Update ollama/ollama Docker tag to v0.13.0

2025-11-21 12:03:07 +00:00
66 changed files with 89 additions and 156 deletions
--- a/.gitea/workflows/lint-test-docker-pull.yaml
+++ b/.gitea/workflows/lint-test-docker-pull.yaml
@@ -13,7 +13,7 @@ jobs:
    runs-on: ubuntu-js
    steps:
      - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v5
        with:
          fetch-depth: 0

--- a/.gitea/workflows/lint-test-docker-push.yaml
+++ b/.gitea/workflows/lint-test-docker-push.yaml
@@ -13,7 +13,7 @@ jobs:
    runs-on: ubuntu-js
    steps:
      - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v5
        with:
          fetch-depth: 0

--- a/.gitea/workflows/lint-test-helm-pull.yaml
+++ b/.gitea/workflows/lint-test-helm-pull.yaml
@@ -13,7 +13,7 @@ jobs:
    runs-on: ubuntu-js
    steps:
      - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v5
        with:
          fetch-depth: 0

--- a/.gitea/workflows/lint-test-helm-push.yaml
+++ b/.gitea/workflows/lint-test-helm-push.yaml
@@ -13,7 +13,7 @@ jobs:
    runs-on: ubuntu-js
    steps:
      - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v5
        with:
          fetch-depth: 0

--- a/.gitea/workflows/renovate.yaml
+++ b/.gitea/workflows/renovate.yaml
@@ -16,7 +16,7 @@ jobs:
    container: ghcr.io/renovatebot/renovate:42
    steps:
      - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v5

      - name: Renovate
        run: renovate
--- a/clusters/cl01tl/applications/audiobookshelf/values.yaml
+++ b/clusters/cl01tl/applications/audiobookshelf/values.yaml
@@ -21,7 +21,7 @@ audiobookshelf:
        apprise-api:
          image:
            repository: caronc/apprise
-            tag: 1.2.5
+            tag: 1.2.2
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/applications/booklore/templates/external-secret.yaml
+++ b/clusters/cl01tl/applications/booklore/templates/external-secret.yaml
@@ -20,29 +20,6 @@ spec:
        metadataPolicy: None
        property: password

---
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: booklore-data-replication-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: booklore-data-replication-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: psk.txt
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/booklore/replication
-        metadataPolicy: None
-        property: psk.txt
-
 ---
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
--- a/clusters/cl01tl/applications/booklore/templates/namespace.yaml
+++ b/clusters/cl01tl/applications/booklore/templates/namespace.yaml
@@ -1,10 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: booklore
-  annotations:
-    volsync.backube/privileged-movers: "true"
-  labels:
-    app.kubernetes.io/name: booklore
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
--- a/clusters/cl01tl/applications/booklore/templates/replication-destination.yaml
+++ b/clusters/cl01tl/applications/booklore/templates/replication-destination.yaml
@@ -1,15 +0,0 @@
-apiVersion: volsync.backube/v1alpha1
-kind: ReplicationDestination
-metadata:
-  name: booklore-data-replication-destination
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: booklore-data-replication-destination
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  rsyncTLS:
-    copyMethod: Direct
-    accessModes: ["ReadWriteMany"]
-    destinationPVC: booklore-books-nfs-storage
-    keySecret: booklore-data-replication-secret
--- a/clusters/cl01tl/applications/booklore/templates/replication-source.yaml
+++ b/clusters/cl01tl/applications/booklore/templates/replication-source.yaml
@@ -1,24 +1,5 @@
 apiVersion: volsync.backube/v1alpha1
 kind: ReplicationSource
-metadata:
-  name: booklore-data-replication-source
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: booklore-data-replication-source
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  sourcePVC: booklore-data
-  trigger:
-    schedule: "0 0 * * *"
-  rsyncTLS:
-    keySecret: booklore-data-replication-secret
-    address: volsync-rsync-tls-dst-booklore-data-replication-destination
-    copyMethod: Snapshot
-
---
-apiVersion: volsync.backube/v1alpha1
-kind: ReplicationSource
 metadata:
  name: booklore-config-backup-source
  namespace: {{ .Release.Namespace }}
--- a/clusters/cl01tl/applications/booklore/values.yaml
+++ b/clusters/cl01tl/applications/booklore/values.yaml
@@ -60,19 +60,19 @@ booklore:
          main:
            - path: /data
              readOnly: false
-    books-import:
-      type: emptyDir
+    books:
+      existingClaim: booklore-books-nfs-storage
      advancedMounts:
        main:
          main:
-            - path: /bookdrop
+            - path: /books
              readOnly: false
-    ingest:
+    books-import:
      existingClaim: booklore-books-import-nfs-storage
      advancedMounts:
        main:
          main:
-            - path: /bookdrop/ingest
+            - path: /bookdrop
              readOnly: false
 mariadb-cluster:
  mariadb:
--- a/clusters/cl01tl/applications/calibre-web-automated/values.yaml
+++ b/clusters/cl01tl/applications/calibre-web-automated/values.yaml
@@ -55,7 +55,7 @@ calibre-web-automated:
        bypass:
          image:
            repository: ghcr.io/sarperavci/cloudflarebypassforscraping
-            tag: latest@sha256:fc8443dd96450ab10ed455a05397c8a17bab89b8408b7cbb6242fa6e4fb9edf5
+            tag: latest@sha256:53b50a04bc9bc70cac350040a13bb23e9f31de59ca94d50d0bf8e4c50a73c656
            pullPolicy: IfNotPresent
          resources:
            requests:
--- a/clusters/cl01tl/applications/code-server/Chart.yaml
+++ b/clusters/cl01tl/applications/code-server/Chart.yaml
@@ -23,6 +23,6 @@ dependencies:
  - name: cloudflared
    alias: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.23.0
+    version: 1.22.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/visual-studio-code.png
 appVersion: 4.100.2
--- a/clusters/cl01tl/applications/code-server/values.yaml
+++ b/clusters/cl01tl/applications/code-server/values.yaml
@@ -9,7 +9,7 @@ code-server:
        main:
          image:
            repository: ghcr.io/linuxserver/code-server
-            tag: 4.106.2@sha256:a98afdbcb59559f11e5e8df284062e55da1076b2e470e13db4aae133ea82bad0
+            tag: 4.105.1@sha256:f01693e529a6c4db98deb4bb28bf2655a403489831e962e6cc0b2c5f89f220f6
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/applications/directus/Chart.yaml
+++ b/clusters/cl01tl/applications/directus/Chart.yaml
@@ -24,7 +24,7 @@ dependencies:
  - name: cloudflared
    alias: cloudflared-directus
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.23.0
+    version: 1.22.2
  - name: postgres-cluster
    alias: postgres-17-cluster
    version: 6.15.0
--- a/clusters/cl01tl/applications/directus/values.yaml
+++ b/clusters/cl01tl/applications/directus/values.yaml
@@ -9,7 +9,7 @@ directus:
        main:
          image:
            repository: directus/directus
-            tag: 11.13.4
+            tag: 11.13.3
            pullPolicy: IfNotPresent
          env:
            - name: PUBLIC_URL
--- a/clusters/cl01tl/applications/element-web/Chart.yaml
+++ b/clusters/cl01tl/applications/element-web/Chart.yaml
@@ -22,6 +22,6 @@ dependencies:
  - name: cloudflared
    alias: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.23.0
+    version: 1.22.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/element.png
 appVersion: v1.11.100
--- a/clusters/cl01tl/applications/ephemera/templates/persistent-volume-claim.yaml
+++ b/clusters/cl01tl/applications/ephemera/templates/persistent-volume-claim.yaml
@@ -1,14 +1,14 @@
 apiVersion: v1
 kind: PersistentVolumeClaim
 metadata:
-  name: ephemera-import-nfs-storage
+  name: ephemera-nfs-storage
  namespace: {{ .Release.Namespace }}
  labels:
-    app.kubernetes.io/name: ephemera-import-nfs-storage
+    app.kubernetes.io/name: ephemera-nfs-storage
    app.kubernetes.io/instance: {{ .Release.Name }}
    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
-  volumeName: ephemera-import-nfs-storage
+  volumeName: ephemera-nfs-storage
  storageClassName: nfs-client
  accessModes:
    - ReadWriteMany
--- a/clusters/cl01tl/applications/ephemera/templates/persistent-volume.yaml
+++ b/clusters/cl01tl/applications/ephemera/templates/persistent-volume.yaml
@@ -1,10 +1,10 @@
 apiVersion: v1
 kind: PersistentVolume
 metadata:
-  name: ephemera-import-nfs-storage
+  name: ephemera-nfs-storage
  namespace: {{ .Release.Namespace }}
  labels:
-    app.kubernetes.io/name: ephemera-import-nfs-storage
+    app.kubernetes.io/name: ephemera-nfs-storage
    app.kubernetes.io/instance: {{ .Release.Name }}
    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
--- a/clusters/cl01tl/applications/ephemera/values.yaml
+++ b/clusters/cl01tl/applications/ephemera/values.yaml
@@ -14,11 +14,11 @@ ephemera:
          env:
            - name: AA_BASE_URL
              value: https://annas-archive.org
-            # - name: AA_API_KEY
-            #   valueFrom:
-            #     secretKeyRef:
-            #       name: ephemera-key-secret
-            #       key: key
+            - name: AA_API_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: ephemera-key-secret
+                  key: key
            - name: FLARESOLVERR_URL
              value: http://127.0.0.1:8191
            - name: LG_BASE_URL
@@ -52,7 +52,7 @@ ephemera:
        apprise-api:
          image:
            repository: caronc/apprise
-            tag: 1.2.5
+            tag: 1.2.2
            pullPolicy: IfNotPresent
          env:
            - name: TZ
@@ -98,8 +98,8 @@ ephemera:
          main:
            - path: /app/downloads
              readOnly: false
-    ingest:
-      existingClaim: ephemera-import-nfs-storage
+    books-import:
+      existingClaim: ephemera-nfs-storage
      advancedMounts:
        main:
          main:
--- a/clusters/cl01tl/applications/freshrss/Chart.yaml
+++ b/clusters/cl01tl/applications/freshrss/Chart.yaml
@@ -24,7 +24,7 @@ dependencies:
  - name: cloudflared
    alias: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.23.0
+    version: 1.22.2
  - name: postgres-cluster
    alias: postgres-17-cluster
    version: 6.15.0
--- a/clusters/cl01tl/applications/home-assistant/values.yaml
+++ b/clusters/cl01tl/applications/home-assistant/values.yaml
@@ -9,7 +9,7 @@ home-assistant:
        main:
          image:
            repository: ghcr.io/home-assistant/home-assistant
-            tag: 2025.11.3
+            tag: 2025.11.1
            pullPolicy: IfNotPresent
          env:
            - name: TZ
@@ -21,7 +21,7 @@ home-assistant:
        code-server:
          image:
            repository: ghcr.io/linuxserver/code-server
-            tag: 4.106.2@sha256:a98afdbcb59559f11e5e8df284062e55da1076b2e470e13db4aae133ea82bad0
+            tag: 4.105.1@sha256:f01693e529a6c4db98deb4bb28bf2655a403489831e962e6cc0b2c5f89f220f6
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/applications/homepage-dev/Chart.yaml
+++ b/clusters/cl01tl/applications/homepage-dev/Chart.yaml
@@ -22,6 +22,6 @@ dependencies:
  - name: cloudflared
    alias: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.23.0
+    version: 1.22.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/homepage.png
 appVersion: v1.2.0
--- a/clusters/cl01tl/applications/homepage-dev/values.yaml
+++ b/clusters/cl01tl/applications/homepage-dev/values.yaml
@@ -11,7 +11,7 @@ homepage:
        main:
          image:
            repository: ghcr.io/gethomepage/homepage
-            tag: v1.7.0
+            tag: v1.6.1
            pullPolicy: IfNotPresent
          env:
            - name: HOMEPAGE_ALLOWED_HOSTS
--- a/clusters/cl01tl/applications/homepage/values.yaml
+++ b/clusters/cl01tl/applications/homepage/values.yaml
@@ -15,7 +15,7 @@ homepage:
        main:
          image:
            repository: ghcr.io/gethomepage/homepage
-            tag: v1.7.0
+            tag: v1.6.1
            pullPolicy: IfNotPresent
          env:
            - name: HOMEPAGE_ALLOWED_HOSTS
--- a/clusters/cl01tl/applications/jellyfin/values.yaml
+++ b/clusters/cl01tl/applications/jellyfin/values.yaml
@@ -9,7 +9,7 @@ jellyfin:
        main:
          image:
            repository: ghcr.io/jellyfin/jellyfin
-            tag: 10.11.3
+            tag: 10.11.2
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/applications/karakeep/Chart.yaml
+++ b/clusters/cl01tl/applications/karakeep/Chart.yaml
@@ -27,6 +27,6 @@ dependencies:
  - name: cloudflared
    alias: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.23.0
+    version: 1.22.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/webp/karakeep.webp
 appVersion: 0.26.0
--- a/clusters/cl01tl/applications/outline/Chart.yaml
+++ b/clusters/cl01tl/applications/outline/Chart.yaml
@@ -25,7 +25,7 @@ dependencies:
  - name: cloudflared
    alias: cloudflared-outline
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.23.0
+    version: 1.22.2
  - name: postgres-cluster
    alias: postgres-17-cluster
    version: 6.15.0
--- a/clusters/cl01tl/applications/postiz/Chart.yaml
+++ b/clusters/cl01tl/applications/postiz/Chart.yaml
@@ -23,7 +23,7 @@ dependencies:
    version: 4.4.0
  - name: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.23.0
+    version: 1.22.2
  - name: postgres-cluster
    alias: postgres-17-cluster
    version: 6.15.0
--- a/clusters/cl01tl/applications/postiz/values.yaml
+++ b/clusters/cl01tl/applications/postiz/values.yaml
@@ -9,7 +9,7 @@ postiz:
        main:
          image:
            repository: ghcr.io/gitroomhq/postiz-app
-            tag: v2.8.3
+            tag: v2.7.0
            pullPolicy: IfNotPresent
          env:
            - name: MAIN_URL
--- a/clusters/cl01tl/applications/prowlarr/values.yaml
+++ b/clusters/cl01tl/applications/prowlarr/values.yaml
@@ -20,7 +20,7 @@ prowlarr:
        main:
          image:
            repository: ghcr.io/linuxserver/prowlarr
-            tag: 2.3.0@sha256:3dd3a316f60ea4e6714863286549a6ccaf0b8cf4efe5578ce3fe0e85475cb1cf
+            tag: 2.1.5@sha256:643220338204525524db787ff38a607261597f49d1f550694acdb3e908e2b43e
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/applications/searxng/values.yaml
+++ b/clusters/cl01tl/applications/searxng/values.yaml
@@ -9,7 +9,7 @@ searxng:
        main:
          image:
            repository: searxng/searxng
-            tag: latest@sha256:804eb0e37fa051b78b2830ea3d9ae4b9e2a1460eb80f9235c98c3f1a1409d93c
+            tag: latest@sha256:6a4ca3058a439d96805b7340ae84dacce6ade5456c24a1dde0bc6415ad76c1c6
            pullPolicy: IfNotPresent
          env:
            - name: SEARXNG_BASE_URL
@@ -43,7 +43,7 @@ searxng:
        main:
          image:
            repository: searxng/searxng
-            tag: latest@sha256:804eb0e37fa051b78b2830ea3d9ae4b9e2a1460eb80f9235c98c3f1a1409d93c
+            tag: latest@sha256:6a4ca3058a439d96805b7340ae84dacce6ade5456c24a1dde0bc6415ad76c1c6
            pullPolicy: IfNotPresent
          env:
            - name: SEARXNG_BASE_URL
--- a/clusters/cl01tl/applications/site-documentation/Chart.yaml
+++ b/clusters/cl01tl/applications/site-documentation/Chart.yaml
@@ -23,6 +23,6 @@ dependencies:
  - name: cloudflared
    alias: cloudflared-site
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.23.0
+    version: 1.22.2
 icon: https://d21zlbwtcn424f.cloudfront.net/logo-new-round.png
 appVersion: 0.8.1
--- a/clusters/cl01tl/applications/site-documentation/values.yaml
+++ b/clusters/cl01tl/applications/site-documentation/values.yaml
@@ -11,7 +11,7 @@ site-documentation:
        main:
          image:
            repository: harbor.alexlebens.net/images/site-documentation
-            tag: 0.0.3
+            tag: 0.0.2
            pullPolicy: IfNotPresent
          resources:
            requests:
--- a/clusters/cl01tl/applications/site-profile/Chart.yaml
+++ b/clusters/cl01tl/applications/site-profile/Chart.yaml
@@ -23,6 +23,6 @@ dependencies:
  - name: cloudflared
    alias: cloudflared-site
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.23.0
+    version: 1.22.2
 icon: https://d21zlbwtcn424f.cloudfront.net/logo-new-round.png
 appVersion: 2.0.1
--- a/clusters/cl01tl/applications/slskd/values.yaml
+++ b/clusters/cl01tl/applications/slskd/values.yaml
@@ -46,7 +46,7 @@ slskd:
        gluetun:
          image:
            repository: ghcr.io/qdm12/gluetun
-            tag: v3.40.3@sha256:ef4a44819a60469682c7b5e69183e6401171891feaa60186652d292c59e41b30
+            tag: v3.40.0@sha256:2b42bfa046757145a5155acece417b65b4443c8033fb88661a8e9dcf7fda5a00
            pullPolicy: IfNotPresent
          env:
            - name: VPN_SERVICE_PROVIDER
--- a/clusters/cl01tl/applications/sonarr-4k/values.yaml
+++ b/clusters/cl01tl/applications/sonarr-4k/values.yaml
@@ -13,7 +13,7 @@ sonarr-4k:
        main:
          image:
            repository: ghcr.io/linuxserver/sonarr
-            tag: 4.0.16@sha256:2fc9c36769a3f50ab529e7ccc37687d118ab42199b01588573f03b3393cc3223
+            tag: 4.0.16@sha256:4b8a853b76337cd5de5f69961e23b7d0792ce7bf0a8be083dd7202ef670bfc34
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/applications/sonarr-anime/values.yaml
+++ b/clusters/cl01tl/applications/sonarr-anime/values.yaml
@@ -13,7 +13,7 @@ sonarr-anime:
        main:
          image:
            repository: ghcr.io/linuxserver/sonarr
-            tag: 4.0.16@sha256:2fc9c36769a3f50ab529e7ccc37687d118ab42199b01588573f03b3393cc3223
+            tag: 4.0.16@sha256:4b8a853b76337cd5de5f69961e23b7d0792ce7bf0a8be083dd7202ef670bfc34
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/applications/sonarr/values.yaml
+++ b/clusters/cl01tl/applications/sonarr/values.yaml
@@ -13,7 +13,7 @@ sonarr:
        main:
          image:
            repository: ghcr.io/linuxserver/sonarr
-            tag: 4.0.16@sha256:2fc9c36769a3f50ab529e7ccc37687d118ab42199b01588573f03b3393cc3223
+            tag: 4.0.16@sha256:4b8a853b76337cd5de5f69961e23b7d0792ce7bf0a8be083dd7202ef670bfc34
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/applications/tubearchivist/values.yaml
+++ b/clusters/cl01tl/applications/tubearchivist/values.yaml
@@ -40,7 +40,7 @@ tubearchivist:
        gluetun:
          image:
            repository: ghcr.io/qdm12/gluetun
-            tag: v3.40.3@sha256:ef4a44819a60469682c7b5e69183e6401171891feaa60186652d292c59e41b30
+            tag: v3.40.0@sha256:2b42bfa046757145a5155acece417b65b4443c8033fb88661a8e9dcf7fda5a00
            pullPolicy: IfNotPresent
          env:
            - name: VPN_SERVICE_PROVIDER
--- a/clusters/cl01tl/applications/vaultwarden/Chart.yaml
+++ b/clusters/cl01tl/applications/vaultwarden/Chart.yaml
@@ -25,7 +25,7 @@ dependencies:
  - name: cloudflared
    alias: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.23.0
+    version: 1.22.2
  - name: postgres-cluster
    alias: postgres-17-cluster
    version: 6.15.0
--- a/clusters/cl01tl/deployment/argocd/Chart.yaml
+++ b/clusters/cl01tl/deployment/argocd/Chart.yaml
@@ -15,7 +15,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: argo-cd
-    version: 9.1.4
+    version: 9.1.3
    repository: https://argoproj.github.io/argo-helm
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 appVersion: 3.0.0
--- a/clusters/cl01tl/monitoring/kube-prometheus-stack/Chart.yaml
+++ b/clusters/cl01tl/monitoring/kube-prometheus-stack/Chart.yaml
@@ -19,7 +19,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: kube-prometheus-stack
-    version: 79.7.1
+    version: 79.4.1
    repository: oci://ghcr.io/prometheus-community/charts
  - name: app-template
    alias: ntfy-alertmanager
--- a/clusters/cl01tl/monitoring/shelly-plug/values.yaml
+++ b/clusters/cl01tl/monitoring/shelly-plug/values.yaml
@@ -36,7 +36,7 @@ shelly-plug:
        main:
          image:
            repository: php
-            tag: 8.5.0-apache-bookworm
+            tag: 8.4.14-apache-bookworm
            pullPolicy: IfNotPresent
          env:
            - name: SHELLY_HOSTNAME
--- a/clusters/cl01tl/platform/authentik/Chart.yaml
+++ b/clusters/cl01tl/platform/authentik/Chart.yaml
@@ -26,7 +26,7 @@ dependencies:
  - name: cloudflared
    alias: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.23.0
+    version: 1.22.2
  - name: postgres-cluster
    alias: postgres-17-cluster
    version: 6.15.0
--- a/clusters/cl01tl/platform/external-secrets/Chart.yaml
+++ b/clusters/cl01tl/platform/external-secrets/Chart.yaml
@@ -12,7 +12,7 @@ sources:
  - https://github.com/external-secrets/external-secrets/tree/main/deploy/charts/external-secrets
 dependencies:
  - name: external-secrets
-    version: 1.1.0
+    version: 1.0.0
    repository: https://charts.external-secrets.io
 icon: https://avatars.githubusercontent.com/u/68335991?s=48&v=4
 appVersion: 0.17.0
--- a/clusters/cl01tl/platform/gitea/Chart.yaml
+++ b/clusters/cl01tl/platform/gitea/Chart.yaml
@@ -41,7 +41,7 @@ dependencies:
  - name: cloudflared
    alias: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.23.0
+    version: 1.22.2
  - name: postgres-cluster
    alias: postgres-17-cluster
    version: 6.15.0
--- a/clusters/cl01tl/platform/gitea/values.yaml
+++ b/clusters/cl01tl/platform/gitea/values.yaml
@@ -4,7 +4,7 @@ gitea:
  replicaCount: 3
  image:
    repository: gitea/gitea
-    tag: 1.25.2
+    tag: 1.25.1
  service:
    http:
      type: ClusterIP
--- a/clusters/cl01tl/platform/matrix-synapse/Chart.yaml
+++ b/clusters/cl01tl/platform/matrix-synapse/Chart.yaml
@@ -29,7 +29,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: matrix-synapse
-    version: 3.12.15
+    version: 3.12.14
    repository: https://ananace.gitlab.io/charts
  - name: app-template
    alias: matrix-hookshot
@@ -45,11 +45,11 @@ dependencies:
  #   version: 4.0.1
  - name: cloudflared
    alias: cloudflared-synapse
-    version: 1.23.0
+    version: 1.22.2
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: cloudflared
    alias: cloudflared-hookshot
-    version: 1.23.0
+    version: 1.22.2
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: postgres-cluster
    alias: postgres-17-cluster
--- a/clusters/cl01tl/platform/n8n/values.yaml
+++ b/clusters/cl01tl/platform/n8n/values.yaml
@@ -9,7 +9,7 @@ n8n:
        main:
          image:
            repository: ghcr.io/n8n-io/n8n
-            tag: 1.121.2
+            tag: 1.119.1
            pullPolicy: IfNotPresent
          env:
            - name: GENERIC_TIMEZONE
@@ -93,7 +93,7 @@ n8n:
        main:
          image:
            repository: ghcr.io/n8n-io/n8n
-            tag: 1.121.2
+            tag: 1.119.1
            pullPolicy: IfNotPresent
          command:
            - n8n
@@ -188,7 +188,7 @@ n8n:
        main:
          image:
            repository: ghcr.io/n8n-io/n8n
-            tag: 1.121.2
+            tag: 1.119.1
            pullPolicy: IfNotPresent
          command:
            - n8n
--- a/clusters/cl01tl/platform/ollama/values.yaml
+++ b/clusters/cl01tl/platform/ollama/values.yaml
@@ -117,7 +117,7 @@ ollama:
        main:
          image:
            repository: ghcr.io/open-webui/open-webui
-            tag: v0.6.37
+            tag: v0.6.36
            pullPolicy: IfNotPresent
          env:
            - name: ENV
--- a/clusters/cl01tl/platform/qbittorrent/values.yaml
+++ b/clusters/cl01tl/platform/qbittorrent/values.yaml
@@ -28,7 +28,7 @@ qbittorrent:
        qbittorrent:
          image:
            repository: ghcr.io/linuxserver/qbittorrent
-            tag: 5.1.4@sha256:26a08cd60d81e632aba8947b2c64dfd5f870a5f4a837ec4abedf2e1d174df891
+            tag: 5.1.2@sha256:7034f73a3c6fa4ea40fd67df462939d1665d765231b572523921c98c2db5362e
            pullPolicy: IfNotPresent
          env:
            - name: TZ
@@ -54,7 +54,7 @@ qbittorrent:
        gluetun:
          image:
            repository: ghcr.io/qdm12/gluetun
-            tag: v3.40.3@sha256:ef4a44819a60469682c7b5e69183e6401171891feaa60186652d292c59e41b30
+            tag: v3.40.0@sha256:2b42bfa046757145a5155acece417b65b4443c8033fb88661a8e9dcf7fda5a00
            pullPolicy: IfNotPresent
          env:
            - name: VPN_SERVICE_PROVIDER
@@ -135,7 +135,7 @@ qbittorrent:
        qbit-manage:
          image:
            repository: ghcr.io/stuffanthings/qbit_manage
-            tag: v4.6.4
+            tag: v4.6.3
            pullPolicy: IfNotPresent
          env:
            - name: TZ
@@ -157,7 +157,7 @@ qbittorrent:
        apprise-api:
          image:
            repository: caronc/apprise
-            tag: 1.2.5
+            tag: 1.2.2
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/services/traefik/Chart.yaml
+++ b/clusters/cl01tl/services/traefik/Chart.yaml
@@ -15,7 +15,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: traefik
-    version: 37.4.0
+    version: 37.3.0
    repository: https://traefik.github.io/charts
  # enable pending:
  # https://github.com/traefik/traefik-helm-chart/pull/1340
--- a/clusters/cl01tl/storage/rook-ceph/Chart.yaml
+++ b/clusters/cl01tl/storage/rook-ceph/Chart.yaml
@@ -24,6 +24,6 @@ dependencies:
  - name: cloudflared
    alias: cloudflared-rgw
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 1.23.0
+    version: 1.22.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ceph.png
 appVersion: v1.17.1
--- a/clusters/cl01tl/storage/volsync/Chart.yaml
+++ b/clusters/cl01tl/storage/volsync/Chart.yaml
@@ -16,7 +16,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: volsync
-    version: 0.14.0
+    version: 0.13.1
    repository: https://backube.github.io/helm-charts/
 icon: https://raw.githubusercontent.com/backube/volsync/main/docs/media/volsync.svg?sanitize=true
 appVersion: 0.12.1
--- a/hosts/ps08rp/blocky/compose.yaml
+++ b/hosts/ps08rp/blocky/compose.yaml
@@ -1,7 +1,7 @@
 ---
 services:
    tailscale-blocky:
-        image: ghcr.io/tailscale/tailscale:v1.90.8
+        image: ghcr.io/tailscale/tailscale:v1.90.6
        container_name: tailscale-blocky
        cap_add:
            - net_admin
--- a/hosts/ps08rp/traefik/compose.yaml
+++ b/hosts/ps08rp/traefik/compose.yaml
@@ -1,7 +1,7 @@
 ---
 services:
    traefik:
-        image: ghcr.io/traefik/traefik:v3.6.2
+        image: ghcr.io/traefik/traefik:v3.6.0
        container_name: traefik
        command:
            - "--global.checkNewVersion=false"
--- a/hosts/ps09rp/blocky/compose.yaml
+++ b/hosts/ps09rp/blocky/compose.yaml
@@ -1,7 +1,7 @@
 ---
 services:
    tailscale-blocky:
-        image: ghcr.io/tailscale/tailscale:v1.90.8
+        image: ghcr.io/tailscale/tailscale:v1.90.6
        container_name: tailscale-blocky
        cap_add:
            - net_admin
--- a/hosts/ps09rp/traefik/compose.yaml
+++ b/hosts/ps09rp/traefik/compose.yaml
@@ -1,7 +1,7 @@
 ---
 services:
    traefik:
-        image: ghcr.io/traefik/traefik:v3.6.2
+        image: ghcr.io/traefik/traefik:v3.6.0
        container_name: traefik
        command:
            - "--global.checkNewVersion=false"
--- a/hosts/ps10rp/blocky/compose.yaml
+++ b/hosts/ps10rp/blocky/compose.yaml
@@ -1,7 +1,7 @@
 ---
 services:
    tailscale-blocky:
-        image: ghcr.io/tailscale/tailscale:v1.90.8
+        image: ghcr.io/tailscale/tailscale:v1.90.6
        container_name: tailscale-blocky
        cap_add:
            - net_admin
--- a/hosts/ps10rp/garage/compose.yaml
+++ b/hosts/ps10rp/garage/compose.yaml
@@ -1,6 +1,6 @@
 services:
    tailscale-garage:
-        image: ghcr.io/tailscale/tailscale:v1.90.8
+        image: ghcr.io/tailscale/tailscale:v1.90.6
        container_name: tailscale-garage
        cap_add:
            - net_admin
@@ -20,7 +20,7 @@ services:
            - /dev/net/tun:/dev/net/tun

    tailscale-garage-ui:
-        image: ghcr.io/tailscale/tailscale:v1.90.8
+        image: ghcr.io/tailscale/tailscale:v1.90.6
        container_name: tailscale-garage-ui
        cap_add:
            - net_admin
--- a/hosts/ps10rp/gitea/compose.yaml
+++ b/hosts/ps10rp/gitea/compose.yaml
@@ -1,6 +1,6 @@
 services:
    tailscale-gitea:
-        image: ghcr.io/tailscale/tailscale:v1.90.8
+        image: ghcr.io/tailscale/tailscale:v1.90.6
        container_name: tailscale-gitea
        cap_add:
            - net_admin
@@ -33,7 +33,7 @@ services:
            - postgresql:/var/lib/postgresql/data

    gitea:
-        image: gitea/gitea:1.25.2
+        image: gitea/gitea:1.25.1
        container_name: gitea
        depends_on:
            - postgresql
--- a/hosts/ps10rp/homepage/compose.yaml
+++ b/hosts/ps10rp/homepage/compose.yaml
@@ -1,7 +1,7 @@
 ---
 services:
    tailscale-homepage:
-        image: ghcr.io/tailscale/tailscale:v1.90.8
+        image: ghcr.io/tailscale/tailscale:v1.90.6
        container_name: tailscale-homepage
        cap_add:
            - net_admin
@@ -32,7 +32,7 @@ services:
            - /var/run/docker.sock:/var/run/docker.sock:ro

    homepage:
-        image: ghcr.io/gethomepage/homepage:v1.7.0
+        image: ghcr.io/gethomepage/homepage:v1.6.1
        container_name: homepage
        labels:
            traefik.enable: true
--- a/hosts/ps10rp/node-exporter/compose.yaml
+++ b/hosts/ps10rp/node-exporter/compose.yaml
@@ -1,7 +1,7 @@
 ---
 services:
    tailscale-node-exporter:
-        image: ghcr.io/tailscale/tailscale:v1.90.8
+        image: ghcr.io/tailscale/tailscale:v1.90.6
        container_name: tailscale-node-exporter
        cap_add:
            - net_admin
--- a/hosts/ps10rp/tailscale-subnet/compose.yaml
+++ b/hosts/ps10rp/tailscale-subnet/compose.yaml
@@ -1,7 +1,7 @@
 ---
 services:
    tailscale:
-        image: ghcr.io/tailscale/tailscale:v1.90.8
+        image: ghcr.io/tailscale/tailscale:v1.90.6
        container_name: tailscale-subnet
        cap_add:
            - net_admin
--- a/hosts/ps10rp/traefik/compose.yaml
+++ b/hosts/ps10rp/traefik/compose.yaml
@@ -1,7 +1,7 @@
 ---
 services:
    tailscale-traefik:
-        image: ghcr.io/tailscale/tailscale:v1.90.8
+        image: ghcr.io/tailscale/tailscale:v1.90.6
        container_name: tailscale-traefik
        cap_add:
            - net_admin
@@ -20,7 +20,7 @@ services:
            - /dev/net/tun:/dev/net/tun

    traefik:
-        image: ghcr.io/traefik/traefik:v3.6.2
+        image: ghcr.io/traefik/traefik:v3.6.0
        container_name: traefik
        command:
            - "--global.checkNewVersion=false"