Update ghcr.io/tailscale/tailscale Docker tag to v1.90.5

.gitea/workflows/lint-test-docker.yaml

@@ -37,7 +37,7 @@ jobs:
 
       - name: Set up Node.js
         if: steps.check-branch-exists.outputs.exists == 'true'
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v4
         with:
           node-version: '22'
 

clusters/cl01tl/applications/code-server/Chart.yaml

@@ -23,6 +23,6 @@ dependencies:
   - name: cloudflared
     alias: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.22.2
+    version: 1.22.1
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/visual-studio-code.png
 appVersion: 4.100.2

clusters/cl01tl/applications/directus/Chart.yaml

@@ -24,7 +24,7 @@ dependencies:
   - name: cloudflared
     alias: cloudflared-directus
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.22.2
+    version: 1.22.1
   - name: postgres-cluster
     alias: postgres-17-cluster
     version: 6.15.0

clusters/cl01tl/applications/directus/values.yaml

@@ -179,7 +179,7 @@ postgres-17-cluster:
       - name: external
         destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/directus/directus-postgresql-17-cluster
         index: 1
-        retentionPolicy: "30d"
+        retentionPolicy: "7d"
         isWALArchiver: false
       - name: garage-local
         destinationPath: s3://postgres-backups/cl01tl/directus/directus-postgresql-17-cluster
@@ -187,7 +187,7 @@ postgres-17-cluster:
         endpointURL: http://garage-main.garage:3900
         endpointCredentials: directus-postgresql-17-cluster-backup-secret-garage
         endpointCredentialsIncludeRegion: true
-        retentionPolicy: "3d"
+        retentionPolicy: "7d"
         isWALArchiver: true
       # - name: garage-remote
       #   destinationPath: s3://postgres-backups/cl01tl/directus/directus-postgresql-17-cluster

clusters/cl01tl/applications/element-web/Chart.yaml

@@ -22,6 +22,6 @@ dependencies:
   - name: cloudflared
     alias: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.22.2
+    version: 1.22.1
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/element.png
 appVersion: v1.11.100

clusters/cl01tl/applications/freshrss/Chart.yaml

@@ -24,7 +24,7 @@ dependencies:
   - name: cloudflared
     alias: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.22.2
+    version: 1.22.1
   - name: postgres-cluster
     alias: postgres-17-cluster
     version: 6.15.0

clusters/cl01tl/applications/freshrss/values.yaml

@@ -216,7 +216,7 @@ postgres-17-cluster:
       - name: external
         destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/freshrss/freshrss-postgresql-17-cluster
         index: 1
-        retentionPolicy: "30d"
+        retentionPolicy: "7d"
         isWALArchiver: false
       - name: garage-local
         destinationPath: s3://postgres-backups/cl01tl/freshrss/freshrss-postgresql-17-cluster
@@ -224,7 +224,7 @@ postgres-17-cluster:
         endpointURL: http://garage-main.garage:3900
         endpointCredentials: freshrss-postgresql-17-cluster-backup-secret-garage
         endpointCredentialsIncludeRegion: true
-        retentionPolicy: "3d"
+        retentionPolicy: "7d"
         isWALArchiver: true
       # - name: garage-remote
       #   destinationPath: s3://postgres-backups/cl01tl/freshrss/freshrss-postgresql-17-cluster

clusters/cl01tl/applications/homepage-dev/Chart.yaml

@@ -22,6 +22,6 @@ dependencies:
   - name: cloudflared
     alias: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.22.2
+    version: 1.22.1
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/homepage.png
 appVersion: v1.2.0

clusters/cl01tl/applications/immich/values.yaml

@@ -9,7 +9,7 @@ immich:
         main:
           image:
             repository: ghcr.io/immich-app/immich-server
-            tag: v2.2.1
+            tag: v2.1.0
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -99,7 +99,7 @@ immich:
         main:
           image:
             repository: ghcr.io/immich-app/immich-machine-learning
-            tag: v2.2.1
+            tag: v2.1.0
             pullPolicy: IfNotPresent
           env:
             - name: TRANSFORMERS_CACHE
@@ -225,7 +225,7 @@ postgres-17-cluster:
       - name: external
         destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/immich/immich-postgresql-17-cluster
         index: 2
-        retentionPolicy: "30d"
+        retentionPolicy: "7d"
         isWALArchiver: false
       - name: garage-local
         destinationPath: s3://postgres-backups/cl01tl/immich/immich-postgresql-17-cluster
@@ -233,7 +233,7 @@ postgres-17-cluster:
         endpointURL: http://garage-main.garage:3900
         endpointCredentials: immich-postgresql-17-cluster-backup-secret-garage
         endpointCredentialsIncludeRegion: true
-        retentionPolicy: "3d"
+        retentionPolicy: "7d"
         isWALArchiver: true
       # - name: garage-remote
       #   destinationPath: s3://postgres-backups/cl01tl/immich/immich-postgresql-17-cluster

clusters/cl01tl/applications/jellyfin/values.yaml

@@ -9,7 +9,7 @@ jellyfin:
         main:
           image:
             repository: ghcr.io/jellyfin/jellyfin
-            tag: 10.11.2
+            tag: 10.11.1
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/applications/jellystat/values.yaml

@@ -101,7 +101,7 @@ postgres-17-cluster:
       - name: external
         destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/jellystat/jellystat-postgresql-17-cluster
         index: 1
-        retentionPolicy: "30d"
+        retentionPolicy: "7d"
         isWALArchiver: false
       - name: garage-local
         destinationPath: s3://postgres-backups/cl01tl/jellystat/jellystat-postgresql-17-cluster
@@ -109,7 +109,7 @@ postgres-17-cluster:
         endpointURL: http://garage-main.garage:3900
         endpointCredentials: jellystat-postgresql-17-cluster-backup-secret-garage
         endpointCredentialsIncludeRegion: true
-        retentionPolicy: "3d"
+        retentionPolicy: "7d"
         isWALArchiver: true
       # - name: garage-remote
       #   destinationPath: s3://postgres-backups/cl01tl/jellystat/jellystat-postgresql-17-cluster

clusters/cl01tl/applications/karakeep/Chart.yaml

@@ -27,6 +27,6 @@ dependencies:
   - name: cloudflared
     alias: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.22.2
+    version: 1.22.1
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/webp/karakeep.webp
 appVersion: 0.26.0

clusters/cl01tl/applications/kiwix/values.yaml

@@ -9,7 +9,7 @@ kiwix:
         main:
           image:
             repository: ghcr.io/kiwix/kiwix-serve
-            tag: 3.8.0
+            tag: 3.7.0
             pullPolicy: IfNotPresent
           args:
             - '*.zim'

clusters/cl01tl/applications/libation/values.yaml

@@ -16,7 +16,7 @@ libation:
         main:
           image:
             repository: rmcrackan/libation
-            tag: 12.5.7
+            tag: 12.5.6
             pullPolicy: IfNotPresent
           env:
             - name: SLEEP_TIME

clusters/cl01tl/applications/lidarr/values.yaml

@@ -116,7 +116,7 @@ postgres-17-cluster:
         destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/lidarr2/lidarr2-postgresql-17-cluster
         index: 1
         endpointCredentials: lidarr-postgresql-17-cluster-backup-secret
-        retentionPolicy: "30d"
+        retentionPolicy: "7d"
         isWALArchiver: false
       - name: garage-local
         destinationPath: s3://postgres-backups/cl01tl/lidarr/lidarr2-postgresql-17-cluster
@@ -124,7 +124,7 @@ postgres-17-cluster:
         endpointURL: http://garage-main.garage:3900
         endpointCredentials: lidarr-postgresql-17-cluster-backup-secret-garage
         endpointCredentialsIncludeRegion: true
-        retentionPolicy: "3d"
+        retentionPolicy: "7d"
         isWALArchiver: true
       # - name: garage-remote
       #   destinationPath: s3://postgres-backups/cl01tl/lidarr/lidarr2-postgresql-17-cluster

clusters/cl01tl/applications/outline/Chart.yaml

@@ -25,7 +25,7 @@ dependencies:
   - name: cloudflared
     alias: cloudflared-outline
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.22.2
+    version: 1.22.1
   - name: postgres-cluster
     alias: postgres-17-cluster
     version: 6.15.0

clusters/cl01tl/applications/outline/values.yaml

@@ -168,7 +168,7 @@ postgres-17-cluster:
       - name: external
         destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/outline/outline-postgresql-17-cluster
         index: 1
-        retentionPolicy: "30d"
+        retentionPolicy: "7d"
         isWALArchiver: false
       - name: garage-local
         destinationPath: s3://postgres-backups/cl01tl/outline/outline-postgresql-17-cluster
@@ -176,7 +176,7 @@ postgres-17-cluster:
         endpointURL: http://garage-main.garage:3900
         endpointCredentials: outline-postgresql-17-cluster-backup-secret-garage
         endpointCredentialsIncludeRegion: true
-        retentionPolicy: "3d"
+        retentionPolicy: "7d"
         isWALArchiver: true
       # - name: garage-remote
       #   destinationPath: s3://postgres-backups/cl01tl/outline/outline-postgresql-17-cluster

clusters/cl01tl/applications/photoview/values.yaml

@@ -95,7 +95,7 @@ postgres-17-cluster:
       - name: external
         destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/photoview/photoview-postgresql-17-cluster
         index: 1
-        retentionPolicy: "30d"
+        retentionPolicy: "7d"
         isWALArchiver: false
       - name: garage-local
         destinationPath: s3://postgres-backups/cl01tl/photoview/photoview-postgresql-17-cluster
@@ -103,7 +103,7 @@ postgres-17-cluster:
         endpointURL: http://garage-main.garage:3900
         endpointCredentials: photoview-postgresql-17-cluster-backup-secret-garage
         endpointCredentialsIncludeRegion: true
-        retentionPolicy: "3d"
+        retentionPolicy: "7d"
         isWALArchiver: true
       # - name: garage-remote
       #   destinationPath: s3://postgres-backups/cl01tl/photoview/photoview-postgresql-17-cluster

clusters/cl01tl/applications/postiz/Chart.yaml

@@ -23,7 +23,7 @@ dependencies:
     version: 4.4.0
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.22.2
+    version: 1.22.1
   - name: postgres-cluster
     alias: postgres-17-cluster
     version: 6.15.0

clusters/cl01tl/applications/postiz/values.yaml

@@ -128,7 +128,7 @@ postgres-17-cluster:
       - name: external
         destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/postiz/postiz-postgresql-17-cluster
         index: 2
-        retentionPolicy: "30d"
+        retentionPolicy: "7d"
         isWALArchiver: false
       - name: garage-local
         destinationPath: s3://postgres-backups/cl01tl/postiz/postiz-postgresql-17-cluster
@@ -136,7 +136,7 @@ postgres-17-cluster:
         endpointURL: http://garage-main.garage:3900
         endpointCredentials: postiz-postgresql-17-cluster-backup-secret-garage
         endpointCredentialsIncludeRegion: true
-        retentionPolicy: "3d"
+        retentionPolicy: "7d"
         isWALArchiver: true
       # - name: garage-remote
       #   destinationPath: s3://postgres-backups/cl01tl/postiz/postiz-postgresql-17-cluster

clusters/cl01tl/applications/radarr-4k/values.yaml

@@ -116,7 +116,7 @@ postgres-17-cluster:
         destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/radarr5-4k/radarr5-4k-postgresql-17-cluster
         index: 1
         endpointCredentials: radarr-4k-postgresql-17-cluster-backup-secret
-        retentionPolicy: "30d"
+        retentionPolicy: "7d"
         isWALArchiver: false
       - name: garage-local
         destinationPath: s3://postgres-backups/cl01tl/radarr-4k/radarr5-4k-postgresql-17-cluster
@@ -124,7 +124,7 @@ postgres-17-cluster:
         endpointURL: http://garage-main.garage:3900
         endpointCredentials: radarr-4k-postgresql-17-cluster-backup-secret-garage
         endpointCredentialsIncludeRegion: true
-        retentionPolicy: "3d"
+        retentionPolicy: "7d"
         isWALArchiver: true
       # - name: garage-remote
       #   destinationPath: s3://postgres-backups/cl01tl/radarr-4k/radarr5-4k-postgresql-17-cluster

clusters/cl01tl/applications/radarr-anime/values.yaml

@@ -110,7 +110,7 @@ postgres-17-cluster:
         destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/radarr5-anime/radarr5-anime-postgresql-17-cluster
         index: 1
         endpointCredentials: radarr-anime-postgresql-17-cluster-backup-secret
-        retentionPolicy: "30d"
+        retentionPolicy: "7d"
         isWALArchiver: false
       - name: garage-local
         destinationPath: s3://postgres-backups/cl01tl/radarr-anime/radarr5-anime-postgresql-17-cluster
@@ -118,7 +118,7 @@ postgres-17-cluster:
         endpointURL: http://garage-main.garage:3900
         endpointCredentials: radarr-anime-postgresql-17-cluster-backup-secret-garage
         endpointCredentialsIncludeRegion: true
-        retentionPolicy: "3d"
+        retentionPolicy: "7d"
         isWALArchiver: true
       # - name: garage-remote
       #   destinationPath: s3://postgres-backups/cl01tl/radarr-anime/radarr5-anime-postgresql-17-cluster

clusters/cl01tl/applications/radarr-standup/values.yaml

@@ -110,7 +110,7 @@ postgres-17-cluster:
         destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/radarr5-standup/radarr5-standup-postgresql-17-cluster
         index: 1
         endpointCredentials: radarr-standup-postgresql-17-cluster-backup-secret
-        retentionPolicy: "30d"
+        retentionPolicy: "7d"
         isWALArchiver: false
       - name: garage-local
         destinationPath: s3://postgres-backups/cl01tl/radarr-standup/radarr5-standup-postgresql-17-cluster
@@ -118,7 +118,7 @@ postgres-17-cluster:
         endpointURL: http://garage-main.garage:3900
         endpointCredentials: radarr-standup-postgresql-17-cluster-backup-secret-garage
         endpointCredentialsIncludeRegion: true
-        retentionPolicy: "3d"
+        retentionPolicy: "7d"
         isWALArchiver: true
       # - name: garage-remote
       #   destinationPath: s3://postgres-backups/cl01tl/radarr-standup/radarr5-standup-postgresql-17-cluster

clusters/cl01tl/applications/radarr/values.yaml

@@ -116,7 +116,7 @@ postgres-17-cluster:
         destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/radarr5/radarr5-postgresql-17-cluster
         index: 2
         endpointCredentials: radarr-postgresql-17-cluster-backup-secret
-        retentionPolicy: "30d"
+        retentionPolicy: "7d"
         isWALArchiver: false
       - name: garage-local
         destinationPath: s3://postgres-backups/cl01tl/radarr/radarr5-postgresql-17-cluster
@@ -124,7 +124,7 @@ postgres-17-cluster:
         endpointURL: http://garage-main.garage:3900
         endpointCredentials: radarr-postgresql-17-cluster-backup-secret-garage
         endpointCredentialsIncludeRegion: true
-        retentionPolicy: "3d"
+        retentionPolicy: "7d"
         isWALArchiver: true
       # - name: garage-remote
       #   destinationPath: s3://postgres-backups/cl01tl/radarr/radarr5-postgresql-17-cluster

clusters/cl01tl/applications/roundcube/values.yaml

@@ -228,7 +228,7 @@ postgres-17-cluster:
       - name: external
         destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/roundcube/roundcube-postgresql-17-cluster
         index: 2
-        retentionPolicy: "30d"
+        retentionPolicy: "7d"
         isWALArchiver: false
       - name: garage-local
         destinationPath: s3://postgres-backups/cl01tl/roundcube/roundcube-postgresql-17-cluster
@@ -236,7 +236,7 @@ postgres-17-cluster:
         endpointURL: http://garage-main.garage:3900
         endpointCredentials: roundcube-postgresql-17-cluster-backup-secret-garage
         endpointCredentialsIncludeRegion: true
-        retentionPolicy: "3d"
+        retentionPolicy: "7d"
         isWALArchiver: true
       # - name: garage-remote
       #   destinationPath: s3://postgres-backups/cl01tl/roundcube/roundcube-postgresql-17-cluster

clusters/cl01tl/applications/searxng/values.yaml

@@ -9,7 +9,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:50a94dae025ba1d9732bb354d23d0a61cdbfbc7f5a6ee538ef7f692c999ee8e5
+            tag: latest@sha256:c661f51541dff4252afdd5ca48ae8b8a21f6d20a68f8ca3df84b14760d380305
             pullPolicy: IfNotPresent
           env:
             - name: SEARXNG_BASE_URL
@@ -43,7 +43,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:50a94dae025ba1d9732bb354d23d0a61cdbfbc7f5a6ee538ef7f692c999ee8e5
+            tag: latest@sha256:c661f51541dff4252afdd5ca48ae8b8a21f6d20a68f8ca3df84b14760d380305
             pullPolicy: IfNotPresent
           env:
             - name: SEARXNG_BASE_URL

clusters/cl01tl/applications/site-documentation/Chart.yaml

@@ -23,6 +23,6 @@ dependencies:
   - name: cloudflared
     alias: cloudflared-site
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.22.2
+    version: 1.22.1
 icon: https://d21zlbwtcn424f.cloudfront.net/logo-new-round.png
 appVersion: 0.8.1

clusters/cl01tl/applications/site-profile/Chart.yaml

@@ -23,6 +23,6 @@ dependencies:
   - name: cloudflared
     alias: cloudflared-site
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.22.2
+    version: 1.22.1
 icon: https://d21zlbwtcn424f.cloudfront.net/logo-new-round.png
 appVersion: 2.0.1

clusters/cl01tl/applications/sonarr-4k/values.yaml

@@ -113,7 +113,7 @@ postgres-17-cluster:
         destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/sonarr4-4k/sonarr4-4k-postgresql-17-cluster
         index: 1
         endpointCredentials: sonarr-4k-postgresql-17-cluster-backup-secret
-        retentionPolicy: "30d"
+        retentionPolicy: "7d"
         isWALArchiver: false
       - name: garage-local
         destinationPath: s3://postgres-backups/cl01tl/sonarr-4k/sonarr4-4k-postgresql-17-cluster
@@ -121,7 +121,7 @@ postgres-17-cluster:
         endpointURL: http://garage-main.garage:3900
         endpointCredentials: sonarr-4k-postgresql-17-cluster-backup-secret-garage
         endpointCredentialsIncludeRegion: true
-        retentionPolicy: "3d"
+        retentionPolicy: "7d"
         isWALArchiver: true
       # - name: garage-remote
       #   destinationPath: s3://postgres-backups/cl01tl/sonarr-4k/sonarr4-4k-postgresql-17-cluster

clusters/cl01tl/applications/sonarr-anime/values.yaml

@@ -113,7 +113,7 @@ postgres-17-cluster:
         destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/sonarr4-anime/sonarr4-anime-postgresql-17-cluster
         index: 1
         endpointCredentials: sonarr-anime-postgresql-17-cluster-backup-secret
-        retentionPolicy: "30d"
+        retentionPolicy: "7d"
         isWALArchiver: false
       - name: garage-local
         destinationPath: s3://postgres-backups/cl01tl/sonarr-anime/sonarr4-anime-postgresql-17-cluster
@@ -121,7 +121,7 @@ postgres-17-cluster:
         endpointURL: http://garage-main.garage:3900
         endpointCredentials: sonarr-anime-postgresql-17-cluster-backup-secret-garage
         endpointCredentialsIncludeRegion: true
-        retentionPolicy: "3d"
+        retentionPolicy: "7d"
         isWALArchiver: true
     #   - name: garage-remote
     #     destinationPath: s3://postgres-backups/cl01tl/sonarr-anime/sonarr4-anime-postgresql-17-cluster

clusters/cl01tl/applications/sonarr/values.yaml

@@ -114,7 +114,7 @@ postgres-17-cluster:
         destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/sonarr4/sonarr4-postgresql-17-cluster
         index: 1
         endpointCredentials: sonarr-postgresql-17-cluster-backup-secret
-        retentionPolicy: "30d"
+        retentionPolicy: "7d"
         isWALArchiver: false
       - name: garage-local
         destinationPath: s3://postgres-backups/cl01tl/sonarr/sonarr4-postgresql-17-cluster
@@ -122,7 +122,7 @@ postgres-17-cluster:
         endpointURL: http://garage-main.garage:3900
         endpointCredentials: sonarr-postgresql-17-cluster-backup-secret-garage
         endpointCredentialsIncludeRegion: true
-        retentionPolicy: "3d"
+        retentionPolicy: "7d"
         isWALArchiver: true
       # - name: garage-remote
       #   destinationPath: s3://postgres-backups/cl01tl/sonarr/sonarr4-postgresql-17-cluster

clusters/cl01tl/applications/vaultwarden/Chart.yaml

@@ -25,7 +25,7 @@ dependencies:
   - name: cloudflared
     alias: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.22.2
+    version: 1.22.1
   - name: postgres-cluster
     alias: postgres-17-cluster
     version: 6.15.0

clusters/cl01tl/applications/vaultwarden/values.yaml

@@ -72,7 +72,7 @@ postgres-17-cluster:
       - name: external
         destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/vaultwarden/vaultwarden-postgresql-17-cluster
         index: 1
-        retentionPolicy: "30d"
+        retentionPolicy: "7d"
         isWALArchiver: false
       - name: garage-local
         destinationPath: s3://postgres-backups/cl01tl/vaultwarden/vaultwarden-postgresql-17-cluster
@@ -80,7 +80,7 @@ postgres-17-cluster:
         endpointURL: http://garage-main.garage:3900
         endpointCredentials: vaultwarden-postgresql-17-cluster-backup-secret-garage
         endpointCredentialsIncludeRegion: true
-        retentionPolicy: "3d"
+        retentionPolicy: "7d"
         isWALArchiver: true
       # - name: garage-remote
       #   destinationPath: s3://postgres-backups/cl01tl/vaultwarden/vaultwarden-postgresql-17-cluster

clusters/cl01tl/applications/yamtrack/values.yaml

@@ -92,7 +92,7 @@ postgres-17-cluster:
       - name: external
         destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/yamtrack/yamtrack-postgresql-17-cluster
         index: 2
-        retentionPolicy: "30d"
+        retentionPolicy: "7d"
         isWALArchiver: false
       - name: garage-local
         destinationPath: s3://postgres-backups/cl01tl/yamtrack/yamtrack-postgresql-17-cluster
@@ -100,7 +100,7 @@ postgres-17-cluster:
         endpointURL: http://garage-main.garage:3900
         endpointCredentials: yamtrack-postgresql-17-cluster-backup-secret-garage
         endpointCredentialsIncludeRegion: true
-        retentionPolicy: "3d"
+        retentionPolicy: "7d"
         isWALArchiver: true
       # - name: garage-remote
       #   destinationPath: s3://postgres-backups/cl01tl/yamtrack/yamtrack-postgresql-17-cluster

clusters/cl01tl/management/argo-workflows/values.yaml

@@ -112,7 +112,7 @@ postgres-17-cluster:
       - name: external
         destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/argo-workflows/argo-workflows-postgresql-17-cluster
         index: 1
-        retentionPolicy: "30d"
+        retentionPolicy: "7d"
         isWALArchiver: false
       - name: garage-local
         destinationPath: s3://postgres-backups/cl01tl/argo-workflows/argo-workflows-postgresql-17-cluster
@@ -120,7 +120,7 @@ postgres-17-cluster:
         endpointURL: http://garage-main.garage:3900
         endpointCredentials: argo-workflows-postgresql-17-cluster-backup-secret-garage
         endpointCredentialsIncludeRegion: true
-        retentionPolicy: "3d"
+        retentionPolicy: "7d"
         isWALArchiver: true
       # - name: garage-remote
       #   destinationPath: s3://postgres-backups/cl01tl/argo-workflows/argo-workflows-postgresql-17-cluster

clusters/cl01tl/management/headlamp/Chart.yaml

@@ -14,7 +14,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: headlamp
-    version: 0.37.0
+    version: 0.36.0
     repository: https://kubernetes-sigs.github.io/headlamp/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/headlamp.png
 appVersion: 0.30.1

clusters/cl01tl/management/komodo/values.yaml

@@ -201,7 +201,7 @@ postgresql-17-fdb-cluster:
       - name: external
         destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/komodo/komodo-postgresql-17-fdb-cluster
         index: 2
-        retentionPolicy: "30d"
+        retentionPolicy: "7d"
         isWALArchiver: false
       - name: garage-local
         destinationPath: s3://postgres-backups/cl01tl/komodo/komodo-postgresql-17-cluster
@@ -209,7 +209,7 @@ postgresql-17-fdb-cluster:
         endpointURL: http://garage-main.garage:3900
         endpointCredentials: komodo-postgresql-17-cluster-backup-secret-garage
         endpointCredentialsIncludeRegion: true
-        retentionPolicy: "3d"
+        retentionPolicy: "7d"
         isWALArchiver: true
       # - name: garage-remote
       #   destinationPath: s3://postgres-backups/cl01tl/komodo/komodo-postgresql-17-cluster

clusters/cl01tl/monitoring/gatus/values.yaml

@@ -394,7 +394,7 @@ postgres-17-cluster:
       - name: external
         destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/gatus/gatus-postgresql-17-cluster
         index: 2
-        retentionPolicy: "30d"
+        retentionPolicy: "7d"
         isWALArchiver: false
       - name: garage-local
         destinationPath: s3://postgres-backups/cl01tl/gatus/gatus-postgresql-17-cluster
@@ -402,7 +402,7 @@ postgres-17-cluster:
         endpointURL: http://garage-main.garage:3900
         endpointCredentials: gatus-postgresql-17-cluster-backup-secret-garage
         endpointCredentialsIncludeRegion: true
-        retentionPolicy: "3d"
+        retentionPolicy: "7d"
         isWALArchiver: true
       # - name: garage-remote
       #   destinationPath: s3://postgres-backups/cl01tl/gatus/gatus-postgresql-17-cluster

clusters/cl01tl/monitoring/grafana-operator/values.yaml

@@ -35,7 +35,7 @@ postgres-17-cluster:
       - name: external
         destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/grafana-operator/grafana-operator-postgresql-17-cluster
         index: 2
-        retentionPolicy: "30d"
+        retentionPolicy: "7d"
         isWALArchiver: false
       - name: garage-local
         destinationPath: s3://postgres-backups/cl01tl/grafana-operator/grafana-operator-postgresql-17-cluster
@@ -43,7 +43,7 @@ postgres-17-cluster:
         endpointURL: http://garage-main.garage:3900
         endpointCredentials: grafana-operator-postgresql-17-cluster-backup-secret-garage
         endpointCredentialsIncludeRegion: true
-        retentionPolicy: "3d"
+        retentionPolicy: "7d"
         isWALArchiver: true
       # - name: garage-remote
       #   destinationPath: s3://postgres-backups/cl01tl/grafana-operator/grafana-operator-postgresql-17-cluster

clusters/cl01tl/monitoring/kube-prometheus-stack/Chart.yaml

@@ -19,7 +19,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: kube-prometheus-stack
-    version: 79.1.1
+    version: 79.0.1
     repository: oci://ghcr.io/prometheus-community/charts
   - name: app-template
     alias: ntfy-alertmanager

clusters/cl01tl/monitoring/loki/Chart.yaml

@@ -19,7 +19,7 @@ dependencies:
     version: 6.44.0
     repository: https://grafana.github.io/helm-charts
   - name: promtail
-    version: 6.17.1
+    version: 6.17.0
     repository: https://grafana.github.io/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/loki.png
 appVersion: 3.4.2

clusters/cl01tl/platform/authentik/Chart.yaml

@@ -26,7 +26,7 @@ dependencies:
   - name: cloudflared
     alias: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.22.2
+    version: 1.22.1
   - name: postgres-cluster
     alias: postgres-17-cluster
     version: 6.15.0

clusters/cl01tl/platform/authentik/values.yaml

@@ -73,7 +73,7 @@ postgres-17-cluster:
       - name: external
         destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/authentik/authentik-postgresql-17-cluster
         index: 1
-        retentionPolicy: "30d"
+        retentionPolicy: "7d"
         isWALArchiver: false
       - name: garage-local
         destinationPath: s3://postgres-backups/cl01tl/authentik/authentik-postgresql-17-cluster
@@ -81,7 +81,7 @@ postgres-17-cluster:
         endpointURL: http://garage-main.garage:3900
         endpointCredentials: authentik-postgresql-17-cluster-backup-secret-garage
         endpointCredentialsIncludeRegion: true
-        retentionPolicy: "3d"
+        retentionPolicy: "7d"
         isWALArchiver: true
       # - name: garage-remote
       #   destinationPath: s3://postgres-backups/cl01tl/authentik/authentik-postgresql-17-cluster

clusters/cl01tl/platform/gitea/Chart.yaml

@@ -41,7 +41,7 @@ dependencies:
   - name: cloudflared
     alias: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.22.2
+    version: 1.22.1
   - name: postgres-cluster
     alias: postgres-17-cluster
     version: 6.15.0

clusters/cl01tl/platform/gitea/values.yaml

@@ -343,7 +343,7 @@ postgres-17-cluster:
       - name: external
         destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/gitea/gitea-postgresql-17-cluster
         index: 1
-        retentionPolicy: "30d"
+        retentionPolicy: "7d"
         isWALArchiver: false
       - name: garage-local
         destinationPath: s3://postgres-backups/cl01tl/gitea/gitea-postgresql-17-cluster
@@ -351,7 +351,7 @@ postgres-17-cluster:
         endpointURL: http://garage-main.garage:3900
         endpointCredentials: gitea-postgresql-17-cluster-backup-secret-garage
         endpointCredentialsIncludeRegion: true
-        retentionPolicy: "3d"
+        retentionPolicy: "7d"
         isWALArchiver: true
       # - name: garage-remote
       #   destinationPath: s3://postgres-backups/cl01tl/gitea/gitea-postgresql-17-cluster

clusters/cl01tl/platform/matrix-synapse/Chart.yaml

@@ -29,7 +29,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: matrix-synapse
-    version: 3.12.13
+    version: 3.12.12
     repository: https://ananace.gitlab.io/charts
   - name: app-template
     alias: matrix-hookshot
@@ -45,11 +45,11 @@ dependencies:
   #   version: 4.0.1
   - name: cloudflared
     alias: cloudflared-synapse
-    version: 1.22.2
+    version: 1.22.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: cloudflared
     alias: cloudflared-hookshot
-    version: 1.22.2
+    version: 1.22.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: postgres-cluster
     alias: postgres-17-cluster

clusters/cl01tl/platform/matrix-synapse/values.yaml

@@ -320,7 +320,7 @@ postgres-17-cluster:
       - name: external
         destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/matrix-synapse/matrix-synapse-postgresql-17-cluster
         index: 2
-        retentionPolicy: "30d"
+        retentionPolicy: "7d"
         isWALArchiver: false
       - name: garage-local
         destinationPath: s3://postgres-backups/cl01tl/matrix-synapse/matrix-synapse-postgresql-17-cluster
@@ -328,7 +328,7 @@ postgres-17-cluster:
         endpointURL: http://garage-main.garage:3900
         endpointCredentials: matrix-synapse-postgresql-17-cluster-backup-secret-garage
         endpointCredentialsIncludeRegion: true
-        retentionPolicy: "3d"
+        retentionPolicy: "7d"
         isWALArchiver: true
       # - name: garage-remote
       #   destinationPath: s3://postgres-backups/cl01tl/matrix-synapse/matrix-synapse-postgresql-17-cluster

clusters/cl01tl/platform/n8n/values.yaml

@@ -336,7 +336,7 @@ postgres-17-cluster:
       - name: external
         destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/n8n/n8n-postgresql-17-cluster
         index: 2
-        retentionPolicy: "30d"
+        retentionPolicy: "7d"
         isWALArchiver: false
       - name: garage-local
         destinationPath: s3://postgres-backups/cl01tl/n8n/n8n-postgresql-17-cluster
@@ -344,7 +344,7 @@ postgres-17-cluster:
         endpointURL: http://garage-main.garage:3900
         endpointCredentials: n8n-postgresql-17-cluster-backup-secret-garage
         endpointCredentialsIncludeRegion: true
-        retentionPolicy: "3d"
+        retentionPolicy: "7d"
         isWALArchiver: true
       # - name: garage-remote
       #   destinationPath: s3://postgres-backups/cl01tl/n8n/n8n-postgresql-17-cluster

clusters/cl01tl/platform/ollama/values.yaml

@@ -22,7 +22,7 @@ ollama:
         main:
           image:
             repository: ollama/ollama
-            tag: 0.12.9
+            tag: 0.12.7
             pullPolicy: IfNotPresent
           env:
             - name: OLLAMA_KEEP_ALIVE
@@ -58,7 +58,7 @@ ollama:
         main:
           image:
             repository: ollama/ollama
-            tag: 0.12.9
+            tag: 0.12.7
             pullPolicy: IfNotPresent
           env:
             - name: OLLAMA_KEEP_ALIVE
@@ -94,7 +94,7 @@ ollama:
         main:
           image:
             repository: ollama/ollama
-            tag: 0.12.9
+            tag: 0.12.7
             pullPolicy: IfNotPresent
           env:
             - name: OLLAMA_KEEP_ALIVE
@@ -261,7 +261,7 @@ postgres-17-cluster:
         destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/ollama/ollama-web-postgresql-17-cluster
         index: 1
         endpointCredentials: ollama-web-postgresql-17-cluster-backup-secret
-        retentionPolicy: "30d"
+        retentionPolicy: "7d"
         isWALArchiver: false
       - name: garage-local
         destinationPath: s3://postgres-backups/cl01tl/ollama/ollama-web-postgresql-17-cluster
@@ -269,7 +269,7 @@ postgres-17-cluster:
         endpointURL: http://garage-main.garage:3900
         endpointCredentials: ollama-web-postgresql-17-cluster-backup-secret-garage
         endpointCredentialsIncludeRegion: true
-        retentionPolicy: "3d"
+        retentionPolicy: "7d"
         isWALArchiver: true
       # - name: garage-remote
       #   destinationPath: s3://postgres-backups/cl01tl/ollama/ollama-web-postgresql-17-cluster

clusters/cl01tl/platform/qbittorrent/values.yaml

@@ -28,7 +28,7 @@ qbittorrent:
         qbittorrent:
           image:
             repository: ghcr.io/linuxserver/qbittorrent
-            tag: 5.1.2@sha256:3908cec5685242ab49b4842124df38c7ff09f82e543c17e0f81e883788f6a611
+            tag: 5.1.2@sha256:098d4340c0709a9ddbc7010ca21900238388454e20182d52b9723b40a2a44293
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/platform/stalwart/values.yaml

@@ -77,7 +77,7 @@ postgres-17-cluster:
       - name: external
         destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/stalwart/stalwart-postgresql-17-cluster
         index: 1
-        retentionPolicy: "30d"
+        retentionPolicy: "7d"
         isWALArchiver: false
       - name: garage-local
         destinationPath: s3://postgres-backups/cl01tl/stalwart/stalwart-postgresql-17-cluster
@@ -85,7 +85,7 @@ postgres-17-cluster:
         endpointURL: http://garage-main.garage:3900
         endpointCredentials: stalwart-postgresql-17-cluster-backup-secret-garage
         endpointCredentialsIncludeRegion: true
-        retentionPolicy: "3d"
+        retentionPolicy: "7d"
         isWALArchiver: true
       # - name: garage-remote
       #   destinationPath: s3://postgres-backups/cl01tl/stalwart/stalwart-postgresql-17-cluster

clusters/cl01tl/services/descheduler/Chart.yaml

@@ -14,7 +14,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: descheduler
-    version: 0.34.0
+    version: 0.33.0
     repository: https://kubernetes-sigs.github.io/descheduler/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 appVersion: 0.33.0

clusters/cl01tl/services/harbor/values.yaml

@@ -117,7 +117,7 @@ postgres-17-cluster:
       - name: external
         destinationPath: s3://postgres-backups-ce540ddf106d186bbddca68a/cl01tl/harbor/harbor-postgresql-17-cluster
         index: 2
-        retentionPolicy: "30d"
+        retentionPolicy: "7d"
         isWALArchiver: false
       - name: garage-local
         destinationPath: s3://postgres-backups/cl01tl/harbor/harbor-postgresql-17-cluster
@@ -125,7 +125,7 @@ postgres-17-cluster:
         endpointURL: http://garage-main.garage:3900
         endpointCredentials: harbor-postgresql-17-cluster-backup-secret-garage
         endpointCredentialsIncludeRegion: true
-        retentionPolicy: "3d"
+        retentionPolicy: "7d"
         isWALArchiver: true
       # - name: garage-remote
       #   destinationPath: s3://postgres-backups/cl01tl/harbor/harbor-postgresql-17-cluster

clusters/cl01tl/services/tailscale-operator/Chart.yaml

@@ -17,7 +17,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: tailscale-operator
-    version: 1.90.6
+    version: 1.88.4
     repository: https://pkgs.tailscale.com/helmcharts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/tailscale-light.png
 appVersion: v1.82.5

clusters/cl01tl/storage/elastic-operator/Chart.yaml

@@ -15,7 +15,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: eck-operator
-    version: 3.2.0
+    version: 3.1.0
     repository: https://helm.elastic.co
 icon: https://helm.elastic.co/icons/eck.png
 appVersion: 1.26.0

clusters/cl01tl/storage/rook-ceph/Chart.yaml

@@ -24,6 +24,6 @@ dependencies:
   - name: cloudflared
     alias: cloudflared-rgw
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.22.2
+    version: 1.22.1
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ceph.png
 appVersion: v1.17.1

hosts/ps08rp/blocky/compose.yaml

@@ -1,7 +1,7 @@
 ---
 services:
     tailscale-blocky:
-        image: ghcr.io/tailscale/tailscale:v1.90.6
+        image: ghcr.io/tailscale/tailscale:v1.90.5
         container_name: tailscale-blocky
         cap_add:
             - net_admin

hosts/ps09rp/blocky/compose.yaml

@@ -1,7 +1,7 @@
 ---
 services:
     tailscale-blocky:
-        image: ghcr.io/tailscale/tailscale:v1.90.6
+        image: ghcr.io/tailscale/tailscale:v1.90.5
         container_name: tailscale-blocky
         cap_add:
             - net_admin

hosts/ps10rp/blocky/compose.yaml

@@ -1,7 +1,7 @@
 ---
 services:
     tailscale-blocky:
-        image: ghcr.io/tailscale/tailscale:v1.90.6
+        image: ghcr.io/tailscale/tailscale:v1.90.5
         container_name: tailscale-blocky
         cap_add:
             - net_admin

hosts/ps10rp/garage/compose.yaml

@@ -1,6 +1,6 @@
 services:
     tailscale-garage:
-        image: ghcr.io/tailscale/tailscale:v1.90.6
+        image: ghcr.io/tailscale/tailscale:v1.90.5
         container_name: tailscale-garage
         cap_add:
             - net_admin
@@ -20,7 +20,7 @@ services:
             - /dev/net/tun:/dev/net/tun
 
     tailscale-garage-ui:
-        image: ghcr.io/tailscale/tailscale:v1.90.6
+        image: ghcr.io/tailscale/tailscale:v1.90.5
         container_name: tailscale-garage-ui
         cap_add:
             - net_admin

hosts/ps10rp/gitea/compose.yaml

@@ -1,6 +1,6 @@
 services:
     tailscale-gitea:
-        image: ghcr.io/tailscale/tailscale:v1.90.6
+        image: ghcr.io/tailscale/tailscale:v1.90.5
         container_name: tailscale-gitea
         cap_add:
             - net_admin

hosts/ps10rp/homepage/compose.yaml

@@ -1,7 +1,7 @@
 ---
 services:
     tailscale-homepage:
-        image: ghcr.io/tailscale/tailscale:v1.90.6
+        image: ghcr.io/tailscale/tailscale:v1.90.5
         container_name: tailscale-homepage
         cap_add:
             - net_admin

hosts/ps10rp/node-exporter/compose.yaml

@@ -1,7 +1,7 @@
 ---
 services:
     tailscale-node-exporter:
-        image: ghcr.io/tailscale/tailscale:v1.90.6
+        image: ghcr.io/tailscale/tailscale:v1.90.5
         container_name: tailscale-node-exporter
         cap_add:
             - net_admin

hosts/ps10rp/tailscale-subnet/compose.yaml

@@ -1,7 +1,7 @@
 ---
 services:
     tailscale:
-        image: ghcr.io/tailscale/tailscale:v1.90.6
+        image: ghcr.io/tailscale/tailscale:v1.90.5
         container_name: tailscale-subnet
         cap_add:
             - net_admin

hosts/ps10rp/traefik/compose.yaml

@@ -1,7 +1,7 @@
 ---
 services:
     tailscale-traefik:
-        image: ghcr.io/tailscale/tailscale:v1.90.6
+        image: ghcr.io/tailscale/tailscale:v1.90.5
         container_name: tailscale-traefik
         cap_add:
             - net_admin