chore(deps): update dependency traefik/traefik to v3.6.10

clusters/cl01tl/helm/argocd/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: argo-cd
   repository: https://argoproj.github.io/argo-helm
-  version: 9.4.9
+  version: 9.4.7
-digest: sha256:5dbcd4491181bcedd914c0bb0dfa80af521703062898822b60a85e2a0a96e126
+digest: sha256:9fc78ed4a6a55f65e3250e687caf67ad09e852eb7b01313e372127e75f451a79
-generated: "2026-03-09T17:01:48.010446725Z"
+generated: "2026-03-03T20:05:52.081769174Z"

clusters/cl01tl/helm/argocd/Chart.yaml

@@ -15,8 +15,8 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: argo-cd
-    version: 9.4.9
+    version: 9.4.7
     repository: https://argoproj.github.io/argo-helm
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 # renovate: datasource=github-releases depName=argoproj/argo-cd
-appVersion: v3.3.3
+appVersion: v3.3.2

clusters/cl01tl/helm/audiobookshelf/values.yaml

@@ -21,7 +21,7 @@ audiobookshelf:
         apprise-api:
           image:
             repository: caronc/apprise
-            tag: v1.3.2
+            tag: v1.3.1
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/authentik/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 2026.2.1
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.4.0
+  version: 2.3.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.8.0
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.3.0
-digest: sha256:91be5940938eaf90746d44fa4b4afe0771c06e28e15c7d1c0228a84c59bf4200
+digest: sha256:750757130cded0cd2cc9b64ffdba961b55252587b653151f8ecb1031839fb9c9
-generated: "2026-03-09T22:03:48.426441206Z"
+generated: "2026-03-06T06:33:03.42982917Z"

clusters/cl01tl/helm/authentik/Chart.yaml

@@ -25,7 +25,7 @@ dependencies:
     repository: https://charts.goauthentik.io/
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.4.0
+    version: 2.3.0
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.8.0

clusters/cl01tl/helm/blocky/values.yaml

@@ -192,42 +192,36 @@ blocky:
                   *.alexlebens.dev
                   *.boreal-beaufort.ts.net
                   *.discord.com
-                  cdn.trackjs.com
               ads:
                 - |
                   *.alexlebens.net
                   *.alexlebens.dev
                   *.boreal-beaufort.ts.net
                   *.discord.com
-                  cdn.trackjs.com
               priv:
                 - |
                   *.alexlebens.net
                   *.alexlebens.dev
                   *.boreal-beaufort.ts.net
                   *.discord.com
-                  cdn.trackjs.com
               mal:
                 - |
                   *.alexlebens.net
                   *.alexlebens.dev
                   *.boreal-beaufort.ts.net
                   *.discord.com
-                  cdn.trackjs.com
               pro:
                 - |
                   *.alexlebens.net
                   *.alexlebens.dev
                   *.boreal-beaufort.ts.net
                   *.discord.com
-                  cdn.trackjs.com
               oisd:
                 - |
                   *.alexlebens.net
                   *.alexlebens.dev
                   *.boreal-beaufort.ts.net
                   *.discord.com
-                  cdn.trackjs.com
             clientGroupsBlock:
               default:
                 - sus

clusters/cl01tl/helm/booklore/Chart.yaml

@@ -30,4 +30,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/booklore.png
 # renovate: datasource=github-releases depName=booklore-app/BookLore
-appVersion: v2.1.0
+appVersion: v2.0.6

clusters/cl01tl/helm/booklore/values.yaml

@@ -9,7 +9,7 @@ booklore:
         main:
           image:
             repository: ghcr.io/booklore-app/booklore
-            tag: v2.1.0
+            tag: v2.0.6
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/cilium/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: cilium
   repository: https://helm.cilium.io/
-  version: 1.19.1
+  version: 1.18.6
-digest: sha256:bf5e8b3233c18bdb9409bb98c9a7ea4114e0e04e8489a49fdb2d29ded0cfa429
+digest: sha256:8ea328ac238524b5b423e6289f5e25d05ef64e6aa19cfd5de238f1d5dd533e9b
-generated: "2026-03-09T22:54:44.187241119Z"
+generated: "2026-02-05T12:00:20.15778-06:00"

clusters/cl01tl/helm/cilium/Chart.yaml

@@ -15,7 +15,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: cilium
-    version: 1.19.1
+    version: 1.18.6
     repository: https://helm.cilium.io/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/cilium.png
 # renovate: datasource=github-releases depName=cilium/cilium

clusters/cl01tl/helm/code-server/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.4.0
+  version: 2.3.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:dee0f52096efc543f4db3a5dc2732fd37ae9b7950b264e399a6e74c2f3e7cee6
+digest: sha256:13a5bb68bf58c7bf00771a804e3d7291f52e0519b1cf9bece266164dd4bfe5b8
-generated: "2026-03-09T22:04:00.58415637Z"
+generated: "2026-03-06T01:06:30.41359289Z"

clusters/cl01tl/helm/code-server/Chart.yaml

@@ -22,7 +22,7 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.4.0
+    version: 2.3.0
   - name: volsync-target
     alias: volsync-target-config
     version: 0.8.0

clusters/cl01tl/helm/code-server/values.yaml

@@ -9,7 +9,7 @@ code-server:
         main:
           image:
             repository: ghcr.io/linuxserver/code-server
-            tag: 4.110.0@sha256:8473aa16fba93fccc3ca772173d095bccd2e44d4d3104467fee923df10d57cd2
+            tag: 4.109.5@sha256:aa43fb2fc31127e9d2166e903c7f13792351e38658ba29645662a89ff04ff90d
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/dawarich/Chart.yaml

@@ -26,4 +26,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/dawarich.png
 # renovate: datasource=github-releases depName=Freika/dawarich
-appVersion: 1.3.2
+appVersion: 1.3.1

clusters/cl01tl/helm/dawarich/values.yaml

@@ -9,7 +9,7 @@ dawarich:
         main:
           image:
             repository: freikin/dawarich
-            tag: 1.3.2
+            tag: 1.3.1
             pullPolicy: IfNotPresent
           command: ["web-entrypoint.sh"]
           args: ["bin/rails", "server", "-p", "3000", "-b", "::"]
@@ -106,7 +106,7 @@ dawarich:
         sidekiq:
           image:
             repository: freikin/dawarich
-            tag: 1.3.2
+            tag: 1.3.1
             pullPolicy: IfNotPresent
           command: ["sidekiq-entrypoint.sh"]
           args: ["sidekiq"]

clusters/cl01tl/helm/descheduler/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: descheduler
   repository: https://kubernetes-sigs.github.io/descheduler/
-  version: 0.35.1
+  version: 0.35.0
-digest: sha256:ed7cc8068b83ac483fda3a781227b35e12a34abdca214b5490e7036c89db1a95
+digest: sha256:afa0e5fe35f9287db619de604c82a22c3ab90dfcaa3a845ff30491e47c7a5846
-generated: "2026-03-09T21:21:45.788316167Z"
+generated: "2026-02-19T23:03:22.794515683Z"

clusters/cl01tl/helm/descheduler/Chart.yaml

@@ -14,8 +14,8 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: descheduler
-    version: 0.35.1
+    version: 0.35.0
     repository: https://kubernetes-sigs.github.io/descheduler/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 # renovate: datasource=github-releases depName=kubernetes-sigs/descheduler
-appVersion: v0.35.1
+appVersion: v0.35.0

clusters/cl01tl/helm/element-web/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 1.4.31
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.4.0
+  version: 2.3.0
-digest: sha256:5066932d870c4803fca9bc4d7b686793e801d96b14026c299e467d8c107fb7eb
+digest: sha256:7447f3828246d85acd5a2a75b6d086d8fbe29ee90ad61b96dd25de8dcfefbc4e
-generated: "2026-03-09T22:04:10.470135964Z"
+generated: "2026-03-03T18:08:31.901975101Z"

clusters/cl01tl/helm/element-web/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     repository: https://ananace.gitlab.io/charts
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.4.0
+    version: 2.3.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/element.png
 # renovate: datasource=github-releases depName=element-hq/element-web
 appVersion: v1.12.11

clusters/cl01tl/helm/external-secrets/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: external-secrets
   repository: https://charts.external-secrets.io
-  version: 2.1.0
+  version: 2.0.1
-digest: sha256:b19563d51f1922403185979c6c442531a7bb13d302e8438b5a18d450259b7245
+digest: sha256:f47905e03f649c28d29f7a381799fb2df1f0a7bf122af174aeba47ba94f34847
-generated: "2026-03-07T18:02:23.908145348Z"
+generated: "2026-02-20T19:29:28.137671934Z"

clusters/cl01tl/helm/external-secrets/Chart.yaml

@@ -12,7 +12,7 @@ sources:
   - https://github.com/external-secrets/external-secrets/tree/main/deploy/charts/external-secrets
 dependencies:
   - name: external-secrets
-    version: 2.1.0
+    version: 2.0.1
     repository: https://charts.external-secrets.io
 icon: https://avatars.githubusercontent.com/u/68335991?s=48&v=4
 # renovate: datasource=github-releases depName=external-secrets/external-secrets

clusters/cl01tl/helm/freshrss/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.4.0
+  version: 2.3.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.8.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:99f1993c99c23ba5b3af6997d859cbb18f26343e424c1312f8b6169f285a3418
+digest: sha256:44d4f78dd73bd2f1d4d18ab0c7a4c9b2d0ec48c6c9ee7c9bd985dd9b9b50d80c
-generated: "2026-03-09T22:04:20.416597531Z"
+generated: "2026-03-06T01:06:53.677352447Z"

clusters/cl01tl/helm/freshrss/Chart.yaml

@@ -23,7 +23,7 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.4.0
+    version: 2.3.0
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.8.0

clusters/cl01tl/helm/gitea/Chart.lock

@@ -7,21 +7,21 @@ dependencies:
   version: 0.0.3
 - name: meilisearch
   repository: https://meilisearch.github.io/meilisearch-kubernetes
-  version: 0.27.0
+  version: 0.26.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.4.0
+  version: 2.3.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.8.0
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.3.0
+  version: 0.2.0
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.3.0
+  version: 0.2.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:67facdcb00588aed067e66c8daefac43f128ecb311a5d1a244325e4e3136c5ba
+digest: sha256:a06acd0301f43e91f70c9d732cd7fac2f3f5cd5eb536d10d321419daded15ae2
-generated: "2026-03-09T22:04:31.486930128Z"
+generated: "2026-03-06T00:03:20.551447-06:00"

clusters/cl01tl/helm/gitea/Chart.yaml

@@ -33,11 +33,11 @@ dependencies:
     repository: https://dl.gitea.com/charts/
     version: 0.0.3
   - name: meilisearch
-    version: 0.27.0
+    version: 0.26.0
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.4.0
+    version: 2.3.0
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.8.0

clusters/cl01tl/helm/gitea/values.yaml

@@ -145,7 +145,7 @@ gitea-actions:
         log:
           level: debug
         cache:
-          enabled: true
+          enabled: false
         runner:
           labels:
             - "ubuntu-latest:docker://harbor.alexlebens.net/proxy-hub.docker/gitea/runner-images:ubuntu-24.04"

clusters/cl01tl/helm/home-assistant/Chart.yaml

@@ -25,4 +25,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/home-assistant.png
 # renovate: datasource=github-releases depName=home-assistant/core
-appVersion: 2026.3.1
+appVersion: 2026.3.0

clusters/cl01tl/helm/home-assistant/values.yaml

@@ -9,7 +9,7 @@ home-assistant:
         main:
           image:
             repository: ghcr.io/home-assistant/home-assistant
-            tag: 2026.3.1
+            tag: 2026.3.0
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -21,7 +21,7 @@ home-assistant:
         code-server:
           image:
             repository: ghcr.io/linuxserver/code-server
-            tag: 4.110.0@sha256:8473aa16fba93fccc3ca772173d095bccd2e44d4d3104467fee923df10d57cd2
+            tag: 4.109.5@sha256:aa43fb2fc31127e9d2166e903c7f13792351e38658ba29645662a89ff04ff90d
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/jellyfin/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: meilisearch
   repository: https://meilisearch.github.io/meilisearch-kubernetes
-  version: 0.27.0
+  version: 0.26.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:ca384647a640ae717ac874a2627f00ac9a1e5c97ff5eeb8f326ebdd471ab1623
+digest: sha256:8e4c443c9467338aa34e819f7cbce78ebbe3b9cd9453e036ca8f7f0d5bf18c96
-generated: "2026-03-09T15:04:08.648165537Z"
+generated: "2026-03-06T01:09:11.430446168Z"

clusters/cl01tl/helm/jellyfin/Chart.yaml

@@ -25,7 +25,7 @@ dependencies:
     repository: https://bjw-s-labs.github.io/helm-charts/
     version: 4.6.2
   - name: meilisearch
-    version: 0.27.0
+    version: 0.26.0
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/karakeep/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.6.2
 - name: meilisearch
   repository: https://meilisearch.github.io/meilisearch-kubernetes
-  version: 0.27.0
+  version: 0.26.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.4.0
+  version: 2.3.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:75f92316d4b6229d00e3dfa39ed5026ad39a28f833321cd3887a2048cdac34c7
+digest: sha256:0b9a2ac92849bbc08d9c1771ad1136ae259cc38bdb3aa3afb0ea4c5841aecfd3
-generated: "2026-03-09T22:04:48.630821646Z"
+generated: "2026-03-06T01:10:04.579595021Z"

clusters/cl01tl/helm/karakeep/Chart.yaml

@@ -22,11 +22,11 @@ dependencies:
     repository: https://bjw-s-labs.github.io/helm-charts/
     version: 4.6.2
   - name: meilisearch
-    version: 0.27.0
+    version: 0.26.0
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.4.0
+    version: 2.3.0
   - name: volsync-target
     alias: volsync-target-data
     version: 0.8.0

clusters/cl01tl/helm/matrix-synapse/Chart.lock

@@ -13,10 +13,10 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.4.0
+  version: 2.3.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.4.0
+  version: 2.3.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.8.0
@@ -38,5 +38,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:a22b498177f0b5339240ab6c55801d65d5c7921b2de0c0b6f0c2d3eb69e0ff99
+digest: sha256:c26ecd1796d394c0d10c4d64c2c9e7130303cecd8160fe52447b9ae21eedeab9
-generated: "2026-03-09T22:05:01.925279941Z"
+generated: "2026-03-06T06:34:42.381145161Z"

clusters/cl01tl/helm/matrix-synapse/Chart.yaml

@@ -45,11 +45,11 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     alias: cloudflared-synapse
-    version: 2.4.0
+    version: 2.3.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: cloudflared
     alias: cloudflared-hookshot
-    version: 2.4.0
+    version: 2.3.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: postgres-cluster
     alias: postgres-18-cluster

clusters/cl01tl/helm/music-grabber/values.yaml

@@ -9,7 +9,7 @@ music-grabber:
         main:
           image:
             repository: g33kphr33k/musicgrabber
-            tag: 2.3.4
+            tag: 2.3.0
             pullPolicy: IfNotPresent
           env:
             - name: MUSIC_DIR
@@ -85,10 +85,6 @@ music-grabber:
               value: 8080
             - name: DNS_UPSTREAM_RESOLVER_TYPE
               value: dot
-            - name: HTTPPROXY
-              value: "off"
-            - name: SHADOWSOCKS
-              value: "off"
           securityContext:
             privileged: True
             capabilities:

clusters/cl01tl/helm/ntfy/Chart.yaml

@@ -20,4 +20,4 @@ dependencies:
     version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ntfy.png
 # renovate: datasource=github-releases depName=binwiederhier/ntfy
-appVersion: 2.18.0
+appVersion: 2.17.0

clusters/cl01tl/helm/ntfy/values.yaml

@@ -9,7 +9,7 @@ ntfy:
         main:
           image:
             repository: binwiederhier/ntfy
-            tag: v2.18.0
+            tag: v2.17.0
             pullPolicy: IfNotPresent
           args: ["serve"]
           env:

clusters/cl01tl/helm/ollama/values.yaml

@@ -117,7 +117,7 @@ ollama:
         main:
           image:
             repository: ghcr.io/open-webui/open-webui
-            tag: v0.8.10
+            tag: v0.8.8
             pullPolicy: IfNotPresent
           env:
             - name: ENV

clusters/cl01tl/helm/outline/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.4.0
+  version: 2.3.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.8.0
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.3.0
-digest: sha256:4b67eca7ac2acf1607b2c3f06d714d347a64ec99dcf51acfa65c4e773c9047fa
+digest: sha256:bbee925922519c634f9e4ccc716f26e701661fceaed9a729b3aab1a190e3f870
-generated: "2026-03-09T22:05:16.86734349Z"
+generated: "2026-03-06T06:34:57.973236378Z"

clusters/cl01tl/helm/outline/Chart.yaml

@@ -24,7 +24,7 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.4.0
+    version: 2.3.0
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.8.0

clusters/cl01tl/helm/postiz/Chart.lock

@@ -4,7 +4,7 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.4.0
+  version: 2.3.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.8.0
@@ -17,5 +17,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:7cc16902ea9ff1e6d13b46a6a091f1aea7cd4d109af66aa06dfc8a6dc2452328
+digest: sha256:46f73365e01d62e214775293b3925ec7934523ab055cfd1ffb2b10b0c5e73a31
-generated: "2026-03-09T22:05:31.790414803Z"
+generated: "2026-03-06T06:35:11.27539669Z"

clusters/cl01tl/helm/postiz/Chart.yaml

@@ -23,7 +23,7 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.4.0
+    version: 2.3.0
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.8.0
@@ -42,4 +42,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/postiz.png
 # renovate: datasource=github-releases depName=gitroomhq/postiz-app
-appVersion: v2.20.1
+appVersion: v2.20.0

clusters/cl01tl/helm/postiz/values.yaml

@@ -9,7 +9,7 @@ postiz:
         main:
           image:
             repository: ghcr.io/gitroomhq/postiz-app
-            tag: v2.20.1
+            tag: v2.20.0
             pullPolicy: IfNotPresent
           env:
             - name: MAIN_URL

clusters/cl01tl/helm/qbittorrent/values.yaml

@@ -28,7 +28,7 @@ qbittorrent:
         qbittorrent:
           image:
             repository: ghcr.io/linuxserver/qbittorrent
-            tag: 5.1.4@sha256:6a7ffbfff04dd109bff37c474bfee00aa08dea5edb78c670439be3ed242b70fa
+            tag: 5.1.4@sha256:3ee43a4d08ce4a0108e4c8150f570544a8c4a4a11e2ca95b86d46006547f80d5
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -86,10 +86,6 @@ qbittorrent:
               value: 8080,9022
             - name: DNS_UPSTREAM_RESOLVER_TYPE
               value: dot
-            - name: HTTPPROXY
-              value: "off"
-            - name: SHADOWSOCKS
-              value: "off"
           securityContext:
             privileged: True
             capabilities:
@@ -183,7 +179,7 @@ qbittorrent:
         apprise-api:
           image:
             repository: caronc/apprise
-            tag: v1.3.2
+            tag: v1.3.1
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/radarr-4k/values.yaml

@@ -15,7 +15,7 @@ radarr-4k:
         main:
           image:
             repository: ghcr.io/linuxserver/radarr
-            tag: 6.0.4@sha256:ca43905eaf2dd11425efdcfe184892e43806b1ae0a830440c825cecbc2629cfb
+            tag: 6.0.4@sha256:a360633a3682d41e96f71a07ff36ecbdf2394a9628465b84b0a8437087715b41
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/radarr-anime/values.yaml

@@ -13,7 +13,7 @@ radarr-anime:
         main:
           image:
             repository: ghcr.io/linuxserver/radarr
-            tag: 6.0.4@sha256:ca43905eaf2dd11425efdcfe184892e43806b1ae0a830440c825cecbc2629cfb
+            tag: 6.0.4@sha256:a360633a3682d41e96f71a07ff36ecbdf2394a9628465b84b0a8437087715b41
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/radarr-standup/values.yaml

@@ -13,7 +13,7 @@ radarr-standup:
         main:
           image:
             repository: ghcr.io/linuxserver/radarr
-            tag: 6.0.4@sha256:ca43905eaf2dd11425efdcfe184892e43806b1ae0a830440c825cecbc2629cfb
+            tag: 6.0.4@sha256:a360633a3682d41e96f71a07ff36ecbdf2394a9628465b84b0a8437087715b41
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/radarr/values.yaml

@@ -15,7 +15,7 @@ radarr:
         main:
           image:
             repository: ghcr.io/linuxserver/radarr
-            tag: 6.0.4@sha256:ca43905eaf2dd11425efdcfe184892e43806b1ae0a830440c825cecbc2629cfb
+            tag: 6.0.4@sha256:a360633a3682d41e96f71a07ff36ecbdf2394a9628465b84b0a8437087715b41
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/rook-ceph/Chart.lock

@@ -7,6 +7,6 @@ dependencies:
   version: v1.19.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.4.0
+  version: 2.3.0
-digest: sha256:4bd2987d8b6b91e0c4dc026c5d20419c69bd81c82063d7850bbfe8d7dbea3b82
+digest: sha256:32298e3004a4b411ded3a82a2eea31b350b8e8909bd193538fa3c6be0b8a0e94
-generated: "2026-03-09T22:05:44.444530464Z"
+generated: "2026-02-24T20:18:18.200779597Z"

clusters/cl01tl/helm/rook-ceph/Chart.yaml

@@ -24,7 +24,7 @@ dependencies:
   - name: cloudflared
     alias: cloudflared-rgw
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.4.0
+    version: 2.3.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ceph.png
 # renovate: datasource=github-releases depName=rook/rook
 appVersion: v1.19.2

clusters/cl01tl/helm/rybbit/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.4.0
+  version: 2.3.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.8.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:c070404fa2d7fecc9323f35c3e25ca579d392995d49a84f68b4f1e391b5127b2
+digest: sha256:9ad28ec60b7619e10624f89cf60aeada17fb1c36f7a18e1a0a93d613c382f326
-generated: "2026-03-09T22:05:57.182294647Z"
+generated: "2026-03-06T01:15:50.856274619Z"

clusters/cl01tl/helm/rybbit/Chart.yaml

@@ -20,7 +20,7 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.4.0
+    version: 2.3.0
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.8.0

clusters/cl01tl/helm/searxng/values.yaml

@@ -9,7 +9,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:a973f277a9025be36675ee803039d5f309c57e8521a500b5edee4cdba01c316a
+            tag: latest@sha256:6cd460d2e4a725d06613bb8224f887ba7c6aabfb8b581277d2562a2eb1d1e75c
             pullPolicy: IfNotPresent
           env:
             - name: SEARXNG_BASE_URL
@@ -39,7 +39,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:a973f277a9025be36675ee803039d5f309c57e8521a500b5edee4cdba01c316a
+            tag: latest@sha256:6cd460d2e4a725d06613bb8224f887ba7c6aabfb8b581277d2562a2eb1d1e75c
             pullPolicy: IfNotPresent
           env:
             - name: SEARXNG_BASE_URL

clusters/cl01tl/helm/shelfmark/Chart.yaml

@@ -23,4 +23,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/shelfmark.webp
 # renovate: datasource=github-releases depName=calibrain/shelfmark
-appVersion: v1.2.0
+appVersion: v1.1.2

clusters/cl01tl/helm/shelfmark/values.yaml

@@ -9,7 +9,7 @@ shelfmark:
         main:
           image:
             repository: ghcr.io/calibrain/shelfmark
-            tag: v1.2.0
+            tag: v1.1.2
             pullPolicy: IfNotPresent
           env:
             - name: FLASK_PORT
@@ -165,9 +165,6 @@ shelfmark:
               readOnly: false
 volsync-target-config:
   pvcTarget: shelfmark
-  moverSecurityContext:
-    runAsUser: 1000
-    runAsGroup: 1000
   local:
     enabled: true
     schedule: 38 11 * * *

clusters/cl01tl/helm/site-documentation/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.4.0
+  version: 2.3.0
-digest: sha256:5ec88bea9ba8d9e2452d38648ec03a8247a8445d64278b677233cfd31914a876
+digest: sha256:912b66d2acd09e1fc0b9efa9a629b2f15fe054740da09725d6beb7e99dc5c179
-generated: "2026-03-09T22:06:08.514038799Z"
+generated: "2026-02-07T00:39:16.188497341Z"

clusters/cl01tl/helm/site-documentation/Chart.yaml

@@ -22,6 +22,6 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.4.0
+    version: 2.3.0
 icon: https://d21zlbwtcn424f.cloudfront.net/logo-new-round.png
 appVersion: 0.0.5

clusters/cl01tl/helm/site-profile/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.4.0
+  version: 2.3.0
-digest: sha256:275055bd989762de64a6ffdbae107739a3754346aaf61c197fd6592d043de3e0
+digest: sha256:56f0c6e0b34dc0cf496e5a0688a8a5329ca623ded11be1053590bf64e974ed17
-generated: "2026-03-09T22:06:19.3714896Z"
+generated: "2026-02-07T00:39:27.662054954Z"

clusters/cl01tl/helm/site-profile/Chart.yaml

@@ -22,6 +22,6 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.4.0
+    version: 2.3.0
 icon: https://d21zlbwtcn424f.cloudfront.net/logo-new-round.png
 appVersion: 2.3.2

clusters/cl01tl/helm/site-profile/values.yaml

@@ -11,7 +11,7 @@ site-profile:
         main:
           image:
             repository: harbor.alexlebens.net/images/site-profile
-            tag: 2.25.0
+            tag: 2.21.0
             pullPolicy: IfNotPresent
           resources:
             requests:

clusters/cl01tl/helm/slskd/values.yaml

@@ -82,10 +82,6 @@ slskd:
               value: 5030,50300
             - name: DNS_UPSTREAM_RESOLVER_TYPE
               value: dot
-            - name: HTTPPROXY
-              value: "off"
-            - name: SHADOWSOCKS
-              value: "off"
           securityContext:
             privileged: true
             capabilities:

clusters/cl01tl/helm/sonarr-4k/values.yaml

@@ -13,7 +13,7 @@ sonarr-4k:
         main:
           image:
             repository: ghcr.io/linuxserver/sonarr
-            tag: 4.0.16@sha256:21c1c3d52248589bb064f5adafec18cad45812d7a01d317472955eef051e619b
+            tag: 4.0.16@sha256:37be832b78548e3f55f69c45b50e3b14d18df1b6def2a4994258217e67efb1a1
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/sonarr-anime/values.yaml

@@ -13,7 +13,7 @@ sonarr-anime:
         main:
           image:
             repository: ghcr.io/linuxserver/sonarr
-            tag: 4.0.16@sha256:21c1c3d52248589bb064f5adafec18cad45812d7a01d317472955eef051e619b
+            tag: 4.0.16@sha256:37be832b78548e3f55f69c45b50e3b14d18df1b6def2a4994258217e67efb1a1
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/sonarr/values.yaml

@@ -13,7 +13,7 @@ sonarr:
         main:
           image:
             repository: ghcr.io/linuxserver/sonarr
-            tag: 4.0.16@sha256:21c1c3d52248589bb064f5adafec18cad45812d7a01d317472955eef051e619b
+            tag: 4.0.16@sha256:37be832b78548e3f55f69c45b50e3b14d18df1b6def2a4994258217e67efb1a1
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/tdarr/values.yaml

@@ -9,7 +9,7 @@ tdarr:
         main:
           image:
             repository: ghcr.io/haveagitgat/tdarr
-            tag: 2.62.01
+            tag: 2.61.01
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -48,7 +48,7 @@ tdarr:
         main:
           image:
             repository: ghcr.io/haveagitgat/tdarr_node
-            tag: 2.62.01
+            tag: 2.61.01
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/traefik/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: traefik
   repository: https://traefik.github.io/charts
-  version: 39.0.5
+  version: 39.0.4
 - name: traefik-crds
   repository: https://traefik.github.io/charts
   version: 1.14.0
-digest: sha256:8ae6a524708becb7af3a30d2ca4e671c92b7627842f6c6917656526298e2eba5
+digest: sha256:018720720f2ae6d9f2e8e96795d12b7ad46fc89949e835b59b3dd404afade6d4
-generated: "2026-03-09T17:04:21.522089828Z"
+generated: "2026-03-05T19:19:32.181778944Z"

clusters/cl01tl/helm/traefik/Chart.yaml

@@ -15,7 +15,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: traefik
-    version: 39.0.5
+    version: 39.0.4
     repository: https://traefik.github.io/charts
   - name: traefik-crds
     version: 1.14.0

clusters/cl01tl/helm/tubearchivist/values.yaml

@@ -40,7 +40,7 @@ tubearchivist:
         bgutil:
           image:
             repository: brainicism/bgutil-ytdlp-pot-provider
-            tag: 1.3.1
+            tag: 1.3.0
             pullPolicy: IfNotPresent
         gluetun:
           image:
@@ -77,10 +77,6 @@ tubearchivist:
               value: 80,8000,24000
             - name: DNS_UPSTREAM_RESOLVER_TYPE
               value: dot
-            - name: HTTPPROXY
-              value: "off"
-            - name: SHADOWSOCKS
-              value: "off"
           securityContext:
             privileged: True
             capabilities:

clusters/cl01tl/helm/unpackerr/Chart.yaml

@@ -20,4 +20,4 @@ dependencies:
     version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/unpackerr.png
 # renovate: datasource=github-releases depName=Unpackerr/unpackerr
-appVersion: 0.15.2
+appVersion: 0.15.0

clusters/cl01tl/helm/unpackerr/values.yaml

@@ -9,7 +9,7 @@ unpackerr:
         main:
           image:
             repository: golift/unpackerr
-            tag: 0.15.2
+            tag: 0.15.0
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/vaultwarden/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.4.0
+  version: 2.3.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.8.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:5d53feec286aa922cb048e96ce6a8cfd595f6aa05248a868db773fb06cb0165d
+digest: sha256:e4056dce3c22d3770aa46bc636f373252afb77838d74bc2398bc143c6ff9f1ff
-generated: "2026-03-09T22:06:29.256670152Z"
+generated: "2026-03-06T01:19:15.658124532Z"

clusters/cl01tl/helm/vaultwarden/Chart.yaml

@@ -24,7 +24,7 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.4.0
+    version: 2.3.0
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.8.0

clusters/cl01tl/helm/whodb/Chart.yaml

@@ -20,4 +20,4 @@ dependencies:
     version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/whodb.png
 # renovate: datasource=github-releases depName=clidey/whodb
-appVersion: 0.98.0
+appVersion: 0.97.0

clusters/cl01tl/helm/whodb/values.yaml

@@ -8,7 +8,7 @@ whodb:
         main:
           image:
             repository: clidey/whodb
-            tag: 0.98.0
+            tag: 0.97.0
             pullPolicy: IfNotPresent
           env:
             - name: WHODB_OLLAMA_HOST

hosts/ps08rp/blocky/config.yml

@@ -158,8 +158,6 @@ blocking:
       - https://v.firebog.net/hosts/Prigent-Crypto.txt
     pro:
       - https://raw.githubusercontent.com/hagezi/dns-blocklists/main/wildcard/pro.plus.txt
-    oisd:
-      - https://big.oisd.nl/domainswild
   allowlists:
     sus:
       - |
@@ -167,42 +165,30 @@ blocking:
         *.alexlebens.dev
         *.boreal-beaufort.ts.net
         *.discord.com
-        cdn.trackjs.com
     ads:
       - |
         *.alexlebens.net
         *.alexlebens.dev
         *.boreal-beaufort.ts.net
         *.discord.com
-        cdn.trackjs.com
     priv:
       - |
         *.alexlebens.net
         *.alexlebens.dev
         *.boreal-beaufort.ts.net
         *.discord.com
-        cdn.trackjs.com
     mal:
       - |
         *.alexlebens.net
         *.alexlebens.dev
         *.boreal-beaufort.ts.net
         *.discord.com
-        cdn.trackjs.com
     pro:
       - |
         *.alexlebens.net
         *.alexlebens.dev
         *.boreal-beaufort.ts.net
         *.discord.com
-        cdn.trackjs.com
-    oisd:
-      - |
-        *.alexlebens.net
-        *.alexlebens.dev
-        *.boreal-beaufort.ts.net
-        *.discord.com
-        cdn.trackjs.com
   clientGroupsBlock:
     default:
       - sus
@@ -210,7 +196,6 @@ blocking:
       - priv
       - mal
       - pro
-      - oisd
   blockType: zeroIp
   blockTTL: 1m
   loading:

hosts/ps08rp/traefik/compose.yaml

@@ -1,7 +1,7 @@
 ---
 services:
     traefik:
-        image: ghcr.io/traefik/traefik:v3.6.10
+        image: ghcr.io/traefik/traefik:v3.6.9
         container_name: traefik
         command:
             - "--global.checkNewVersion=false"

hosts/ps09rp/blocky/config.yml

@@ -179,8 +179,6 @@ blocking:
       - https://v.firebog.net/hosts/Prigent-Crypto.txt
     pro:
       - https://raw.githubusercontent.com/hagezi/dns-blocklists/main/wildcard/pro.plus.txt
-    oisd:
-      - https://big.oisd.nl/domainswild
   allowlists:
     sus:
       - |
@@ -188,42 +186,30 @@ blocking:
         *.alexlebens.dev
         *.boreal-beaufort.ts.net
         *.discord.com
-        cdn.trackjs.com
     ads:
       - |
         *.alexlebens.net
         *.alexlebens.dev
         *.boreal-beaufort.ts.net
         *.discord.com
-        cdn.trackjs.com
     priv:
       - |
         *.alexlebens.net
         *.alexlebens.dev
         *.boreal-beaufort.ts.net
         *.discord.com
-        cdn.trackjs.com
     mal:
       - |
         *.alexlebens.net
         *.alexlebens.dev
         *.boreal-beaufort.ts.net
         *.discord.com
-        cdn.trackjs.com
     pro:
       - |
         *.alexlebens.net
         *.alexlebens.dev
         *.boreal-beaufort.ts.net
         *.discord.com
-        cdn.trackjs.com
-    oisd:
-      - |
-        *.alexlebens.net
-        *.alexlebens.dev
-        *.boreal-beaufort.ts.net
-        *.discord.com
-        cdn.trackjs.com
   clientGroupsBlock:
     default:
       - sus
@@ -231,7 +217,6 @@ blocking:
       - priv
       - mal
       - pro
-      - oisd
   blockType: zeroIp
   blockTTL: 1m
   loading:

hosts/ps09rp/traefik/compose.yaml

@@ -1,7 +1,7 @@
 ---
 services:
     traefik:
-        image: ghcr.io/traefik/traefik:v3.6.10
+        image: ghcr.io/traefik/traefik:v3.6.9
         container_name: traefik
         command:
             - "--global.checkNewVersion=false"

hosts/ps10rp/blocky/config.yml

@@ -75,8 +75,6 @@ blocking:
       - https://v.firebog.net/hosts/Prigent-Crypto.txt
     pro:
       - https://raw.githubusercontent.com/hagezi/dns-blocklists/main/wildcard/pro.txt
-    oisd:
-      - https://big.oisd.nl/domainswild
   allowlists:
     sus:
       - |
@@ -85,7 +83,6 @@ blocking:
         *.lebens-home.net
         *.boreal-beaufort.ts.net
         *.discord.com
-        cdn.trackjs.com
     ads:
       - |
         *.alexlebens.net
@@ -93,7 +90,6 @@ blocking:
         *.lebens-home.net
         *.boreal-beaufort.ts.net
         *.discord.com
-        cdn.trackjs.com
     priv:
       - |
         *.alexlebens.net
@@ -101,7 +97,6 @@ blocking:
         *.lebens-home.net
         *.boreal-beaufort.ts.net
         *.discord.com
-        cdn.trackjs.com
     mal:
       - |
         *.alexlebens.net
@@ -125,7 +120,6 @@ blocking:
         hulu.hb-api.omtrdc.net
         tvx.adgrx.com
         unagi-na.amazon.com
-        cdn.trackjs.com
     pro:
       - |
         *.alexlebens.net
@@ -133,7 +127,6 @@ blocking:
         *.lebens-home.net
         *.boreal-beaufort.ts.net
         *.discord.com
-        cdn.trackjs.com
   clientGroupsBlock:
     default:
       - sus
@@ -141,7 +134,6 @@ blocking:
       - priv
       - mal
       - pro
-      - oisd
     samsungtv:
       - mal
     firestick:

hosts/ps10rp/traefik/compose.yaml

@@ -20,7 +20,7 @@ services:
             - /dev/net/tun:/dev/net/tun
 
     traefik:
-        image: ghcr.io/traefik/traefik:v3.6.10
+        image: ghcr.io/traefik/traefik:v3.6.9
         container_name: traefik
         command:
             - "--global.checkNewVersion=false"