Update clidey/whodb Docker tag to v0.88.0

clusters/cl01tl/helm/authentik/Chart.lock

@@ -1,7 +1,7 @@
 dependencies:
 - name: authentik
   repository: https://charts.goauthentik.io/
-  version: 2025.12.1
+  version: 2025.10.3
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.1.6
@@ -11,5 +11,5 @@ dependencies:
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.0.1
-digest: sha256:a473d3cc3e54c917f3d14c96f3de72e81940c82b3fbe6ce316e4d28a7bdcc56d
-generated: "2026-01-16T11:03:58.718446788Z"
+digest: sha256:b9fe766e223b1f65430c64c02f94c1f97ad7149a5a9acc7bab8339615706293f
+generated: "2026-01-08T23:01:41.173354097Z"

clusters/cl01tl/helm/authentik/Chart.yaml

@@ -21,7 +21,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: authentik
-    version: 2025.12.1
+    version: 2025.10.3
     repository: https://charts.goauthentik.io/
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts

clusters/cl01tl/helm/blocky/values.yaml

@@ -155,7 +155,6 @@ blocky:
               radarr-standup                  IN      CNAME   traefik-cl01tl
               searxng                         IN      CNAME   traefik-cl01tl
               seerr                           IN      CNAME   traefik-cl01tl
-              shelfmark                       IN      CNAME   traefik-cl01tl
               slskd                           IN      CNAME   traefik-cl01tl
               sonarr                          IN      CNAME   traefik-cl01tl
               sonarr-4k                       IN      CNAME   traefik-cl01tl

clusters/cl01tl/helm/gatus/values.yaml

@@ -322,8 +322,8 @@ gatus:
       - name: slskd
         url: https://slskd.alexlebens.net
         <<: *defaults
-      - name: shelfmark
-        url: https://shelfmark.alexlebens.net
+      - name: ephemera
+        url: https://ephemera.alexlebens.net
         <<: *defaults
       - name: listenarr
         url: https://listenarr.alexlebens.net

clusters/cl01tl/helm/gitea/Chart.lock

@@ -7,7 +7,7 @@ dependencies:
   version: 0.2.1
 - name: meilisearch
   repository: https://meilisearch.github.io/meilisearch-kubernetes
-  version: 0.21.0
+  version: 0.20.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.1.6
@@ -23,5 +23,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:f38463ec7a583f7f47e76ae53d55d436657b834f70d34695f8347f640202ce46
-generated: "2026-01-15T22:13:17.229320298Z"
+digest: sha256:36c3e2511a1163b6055af6ceeef65862df3de0426da8029145eb9274d34748ad
+generated: "2026-01-08T23:02:52.334136773Z"

clusters/cl01tl/helm/gitea/Chart.yaml

@@ -32,7 +32,7 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
     version: 0.2.1
   - name: meilisearch
-    version: 0.21.0
+    version: 0.20.0
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts

clusters/cl01tl/helm/harbor/values.yaml

@@ -41,12 +41,12 @@ harbor:
   portal:
     image:
       repository: goharbor/harbor-portal
-      tag: v2.14.2
+      tag: v2.14.1
     replicas: 2
   core:
     image:
       repository: goharbor/harbor-core
-      tag: v2.14.2
+      tag: v2.14.1
     replicas: 2
     existingSecret: harbor-secret
     secretName: harbor-secret
@@ -54,7 +54,7 @@ harbor:
   jobservice:
     image:
       repository: goharbor/harbor-jobservice
-      tag: v2.14.2
+      tag: v2.14.1
     replicas: 2
     jobLoggers:
       - stdout
@@ -63,11 +63,11 @@ harbor:
     registry:
       image:
         repository: goharbor/registry-photon
-        tag: v2.14.2
+        tag: v2.14.1
     controller:
       image:
         repository: goharbor/harbor-registryctl
-        tag: v2.14.2
+        tag: v2.14.1
     existingSecret: harbor-secret
     relativeurls: true
     credentials:
@@ -94,7 +94,7 @@ harbor:
   exporter:
     image:
       repository: goharbor/harbor-exporter
-      tag: v2.14.2
+      tag: v2.14.1
     replicas: 2
 postgres-18-cluster:
   mode: recovery

clusters/cl01tl/helm/homepage/values.yaml

@@ -680,12 +680,6 @@ homepage:
                   siteMonitor: http://slskd.slskd:5030
                   statusStyle: dot
           - Books:
-              - Shelfmark:
-                  icon: sh-shelfmark.webp
-                  description: Books
-                  href: https://shelfmark.alexlebens.net
-                  siteMonitor: http://shelfmark.shelfmark:80
-                  statusStyle: dot
               - Ephemera:
                   icon: sh-ephemera.webp
                   description: Books

clusters/cl01tl/helm/jellyfin/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.0
 - name: meilisearch
   repository: https://meilisearch.github.io/meilisearch-kubernetes
-  version: 0.21.0
+  version: 0.20.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:929d60a75b1b07ed87274e09b398e3289aa7f94f0166408198bfd60e87f072a0
-generated: "2026-01-15T22:13:34.825853057Z"
+digest: sha256:d9fcbbc6a95635c81ece57f7b1ab15a2505afed2bc52aef754431a9cedd06ae0
+generated: "2026-01-07T16:08:05.338907704Z"

clusters/cl01tl/helm/jellyfin/Chart.yaml

@@ -25,7 +25,7 @@ dependencies:
     repository: https://bjw-s-labs.github.io/helm-charts/
     version: 4.6.0
   - name: meilisearch
-    version: 0.21.0
+    version: 0.20.0
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/karakeep/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.6.0
 - name: meilisearch
   repository: https://meilisearch.github.io/meilisearch-kubernetes
-  version: 0.21.0
+  version: 0.20.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.1.6
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:f0d35f4808f349171a7092894fe5ccf9a5fd513a1ff84050c7ebaae893e5d506
-generated: "2026-01-15T22:13:49.147677077Z"
+digest: sha256:d8b5b42608537e20f34d109bc624c68e27879488f8ef78df2681a70808bfba87
+generated: "2026-01-08T23:03:25.51925384Z"

clusters/cl01tl/helm/karakeep/Chart.yaml

@@ -22,7 +22,7 @@ dependencies:
     repository: https://bjw-s-labs.github.io/helm-charts/
     version: 4.6.0
   - name: meilisearch
-    version: 0.21.0
+    version: 0.20.0
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts

clusters/cl01tl/helm/qbittorrent/templates/config-map.yaml

@@ -199,8 +199,6 @@ data:
       sonarr: /mnt/store/Torrent/FINISHED/SONARR
       sonarr-4k: /mnt/store/Torrent/FINISHED/SONARR4K
       sonarr-anime: /mnt/store/Torrent/FINISHED/SONARRANIME
-      shelfmark-books: /mnt/store/Torrent/FINISHED/SHELFMARKBOOKS
-      shelfmark-audiobooks: /mnt/store/Torrent/FINISHED/SHELFMARKAUDIOBOOKS
       -< ZIM: /mnt/store/Kiwix
       -< SAVE: /mnt/store/Torrent/FINISHED/SAVE
       -< IMPORT: /mnt/store/Torrent/FINISHED/IMPORT

clusters/cl01tl/helm/searxng/values.yaml

@@ -9,7 +9,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:bc805054d5801d18b9750852e075e599e543eddc2d7962918f0722244d40ea09
+            tag: latest@sha256:35e3520e53621e22566330d876d2a36e4a556628b6567bf2706ceb211c6d9c07
             pullPolicy: IfNotPresent
           env:
             - name: SEARXNG_BASE_URL
@@ -39,7 +39,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:bc805054d5801d18b9750852e075e599e543eddc2d7962918f0722244d40ea09
+            tag: latest@sha256:35e3520e53621e22566330d876d2a36e4a556628b6567bf2706ceb211c6d9c07
             pullPolicy: IfNotPresent
           env:
             - name: SEARXNG_BASE_URL

clusters/cl01tl/helm/shelfmark/Chart.lock

@@ -1,6 +0,0 @@
-dependencies:
-- name: app-template
-  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.1
-digest: sha256:76f1a29db101f92117e224898994af8fe4df1f7f61e1ab948eda43a1d39764b2
-generated: "2026-01-15T17:21:48.172915-06:00"

clusters/cl01tl/helm/shelfmark/Chart.yaml

@@ -1,21 +0,0 @@
-apiVersion: v2
-name: shelfmark
-version: 1.0.0
-description: Shelfmark
-keywords:
-  - shelfmark
-  - books
-home: https://wiki.alexlebens.dev/s/
-sources:
-  - https://github.com/calibrain/shelfmark
-  - https://github.com/calibrain/shelfmark/pkgs/container/shelfmark
-  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: app-template
-    alias: shelfmark
-    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.1
-icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/shelfmark.webp
-appVersion: v1.0.1

clusters/cl01tl/helm/shelfmark/templates/persistent-volume-claim.yaml

@@ -1,17 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: shelfmark-import-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: shelfmark-import-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  volumeName: shelfmark-import-nfs-storage
-  storageClassName: nfs-client
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 1Gi

clusters/cl01tl/helm/shelfmark/templates/persistent-volume.yaml

@@ -1,23 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: shelfmark-import-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: shelfmark-import-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: nfs-client
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  nfs:
-    path: /volume2/Storage/Books Import
-    server: synologybond.alexlebens.net
-  mountOptions:
-    - vers=4
-    - minorversion=1
-    - noac

clusters/cl01tl/helm/shelfmark/values.yaml

@@ -1,96 +0,0 @@
-shelfmark:
-  controllers:
-    main:
-      type: deployment
-      replicas: 1
-      strategy: Recreate
-      revisionHistoryLimit: 3
-      containers:
-        main:
-          image:
-            repository: ghcr.io/calibrain/shelfmark
-            tag: v1.0.1
-            pullPolicy: IfNotPresent
-          env:
-            - name: FLASK_PORT
-              value: 8084
-            - name: INGEST_DIR
-              value: /ingest
-            - name: SEARCH_MODE
-              value: direct
-          probes:
-            liveness:
-              enabled: true
-              custom: true
-              spec:
-                exec:
-                  command:
-                  - CMD
-                  - curl
-                  - -sf
-                  - http://localhost:8084/api/health
-                failureThreshold: 5
-                initialDelaySeconds: 60
-                periodSeconds: 30
-                successThreshold: 1
-                timeoutSeconds: 30
-          resources:
-            requests:
-              cpu: 10m
-              memory: 256Mi
-  service:
-    main:
-      ports:
-        http:
-          port: 80
-          targetPort: 8084
-          protocol: HTTP
-  route:
-    main:
-      kind: HTTPRoute
-      parentRefs:
-        - group: gateway.networking.k8s.io
-          kind: Gateway
-          name: traefik-gateway
-          namespace: traefik
-      hostnames:
-        - shelfmark.alexlebens.net
-      rules:
-        - backendRefs:
-            - group: ''
-              kind: Service
-              name: shelfmark
-              port: 80
-              weight: 100
-          matches:
-            - path:
-                type: PathPrefix
-                value: /
-  persistence:
-    config:
-      storageClass: ceph-block
-      accessMode: ReadWriteOnce
-      size: 1Gi
-      retain: true
-      advancedMounts:
-        main:
-          main:
-            - path: /config
-              readOnly: false
-    ingest:
-      existingClaim: shelfmark-import-nfs-storage
-      advancedMounts:
-        main:
-          main:
-            - path: /ingest
-              readOnly: false
-volsync-target-config:
-  pvcTarget: shelfmark-config
-  local:
-    enabled: true
-    schedule: 0 8 * * *
-  remote:
-    enabled: false
-  external:
-    enabled: true
-    schedule: 0 9 * * *

clusters/cl01tl/helm/snapshot-controller/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: snapshot-controller
   repository: https://piraeus.io/helm-charts/
-  version: 5.0.0
-digest: sha256:ee120d84037e7878c3ab62c57cd09b90090af340c1d55ea314618f19387cb0ca
-generated: "2026-01-15T23:19:03.949703166Z"
+  version: 4.2.0
+digest: sha256:af3d6bc81cfe28b6e4ebfb5db0857843127e6d30d4f4d34881964f9e13cbc0c7
+generated: "2025-12-01T20:27:28.798985-06:00"

clusters/cl01tl/helm/snapshot-controller/Chart.yaml

@@ -15,7 +15,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: snapshot-controller
-    version: 5.0.0
+    version: 4.2.0
     repository: https://piraeus.io/helm-charts/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 # renovate: github=kubernetes-csi/external-snapshotter

clusters/cl01tl/helm/yubal-playlist/templates/external-secret.yaml

@@ -19,20 +19,6 @@ spec:
         key: /cl01tl/lidarr2/key
         metadataPolicy: None
         property: key
-    - secretKey: subsonic-user
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/navidrome/admin
-        metadataPolicy: None
-        property: user
-    - secretKey: subsonic-password
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/navidrome/admin
-        metadataPolicy: None
-        property: password
 
 ---
 apiVersion: external-secrets.io/v1

clusters/cl01tl/helm/yubal-playlist/values.yaml

@@ -9,7 +9,7 @@ yubal-playlist:
         main:
           image:
             repository: harbor.alexlebens.net/images/yubal-playlist
-            tag: 0.1.2
+            tag: 0.0.7
             pullPolicy: IfNotPresent
           env:
             - name: YUBAL_TZ
@@ -29,20 +29,6 @@ yubal-playlist:
                 secretKeyRef:
                   name: yubal-playlist-config-secret
                   key: lidarr-key
-            - name: YUBAL_SUBSONIC_ENDPOINT
-              value: http://navidrome-main.navidrome
-            - name: YUBAL_SUBSONIC_PORT
-              value: 80
-            - name: YUBAL_SUBSONIC_USER
-              valueFrom:
-                secretKeyRef:
-                  name: yubal-playlist-config-secret
-                  key: subsonic-user
-            - name: YUBAL_SUBSONIC_PASSWORD
-              valueFrom:
-                secretKeyRef:
-                  name: yubal-playlist-config-secret
-                  key: subsonic-password
           resources:
             requests:
               cpu: 10m

hosts/ps08rp/blocky/config.yml

@@ -130,7 +130,6 @@ customDNS:
     radarr-standup                  IN      CNAME   traefik-cl01tl
     searxng                         IN      CNAME   traefik-cl01tl
     seerr                           IN      CNAME   traefik-cl01tl
-    shelfmark                       IN      CNAME   traefik-cl01tl
     slskd                           IN      CNAME   traefik-cl01tl
     sonarr                          IN      CNAME   traefik-cl01tl
     sonarr-4k                       IN      CNAME   traefik-cl01tl

hosts/ps09rp/blocky/config.yml

@@ -151,7 +151,6 @@ customDNS:
     radarr-standup                  IN      CNAME   traefik-cl01tl
     searxng                         IN      CNAME   traefik-cl01tl
     seerr                           IN      CNAME   traefik-cl01tl
-    shelfmark                       IN      CNAME   traefik-cl01tl
     slskd                           IN      CNAME   traefik-cl01tl
     sonarr                          IN      CNAME   traefik-cl01tl
     sonarr-4k                       IN      CNAME   traefik-cl01tl