Update ghcr.io/open-webui/open-webui Docker tag to v0.7.0

2026-01-09 20:11:43 +00:00
26 changed files with 61 additions and 71 deletions
--- a/clusters/cl01tl/helm/argo-workflows/Chart.lock
+++ b/clusters/cl01tl/helm/argo-workflows/Chart.lock
@@ -1,12 +1,12 @@
 dependencies:
 - name: argo-workflows
  repository: https://argoproj.github.io/argo-helm
-  version: 0.47.0
+  version: 0.46.3
 - name: argo-events
  repository: https://argoproj.github.io/argo-helm
  version: 2.4.19
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 7.4.5
-digest: sha256:c36845d5688e28e6f6c6b6f2e17b40514f2adb937f2c6077deadfec9e6b294fe
-generated: "2026-01-13T17:04:07.661277234Z"
+digest: sha256:a173eb2acc1e305074b6f81161229a27e00fa7a2e7ea14f17bbc3fca444e65a4
+generated: "2026-01-07T01:51:33.628737915Z"
--- a/clusters/cl01tl/helm/argo-workflows/Chart.yaml
+++ b/clusters/cl01tl/helm/argo-workflows/Chart.yaml
@@ -18,7 +18,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: argo-workflows
-    version: 0.47.0
+    version: 0.46.3
    repository: https://argoproj.github.io/argo-helm
  - name: argo-events
    version: 2.4.19
--- a/clusters/cl01tl/helm/argocd/Chart.lock
+++ b/clusters/cl01tl/helm/argocd/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: argo-cd
  repository: https://argoproj.github.io/argo-helm
-  version: 9.3.0
-digest: sha256:583a5f07b4e6336fec3d9eb2a6069e7f49b91d954eac086289f1797376fc8ee8
-generated: "2026-01-12T14:01:51.562750794Z"
+  version: 9.2.4
+digest: sha256:ad9fc8f132ba717e9da4564ca1c90eab88c1d1ec251d015542b938f2bd5af7bd
+generated: "2026-01-03T23:01:53.96861459Z"
--- a/clusters/cl01tl/helm/argocd/Chart.yaml
+++ b/clusters/cl01tl/helm/argocd/Chart.yaml
@@ -15,7 +15,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: argo-cd
-    version: 9.3.0
+    version: 9.2.4
    repository: https://argoproj.github.io/argo-helm
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 # renovate: github=argoproj/argo-cd
--- a/clusters/cl01tl/helm/blocky/values.yaml
+++ b/clusters/cl01tl/helm/blocky/values.yaml
@@ -182,10 +182,9 @@ blocky:
                - https://v.firebog.net/hosts/Prigent-Ads.txt
              mal:
                - https://v.firebog.net/hosts/Prigent-Crypto.txt
+                - https://osint.digitalside.it/Threat-Intel/lists/latestdomains.txt
              pro:
                - https://raw.githubusercontent.com/hagezi/dns-blocklists/main/wildcard/pro.plus.txt
-              oisd:
-                - https://big.oisd.nl/domainswild
            allowlists:
              sus:
                - |
@@ -217,12 +216,6 @@ blocky:
                  *.alexlebens.dev
                  *.boreal-beaufort.ts.net
                  *.discord.com
-              oisd:
-                - |
-                  *.alexlebens.net
-                  *.alexlebens.dev
-                  *.boreal-beaufort.ts.net
-                  *.discord.com
            clientGroupsBlock:
              default:
                - sus
@@ -230,7 +223,6 @@ blocky:
                - priv
                - mal
                - pro
-                - oisd
            blockType: zeroIp
            blockTTL: 1m
            loading:
--- a/clusters/cl01tl/helm/booklore/values.yaml
+++ b/clusters/cl01tl/helm/booklore/values.yaml
@@ -9,7 +9,7 @@ booklore:
        main:
          image:
            repository: ghcr.io/booklore-app/booklore
-            tag: v1.17.0
+            tag: v1.16.5
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/helm/code-server/values.yaml
+++ b/clusters/cl01tl/helm/code-server/values.yaml
@@ -9,7 +9,7 @@ code-server:
        main:
          image:
            repository: ghcr.io/linuxserver/code-server
-            tag: 4.107.1@sha256:2c085dd3efc1dfe394a802c4b53a821be607e579e718886f7a337b8ece0b92ee
+            tag: 4.107.0@sha256:e2ebedc28ab9e2ebe08093cf7e78515f97822956ff7cbac3d86fb0bd9e4b6bca
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/helm/generic-device-plugin/Chart.lock
+++ b/clusters/cl01tl/helm/generic-device-plugin/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: generic-device-plugin
  repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-  version: 0.20.13
-digest: sha256:054451587566f9d2fc6b416f4cc876386c609f2c5d3aedfb1ae501393138ea17
-generated: "2026-01-13T01:01:46.604191953Z"
+  version: 0.20.12
+digest: sha256:5106fdc0ebe367913b62c27b6aefb27c1a47c0d6cae5ad6652da33bfb04e3661
+generated: "2026-01-08T23:05:57.531250555Z"
--- a/clusters/cl01tl/helm/generic-device-plugin/Chart.yaml
+++ b/clusters/cl01tl/helm/generic-device-plugin/Chart.yaml
@@ -15,6 +15,6 @@ maintainers:
 dependencies:
  - name: generic-device-plugin
    repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-    version: 0.20.13
+    version: 0.20.12
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 appVersion: 1.0.0
--- a/clusters/cl01tl/helm/home-assistant/values.yaml
+++ b/clusters/cl01tl/helm/home-assistant/values.yaml
@@ -21,7 +21,7 @@ home-assistant:
        code-server:
          image:
            repository: ghcr.io/linuxserver/code-server
-            tag: 4.107.1@sha256:2c085dd3efc1dfe394a802c4b53a821be607e579e718886f7a337b8ece0b92ee
+            tag: 4.107.0@sha256:e2ebedc28ab9e2ebe08093cf7e78515f97822956ff7cbac3d86fb0bd9e4b6bca
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock
+++ b/clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock
@@ -1,12 +1,12 @@
 dependencies:
 - name: kube-prometheus-stack
  repository: oci://ghcr.io/prometheus-community/charts
-  version: 80.13.3
+  version: 80.13.2
 - name: app-template
  repository: https://bjw-s-labs.github.io/helm-charts/
  version: 4.6.0
 - name: redis-replication
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 1.0.1
-digest: sha256:43ec4f7e90e31f70ee36651b795f8e982abe07279068213ddfae54eefe2a3994
-generated: "2026-01-11T00:04:17.413709338Z"
+digest: sha256:4e027483c7a7878dd6058c03c1af8def9d5b58c9248c752241e0e63fcdc4b637
+generated: "2026-01-08T23:06:27.630366638Z"
--- a/clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml
+++ b/clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml
@@ -20,7 +20,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: kube-prometheus-stack
-    version: 80.13.3
+    version: 80.13.2
    repository: oci://ghcr.io/prometheus-community/charts
  - name: app-template
    alias: ntfy-alertmanager
--- a/clusters/cl01tl/helm/local-path-provisioner/Chart.lock
+++ b/clusters/cl01tl/helm/local-path-provisioner/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: local-path-provisioner
  repository: https://charts.containeroo.ch
-  version: 0.0.35
-digest: sha256:c59cc5a81e797a9e2ab0f8e6bf03cb3e4dfc740555631aa1d41b7def1d2c60c8
-generated: "2026-01-10T19:01:45.394965495Z"
+  version: 0.0.34
+digest: sha256:f4f946897660d5d65eb2a56144d907c0b48c9a72e20d10a73684eaeb0d50cfd3
+generated: "2025-12-26T21:55:29.099967751Z"
--- a/clusters/cl01tl/helm/local-path-provisioner/Chart.yaml
+++ b/clusters/cl01tl/helm/local-path-provisioner/Chart.yaml
@@ -15,7 +15,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: local-path-provisioner
-    version: 0.0.35
+    version: 0.0.34
    repository: https://charts.containeroo.ch
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 # renovate: github=rancher/local-path-provisioner
--- a/clusters/cl01tl/helm/loki/Chart.lock
+++ b/clusters/cl01tl/helm/loki/Chart.lock
@@ -4,6 +4,6 @@ dependencies:
  version: 6.49.0
 - name: alloy
  repository: https://grafana.github.io/helm-charts
-  version: 1.5.2
-digest: sha256:169af5a754de8ab848da0de07e5990a5a47de91252f27d12e5e4f672cfa62e59
-generated: "2026-01-13T17:02:14.361658012Z"
+  version: 1.5.1
+digest: sha256:f67da7cd3bea0b23c88a2e1a6f912444d7adcc7cacd690f5dcdf5b4ea7e660bc
+generated: "2025-12-27T18:21:05.367034-06:00"
--- a/clusters/cl01tl/helm/loki/Chart.yaml
+++ b/clusters/cl01tl/helm/loki/Chart.yaml
@@ -19,7 +19,7 @@ dependencies:
    version: 6.49.0
    repository: https://grafana.github.io/helm-charts
  - name: alloy
-    version: 1.5.2
+    version: 1.5.1
    repository: https://grafana.github.io/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/loki.png
 # renovate: github=grafana/loki
--- a/clusters/cl01tl/helm/ollama/values.yaml
+++ b/clusters/cl01tl/helm/ollama/values.yaml
@@ -117,7 +117,7 @@ ollama:
        main:
          image:
            repository: ghcr.io/open-webui/open-webui
-            tag: 0.7.2
+            tag: 0.7.0
            pullPolicy: IfNotPresent
          env:
            - name: ENV
--- a/clusters/cl01tl/helm/prometheus-operator-crds/Chart.lock
+++ b/clusters/cl01tl/helm/prometheus-operator-crds/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: prometheus-operator-crds
  repository: oci://ghcr.io/prometheus-community/charts
-  version: 26.0.0
-digest: sha256:fb73bc68bbf8ab128ff7fc641413ce3f004677d351038517ed68f5b39eeafb08
-generated: "2026-01-09T20:11:58.398634666Z"
+  version: 25.0.1
+digest: sha256:33e08873d2d1558d7e3784d7f995c8134347ca590f54109b783ae5f6ad5e2ae5
+generated: "2025-12-11T18:13:48.868551-06:00"
--- a/clusters/cl01tl/helm/prometheus-operator-crds/Chart.yaml
+++ b/clusters/cl01tl/helm/prometheus-operator-crds/Chart.yaml
@@ -15,7 +15,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: prometheus-operator-crds
-    version: 26.0.0
+    version: 25.0.1
    repository: oci://ghcr.io/prometheus-community/charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/prometheus.png
 # renovate: github=prometheus-operator/prometheus-operator
--- a/clusters/cl01tl/helm/qbittorrent/values.yaml
+++ b/clusters/cl01tl/helm/qbittorrent/values.yaml
@@ -28,7 +28,7 @@ qbittorrent:
        qbittorrent:
          image:
            repository: ghcr.io/linuxserver/qbittorrent
-            tag: 5.1.4@sha256:95114034a7f74672b76f795f6938921b0ca795f85b59b48691035dc66714f34c
+            tag: 5.1.4@sha256:e0cedcadd62f809efdeddfd32e4d1192f9a74e6e64ed6753bfc6e2c3ed4a714a
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/helm/searxng/values.yaml
+++ b/clusters/cl01tl/helm/searxng/values.yaml
@@ -9,7 +9,7 @@ searxng:
        main:
          image:
            repository: searxng/searxng
-            tag: latest@sha256:35e3520e53621e22566330d876d2a36e4a556628b6567bf2706ceb211c6d9c07
+            tag: latest@sha256:256b113a44b26a293a24d864707753344ebe75687445a97ed0e8d701dec7af45
            pullPolicy: IfNotPresent
          env:
            - name: SEARXNG_BASE_URL
@@ -39,7 +39,7 @@ searxng:
        main:
          image:
            repository: searxng/searxng
-            tag: latest@sha256:35e3520e53621e22566330d876d2a36e4a556628b6567bf2706ceb211c6d9c07
+            tag: latest@sha256:256b113a44b26a293a24d864707753344ebe75687445a97ed0e8d701dec7af45
            pullPolicy: IfNotPresent
          env:
            - name: SEARXNG_BASE_URL
--- a/clusters/cl01tl/helm/slskd/values.yaml
+++ b/clusters/cl01tl/helm/slskd/values.yaml
@@ -28,7 +28,7 @@ slskd:
        main:
          image:
            repository: slskd/slskd
-            tag: 0.24.2
+            tag: 0.24.1
            pullPolicy: IfNotPresent
          env:
            - name: TZ
@@ -122,7 +122,7 @@ slskd:
        main:
          image:
            repository: mrusse08/soularr
-            tag: latest@sha256:c1cfc6425c1cc141f5f99744611eeb1af32c85258df5e2a4974d7dbf6db76840
+            tag: latest@sha256:b41d4f8ec74e9eded55e0096ddb40ba155ff3288f87b50639d57e5ba4c980159
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/helm/vaultwarden/values.yaml
+++ b/clusters/cl01tl/helm/vaultwarden/values.yaml
@@ -9,7 +9,7 @@ vaultwarden:
        main:
          image:
            repository: vaultwarden/server
-            tag: 1.35.2
+            tag: 1.35.1
            pullPolicy: IfNotPresent
          env:
            - name: DOMAIN
--- a/hosts/ps08rp/blocky/config.yml
+++ b/hosts/ps08rp/blocky/config.yml
@@ -157,6 +157,7 @@ blocking:
      - https://v.firebog.net/hosts/Prigent-Ads.txt
    mal:
      - https://v.firebog.net/hosts/Prigent-Crypto.txt
+      - https://osint.digitalside.it/Threat-Intel/lists/latestdomains.txt
    pro:
      - https://raw.githubusercontent.com/hagezi/dns-blocklists/main/wildcard/pro.plus.txt
  allowlists:
--- a/hosts/ps09rp/blocky/config.yml
+++ b/hosts/ps09rp/blocky/config.yml
@@ -178,6 +178,7 @@ blocking:
      - https://v.firebog.net/hosts/Prigent-Ads.txt
    mal:
      - https://v.firebog.net/hosts/Prigent-Crypto.txt
+      - https://osint.digitalside.it/Threat-Intel/lists/latestdomains.txt
    pro:
      - https://raw.githubusercontent.com/hagezi/dns-blocklists/main/wildcard/pro.plus.txt
  allowlists:
--- a/hosts/ps10rp/blocky/config.yml
+++ b/hosts/ps10rp/blocky/config.yml
@@ -48,17 +48,6 @@ customDNS:
    www                             IN      CNAME   ps10rp
    homepage                        IN      CNAME   ps10rp

-clientLookup:
-  upstream: 192.168.5.1
-  singleNameOrder:
-    - 2
-    - 1
-  clients:
-    samsungtv:
-      - 192.168.5.77
-    firestick:
-      - 192.168.5.47
-
 blocking:
  denylists:
    sus:
@@ -73,6 +62,7 @@ blocking:
      - https://v.firebog.net/hosts/Prigent-Ads.txt
    mal:
      - https://v.firebog.net/hosts/Prigent-Crypto.txt
+      - https://osint.digitalside.it/Threat-Intel/lists/latestdomains.txt
    pro:
      - https://raw.githubusercontent.com/hagezi/dns-blocklists/main/wildcard/pro.txt
  allowlists:
@@ -104,11 +94,24 @@ blocking:
        *.lebens-home.net
        *.boreal-beaufort.ts.net
        *.discord.com
+    pro:
+      - |
+        *.alexlebens.net
+        *.alexlebens.dev
+        *.lebens-home.net
+        *.boreal-beaufort.ts.net
+        *.discord.com
+    streaming-allow:
+      - |
+        *.alexlebens.net
+        *.alexlebens.dev
+        *.lebens-home.net
+        *.boreal-beaufort.ts.net
        hulu.com
        *.hulu.com
        *.hulustream.com
        *.samsungcloudsolution.net
-        ads-*-darwin.hulustream.com
+        ads-[a-z]+-darwin.hulustream.com
        assets.huluim.com
        assetshuluimcom-a.akamaihd.net
        cws-hulu.conviva.com
@@ -118,15 +121,8 @@ blocking:
        dpm.demdex.net
        hulu.com.akadns.net.
        hulu.hb-api.omtrdc.net
-        tvx.adgrx.com
+        tvx.adgrx.com cdn
        unagi-na.amazon.com
-    pro:
-      - |
-        *.alexlebens.net
-        *.alexlebens.dev
-        *.lebens-home.net
-        *.boreal-beaufort.ts.net
-        *.discord.com
  clientGroupsBlock:
    default:
      - sus
@@ -134,10 +130,10 @@ blocking:
      - priv
      - mal
      - pro
-    samsungtv:
-      - mal
-    firestick:
-      - mal
+    192.168.5.77:
+      - streaming-allow
+    192.168.5.47:
+      - streaming-allow
  blockType: zeroIp
  blockTTL: 1m
  loading: