chore(deps): update g33kphr33k/musicgrabber docker tag to v2.2.1

clusters/cl01tl/helm/authentik/Chart.lock

@@ -1,7 +1,7 @@
 dependencies:
 - name: authentik
   repository: https://charts.goauthentik.io/
-  version: 2026.2.0
+  version: 2025.12.4
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.3.0
@@ -11,5 +11,5 @@ dependencies:
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.0.4
-digest: sha256:c8602f093e78af87eac0c99d622f0815ec89ebc1305e097ca4d6f72b003ae57c
+digest: sha256:9e8f037f9d581ad83edde8d4a68672860cbe9d0192b10c37708710315a017469
-generated: "2026-02-25T03:06:14.95787836Z"
+generated: "2026-02-21T13:54:33.590892-06:00"

clusters/cl01tl/helm/authentik/Chart.yaml

@@ -21,7 +21,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: authentik
-    version: 2026.2.0
+    version: 2025.12.4
     repository: https://charts.goauthentik.io/
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts

clusters/cl01tl/helm/authentik/values.yaml

@@ -72,7 +72,7 @@ postgres-18-cluster:
   backup:
     objectStore:
       - name: garage-local
-        index: 2
+        index: 1
         destinationBucket: postgres-backups
         externalSecretCredentialPath: /garage/home-infra/postgres-backups
         isWALArchiver: true
@@ -91,7 +91,7 @@ postgres-18-cluster:
       #   isWALArchiver: false
     scheduledBackups:
       - name: live-backup
-        suspend: true
+        suspend: false
         immediate: true
         schedule: "0 0 0 * * *"
         backupName: garage-local

clusters/cl01tl/helm/bazarr/values.yaml

@@ -15,7 +15,7 @@ bazarr:
         main:
           image:
             repository: ghcr.io/linuxserver/bazarr
-            tag: 1.5.5@sha256:c381924dcfd79930e8f3ee75e024671185b810b0f71c984aa8712854c74c1bbb
+            tag: 1.5.5@sha256:1cf40186b1bc35bec87f4e4892d5d8c06086da331010be03e3459a86869c5e74
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/booklore/Chart.yaml

@@ -30,4 +30,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/booklore.png
 # renovate: datasource=github-releases depName=booklore-app/BookLore
-appVersion: v2.0.2
+appVersion: v1.18.5

clusters/cl01tl/helm/booklore/values.yaml

@@ -9,7 +9,7 @@ booklore:
         main:
           image:
             repository: ghcr.io/booklore-app/booklore
-            tag: v2.0.2
+            tag: v1.18.5
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/elastic-operator/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: eck-operator
   repository: https://helm.elastic.co
-  version: 3.3.1
+  version: 3.3.0
-digest: sha256:8585f3ea3e4cafc4ff2969ea7e797017b7cfe4becb3385f0b080725908c02f09
+digest: sha256:d2b00de6c03bf7624fdf496b326262149a2d2635012f14e900ed0724545c95d9
-generated: "2026-02-25T18:48:55.77034549Z"
+generated: "2026-02-03T18:05:00.461644575Z"

clusters/cl01tl/helm/elastic-operator/Chart.yaml

@@ -15,8 +15,8 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: eck-operator
-    version: 3.3.1
+    version: 3.3.0
     repository: https://helm.elastic.co
 icon: https://helm.elastic.co/icons/eck.png
 # renovate: datasource=github-releases depName=elastic/cloud-on-k8s
-appVersion: v3.3.1
+appVersion: v3.3.0

clusters/cl01tl/helm/element-web/Chart.yaml

@@ -24,4 +24,4 @@ dependencies:
     version: 2.3.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/element.png
 # renovate: datasource=github-releases depName=element-hq/element-web
-appVersion: v1.12.11
+appVersion: v1.12.10

clusters/cl01tl/helm/element-web/values.yaml

@@ -2,7 +2,7 @@ element-web:
   replicaCount: 1
   image:
     repository: vectorim/element-web
-    tag: v1.12.11
+    tag: v1.12.10
     pullPolicy: IfNotPresent
   defaultServer:
     url: https://matrix.alexlebens.dev

clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: kube-prometheus-stack
   repository: oci://ghcr.io/prometheus-community/charts
-  version: 82.4.0
+  version: 82.2.1
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
   version: 4.6.2
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.0.4
-digest: sha256:24214c0bc1e6aed9954385aa61b403a7fa4b4e92bac09777504635cba98735ba
+digest: sha256:710641602680cf6dd43d4651137e82758972e74a5f04d5d06934a7bf44f71a19
-generated: "2026-02-25T22:30:48.585600926Z"
+generated: "2026-02-23T18:03:59.859289978Z"

clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml

@@ -20,7 +20,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: kube-prometheus-stack
-    version: 82.4.0
+    version: 82.2.1
     repository: oci://ghcr.io/prometheus-community/charts
   - name: app-template
     alias: ntfy-alertmanager

clusters/cl01tl/helm/rook-ceph/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: rook-ceph
   repository: https://charts.rook.io/release
-  version: v1.19.2
+  version: v1.19.1
 - name: rook-ceph-cluster
   repository: https://charts.rook.io/release
-  version: v1.19.2
+  version: v1.19.1
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.3.0
-digest: sha256:32298e3004a4b411ded3a82a2eea31b350b8e8909bd193538fa3c6be0b8a0e94
+digest: sha256:99e0dea26a3c15cea01fb21fd0db36d3bef27de332858e5126f1b36310c2901e
-generated: "2026-02-24T20:18:18.200779597Z"
+generated: "2026-02-07T00:39:02.693159674Z"

clusters/cl01tl/helm/rook-ceph/Chart.yaml

@@ -16,10 +16,10 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: rook-ceph
-    version: v1.19.2
+    version: v1.19.1
     repository: https://charts.rook.io/release
   - name: rook-ceph-cluster
-    version: v1.19.2
+    version: v1.19.1
     repository: https://charts.rook.io/release
   - name: cloudflared
     alias: cloudflared-rgw
@@ -27,4 +27,4 @@ dependencies:
     version: 2.3.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ceph.png
 # renovate: datasource=github-releases depName=rook/rook
-appVersion: v1.19.2
+appVersion: v1.19.1

clusters/cl01tl/helm/sonarr-4k/templates/middleware.yaml

@@ -1,26 +0,0 @@
-apiVersion: traefik.io/v1alpha1
-kind: Middleware
-metadata:
-  name: oidc-forward-auth
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: oidc-forward-auth
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  forwardAuth:
-    address: http://ak-outpost-traefik-proxy-auth.authentik.svc.cluster.local:9000/outpost.goauthentik.io/auth/traefik
-    trustForwardHeader: true
-    authResponseHeaders:
-      - X-authentik-username
-      - X-authentik-groups
-      - X-authentik-entitlements
-      - X-authentik-email
-      - X-authentik-name
-      - X-authentik-uid
-      - X-authentik-jwt
-      - X-authentik-meta-jwks
-      - X-authentik-meta-outpost
-      - X-authentik-meta-provider
-      - X-authentik-meta-app
-      - X-authentik-meta-version

clusters/cl01tl/helm/sonarr-4k/values.yaml

@@ -88,12 +88,6 @@ sonarr-4k:
               name: sonarr-4k
               port: 80
               weight: 100
-          filters:
-            - type: ExtensionRef
-              extensionRef:
-                group: traefik.io
-                kind: Middleware
-                name: oidc-forward-auth
           matches:
             - path:
                 type: PathPrefix

clusters/cl01tl/helm/tailscale-operator/Chart.yaml

@@ -21,4 +21,4 @@ dependencies:
     repository: https://pkgs.tailscale.com/helmcharts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/tailscale-light.png
 # renovate: datasource=github-releases depName=tailscale/tailscale
-appVersion: v1.94.2
+appVersion: v1.94.1

clusters/cl01tl/helm/talos/values.yaml

@@ -69,7 +69,7 @@ etcd-backup:
         s3-prune:
           image:
             repository: d3fk/s3cmd
-            tag: latest@sha256:e83b0838f1bb144bc90fa98aa846cb36db62bc737832f3c5e02825b514059ffd
+            tag: latest@sha256:56a7122d9edbb82b372f10dc06809b7ae569ec7906f6b83b7d7b27fa8d638da2
             pullPolicy: IfNotPresent
           command:
             - /bin/sh
@@ -155,7 +155,7 @@ etcd-backup:
         s3-prune:
           image:
             repository: d3fk/s3cmd
-            tag: latest@sha256:e83b0838f1bb144bc90fa98aa846cb36db62bc737832f3c5e02825b514059ffd
+            tag: latest@sha256:56a7122d9edbb82b372f10dc06809b7ae569ec7906f6b83b7d7b27fa8d638da2
             pullPolicy: IfNotPresent
           command:
             - /bin/sh
@@ -241,7 +241,7 @@ etcd-backup:
         s3-prune:
           image:
             repository: d3fk/s3cmd
-            tag: latest@sha256:e83b0838f1bb144bc90fa98aa846cb36db62bc737832f3c5e02825b514059ffd
+            tag: latest@sha256:56a7122d9edbb82b372f10dc06809b7ae569ec7906f6b83b7d7b27fa8d638da2
             pullPolicy: IfNotPresent
           command:
             - /bin/sh

clusters/cl01tl/helm/vault/values.yaml

@@ -187,7 +187,7 @@ snapshot:
         s3-backup-local:
           image:
             repository: d3fk/s3cmd
-            tag: latest@sha256:e83b0838f1bb144bc90fa98aa846cb36db62bc737832f3c5e02825b514059ffd
+            tag: latest@sha256:56a7122d9edbb82b372f10dc06809b7ae569ec7906f6b83b7d7b27fa8d638da2
             pullPolicy: IfNotPresent
           command:
             - /bin/sh
@@ -208,7 +208,7 @@ snapshot:
         s3-backup-remote:
           image:
             repository: d3fk/s3cmd
-            tag: latest@sha256:e83b0838f1bb144bc90fa98aa846cb36db62bc737832f3c5e02825b514059ffd
+            tag: latest@sha256:56a7122d9edbb82b372f10dc06809b7ae569ec7906f6b83b7d7b27fa8d638da2
             pullPolicy: IfNotPresent
           command:
             - /bin/sh
@@ -229,7 +229,7 @@ snapshot:
         s3-backup-external:
           image:
             repository: d3fk/s3cmd
-            tag: latest@sha256:e83b0838f1bb144bc90fa98aa846cb36db62bc737832f3c5e02825b514059ffd
+            tag: latest@sha256:56a7122d9edbb82b372f10dc06809b7ae569ec7906f6b83b7d7b27fa8d638da2
             pullPolicy: IfNotPresent
           command:
             - /bin/sh