Update clidey/whodb Docker tag to v0.89.0

.gitea/workflows/renovate.yaml

@@ -13,7 +13,7 @@ on:
 jobs:
   renovate:
     runs-on: ubuntu-latest
-    container: ghcr.io/renovatebot/renovate:43
+    container: ghcr.io/renovatebot/renovate:42
     steps:
       - name: Checkout
         uses: actions/checkout@v6

clusters/cl01tl/helm/actual/Chart.yaml

@@ -22,5 +22,5 @@ dependencies:
     version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/actual-budget.png
-# renovate: datasource=github-releases depName=actualbudget/actual
+# renovate: github=actualbudget/actual
-appVersion: 26.2.0
+appVersion: 25.12.0

clusters/cl01tl/helm/actual/values.yaml

@@ -9,7 +9,7 @@ actual:
         main:
           image:
             repository: ghcr.io/actualbudget/actual
-            tag: 26.2.0
+            tag: 26.1.0
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/argo-workflows/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: argo-workflows
   repository: https://argoproj.github.io/argo-helm
-  version: 0.47.3
+  version: 0.47.0
 - name: argo-events
   repository: https://argoproj.github.io/argo-helm
-  version: 2.4.20
+  version: 2.4.19
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.5.0
+  version: 7.4.5
-digest: sha256:156c07cae82be20f03a17b8f2a4a188679830ce1430711da812c4aed626c17b4
+digest: sha256:c36845d5688e28e6f6c6b6f2e17b40514f2adb937f2c6077deadfec9e6b294fe
-generated: "2026-02-02T23:56:58.434603097Z"
+generated: "2026-01-14T21:30:10.440164554Z"

clusters/cl01tl/helm/argo-workflows/Chart.yaml

@@ -18,15 +18,15 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: argo-workflows
-    version: 0.47.3
+    version: 0.47.0
     repository: https://argoproj.github.io/argo-helm
   - name: argo-events
-    version: 2.4.20
+    version: 2.4.19
     repository: https://argoproj.github.io/argo-helm
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.5.0
+    version: 7.4.5
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
-# renovate: datasource=github-releases depName=argoproj/argo-workflows
+# renovate: github=argoproj/argo-workflows
-appVersion: v4.0.0
+appVersion: v3.7.6

clusters/cl01tl/helm/argocd/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: argo-cd
   repository: https://argoproj.github.io/argo-helm
-  version: 9.4.1
+  version: 9.3.4
-digest: sha256:6686031538b67a4b79a89b90de06199758c4718a9b7e0a0e6863a5be8964ed9d
+digest: sha256:006518c10fc1636a5b0398de90d4a7687ae6c0bf4626c41d11b2bc3ad48ff416
-generated: "2026-02-05T20:06:46.998124019Z"
+generated: "2026-01-14T23:02:04.617990687Z"

clusters/cl01tl/helm/argocd/Chart.yaml

@@ -15,8 +15,8 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: argo-cd
-    version: 9.4.1
+    version: 9.3.4
     repository: https://argoproj.github.io/argo-helm
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
-# renovate: datasource=github-releases depName=argoproj/argo-cd
+# renovate: github=argoproj/argo-cd
-appVersion: v3.3.0
+appVersion: v3.2.1

clusters/cl01tl/helm/audiobookshelf/Chart.yaml

@@ -28,5 +28,5 @@ dependencies:
     version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/audiobookshelf.png
-# renovate: datasource=github-releases depName=advplyr/audiobookshelf
+# renovate: github=advplyr/audiobookshelf
-appVersion: 2.32.1
+appVersion: 2.31.0

clusters/cl01tl/helm/audiobookshelf/values.yaml

@@ -21,7 +21,7 @@ audiobookshelf:
         apprise-api:
           image:
             repository: caronc/apprise
-            tag: v1.3.1
+            tag: 1.3.0
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/authentik/Chart.lock

@@ -1,15 +1,15 @@
 dependencies:
 - name: authentik
   repository: https://charts.goauthentik.io/
-  version: 2025.12.3
+  version: 2025.12.1
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.2.2
+  version: 2.1.9
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.5.0
+  version: 7.4.5
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.4
+  version: 1.0.1
-digest: sha256:61110db108493eac486715c324a2233d3cd056ea623f8e5c5deda9bd828964e6
+digest: sha256:458e9967330768b68649da4af69773adba3aed1a04316b9e67ef19612381d4b9
-generated: "2026-02-03T20:35:32.880480215Z"
+generated: "2026-01-17T17:30:18.453482605Z"

clusters/cl01tl/helm/authentik/Chart.yaml

@@ -21,18 +21,18 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: authentik
-    version: 2025.12.3
+    version: 2025.12.1
     repository: https://charts.goauthentik.io/
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.2.2
+    version: 2.1.9
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.5.0
+    version: 7.4.5
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
-    version: 1.0.4
+    version: 1.0.1
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/authentik.png
-# renovate: datasource=github-releases depName=goauthentik/authentik
+# renovate: github=goauthentik/authentik
 appVersion: 2025.10.2

clusters/cl01tl/helm/backrest/Chart.yaml

@@ -26,5 +26,5 @@ dependencies:
     version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/backrest.png
-# renovate: datasource=github-releases depName=garethgeorge/backrest
+# renovate: github=garethgeorge/backrest
-appVersion: v1.11.2
+appVersion: v1.10.1

clusters/cl01tl/helm/backrest/values.yaml

@@ -8,7 +8,7 @@ backrest:
         main:
           image:
             repository: garethgeorge/backrest
-            tag: v1.11.2
+            tag: v1.11.1
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/bazarr/Chart.yaml

@@ -24,5 +24,5 @@ dependencies:
     version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/bazarr.png
-# renovate: datasource=github-releases depName=morpheus65535/bazarr
+# renovate: github=linuxserver/bazarr
-appVersion: 1.5.5
+appVersion: 1.5.3

clusters/cl01tl/helm/bazarr/values.yaml

@@ -15,7 +15,7 @@ bazarr:
         main:
           image:
             repository: ghcr.io/linuxserver/bazarr
-            tag: 1.5.5@sha256:d40ee61030a9afafddfdd58d160281b865bfcad7cb66e920116fd6fd40668cbb
+            tag: 1.5.4@sha256:7d0a091a63889ce1e4ac4c90595ebd2c50ba5a5df7039a4f4d2be6c2aed6d4ae
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/blocky/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.6.2
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.4
+  version: 1.0.1
-digest: sha256:fe577fe52ae34540b1610c598f149eab49e44c640ed717cea5ad8fdf229e37f2
+digest: sha256:f3cc9b85524eb1a0c8aec92a87ad4dd1f2f59c5bb3474b569ce188827e40b3d0
-generated: "2026-02-03T20:35:43.744062575Z"
+generated: "2026-01-16T18:45:21.852495393Z"

clusters/cl01tl/helm/blocky/Chart.yaml

@@ -18,8 +18,8 @@ dependencies:
     repository: https://bjw-s-labs.github.io/helm-charts/
     version: 4.6.2
   - name: redis-replication
-    version: 1.0.4
+    version: 1.0.1
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/blocky.png
-# renovate: datasource=github-releases depName=0xerr0r/blocky
+# renovate: github=0xerr0r/blocky
 appVersion: v0.28.2

clusters/cl01tl/helm/blocky/values.yaml

@@ -112,6 +112,7 @@ blocky:
               booklore                        IN      CNAME   traefik-cl01tl
               ceph                            IN      CNAME   traefik-cl01tl
               code-server                     IN      CNAME   traefik-cl01tl
+              ephemera                        IN      CNAME   traefik-cl01tl
               excalidraw                      IN      CNAME   traefik-cl01tl
               feishin                         IN      CNAME   traefik-cl01tl
               garage-s3                       IN      CNAME   traefik-cl01tl
@@ -132,6 +133,7 @@ blocky:
               kiwix                           IN      CNAME   traefik-cl01tl
               komodo                          IN      CNAME   traefik-cl01tl
               lidarr                          IN      CNAME   traefik-cl01tl
+              lidatube                        IN      CNAME   traefik-cl01tl
               mail                            IN      CNAME   traefik-cl01tl
               navidrome                       IN      CNAME   traefik-cl01tl
               ntfy                            IN      CNAME   traefik-cl01tl

clusters/cl01tl/helm/booklore/Chart.yaml

@@ -29,5 +29,5 @@ dependencies:
     version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/booklore.png
-# renovate: datasource=github-releases depName=booklore-app/BookLore
+# renovate: github=booklore-app/BookLore
-appVersion: v1.18.5
+appVersion: v1.13.2

clusters/cl01tl/helm/booklore/values.yaml

@@ -9,7 +9,7 @@ booklore:
         main:
           image:
             repository: ghcr.io/booklore-app/booklore
-            tag: v1.18.5
+            tag: v1.17.0
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/cert-manager/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: cert-manager
   repository: https://charts.jetstack.io
-  version: v1.19.3
+  version: v1.19.2
-digest: sha256:114cb3c074866dd41725580ac14367f0aa03653f362ae156430f1dc0ee6ddd32
+digest: sha256:b02bda9b9f2fc886af11d017a27a5761513defee603f9e3aa1d7add2749b925c
-generated: "2026-02-02T23:06:15.144687867Z"
+generated: "2025-12-10T15:01:57.196895547Z"

clusters/cl01tl/helm/cert-manager/Chart.yaml

@@ -14,8 +14,8 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: cert-manager
-    version: v1.19.3
+    version: v1.19.2
     repository: https://charts.jetstack.io
 icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/cert-manager.png
-# renovate: datasource=github-releases depName=cert-manager/cert-manager
+# renovate: github=cert-manager/cert-manager
-appVersion: v1.19.3
+appVersion: v1.19.2

clusters/cl01tl/helm/cilium/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: cilium
   repository: https://helm.cilium.io/
-  version: 1.19.0
+  version: 1.18.6
-digest: sha256:d2319facc93cab2a0a137588d8bd93315b52025b3ec86bc89edb0e236a74c814
+digest: sha256:8ea328ac238524b5b423e6289f5e25d05ef64e6aa19cfd5de238f1d5dd533e9b
-generated: "2026-02-05T20:56:22.821154013Z"
+generated: "2026-01-14T11:02:31.272963463Z"

clusters/cl01tl/helm/cilium/Chart.yaml

@@ -15,8 +15,8 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: cilium
-    version: 1.19.0
+    version: 1.18.6
     repository: https://helm.cilium.io/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/cilium.png
-# renovate: datasource=github-releases depName=cilium/cilium
+# renovate: github=cilium/cilium
-appVersion: 1.19.0
+appVersion: 1.18.4

clusters/cl01tl/helm/cilium/templates/cilium-bgp-advertisement.yaml

@@ -1,4 +1,4 @@
-# apiVersion: cilium.io/v2
+# apiVersion: cilium.io/v2alpha1
 # kind: CiliumBGPAdvertisement
 # metadata:
 #   name: cilium-bgp-advertisements

clusters/cl01tl/helm/cilium/templates/cilium-bgp-cluster-config.yaml

@@ -1,4 +1,4 @@
-# apiVersion: cilium.io/v2
+# apiVersion: cilium.io/v2alpha1
 # kind: CiliumBGPClusterConfig
 # metadata:
 #   name: cilium-bgp

clusters/cl01tl/helm/cilium/templates/cilium-bgp-peer-config.yaml

@@ -1,4 +1,4 @@
-# apiVersion: cilium.io/v2
+# apiVersion: cilium.io/v2alpha1
 # kind: CiliumBGPPeerConfig
 # metadata:
 #   name: cilium-peer

clusters/cl01tl/helm/cilium/templates/cilium-l2-announcement-policy.yaml

@@ -1,16 +1,17 @@
 # apiVersion: "cilium.io/v2alpha1"
 # kind: CiliumL2AnnouncementPolicy
 # metadata:
-#   name: node-gateway-l2-policy
+#   name: general-l2-policy
 #   namespace: {{ .Release.Namespace }}
 #   labels:
-#     app.kubernetes.io/name: node-gateway-l2-policy
+#     app.kubernetes.io/name: general-l2-policy
 #     app.kubernetes.io/instance: {{ .Release.Name }}
 #     app.kubernetes.io/part-of: {{ .Release.Name }}
 # spec:
 #   nodeSelector:
-#     matchLabels:
+#     matchExpressions:
-#       kubernetes.io/hostname: talos-ix7-xku
+#       - key: kubernetes.io/hostname
+#         operator: Exists
 #   interfaces:
 #     - end0
 #     - enp6s0

clusters/cl01tl/helm/cilium/templates/cilium-load-balancer-ip-pool.yaml

@@ -1,4 +1,4 @@
-apiVersion: cilium.io/v2
+apiVersion: "cilium.io/v2alpha1"
 kind: CiliumLoadBalancerIPPool
 metadata:
   name: default-ip-pool
@@ -15,7 +15,7 @@ spec:
       stop: "10.232.2.23"
 
 ---
-apiVersion: cilium.io/v2
+apiVersion: "cilium.io/v2alpha1"
 kind: CiliumLoadBalancerIPPool
 metadata:
   name: bgp-ip-pool

clusters/cl01tl/helm/cilium/templates/gateway.yaml

@@ -4,22 +4,25 @@
 #   name: cilium-tls-gateway
 #   namespace: {{ .Release.Namespace }}
 #   labels:
-#     app.kubernetes.io/name: cilium-tls-gateway
+#     app.kubernetes.io/name: tls-gateway
 #     app.kubernetes.io/instance: {{ .Release.Name }}
 #     app.kubernetes.io/part-of: {{ .Release.Name }}
 #   annotations:
 #     cert-manager.io/cluster-issuer: letsencrypt-issuer
-#     io.cilium/lb-ipam-ips: "10.232.1.23"
 # spec:
-#   addresses:
-#     - type: IPAddress
-#       value: 10.232.1.23
 #   gatewayClassName: cilium
 #   listeners:
 #     - allowedRoutes:
 #         namespaces:
 #           from: All
 #       hostname: '*.alexlebens.net'
+#       name: http
+#       port: 80
+#       protocol: HTTP
+#     - allowedRoutes:
+#         namespaces:
+#           from: All
+#       hostname: '*.alexlebens.net'
 #       name: https
 #       port: 443
 #       protocol: HTTPS
@@ -30,17 +33,3 @@
 #             name: https-gateway-cert
 #             namespace: kube-system
 #         mode: Terminate
-#     - allowedRoutes:
-#         namespaces:
-#           from: All
-#       hostname: 'alexlebens.net'
-#       name: https-domain
-#       port: 443
-#       protocol: HTTPS
-#       tls:
-#         certificateRefs:
-#           - group: ''
-#             kind: Secret
-#             name: https-gateway-cert
-#             namespace: kube-system
-#         mode: Terminate

clusters/cl01tl/helm/cilium/values.yaml

@@ -35,8 +35,6 @@ cilium:
       enabled: true
     routerIDAllocation:
       mode: "default"
-  bpf:
-    hostLegacyRouting: true
   devices: end0 enp6s0
   enableK8sEndpointSlice: true
   ciliumEndpointSlice:

clusters/cl01tl/helm/cloudnative-pg/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: cloudnative-pg
   repository: https://cloudnative-pg.io/charts/
-  version: 0.27.1
+  version: 0.27.0
 - name: plugin-barman-cloud
   repository: https://cloudnative-pg.io/charts/
-  version: 0.5.0
+  version: 0.4.0
-digest: sha256:e7089ffd089cae87529e28f0e71302b9fc4a869b389cbb6628f1c559644a3a10
+digest: sha256:5e2a32fa5ed8b180ae5e556d65c67eeb3dcf38e2974b0d668eff4ee3c83258ce
-generated: "2026-02-05T19:36:19.473447121Z"
+generated: "2025-12-30T21:01:48.755246408Z"

clusters/cl01tl/helm/cloudnative-pg/Chart.yaml

@@ -16,11 +16,11 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: cloudnative-pg
-    version: 0.27.1
+    version: 0.27.0
     repository: https://cloudnative-pg.io/charts/
   - name: plugin-barman-cloud
-    version: 0.5.0
+    version: 0.4.0
     repository: https://cloudnative-pg.io/charts/
 icon: https://avatars.githubusercontent.com/u/100373852?s=200&v=4
-# renovate: datasource=github-releases depName=cloudnative-pg/cloudnative-pg
+# renovate: github=cloudnative-pg/cloudnative-pg
-appVersion: 1.28.1
+appVersion: 1.28.0

clusters/cl01tl/helm/cloudnative-pg/values.yaml

@@ -7,10 +7,10 @@ plugin-barman-cloud:
   image:
     registry: ghcr.io
     repository: cloudnative-pg/plugin-barman-cloud
-    tag: v0.11.0
+    tag: v0.10.0
   sidecarImage:
     registry: ghcr.io
     repository: cloudnative-pg/plugin-barman-cloud-sidecar
-    tag: v0.11.0
+    tag: v0.10.0
   crds:
     create: true

clusters/cl01tl/helm/code-server/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.2.2
+  version: 2.1.9
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:185da5d4998267b90e6d2ece537b9550d800d1cca0217cac808a88f63f9fec29
+digest: sha256:d243a4062bd69c3e02536dbc8f0da06f8607a373a772bf521fa16ae10df331b7
-generated: "2026-02-03T03:41:32.224062229Z"
+generated: "2026-01-17T17:30:30.693066904Z"

clusters/cl01tl/helm/code-server/Chart.yaml

@@ -22,11 +22,11 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.2.2
+    version: 2.1.9
   - name: volsync-target
     alias: volsync-target-config
     version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/visual-studio-code.png
-# renovate: datasource=github-releases depName=linuxserver/docker-code-server
+# renovate: github=coder/code-server
-appVersion: 4.108.1
+appVersion: 4.106.3

clusters/cl01tl/helm/code-server/values.yaml

@@ -9,7 +9,7 @@ code-server:
         main:
           image:
             repository: ghcr.io/linuxserver/code-server
-            tag: 4.108.2@sha256:a59301fe97af3d9bf9150ce53e5c7b12486f2803eea0446a38f8d545ac877c9a
+            tag: 4.108.1@sha256:e9ed472ff25e12a5ee3562684d073b29e508e472ef54e3558e19bf4ff99ef858
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/coredns/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: coredns
   repository: https://coredns.github.io/helm
-  version: 1.45.2
+  version: 1.45.0
-digest: sha256:36ed42e4273536b6548426b4e0f51b0816d9e8fe52333bce4c61acd8ade607e8
+digest: sha256:cfcb22a7d0bce4d6000800706597ae43faec74255f1deb5cc3279b2d0a81f6c6
-generated: "2026-01-24T08:01:31.043488615Z"
+generated: "2025-12-02T17:17:52.206039-06:00"

clusters/cl01tl/helm/coredns/Chart.yaml

@@ -15,8 +15,8 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: coredns
-    version: 1.45.2
+    version: 1.45.0
     repository: https://coredns.github.io/helm
 icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/coredns.png
-# renovate: datasource=github-releases depName=coredns/coredns
+# renovate: github=coredns/coredns
-appVersion: v1.14.1
+appVersion: v1.13.2

clusters/cl01tl/helm/coredns/values.yaml

@@ -1,7 +1,7 @@
 coredns:
   image:
     repository: registry.k8s.io/coredns/coredns
-    tag: v1.14.1
+    tag: v1.13.2
   replicaCount: 3
   resources:
     requests:

clusters/cl01tl/helm/democratic-csi-synology-iscsi/Chart.yaml

@@ -17,5 +17,5 @@ dependencies:
     repository: https://democratic-csi.github.io/charts/
     version: 0.15.1
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
-# renovate: datasource=github-releases depName=democratic-csi/democratic-csi
+# renovate: github=democratic-csi/democratic-csi
 appVersion: v1.9.4

clusters/cl01tl/helm/descheduler/Chart.yaml

@@ -17,5 +17,5 @@ dependencies:
     version: 0.34.0
     repository: https://kubernetes-sigs.github.io/descheduler/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
-# renovate: datasource=github-releases depName=kubernetes-sigs/descheduler
+# renovate: github=kubernetes-sigs/descheduler
 appVersion: 0.34.0

clusters/cl01tl/helm/directus/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.2.2
+  version: 2.1.9
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.5.0
+  version: 7.4.5
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.4
+  version: 1.0.1
-digest: sha256:c8812d427b060fc1b117ee14c92f37eb7a25a2f62b52b43184b90b74c161af48
+digest: sha256:9ae9e0cb222e7ac2fca2bfe5367a4b011b0c83c1a0f98a01342f37fad62c2fe1
-generated: "2026-02-03T20:35:55.199768508Z"
+generated: "2026-01-17T17:30:43.212095428Z"

clusters/cl01tl/helm/directus/Chart.yaml

@@ -23,14 +23,14 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.2.2
+    version: 2.1.9
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.5.0
+    version: 7.4.5
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
-    version: 1.0.4
+    version: 1.0.1
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/directus.png
-# renovate: datasource=github-releases depName=directus/directus
+# renovate: github=directus/directus
-appVersion: 11.15.0
+appVersion: 11.14.0

clusters/cl01tl/helm/directus/values.yaml

@@ -9,7 +9,7 @@ directus:
         main:
           image:
             repository: directus/directus
-            tag: 11.15.0
+            tag: 11.14.1
             pullPolicy: IfNotPresent
           env:
             - name: PUBLIC_URL

clusters/cl01tl/helm/elastic-operator/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: eck-operator
   repository: https://helm.elastic.co
-  version: 3.3.0
+  version: 3.2.0
-digest: sha256:d2b00de6c03bf7624fdf496b326262149a2d2635012f14e900ed0724545c95d9
+digest: sha256:b27ba092ddfa078f763e409dd5db1144a269eff0f45af04f180d844f13466a34
-generated: "2026-02-03T18:05:00.461644575Z"
+generated: "2025-12-01T20:25:30.722424-06:00"

clusters/cl01tl/helm/elastic-operator/Chart.yaml

@@ -15,8 +15,8 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: eck-operator
-    version: 3.3.0
+    version: 3.2.0
     repository: https://helm.elastic.co
 icon: https://helm.elastic.co/icons/eck.png
-# renovate: datasource=github-releases depName=elastic/cloud-on-k8s
+# renovate: github=elastic/cloud-on-k8s
-appVersion: v3.3.0
+appVersion: v3.2.0

clusters/cl01tl/helm/element-web/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: element-web
   repository: https://ananace.gitlab.io/charts
-  version: 1.4.29
+  version: 1.4.27
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.2.2
+  version: 2.1.9
-digest: sha256:a27e895a7c19b296ca63888511d865b9623020824a1ea9c39dafa5433e9e83f4
+digest: sha256:ef4b5256d6b405f08f33ec1a2bbda9f8427fcac0c69accd04c19fb4fe1871047
-generated: "2026-02-03T03:42:00.780507134Z"
+generated: "2026-01-17T17:30:57.57289288Z"

clusters/cl01tl/helm/element-web/Chart.yaml

@@ -17,11 +17,11 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: element-web
-    version: 1.4.29
+    version: 1.4.27
     repository: https://ananace.gitlab.io/charts
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.2.2
+    version: 2.1.9
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/element.png
-# renovate: datasource=github-releases depName=element-hq/element-web
+# renovate: github=element-hq/element-web
-appVersion: v1.12.9
+appVersion: v1.12.6

clusters/cl01tl/helm/element-web/values.yaml

@@ -2,7 +2,7 @@ element-web:
   replicaCount: 1
   image:
     repository: vectorim/element-web
-    tag: v1.12.9
+    tag: v1.12.8
     pullPolicy: IfNotPresent
   defaultServer:
     url: https://matrix.alexlebens.dev

clusters/cl01tl/helm/ephemera/Chart.lock

@@ -0,0 +1,9 @@
+dependencies:
+- name: app-template
+  repository: https://bjw-s-labs.github.io/helm-charts/
+  version: 4.6.2
+- name: volsync-target
+  repository: oci://harbor.alexlebens.net/helm-charts
+  version: 0.7.0
+digest: sha256:c270dc80232d53598370e68d969ddcb71f26eb6910b7bb51761b88127e065f5a
+generated: "2026-01-16T18:46:10.06351851Z"

clusters/cl01tl/helm/ephemera/Chart.yaml

@@ -0,0 +1,28 @@
+apiVersion: v2
+name: ephemera
+version: 1.0.0
+description: ephemera
+keywords:
+  - ephemera
+  - books
+home: https://wiki.alexlebens.dev/
+sources:
+  - https://github.com/OrwellianEpilogue/ephemera
+  - https://github.com/FlareSolverr/FlareSolverr
+  - https://github.com/orwellianepilogue/ephemera/pkgs/container/ephemera
+  - https://github.com/flaresolverr/FlareSolverr/pkgs/container/flaresolverr
+  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
+maintainers:
+  - name: alexlebens
+dependencies:
+  - name: app-template
+    alias: ephemera
+    repository: https://bjw-s-labs.github.io/helm-charts/
+    version: 4.6.2
+  - name: volsync-target
+    alias: volsync-target-config
+    version: 0.7.0
+    repository: oci://harbor.alexlebens.net/helm-charts
+icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ephemera.png
+# renovate: github=OrwellianEpilogue/ephemera
+appVersion: 1.3.1

clusters/cl01tl/helm/ephemera/templates/external-secret.yaml

@@ -0,0 +1,44 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: ephemera-key-secret
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: ephemera-key-secret
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  data:
+    - secretKey: key
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/ephemera/config
+        metadataPolicy: None
+        property: key
+
+---
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: ephemera-apprise-config
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: ephemera-apprise-config
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  data:
+    - secretKey: ntfy-url
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/ephemera/config
+        metadataPolicy: None
+        property: ntfy-url

clusters/cl01tl/helm/ephemera/templates/persistent-volume-claim.yaml

@@ -0,0 +1,17 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: ephemera-import-nfs-storage
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: ephemera-import-nfs-storage
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  volumeName: ephemera-import-nfs-storage
+  storageClassName: nfs-client
+  accessModes:
+    - ReadWriteMany
+  resources:
+    requests:
+      storage: 1Gi

clusters/cl01tl/helm/ephemera/templates/persistent-volume.yaml

@@ -0,0 +1,23 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: ephemera-import-nfs-storage
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: ephemera-import-nfs-storage
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  persistentVolumeReclaimPolicy: Retain
+  storageClassName: nfs-client
+  capacity:
+    storage: 1Gi
+  accessModes:
+    - ReadWriteMany
+  nfs:
+    path: /volume2/Storage/Books Import
+    server: synologybond.alexlebens.net
+  mountOptions:
+    - vers=4
+    - minorversion=1
+    - noac

clusters/cl01tl/helm/ephemera/values.yaml

@@ -0,0 +1,143 @@
+ephemera:
+  controllers:
+    main:
+      type: deployment
+      replicas: 1
+      strategy: Recreate
+      revisionHistoryLimit: 3
+      containers:
+        main:
+          image:
+            repository: ghcr.io/orwellianepilogue/ephemera
+            tag: 2.0.0
+            pullPolicy: IfNotPresent
+          env:
+            - name: ALLOWED_ORIGINS
+              value: https://ephemera.alexlebens.net
+            - name: BASE_URL
+              value: https://ephemera.alexlebens.net
+            - name: AA_BASE_URL
+              value: https://annas-archive.org
+            # - name: AA_API_KEY
+            #   valueFrom:
+            #     secretKeyRef:
+            #       name: ephemera-key-secret
+            #       key: key
+            - name: FLARESOLVERR_URL
+              value: http://127.0.0.1:8191
+            - name: LG_BASE_URL
+              value: https://gen.com
+            - name: PUID
+              value: 0
+            - name: PGID
+              value: 0
+          resources:
+            requests:
+              cpu: 50m
+              memory: 128Mi
+        flaresolverr:
+          image:
+            repository: ghcr.io/flaresolverr/flaresolverr
+            tag: v3.4.6
+            pullPolicy: IfNotPresent
+          env:
+            - name: LOG_LEVEL
+              value: info
+            - name: LOG_HTML
+              value: false
+            - name: CAPTCHA_SOLVER
+              value: none
+            - name: TZ
+              value: America/Chicago
+          resources:
+            requests:
+              cpu: 10m
+              memory: 128Mi
+        apprise-api:
+          image:
+            repository: caronc/apprise
+            tag: 1.3.0
+            pullPolicy: IfNotPresent
+          env:
+            - name: TZ
+              value: US/Central
+            - name: APPRISE_STORAGE_MODE
+              value: memory
+            - name: APPRISE_STATEFUL_MODE
+              value: disabled
+            - name: APPRISE_WORKER_COUNT
+              value: 1
+            - name: APPRISE_STATELESS_URLS
+              valueFrom:
+                secretKeyRef:
+                  name: ephemera-apprise-config
+                  key: ntfy-url
+          resources:
+            requests:
+              cpu: 10m
+              memory: 128Mi
+  service:
+    main:
+      controller: main
+      ports:
+        http:
+          port: 80
+          targetPort: 8286
+          protocol: HTTP
+  route:
+    main:
+      kind: HTTPRoute
+      parentRefs:
+        - group: gateway.networking.k8s.io
+          kind: Gateway
+          name: traefik-gateway
+          namespace: traefik
+      hostnames:
+        - ephemera.alexlebens.net
+      rules:
+        - backendRefs:
+            - group: ''
+              kind: Service
+              name: ephemera
+              port: 80
+              weight: 100
+          matches:
+            - path:
+                type: PathPrefix
+                value: /
+  persistence:
+    config:
+      forceRename: ephemera
+      storageClass: ceph-block
+      accessMode: ReadWriteOnce
+      size: 5Gi
+      retain: true
+      advancedMounts:
+        main:
+          main:
+            - path: /app/data
+              readOnly: false
+    cache:
+      type: emptyDir
+      advancedMounts:
+        main:
+          main:
+            - path: /app/downloads
+              readOnly: false
+    ingest:
+      existingClaim: ephemera-import-nfs-storage
+      advancedMounts:
+        main:
+          main:
+            - path: /app/ingest
+              readOnly: false
+volsync-target-config:
+  pvcTarget: ephemera
+  local:
+    enabled: true
+    schedule: 16 8 * * *
+  remote:
+    enabled: false
+  external:
+    enabled: true
+    schedule: 16 9 * * *

clusters/cl01tl/helm/eraser/Chart.yaml

@@ -17,5 +17,5 @@ dependencies:
     version: 1.4.1
     repository: https://eraser-dev.github.io/eraser/charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
-# renovate: datasource=github-releases depName=eraser-dev/eraser
+# renovate: github=eraser-dev/eraser
 appVersion: v1.4.1

clusters/cl01tl/helm/excalidraw/Chart.yaml

@@ -17,5 +17,5 @@ dependencies:
     repository: https://bjw-s-labs.github.io/helm-charts/
     version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/excalidraw.png
-# renovate: datasource=github-releases depName=excalidraw/excalidraw
+# renovate: github=excalidraw/excalidraw
-appVersion: v0.18.0
+appVersion: 0.6.0

clusters/cl01tl/helm/external-dns/Chart.yaml

@@ -19,5 +19,5 @@ dependencies:
     version: 1.20.0
     repository: https://kubernetes-sigs.github.io/external-dns/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
-# renovate: datasource=github-releases depName=kubernetes-sigs/external-dns
+# renovate: github=kubernetes-sigs/external-dns
 appVersion: v0.20.0

clusters/cl01tl/helm/external-secrets/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: external-secrets
   repository: https://charts.external-secrets.io
-  version: 1.3.2
+  version: 1.2.1
-digest: sha256:7b7c6dee59f2ea630f0e7a1124aeeda52cdff23769136300384b28210e03945a
+digest: sha256:20d4fe97e96c6bd5ba958b23121d807d8154c39d58b01511b80025166713a141
-generated: "2026-02-03T21:41:32.061135319Z"
+generated: "2026-01-03T23:02:15.181743082Z"

clusters/cl01tl/helm/external-secrets/Chart.yaml

@@ -12,8 +12,8 @@ sources:
   - https://github.com/external-secrets/external-secrets/tree/main/deploy/charts/external-secrets
 dependencies:
   - name: external-secrets
-    version: 1.3.2
+    version: 1.2.1
     repository: https://charts.external-secrets.io
 icon: https://avatars.githubusercontent.com/u/68335991?s=48&v=4
-# renovate: datasource=github-releases depName=external-secrets/external-secrets
+# renovate: github=external-secrets/external-secrets
-appVersion: v1.3.2
+appVersion: v1.1.1

clusters/cl01tl/helm/freshrss/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.2.2
+  version: 2.1.9
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.5.0
+  version: 7.4.5
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:85e8205ab05be520984cb7c08109aedd9020229b2e7ef22da7b82534cd5d8242
+digest: sha256:ded65efcf83f3c0cd3497839a1beddbc616081c286bdac6f584353813e7c8da8
-generated: "2026-02-03T03:42:15.595589094Z"
+generated: "2026-01-17T17:31:12.045290099Z"

clusters/cl01tl/helm/freshrss/Chart.yaml

@@ -23,15 +23,15 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.2.2
+    version: 2.1.9
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.5.0
+    version: 7.4.5
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data
     version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/freshrss.png
-# renovate: datasource=github-releases depName=FreshRSS/FreshRSS
+# renovate: github=FreshRSS/FreshRSS
-appVersion: 1.28.1
+appVersion: 1.27.1

clusters/cl01tl/helm/freshrss/values.yaml

@@ -11,7 +11,7 @@ freshrss:
             runAsUser: 0
           image:
             repository: alpine
-            tag: 3.23.3
+            tag: 3.23.2
             pullPolicy: IfNotPresent
           command:
             - /bin/sh
@@ -35,7 +35,7 @@ freshrss:
             runAsUser: 0
           image:
             repository: alpine
-            tag: 3.23.3
+            tag: 3.23.2
             pullPolicy: IfNotPresent
           command:
             - /bin/sh
@@ -59,7 +59,7 @@ freshrss:
             runAsUser: 0
           image:
             repository: alpine
-            tag: 3.23.3
+            tag: 3.23.2
             pullPolicy: IfNotPresent
           command:
             - /bin/sh
@@ -80,7 +80,7 @@ freshrss:
         main:
           image:
             repository: freshrss/freshrss
-            tag: 1.28.1
+            tag: 1.28.0
             pullPolicy: IfNotPresent
           env:
             - name: PGID
@@ -201,7 +201,7 @@ postgres-18-cluster:
   backup:
     objectStore:
       - name: garage-local
-        index: 2
+        index: 1
         destinationBucket: postgres-backups
         externalSecretCredentialPath: /garage/home-infra/postgres-backups
         isWALArchiver: true

clusters/cl01tl/helm/garage/Chart.yaml

@@ -19,5 +19,5 @@ dependencies:
     repository: https://bjw-s-labs.github.io/helm-charts/
     version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
-# renovate: datasource=github-releases depName=deuxfleurs-org/garage
+# renovate: github=deuxfleurs-org/garage
 appVersion: v2.1.0

clusters/cl01tl/helm/garage/values.yaml

@@ -22,7 +22,7 @@ garage:
         main:
           image:
             repository: dxflrs/garage
-            tag: v2.2.0
+            tag: v2.1.0
             pullPolicy: IfNotPresent
           envFrom:
             - secretRef:
@@ -65,7 +65,7 @@ garage:
         main:
           image:
             repository: dxflrs/garage
-            tag: v2.2.0
+            tag: v2.1.0
             pullPolicy: IfNotPresent
           envFrom:
             - secretRef:
@@ -96,7 +96,7 @@ garage:
         main:
           image:
             repository: dxflrs/garage
-            tag: v2.2.0
+            tag: v2.1.0
             pullPolicy: IfNotPresent
           envFrom:
             - secretRef:
@@ -118,9 +118,9 @@ garage:
             pullPolicy: IfNotPresent
           env:
             - name: API_BASE_URL
-              value: http://garage-1.garage:3903
+              value: http://garage-main.garage:3903
             - name: S3_ENDPOINT_URL
-              value: http://garage-1.garage:3900
+              value: http://garage-main.garage:3900
             - name: API_ADMIN_KEY
               valueFrom:
                 secretKeyRef:
@@ -318,7 +318,6 @@ garage:
         matchLabels:
           app.kubernetes.io/name: garage
           app.kubernetes.io/instance: garage
-          app.kubernetes.io/service: garage-1
       serviceName: '{{ include "bjw-s.common.lib.chart.names.fullname" $ }}'
       endpoints:
         - port: admin

clusters/cl01tl/helm/gatus/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: gatus
   repository: https://twin.github.io/helm-charts
-  version: 1.4.5
+  version: 1.4.4
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.5.0
+  version: 7.4.5
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:869bee8ae57a4c920ae6495a5fc90feabcbee12647cc7b9beb8b368823ffdbf1
+digest: sha256:ee32795b47519463ec6d1219bf4ec16784b1c42d98ae8a330e9650200d11c033
-generated: "2026-01-23T00:36:25.773527504Z"
+generated: "2025-12-27T19:45:37.106953505Z"

clusters/cl01tl/helm/gatus/Chart.yaml

@@ -19,15 +19,15 @@ maintainers:
 dependencies:
   - name: gatus
     repository: https://twin.github.io/helm-charts
-    version: 1.4.5
+    version: 1.4.4
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.5.0
+    version: 7.4.5
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data
     version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/gatus.png
-# renovate: datasource=github-releases depName=TwiN/gatus
+# renovate: github=TwiN/gatus
-appVersion: v5.34.0
+appVersion: v5.33.0

clusters/cl01tl/helm/gatus/values.yaml

@@ -310,6 +310,9 @@ gatus:
       - name: lidarr
         url: https://lidarr.alexlebens.net
         <<: *defaults
+      - name: lidatube
+        url: https://lidatube.alexlebens.net
+        <<: *defaults
       - name: yubal-playlist
         url: https://yubal-playlist.alexlebens.net
         <<: *defaults

clusters/cl01tl/helm/gitea/Chart.lock

@@ -1,27 +1,27 @@
 dependencies:
 - name: gitea
   repository: https://dl.gitea.io/charts/
-  version: 12.5.0
+  version: 12.4.0
 - name: gitea-actions
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.2.1
 - name: meilisearch
   repository: https://meilisearch.github.io/meilisearch-kubernetes
-  version: 0.25.1
+  version: 0.23.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.2.2
+  version: 2.1.9
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.5.0
+  version: 7.4.5
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.4
+  version: 1.0.1
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.4
+  version: 1.0.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:e8940a4eb5bfe5aeb2d7bd8f328d7aee962d0a75c1d2aa4937401b16e5c29238
+digest: sha256:d9faaa7a84d8d37c0bb1836dcd64e59368edf957d32a0db568d750f1136d7e4a
-generated: "2026-02-03T20:36:08.603489039Z"
+generated: "2026-01-20T16:01:37.816523129Z"

clusters/cl01tl/helm/gitea/Chart.yaml

@@ -26,33 +26,33 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: gitea
-    version: 12.5.0
+    version: 12.4.0
     repository: https://dl.gitea.io/charts/
   - name: gitea-actions
     repository: oci://harbor.alexlebens.net/helm-charts
     version: 0.2.1
   - name: meilisearch
-    version: 0.25.1
+    version: 0.23.0
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.2.2
+    version: 2.1.9
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.5.0
+    version: 7.4.5
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     alias: redis-replication-gitea
-    version: 1.0.4
+    version: 1.0.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     alias: redis-replication-renovate
-    version: 1.0.4
+    version: 1.0.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-storage
     version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/gitea.png
-# renovate: datasource=github-releases depName=go-gitea/gitea
+# renovate: github=go-gitea/gitea
-appVersion: 1.25.4
+appVersion: 1.25.2

clusters/cl01tl/helm/gitea/values.yaml

@@ -1,10 +1,10 @@
 gitea:
   global:
     imageRegistry: registry.hub.docker.com
-  replicaCount: 3
+  replicaCount: 1
   image:
     repository: gitea/gitea
-    tag: 1.25.4
+    tag: 1.25.3
   service:
     http:
       type: ClusterIP

clusters/cl01tl/helm/grafana-operator/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 5.21.4
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.5.0
+  version: 7.4.5
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.4
+  version: 1.0.1
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.4
+  version: 1.0.1
-digest: sha256:9ba81c06283d46ae577e40d0d030149307404a3ff35e6c2c8d0e738aeedfcc6a
+digest: sha256:62c2a79644690c55ae04eb2706f73cf091c1948583a0e608b72987c0ae5efc2e
-generated: "2026-02-03T20:36:24.992188976Z"
+generated: "2026-01-08T16:05:24.786103-06:00"

clusters/cl01tl/helm/grafana-operator/Chart.yaml

@@ -21,16 +21,16 @@ dependencies:
     repository: https://grafana.github.io/helm-charts
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.5.0
+    version: 7.4.5
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     alias: redis-replication-unified-alerting
-    version: 1.0.4
+    version: 1.0.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     alias: redis-replication-remote-cache
-    version: 1.0.4
+    version: 1.0.1
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/grafana.png
-# renovate: datasource=github-releases depName=grafana/grafana-operator
+# renovate: github=grafana/grafana-operator
-appVersion: v5.21.4
+appVersion: v5.20.0

clusters/cl01tl/helm/harbor/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: harbor
   repository: https://helm.goharbor.io
-  version: 1.18.2
+  version: 1.18.1
 - name: postgres-cluster
   repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
-  version: 7.5.0
+  version: 7.4.5
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.4
+  version: 1.0.1
-digest: sha256:a5986b8d12f26cb4d0c757e7d9946af180003d8a8a7bb4b399297cc7d5235790
+digest: sha256:195fb663aa2e08bf0b3929a22c79f7e69426301a120594088f1ecbda9969bdc6
-generated: "2026-02-03T20:36:39.914082171Z"
+generated: "2026-01-08T16:05:28.408647-06:00"

clusters/cl01tl/helm/harbor/Chart.yaml

@@ -17,15 +17,15 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: harbor
-    version: 1.18.2
+    version: 1.18.1
     repository: https://helm.goharbor.io
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.5.0
+    version: 7.4.5
     repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
   - name: redis-replication
-    version: 1.0.4
+    version: 1.0.1
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/harbor.png
-# renovate: datasource=github-releases depName=goharbor/harbor
+# renovate: github=goharbor/harbor
-appVersion: v2.14.2
+appVersion: v2.14.1

clusters/cl01tl/helm/harbor/values.yaml

@@ -105,7 +105,7 @@ postgres-18-cluster:
   backup:
     objectStore:
       - name: garage-local
-        index: 2
+        index: 1
         destinationBucket: postgres-backups
         externalSecretCredentialPath: /garage/home-infra/postgres-backups
         isWALArchiver: true

clusters/cl01tl/helm/headlamp/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: headlamp
   repository: https://kubernetes-sigs.github.io/headlamp/
-  version: 0.40.0
+  version: 0.39.0
-digest: sha256:b7f8f176f8c4902130e87660adb39211fd5ca454f89f5a7e9ed577cd4c3a2255
+digest: sha256:870e456773199684c150585c12c2e18b3f0895ee8cc73481a53b23c8e94560b1
-generated: "2026-02-05T18:23:45.100522813Z"
+generated: "2025-12-20T00:03:40.10414707Z"

clusters/cl01tl/helm/headlamp/Chart.yaml

@@ -14,8 +14,8 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: headlamp
-    version: 0.40.0
+    version: 0.39.0
     repository: https://kubernetes-sigs.github.io/headlamp/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/headlamp.png
-# renovate: datasource=github-releases depName=headlamp-k8s/headlamp
+# renovate: github=headlamp-k8s/headlamp
-appVersion: v0.40.0
+appVersion: 0.38.0

clusters/cl01tl/helm/home-assistant/Chart.yaml

@@ -24,5 +24,5 @@ dependencies:
     version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/home-assistant.png
-# renovate: datasource=github-releases depName=home-assistant/core
+# renovate: github=home-assistant/core
-appVersion: 2026.2.0
+appVersion: 2025.12.2

clusters/cl01tl/helm/home-assistant/values.yaml

@@ -9,7 +9,7 @@ home-assistant:
         main:
           image:
             repository: ghcr.io/home-assistant/home-assistant
-            tag: 2026.2.0
+            tag: 2026.1.2
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -21,7 +21,7 @@ home-assistant:
         code-server:
           image:
             repository: ghcr.io/linuxserver/code-server
-            tag: 4.108.2@sha256:a59301fe97af3d9bf9150ce53e5c7b12486f2803eea0446a38f8d545ac877c9a
+            tag: 4.108.1@sha256:e9ed472ff25e12a5ee3562684d073b29e508e472ef54e3558e19bf4ff99ef858
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/homepage-dev/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.2.2
+  version: 2.1.9
-digest: sha256:b5120e37e5b4b28a327fa2a3a5c93e93866848c5d36b9b1a8ee7c11ed81663dc
+digest: sha256:3dd7439a8874fcf8b12754907f187149287a2db04c5b9a595d32e6b64a5482db
-generated: "2026-02-03T03:42:46.510379398Z"
+generated: "2026-01-17T17:31:46.477375094Z"

clusters/cl01tl/helm/homepage-dev/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.2.2
+    version: 2.1.9
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/homepage.png
-# renovate: datasource=github-releases depName=gethomepage/homepage
+# renovate: github=gethomepage/homepage
-appVersion: v1.10.1
+appVersion: v1.8.0

clusters/cl01tl/helm/homepage-dev/values.yaml

@@ -11,7 +11,7 @@ homepage:
         main:
           image:
             repository: ghcr.io/gethomepage/homepage
-            tag: v1.10.1
+            tag: v1.9.0
             pullPolicy: IfNotPresent
           env:
             - name: HOMEPAGE_ALLOWED_HOSTS

clusters/cl01tl/helm/homepage/Chart.yaml

@@ -18,5 +18,5 @@ dependencies:
     repository: https://bjw-s-labs.github.io/helm-charts/
     version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/homepage.png
-# renovate: datasource=github-releases depName=gethomepage/homepage
+# renovate: github=gethomepage/homepage
-appVersion: v1.10.1
+appVersion: v1.8.0

clusters/cl01tl/helm/homepage/values.yaml

@@ -15,7 +15,7 @@ homepage:
         main:
           image:
             repository: ghcr.io/gethomepage/homepage
-            tag: v1.10.1
+            tag: v1.9.0
             pullPolicy: IfNotPresent
           env:
             - name: HOMEPAGE_ALLOWED_HOSTS
@@ -661,6 +661,12 @@ homepage:
                   href: https://yubal-playlist.alexlebens.net
                   siteMonitor: http://yubal-playlist.yubal-playlist:80
                   statusStyle: dot
+              - LidaTube:
+                  icon: sh-lidatube.webp
+                  description: Searches for Music
+                  href: https://lidatube.alexlebens.net
+                  siteMonitor: http://lidatube.lidatube:80
+                  statusStyle: dot
               - slskd:
                   icon: sh-slskd.webp
                   description: slskd
@@ -674,6 +680,12 @@ homepage:
                   href: https://shelfmark.alexlebens.net
                   siteMonitor: http://shelfmark.shelfmark:80
                   statusStyle: dot
+              - Ephemera:
+                  icon: sh-ephemera.webp
+                  description: Books
+                  href: https://ephemera.alexlebens.net
+                  siteMonitor: http://ephemera.ephemera:80
+                  statusStyle: dot
           - Other Homes:
               - Dev:
                   icon: sh-homepage.webp

clusters/cl01tl/helm/huntarr/Chart.yaml

@@ -22,5 +22,5 @@ dependencies:
     version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/huntarr.png
-# renovate: datasource=github-releases depName=plexguide/huntarr
+# renovate: github=plexguide/Huntarr.io
-appVersion: 9.2.1
+appVersion: 8.2.10

clusters/cl01tl/helm/huntarr/values.yaml

@@ -9,7 +9,7 @@ huntarr:
         main:
           image:
             repository: ghcr.io/plexguide/huntarr
-            tag: 9.2.1
+            tag: 8.2.11
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/immich/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.5.0
+  version: 7.4.5
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.4
+  version: 1.0.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:c2363283e3c7614dbb15fa6f5436716e435fa18f2ecd08dca1ac82bb01ab0696
+digest: sha256:f72a93b81d636911a34bae2cf88f77fbe8c793a1cbe6371996bb0c907b7c8ac3
-generated: "2026-02-03T20:36:59.006280506Z"
+generated: "2026-01-16T18:47:28.749588457Z"

clusters/cl01tl/helm/immich/Chart.yaml

@@ -20,15 +20,15 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.5.0
+    version: 7.4.5
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
-    version: 1.0.4
+    version: 1.0.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data
     version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/immich.png
-# renovate: datasource=github-releases depName=immich-app/immich
+# renovate: github=immich-app/immich
-appVersion: v2.5.3
+appVersion: v2.3.1

clusters/cl01tl/helm/immich/values.yaml

@@ -9,7 +9,7 @@ immich:
         main:
           image:
             repository: ghcr.io/immich-app/immich-server
-            tag: v2.5.3
+            tag: v2.4.1
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/intel-device-plugin/Chart.yaml

@@ -22,5 +22,5 @@ dependencies:
     version: 0.34.1
     repository: https://intel.github.io/helm-charts/
 icon: https://avatars.githubusercontent.com/u/17888862?s=48&v=4
-# renovate: datasource=github-releases depName=intel/intel-device-plugins-for-kubernetes
+# renovate: github=intel/intel-device-plugins-for-kubernetes
-appVersion: 0.34.1
+appVersion: 0.34.0

clusters/cl01tl/helm/jellyfin/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: meilisearch
   repository: https://meilisearch.github.io/meilisearch-kubernetes
-  version: 0.25.1
+  version: 0.23.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:4b8625f5a6ccb09509e78b76508f87ac2b759ca8d02ed6d94937e8047458ce20
+digest: sha256:c31127c41d18fc2dbd0cd89968ea7df28ddc2548e629c5861124eeaa5ba6b246
-generated: "2026-02-03T18:05:45.036614395Z"
+generated: "2026-01-20T16:01:53.343188952Z"

clusters/cl01tl/helm/jellyfin/Chart.yaml

@@ -25,12 +25,12 @@ dependencies:
     repository: https://bjw-s-labs.github.io/helm-charts/
     version: 4.6.2
   - name: meilisearch
-    version: 0.25.1
+    version: 0.23.0
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: volsync-target
     alias: volsync-target-config
     version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/jellyfin.png
-# renovate: datasource=github-releases depName=jellyfin/jellyfin
+# renovate: github=jellyfin/jellyfin
-appVersion: 10.11.6
+appVersion: 10.11.4

clusters/cl01tl/helm/jellyfin/values.yaml

@@ -28,7 +28,7 @@ jellyfin:
         exporter:
           image:
             repository: rebelcore/jellyfin-exporter
-            tag: v1.4.0
+            tag: v1.3.9
             pullPolicy: IfNotPresent
           args:
             - '--jellyfin.address=http://127.0.0.1:8096'

clusters/cl01tl/helm/jellystat/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.5.0
+  version: 7.4.5
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:74690c7f1feeb817a36cb456e7454c45dca9d030e48e2f17b1516117fd14174a
+digest: sha256:928455407a1a4edef66f133342b0a5c0bc8e7cd2eeabdf5995615883114badef
-generated: "2026-01-23T00:38:03.74023713Z"
+generated: "2026-01-16T18:47:56.158342425Z"

clusters/cl01tl/helm/jellystat/Chart.yaml

@@ -21,12 +21,12 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.5.0
+    version: 7.4.5
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data
     version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/jellystat.png
-# renovate: datasource=github-releases depName=CyferShepard/Jellystat
+# renovate: github=CyferShepard/Jellystat
-appVersion: 1.1.7
+appVersion: 1.1.6

clusters/cl01tl/helm/karakeep/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.6.2
 - name: meilisearch
   repository: https://meilisearch.github.io/meilisearch-kubernetes
-  version: 0.25.1
+  version: 0.23.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.2.2
+  version: 2.1.9
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:5b1948702805bb46749615b98629185d495a8ff1d9d9e6bc52c972524fb6d2fa
+digest: sha256:526ebcfdf6c7e99c16562dc841ea96c602dd3dd90fc7a1fe6bd2d8147b71ecca
-generated: "2026-02-03T18:06:00.958200599Z"
+generated: "2026-01-20T16:02:05.482993485Z"

clusters/cl01tl/helm/karakeep/Chart.yaml

@@ -22,15 +22,15 @@ dependencies:
     repository: https://bjw-s-labs.github.io/helm-charts/
     version: 4.6.2
   - name: meilisearch
-    version: 0.25.1
+    version: 0.23.0
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.2.2
+    version: 2.1.9
   - name: volsync-target
     alias: volsync-target-data
     version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/webp/karakeep.webp
-# renovate: datasource=github-releases depName=karakeep-app/karakeep
+# renovate: github=karakeep-app/karakeep
-appVersion: 0.30.0
+appVersion: 0.29.1

clusters/cl01tl/helm/kiwix/Chart.yaml

@@ -18,5 +18,5 @@ dependencies:
     repository: https://bjw-s-labs.github.io/helm-charts/
     version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kiwix-dark.png
-# renovate: datasource=github-releases depName=kiwix/kiwix-tools
+# renovate: github=kiwix/kiwix-tools
 appVersion: 3.8.1