chore(deps): update unpoller/unpoller to v2.25.0

.gitea/workflows/renovate.yaml

@@ -13,7 +13,7 @@ on:
 jobs:
   renovate:
     runs-on: ubuntu-latest
-    container: ghcr.io/renovatebot/renovate:43
+    container: ghcr.io/renovatebot/renovate:42
     steps:
       - name: Checkout
         uses: actions/checkout@v6

clusters/cl01tl/helm/actual/Chart.yaml

@@ -23,4 +23,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/actual-budget.png
 # renovate: datasource=github-releases depName=actualbudget/actual
-appVersion: 26.2.0
+appVersion: 26.1.0

clusters/cl01tl/helm/actual/values.yaml

@@ -9,7 +9,7 @@ actual:
         main:
           image:
             repository: ghcr.io/actualbudget/actual
-            tag: 26.2.0
+            tag: 26.1.0
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/argo-workflows/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: argo-workflows
   repository: https://argoproj.github.io/argo-helm
-  version: 0.47.3
+  version: 0.47.1
 - name: argo-events
   repository: https://argoproj.github.io/argo-helm
   version: 2.4.20
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.5.0
-digest: sha256:156c07cae82be20f03a17b8f2a4a188679830ce1430711da812c4aed626c17b4
+digest: sha256:d7b1a201f397588011b17e261f06298a110354958db98be43b9925b40a0e6deb
-generated: "2026-02-02T23:56:58.434603097Z"
+generated: "2026-01-23T00:22:35.377575613Z"

clusters/cl01tl/helm/argo-workflows/Chart.yaml

@@ -18,7 +18,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: argo-workflows
-    version: 0.47.3
+    version: 0.47.1
     repository: https://argoproj.github.io/argo-helm
   - name: argo-events
     version: 2.4.20
@@ -29,4 +29,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 # renovate: datasource=github-releases depName=argoproj/argo-workflows
-appVersion: v4.0.0
+appVersion: v3.7.8

clusters/cl01tl/helm/argocd/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: argo-cd
   repository: https://argoproj.github.io/argo-helm
-  version: 9.4.1
+  version: 9.3.7
-digest: sha256:6686031538b67a4b79a89b90de06199758c4718a9b7e0a0e6863a5be8964ed9d
+digest: sha256:688d3b74c5750ef87ff3cafd13b5879c8e7cda7be17ab252a289f3c24591ff0b
-generated: "2026-02-05T20:06:46.998124019Z"
+generated: "2026-01-28T01:30:37.767984436Z"

clusters/cl01tl/helm/argocd/Chart.yaml

@@ -15,8 +15,8 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: argo-cd
-    version: 9.4.1
+    version: 9.3.7
     repository: https://argoproj.github.io/argo-helm
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 # renovate: datasource=github-releases depName=argoproj/argo-cd
-appVersion: v3.3.0
+appVersion: v3.2.6

clusters/cl01tl/helm/authentik/Chart.lock

@@ -1,15 +1,15 @@
 dependencies:
 - name: authentik
   repository: https://charts.goauthentik.io/
-  version: 2025.12.3
+  version: 2025.12.1
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.2.2
+  version: 2.1.9
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.5.0
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.4
+  version: 1.0.1
-digest: sha256:61110db108493eac486715c324a2233d3cd056ea623f8e5c5deda9bd828964e6
+digest: sha256:137f0f3ecc4c958151badcc661d05f2f08119e3abef0c4b00ed93edc4b4596e4
-generated: "2026-02-03T20:35:32.880480215Z"
+generated: "2026-01-23T00:35:33.491000636Z"

clusters/cl01tl/helm/authentik/Chart.yaml

@@ -21,17 +21,17 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: authentik
-    version: 2025.12.3
+    version: 2025.12.1
     repository: https://charts.goauthentik.io/
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.2.2
+    version: 2.1.9
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
-    version: 1.0.4
+    version: 1.0.1
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/authentik.png
 # renovate: datasource=github-releases depName=goauthentik/authentik

clusters/cl01tl/helm/backrest/Chart.yaml

@@ -27,4 +27,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/backrest.png
 # renovate: datasource=github-releases depName=garethgeorge/backrest
-appVersion: v1.11.2
+appVersion: v1.11.1

clusters/cl01tl/helm/backrest/values.yaml

@@ -8,7 +8,7 @@ backrest:
         main:
           image:
             repository: garethgeorge/backrest
-            tag: v1.11.2
+            tag: v1.11.1
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/bazarr/Chart.yaml

@@ -25,4 +25,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/bazarr.png
 # renovate: datasource=github-releases depName=morpheus65535/bazarr
-appVersion: 1.5.5
+appVersion: 1.5.4

clusters/cl01tl/helm/bazarr/values.yaml

@@ -15,7 +15,7 @@ bazarr:
         main:
           image:
             repository: ghcr.io/linuxserver/bazarr
-            tag: 1.5.5@sha256:d40ee61030a9afafddfdd58d160281b865bfcad7cb66e920116fd6fd40668cbb
+            tag: 1.5.4@sha256:d6492cc79ca5e12fe617c7285e7ebd60d4e7f0e93ec7faa78338dba91f07a91e
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/blocky/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.6.2
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.4
+  version: 1.0.1
-digest: sha256:fe577fe52ae34540b1610c598f149eab49e44c640ed717cea5ad8fdf229e37f2
+digest: sha256:f3cc9b85524eb1a0c8aec92a87ad4dd1f2f59c5bb3474b569ce188827e40b3d0
-generated: "2026-02-03T20:35:43.744062575Z"
+generated: "2026-01-16T18:45:21.852495393Z"

clusters/cl01tl/helm/blocky/Chart.yaml

@@ -18,7 +18,7 @@ dependencies:
     repository: https://bjw-s-labs.github.io/helm-charts/
     version: 4.6.2
   - name: redis-replication
-    version: 1.0.4
+    version: 1.0.1
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/blocky.png
 # renovate: datasource=github-releases depName=0xerr0r/blocky

clusters/cl01tl/helm/cert-manager/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: cert-manager
   repository: https://charts.jetstack.io
-  version: v1.19.3
+  version: v1.19.2
-digest: sha256:114cb3c074866dd41725580ac14367f0aa03653f362ae156430f1dc0ee6ddd32
+digest: sha256:b02bda9b9f2fc886af11d017a27a5761513defee603f9e3aa1d7add2749b925c
-generated: "2026-02-02T23:06:15.144687867Z"
+generated: "2025-12-10T15:01:57.196895547Z"

clusters/cl01tl/helm/cert-manager/Chart.yaml

@@ -14,8 +14,8 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: cert-manager
-    version: v1.19.3
+    version: v1.19.2
     repository: https://charts.jetstack.io
 icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/cert-manager.png
 # renovate: datasource=github-releases depName=cert-manager/cert-manager
-appVersion: v1.19.3
+appVersion: v1.19.2

clusters/cl01tl/helm/cilium/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: cilium
   repository: https://helm.cilium.io/
-  version: 1.19.0
+  version: 1.18.6
-digest: sha256:d2319facc93cab2a0a137588d8bd93315b52025b3ec86bc89edb0e236a74c814
+digest: sha256:8ea328ac238524b5b423e6289f5e25d05ef64e6aa19cfd5de238f1d5dd533e9b
-generated: "2026-02-06T05:00:49.379278052Z"
+generated: "2026-01-14T11:02:31.272963463Z"

clusters/cl01tl/helm/cilium/Chart.yaml

@@ -15,8 +15,8 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: cilium
-    version: 1.19.0
+    version: 1.18.6
     repository: https://helm.cilium.io/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/cilium.png
 # renovate: datasource=github-releases depName=cilium/cilium
-appVersion: 1.19.0
+appVersion: 1.18.6

clusters/cl01tl/helm/cilium/templates/cilium-bgp-advertisement.yaml

@@ -1,4 +1,4 @@
-# apiVersion: cilium.io/v2
+# apiVersion: cilium.io/v2alpha1
 # kind: CiliumBGPAdvertisement
 # metadata:
 #   name: cilium-bgp-advertisements

clusters/cl01tl/helm/cilium/templates/cilium-bgp-cluster-config.yaml

@@ -1,4 +1,4 @@
-# apiVersion: cilium.io/v2
+# apiVersion: cilium.io/v2alpha1
 # kind: CiliumBGPClusterConfig
 # metadata:
 #   name: cilium-bgp

clusters/cl01tl/helm/cilium/templates/cilium-bgp-peer-config.yaml

@@ -1,4 +1,4 @@
-# apiVersion: cilium.io/v2
+# apiVersion: cilium.io/v2alpha1
 # kind: CiliumBGPPeerConfig
 # metadata:
 #   name: cilium-peer

clusters/cl01tl/helm/cilium/templates/cilium-l2-announcement-policy.yaml

@@ -1,16 +1,17 @@
 # apiVersion: "cilium.io/v2alpha1"
 # kind: CiliumL2AnnouncementPolicy
 # metadata:
-#   name: node-gateway-l2-policy
+#   name: general-l2-policy
 #   namespace: {{ .Release.Namespace }}
 #   labels:
-#     app.kubernetes.io/name: node-gateway-l2-policy
+#     app.kubernetes.io/name: general-l2-policy
 #     app.kubernetes.io/instance: {{ .Release.Name }}
 #     app.kubernetes.io/part-of: {{ .Release.Name }}
 # spec:
 #   nodeSelector:
-#     matchLabels:
+#     matchExpressions:
-#       kubernetes.io/hostname: talos-ix7-xku
+#       - key: kubernetes.io/hostname
+#         operator: Exists
 #   interfaces:
 #     - end0
 #     - enp6s0

clusters/cl01tl/helm/cilium/templates/cilium-load-balancer-ip-pool.yaml

@@ -1,4 +1,4 @@
-apiVersion: cilium.io/v2
+apiVersion: "cilium.io/v2alpha1"
 kind: CiliumLoadBalancerIPPool
 metadata:
   name: default-ip-pool
@@ -15,7 +15,7 @@ spec:
       stop: "10.232.2.23"
 
 ---
-apiVersion: cilium.io/v2
+apiVersion: "cilium.io/v2alpha1"
 kind: CiliumLoadBalancerIPPool
 metadata:
   name: bgp-ip-pool

clusters/cl01tl/helm/cilium/templates/gateway.yaml

@@ -4,22 +4,25 @@
 #   name: cilium-tls-gateway
 #   namespace: {{ .Release.Namespace }}
 #   labels:
-#     app.kubernetes.io/name: cilium-tls-gateway
+#     app.kubernetes.io/name: tls-gateway
 #     app.kubernetes.io/instance: {{ .Release.Name }}
 #     app.kubernetes.io/part-of: {{ .Release.Name }}
 #   annotations:
 #     cert-manager.io/cluster-issuer: letsencrypt-issuer
-#     io.cilium/lb-ipam-ips: "10.232.1.23"
 # spec:
-#   addresses:
-#     - type: IPAddress
-#       value: 10.232.1.23
 #   gatewayClassName: cilium
 #   listeners:
 #     - allowedRoutes:
 #         namespaces:
 #           from: All
 #       hostname: '*.alexlebens.net'
+#       name: http
+#       port: 80
+#       protocol: HTTP
+#     - allowedRoutes:
+#         namespaces:
+#           from: All
+#       hostname: '*.alexlebens.net'
 #       name: https
 #       port: 443
 #       protocol: HTTPS
@@ -30,17 +33,3 @@
 #             name: https-gateway-cert
 #             namespace: kube-system
 #         mode: Terminate
-#     - allowedRoutes:
-#         namespaces:
-#           from: All
-#       hostname: 'alexlebens.net'
-#       name: https-domain
-#       port: 443
-#       protocol: HTTPS
-#       tls:
-#         certificateRefs:
-#           - group: ''
-#             kind: Secret
-#             name: https-gateway-cert
-#             namespace: kube-system
-#         mode: Terminate

clusters/cl01tl/helm/cilium/values.yaml

@@ -35,8 +35,6 @@ cilium:
       enabled: true
     routerIDAllocation:
       mode: "default"
-  bpf:
-    hostLegacyRouting: true
   devices: end0 enp6s0
   enableK8sEndpointSlice: true
   ciliumEndpointSlice:

clusters/cl01tl/helm/cloudnative-pg/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: cloudnative-pg
   repository: https://cloudnative-pg.io/charts/
-  version: 0.27.1
+  version: 0.27.0
 - name: plugin-barman-cloud
   repository: https://cloudnative-pg.io/charts/
-  version: 0.5.0
+  version: 0.4.0
-digest: sha256:e7089ffd089cae87529e28f0e71302b9fc4a869b389cbb6628f1c559644a3a10
+digest: sha256:5e2a32fa5ed8b180ae5e556d65c67eeb3dcf38e2974b0d668eff4ee3c83258ce
-generated: "2026-02-05T19:36:19.473447121Z"
+generated: "2025-12-30T21:01:48.755246408Z"

clusters/cl01tl/helm/cloudnative-pg/Chart.yaml

@@ -16,11 +16,11 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: cloudnative-pg
-    version: 0.27.1
+    version: 0.27.0
     repository: https://cloudnative-pg.io/charts/
   - name: plugin-barman-cloud
-    version: 0.5.0
+    version: 0.4.0
     repository: https://cloudnative-pg.io/charts/
 icon: https://avatars.githubusercontent.com/u/100373852?s=200&v=4
 # renovate: datasource=github-releases depName=cloudnative-pg/cloudnative-pg
-appVersion: 1.28.1
+appVersion: 1.28.0

clusters/cl01tl/helm/cloudnative-pg/values.yaml

@@ -7,10 +7,10 @@ plugin-barman-cloud:
   image:
     registry: ghcr.io
     repository: cloudnative-pg/plugin-barman-cloud
-    tag: v0.11.0
+    tag: v0.10.0
   sidecarImage:
     registry: ghcr.io
     repository: cloudnative-pg/plugin-barman-cloud-sidecar
-    tag: v0.11.0
+    tag: v0.10.0
   crds:
     create: true

clusters/cl01tl/helm/code-server/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.2.2
+  version: 2.1.9
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:185da5d4998267b90e6d2ece537b9550d800d1cca0217cac808a88f63f9fec29
+digest: sha256:d243a4062bd69c3e02536dbc8f0da06f8607a373a772bf521fa16ae10df331b7
-generated: "2026-02-03T03:41:32.224062229Z"
+generated: "2026-01-17T17:30:30.693066904Z"

clusters/cl01tl/helm/code-server/Chart.yaml

@@ -22,7 +22,7 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.2.2
+    version: 2.1.9
   - name: volsync-target
     alias: volsync-target-config
     version: 0.7.0

clusters/cl01tl/helm/directus/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.2.2
+  version: 2.1.9
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.5.0
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.4
+  version: 1.0.1
-digest: sha256:c8812d427b060fc1b117ee14c92f37eb7a25a2f62b52b43184b90b74c161af48
+digest: sha256:ce9129502867f42fbe07bb3ea32edbe5340fa762b5ee76ac20a8d5c7fb1f39c7
-generated: "2026-02-03T20:35:55.199768508Z"
+generated: "2026-01-23T00:35:49.971422373Z"

clusters/cl01tl/helm/directus/Chart.yaml

@@ -23,14 +23,14 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.2.2
+    version: 2.1.9
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
-    version: 1.0.4
+    version: 1.0.1
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/directus.png
 # renovate: datasource=github-releases depName=directus/directus
-appVersion: 11.15.0
+appVersion: 11.14.1

clusters/cl01tl/helm/directus/values.yaml

@@ -9,7 +9,7 @@ directus:
         main:
           image:
             repository: directus/directus
-            tag: 11.15.0
+            tag: 11.14.1
             pullPolicy: IfNotPresent
           env:
             - name: PUBLIC_URL

clusters/cl01tl/helm/elastic-operator/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: eck-operator
   repository: https://helm.elastic.co
-  version: 3.3.0
+  version: 3.2.0
-digest: sha256:d2b00de6c03bf7624fdf496b326262149a2d2635012f14e900ed0724545c95d9
+digest: sha256:b27ba092ddfa078f763e409dd5db1144a269eff0f45af04f180d844f13466a34
-generated: "2026-02-03T18:05:00.461644575Z"
+generated: "2025-12-01T20:25:30.722424-06:00"

clusters/cl01tl/helm/elastic-operator/Chart.yaml

@@ -15,8 +15,8 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: eck-operator
-    version: 3.3.0
+    version: 3.2.0
     repository: https://helm.elastic.co
 icon: https://helm.elastic.co/icons/eck.png
 # renovate: datasource=github-releases depName=elastic/cloud-on-k8s
-appVersion: v3.3.0
+appVersion: v3.2.0

clusters/cl01tl/helm/element-web/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: element-web
   repository: https://ananace.gitlab.io/charts
-  version: 1.4.29
+  version: 1.4.28
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.2.2
+  version: 2.1.9
-digest: sha256:a27e895a7c19b296ca63888511d865b9623020824a1ea9c39dafa5433e9e83f4
+digest: sha256:13c8313cef781f8f003d827de514f261a5875377b35a36db438974144c2baf52
-generated: "2026-02-03T03:42:00.780507134Z"
+generated: "2026-01-21T21:02:33.179007776Z"

clusters/cl01tl/helm/element-web/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     repository: https://ananace.gitlab.io/charts
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.2.2
+    version: 2.1.9
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/element.png
 # renovate: datasource=github-releases depName=element-hq/element-web
 appVersion: v1.12.9

clusters/cl01tl/helm/external-secrets/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: external-secrets
   repository: https://charts.external-secrets.io
-  version: 1.3.2
+  version: 1.3.1
-digest: sha256:7b7c6dee59f2ea630f0e7a1124aeeda52cdff23769136300384b28210e03945a
+digest: sha256:3b10d4cfe0d38cba02fa79a0d7aed6611faeb68408f4ebb05099280a5f585883
-generated: "2026-02-03T21:41:32.061135319Z"
+generated: "2026-01-23T20:01:34.461022413Z"

clusters/cl01tl/helm/external-secrets/Chart.yaml

@@ -12,8 +12,8 @@ sources:
   - https://github.com/external-secrets/external-secrets/tree/main/deploy/charts/external-secrets
 dependencies:
   - name: external-secrets
-    version: 1.3.2
+    version: 1.3.1
     repository: https://charts.external-secrets.io
 icon: https://avatars.githubusercontent.com/u/68335991?s=48&v=4
 # renovate: datasource=github-releases depName=external-secrets/external-secrets
-appVersion: v1.3.2
+appVersion: v1.3.1

clusters/cl01tl/helm/freshrss/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.2.2
+  version: 2.1.9
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:85e8205ab05be520984cb7c08109aedd9020229b2e7ef22da7b82534cd5d8242
+digest: sha256:6368ad9d3c7a5591b42e25606b0f3f689e27cc3f73fca465f85c4e80e015299b
-generated: "2026-02-03T03:42:15.595589094Z"
+generated: "2026-01-23T00:36:10.114799135Z"

clusters/cl01tl/helm/freshrss/Chart.yaml

@@ -23,7 +23,7 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.2.2
+    version: 2.1.9
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.5.0

clusters/cl01tl/helm/freshrss/values.yaml

@@ -11,7 +11,7 @@ freshrss:
             runAsUser: 0
           image:
             repository: alpine
-            tag: 3.23.3
+            tag: 3.23.2
             pullPolicy: IfNotPresent
           command:
             - /bin/sh
@@ -35,7 +35,7 @@ freshrss:
             runAsUser: 0
           image:
             repository: alpine
-            tag: 3.23.3
+            tag: 3.23.2
             pullPolicy: IfNotPresent
           command:
             - /bin/sh
@@ -59,7 +59,7 @@ freshrss:
             runAsUser: 0
           image:
             repository: alpine
-            tag: 3.23.3
+            tag: 3.23.2
             pullPolicy: IfNotPresent
           command:
             - /bin/sh
@@ -201,7 +201,7 @@ postgres-18-cluster:
   backup:
     objectStore:
       - name: garage-local
-        index: 2
+        index: 1
         destinationBucket: postgres-backups
         externalSecretCredentialPath: /garage/home-infra/postgres-backups
         isWALArchiver: true

clusters/cl01tl/helm/garage/values.yaml

@@ -118,9 +118,9 @@ garage:
             pullPolicy: IfNotPresent
           env:
             - name: API_BASE_URL
-              value: http://garage-1.garage:3903
+              value: http://garage-main.garage:3903
             - name: S3_ENDPOINT_URL
-              value: http://garage-1.garage:3900
+              value: http://garage-main.garage:3900
             - name: API_ADMIN_KEY
               valueFrom:
                 secretKeyRef:
@@ -318,7 +318,6 @@ garage:
         matchLabels:
           app.kubernetes.io/name: garage
           app.kubernetes.io/instance: garage
-          app.kubernetes.io/service: garage-1
       serviceName: '{{ include "bjw-s.common.lib.chart.names.fullname" $ }}'
       endpoints:
         - port: admin

clusters/cl01tl/helm/gitea/Chart.lock

@@ -7,21 +7,21 @@ dependencies:
   version: 0.2.1
 - name: meilisearch
   repository: https://meilisearch.github.io/meilisearch-kubernetes
-  version: 0.25.1
+  version: 0.24.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.2.2
+  version: 2.1.9
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.5.0
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.4
+  version: 1.0.1
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.4
+  version: 1.0.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:e8940a4eb5bfe5aeb2d7bd8f328d7aee962d0a75c1d2aa4937401b16e5c29238
+digest: sha256:af0644bab985faff3a41f28672fa60410aca6bc3759296d3218b23e286b36aaf
-generated: "2026-02-03T20:36:08.603489039Z"
+generated: "2026-01-26T12:03:18.212345462Z"

clusters/cl01tl/helm/gitea/Chart.yaml

@@ -32,22 +32,22 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
     version: 0.2.1
   - name: meilisearch
-    version: 0.25.1
+    version: 0.24.1
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.2.2
+    version: 2.1.9
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     alias: redis-replication-gitea
-    version: 1.0.4
+    version: 1.0.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     alias: redis-replication-renovate
-    version: 1.0.4
+    version: 1.0.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-storage

clusters/cl01tl/helm/grafana-operator/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 7.5.0
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.4
+  version: 1.0.1
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.4
+  version: 1.0.1
-digest: sha256:9ba81c06283d46ae577e40d0d030149307404a3ff35e6c2c8d0e738aeedfcc6a
+digest: sha256:bee9dd7a31e5ca1772945764774a0195d8d63cb8b0874654b6d3aa846f4acc9e
-generated: "2026-02-03T20:36:24.992188976Z"
+generated: "2026-01-23T00:37:10.262404661Z"

clusters/cl01tl/helm/grafana-operator/Chart.yaml

@@ -25,11 +25,11 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     alias: redis-replication-unified-alerting
-    version: 1.0.4
+    version: 1.0.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     alias: redis-replication-remote-cache
-    version: 1.0.4
+    version: 1.0.1
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/grafana.png
 # renovate: datasource=github-releases depName=grafana/grafana-operator

clusters/cl01tl/helm/harbor/Chart.lock

@@ -7,6 +7,6 @@ dependencies:
   version: 7.5.0
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.4
+  version: 1.0.1
-digest: sha256:a5986b8d12f26cb4d0c757e7d9946af180003d8a8a7bb4b399297cc7d5235790
+digest: sha256:c07fcad50f390ab70c83beb4640842d0f1d68949a261c8006d596d8ded65a6de
-generated: "2026-02-03T20:36:39.914082171Z"
+generated: "2026-01-26T10:03:51.019109245Z"

clusters/cl01tl/helm/harbor/Chart.yaml

@@ -24,7 +24,7 @@ dependencies:
     version: 7.5.0
     repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
   - name: redis-replication
-    version: 1.0.4
+    version: 1.0.1
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/harbor.png
 # renovate: datasource=github-releases depName=goharbor/harbor

clusters/cl01tl/helm/harbor/values.yaml

@@ -105,7 +105,7 @@ postgres-18-cluster:
   backup:
     objectStore:
       - name: garage-local
-        index: 2
+        index: 1
         destinationBucket: postgres-backups
         externalSecretCredentialPath: /garage/home-infra/postgres-backups
         isWALArchiver: true

clusters/cl01tl/helm/headlamp/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: headlamp
   repository: https://kubernetes-sigs.github.io/headlamp/
-  version: 0.40.0
+  version: 0.39.0
-digest: sha256:b7f8f176f8c4902130e87660adb39211fd5ca454f89f5a7e9ed577cd4c3a2255
+digest: sha256:870e456773199684c150585c12c2e18b3f0895ee8cc73481a53b23c8e94560b1
-generated: "2026-02-05T18:23:45.100522813Z"
+generated: "2025-12-20T00:03:40.10414707Z"

clusters/cl01tl/helm/headlamp/Chart.yaml

@@ -14,8 +14,8 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: headlamp
-    version: 0.40.0
+    version: 0.39.0
     repository: https://kubernetes-sigs.github.io/headlamp/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/headlamp.png
 # renovate: datasource=github-releases depName=headlamp-k8s/headlamp
-appVersion: v0.40.0
+appVersion: v0.39.0

clusters/cl01tl/helm/home-assistant/Chart.yaml

@@ -25,4 +25,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/home-assistant.png
 # renovate: datasource=github-releases depName=home-assistant/core
-appVersion: 2026.2.0
+appVersion: 2026.1.3

clusters/cl01tl/helm/home-assistant/values.yaml

@@ -9,7 +9,7 @@ home-assistant:
         main:
           image:
             repository: ghcr.io/home-assistant/home-assistant
-            tag: 2026.2.0
+            tag: 2026.1.3
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/homepage-dev/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.2.2
+  version: 2.1.9
-digest: sha256:b5120e37e5b4b28a327fa2a3a5c93e93866848c5d36b9b1a8ee7c11ed81663dc
+digest: sha256:3dd7439a8874fcf8b12754907f187149287a2db04c5b9a595d32e6b64a5482db
-generated: "2026-02-03T03:42:46.510379398Z"
+generated: "2026-01-17T17:31:46.477375094Z"

clusters/cl01tl/helm/homepage-dev/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.2.2
+    version: 2.1.9
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/homepage.png
 # renovate: datasource=github-releases depName=gethomepage/homepage
-appVersion: v1.10.1
+appVersion: v1.9.0

clusters/cl01tl/helm/homepage-dev/values.yaml

@@ -11,7 +11,7 @@ homepage:
         main:
           image:
             repository: ghcr.io/gethomepage/homepage
-            tag: v1.10.1
+            tag: v1.9.0
             pullPolicy: IfNotPresent
           env:
             - name: HOMEPAGE_ALLOWED_HOSTS

clusters/cl01tl/helm/homepage/Chart.yaml

@@ -19,4 +19,4 @@ dependencies:
     version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/homepage.png
 # renovate: datasource=github-releases depName=gethomepage/homepage
-appVersion: v1.10.1
+appVersion: v1.9.0

clusters/cl01tl/helm/homepage/values.yaml

@@ -15,7 +15,7 @@ homepage:
         main:
           image:
             repository: ghcr.io/gethomepage/homepage
-            tag: v1.10.1
+            tag: v1.9.0
             pullPolicy: IfNotPresent
           env:
             - name: HOMEPAGE_ALLOWED_HOSTS

clusters/cl01tl/helm/huntarr/Chart.yaml

@@ -23,4 +23,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/huntarr.png
 # renovate: datasource=github-releases depName=plexguide/huntarr
-appVersion: 9.2.1
+appVersion: 9.0.5

clusters/cl01tl/helm/huntarr/values.yaml

@@ -9,7 +9,7 @@ huntarr:
         main:
           image:
             repository: ghcr.io/plexguide/huntarr
-            tag: 9.2.1
+            tag: 9.0.5
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/immich/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 7.5.0
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.4
+  version: 1.0.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:c2363283e3c7614dbb15fa6f5436716e435fa18f2ecd08dca1ac82bb01ab0696
+digest: sha256:49d6ed0c3e8862d351bd905db5f349448d4bc7e6cef4b43372e1510dea204098
-generated: "2026-02-03T20:36:59.006280506Z"
+generated: "2026-01-23T00:37:48.396577782Z"

clusters/cl01tl/helm/immich/Chart.yaml

@@ -23,7 +23,7 @@ dependencies:
     version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
-    version: 1.0.4
+    version: 1.0.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data
@@ -31,4 +31,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/immich.png
 # renovate: datasource=github-releases depName=immich-app/immich
-appVersion: v2.5.3
+appVersion: v2.5.0

clusters/cl01tl/helm/immich/values.yaml

@@ -9,7 +9,7 @@ immich:
         main:
           image:
             repository: ghcr.io/immich-app/immich-server
-            tag: v2.5.3
+            tag: v2.5.0
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/jellyfin/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: meilisearch
   repository: https://meilisearch.github.io/meilisearch-kubernetes
-  version: 0.25.1
+  version: 0.24.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:4b8625f5a6ccb09509e78b76508f87ac2b759ca8d02ed6d94937e8047458ce20
+digest: sha256:d20ff0abca968a8dde70aff69a72f7668b12a99f2218fdac97c9f4255b4528ab
-generated: "2026-02-03T18:05:45.036614395Z"
+generated: "2026-01-28T01:33:04.377856283Z"

clusters/cl01tl/helm/jellyfin/Chart.yaml

@@ -25,7 +25,7 @@ dependencies:
     repository: https://bjw-s-labs.github.io/helm-charts/
     version: 4.6.2
   - name: meilisearch
-    version: 0.25.1
+    version: 0.24.1
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/jellyfin/values.yaml

@@ -28,7 +28,7 @@ jellyfin:
         exporter:
           image:
             repository: rebelcore/jellyfin-exporter
-            tag: v1.4.0
+            tag: v1.3.9
             pullPolicy: IfNotPresent
           args:
             - '--jellyfin.address=http://127.0.0.1:8096'

clusters/cl01tl/helm/karakeep/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.6.2
 - name: meilisearch
   repository: https://meilisearch.github.io/meilisearch-kubernetes
-  version: 0.25.1
+  version: 0.24.1
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.2.2
+  version: 2.1.9
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:5b1948702805bb46749615b98629185d495a8ff1d9d9e6bc52c972524fb6d2fa
+digest: sha256:2ee97bb43279e358fa46648e83720e2d9badd116076280c48561b31e17f79979
-generated: "2026-02-03T18:06:00.958200599Z"
+generated: "2026-01-28T01:33:33.249138017Z"

clusters/cl01tl/helm/karakeep/Chart.yaml

@@ -22,11 +22,11 @@ dependencies:
     repository: https://bjw-s-labs.github.io/helm-charts/
     version: 4.6.2
   - name: meilisearch
-    version: 0.25.1
+    version: 0.24.1
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.2.2
+    version: 2.1.9
   - name: volsync-target
     alias: volsync-target-data
     version: 0.7.0

clusters/cl01tl/helm/komodo/templates/external-secret.yaml

@@ -47,33 +47,3 @@ spec:
         key: /authentik/oidc/komodo
         metadataPolicy: None
         property: secret
-
----
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: komodo-postgresql-17-fdb-cluster-ferret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: komodo-postgresql-17-fdb-cluster-ferret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: uri
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/komodo/ferret
-        metadataPolicy: None
-        property: uri
-    - secretKey: password
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/komodo/ferret
-        metadataPolicy: None
-        property: password

clusters/cl01tl/helm/komodo/values.yaml

@@ -53,11 +53,14 @@ komodo:
             - name: PERIPHERY_SSL_ENABLED
               value: false
             - name: DB_USERNAME
-              value: ferret
+              valueFrom:
+                secretKeyRef:
+                  name: komodo-postgresql-17-fdb-cluster-app
+                  key: user
             - name: DB_PASSWORD
               valueFrom:
                 secretKeyRef:
-                  name: komodo-postgresql-17-fdb-cluster-ferret
+                  name: komodo-postgresql-17-fdb-cluster-app
                   key: password
             - name: KOMODO_DATABASE_URI
               value: mongodb://$(DB_USERNAME):$(DB_PASSWORD)@komodo-ferretdb-2.komodo:27017/komodo
@@ -95,15 +98,11 @@ komodo:
             tag: 2.7.0
             pullPolicy: IfNotPresent
           env:
-            - name: DB_USERNAME
+            - name: FERRETDB_POSTGRESQL_URL
-              value: ferret
-            - name: DB_PASSWORD
               valueFrom:
                 secretKeyRef:
-                  name: komodo-postgresql-17-fdb-cluster-ferret
+                  name: komodo-postgresql-17-fdb-cluster-app
-                  key: password
+                  key: uri
-            - name: FERRETDB_POSTGRESQL_URL
-              value: postgresql://$(DB_USERNAME):$(DB_PASSWORD)@komodo-postgresql-17-fdb-cluster-rw.komodo.svc.cluster.local:5432/ferretDB
           resources:
             requests:
               cpu: 10m
@@ -199,9 +198,9 @@ postgresql-17-fdb-cluster:
       database: ferretDB
       owner: ferret
       postInitApplicationSQL:
-        - CREATE EXTENSION IF NOT EXISTS pg_cron;
+        - create extension if not exists pg_cron;
-        - CREATE EXTENSION IF NOT EXISTS documentdb CASCADE;
+        - create extension if not exists documentdb cascade;
-        - GRANT documentdb_admin_role TO ferret;
+        - grant documentdb_admin_role to ferret;
   recovery:
     method: objectStore
     objectStore:
@@ -209,7 +208,7 @@ postgresql-17-fdb-cluster:
   backup:
     objectStore:
       - name: garage-local
-        index: 2
+        index: 1
         destinationBucket: postgres-backups
         externalSecretCredentialPath: /garage/home-infra/postgres-backups
         isWALArchiver: true

clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: kube-prometheus-stack
   repository: oci://ghcr.io/prometheus-community/charts
-  version: 81.5.0
+  version: 81.2.2
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
   version: 4.6.2
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.4
+  version: 1.0.1
-digest: sha256:62ceeea1ed2f1f3a838e468665c3f291cb67ac547f3fa37863131f088736a750
+digest: sha256:b01c879a598b7fd36e37f3a65ca5d8f91713ac7e5250c3b00169783bc2d2a065
-generated: "2026-02-03T20:37:14.907439914Z"
+generated: "2026-01-23T22:08:21.182689246Z"

clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml

@@ -20,14 +20,14 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: kube-prometheus-stack
-    version: 81.5.0
+    version: 81.2.2
     repository: oci://ghcr.io/prometheus-community/charts
   - name: app-template
     alias: ntfy-alertmanager
     repository: https://bjw-s-labs.github.io/helm-charts/
     version: 4.6.2
   - name: redis-replication
-    version: 1.0.4
+    version: 1.0.1
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/prometheus.png
 # renovate: datasource=github-releases depName=prometheus-operator/prometheus-operator

clusters/cl01tl/helm/libation/Chart.yaml

@@ -24,4 +24,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/libation.png
 # renovate: datasource=github-releases depName=rmcrackan/Libation
-appVersion: 13.1.8
+appVersion: 13.1.4

clusters/cl01tl/helm/libation/values.yaml

@@ -16,7 +16,7 @@ libation:
         main:
           image:
             repository: rmcrackan/libation
-            tag: 13.1.8
+            tag: 13.1.4
             pullPolicy: IfNotPresent
           env:
             - name: SLEEP_TIME

clusters/cl01tl/helm/lidarr/values.yaml

@@ -15,7 +15,7 @@ lidarr:
         main:
           image:
             repository: ghcr.io/linuxserver/lidarr
-            tag: 3.1.2-nightly@sha256:adc776c4deb0b36909472a8d22ce00306b4a37f0d584407d846efd59060279ac
+            tag: 3.1.2-nightly@sha256:21aec279552ea35deaf86b4fbb68876d9a4f5cf53cefd6b0c667889153c778db
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/loki/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: loki
   repository: https://grafana.github.io/helm-charts
-  version: 6.52.0
+  version: 6.51.0
 - name: alloy
   repository: https://grafana.github.io/helm-charts
-  version: 1.6.0
+  version: 1.5.2
-digest: sha256:097f893b362b3ba6a1498d6df00dc57030c4d1321cf3301268adb9e30d5043ed
+digest: sha256:cd5fe2b0439fa752d8de751a4ddf5ae21658bb08f8587e90818ccbbf21de48e2
-generated: "2026-02-05T22:01:50.699662067Z"
+generated: "2026-01-21T22:02:30.018948035Z"

clusters/cl01tl/helm/loki/Chart.yaml

@@ -16,10 +16,10 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: loki
-    version: 6.52.0
+    version: 6.51.0
     repository: https://grafana.github.io/helm-charts
   - name: alloy
-    version: 1.6.0
+    version: 1.5.2
     repository: https://grafana.github.io/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/loki.png
 # renovate: datasource=github-releases depName=grafana/loki

clusters/cl01tl/helm/matrix-synapse/Chart.lock

@@ -13,19 +13,19 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.2.2
+  version: 2.1.9
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.2.2
+  version: 2.1.9
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.5.0
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.4
+  version: 1.0.1
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.4
+  version: 1.0.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
@@ -38,5 +38,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:6675ba9bd3da7605e3c0243602035a96aabb76813c4d9659409580612522ba94
+digest: sha256:d247fbedbe72faa94f8ec8a02fccd7a3b23deb6ed15c5e2665737a9856ccb156
-generated: "2026-02-03T20:37:32.102491987Z"
+generated: "2026-01-28T01:31:47.122961665Z"

clusters/cl01tl/helm/matrix-synapse/Chart.yaml

@@ -45,11 +45,11 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     alias: cloudflared-synapse
-    version: 2.2.2
+    version: 2.1.9
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: cloudflared
     alias: cloudflared-hookshot
-    version: 2.2.2
+    version: 2.1.9
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: postgres-cluster
     alias: postgres-18-cluster
@@ -57,11 +57,11 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     alias: redis-replication-matrix-synapse
-    version: 1.0.4
+    version: 1.0.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     alias: redis-replication-hookshot
-    version: 1.0.4
+    version: 1.0.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-synapse

clusters/cl01tl/helm/matrix-synapse/values.yaml

@@ -143,7 +143,7 @@ matrix-hookshot:
         main:
           image:
             repository: halfshot/matrix-hookshot
-            tag: 7.3.2
+            tag: 7.3.1
             pullPolicy: IfNotPresent
           resources:
             requests:

clusters/cl01tl/helm/metrics-server/Chart.yaml

@@ -18,4 +18,4 @@ dependencies:
     repository: https://kubernetes-sigs.github.io/metrics-server/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 # renovate: datasource=github-releases depName=kubernetes-sigs/metrics-server
-appVersion: 0.8.1
+appVersion: 0.8.0

clusters/cl01tl/helm/navidrome/values.yaml

@@ -9,7 +9,7 @@ navidrome:
         main:
           image:
             repository: deluan/navidrome
-            tag: 0.60.0@sha256:5d0f6ab343397c043c7063db14ae10e4e3980e54ae7388031cbce47e84af6657
+            tag: 0.59.0@sha256:4edc8a1de3e042f30b78a478325839f4395177eb8201c27543dccc0eba674f23
             pullPolicy: IfNotPresent
           env:
             - name: ND_MUSICFOLDER

clusters/cl01tl/helm/ollama/Chart.yaml

@@ -31,4 +31,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ollama.png
 # renovate: datasource=github-releases depName=ollama/ollama
-appVersion: 0.15.5
+appVersion: 0.15.2

clusters/cl01tl/helm/ollama/values.yaml

@@ -22,7 +22,7 @@ ollama:
         main:
           image:
             repository: ollama/ollama
-            tag: 0.15.5
+            tag: 0.15.2
             pullPolicy: IfNotPresent
           env:
             - name: OLLAMA_KEEP_ALIVE
@@ -58,7 +58,7 @@ ollama:
         main:
           image:
             repository: ollama/ollama
-            tag: 0.15.5
+            tag: 0.15.2
             pullPolicy: IfNotPresent
           env:
             - name: OLLAMA_KEEP_ALIVE
@@ -94,7 +94,7 @@ ollama:
         main:
           image:
             repository: ollama/ollama
-            tag: 0.15.5
+            tag: 0.15.2
             pullPolicy: IfNotPresent
           env:
             - name: OLLAMA_KEEP_ALIVE

clusters/cl01tl/helm/outline/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.2.2
+  version: 2.1.9
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.5.0
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.4
+  version: 1.0.1
-digest: sha256:19b7ae1e31a51e8b7b47754eb5f9177fc5278c97904b38daffb9a0164c4300eb
+digest: sha256:ceefb29aa463807f6763a9dd41e4282938e2b09cfa9a107488385e70273d7f41
-generated: "2026-02-03T20:37:51.993316167Z"
+generated: "2026-01-23T00:39:25.791321616Z"

clusters/cl01tl/helm/outline/Chart.yaml

@@ -24,13 +24,13 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.2.2
+    version: 2.1.9
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
-    version: 1.0.4
+    version: 1.0.1
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/outline.png
 # renovate: datasource=github-releases depName=outline/outline

clusters/cl01tl/helm/postiz/Chart.lock

@@ -4,18 +4,18 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.2.2
+  version: 2.1.9
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.5.0
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.4
+  version: 1.0.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:058c2f37a1f4c8d836c3cfe84ee6a8f9dbee9a06d3f8a732c9f51af9efeff3b9
+digest: sha256:d7889834988d385b3708325fabe78720e0ccf725f9e1a624384dc0c55d215beb
-generated: "2026-02-03T20:38:08.21964113Z"
+generated: "2026-01-23T00:39:53.300700498Z"

clusters/cl01tl/helm/postiz/Chart.yaml

@@ -23,13 +23,13 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.2.2
+    version: 2.1.9
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
-    version: 1.0.4
+    version: 1.0.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config
@@ -41,4 +41,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/postiz.png
 # renovate: datasource=github-releases depName=gitroomhq/postiz-app
-appVersion: v2.14.0
+appVersion: v2.12.1

clusters/cl01tl/helm/postiz/values.yaml

@@ -9,7 +9,7 @@ postiz:
         main:
           image:
             repository: ghcr.io/gitroomhq/postiz-app
-            tag: v2.14.0
+            tag: v2.12.1
             pullPolicy: IfNotPresent
           env:
             - name: MAIN_URL

clusters/cl01tl/helm/prowlarr/values.yaml

@@ -20,7 +20,7 @@ prowlarr:
         main:
           image:
             repository: ghcr.io/linuxserver/prowlarr
-            tag: 2.3.0@sha256:5339e9050cfcc0cb5331e9c98610ed9d4ce70ef481a5461ea664a13dda3f1eb0
+            tag: 2.3.0@sha256:d3e9307b320b6772749a2cf8fc2712e9e824c4930b034680ad4d08a9e2f25884
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/qbittorrent/values.yaml

@@ -28,7 +28,7 @@ qbittorrent:
         qbittorrent:
           image:
             repository: ghcr.io/linuxserver/qbittorrent
-            tag: 5.1.4@sha256:5b09709bb0eff4edb551f5b30029952ab4d67aa0d5ca3526889124173bd78a9c
+            tag: 5.1.4@sha256:b8a08ffba8850e2e71153e153cf5eed2dedbf499ef9b123262735ce924b65586
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -212,7 +212,7 @@ qbittorrent:
         qui:
           image:
             repository: ghcr.io/autobrr/qui
-            tag: v1.13.1
+            tag: v1.13.0
             pullPolicy: IfNotPresent
           env:
             - name: QUI__METRICS_ENABLED

clusters/cl01tl/helm/radarr-4k/values.yaml

@@ -15,7 +15,7 @@ radarr-4k:
         main:
           image:
             repository: ghcr.io/linuxserver/radarr
-            tag: 6.0.4@sha256:ba2693dd704b84eb0b404d40b3902bd3e62a1768dc5ee0d89b1f1d7cd51a66eb
+            tag: 6.0.4@sha256:270f25698624b57b86ca119cc95399d7ff15be8297095b4e1223fd5b549b732c
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/radarr-anime/values.yaml

@@ -13,7 +13,7 @@ radarr-anime:
         main:
           image:
             repository: ghcr.io/linuxserver/radarr
-            tag: 6.0.4@sha256:ba2693dd704b84eb0b404d40b3902bd3e62a1768dc5ee0d89b1f1d7cd51a66eb
+            tag: 6.0.4@sha256:270f25698624b57b86ca119cc95399d7ff15be8297095b4e1223fd5b549b732c
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/radarr-standup/values.yaml

@@ -13,7 +13,7 @@ radarr-standup:
         main:
           image:
             repository: ghcr.io/linuxserver/radarr
-            tag: 6.0.4@sha256:ba2693dd704b84eb0b404d40b3902bd3e62a1768dc5ee0d89b1f1d7cd51a66eb
+            tag: 6.0.4@sha256:270f25698624b57b86ca119cc95399d7ff15be8297095b4e1223fd5b549b732c
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/radarr/values.yaml

@@ -15,7 +15,7 @@ radarr:
         main:
           image:
             repository: ghcr.io/linuxserver/radarr
-            tag: 6.0.4@sha256:ba2693dd704b84eb0b404d40b3902bd3e62a1768dc5ee0d89b1f1d7cd51a66eb
+            tag: 6.0.4@sha256:270f25698624b57b86ca119cc95399d7ff15be8297095b4e1223fd5b549b732c
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/rook-ceph/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: rook-ceph
   repository: https://charts.rook.io/release
-  version: v1.19.1
+  version: v1.19.0
 - name: rook-ceph-cluster
   repository: https://charts.rook.io/release
-  version: v1.19.1
+  version: v1.19.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.2.2
+  version: 2.1.9
-digest: sha256:fbb82644c29122639312301d76b2f2300f2a86eeb17159e9f368b2d46e4e6a7c
+digest: sha256:5b8916442408af1061658af638b77a9f57fa8b6bc1d93ff982b899116daa0b21
-generated: "2026-02-06T03:39:57.898917443Z"
+generated: "2026-01-20T20:41:34.660986403Z"

clusters/cl01tl/helm/rook-ceph/Chart.yaml

@@ -16,15 +16,15 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: rook-ceph
-    version: v1.19.1
+    version: v1.19.0
     repository: https://charts.rook.io/release
   - name: rook-ceph-cluster
-    version: v1.19.1
+    version: v1.19.0
     repository: https://charts.rook.io/release
   - name: cloudflared
     alias: cloudflared-rgw
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.2.2
+    version: 2.1.9
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ceph.png
 # renovate: datasource=github-releases depName=rook/rook
-appVersion: v1.19.1
+appVersion: v1.19.0

clusters/cl01tl/helm/roundcube/values.yaml

@@ -58,7 +58,7 @@ roundcube:
         nginx:
           image:
             repository: nginx
-            tag: 1.29.5-alpine-slim
+            tag: 1.29.4-alpine
             pullPolicy: IfNotPresent
           env:
             - name: NGINX_HOST