chore(deps): update ghcr.io/linuxserver/code-server docker tag to v4.109.2

clusters/cl01tl/helm/argo-workflows/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: argo-workflows
   repository: https://argoproj.github.io/argo-helm
-  version: 0.47.4
+  version: 0.47.3
 - name: argo-events
   repository: https://argoproj.github.io/argo-helm
   version: 2.4.20
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.7.0
+  version: 7.5.1
-digest: sha256:aab605d619f2f5940f84f61f60cdc41c7c8d786d0c870e0162168dcfa3ad3d6e
+digest: sha256:d634e2aba7e8ba644eac9b5cff7f959090a755e69c041c15889e4ba1ba8d04f0
-generated: "2026-02-21T13:54:24.776115-06:00"
+generated: "2026-02-07T02:27:32.331360382Z"

clusters/cl01tl/helm/argo-workflows/Chart.yaml

@@ -18,15 +18,15 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: argo-workflows
-    version: 0.47.4
+    version: 0.47.3
     repository: https://argoproj.github.io/argo-helm
   - name: argo-events
     version: 2.4.20
     repository: https://argoproj.github.io/argo-helm
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.7.0
+    version: 7.5.1
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 # renovate: datasource=github-releases depName=argoproj/argo-workflows
-appVersion: v4.0.1
+appVersion: v4.0.0

clusters/cl01tl/helm/argocd/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: argo-cd
   repository: https://argoproj.github.io/argo-helm
-  version: 9.4.3
+  version: 9.4.1
-digest: sha256:412638aff55e51b317017050b3858423593469e0f58c80d58c3ab3f102e577c8
+digest: sha256:6686031538b67a4b79a89b90de06199758c4718a9b7e0a0e6863a5be8964ed9d
-generated: "2026-02-18T18:03:59.328005375Z"
+generated: "2026-02-05T20:06:46.998124019Z"

clusters/cl01tl/helm/argocd/Chart.yaml

@@ -15,8 +15,8 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: argo-cd
-    version: 9.4.3
+    version: 9.4.1
     repository: https://argoproj.github.io/argo-helm
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 # renovate: datasource=github-releases depName=argoproj/argo-cd
-appVersion: v3.3.1
+appVersion: v3.3.0

clusters/cl01tl/helm/authentik/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 2.3.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.7.0
+  version: 7.5.1
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.0.4
-digest: sha256:9e8f037f9d581ad83edde8d4a68672860cbe9d0192b10c37708710315a017469
+digest: sha256:6a491f698eefa7ffdf87c8468dc34c0445a854325ad4483a70f543baf20eab4f
-generated: "2026-02-21T13:54:33.590892-06:00"
+generated: "2026-02-12T21:02:34.17798029Z"

clusters/cl01tl/helm/authentik/Chart.yaml

@@ -28,7 +28,7 @@ dependencies:
     version: 2.3.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.7.0
+    version: 7.5.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     version: 1.0.4

clusters/cl01tl/helm/bazarr/values.yaml

@@ -15,7 +15,7 @@ bazarr:
         main:
           image:
             repository: ghcr.io/linuxserver/bazarr
-            tag: 1.5.5@sha256:1cf40186b1bc35bec87f4e4892d5d8c06086da331010be03e3459a86869c5e74
+            tag: 1.5.5@sha256:18ff732dffcebd559d15a91845fc3360d49652ea01dccfbfd98b8248ceb86e38
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/blocky/values.yaml

@@ -134,12 +134,12 @@ blocky:
               komodo                          IN      CNAME   traefik-cl01tl
               lidarr                          IN      CNAME   traefik-cl01tl
               mail                            IN      CNAME   traefik-cl01tl
-              music-grabber                   IN      CNAME   traefik-cl01tl
               navidrome                       IN      CNAME   traefik-cl01tl
               ntfy                            IN      CNAME   traefik-cl01tl
               objects                         IN      CNAME   traefik-cl01tl
               ollama                          IN      CNAME   traefik-cl01tl
               omni-tools                      IN      CNAME   traefik-cl01tl
+              overseerr                       IN      CNAME   traefik-cl01tl
               photoview                       IN      CNAME   traefik-cl01tl
               plex                            IN      CNAME   traefik-cl01tl
               postiz                          IN      CNAME   traefik-cl01tl

clusters/cl01tl/helm/cilium/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: cilium
   repository: https://helm.cilium.io/
-  version: 1.19.1
+  version: 1.18.6
-digest: sha256:bf5e8b3233c18bdb9409bb98c9a7ea4114e0e04e8489a49fdb2d29ded0cfa429
+digest: sha256:8ea328ac238524b5b423e6289f5e25d05ef64e6aa19cfd5de238f1d5dd533e9b
-generated: "2026-02-21T20:17:16.411955977Z"
+generated: "2026-02-05T12:00:20.15778-06:00"

clusters/cl01tl/helm/cilium/Chart.yaml

@@ -15,8 +15,8 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: cilium
-    version: 1.19.1
+    version: 1.18.6
     repository: https://helm.cilium.io/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/cilium.png
 # renovate: datasource=github-releases depName=cilium/cilium
-appVersion: 1.19.1
+appVersion: 1.19.0

clusters/cl01tl/helm/descheduler/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: descheduler
   repository: https://kubernetes-sigs.github.io/descheduler/
-  version: 0.35.0
+  version: 0.34.0
-digest: sha256:afa0e5fe35f9287db619de604c82a22c3ab90dfcaa3a845ff30491e47c7a5846
+digest: sha256:1020c1fc8c179744f308e9b79f010dcaf59a05019f7d007157974be97063e12b
-generated: "2026-02-19T23:03:22.794515683Z"
+generated: "2025-12-01T20:25:26.970808-06:00"

clusters/cl01tl/helm/descheduler/Chart.yaml

@@ -14,8 +14,8 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: descheduler
-    version: 0.35.0
+    version: 0.34.0
     repository: https://kubernetes-sigs.github.io/descheduler/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 # renovate: datasource=github-releases depName=kubernetes-sigs/descheduler
-appVersion: v0.35.0
+appVersion: 0.34.0

clusters/cl01tl/helm/directus/Chart.lock

@@ -2,11 +2,14 @@ dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
   version: 4.6.2
+- name: cloudflared
+  repository: oci://harbor.alexlebens.net/helm-charts
+  version: 2.3.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.7.0
+  version: 7.5.1
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.0.4
-digest: sha256:c769752a4e07a8313c0fa354e80fcaeb0175c599f49c03afe55b75d4e8823d9e
+digest: sha256:ff9c3684242fa6ce85051e3ab15cd482ad721dbb589853545e8db184644e47b8
-generated: "2026-02-21T13:55:04.630414-06:00"
+generated: "2026-02-07T02:27:57.805810517Z"

clusters/cl01tl/helm/directus/Chart.yaml

@@ -23,11 +23,11 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.7.0
+    version: 7.5.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     version: 1.0.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/directus.png
 # renovate: datasource=github-releases depName=directus/directus
-appVersion: 11.15.4
+appVersion: 11.15.1

clusters/cl01tl/helm/directus/values.yaml

@@ -9,7 +9,7 @@ directus:
         main:
           image:
             repository: directus/directus
-            tag: 11.15.4
+            tag: 11.15.1
             pullPolicy: IfNotPresent
           env:
             - name: PUBLIC_URL

clusters/cl01tl/helm/element-web/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: element-web
   repository: https://ananace.gitlab.io/charts
-  version: 1.4.30
+  version: 1.4.29
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.3.0
-digest: sha256:90a1767a625f0a5ba0f5f23015b2ae7c2ae2cecac311e6cb2dc2ce3c483916b3
+digest: sha256:8596c403427f8ba2f257ed45bb2604c4de0da72dfb03d44d1b0e96f6576c3920
-generated: "2026-02-16T20:12:50.293216516Z"
+generated: "2026-02-07T00:37:18.77202934Z"

clusters/cl01tl/helm/element-web/Chart.yaml

@@ -17,7 +17,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: element-web
-    version: 1.4.30
+    version: 1.4.29
     repository: https://ananace.gitlab.io/charts
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts

clusters/cl01tl/helm/external-dns/values.yaml

@@ -19,7 +19,7 @@ external-dns-unifi:
     webhook:
       image:
         repository: ghcr.io/kashalls/external-dns-unifi-webhook
-        tag: v0.8.2
+        tag: v0.8.1
       env:
         - name: UNIFI_HOST
           value: https://192.168.1.1

clusters/cl01tl/helm/external-secrets/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: external-secrets
   repository: https://charts.external-secrets.io
-  version: 2.0.1
+  version: 2.0.0
-digest: sha256:f47905e03f649c28d29f7a381799fb2df1f0a7bf122af174aeba47ba94f34847
+digest: sha256:3833a9f099d80f50e8a7c9874138b9eba42c18fe5f5f5dc605031f7c44bd3971
-generated: "2026-02-20T19:29:28.137671934Z"
+generated: "2026-02-06T15:40:39.917039721Z"

clusters/cl01tl/helm/external-secrets/Chart.yaml

@@ -12,8 +12,8 @@ sources:
   - https://github.com/external-secrets/external-secrets/tree/main/deploy/charts/external-secrets
 dependencies:
   - name: external-secrets
-    version: 2.0.1
+    version: 2.0.0
     repository: https://charts.external-secrets.io
 icon: https://avatars.githubusercontent.com/u/68335991?s=48&v=4
 # renovate: datasource=github-releases depName=external-secrets/external-secrets
-appVersion: v2.0.1
+appVersion: v2.0.0

clusters/cl01tl/helm/freshrss/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 2.3.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.7.0
+  version: 7.5.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:57f4836c78051b4fbb5c99befa063c34645348b04943e2e5826a30815b2729d7
+digest: sha256:d3129463df789e53981fc7e57b5574d6eba00a44f4b9f906efacf563d70b36f3
-generated: "2026-02-21T13:55:19.710871-06:00"
+generated: "2026-02-07T02:28:08.830228688Z"

clusters/cl01tl/helm/freshrss/Chart.yaml

@@ -26,7 +26,7 @@ dependencies:
     version: 2.3.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.7.0
+    version: 7.5.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data

clusters/cl01tl/helm/garage/values.yaml

@@ -34,7 +34,7 @@ garage:
         debug:
           image:
             repository: ubuntu
-            tag: resolute-20260108
+            tag: resolute-20260106.1
             pullPolicy: IfNotPresent
           command:
             - "sleep"

clusters/cl01tl/helm/gatus/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 1.5.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.7.0
+  version: 7.5.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:c63adfdf69c3a5b818216e3d257d5f789b28d4153b9edb6364f6d0f6281d4544
+digest: sha256:327091258e0174bea1932e66b0a1a7b54b475365cf23fe776b37ac446ae3c7e9
-generated: "2026-02-21T13:55:24.847665-06:00"
+generated: "2026-02-10T21:50:24.906374-06:00"

clusters/cl01tl/helm/gatus/Chart.yaml

@@ -22,7 +22,7 @@ dependencies:
     version: 1.5.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.7.0
+    version: 7.5.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data
@@ -30,4 +30,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/gatus.png
 # renovate: datasource=github-releases depName=TwiN/gatus
-appVersion: v5.35.0
+appVersion: v5.34.0

clusters/cl01tl/helm/gatus/values.yaml

@@ -7,7 +7,7 @@ gatus:
     enabled: true
   image:
     repository: ghcr.io/twin/gatus
-    tag: v5.35.0
+    tag: v5.34.0
   annotations:
     reloader.stakater.com/auto: "true"
   service:
@@ -131,6 +131,9 @@ gatus:
         <<: *defaults
         conditions:
           - "[STATUS] == 401"
+      - name: overseerr
+        url: https://overseerr.alexlebens.net
+        <<: *defaults
       - name: seerr
         url: https://seerr.alexlebens.net
         <<: *defaults
@@ -322,15 +325,12 @@ gatus:
       - name: lidarr
         url: https://lidarr.alexlebens.net
         <<: *defaults
-      - name: yubal
-        url: https://yubal.alexlebens.net
-        <<: *defaults
-      - name: music-grabber
-        url: https://music-grabber.alexlebens.net
-        <<: *defaults
       - name: spotisub
         url: https://spotisub.alexlebens.net
         <<: *defaults
+      - name: yubal
+        url: https://yubal.alexlebens.net
+        <<: *defaults
       - name: slskd
         url: https://slskd.alexlebens.net
         <<: *defaults

clusters/cl01tl/helm/gitea/Chart.lock

@@ -13,7 +13,7 @@ dependencies:
   version: 2.3.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.6.0
+  version: 7.5.1
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.0.4
@@ -23,5 +23,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:ea21ed8ec7d03a5a49345eef3636c4cb6a647211e4952e9291047f92b9ed035e
+digest: sha256:0b376cdddc09bf3346d7c9789452a0bfe6af630faf3b005e75426f5a3635ef1f
-generated: "2026-02-13T19:38:46.206905532Z"
+generated: "2026-02-07T02:28:33.614969361Z"

clusters/cl01tl/helm/gitea/Chart.yaml

@@ -39,16 +39,16 @@ dependencies:
     version: 2.3.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.7.0
+    version: 7.5.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     alias: redis-replication-gitea
     version: 1.0.4
     repository: oci://harbor.alexlebens.net/helm-charts
-  - name: valkey
+  - name: redis-replication
-    alias: valkey-renovate
+    alias: redis-replication-renovate
-    version: 0.9.3
+    version: 1.0.4
-    repository: https://valkey.io/valkey-helm
+    repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-storage
     version: 0.7.0

clusters/cl01tl/helm/gitea/values.yaml

@@ -247,25 +247,10 @@ redis-replication-gitea:
             storage: 10Gi
     sentinel:
       enabled: true
-valkey-renovate:
+redis-replication-renovate:
-  image:
+  replicationNameOverride: redis-replication-renovate
-    registry: ghcr.io
+  redisReplication:
-    repository: valkey-io/valkey
+    clusterSize: 1
-    tag: 9.0.2-alpine
-  resources:
-    requests:
-      cpu: 10m
-      memory: 32Mi
-  dataStorage:
-    enabled: false
-  replica:
-    enabled: false
-  metrics:
-    enabled: true
-    serviceMonitor:
-      enabled: true
-    podMonitor:
-      enabled: true
 volsync-target-storage:
   pvcTarget: gitea-shared-storage
   moverSecurityContext:

clusters/cl01tl/helm/grafana-operator/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 5.21.4
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.7.0
+  version: 7.5.1
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.0.4
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.0.4
-digest: sha256:e93e3ce24fc395b07f64b9536a48c7b91e1a5de594406df9e5690c3b6b04f63a
+digest: sha256:5775ad67f466afd5e7bf986826e5385b4127c65bf81ed885df4690ffb8bd2876
-generated: "2026-02-21T13:55:30.346865-06:00"
+generated: "2026-02-07T02:28:49.454143056Z"

clusters/cl01tl/helm/grafana-operator/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     repository: https://grafana.github.io/helm-charts
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.7.0
+    version: 7.5.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     alias: redis-replication-unified-alerting

clusters/cl01tl/helm/harbor/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 1.18.2
 - name: postgres-cluster
   repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
-  version: 7.7.0
+  version: 7.5.1
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.0.4
-digest: sha256:21ac96cde674b5db272eef5b4ae1aedea1e02c2b49dff88c2acb11282c3839e8
+digest: sha256:5786e414b8b1b61468c0ec283c8e0038944fb383a766d8181564c9301df76ef3
-generated: "2026-02-21T13:55:34.562766-06:00"
+generated: "2026-02-07T02:29:36.127187941Z"

clusters/cl01tl/helm/harbor/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     repository: https://helm.goharbor.io
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.7.0
+    version: 7.5.1
     repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
   - name: redis-replication
     version: 1.0.4

clusters/cl01tl/helm/home-assistant/Chart.yaml

@@ -25,4 +25,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/home-assistant.png
 # renovate: datasource=github-releases depName=home-assistant/core
-appVersion: 2026.2.3
+appVersion: 2026.2.1

clusters/cl01tl/helm/home-assistant/values.yaml

@@ -9,7 +9,7 @@ home-assistant:
         main:
           image:
             repository: ghcr.io/home-assistant/home-assistant
-            tag: 2026.2.3
+            tag: 2026.2.1
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/homepage/values.yaml

@@ -131,7 +131,13 @@ homepage:
         services.yaml: |
           - Media:
               - Media Requests:
-                  icon: sh-seerr.webp
+                  icon: sh-overseerr.webp
+                  description: Overseerr
+                  href: https://overseerr.alexlebens.net
+                  siteMonitor: http://overseerr.overseerr:80
+                  statusStyle: dot
+              - Media Requests (New):
+                  icon: sh-overseerr.webp
                   description: Seerr
                   href: https://seerr.alexlebens.net
                   siteMonitor: http://seerr-seerr-chart.seerr:80
@@ -207,7 +213,7 @@ homepage:
                   icon: sh-rybbit-light.webp
                   description: Rybbit
                   href: https://rybbit.alexlebens.dev
-                  siteMonitor: http://rybbit-client.rybbit:3002
+                  siteMonitor: http://rybbit-client.rybbit:80
                   statusStyle: dot
               - Social Media Management:
                   icon: sh-postiz.webp
@@ -712,19 +718,13 @@ homepage:
                     fields: ["wanted", "queued", "artists"]
               - Yubal:
                   icon: sh-yubal.webp
-                  description: Replicate Youtube playlists
+                  description: Replicate Youtube playlist
                   href: https://yubal.alexlebens.net
                   siteMonitor: http://yubal.yubal:80
                   statusStyle: dot
-              - Music Grabber:
-                  icon: sh-music-service.webp
-                  description: Replicate Music playlists
-                  href: https://music-grabber.alexlebens.net
-                  siteMonitor: http://music-grabber.music-grabber:80
-                  statusStyle: dot
               - Spotisub:
                   icon: sh-spotify.webp
-                  description: Replicate Spotify playlists
+                  description: Replicate Spotify playlist
                   href: https://spotisub.alexlebens.net
                   siteMonitor: http://spotisub.spotisub:80
                   statusStyle: dot

clusters/cl01tl/helm/huntarr/Chart.yaml

@@ -23,4 +23,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/huntarr.png
 # renovate: datasource=github-releases depName=plexguide/huntarr
-appVersion: 9.3.7
+appVersion: 9.2.4

clusters/cl01tl/helm/huntarr/values.yaml

@@ -9,7 +9,7 @@ huntarr:
         main:
           image:
             repository: ghcr.io/plexguide/huntarr
-            tag: 9.3.7
+            tag: 9.2.4
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/immich/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.7.0
+  version: 7.5.1
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.0.4
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:546a643992ac53aa9c91060ac43b2732fc96d3c644972eb7edc85675aa65c180
+digest: sha256:4c93a50fcb190f191510da0b1ede039fea04055eb5b16890eb40c8c4899a63ec
-generated: "2026-02-21T13:55:45.490384-06:00"
+generated: "2026-02-07T02:30:26.038265281Z"

clusters/cl01tl/helm/immich/Chart.yaml

@@ -20,7 +20,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.7.0
+    version: 7.5.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     version: 1.0.4

clusters/cl01tl/helm/intel-device-plugin/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: intel-device-plugins-operator
   repository: https://intel.github.io/helm-charts/
-  version: 0.35.0
+  version: 0.34.1
 - name: intel-device-plugins-gpu
   repository: https://intel.github.io/helm-charts/
-  version: 0.35.0
+  version: 0.34.1
-digest: sha256:90b9b3c1c513009ef2356643d3a006069c871f8fbd451e26d2b5f392a011febe
+digest: sha256:73b2b6f28ec36be02c7bf3e0ef5608e790344a4cdb3e5f183b6b079723e8b53a
-generated: "2026-02-20T19:33:54.514699811Z"
+generated: "2025-12-12T08:03:32.455070212Z"

clusters/cl01tl/helm/intel-device-plugin/Chart.yaml

@@ -16,11 +16,11 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: intel-device-plugins-operator
-    version: 0.35.0
+    version: 0.34.1
     repository: https://intel.github.io/helm-charts/
   - name: intel-device-plugins-gpu
-    version: 0.35.0
+    version: 0.34.1
     repository: https://intel.github.io/helm-charts/
 icon: https://avatars.githubusercontent.com/u/17888862?s=48&v=4
 # renovate: datasource=github-releases depName=intel/intel-device-plugins-for-kubernetes
-appVersion: 0.35.0
+appVersion: 0.34.1

clusters/cl01tl/helm/jellystat/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.7.0
+  version: 7.5.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:d02018739c1cdeff4faeab0865db311f8162df35705401222dfbcc5e5fc13175
+digest: sha256:13a3c6ea43b01d77aded07becb15a9e57ee3541053a67054b9d832cc29e6e9e3
-generated: "2026-02-21T13:55:55.684536-06:00"
+generated: "2026-02-07T02:31:01.535664696Z"

clusters/cl01tl/helm/jellystat/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.7.0
+    version: 7.5.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data

clusters/cl01tl/helm/komodo/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.6.0
+  version: 7.5.1
-digest: sha256:9912cf2bd7590c771f76ee1fc745df2332eaa061c58bb31a3f4e1c2666a12297
+digest: sha256:a8c457a1480e3f0f189de780b3f1649877c17bac8c3cf59a9db68fd08363829b
-generated: "2026-02-13T19:40:39.462738045Z"
+generated: "2026-02-07T02:31:20.129379883Z"

clusters/cl01tl/helm/komodo/Chart.yaml

@@ -23,7 +23,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgresql-17-fdb-cluster
-    version: 7.6.0
+    version: 7.5.1
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/komodo.png
 # renovate: datasource=github-releases depName=moghtech/komodo

clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: kube-prometheus-stack
   repository: oci://ghcr.io/prometheus-community/charts
-  version: 82.2.0
+  version: 81.6.3
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
   version: 4.6.2
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.0.4
-digest: sha256:00762fccd6819bc6cc15eb36c6afcc3006198a3861ce4886456028910205fe43
+digest: sha256:81381261982252c9cf795dca982d25b905346f733d40178b37cc434847cd3490
-generated: "2026-02-20T15:03:56.36908709Z"
+generated: "2026-02-12T21:03:09.101291141Z"

clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml

@@ -20,7 +20,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: kube-prometheus-stack
-    version: 82.2.0
+    version: 81.6.3
     repository: oci://ghcr.io/prometheus-community/charts
   - name: app-template
     alias: ntfy-alertmanager

clusters/cl01tl/helm/libation/values.yaml

@@ -35,7 +35,7 @@ libation:
         main:
           image:
             repository: ubuntu
-            tag: resolute-20260108
+            tag: resolute-20260106.1
             pullPolicy: IfNotPresent
           command:
             - "sleep"

clusters/cl01tl/helm/lidarr/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.7.0
+  version: 7.5.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:ff8f2ca5b39b9677fd58bb7a9b4e6cf3f7115bbb15924331616a46d3ddc840cf
+digest: sha256:628ab2c174a9cf9b24f4c9822d325fee3d63548b526f406f6555bbc7cbabf759
-generated: "2026-02-21T13:56:14.376078-06:00"
+generated: "2026-02-07T02:31:36.916431665Z"

clusters/cl01tl/helm/lidarr/Chart.yaml

@@ -24,7 +24,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.7.0
+    version: 7.5.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/loki/Chart.yaml

@@ -23,4 +23,4 @@ dependencies:
     repository: https://grafana.github.io/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/loki.png
 # renovate: datasource=github-releases depName=grafana/loki
-appVersion: 3.6.6
+appVersion: 3.6.5

clusters/cl01tl/helm/matrix-synapse/Chart.lock

@@ -1,7 +1,7 @@
 dependencies:
 - name: matrix-synapse
   repository: https://ananace.gitlab.io/charts
-  version: 3.12.21
+  version: 3.12.19
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
   version: 4.6.2
@@ -19,7 +19,7 @@ dependencies:
   version: 2.3.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.7.0
+  version: 7.5.1
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.0.4
@@ -38,5 +38,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:c90f4e4cf247a2fc0b1bc455ab8840f48e7fdf825aad3ebb3a41a9996ae4bc19
+digest: sha256:d373bf3fea08bde2c3eea21d421f9d0d385ee141be60229427f281d2fbae4c54
-generated: "2026-02-21T13:56:27.155487-06:00"
+generated: "2026-02-07T02:31:51.33670708Z"

clusters/cl01tl/helm/matrix-synapse/Chart.yaml

@@ -29,7 +29,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: matrix-synapse
-    version: 3.12.21
+    version: 3.12.19
     repository: https://ananace.gitlab.io/charts
   - name: app-template
     alias: matrix-hookshot
@@ -53,7 +53,7 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.7.0
+    version: 7.5.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     alias: redis-replication-matrix-synapse

clusters/cl01tl/helm/matrix-synapse/values.yaml

@@ -260,7 +260,7 @@ mautrix-discord:
         main:
           image:
             repository: dock.mau.dev/mautrix/discord
-            tag: v0.7.6
+            tag: v0.7.5
             pullPolicy: IfNotPresent
           resources:
             requests:
@@ -345,7 +345,7 @@ mautrix-whatsapp:
         main:
           image:
             repository: dock.mau.dev/mautrix/whatsapp
-            tag: v0.2602.0
+            tag: v0.2601.0
             pullPolicy: IfNotPresent
           resources:
             requests:

clusters/cl01tl/helm/music-grabber/Chart.lock

@@ -1,6 +0,0 @@
-dependencies:
-- name: app-template
-  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
-digest: sha256:ed8d23326d2567f51cd8391aab6afd5f53c57df3c9f2bfc352cd22f9759d596e
-generated: "2026-02-20T18:33:14.633756-06:00"

clusters/cl01tl/helm/music-grabber/Chart.yaml

@@ -1,20 +0,0 @@
-apiVersion: v2
-name: music-grabber
-version: 1.0.0
-description: Music Grabber
-keywords:
-  - music-grabber
-  - music
-home: https://wiki.alexlebens.dev/s/
-sources:
-  - https://gitlab.com/g33kphr33k/musicgrabber
-  - https://hub.docker.com/r/g33kphr33k/musicgrabber/tags
-  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: app-template
-    alias: music-grabber
-    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
-appVersion: 2.0.4

clusters/cl01tl/helm/music-grabber/templates/external-secret.yaml

@@ -1,79 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: music-grabber-config-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: music-grabber-config-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: navidrome-user
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/navidrome/admin
-        metadataPolicy: None
-        property: user
-    - secretKey: navidrome-password
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/navidrome/admin
-        metadataPolicy: None
-        property: password
-    - secretKey: slskd-user
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/slskd/auth
-        metadataPolicy: None
-        property: user
-    - secretKey: slskd-password
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/slskd/auth
-        metadataPolicy: None
-        property: password
-
----
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: music-grabber-wireguard-conf
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: music-grabber-wireguard-conf
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: private-key
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /protonvpn/conf/cl01tl
-        metadataPolicy: None
-        property: private-key
-    - secretKey: proton-email
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /protonvpn/conf/cl01tl
-        metadataPolicy: None
-        property: email
-    - secretKey: proton-password
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /protonvpn/conf/cl01tl
-        metadataPolicy: None
-        property: password

clusters/cl01tl/helm/music-grabber/templates/namespace.yaml

@@ -1,11 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: music-grabber
-  labels:
-    app.kubernetes.io/name: music-grabber
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-    pod-security.kubernetes.io/audit: privileged
-    pod-security.kubernetes.io/enforce: privileged
-    pod-security.kubernetes.io/warn: privileged

clusters/cl01tl/helm/music-grabber/templates/persistent-volume-claim.yaml

@@ -1,17 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: music-grabber-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: music-grabber-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  volumeName: music-grabber-nfs-storage
-  storageClassName: nfs-client
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 1Gi

clusters/cl01tl/helm/music-grabber/templates/persistent-volume.yaml

@@ -1,23 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: music-grabber-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: music-grabber-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: nfs-client
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  nfs:
-    path: /volume2/Storage
-    server: synologybond.alexlebens.net
-  mountOptions:
-    - vers=4
-    - minorversion=1
-    - noac

clusters/cl01tl/helm/music-grabber/values.yaml

@@ -1,159 +0,0 @@
-music-grabber:
-  controllers:
-    main:
-      type: deployment
-      replicas: 1
-      strategy: Recreate
-      revisionHistoryLimit: 3
-      containers:
-        main:
-          image:
-            repository: g33kphr33k/musicgrabber
-            tag: 2.0.4
-            pullPolicy: IfNotPresent
-          env:
-            - name: MUSIC_DIR
-              value: /mnt/store/Music Grabber/
-            - name: ENABLE_MUSICBRAINZ
-              value: true
-            - name: ORGANISE_BY_ARTIST
-              value: true
-            - name: NAVIDROME_URL
-              value: http://navidrome-main.navidrome:80
-            - name: NAVIDROME_USER
-              valueFrom:
-                secretKeyRef:
-                  name: music-grabber-config-secret
-                  key: navidrome-user
-            - name: NAVIDROME_PASS
-              valueFrom:
-                secretKeyRef:
-                  name: music-grabber-config-secret
-                  key: navidrome-password
-            - name: SLSKD_URL
-              value: http://slskd.slskd:5030
-            - name: SLSKD_USER
-              valueFrom:
-                secretKeyRef:
-                  name: music-grabber-config-secret
-                  key: slskd-user
-            - name: SLSKD_PASS
-              valueFrom:
-                secretKeyRef:
-                  name: music-grabber-config-secret
-                  key: slskd-password
-            - name: SLSKD_DOWNLOADS_PATH
-              value: /mnt/store/slskd/Downloads
-          resources:
-            requests:
-              cpu: 10m
-              memory: 128Mi
-        gluetun:
-          image:
-            repository: ghcr.io/qdm12/gluetun
-            tag: v3.41.1@sha256:1a5bf4b4820a879cdf8d93d7ef0d2d963af56670c9ebff8981860b6804ebc8ab
-            pullPolicy: IfNotPresent
-          lifecycle:
-            postStart:
-              exec:
-                command: ["/bin/sh", "-c", "(ip rule del table 51820; ip -6 rule del table 51820) || true"]
-          env:
-            - name: VPN_SERVICE_PROVIDER
-              value: protonvpn
-            - name: VPN_TYPE
-              value: wireguard
-            - name: WIREGUARD_PRIVATE_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: music-grabber-wireguard-conf
-                  key: private-key
-            - name: UPDATER_PROTONVPN_EMAIL
-              valueFrom:
-                secretKeyRef:
-                  name: music-grabber-wireguard-conf
-                  key: proton-email
-            - name: UPDATER_PROTONVPN_PASSWORD
-              valueFrom:
-                secretKeyRef:
-                  name: music-grabber-wireguard-conf
-                  key: proton-password
-            - name: FIREWALL_OUTBOUND_SUBNETS
-              value: 10.0.0.0/8
-            - name: FIREWALL_INPUT_PORTS
-              value: 8080
-            - name: DNS_UPSTREAM_RESOLVER_TYPE
-              value: dot
-          securityContext:
-            privileged: True
-            capabilities:
-              add:
-                - NET_ADMIN
-                - SYS_MODULE
-          probes:
-            liveness:
-              enabled: true
-              custom: true
-              spec:
-                exec:
-                  command:
-                    - /gluetun-entrypoint
-                    - healthcheck
-                failureThreshold: 5
-                initialDelaySeconds: 30
-                periodSeconds: 30
-                successThreshold: 1
-                timeoutSeconds: 15
-          resources:
-            limits:
-              devic.es/tun: "1"
-            requests:
-              devic.es/tun: "1"
-              cpu: 10m
-              memory: 128Mi
-  service:
-    main:
-      controller: main
-      ports:
-        http:
-          port: 80
-          targetPort: 8080
-          protocol: HTTP
-  route:
-    main:
-      kind: HTTPRoute
-      parentRefs:
-        - group: gateway.networking.k8s.io
-          kind: Gateway
-          name: traefik-gateway
-          namespace: traefik
-      hostnames:
-        - music-grabber.alexlebens.net
-      rules:
-        - backendRefs:
-            - group: ''
-              kind: Service
-              name: music-grabber
-              port: 80
-              weight: 100
-          matches:
-            - path:
-                type: PathPrefix
-                value: /
-  persistence:
-    cache:
-      storageClass: ceph-block
-      accessMode: ReadWriteOnce
-      size: 1Gi
-      retain: true
-      advancedMounts:
-        main:
-          main:
-            - path: /data
-              readOnly: false
-    music:
-      existingClaim: music-grabber-nfs-storage
-      advancedMounts:
-        main:
-          main:
-            - path: /mnt/store/
-              readOnly: false

clusters/cl01tl/helm/navidrome/templates/persistent-volume-claim.yaml

@@ -35,25 +35,6 @@ spec:
     requests:
       storage: 1Gi
 
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: navidrome-music-grabber-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: navidrome-music-grabber-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  volumeName: navidrome-music-grabber-nfs-storage
-  storageClassName: nfs-client
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 1Gi
-
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim

clusters/cl01tl/helm/navidrome/templates/persistent-volume.yaml

@@ -47,31 +47,6 @@ spec:
     - minorversion=1
     - noac
 
----
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: navidrome-music-grabber-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: navidrome-music-grabber-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: nfs-client
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  nfs:
-    path: /volume2/Storage/Music Grabber/
-    server: synologybond.alexlebens.net
-  mountOptions:
-    - vers=4
-    - minorversion=1
-    - noac
-
 ---
 apiVersion: v1
 kind: PersistentVolume

clusters/cl01tl/helm/navidrome/values.yaml

@@ -155,13 +155,6 @@ navidrome:
           main:
             - path: /music-youtube
               readOnly: true
-    music-grabber:
-      existingClaim: navidrome-music-grabber-nfs-storage
-      advancedMounts:
-        main:
-          main:
-            - path: /music-grabber
-              readOnly: true
     music-single:
       existingClaim: navidrome-music-single-nfs-storage
       advancedMounts:

clusters/cl01tl/helm/ollama/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.7.0
+  version: 7.5.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:963647140cc0342b9992ee086207415058dad35f599f78133ec889d9c373ab8d
+digest: sha256:016ca629a1fbe06f6791b663b6b5e99f05184ee5042fabc2e9cb60975032baf8
-generated: "2026-02-21T13:56:47.045521-06:00"
+generated: "2026-02-07T02:32:11.063809451Z"

clusters/cl01tl/helm/ollama/Chart.yaml

@@ -23,7 +23,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.7.0
+    version: 7.5.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data
@@ -31,4 +31,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ollama.png
 # renovate: datasource=github-releases depName=ollama/ollama
-appVersion: 0.16.3
+appVersion: 0.16.0

clusters/cl01tl/helm/ollama/values.yaml

@@ -22,7 +22,7 @@ ollama:
         main:
           image:
             repository: ollama/ollama
-            tag: 0.16.3
+            tag: 0.16.0
             pullPolicy: IfNotPresent
           env:
             - name: OLLAMA_KEEP_ALIVE
@@ -58,7 +58,7 @@ ollama:
         main:
           image:
             repository: ollama/ollama
-            tag: 0.16.3
+            tag: 0.16.0
             pullPolicy: IfNotPresent
           env:
             - name: OLLAMA_KEEP_ALIVE
@@ -94,7 +94,7 @@ ollama:
         main:
           image:
             repository: ollama/ollama
-            tag: 0.16.3
+            tag: 0.16.0
             pullPolicy: IfNotPresent
           env:
             - name: OLLAMA_KEEP_ALIVE
@@ -117,7 +117,7 @@ ollama:
         main:
           image:
             repository: ghcr.io/open-webui/open-webui
-            tag: v0.8.3
+            tag: v0.8.0
             pullPolicy: IfNotPresent
           env:
             - name: ENV

clusters/cl01tl/helm/outline/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 2.3.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.7.0
+  version: 7.5.1
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.0.4
-digest: sha256:5ac6b293226ce26c698158b2b44dcbe3907ca37aa4046d392653577ca274f0e3
+digest: sha256:5beab8bbe25bbcafae4cb9a55494212b00f8f52053ec0ee545288a23bc6ea61c
-generated: "2026-02-21T13:56:51.393846-06:00"
+generated: "2026-02-07T02:32:25.090868738Z"

clusters/cl01tl/helm/outline/Chart.yaml

@@ -27,11 +27,11 @@ dependencies:
     version: 2.3.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.7.0
+    version: 7.5.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     version: 1.0.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/outline.png
 # renovate: datasource=github-releases depName=outline/outline
-appVersion: 1.5.0
+appVersion: 1.4.0

clusters/cl01tl/helm/outline/values.yaml

@@ -9,7 +9,7 @@ outline:
         main:
           image:
             repository: outlinewiki/outline
-            tag: 1.5.0
+            tag: 1.4.0
             pullPolicy: IfNotPresent
           env:
             - name: NODE_ENV

clusters/cl01tl/helm/overseerr/Chart.lock

@@ -0,0 +1,6 @@
+dependencies:
+- name: app-template
+  repository: https://bjw-s-labs.github.io/helm-charts/
+  version: 4.6.2
+digest: sha256:c7f53a9c86a84aab15434cde30a70cf024cf9898ff8485438a0ecdc6ca815ecc
+generated: "2026-01-16T18:51:06.856481136Z"

clusters/cl01tl/helm/overseerr/Chart.yaml

@@ -0,0 +1,22 @@
+apiVersion: v2
+name: overseerr
+version: 1.0.0
+description: Overseerr
+keywords:
+  - overseer
+  - media
+  - request
+home: https://wiki.alexlebens.dev/s/ba89ec92-a15c-48d5-9c33-a28a0134b0f9
+sources:
+  - https://github.com/sct/overseerr
+  - https://github.com/sct/overseerr/pkgs/container/overseerr
+  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
+maintainers:
+  - name: alexlebens
+dependencies:
+  - name: app-template
+    repository: https://bjw-s-labs.github.io/helm-charts/
+    version: 4.6.2
+icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/overseerr.png
+# renovate: datasource=github-releases depName=sct/overseerr
+appVersion: 1.34.0

clusters/cl01tl/helm/overseerr/templates/external-secret.yaml

@@ -0,0 +1,55 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: overseerr-main-backup-secret
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: overseerr-main-backup-secret
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  target:
+    template:
+      mergePolicy: Merge
+      engineVersion: v2
+      data:
+        RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/overseerr/overseerr-main"
+  data:
+    - secretKey: BUCKET_ENDPOINT
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/volsync/restic/config
+        metadataPolicy: None
+        property: S3_BUCKET_ENDPOINT
+    - secretKey: RESTIC_PASSWORD
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/volsync/restic/config
+        metadataPolicy: None
+        property: RESTIC_PASSWORD
+    - secretKey: AWS_DEFAULT_REGION
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/volsync/restic/config
+        metadataPolicy: None
+        property: AWS_DEFAULT_REGION
+    - secretKey: AWS_ACCESS_KEY_ID
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /digital-ocean/home-infra/volsync-backups
+        metadataPolicy: None
+        property: access_key
+    - secretKey: AWS_SECRET_ACCESS_KEY
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /digital-ocean/home-infra/volsync-backups
+        metadataPolicy: None
+        property: secret_key

clusters/cl01tl/helm/overseerr/templates/replication-source.yaml

@@ -0,0 +1,25 @@
+apiVersion: volsync.backube/v1alpha1
+kind: ReplicationSource
+metadata:
+  name: overseerr-main-backup-source
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: overseerr-main-backup-source
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  sourcePVC: overseerr-main
+  trigger:
+    schedule: 0 4 * * *
+  restic:
+    pruneIntervalDays: 7
+    repository: overseerr-main-backup-secret
+    retain:
+      hourly: 1
+      daily: 3
+      weekly: 2
+      monthly: 2
+      yearly: 4
+    copyMethod: Snapshot
+    storageClassName: ceph-block
+    volumeSnapshotClassName: ceph-blockpool-snapshot

clusters/cl01tl/helm/overseerr/values.yaml

@@ -0,0 +1,61 @@
+app-template:
+  controllers:
+    main:
+      type: deployment
+      replicas: 1
+      strategy: Recreate
+      revisionHistoryLimit: 3
+      containers:
+        main:
+          image:
+            repository: ghcr.io/sct/overseerr
+            tag: 1.34.0
+            pullPolicy: IfNotPresent
+          env:
+            - name: TZ
+              value: US/Central
+          resources:
+            requests:
+              cpu: 10m
+              memory: 512Mi
+  service:
+    main:
+      controller: main
+      ports:
+        http:
+          port: 80
+          targetPort: 5055
+          protocol: HTTP
+  route:
+    main:
+      kind: HTTPRoute
+      parentRefs:
+        - group: gateway.networking.k8s.io
+          kind: Gateway
+          name: traefik-gateway
+          namespace: traefik
+      hostnames:
+        - overseerr.alexlebens.net
+      rules:
+        - backendRefs:
+            - group: ''
+              kind: Service
+              name: overseerr
+              port: 80
+              weight: 100
+          matches:
+            - path:
+                type: PathPrefix
+                value: /
+  persistence:
+    main:
+      forceRename: overseerr-main
+      storageClass: ceph-block
+      accessMode: ReadWriteOnce
+      size: 10Gi
+      retain: true
+      advancedMounts:
+        main:
+          main:
+            - path: /app/config
+              readOnly: false

clusters/cl01tl/helm/photoview/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.7.0
+  version: 7.5.1
-digest: sha256:35bc71fbdeec5cda0e88c3fc51274282343d7b00442b797b7ce0f9fdd4c55c62
+digest: sha256:00b4fff6726d8bb1c7d8cd7ad9a1717d91f9d5d8ba1785527e0a49a665c6f76a
-generated: "2026-02-21T13:56:54.955277-06:00"
+generated: "2026-02-07T02:32:37.367202037Z"

clusters/cl01tl/helm/photoview/Chart.yaml

@@ -20,7 +20,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.7.0
+    version: 7.5.1
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/photoview.png
 # renovate: datasource=github-releases depName=photoview/photoview

clusters/cl01tl/helm/postiz/Chart.lock

@@ -7,7 +7,7 @@ dependencies:
   version: 2.3.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.7.0
+  version: 7.5.1
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.0.4
@@ -17,5 +17,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:c0f190c1ab7ab255c2c9505836c2e1f5927efd76fbf04ffcc89f7777af701c37
+digest: sha256:399468e311fa4b9a52681770fcf5f0c247764b99883c847a18c166a1d40726be
-generated: "2026-02-21T13:56:58.609117-06:00"
+generated: "2026-02-07T02:32:49.436802609Z"

clusters/cl01tl/helm/postiz/Chart.yaml

@@ -26,7 +26,7 @@ dependencies:
     version: 2.3.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.7.0
+    version: 7.5.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     version: 1.0.4
@@ -41,4 +41,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/postiz.png
 # renovate: datasource=github-releases depName=gitroomhq/postiz-app
-appVersion: v2.19.0
+appVersion: v2.17.0

clusters/cl01tl/helm/postiz/values.yaml

@@ -9,7 +9,7 @@ postiz:
         main:
           image:
             repository: ghcr.io/gitroomhq/postiz-app
-            tag: v2.19.0
+            tag: v2.17.0
             pullPolicy: IfNotPresent
           env:
             - name: MAIN_URL

clusters/cl01tl/helm/qbittorrent/values.yaml

@@ -28,7 +28,7 @@ qbittorrent:
         qbittorrent:
           image:
             repository: ghcr.io/linuxserver/qbittorrent
-            tag: 5.1.4@sha256:85eb27d2d09cd4cb748036a4c7f261321da516b6f88229176cf05a92ccd26815
+            tag: 5.1.4@sha256:dfa75bc534ad4f36262f75b5c1d4c4f0ddd5e7ed5711ebc581c70920cce204ee
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/radarr-4k/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.7.0
+  version: 7.5.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:66dabde9a2997128f3f567d8cf197d36c3184ab2e641094d42fb7ba9d72b88d4
+digest: sha256:08a3191f712e52d0509c7371535e5eb77c140a6c0b85192dd9015870a973eca1
-generated: "2026-02-21T13:57:11.747527-06:00"
+generated: "2026-02-07T02:33:02.701341105Z"

clusters/cl01tl/helm/radarr-4k/Chart.yaml

@@ -27,7 +27,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.7.0
+    version: 7.5.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/radarr-4k/values.yaml

@@ -15,7 +15,7 @@ radarr-4k:
         main:
           image:
             repository: ghcr.io/linuxserver/radarr
-            tag: 6.0.4@sha256:6d3e68474ea146f995af98d3fb2cb1a14e2e4457ddaf035aa5426889e2f9249c
+            tag: 6.0.4@sha256:f08dda38e7d12e5a722d9a5cb6e54acaf63c8598fefeefec88effe0c0d0038dd
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/radarr-anime/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.7.0
+  version: 7.5.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:77157345591eb2c015d2743f9a0b35990513262b40a85692ec5ed74e948c3b89
+digest: sha256:5625dc905a3c7cc850c56cb71ea7bc07bcbb545a73aca1f96c968e7af7831507
-generated: "2026-02-21T13:57:13.949331-06:00"
+generated: "2026-02-07T02:33:15.765583035Z"

clusters/cl01tl/helm/radarr-anime/Chart.yaml

@@ -27,7 +27,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.7.0
+    version: 7.5.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/radarr-anime/values.yaml

@@ -13,7 +13,7 @@ radarr-anime:
         main:
           image:
             repository: ghcr.io/linuxserver/radarr
-            tag: 6.0.4@sha256:6d3e68474ea146f995af98d3fb2cb1a14e2e4457ddaf035aa5426889e2f9249c
+            tag: 6.0.4@sha256:f08dda38e7d12e5a722d9a5cb6e54acaf63c8598fefeefec88effe0c0d0038dd
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/radarr-standup/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.7.0
+  version: 7.5.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:2e0cc917f907bde2c3c1f87b458bb104e2361453b624981a9de39d9461945913
+digest: sha256:05835a68b6634425649a47b2fa8a5c786579b2d5783fab461d36b986b36a684a
-generated: "2026-02-21T13:57:16.170473-06:00"
+generated: "2026-02-07T02:33:28.091999824Z"

clusters/cl01tl/helm/radarr-standup/Chart.yaml

@@ -26,7 +26,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.7.0
+    version: 7.5.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/radarr-standup/values.yaml

@@ -13,7 +13,7 @@ radarr-standup:
         main:
           image:
             repository: ghcr.io/linuxserver/radarr
-            tag: 6.0.4@sha256:6d3e68474ea146f995af98d3fb2cb1a14e2e4457ddaf035aa5426889e2f9249c
+            tag: 6.0.4@sha256:f08dda38e7d12e5a722d9a5cb6e54acaf63c8598fefeefec88effe0c0d0038dd
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/radarr/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.7.0
+  version: 7.5.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:03b178fbfa943c97ab02fea356355ebd9d08ab12a0abbdce5406581b4026479c
+digest: sha256:496790708a46e5e0f576c8bfc736906f22c147a64091cc37800055143895e72c
-generated: "2026-02-21T13:57:09.419508-06:00"
+generated: "2026-02-07T02:33:39.645024251Z"

clusters/cl01tl/helm/radarr/Chart.yaml

@@ -26,7 +26,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.7.0
+    version: 7.5.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/radarr/values.yaml

@@ -15,7 +15,7 @@ radarr:
         main:
           image:
             repository: ghcr.io/linuxserver/radarr
-            tag: 6.0.4@sha256:6d3e68474ea146f995af98d3fb2cb1a14e2e4457ddaf035aa5426889e2f9249c
+            tag: 6.0.4@sha256:f08dda38e7d12e5a722d9a5cb6e54acaf63c8598fefeefec88effe0c0d0038dd
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/reloader/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: reloader
   repository: https://stakater.github.io/stakater-charts
-  version: 2.2.8
+  version: 2.2.7
-digest: sha256:5ccc7a551bb223b97c1699270bda5c2811a986e1e4a13c26a92818a6c573d9fa
+digest: sha256:e213ce83cfaa12d2a63dc1734dc3e7f4539f0607151fdb68afa479cd681e05b2
-generated: "2026-02-13T20:54:51.731928064Z"
+generated: "2025-12-16T07:01:36.222821474Z"

clusters/cl01tl/helm/reloader/Chart.yaml

@@ -14,8 +14,8 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: reloader
-    version: 2.2.8
+    version: 2.2.7
     repository: https://stakater.github.io/stakater-charts
 icon: https://raw.githubusercontent.com/stakater/Reloader/refs/heads/master/assets/web/reloader.jpg
 # renovate: datasource=github-releases depName=stakater/Reloader
-appVersion: v1.4.13
+appVersion: v1.4.12

clusters/cl01tl/helm/roundcube/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.6.0
+  version: 7.5.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:db99f485b9209391513f130e3495828d7f91c860c3a7c445fe7f97eb47bfa902
+digest: sha256:67a0d8c3f3180dd5686ecc045cd86c97e74f3a38879ed3b893828c68fa2bfac6
-generated: "2026-02-13T19:44:11.616600853Z"
+generated: "2026-02-07T02:33:50.475604441Z"

clusters/cl01tl/helm/roundcube/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.6.0
+    version: 7.5.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data

clusters/cl01tl/helm/rybbit/Chart.lock

@@ -11,5 +11,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:bb600bb9c6ae0fa913494bc09561e0e9943a12d1507d5d4e8d83649283232aa3
+digest: sha256:57e8ad153b6ef3f02c647b5996307869c0ba620b726ae8eafdf13680d7ad4a48
-generated: "2026-02-20T15:18:39.886272-06:00"
+generated: "2026-02-13T12:46:23.518948-06:00"

clusters/cl01tl/helm/rybbit/Chart.yaml

@@ -26,7 +26,7 @@ dependencies:
     version: 7.6.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
-    alias: volsync-target-clickhouse-data
+    alias: volsync-target-config
     version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/rybbit.webp