudflared-outline
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.22.1
+    version: 1.20.1
  - name: postgres-cluster
    alias: postgres-17-cluster
-    version: 6.13.0
+    version: 5.1.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/outline.png
 appVersion: 0.84.0
--- a/clusters/cl01tl/applications/outline/templates/external-secret.yaml
+++ b/clusters/cl01tl/applications/outline/templates/external-secret.yaml
@@ -109,33 +109,3 @@ spec:
        key: /digital-ocean/home-infra/postgres-backups
        metadataPolicy: None
        property: secret
-
---
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: outline-postgresql-17-cluster-backup-secret-weekly
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: outline-postgresql-17-cluster-backup-secret-weekly
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: ACCESS_KEY_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/postgres-backups
-        metadataPolicy: None
-        property: ACCESS_KEY_ID
-    - secretKey: ACCESS_SECRET_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/postgres-backups
-        metadataPolicy: None
-        property: ACCESS_SECRET_KEY
--- a/clusters/cl01tl/applications/outline/values.yaml
+++ b/clusters/cl01tl/applications/outline/values.yaml
@@ -9,7 +9,7 @@ outline:
        main:
          image:
            repository: outlinewiki/outline
-            tag: 0.87.4
+            tag: 0.86.1
            pullPolicy: IfNotPresent
          env:
            - name: NODE_ENV
@@ -146,7 +146,7 @@ cloudflared-outline:
  existingSecretName: outline-cloudflared-secret
  name: cloudflared-outline
 postgres-17-cluster:
-  mode: recovery
+  mode: standalone
  cluster:
    storage:
      storageClass: local-path
@@ -159,30 +159,14 @@ postgres-17-cluster:
  recovery:
    method: objectStore
    objectStore:
+      endpointURL: https://nyc3.digitaloceanspaces.com
      destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/outline/outline-postgresql-17-cluster
-      index: 1
+      endpointCredentials: outline-postgresql-17-cluster-backup-secret
+      recoveryIndex: 2
  backup:
-    objectStore:
-      - name: external
-        destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/outline/outline-postgresql-17-cluster
-        index: 1
-        retentionPolicy: "2d"
-      - name: garage
-        destinationPath: s3://postgres-backups/cl01tl/outline/outline-postgresql-17-cluster
-        index: 1
-        endpointURL: https://garage-ps10rp.boreal-beaufort.ts.net:3900
-        endpointCredentials: outline-postgresql-17-cluster-backup-secret-weekly
-        retentionPolicy: "30d"
-        isWALArchiver: false
-        data:
-          compression: bzip2
-          jobs: 2
-    scheduledBackups:
-      - name: daily-backup
-        suspend: false
-        schedule: "0 0 0 * * *"
-        backupName: external
-      - name: weekly-backup
-        suspend: false
-        schedule: "0 0 4 * * SAT"
-        backupName: garage
+    enabled: true
+    endpointURL: https://nyc3.digitaloceanspaces.com
+    destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/outline/outline-postgresql-17-cluster
+    endpointCredentials: outline-postgresql-17-cluster-backup-secret
+    backupIndex: 2
+    retentionPolicy: "7d"
--- a/clusters/cl01tl/applications/overseerr/Chart.yaml
+++ b/clusters/cl01tl/applications/overseerr/Chart.yaml
@@ -16,6 +16,6 @@ maintainers:
 dependencies:
  - name: app-template
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.2.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/overseerr.png
 appVersion: 1.34.0
--- a/clusters/cl01tl/applications/photoview/Chart.yaml
+++ b/clusters/cl01tl/applications/photoview/Chart.yaml
@@ -17,10 +17,10 @@ dependencies:
  - name: app-template
    alias: photoview
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.2.0
  - name: postgres-cluster
    alias: postgres-17-cluster
-    version: 6.13.0
+    version: 5.1.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/photoview.png
 appVersion: 2.4.0
--- a/clusters/cl01tl/applications/photoview/values.yaml
+++ b/clusters/cl01tl/applications/photoview/values.yaml
@@ -73,7 +73,7 @@ photoview:
            - path: /photos
              readOnly: true
 postgres-17-cluster:
-  mode: recovery
+  mode: standalone
  cluster:
    storage:
      storageClass: local-path
@@ -86,16 +86,14 @@ postgres-17-cluster:
  recovery:
    method: objectStore
    objectStore:
+      endpointURL: https://nyc3.digitaloceanspaces.com
      destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/photoview/photoview-postgresql-17-cluster
-      index: 1
+      endpointCredentials: photoview-postgresql-17-cluster-backup-secret
+      recoveryIndex: 3
  backup:
-    objectStore:
-      - name: external
-        destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/photoview/photoview-postgresql-17-cluster
-        index: 1
-        retentionPolicy: "2d"
-    scheduledBackups:
-      - name: daily-backup
-        suspend: false
-        schedule: "0 0 0 * * *"
-        backupName: external
+    enabled: true
+    endpointURL: https://nyc3.digitaloceanspaces.com
+    destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/photoview/photoview-postgresql-17-cluster
+    endpointCredentials: photoview-postgresql-17-cluster-backup-secret
+    backupIndex: 3
+    retentionPolicy: "7d"
--- a/clusters/cl01tl/applications/plex/Chart.yaml
+++ b/clusters/cl01tl/applications/plex/Chart.yaml
@@ -21,6 +21,6 @@ dependencies:
  - name: app-template
    alias: plex
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.2.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/plex.png
 appVersion: 1.41.6
--- a/clusters/cl01tl/applications/plex/values.yaml
+++ b/clusters/cl01tl/applications/plex/values.yaml
@@ -9,7 +9,7 @@ plex:
        main:
          image:
            repository: ghcr.io/linuxserver/plex
-            tag: 1.42.2@sha256:b13c1a01150225d88085214dc3deabb41985fa5427766c0126c84780d156b9a9
+            tag: 1.42.1@sha256:28f18c27b6822328df994154dbf7c0f511032d9f91bbd10881030b706afd8593
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/applications/postiz/Chart.yaml
+++ b/clusters/cl01tl/applications/postiz/Chart.yaml
@@ -20,13 +20,13 @@ dependencies:
  - name: app-template
    alias: postiz
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.2.0
  - name: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.22.1
+    version: 1.20.1
  - name: postgres-cluster
    alias: postgres-17-cluster
-    version: 6.13.0
+    version: 5.1.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/postiz.png
 appVersion: v1.43.3
--- a/clusters/cl01tl/applications/postiz/values.yaml
+++ b/clusters/cl01tl/applications/postiz/values.yaml
@@ -9,7 +9,7 @@ postiz:
        main:
          image:
            repository: ghcr.io/gitroomhq/postiz-app
-            tag: v2.7.0
+            tag: v2.5.3
            pullPolicy: IfNotPresent
          env:
            - name: MAIN_URL
@@ -36,7 +36,7 @@ postiz:
            - name: BACKEND_INTERNAL_URL
              value: http://localhost:3000
            - name: IS_GENERAL
-              value: "true"
+              value: 'true'
            - name: STORAGE_PROVIDER
              value: local
            - name: UPLOAD_DIRECTORY
@@ -48,7 +48,7 @@ postiz:
            - name: NEXT_PUBLIC_POSTIZ_OAUTH_LOGO_URL
              value: https://cdn.jsdelivr.net/gh/selfhst/icons/png/authentik.png
            - name: POSTIZ_GENERIC_OAUTH
-              value: "true"
+              value: 'true'
            - name: POSTIZ_OAUTH_URL
              value: https://auth.alexlebens.dev
            - name: POSTIZ_OAUTH_AUTH_URL
@@ -106,7 +106,7 @@ cloudflared:
  name: cloudflared-postiz
  existingSecretName: postiz-cloudflared-secret
 postgres-17-cluster:
-  mode: recovery
+  mode: standalone
  cluster:
    storage:
      storageClass: local-path
@@ -119,16 +119,14 @@ postgres-17-cluster:
  recovery:
    method: objectStore
    objectStore:
+      endpointURL: https://nyc3.digitaloceanspaces.com
      destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/postiz/postiz-postgresql-17-cluster
-      index: 2
+      endpointCredentials: postiz-postgresql-17-cluster-backup-secret
+      recoveryIndex: 1
  backup:
-    objectStore:
-      - name: external
-        destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/postiz/postiz-postgresql-17-cluster
-        index: 2
-        retentionPolicy: "2d"
-    scheduledBackups:
-      - name: daily-backup
-        suspend: false
-        schedule: "0 0 0 * * *"
-        backupName: external
+    enabled: true
+    endpointURL: https://nyc3.digitaloceanspaces.com
+    destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/postiz/postiz-postgresql-17-cluster
+    endpointCredentials: postiz-postgresql-17-cluster-backup-secret
+    backupIndex: 1
+    retentionPolicy: "7d"
--- a/clusters/cl01tl/applications/prowlarr/Chart.yaml
+++ b/clusters/cl01tl/applications/prowlarr/Chart.yaml
@@ -18,6 +18,6 @@ dependencies:
  - name: app-template
    alias: prowlarr
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.2.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/prowlarr.png
 appVersion: 1.35.1
--- a/clusters/cl01tl/applications/prowlarr/values.yaml
+++ b/clusters/cl01tl/applications/prowlarr/values.yaml
@@ -20,7 +20,7 @@ prowlarr:
        main:
          image:
            repository: ghcr.io/linuxserver/prowlarr
-            tag: 2.0.5@sha256:608935c38763920b25622a3d404bb14ea08fcaa7c2a9b1c93ce9bac61ad4b11d
+            tag: 1.37.0@sha256:25d21c04c7cc39a706217abb77bb60b283d9eaaf16acf539c930e3c797e21f25
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/applications/radarr-4k/Chart.yaml
+++ b/clusters/cl01tl/applications/radarr-4k/Chart.yaml
@@ -24,10 +24,10 @@ dependencies:
  - name: app-template
    alias: radarr-4k
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.2.0
  - name: postgres-cluster
    alias: postgres-17-cluster
-    version: 6.13.0
+    version: 5.1.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/radarr-4k.png
 appVersion: 5.22.4
--- a/clusters/cl01tl/applications/radarr-4k/values.yaml
+++ b/clusters/cl01tl/applications/radarr-4k/values.yaml
@@ -15,7 +15,7 @@ radarr-4k:
        main:
          image:
            repository: ghcr.io/linuxserver/radarr
-            tag: 5.28.0@sha256:fae2aafa6ecace3524fc79d102f5bfd25fb151caed6a454cee46479236ac33bf
+            tag: 5.26.2@sha256:7eb64f5af8bbe48e79bc55c0c37ca8db89b2f073a9ff0094f603916ae1df9de8
            pullPolicy: IfNotPresent
          env:
            - name: TZ
@@ -85,7 +85,7 @@ radarr-4k:
              readOnly: false
 postgres-17-cluster:
  nameOverride: radarr5-4k-postgresql-17
-  mode: recovery
+  mode: standalone
  cluster:
    storage:
      storageClass: local-path
@@ -95,29 +95,24 @@ postgres-17-cluster:
      enabled: true
      prometheusRule:
        enabled: true
-    resources:
-      requests:
-        memory: 1Gi
-        cpu: 200m
+  bootstrap:
    initdb:
+      database: app
+      owner: app
      postInitSQL:
        - CREATE DATABASE "radarr-main" OWNER "app";
        - CREATE DATABASE "radarr-log" OWNER "app";
  recovery:
    method: objectStore
    objectStore:
+      endpointURL: https://nyc3.digitaloceanspaces.com
      destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/radarr5-4k/radarr5-4k-postgresql-17-cluster
-      index: 1
      endpointCredentials: radarr-4k-postgresql-17-cluster-backup-secret
+      recoveryIndex: 3
  backup:
-    objectStore:
-      - name: external
-        destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/radarr5-4k/radarr5-4k-postgresql-17-cluster
-        index: 1
-        endpointCredentials: radarr-4k-postgresql-17-cluster-backup-secret
-        retentionPolicy: "2d"
-    scheduledBackups:
-      - name: daily-backup
-        suspend: false
-        schedule: "0 0 0 * * *"
-        backupName: external
+    enabled: true
+    endpointURL: https://nyc3.digitaloceanspaces.com
+    destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/radarr5-4k/radarr5-4k-postgresql-17-cluster
+    endpointCredentials: radarr-4k-postgresql-17-cluster-backup-secret
+    backupIndex: 3
+    retentionPolicy: "7d"
--- a/clusters/cl01tl/applications/radarr-anime/Chart.yaml
+++ b/clusters/cl01tl/applications/radarr-anime/Chart.yaml
@@ -24,10 +24,10 @@ dependencies:
  - name: app-template
    alias: radarr-anime
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.2.0
  - name: postgres-cluster
    alias: postgres-17-cluster
-    version: 6.13.0
+    version: 5.1.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/radarr-anime.png
 appVersion: 5.22.4
--- a/clusters/cl01tl/applications/radarr-anime/values.yaml
+++ b/clusters/cl01tl/applications/radarr-anime/values.yaml
@@ -13,7 +13,7 @@ radarr-anime:
        main:
          image:
            repository: ghcr.io/linuxserver/radarr
-            tag: 5.28.0@sha256:fae2aafa6ecace3524fc79d102f5bfd25fb151caed6a454cee46479236ac33bf
+            tag: 5.26.2@sha256:7eb64f5af8bbe48e79bc55c0c37ca8db89b2f073a9ff0094f603916ae1df9de8
            pullPolicy: IfNotPresent
          env:
            - name: TZ
@@ -83,7 +83,7 @@ radarr-anime:
              readOnly: false
 postgres-17-cluster:
  nameOverride: radarr5-anime-postgresql-17
-  mode: recovery
+  mode: standalone
  cluster:
    storage:
      storageClass: local-path
@@ -93,25 +93,24 @@ postgres-17-cluster:
      enabled: true
      prometheusRule:
        enabled: true
+  bootstrap:
    initdb:
+      database: app
+      owner: app
      postInitSQL:
        - CREATE DATABASE "radarr-main" OWNER "app";
        - CREATE DATABASE "radarr-log" OWNER "app";
  recovery:
    method: objectStore
    objectStore:
+      endpointURL: https://nyc3.digitaloceanspaces.com
      destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/radarr5-anime/radarr5-anime-postgresql-17-cluster
-      index: 1
      endpointCredentials: radarr-anime-postgresql-17-cluster-backup-secret
+      recoveryIndex: 2
  backup:
-    objectStore:
-      - name: external
-        destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/radarr5-anime/radarr5-anime-postgresql-17-cluster
-        index: 1
-        endpointCredentials: radarr-anime-postgresql-17-cluster-backup-secret
-        retentionPolicy: "2d"
-    scheduledBackups:
-      - name: daily-backup
-        suspend: false
-        schedule: "0 0 0 * * *"
-        backupName: external
+    enabled: true
+    endpointURL: https://nyc3.digitaloceanspaces.com
+    destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/radarr5-anime/radarr5-anime-postgresql-17-cluster
+    endpointCredentials: radarr-anime-postgresql-17-cluster-backup-secret
+    backupIndex: 3
+    retentionPolicy: "7d"
--- a/clusters/cl01tl/applications/radarr-standup/Chart.yaml
+++ b/clusters/cl01tl/applications/radarr-standup/Chart.yaml
@@ -23,10 +23,10 @@ dependencies:
  - name: app-template
    alias: radarr-standup
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.2.0
  - name: postgres-cluster
    alias: postgres-17-cluster
-    version: 6.13.0
+    version: 5.1.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/radarr.png
 appVersion: 5.22.4
--- a/clusters/cl01tl/applications/radarr-standup/values.yaml
+++ b/clusters/cl01tl/applications/radarr-standup/values.yaml
@@ -13,7 +13,7 @@ radarr-standup:
        main:
          image:
            repository: ghcr.io/linuxserver/radarr
-            tag: 5.28.0@sha256:fae2aafa6ecace3524fc79d102f5bfd25fb151caed6a454cee46479236ac33bf
+            tag: 5.26.2@sha256:7eb64f5af8bbe48e79bc55c0c37ca8db89b2f073a9ff0094f603916ae1df9de8
            pullPolicy: IfNotPresent
          env:
            - name: TZ
@@ -83,7 +83,7 @@ radarr-standup:
              readOnly: false
 postgres-17-cluster:
  nameOverride: radarr5-standup-postgresql-17
-  mode: recovery
+  mode: standalone
  cluster:
    storage:
      storageClass: local-path
@@ -93,25 +93,24 @@ postgres-17-cluster:
      enabled: true
      prometheusRule:
        enabled: true
+  bootstrap:
    initdb:
+      database: app
+      owner: app
      postInitSQL:
        - CREATE DATABASE "radarr-main" OWNER "app";
        - CREATE DATABASE "radarr-log" OWNER "app";
  recovery:
    method: objectStore
    objectStore:
+      endpointURL: https://nyc3.digitaloceanspaces.com
      destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/radarr5-standup/radarr5-standup-postgresql-17-cluster
-      index: 1
      endpointCredentials: radarr-standup-postgresql-17-cluster-backup-secret
+      recoveryIndex: 3
  backup:
-    objectStore:
-      - name: external
-        destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/radarr5-standup/radarr5-standup-postgresql-17-cluster
-        index: 1
-        endpointCredentials: radarr-standup-postgresql-17-cluster-backup-secret
-        retentionPolicy: "2d"
-    scheduledBackups:
-      - name: daily-backup
-        suspend: false
-        schedule: "0 0 0 * * *"
-        backupName: external
+    enabled: true
+    endpointURL: https://nyc3.digitaloceanspaces.com
+    destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/radarr5-standup/radarr5-standup-postgresql-17-cluster
+    endpointCredentials: radarr-standup-postgresql-17-cluster-backup-secret
+    backupIndex: 3
+    retentionPolicy: "7d"
--- a/clusters/cl01tl/applications/radarr/Chart.yaml
+++ b/clusters/cl01tl/applications/radarr/Chart.yaml
@@ -23,10 +23,10 @@ dependencies:
  - name: app-template
    alias: radarr
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.2.0
  - name: postgres-cluster
    alias: postgres-17-cluster
-    version: 6.13.0
+    version: 5.1.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/radarr.png
 appVersion: 5.22.4
--- a/clusters/cl01tl/applications/radarr/values.yaml
+++ b/clusters/cl01tl/applications/radarr/values.yaml
@@ -15,7 +15,7 @@ radarr:
        main:
          image:
            repository: ghcr.io/linuxserver/radarr
-            tag: 5.28.0@sha256:fae2aafa6ecace3524fc79d102f5bfd25fb151caed6a454cee46479236ac33bf
+            tag: 5.26.2@sha256:7eb64f5af8bbe48e79bc55c0c37ca8db89b2f073a9ff0094f603916ae1df9de8
            pullPolicy: IfNotPresent
          env:
            - name: TZ
@@ -85,39 +85,38 @@ radarr:
              readOnly: false
 postgres-17-cluster:
  nameOverride: radarr5-postgresql-17
-  mode: recovery
+  mode: standalone
  cluster:
    storage:
      storageClass: local-path
    walStorage:
      storageClass: local-path
-    monitoring:
-      enabled: true
-      prometheusRule:
-        enabled: true
    resources:
      requests:
        memory: 1Gi
        cpu: 200m
+    monitoring:
+      enabled: true
+      prometheusRule:
+        enabled: true
+  bootstrap:
    initdb:
+      database: app
+      owner: app
      postInitSQL:
        - CREATE DATABASE "radarr-main" OWNER "app";
        - CREATE DATABASE "radarr-log" OWNER "app";
  recovery:
    method: objectStore
    objectStore:
+      endpointURL: https://nyc3.digitaloceanspaces.com
      destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/radarr5/radarr5-postgresql-17-cluster
-      index: 2
      endpointCredentials: radarr-postgresql-17-cluster-backup-secret
+      recoveryIndex: 3
  backup:
-    objectStore:
-      - name: external
-        destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/radarr5/radarr5-postgresql-17-cluster
-        index: 2
-        endpointCredentials: radarr-postgresql-17-cluster-backup-secret
-        retentionPolicy: "1d"
-    scheduledBackups:
-      - name: daily-backup
-        suspend: false
-        schedule: "0 0 */12 * * *"
-        backupName: external
+    enabled: true
+    endpointURL: https://nyc3.digitaloceanspaces.com
+    destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/radarr5/radarr5-postgresql-17-cluster
+    endpointCredentials: radarr-postgresql-17-cluster-backup-secret
+    backupIndex: 3
+    retentionPolicy: "7d"
--- a/clusters/cl01tl/applications/roundcube/Chart.yaml
+++ b/clusters/cl01tl/applications/roundcube/Chart.yaml
@@ -18,10 +18,10 @@ dependencies:
  - name: app-template
    alias: roundcube
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.2.0
  - name: postgres-cluster
    alias: postgres-17-cluster
-    version: 6.13.0
+    version: 5.1.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/roundcube.png
 appVersion: 1.6.10
--- a/clusters/cl01tl/applications/roundcube/values.yaml
+++ b/clusters/cl01tl/applications/roundcube/values.yaml
@@ -58,7 +58,7 @@ roundcube:
        nginx:
          image:
            repository: nginx
-            tag: 1.29.2-alpine
+            tag: 1.29.1-alpine
            pullPolicy: IfNotPresent
          env:
            - name: NGINX_HOST
@@ -206,7 +206,7 @@ roundcube:
              mountPropagation: None
              subPath: default.conf
 postgres-17-cluster:
-  mode: recovery
+  mode: standalone
  cluster:
    storage:
      storageClass: local-path
@@ -219,16 +219,14 @@ postgres-17-cluster:
  recovery:
    method: objectStore
    objectStore:
+      endpointURL: https://nyc3.digitaloceanspaces.com
      destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/roundcube/roundcube-postgresql-17-cluster
-      index: 2
+      endpointCredentials: roundcube-postgresql-17-cluster-backup-secret
+      recoveryIndex: 2
  backup:
-    objectStore:
-      - name: external
-        destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/roundcube/roundcube-postgresql-17-cluster
-        index: 2
-        retentionPolicy: "2d"
-    scheduledBackups:
-      - name: daily-backup
-        suspend: false
-        schedule: "0 0 0 * * *"
-        backupName: external
+    enabled: true
+    endpointURL: https://nyc3.digitaloceanspaces.com
+    destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/roundcube/roundcube-postgresql-17-cluster
+    endpointCredentials: roundcube-postgresql-17-cluster-backup-secret
+    backupIndex: 2
+    retentionPolicy: "7d"
--- a/clusters/cl01tl/applications/searxng/Chart.yaml
+++ b/clusters/cl01tl/applications/searxng/Chart.yaml
@@ -15,6 +15,6 @@ dependencies:
  - name: app-template
    alias: searxng
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.2.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/searxng.png
 appVersion: 1.0.0
--- a/clusters/cl01tl/applications/searxng/values.yaml
+++ b/clusters/cl01tl/applications/searxng/values.yaml
@@ -9,7 +9,7 @@ searxng:
        main:
          image:
            repository: searxng/searxng
-            tag: latest@sha256:ffc01f261943ae18e203c01fafd8c7eba75f9dd30f9a1c352f39511d668d6df6
+            tag: latest@sha256:34613ae98075167b7d055723e826804ac3922007caa35bd88e7233929c28f851
            pullPolicy: IfNotPresent
          env:
            - name: SEARXNG_BASE_URL
@@ -43,7 +43,7 @@ searxng:
        main:
          image:
            repository: searxng/searxng
-            tag: latest@sha256:ffc01f261943ae18e203c01fafd8c7eba75f9dd30f9a1c352f39511d668d6df6
+            tag: latest@sha256:34613ae98075167b7d055723e826804ac3922007caa35bd88e7233929c28f851
            pullPolicy: IfNotPresent
          env:
            - name: SEARXNG_BASE_URL
--- a/clusters/cl01tl/applications/site-documentation/Chart.yaml
+++ b/clusters/cl01tl/applications/site-documentation/Chart.yaml
@@ -19,10 +19,10 @@ dependencies:
  - name: app-template
    alias: site-documentation
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.2.0
  - name: cloudflared
    alias: cloudflared-site
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.22.1
+    version: 1.20.1
 icon: https://d21zlbwtcn424f.cloudfront.net/logo-new-round.png
 appVersion: 0.8.1
--- a/clusters/cl01tl/applications/site-documentation/values.yaml
+++ b/clusters/cl01tl/applications/site-documentation/values.yaml
@@ -11,7 +11,7 @@ site-documentation:
        main:
          image:
            repository: harbor.alexlebens.net/images/site-documentation
-            tag: 0.0.2
+            tag: 0.0.1
            pullPolicy: IfNotPresent
          resources:
            requests:
--- a/clusters/cl01tl/applications/site-profile/Chart.yaml
+++ b/clusters/cl01tl/applications/site-profile/Chart.yaml
@@ -19,10 +19,10 @@ dependencies:
  - name: app-template
    alias: site-profile
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.2.0
  - name: cloudflared
    alias: cloudflared-site
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.22.1
+    version: 1.20.1
 icon: https://d21zlbwtcn424f.cloudfront.net/logo-new-round.png
 appVersion: 2.0.1
--- a/clusters/cl01tl/applications/site-profile/values.yaml
+++ b/clusters/cl01tl/applications/site-profile/values.yaml
@@ -11,7 +11,7 @@ site-profile:
        main:
          image:
            repository: harbor.alexlebens.net/images/site-profile
-            tag: 2.0.6
+            tag: 2.0.5
            pullPolicy: IfNotPresent
          resources:
            requests:
--- a/clusters/cl01tl/applications/slskd/Chart.yaml
+++ b/clusters/cl01tl/applications/slskd/Chart.yaml
@@ -20,6 +20,6 @@ dependencies:
  - name: app-template
    alias: slskd
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.2.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/slskd.png
 appVersion: 0.22.5
--- a/clusters/cl01tl/applications/slskd/values.yaml
+++ b/clusters/cl01tl/applications/slskd/values.yaml
@@ -76,9 +76,9 @@ slskd:
                - SYS_MODULE
          resources:
            limits:
-              devic.es/tun: "1"
+              squat.ai/tun: "1"
            requests:
-              devic.es/tun: "1"
+              squat.ai/tun: "1"
              cpu: 10m
              memory: 128Mi
    soularr:
@@ -94,7 +94,7 @@ slskd:
        main:
          image:
            repository: mrusse08/soularr
-            tag: latest@sha256:71a0b9e5a522d76bb0ffdb6d720d681fde22417b3a5acc9ecae61c89d05d8afc
+            tag: latest@sha256:894210817cd89dd410fa603be2744ca81c593b9eaa542639a7894f2df008a788
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/applications/sonarr-4k/Chart.yaml
+++ b/clusters/cl01tl/applications/sonarr-4k/Chart.yaml
@@ -24,10 +24,10 @@ dependencies:
  - name: app-template
    alias: sonarr-4k
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.2.0
  - name: postgres-cluster
    alias: postgres-17-cluster
-    version: 6.13.0
+    version: 5.1.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/sonarr.png
 appVersion: 4.0.14
--- a/clusters/cl01tl/applications/sonarr-4k/values.yaml
+++ b/clusters/cl01tl/applications/sonarr-4k/values.yaml
@@ -13,7 +13,7 @@ sonarr-4k:
        main:
          image:
            repository: ghcr.io/linuxserver/sonarr
-            tag: 4.0.15@sha256:69d72f525bc181728c8f4788992a28ae1cd797ddd978f48bc2e271c7acd02e9b
+            tag: 4.0.15@sha256:1a90192952c30f9420994b2e2171083ea8cae100357de5e9eb25890efa90a6ce
            pullPolicy: IfNotPresent
          env:
            - name: TZ
@@ -83,38 +83,25 @@ sonarr-4k:
              readOnly: false
 postgres-17-cluster:
  nameOverride: sonarr4-4k-postgresql-17
-  mode: recovery
+  mode: standalone
  cluster:
-    storage:
-      storageClass: local-path
    walStorage:
      storageClass: local-path
-    resources:
-      requests:
-        memory: 512Mi
+    storage:
+      storageClass: local-path
    monitoring:
      enabled: true
-      prometheusRule:
-        enabled: true
+  bootstrap:
    initdb:
+      database: app
+      owner: app
      postInitSQL:
        - CREATE DATABASE "sonarr-main" OWNER "app";
        - CREATE DATABASE "sonarr-log" OWNER "app";
-  recovery:
-    method: objectStore
-    objectStore:
-      destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/sonarr4-4k/sonarr4-4k-postgresql-17-cluster
-      index: 1
-      endpointCredentials: sonarr-4k-postgresql-17-cluster-backup-secret
  backup:
-    objectStore:
-      - name: external
-        destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/sonarr4-4k/sonarr4-4k-postgresql-17-cluster
-        index: 1
-        endpointCredentials: sonarr-4k-postgresql-17-cluster-backup-secret
-        retentionPolicy: "2d"
-    scheduledBackups:
-      - name: daily-backup
-        suspend: false
-        schedule: "0 0 0 * * *"
-        backupName: external
+    enabled: true
+    endpointURL: https://nyc3.digitaloceanspaces.com
+    destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/sonarr4-4k/sonarr4-4k-postgresql-17-cluster
+    endpointCredentials: sonarr-4k-postgresql-17-cluster-backup-secret
+    backupIndex: 3
+    retentionPolicy: "7d"
--- a/clusters/cl01tl/applications/sonarr-anime/Chart.yaml
+++ b/clusters/cl01tl/applications/sonarr-anime/Chart.yaml
@@ -23,10 +23,10 @@ dependencies:
  - name: app-template
    alias: sonarr-anime
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.2.0
  - name: postgres-cluster
    alias: postgres-17-cluster
-    version: 6.13.0
+    version: 5.1.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/sonarr.png
 appVersion: 4.0.14
--- a/clusters/cl01tl/applications/sonarr-anime/values.yaml
+++ b/clusters/cl01tl/applications/sonarr-anime/values.yaml
@@ -13,7 +13,7 @@ sonarr-anime:
        main:
          image:
            repository: ghcr.io/linuxserver/sonarr
-            tag: 4.0.15@sha256:69d72f525bc181728c8f4788992a28ae1cd797ddd978f48bc2e271c7acd02e9b
+            tag: 4.0.15@sha256:1a90192952c30f9420994b2e2171083ea8cae100357de5e9eb25890efa90a6ce
            pullPolicy: IfNotPresent
          env:
            - name: TZ
@@ -83,38 +83,34 @@ sonarr-anime:
              readOnly: false
 postgres-17-cluster:
  nameOverride: sonarr4-anime-postgresql-17
-  mode: recovery
+  mode: standalone
  cluster:
    storage:
      storageClass: local-path
    walStorage:
      storageClass: local-path
-    resources:
-      requests:
-        memory: 512Mi
    monitoring:
      enabled: true
      prometheusRule:
        enabled: true
+  bootstrap:
    initdb:
+      database: app
+      owner: app
      postInitSQL:
        - CREATE DATABASE "sonarr-main" OWNER "app";
        - CREATE DATABASE "sonarr-log" OWNER "app";
  recovery:
    method: objectStore
    objectStore:
+      endpointURL: https://nyc3.digitaloceanspaces.com
      destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/sonarr4-anime/sonarr4-anime-postgresql-17-cluster
-      index: 1
      endpointCredentials: sonarr-anime-postgresql-17-cluster-backup-secret
+      recoveryIndex: 3
  backup:
-    objectStore:
-      - name: external
-        destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/sonarr4-anime/sonarr4-anime-postgresql-17-cluster
-        index: 1
-        endpointCredentials: sonarr-anime-postgresql-17-cluster-backup-secret
-        retentionPolicy: "2d"
-    scheduledBackups:
-      - name: daily-backup
-        suspend: false
-        schedule: "0 0 0 * * *"
-        backupName: external
+    enabled: true
+    endpointURL: https://nyc3.digitaloceanspaces.com
+    destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/sonarr4-anime/sonarr4-anime-postgresql-17-cluster
+    endpointCredentials: sonarr-anime-postgresql-17-cluster-backup-secret
+    backupIndex: 3
+    retentionPolicy: "7d"
--- a/clusters/cl01tl/applications/sonarr/Chart.yaml
+++ b/clusters/cl01tl/applications/sonarr/Chart.yaml
@@ -23,10 +23,10 @@ dependencies:
  - name: app-template
    alias: sonarr
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.2.0
  - name: postgres-cluster
    alias: postgres-17-cluster
-    version: 6.13.0
+    version: 5.1.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/sonarr.png
 appVersion: 4.0.14
--- a/clusters/cl01tl/applications/sonarr/values.yaml
+++ b/clusters/cl01tl/applications/sonarr/values.yaml
@@ -13,7 +13,7 @@ sonarr:
        main:
          image:
            repository: ghcr.io/linuxserver/sonarr
-            tag: 4.0.15@sha256:69d72f525bc181728c8f4788992a28ae1cd797ddd978f48bc2e271c7acd02e9b
+            tag: 4.0.15@sha256:1a90192952c30f9420994b2e2171083ea8cae100357de5e9eb25890efa90a6ce
            pullPolicy: IfNotPresent
          env:
            - name: TZ
@@ -83,39 +83,37 @@ sonarr:
              readOnly: false
 postgres-17-cluster:
  nameOverride: sonarr4-postgresql-17
-  mode: recovery
+  mode: standalone
  cluster:
    storage:
      storageClass: local-path
    walStorage:
      storageClass: local-path
+    resources:
+      requests:
+        memory: 512Mi
    monitoring:
      enabled: true
      prometheusRule:
        enabled: true
-    resources:
-      requests:
-        memory: 1Gi
-        cpu: 200m
+  bootstrap:
    initdb:
+      database: app
+      owner: app
      postInitSQL:
        - CREATE DATABASE "sonarr-main" OWNER "app";
        - CREATE DATABASE "sonarr-log" OWNER "app";
  recovery:
    method: objectStore
    objectStore:
+      endpointURL: https://nyc3.digitaloceanspaces.com
      destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/sonarr4/sonarr4-postgresql-17-cluster
-      index: 1
      endpointCredentials: sonarr-postgresql-17-cluster-backup-secret
+      recoveryIndex: 3
  backup:
-    objectStore:
-      - name: external
-        destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/sonarr4/sonarr4-postgresql-17-cluster
-        index: 1
-        endpointCredentials: sonarr-postgresql-17-cluster-backup-secret
-        retentionPolicy: "1d"
-    scheduledBackups:
-      - name: daily-backup
-        suspend: false
-        schedule: "0 0 */12 * * *"
-        backupName: external
+    enabled: true
+    endpointURL: https://nyc3.digitaloceanspaces.com
+    destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/sonarr4/sonarr4-postgresql-17-cluster
+    endpointCredentials: sonarr-postgresql-17-cluster-backup-secret
+    backupIndex: 3
+    retentionPolicy: "7d"
--- a/clusters/cl01tl/applications/tautulli/Chart.yaml
+++ b/clusters/cl01tl/applications/tautulli/Chart.yaml
@@ -16,6 +16,6 @@ dependencies:
  - name: app-template
    alias: tautulli
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.2.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/tautulli.png
 appVersion: v2.15.2
--- a/clusters/cl01tl/applications/tautulli/values.yaml
+++ b/clusters/cl01tl/applications/tautulli/values.yaml
@@ -11,7 +11,7 @@ tautulli:
        main:
          image:
            repository: ghcr.io/tautulli/tautulli
-            tag: v2.16.0
+            tag: v2.15.3
            pullPolicy: IfNotPresent
          env:
            - name: PUID
--- a/clusters/cl01tl/applications/tdarr/Chart.yaml
+++ b/clusters/cl01tl/applications/tdarr/Chart.yaml
@@ -21,7 +21,7 @@ dependencies:
  - name: app-template
    alias: tdarr
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.2.0
  - name: tdarr-exporter
    version: 1.1.7
    repository: https://homeylab.github.io/helm-charts/
--- a/clusters/cl01tl/applications/tdarr/values.yaml
+++ b/clusters/cl01tl/applications/tdarr/values.yaml
@@ -9,7 +9,7 @@ tdarr:
        main:
          image:
            repository: ghcr.io/haveagitgat/tdarr
-            tag: 2.49.01
+            tag: 2.45.01
            pullPolicy: IfNotPresent
          env:
            - name: TZ
@@ -48,7 +48,7 @@ tdarr:
        main:
          image:
            repository: ghcr.io/haveagitgat/tdarr_node
-            tag: 2.49.01
+            tag: 2.45.01
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/applications/tubearchivist/Chart.yaml
+++ b/clusters/cl01tl/applications/tubearchivist/Chart.yaml
@@ -19,6 +19,6 @@ dependencies:
  - name: app-template
    alias: tubearchivist
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.2.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/tube-archivist.png
 appVersion: v0.5.2
--- a/clusters/cl01tl/applications/tubearchivist/values.yaml
+++ b/clusters/cl01tl/applications/tubearchivist/values.yaml
@@ -74,9 +74,9 @@ tubearchivist:
                - SYS_MODULE
          resources:
            limits:
-              devic.es/tun: "1"
+              squat.ai/tun: "1"
            requests:
-              devic.es/tun: "1"
+              squat.ai/tun: "1"
              cpu: 10m
              memory: 128Mi
  service:
--- a/clusters/cl01tl/applications/vaultwarden/Chart.yaml
+++ b/clusters/cl01tl/applications/vaultwarden/Chart.yaml
@@ -21,14 +21,14 @@ dependencies:
  - name: app-template
    alias: vaultwarden
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.2.0
  - name: cloudflared
    alias: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.22.1
+    version: 1.20.1
  - name: postgres-cluster
    alias: postgres-17-cluster
-    version: 6.13.0
+    version: 5.1.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/vaultwarden.png
 appVersion: 1.33.2
--- a/clusters/cl01tl/applications/vaultwarden/values.yaml
+++ b/clusters/cl01tl/applications/vaultwarden/values.yaml
@@ -50,7 +50,7 @@ vaultwarden:
 cloudflared:
  existingSecretName: vaultwarden-cloudflared-secret
 postgres-17-cluster:
-  mode: recovery
+  mode: standalone
  cluster:
    storage:
      storageClass: local-path
@@ -63,16 +63,14 @@ postgres-17-cluster:
  recovery:
    method: objectStore
    objectStore:
+      endpointURL: https://nyc3.digitaloceanspaces.com
      destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/vaultwarden/vaultwarden-postgresql-17-cluster
-      index: 1
+      endpointCredentials: vaultwarden-postgresql-17-cluster-backup-secret
+      recoveryIndex: 3
  backup:
-    objectStore:
-      - name: external
-        destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/vaultwarden/vaultwarden-postgresql-17-cluster
-        index: 1
-        retentionPolicy: "2d"
-    scheduledBackups:
-      - name: daily-backup
-        suspend: false
-        schedule: "0 0 0 * * *"
-        backupName: external
+    enabled: true
+    endpointURL: https://nyc3.digitaloceanspaces.com
+    destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/vaultwarden/vaultwarden-postgresql-17-cluster
+    endpointCredentials: vaultwarden-postgresql-17-cluster-backup-secret
+    backupIndex: 3
+    retentionPolicy: "7d"
--- a/clusters/cl01tl/applications/yamtrack/Chart.yaml
+++ b/clusters/cl01tl/applications/yamtrack/Chart.yaml
@@ -19,10 +19,10 @@ dependencies:
  - name: app-template
    alias: yamtrack
    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.4.0
+    version: 4.2.0
  - name: postgres-cluster
    alias: postgres-17-cluster
-    version: 6.13.0
+    version: 5.1.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/yamtrack.png
 appVersion: 0.22.7
--- a/Show More
+++ b/Show More