chore(deps): update dependency traefik/traefik to v3.6.10

2026-03-06 22:19:56 +00:00
142 changed files with 589 additions and 796 deletions
--- a/clusters/cl01tl/helm/actual/values.yaml
+++ b/clusters/cl01tl/helm/actual/values.yaml
@@ -81,8 +81,7 @@ volsync-target-data:
    enabled: true
    schedule: 0 8 * * *
  remote:
-    enabled: true
-    schedule: 0 9 * * *
+    enabled: false
  external:
    enabled: true
-    schedule: 0 10 * * *
+    schedule: 0 9 * * *
--- a/clusters/cl01tl/helm/argocd/Chart.lock
+++ b/clusters/cl01tl/helm/argocd/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: argo-cd
  repository: https://argoproj.github.io/argo-helm
-  version: 9.4.10
-digest: sha256:795aad956acef3f5efb8160390caf9b9792b7b4150d3a7984f1c5edbad92dfaa
-generated: "2026-03-10T18:58:35.720448421Z"
+  version: 9.4.7
+digest: sha256:9fc78ed4a6a55f65e3250e687caf67ad09e852eb7b01313e372127e75f451a79
+generated: "2026-03-03T20:05:52.081769174Z"
--- a/clusters/cl01tl/helm/argocd/Chart.yaml
+++ b/clusters/cl01tl/helm/argocd/Chart.yaml
@@ -15,8 +15,8 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: argo-cd
-    version: 9.4.10
+    version: 9.4.7
    repository: https://argoproj.github.io/argo-helm
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 # renovate: datasource=github-releases depName=argoproj/argo-cd
-appVersion: v3.3.3
+appVersion: v3.3.2
--- a/clusters/cl01tl/helm/audiobookshelf/values.yaml
+++ b/clusters/cl01tl/helm/audiobookshelf/values.yaml
@@ -21,7 +21,7 @@ audiobookshelf:
        apprise-api:
          image:
            repository: caronc/apprise
-            tag: v1.3.2
+            tag: v1.3.1
            pullPolicy: IfNotPresent
          env:
            - name: TZ
@@ -127,19 +127,17 @@ volsync-target-config:
    enabled: true
    schedule: 2 8 * * *
  remote:
-    enabled: true
-    schedule: 2 9 * * *
+    enabled: false
  external:
    enabled: true
-    schedule: 2 10 * * *
+    schedule: 2 9 * * *
 volsync-target-metadata:
  pvcTarget: audiobookshelf-metadata
  local:
    enabled: true
    schedule: 4 8 * * *
  remote:
-    enabled: true
-    schedule: 4 9 * * *
+    enabled: false
  external:
    enabled: true
-    schedule: 4 10 * * *
+    schedule: 4 9 * * *
--- a/clusters/cl01tl/helm/authentik/Chart.lock
+++ b/clusters/cl01tl/helm/authentik/Chart.lock
@@ -4,12 +4,12 @@ dependencies:
  version: 2026.2.1
 - name: cloudflared
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.4.0
+  version: 2.3.0
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 7.8.0
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.0
-digest: sha256:fad7059feb4ac80e06cd571a56215d56e4894eba69fb54aaa1e53ced9ec1b2b1
-generated: "2026-03-09T23:06:05.608952158Z"
+  version: 0.3.0
+digest: sha256:750757130cded0cd2cc9b64ffdba961b55252587b653151f8ecb1031839fb9c9
+generated: "2026-03-06T06:33:03.42982917Z"
--- a/clusters/cl01tl/helm/authentik/Chart.yaml
+++ b/clusters/cl01tl/helm/authentik/Chart.yaml
@@ -25,14 +25,14 @@ dependencies:
    repository: https://charts.goauthentik.io/
  - name: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.4.0
+    version: 2.3.0
  - name: postgres-cluster
    alias: postgres-18-cluster
    version: 7.8.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: valkey
    alias: valkey
-    version: 0.4.0
+    version: 0.3.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/authentik.png
 # renovate: datasource=github-releases depName=goauthentik/authentik
--- a/clusters/cl01tl/helm/authentik/values.yaml
+++ b/clusters/cl01tl/helm/authentik/values.yaml
@@ -68,7 +68,7 @@ postgres-18-cluster:
  recovery:
    method: objectStore
    objectStore:
-      index: 2
+      index: 1
  backup:
    objectStore:
      - name: garage-local
@@ -91,7 +91,7 @@ postgres-18-cluster:
      #   isWALArchiver: false
    scheduledBackups:
      - name: live-backup
-        suspend: false
+        suspend: true
        immediate: true
        schedule: "0 0 0 * * *"
        backupName: garage-local
--- a/clusters/cl01tl/helm/backrest/values.yaml
+++ b/clusters/cl01tl/helm/backrest/values.yaml
@@ -111,19 +111,17 @@ volsync-target-data:
    enabled: true
    schedule: 6 8 * * *
  remote:
-    enabled: true
-    schedule: 6 9 * * *
+    enabled: false
  external:
    enabled: true
-    schedule: 6 10 * * *
+    schedule: 6 9 * * *
 volsync-target-config:
  pvcTarget: backrest-config
  local:
    enabled: true
    schedule: 8 8 * * *
  remote:
-    enabled: true
-    schedule: 8 9 * * *
+    enabled: false
  external:
    enabled: true
-    schedule: 8 10 * * *
+    schedule: 8 9 * * *
--- a/clusters/cl01tl/helm/bazarr/values.yaml
+++ b/clusters/cl01tl/helm/bazarr/values.yaml
@@ -15,7 +15,7 @@ bazarr:
        main:
          image:
            repository: ghcr.io/linuxserver/bazarr
-            tag: 1.5.6@sha256:05f9d5b24884f37120453dc1a008a47be244eebec32099ae1bd29032e75b67aa
+            tag: 1.5.6@sha256:94eee5e3e14430b7b144d4556be73963a7daf6f1bddc25586627f426465482ce
            pullPolicy: IfNotPresent
          env:
            - name: TZ
@@ -87,8 +87,7 @@ volsync-target-config:
    enabled: true
    schedule: 10 8 * * *
  remote:
-    enabled: true
-    schedule: 10 9 * * *
+    enabled: false
  external:
    enabled: true
-    schedule: 10 10 * * *
+    schedule: 10 9 * * *
--- a/clusters/cl01tl/helm/blocky/Chart.lock
+++ b/clusters/cl01tl/helm/blocky/Chart.lock
@@ -4,6 +4,6 @@ dependencies:
  version: 4.6.2
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.0
-digest: sha256:a5b0099261d772b24a302a106d106cfa82ac07fa14564141e00cf107d708e859
-generated: "2026-03-09T23:06:16.853255429Z"
+  version: 0.3.0
+digest: sha256:e1300ab60ad8d986a42144940a64196aa282566e8049975a0981e4e6fc93e206
+generated: "2026-03-06T06:33:20.716599953Z"
--- a/clusters/cl01tl/helm/blocky/Chart.yaml
+++ b/clusters/cl01tl/helm/blocky/Chart.yaml
@@ -19,7 +19,7 @@ dependencies:
    version: 4.6.2
  - name: valkey
    alias: valkey
-    version: 0.4.0
+    version: 0.3.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/blocky.png
 # renovate: datasource=github-releases depName=0xerr0r/blocky
--- a/clusters/cl01tl/helm/blocky/values.yaml
+++ b/clusters/cl01tl/helm/blocky/values.yaml
@@ -135,7 +135,6 @@ blocky:
              komodo                          IN      CNAME   traefik-cl01tl
              lidarr                          IN      CNAME   traefik-cl01tl
              mail                            IN      CNAME   traefik-cl01tl
-              movie-roulette                  IN      CNAME   traefik-cl01tl
              music-grabber                   IN      CNAME   traefik-cl01tl
              navidrome                       IN      CNAME   traefik-cl01tl
              ntfy                            IN      CNAME   traefik-cl01tl
@@ -193,42 +192,36 @@ blocky:
                  *.alexlebens.dev
                  *.boreal-beaufort.ts.net
                  *.discord.com
-                  cdn.trackjs.com
              ads:
                - |
                  *.alexlebens.net
                  *.alexlebens.dev
                  *.boreal-beaufort.ts.net
                  *.discord.com
-                  cdn.trackjs.com
              priv:
                - |
                  *.alexlebens.net
                  *.alexlebens.dev
                  *.boreal-beaufort.ts.net
                  *.discord.com
-                  cdn.trackjs.com
              mal:
                - |
                  *.alexlebens.net
                  *.alexlebens.dev
                  *.boreal-beaufort.ts.net
                  *.discord.com
-                  cdn.trackjs.com
              pro:
                - |
                  *.alexlebens.net
                  *.alexlebens.dev
                  *.boreal-beaufort.ts.net
                  *.discord.com
-                  cdn.trackjs.com
              oisd:
                - |
                  *.alexlebens.net
                  *.alexlebens.dev
                  *.boreal-beaufort.ts.net
                  *.discord.com
-                  cdn.trackjs.com
            clientGroupsBlock:
              default:
                - sus
--- a/clusters/cl01tl/helm/booklore/Chart.yaml
+++ b/clusters/cl01tl/helm/booklore/Chart.yaml
@@ -30,4 +30,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/booklore.png
 # renovate: datasource=github-releases depName=booklore-app/BookLore
-appVersion: v2.2.0
+appVersion: v2.0.6
--- a/clusters/cl01tl/helm/booklore/values.yaml
+++ b/clusters/cl01tl/helm/booklore/values.yaml
@@ -9,7 +9,7 @@ booklore:
        main:
          image:
            repository: ghcr.io/booklore-app/booklore
-            tag: v2.2.0
+            tag: v2.0.6
            pullPolicy: IfNotPresent
          env:
            - name: TZ
@@ -225,11 +225,10 @@ volsync-target-config:
    enabled: true
    schedule: 12 8 * * *
  remote:
-    enabled: true
-    schedule: 12 9 * * *
+    enabled: false
  external:
    enabled: true
-    schedule: 12 10 * * *
+    schedule: 12 9 * * *
 volsync-target-data:
  pvcTarget: booklore-data
  local:
@@ -239,11 +238,11 @@ volsync-target-data:
      cacheCapacity: 10Gi
  remote:
    enabled: true
-    schedule: 14 9 * * *
+    schedule: 14 10 * * *
    restic:
      cacheCapacity: 10Gi
  external:
    enabled: true
-    schedule: 14 10 * * *
+    schedule: 14 9 * * *
    restic:
      cacheCapacity: 10Gi
--- a/clusters/cl01tl/helm/cert-manager/Chart.lock
+++ b/clusters/cl01tl/helm/cert-manager/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: cert-manager
  repository: https://charts.jetstack.io
-  version: v1.20.0
-digest: sha256:1543bd17649cb32982de3cce017fcbed1b44c41d50b76c6471b266f33e261c29
-generated: "2026-03-10T16:06:49.332999536Z"
+  version: v1.19.4
+digest: sha256:5c4a0a0568677bfcf4529e6ec6a005957cd1820fd5f1d1f108e74370d409fe88
+generated: "2026-02-24T19:30:44.415585645Z"
--- a/clusters/cl01tl/helm/cert-manager/Chart.yaml
+++ b/clusters/cl01tl/helm/cert-manager/Chart.yaml
@@ -14,8 +14,8 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: cert-manager
-    version: v1.20.0
+    version: v1.19.4
    repository: https://charts.jetstack.io
 icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/cert-manager.png
 # renovate: datasource=github-releases depName=cert-manager/cert-manager
-appVersion: v1.20.0
+appVersion: v1.19.4
--- a/clusters/cl01tl/helm/code-server/Chart.lock
+++ b/clusters/cl01tl/helm/code-server/Chart.lock
@@ -4,9 +4,9 @@ dependencies:
  version: 4.6.2
 - name: cloudflared
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.4.0
+  version: 2.3.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.8.0
-digest: sha256:dee0f52096efc543f4db3a5dc2732fd37ae9b7950b264e399a6e74c2f3e7cee6
-generated: "2026-03-09T22:04:00.58415637Z"
+digest: sha256:13a5bb68bf58c7bf00771a804e3d7291f52e0519b1cf9bece266164dd4bfe5b8
+generated: "2026-03-06T01:06:30.41359289Z"
--- a/clusters/cl01tl/helm/code-server/Chart.yaml
+++ b/clusters/cl01tl/helm/code-server/Chart.yaml
@@ -22,7 +22,7 @@ dependencies:
    version: 4.6.2
  - name: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.4.0
+    version: 2.3.0
  - name: volsync-target
    alias: volsync-target-config
    version: 0.8.0
--- a/clusters/cl01tl/helm/code-server/values.yaml
+++ b/clusters/cl01tl/helm/code-server/values.yaml
@@ -9,7 +9,7 @@ code-server:
        main:
          image:
            repository: ghcr.io/linuxserver/code-server
-            tag: 4.110.0@sha256:8473aa16fba93fccc3ca772173d095bccd2e44d4d3104467fee923df10d57cd2
+            tag: 4.109.5@sha256:aa43fb2fc31127e9d2166e903c7f13792351e38658ba29645662a89ff04ff90d
            pullPolicy: IfNotPresent
          env:
            - name: TZ
@@ -79,8 +79,7 @@ volsync-target-config:
    enabled: true
    schedule: 16 8 * * *
  remote:
-    enabled: true
-    schedule: 16 9 * * *
+    enabled: false
  external:
    enabled: true
-    schedule: 16 10 * * *
+    schedule: 16 9 * * *
--- a/clusters/cl01tl/helm/dawarich/Chart.lock
+++ b/clusters/cl01tl/helm/dawarich/Chart.lock
@@ -7,6 +7,6 @@ dependencies:
  version: 7.8.0
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.0
-digest: sha256:f21fb0c49396d888de95d0b4c59ed535437422c1b24e622bf074ed0fbb22e03a
-generated: "2026-03-09T23:06:27.025881262Z"
+  version: 0.3.0
+digest: sha256:c821fa072d58d7e7704b16dd8a1ca89c24922bbc77e61e360627359c0ca17a94
+generated: "2026-03-06T06:33:34.529244471Z"
--- a/clusters/cl01tl/helm/dawarich/Chart.yaml
+++ b/clusters/cl01tl/helm/dawarich/Chart.yaml
@@ -22,8 +22,8 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: valkey
    alias: valkey
-    version: 0.4.0
+    version: 0.3.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/dawarich.png
 # renovate: datasource=github-releases depName=Freika/dawarich
-appVersion: 1.3.2
+appVersion: 1.3.1
--- a/clusters/cl01tl/helm/dawarich/values.yaml
+++ b/clusters/cl01tl/helm/dawarich/values.yaml
@@ -9,7 +9,7 @@ dawarich:
        main:
          image:
            repository: freikin/dawarich
-            tag: 1.3.2
+            tag: 1.3.1
            pullPolicy: IfNotPresent
          command: ["web-entrypoint.sh"]
          args: ["bin/rails", "server", "-p", "3000", "-b", "::"]
@@ -106,7 +106,7 @@ dawarich:
        sidekiq:
          image:
            repository: freikin/dawarich
-            tag: 1.3.2
+            tag: 1.3.1
            pullPolicy: IfNotPresent
          command: ["sidekiq-entrypoint.sh"]
          args: ["sidekiq"]
--- a/clusters/cl01tl/helm/descheduler/Chart.lock
+++ b/clusters/cl01tl/helm/descheduler/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: descheduler
  repository: https://kubernetes-sigs.github.io/descheduler/
-  version: 0.35.1
-digest: sha256:ed7cc8068b83ac483fda3a781227b35e12a34abdca214b5490e7036c89db1a95
-generated: "2026-03-09T21:21:45.788316167Z"
+  version: 0.35.0
+digest: sha256:afa0e5fe35f9287db619de604c82a22c3ab90dfcaa3a845ff30491e47c7a5846
+generated: "2026-02-19T23:03:22.794515683Z"
--- a/clusters/cl01tl/helm/descheduler/Chart.yaml
+++ b/clusters/cl01tl/helm/descheduler/Chart.yaml
@@ -14,8 +14,8 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: descheduler
-    version: 0.35.1
+    version: 0.35.0
    repository: https://kubernetes-sigs.github.io/descheduler/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 # renovate: datasource=github-releases depName=kubernetes-sigs/descheduler
-appVersion: v0.35.1
+appVersion: v0.35.0
--- a/clusters/cl01tl/helm/directus/Chart.lock
+++ b/clusters/cl01tl/helm/directus/Chart.lock
@@ -7,6 +7,6 @@ dependencies:
  version: 7.8.0
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.0
-digest: sha256:2c38827f09e57aeff21409bf223edf3f889069db6d05c39f0404ed0c974cabb3
-generated: "2026-03-09T23:06:37.271648311Z"
+  version: 0.3.0
+digest: sha256:65b9b0756236f2281e3eb1a7aaa9d5f85822aa22071f6f49cc6a1ead0ec9373d
+generated: "2026-03-06T06:33:47.967177348Z"
--- a/clusters/cl01tl/helm/directus/Chart.yaml
+++ b/clusters/cl01tl/helm/directus/Chart.yaml
@@ -27,8 +27,8 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: valkey
    alias: valkey
-    version: 0.4.0
+    version: 0.3.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/directus.png
 # renovate: datasource=github-releases depName=directus/directus
-appVersion: 11.16.1
+appVersion: 11.16.0
--- a/clusters/cl01tl/helm/directus/templates/external-secret.yaml
+++ b/clusters/cl01tl/helm/directus/templates/external-secret.yaml
@@ -94,43 +94,6 @@ spec:
        metadataPolicy: None
        property: metric-token

---
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: directus-bucket-garage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: directus-bucket-garage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: ACCESS_KEY_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/directus-assets
-        metadataPolicy: None
-        property: ACCESS_KEY_ID
-    - secretKey: ACCESS_SECRET_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/directus-assets
-        metadataPolicy: None
-        property: ACCESS_SECRET_KEY
-    - secretKey: ACCESS_REGION
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/directus-assets
-        metadataPolicy: None
-        property: ACCESS_REGION
-
 ---
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
--- a/clusters/cl01tl/helm/directus/templates/object-bucket-claim.yaml
+++ b/clusters/cl01tl/helm/directus/templates/object-bucket-claim.yaml
@@ -0,0 +1,11 @@
+apiVersion: objectbucket.io/v1alpha1
+kind: ObjectBucketClaim
+metadata:
+  name: ceph-bucket-directus
+  labels:
+    app.kubernetes.io/name: ceph-bucket-directus
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  generateBucketName: bucket-directus
+  storageClassName: ceph-bucket
--- a/clusters/cl01tl/helm/directus/values.yaml
+++ b/clusters/cl01tl/helm/directus/values.yaml
@@ -9,7 +9,7 @@ directus:
        main:
          image:
            repository: directus/directus
-            tag: 11.16.1
+            tag: 11.16.0
            pullPolicy: IfNotPresent
          env:
            - name: PUBLIC_URL
@@ -90,22 +90,22 @@ directus:
            - name: STORAGE_S3_KEY
              valueFrom:
                secretKeyRef:
-                  name: directus-bucket-garage
-                  key: ACCESS_KEY_ID
+                  name: ceph-bucket-directus
+                  key: AWS_ACCESS_KEY_ID
            - name: STORAGE_S3_SECRET
              valueFrom:
                secretKeyRef:
-                  name: directus-bucket-garage
-                  key: ACCESS_SECRET_KEY
-            - name: STORAGE_S3_REGION
-              valueFrom:
-                secretKeyRef:
-                  name: directus-bucket-garage
-                  key: ACCESS_REGION
+                  name: ceph-bucket-directus
+                  key: AWS_SECRET_ACCESS_KEY
            - name: STORAGE_S3_BUCKET
-              value: directus-assets
+              valueFrom:
+                configMapKeyRef:
+                  name: ceph-bucket-directus
+                  key: BUCKET_NAME
+            - name: STORAGE_S3_REGION
+              value: us-east-1
            - name: STORAGE_S3_ENDPOINT
-              value: http://garage-main.garage:3900
+              value: http://rook-ceph-rgw-ceph-objectstore.rook-ceph.svc:80
            - name: STORAGE_S3_FORCE_PATH_STYLE
              value: true
            - name: AUTH_PROVIDERS
--- a/clusters/cl01tl/helm/element-web/Chart.lock
+++ b/clusters/cl01tl/helm/element-web/Chart.lock
@@ -1,9 +1,9 @@
 dependencies:
 - name: element-web
  repository: https://ananace.gitlab.io/charts
-  version: 1.4.32
+  version: 1.4.31
 - name: cloudflared
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.4.0
-digest: sha256:49d9dd45eff7cbbc11644e4a8bd3c9d3bf84716ed034a76f097f0ba1fea4c934
-generated: "2026-03-11T16:04:17.556777286Z"
+  version: 2.3.0
+digest: sha256:7447f3828246d85acd5a2a75b6d086d8fbe29ee90ad61b96dd25de8dcfefbc4e
+generated: "2026-03-03T18:08:31.901975101Z"
--- a/clusters/cl01tl/helm/element-web/Chart.yaml
+++ b/clusters/cl01tl/helm/element-web/Chart.yaml
@@ -17,11 +17,11 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: element-web
-    version: 1.4.32
+    version: 1.4.31
    repository: https://ananace.gitlab.io/charts
  - name: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.4.0
+    version: 2.3.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/element.png
 # renovate: datasource=github-releases depName=element-hq/element-web
-appVersion: v1.12.12
+appVersion: v1.12.11
--- a/clusters/cl01tl/helm/element-web/values.yaml
+++ b/clusters/cl01tl/helm/element-web/values.yaml
@@ -2,7 +2,7 @@ element-web:
  replicaCount: 1
  image:
    repository: vectorim/element-web
-    tag: v1.12.12
+    tag: v1.12.11
    pullPolicy: IfNotPresent
  defaultServer:
    url: https://matrix.alexlebens.dev
--- a/clusters/cl01tl/helm/external-secrets/Chart.lock
+++ b/clusters/cl01tl/helm/external-secrets/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: external-secrets
  repository: https://charts.external-secrets.io
-  version: 2.1.0
-digest: sha256:b19563d51f1922403185979c6c442531a7bb13d302e8438b5a18d450259b7245
-generated: "2026-03-07T18:02:23.908145348Z"
+  version: 2.0.1
+digest: sha256:f47905e03f649c28d29f7a381799fb2df1f0a7bf122af174aeba47ba94f34847
+generated: "2026-02-20T19:29:28.137671934Z"
--- a/clusters/cl01tl/helm/external-secrets/Chart.yaml
+++ b/clusters/cl01tl/helm/external-secrets/Chart.yaml
@@ -12,7 +12,7 @@ sources:
  - https://github.com/external-secrets/external-secrets/tree/main/deploy/charts/external-secrets
 dependencies:
  - name: external-secrets
-    version: 2.1.0
+    version: 2.0.1
    repository: https://charts.external-secrets.io
 icon: https://avatars.githubusercontent.com/u/68335991?s=48&v=4
 # renovate: datasource=github-releases depName=external-secrets/external-secrets
--- a/clusters/cl01tl/helm/freshrss/Chart.lock
+++ b/clusters/cl01tl/helm/freshrss/Chart.lock
@@ -4,12 +4,12 @@ dependencies:
  version: 4.6.2
 - name: cloudflared
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.4.0
+  version: 2.3.0
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 7.8.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.8.0
-digest: sha256:99f1993c99c23ba5b3af6997d859cbb18f26343e424c1312f8b6169f285a3418
-generated: "2026-03-09T22:04:20.416597531Z"
+digest: sha256:44d4f78dd73bd2f1d4d18ab0c7a4c9b2d0ec48c6c9ee7c9bd985dd9b9b50d80c
+generated: "2026-03-06T01:06:53.677352447Z"
--- a/clusters/cl01tl/helm/freshrss/Chart.yaml
+++ b/clusters/cl01tl/helm/freshrss/Chart.yaml
@@ -23,7 +23,7 @@ dependencies:
    version: 4.6.2
  - name: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.4.0
+    version: 2.3.0
  - name: postgres-cluster
    alias: postgres-18-cluster
    version: 7.8.0
--- a/clusters/cl01tl/helm/freshrss/values.yaml
+++ b/clusters/cl01tl/helm/freshrss/values.yaml
@@ -197,7 +197,7 @@ postgres-18-cluster:
  recovery:
    method: objectStore
    objectStore:
-      index: 2
+      index: 1
  backup:
    objectStore:
      - name: garage-local
@@ -250,8 +250,7 @@ volsync-target-data:
    enabled: true
    schedule: 18 8 * * *
  remote:
-    enabled: true
-    schedule: 18 9 * * *
+    enabled: false
  external:
    enabled: true
-    schedule: 18 10 * * *
+    schedule: 18 9 * * *
--- a/clusters/cl01tl/helm/garage/templates/service.yaml
+++ b/clusters/cl01tl/helm/garage/templates/service.yaml
@@ -1,32 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: garage-main
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: garage-main
-    app.kubernetes.io/service: garage-main
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  ports:
-    - name: admin
-      port: 3903
-      protocol: TCP
-      targetPort: 3903
-    - name: rpc
-      port: 3901
-      protocol: TCP
-      targetPort: 3901
-    - name: s3
-      port: 3900
-      protocol: TCP
-      targetPort: 3900
-    - name: web
-      port: 3902
-      protocol: TCP
-      targetPort: 3902
-  selector:
-    app.kubernetes.io/instance: garage
-    app.kubernetes.io/name: garage
-    garage-type: server
--- a/clusters/cl01tl/helm/garage/values.yaml
+++ b/clusters/cl01tl/helm/garage/values.yaml
@@ -118,9 +118,9 @@ garage:
            pullPolicy: IfNotPresent
          env:
            - name: API_BASE_URL
-              value: http://garage-main.garage:3903
+              value: http://garage-1.garage:3903
            - name: S3_ENDPOINT_URL
-              value: http://garage-main.garage:3900
+              value: http://garage-1.garage:3900
            - name: API_ADMIN_KEY
              valueFrom:
                secretKeyRef:
@@ -225,6 +225,26 @@ garage:
          api_bind_addr = "[::]:3903"
          metrics_require_token = true
  service:
+    garage-main:
+      forceRename: garage-main
+      controller: server-2
+      ports:
+        s3:
+          port: 3900
+          targetPort: 3900
+          protocol: HTTP
+        rpc:
+          port: 3901
+          targetPort: 3901
+          protocol: HTTP
+        web:
+          port: 3902
+          targetPort: 3902
+          protocol : HTTP
+        admin:
+          port: 3903
+          targetPort: 3903
+          protocol: HTTP
    server-1:
      forceRename: garage-1
      controller: server-1
--- a/clusters/cl01tl/helm/gatus/values.yaml
+++ b/clusters/cl01tl/helm/gatus/values.yaml
@@ -137,9 +137,6 @@ gatus:
      - name: yamtrack
        url: https://yamtrack.alexlebens.net
        <<: *defaults
-      - name: movie-roulette
-        url: https://movie-roulette.alexlebens.net
-        <<: *defaults
      - name: jellyfin
        url: https://jellyfin.alexlebens.net
        <<: *defaults
@@ -446,10 +443,9 @@ volsync-target-data:
  pvcTarget: gatus
  local:
    enabled: true
-    schedule: 20 8 * * *
+    schedule: 22 8 * * *
  remote:
-    enabled: true
-    schedule: 20 9 * * *
+    enabled: false
  external:
    enabled: true
-    schedule: 20 10 * * *
+    schedule: 22 9 * * *
--- a/clusters/cl01tl/helm/generic-device-plugin/Chart.lock
+++ b/clusters/cl01tl/helm/generic-device-plugin/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: generic-device-plugin
  repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-  version: 0.20.21
-digest: sha256:4f1359a01b8b85722ab1805426a86f3ea64d0134513ce14fe9c55f3f918a21fb
-generated: "2026-03-09T23:02:42.799515974Z"
+  version: 0.20.20
+digest: sha256:8841709955381394b6304b7c53345692517e419c197ddc59b66a505ae742ec04
+generated: "2026-03-03T03:03:20.457381608Z"
--- a/clusters/cl01tl/helm/generic-device-plugin/Chart.yaml
+++ b/clusters/cl01tl/helm/generic-device-plugin/Chart.yaml
@@ -15,6 +15,6 @@ maintainers:
 dependencies:
  - name: generic-device-plugin
    repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-    version: 0.20.21
+    version: 0.20.20
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 appVersion: 1.0.0
--- a/clusters/cl01tl/helm/gitea/Chart.lock
+++ b/clusters/cl01tl/helm/gitea/Chart.lock
@@ -7,21 +7,21 @@ dependencies:
  version: 0.0.3
 - name: meilisearch
  repository: https://meilisearch.github.io/meilisearch-kubernetes
-  version: 0.27.0
+  version: 0.26.0
 - name: cloudflared
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.4.0
+  version: 2.3.0
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 7.8.0
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.0
+  version: 0.2.0
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.0
+  version: 0.2.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.8.0
-digest: sha256:177a591c68e99a6f63f8acaf904cfc444774814db4ccd3ac410be511d67bbf9c
-generated: "2026-03-09T23:06:50.110952088Z"
+digest: sha256:a06acd0301f43e91f70c9d732cd7fac2f3f5cd5eb536d10d321419daded15ae2
+generated: "2026-03-06T00:03:20.551447-06:00"
--- a/clusters/cl01tl/helm/gitea/Chart.yaml
+++ b/clusters/cl01tl/helm/gitea/Chart.yaml
@@ -33,22 +33,22 @@ dependencies:
    repository: https://dl.gitea.com/charts/
    version: 0.0.3
  - name: meilisearch
-    version: 0.27.0
+    version: 0.26.0
    repository: https://meilisearch.github.io/meilisearch-kubernetes
  - name: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.4.0
+    version: 2.3.0
  - name: postgres-cluster
    alias: postgres-18-cluster
    version: 7.8.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: valkey
    alias: valkey-gitea
-    version: 0.4.0
+    version: 0.3.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: valkey
    alias: valkey-renovate
-    version: 0.4.0
+    version: 0.3.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-storage
--- a/clusters/cl01tl/helm/gitea/values.yaml
+++ b/clusters/cl01tl/helm/gitea/values.yaml
@@ -145,7 +145,7 @@ gitea-actions:
        log:
          level: debug
        cache:
-          enabled: true
+          enabled: false
        runner:
          labels:
            - "ubuntu-latest:docker://harbor.alexlebens.net/proxy-hub.docker/gitea/runner-images:ubuntu-24.04"
--- a/clusters/cl01tl/helm/grafana-operator/Chart.lock
+++ b/clusters/cl01tl/helm/grafana-operator/Chart.lock
@@ -7,9 +7,9 @@ dependencies:
  version: 7.8.0
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.0
+  version: 0.2.0
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.0
-digest: sha256:6f4dc1456854cad04f387cef6e0a9c846e76eb811bf97f2b7b13877cb3f577bd
-generated: "2026-03-09T23:07:06.293890171Z"
+  version: 0.2.0
+digest: sha256:f7cc37aae4019e4ad8bd1b474dc14490cacb2748cf511c78077b9098b4475402
+generated: "2026-03-05T22:38:27.316142-06:00"
--- a/clusters/cl01tl/helm/grafana-operator/Chart.yaml
+++ b/clusters/cl01tl/helm/grafana-operator/Chart.yaml
@@ -25,11 +25,11 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: valkey
    alias: valkey-unified-alerting
-    version: 0.4.0
+    version: 0.3.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: valkey
    alias: valkey-remote-cache
-    version: 0.4.0
+    version: 0.3.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/grafana.png
 # renovate: datasource=github-releases depName=grafana/grafana-operator
--- a/clusters/cl01tl/helm/harbor/Chart.lock
+++ b/clusters/cl01tl/helm/harbor/Chart.lock
@@ -7,6 +7,6 @@ dependencies:
  version: 7.8.0
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.0
-digest: sha256:ee8ed34cd53d8fa36497df28cba9cf16ef656250b0bc3ff6690fb958b22caf6f
-generated: "2026-03-09T23:07:20.650108569Z"
+  version: 0.3.0
+digest: sha256:b817ae63542ddf7504830df3637c2ffd1a3001f3aee43ef85ed074051b27f967
+generated: "2026-03-06T06:34:00.802362845Z"
--- a/clusters/cl01tl/helm/harbor/Chart.yaml
+++ b/clusters/cl01tl/helm/harbor/Chart.yaml
@@ -25,8 +25,8 @@ dependencies:
    repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
  - name: valkey
    alias: valkey
-    version: 0.4.0
+    version: 0.3.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/harbor.png
 # renovate: datasource=github-releases depName=goharbor/harbor
-appVersion: v2.14.3
+appVersion: v2.14.2
--- a/clusters/cl01tl/helm/harbor/values.yaml
+++ b/clusters/cl01tl/helm/harbor/values.yaml
@@ -41,12 +41,12 @@ harbor:
  portal:
    image:
      repository: goharbor/harbor-portal
-      tag: v2.14.3
+      tag: v2.14.2
    replicas: 2
  core:
    image:
      repository: goharbor/harbor-core
-      tag: v2.14.3
+      tag: v2.14.2
    replicas: 2
    existingSecret: harbor-secret
    secretName: harbor-secret
@@ -54,7 +54,7 @@ harbor:
  jobservice:
    image:
      repository: goharbor/harbor-jobservice
-      tag: v2.14.3
+      tag: v2.14.2
    replicas: 2
    jobLoggers:
      - stdout
@@ -63,11 +63,11 @@ harbor:
    registry:
      image:
        repository: goharbor/registry-photon
-        tag: v2.14.3
+        tag: v2.14.2
    controller:
      image:
        repository: goharbor/harbor-registryctl
-        tag: v2.14.3
+        tag: v2.14.2
    existingSecret: harbor-secret
    relativeurls: true
    credentials:
@@ -94,14 +94,14 @@ harbor:
  exporter:
    image:
      repository: goharbor/harbor-exporter
-      tag: v2.14.3
+      tag: v2.14.2
    replicas: 2
 postgres-18-cluster:
  mode: recovery
  recovery:
    method: objectStore
    objectStore:
-      index: 2
+      index: 1
  backup:
    objectStore:
      - name: garage-local
--- a/clusters/cl01tl/helm/home-assistant/values.yaml
+++ b/clusters/cl01tl/helm/home-assistant/values.yaml
@@ -9,7 +9,7 @@ home-assistant:
        main:
          image:
            repository: ghcr.io/home-assistant/home-assistant
-            tag: 2026.3.1
+            tag: 2026.3.0
            pullPolicy: IfNotPresent
          env:
            - name: TZ
@@ -21,7 +21,7 @@ home-assistant:
        code-server:
          image:
            repository: ghcr.io/linuxserver/code-server
-            tag: 4.110.0@sha256:8473aa16fba93fccc3ca772173d095bccd2e44d4d3104467fee923df10d57cd2
+            tag: 4.109.5@sha256:aa43fb2fc31127e9d2166e903c7f13792351e38658ba29645662a89ff04ff90d
            pullPolicy: IfNotPresent
          env:
            - name: TZ
@@ -134,10 +134,9 @@ volsync-target-config:
    fsGroupChangePolicy: OnRootMismatch
  local:
    enabled: true
-    schedule: 22 8 * * *
+    schedule: 24 8 * * *
  remote:
-    enabled: true
-    schedule: 22 9 * * *
+    enabled: false
  external:
    enabled: true
-    schedule: 22 10 * * *
+    schedule: 24 9 * * *
--- a/clusters/cl01tl/helm/homepage/values.yaml
+++ b/clusters/cl01tl/helm/homepage/values.yaml
@@ -160,12 +160,6 @@ homepage:
                  href: https://yamtrack.alexlebens.net
                  siteMonitor: http://yamtrack.yamtrack:80
                  statusStyle: dot
-              - Movie Roulette:
-                  icon: https://raw.githubusercontent.com/sahara101/Movie-Roulette/refs/heads/main/static/icons/icon.png
-                  description: Movie Roulette
-                  href: https://movie-roulette.alexlebens.net
-                  siteMonitor: http://movie-roulette.movie-roulette:80
-                  statusStyle: dot
              - Movies and TV:
                  icon: sh-jellyfin.webp
                  description: Jellyfin
--- a/clusters/cl01tl/helm/immich/Chart.lock
+++ b/clusters/cl01tl/helm/immich/Chart.lock
@@ -7,9 +7,9 @@ dependencies:
  version: 7.8.0
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.0
+  version: 0.3.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.8.0
-digest: sha256:360f79209535cd9132b7db774aabd6492c2c287e62f00795e5f4ae4cc6a038c0
-generated: "2026-03-09T23:07:40.320287247Z"
+digest: sha256:5beaeaa5376dd6d682b978977c524c443f6b54793abb20f086ab069fc4349add
+generated: "2026-03-06T06:34:15.52342763Z"
--- a/clusters/cl01tl/helm/immich/Chart.yaml
+++ b/clusters/cl01tl/helm/immich/Chart.yaml
@@ -24,7 +24,7 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: valkey
    alias: valkey
-    version: 0.4.0
+    version: 0.3.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-data
--- a/clusters/cl01tl/helm/immich/values.yaml
+++ b/clusters/cl01tl/helm/immich/values.yaml
@@ -225,16 +225,16 @@ volsync-target-data:
  pvcTarget: immich
  local:
    enabled: true
-    schedule: 24 8 * * *
+    schedule: 28 8 * * *
    restic:
      cacheCapacity: 10Gi
  remote:
    enabled: true
-    schedule: 24 9 * * *
+    schedule: 28 10 * * *
    restic:
      cacheCapacity: 10Gi
  external:
    enabled: true
-    schedule: 24 10 * * *
+    schedule: 28 9 * * *
    restic:
      cacheCapacity: 10Gi
--- a/clusters/cl01tl/helm/jellyfin/Chart.lock
+++ b/clusters/cl01tl/helm/jellyfin/Chart.lock
@@ -4,9 +4,9 @@ dependencies:
  version: 4.6.2
 - name: meilisearch
  repository: https://meilisearch.github.io/meilisearch-kubernetes
-  version: 0.27.0
+  version: 0.26.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.8.0
-digest: sha256:ca384647a640ae717ac874a2627f00ac9a1e5c97ff5eeb8f326ebdd471ab1623
-generated: "2026-03-09T15:04:08.648165537Z"
+digest: sha256:8e4c443c9467338aa34e819f7cbce78ebbe3b9cd9453e036ca8f7f0d5bf18c96
+generated: "2026-03-06T01:09:11.430446168Z"
--- a/clusters/cl01tl/helm/jellyfin/Chart.yaml
+++ b/clusters/cl01tl/helm/jellyfin/Chart.yaml
@@ -25,7 +25,7 @@ dependencies:
    repository: https://bjw-s-labs.github.io/helm-charts/
    version: 4.6.2
  - name: meilisearch
-    version: 0.27.0
+    version: 0.26.0
    repository: https://meilisearch.github.io/meilisearch-kubernetes
  - name: volsync-target
    alias: volsync-target-config
--- a/clusters/cl01tl/helm/jellyfin/values.yaml
+++ b/clusters/cl01tl/helm/jellyfin/values.yaml
@@ -143,16 +143,14 @@ volsync-target-config:
  pvcTarget: jellyfin-config
  local:
    enabled: true
-    schedule: 26 8 * * *
+    schedule: 30 8 * * *
    restic:
      cacheCapacity: 10Gi
  remote:
-    enabled: true
-    schedule: 26 9 * * *
    restic:
      cacheCapacity: 10Gi
  external:
    enabled: true
-    schedule: 26 10 * * *
+    schedule: 30 9 * * *
    restic:
      cacheCapacity: 10Gi
--- a/clusters/cl01tl/helm/jellystat/values.yaml
+++ b/clusters/cl01tl/helm/jellystat/values.yaml
@@ -145,10 +145,9 @@ volsync-target-data:
  pvcTarget: jellystat-data
  local:
    enabled: true
-    schedule: 28 8 * * *
+    schedule: 32 8 * * *
  remote:
-    enabled: true
-    schedule: 28 9 * * *
+    enabled: false
  external:
    enabled: true
-    schedule: 28 10 * * *
+    schedule: 32 9 * * *
--- a/clusters/cl01tl/helm/karakeep/Chart.lock
+++ b/clusters/cl01tl/helm/karakeep/Chart.lock
@@ -4,12 +4,12 @@ dependencies:
  version: 4.6.2
 - name: meilisearch
  repository: https://meilisearch.github.io/meilisearch-kubernetes
-  version: 0.27.0
+  version: 0.26.0
 - name: cloudflared
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.4.0
+  version: 2.3.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.8.0
-digest: sha256:75f92316d4b6229d00e3dfa39ed5026ad39a28f833321cd3887a2048cdac34c7
-generated: "2026-03-09T22:04:48.630821646Z"
+digest: sha256:0b9a2ac92849bbc08d9c1771ad1136ae259cc38bdb3aa3afb0ea4c5841aecfd3
+generated: "2026-03-06T01:10:04.579595021Z"
--- a/clusters/cl01tl/helm/karakeep/Chart.yaml
+++ b/clusters/cl01tl/helm/karakeep/Chart.yaml
@@ -22,11 +22,11 @@ dependencies:
    repository: https://bjw-s-labs.github.io/helm-charts/
    version: 4.6.2
  - name: meilisearch
-    version: 0.27.0
+    version: 0.26.0
    repository: https://meilisearch.github.io/meilisearch-kubernetes
  - name: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.4.0
+    version: 2.3.0
  - name: volsync-target
    alias: volsync-target-data
    version: 0.8.0
--- a/clusters/cl01tl/helm/karakeep/templates/external-secret.yaml
+++ b/clusters/cl01tl/helm/karakeep/templates/external-secret.yaml
@@ -57,43 +57,6 @@ spec:
        metadataPolicy: None
        property: secret

---
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: karakeep-bucket-garage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: karakeep-bucket-garage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: ACCESS_KEY_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/karakeep-assets
-        metadataPolicy: None
-        property: ACCESS_KEY_ID
-    - secretKey: ACCESS_SECRET_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/karakeep-assets
-        metadataPolicy: None
-        property: ACCESS_SECRET_KEY
-    - secretKey: ACCESS_REGION
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/karakeep-assets
-        metadataPolicy: None
-        property: ACCESS_REGION
-
 ---
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
--- a/clusters/cl01tl/helm/karakeep/templates/object-bucket-claim.yaml
+++ b/clusters/cl01tl/helm/karakeep/templates/object-bucket-claim.yaml
@@ -0,0 +1,11 @@
+apiVersion: objectbucket.io/v1alpha1
+kind: ObjectBucketClaim
+metadata:
+  name: ceph-bucket-karakeep
+  labels:
+    app.kubernetes.io/name: ceph-bucket-karakeep
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  generateBucketName: bucket-karakeep
+  storageClassName: ceph-bucket
--- a/clusters/cl01tl/helm/karakeep/values.yaml
+++ b/clusters/cl01tl/helm/karakeep/values.yaml
@@ -29,24 +29,24 @@ karakeep:
                  name: karakeep-key-secret
                  key: prometheus-token
            - name: ASSET_STORE_S3_ENDPOINT
-              value: http://garage-main.garage:3900
+              value: http://rook-ceph-rgw-ceph-objectstore.rook-ceph.svc:80
            - name: ASSET_STORE_S3_REGION
-              valueFrom:
-                secretKeyRef:
-                  name: karakeep-bucket-garage
-                  key: ACCESS_REGION
+              value: us-east-1
            - name: ASSET_STORE_S3_BUCKET
-              value: karakeep-assets
+              valueFrom:
+                configMapKeyRef:
+                  name: ceph-bucket-karakeep
+                  key: BUCKET_NAME
            - name: ASSET_STORE_S3_ACCESS_KEY_ID
              valueFrom:
                secretKeyRef:
-                  name: karakeep-bucket-garage
-                  key: ACCESS_KEY_ID
+                  name: ceph-bucket-karakeep
+                  key: AWS_ACCESS_KEY_ID
            - name: ASSET_STORE_S3_SECRET_ACCESS_KEY
              valueFrom:
                secretKeyRef:
-                  name: karakeep-bucket-garage
-                  key: ACCESS_SECRET_KEY
+                  name: ceph-bucket-karakeep
+                  key: AWS_SECRET_ACCESS_KEY
            - name: ASSET_STORE_S3_FORCE_PATH_STYLE
              value: true
            - name: MEILI_ADDR
@@ -172,10 +172,9 @@ volsync-target-data:
  pvcTarget: karakeep
  local:
    enabled: true
-    schedule: 30 8 * * *
+    schedule: 34 8 * * *
  remote:
-    enabled: true
-    schedule: 30 9 * * *
+    enabled: false
  external:
    enabled: true
-    schedule: 30 10 * * *
+    schedule: 34 9 * * *
--- a/clusters/cl01tl/helm/komodo/values.yaml
+++ b/clusters/cl01tl/helm/komodo/values.yaml
@@ -205,7 +205,7 @@ postgresql-17-fdb-cluster:
  recovery:
    method: objectStore
    objectStore:
-      index: 2
+      index: 1
  backup:
    objectStore:
      - name: garage-local
--- a/clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock
+++ b/clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock
@@ -1,12 +1,12 @@
 dependencies:
 - name: kube-prometheus-stack
  repository: oci://ghcr.io/prometheus-community/charts
-  version: 82.10.3
+  version: 82.10.1
 - name: app-template
  repository: https://bjw-s-labs.github.io/helm-charts/
  version: 4.6.2
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.0
-digest: sha256:37ffa4a21ed29703cae9c9f3fb029566a1dd6af6e0fe8cc3862a2226d6644114
-generated: "2026-03-10T19:02:41.11005238Z"
+  version: 0.3.0
+digest: sha256:b4f9ab333450a893ab224f478febbf8ee4d0abb3c5b2682de13a64753e340884
+generated: "2026-03-06T22:03:44.014751197Z"
--- a/clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml
+++ b/clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml
@@ -20,7 +20,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: kube-prometheus-stack
-    version: 82.10.3
+    version: 82.10.1
    repository: oci://ghcr.io/prometheus-community/charts
  - name: app-template
    alias: ntfy-alertmanager
@@ -28,7 +28,7 @@ dependencies:
    version: 4.6.2
  - name: valkey
    alias: valkey
-    version: 0.4.0
+    version: 0.3.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/prometheus.png
 # renovate: datasource=github-releases depName=prometheus-operator/prometheus-operator
--- a/clusters/cl01tl/helm/libation/values.yaml
+++ b/clusters/cl01tl/helm/libation/values.yaml
@@ -75,10 +75,9 @@ volsync-target-config:
  pvcTarget: libation
  local:
    enabled: true
-    schedule: 32 8 * * *
+    schedule: 36 8 * * *
  remote:
-    enabled: true
-    schedule: 32 9 * * *
+    enabled: false
  external:
    enabled: true
-    schedule: 32 10 * * *
+    schedule: 36 9 * * *
--- a/clusters/cl01tl/helm/lidarr/values.yaml
+++ b/clusters/cl01tl/helm/lidarr/values.yaml
@@ -15,7 +15,7 @@ lidarr:
        main:
          image:
            repository: ghcr.io/linuxserver/lidarr
-            tag: 3.1.2-nightly@sha256:2b1b64f07214c6cf05bcfed999aa74ee23825e4bc2ef2c48aba1cd5d5bf968fe
+            tag: 3.1.2-nightly@sha256:f64fabd1737d9c7d519e1a37aba97b2e110d717e1c497a6f9788766f9633cf8f
            pullPolicy: IfNotPresent
          env:
            - name: TZ
@@ -188,10 +188,9 @@ volsync-target-config:
    fsGroupChangePolicy: OnRootMismatch
  local:
    enabled: true
-    schedule: 34 8 * * *
+    schedule: 38 8 * * *
  remote:
-    enabled: true
-    schedule: 34 9 * * *
+    enabled: false
  external:
    enabled: true
-    schedule: 34 10 * * *
+    schedule: 38 9 * * *
--- a/clusters/cl01tl/helm/local-path-provisioner/Chart.lock
+++ b/clusters/cl01tl/helm/local-path-provisioner/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: local-path-provisioner
  repository: https://charts.containeroo.ch
-  version: 0.0.36
-digest: sha256:ac212733a0ba2046767ad1718ca740d5aad3d1bfc49c5e7a5056c8414c1d65d4
-generated: "2026-03-10T19:00:30.739038561Z"
+  version: 0.0.35
+digest: sha256:c59cc5a81e797a9e2ab0f8e6bf03cb3e4dfc740555631aa1d41b7def1d2c60c8
+generated: "2026-01-10T19:01:45.394965495Z"
--- a/clusters/cl01tl/helm/local-path-provisioner/Chart.yaml
+++ b/clusters/cl01tl/helm/local-path-provisioner/Chart.yaml
@@ -15,8 +15,8 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: local-path-provisioner
-    version: 0.0.36
+    version: 0.0.35
    repository: https://charts.containeroo.ch
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 # renovate: datasource=github-releases depName=rancher/local-path-provisioner
-appVersion: v0.0.35
+appVersion: v0.0.34
--- a/clusters/cl01tl/helm/local-path-provisioner/values.yaml
+++ b/clusters/cl01tl/helm/local-path-provisioner/values.yaml
@@ -1,7 +1,7 @@
 local-path-provisioner:
  image:
    repository: rancher/local-path-provisioner
-    tag: v0.0.35
+    tag: v0.0.34
  helperImage:
    repository: busybox
    tag: 1.37.0
--- a/clusters/cl01tl/helm/loki/Chart.lock
+++ b/clusters/cl01tl/helm/loki/Chart.lock
@@ -1,9 +1,9 @@
 dependencies:
 - name: loki
  repository: https://grafana.github.io/helm-charts
-  version: 6.55.0
+  version: 6.53.0
 - name: alloy
  repository: https://grafana.github.io/helm-charts
-  version: 1.6.2
-digest: sha256:463184dc134143723f8567a1ebd228353cf0253a139f0a4e76637ec65aa4aaf1
-generated: "2026-03-11T22:44:19.706693299Z"
+  version: 1.6.1
+digest: sha256:ec17a816dcdc476ad67cd056556d9a42a9fb8057ef75a928f8604939006e3416
+generated: "2026-03-02T15:18:56.219024346Z"
--- a/clusters/cl01tl/helm/loki/Chart.yaml
+++ b/clusters/cl01tl/helm/loki/Chart.yaml
@@ -16,10 +16,10 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: loki
-    version: 6.55.0
+    version: 6.53.0
    repository: https://grafana.github.io/helm-charts
  - name: alloy
-    version: 1.6.2
+    version: 1.6.1
    repository: https://grafana.github.io/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/loki.png
 # renovate: datasource=github-releases depName=grafana/loki
--- a/clusters/cl01tl/helm/matrix-synapse/Chart.lock
+++ b/clusters/cl01tl/helm/matrix-synapse/Chart.lock
@@ -13,19 +13,19 @@ dependencies:
  version: 4.6.2
 - name: cloudflared
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.4.0
+  version: 2.3.0
 - name: cloudflared
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.4.0
+  version: 2.3.0
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 7.8.0
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.0
+  version: 0.3.0
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.0
+  version: 0.3.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.8.0
@@ -38,5 +38,5 @@ dependencies:
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.8.0
-digest: sha256:fc6e3a04b828daf3a0861aec6a7a6d1c9a45fabaf29abd3fb3be2e8db4d0875b
-generated: "2026-03-09T23:08:07.610958823Z"
+digest: sha256:c26ecd1796d394c0d10c4d64c2c9e7130303cecd8160fe52447b9ae21eedeab9
+generated: "2026-03-06T06:34:42.381145161Z"
--- a/clusters/cl01tl/helm/matrix-synapse/Chart.yaml
+++ b/clusters/cl01tl/helm/matrix-synapse/Chart.yaml
@@ -45,11 +45,11 @@ dependencies:
    version: 4.6.2
  - name: cloudflared
    alias: cloudflared-synapse
-    version: 2.4.0
+    version: 2.3.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: cloudflared
    alias: cloudflared-hookshot
-    version: 2.4.0
+    version: 2.3.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: postgres-cluster
    alias: postgres-18-cluster
@@ -57,11 +57,11 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: valkey
    alias: valkey-matrix-synapse
-    version: 0.4.0
+    version: 0.3.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: valkey
    alias: valkey-hookshot
-    version: 0.4.0
+    version: 0.3.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-synapse
@@ -81,4 +81,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/matrix.png
 # renovate: datasource=github-releases depName=element-hq/synapse
-appVersion: v1.149.0
+appVersion: v1.148.0
--- a/clusters/cl01tl/helm/matrix-synapse/values.yaml
+++ b/clusters/cl01tl/helm/matrix-synapse/values.yaml
@@ -470,24 +470,22 @@ volsync-target-synapse:
  pvcTarget: matrix-synapse
  local:
    enabled: true
-    schedule: 36 8 * * *
+    schedule: 44 8 * * *
  remote:
-    enabled: true
-    schedule: 36 9 * * *
+    enabled: false
  external:
    enabled: true
-    schedule: 36 10 * * *
+    schedule: 44 9 * * *
 volsync-target-hookshot:
  pvcTarget: matrix-hookshot
  local:
    enabled: true
-    schedule: 38 8 * * *
+    schedule: 46 8 * * *
  remote:
-    enabled: true
-    schedule: 38 9 * * *
+    enabled: false
  external:
    enabled: true
-    schedule: 38 10 * * *
+    schedule: 46 9 * * *
 volsync-target-discord:
  pvcTarget: mautrix-discord
  moverSecurityContext:
@@ -495,13 +493,12 @@ volsync-target-discord:
    runAsGroup: 1337
  local:
    enabled: true
-    schedule: 40 8 * * *
+    schedule: 48 8 * * *
  remote:
-    enabled: true
-    schedule: 40 9 * * *
+    enabled: false
  external:
    enabled: true
-    schedule: 40 10 * * *
+    schedule: 48 9 * * *
 volsync-target-whatsapp:
  pvcTarget: mautrix-whatsapp
  moverSecurityContext:
@@ -509,10 +506,9 @@ volsync-target-whatsapp:
    runAsGroup: 1337
  local:
    enabled: true
-    schedule: 42 8 * * *
+    schedule: 50 8 * * *
  remote:
-    enabled: true
-    schedule: 42 9 * * *
+    enabled: false
  external:
    enabled: true
-    schedule: 42 10 * * *
+    schedule: 50 9 * * *
--- a/clusters/cl01tl/helm/movie-roulette/Chart.lock
+++ b/clusters/cl01tl/helm/movie-roulette/Chart.lock
@@ -1,6 +0,0 @@
-dependencies:
- name: app-template
-  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
-digest: sha256:faa35ccfc18b2d47fad558e168bd3c68e64790fe2b1356881452ae4f5cd8b443
-generated: "2026-03-10T16:01:13.738843-05:00"
--- a/clusters/cl01tl/helm/movie-roulette/Chart.yaml
+++ b/clusters/cl01tl/helm/movie-roulette/Chart.yaml
@@ -1,22 +0,0 @@
-apiVersion: v2
-name: movie-roulette
-version: 1.0.0
-description: Movie Roulette
-keywords:
-  - movie-roulette
-  - jellyfin
-home: https://wiki.alexlebens.dev/
-sources:
-  - https://github.com/sahara101/Movie-Roulette
-  - https://github.com/sahara101/Movie-Roulette/pkgs/container/movie-roulette
-  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: app-template
-    alias: movie-roulette
-    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
-icon: https://raw.githubusercontent.com/sahara101/Movie-Roulette/refs/heads/main/static/icons/icon.png
-# renovate: datasource=github-releases depName=sahara101/Movie-Roulette
-appVersion: v5.2.1
--- a/clusters/cl01tl/helm/movie-roulette/templates/external-secret.yaml
+++ b/clusters/cl01tl/helm/movie-roulette/templates/external-secret.yaml
@@ -1,42 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: movie-roulette-config-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: movie-roulette-config-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: secret-key
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/movie-roulette/key
-        metadataPolicy: None
-        property: secret-key
-    - secretKey: jellyfin-key
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/jellyfin/movie-roulette
-        metadataPolicy: None
-        property: jellyfin-key
-    - secretKey: jellyfin-user
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/jellyfin/movie-roulette
-        metadataPolicy: None
-        property: user
-    - secretKey: seerr-key
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/seerr/key
-        metadataPolicy: None
-        property: key
--- a/clusters/cl01tl/helm/movie-roulette/values.yaml
+++ b/clusters/cl01tl/helm/movie-roulette/values.yaml
@@ -1,128 +0,0 @@
-movie-roulette:
-  controllers:
-    main:
-      type: deployment
-      replicas: 1
-      strategy: Recreate
-      revisionHistoryLimit: 3
-      containers:
-        main:
-          image:
-            repository: ghcr.io/sahara101/movie-roulette
-            tag: v5.2.1
-            pullPolicy: IfNotPresent
-          env:
-            - name: FLASK_SECRET_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: movie-roulette-config-secret
-                  key: secret-key
-            - name: CORS_ALLOWED_ORIGINS
-              value: movie-roulette.alexlebens.net
-            - name: DISABLE_SETTINGS
-              value: "TRUE"
-            - name: AUTH_ENABLED
-              value: "TRUE"
-            - name: AUTH_SESSION_LIFETIME
-              value: "86400"
-            - name: JELLYFIN_URL
-              value: http://jellyfin.alexlebens.net
-            - name: JELLYFIN_API_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: movie-roulette-config-secret
-                  key: jellyfin-key
-            - name: JELLYFIN_USER_ID
-              valueFrom:
-                secretKeyRef:
-                  name: movie-roulette-config-secret
-                  key: jellyfin-user
-            - name: LOGIN_BACKDROP_ENABLED
-              value: "TRUE"
-            - name: HOMEPAGE_MODE
-              value: "FALSE"
-            - name: USE_LINKS
-              value: "TRUE"
-            - name: USE_FILTER
-              value: "TRUE"
-            - name: USE_WATCH_BUTTON
-              value: "TRUE"
-            - name: USE_NEXT_BUTTON
-              value: "TRUE"
-            - name: USE_GRID_VIEW
-              value: "true"
-            - name: ENABLE_MOBILE_TRUNCATION
-              value: "TRUE"
-            - name: SHOW_NOW_WATCHING_CARD
-              value: "FALSE"
-            - name: USE_HEROUI_THEME
-              value: "FALSE"
-            - name: ENABLE_MOVIE_LOGOS
-              value: "TRUE"
-            - name: LOAD_MOVIE_ON_START
-              value: "FALSE"
-            - name: SEERR_URL
-              value: http://seerr.alexlebens.net
-            - name: SEERR_API_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: movie-roulette-config-secret
-                  key: seerr-key
-            - name: REQUEST_SERVICE_DEFAULT
-              value: "seerr"
-          resources:
-            requests:
-              cpu: 10m
-              memory: 128Mi
-  service:
-    main:
-      controller: main
-      ports:
-        http:
-          port: 80
-          targetPort: 4000
-          protocol: HTTP
-  route:
-    main:
-      kind: HTTPRoute
-      parentRefs:
-        - group: gateway.networking.k8s.io
-          kind: Gateway
-          name: traefik-gateway
-          namespace: traefik
-      hostnames:
-        - movie-roulette.alexlebens.net
-      rules:
-        - backendRefs:
-            - group: ''
-              kind: Service
-              name: movie-roulette
-              port: 80
-              weight: 100
-          matches:
-            - path:
-                type: PathPrefix
-                value: /
-  persistence:
-    data:
-      forceRename: movie-roulette-data
-      storageClass: ceph-block
-      accessMode: ReadWriteOnce
-      size: 1Gi
-      retain: true
-      advancedMounts:
-        main:
-          main:
-            - path: /config
-              readOnly: false
-volsync-target-data:
-  pvcTarget: movie-roulette-data
-  local:
-    enabled: true
-    schedule: 44 8 * * *
-  remote:
-    enabled: true
-    schedule: 44 9 * * *
-  external:
-    enabled: true
-    schedule: 44 10 * * *
--- a/clusters/cl01tl/helm/music-grabber/values.yaml
+++ b/clusters/cl01tl/helm/music-grabber/values.yaml
@@ -9,7 +9,7 @@ music-grabber:
        main:
          image:
            repository: g33kphr33k/musicgrabber
-            tag: 2.3.5
+            tag: 2.3.0
            pullPolicy: IfNotPresent
          env:
            - name: MUSIC_DIR
@@ -85,10 +85,6 @@ music-grabber:
              value: 8080
            - name: DNS_UPSTREAM_RESOLVER_TYPE
              value: dot
-            - name: HTTPPROXY
-              value: "off"
-            - name: SHADOWSOCKS
-              value: "off"
          securityContext:
            privileged: True
            capabilities:
--- a/clusters/cl01tl/helm/navidrome/values.yaml
+++ b/clusters/cl01tl/helm/navidrome/values.yaml
@@ -178,10 +178,9 @@ volsync-target-data:
    fsGroupChangePolicy: OnRootMismatch
  local:
    enabled: true
-    schedule: 46 8 * * *
+    schedule: 52 8 * * *
  remote:
-    enabled: true
-    schedule: 46 9 * * *
+    enabled: false
  external:
    enabled: true
-    schedule: 46 10 * * *
+    schedule: 52 9 * * *
--- a/clusters/cl01tl/helm/ntfy/Chart.yaml
+++ b/clusters/cl01tl/helm/ntfy/Chart.yaml
@@ -20,4 +20,4 @@ dependencies:
    version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ntfy.png
 # renovate: datasource=github-releases depName=binwiederhier/ntfy
-appVersion: 2.18.0
+appVersion: 2.17.0
--- a/clusters/cl01tl/helm/ntfy/values.yaml
+++ b/clusters/cl01tl/helm/ntfy/values.yaml
@@ -9,7 +9,7 @@ ntfy:
        main:
          image:
            repository: binwiederhier/ntfy
-            tag: v2.18.0
+            tag: v2.17.0
            pullPolicy: IfNotPresent
          args: ["serve"]
          env:
--- a/clusters/cl01tl/helm/ollama/values.yaml
+++ b/clusters/cl01tl/helm/ollama/values.yaml
@@ -117,7 +117,7 @@ ollama:
        main:
          image:
            repository: ghcr.io/open-webui/open-webui
-            tag: v0.8.10
+            tag: v0.8.8
            pullPolicy: IfNotPresent
          env:
            - name: ENV
@@ -308,10 +308,9 @@ volsync-target-data:
    runAsGroup: 1337
  local:
    enabled: true
-    schedule: 48 8 * * *
+    schedule: 54 8 * * *
  remote:
-    enabled: true
-    schedule: 48 9 * * *
+    enabled: false
  external:
    enabled: true
-    schedule: 48 10 * * *
+    schedule: 54 9 * * *
--- a/clusters/cl01tl/helm/outline/Chart.lock
+++ b/clusters/cl01tl/helm/outline/Chart.lock
@@ -4,15 +4,12 @@ dependencies:
  version: 4.6.2
 - name: cloudflared
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.4.0
+  version: 2.3.0
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 7.8.0
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.0
- name: volsync-target
-  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.8.0
-digest: sha256:e1f1a6ebdee3146e028c4df1762a4c60c1e62733a91e54d615190f8138be117d
-generated: "2026-03-11T16:37:32.297394-05:00"
+  version: 0.3.0
+digest: sha256:bbee925922519c634f9e4ccc716f26e701661fceaed9a729b3aab1a190e3f870
+generated: "2026-03-06T06:34:57.973236378Z"
--- a/clusters/cl01tl/helm/outline/Chart.yaml
+++ b/clusters/cl01tl/helm/outline/Chart.yaml
@@ -24,18 +24,14 @@ dependencies:
    version: 4.6.2
  - name: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.4.0
+    version: 2.3.0
  - name: postgres-cluster
    alias: postgres-18-cluster
    version: 7.8.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: valkey
    alias: valkey
-    version: 0.4.0
-    repository: oci://harbor.alexlebens.net/helm-charts
-  - name: volsync-target
-    alias: volsync-target-data
-    version: 0.8.0
+    version: 0.3.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/outline.png
 # renovate: datasource=github-releases depName=outline/outline
--- a/clusters/cl01tl/helm/outline/templates/object-bucket-claim.yaml
+++ b/clusters/cl01tl/helm/outline/templates/object-bucket-claim.yaml
@@ -0,0 +1,30 @@
+apiVersion: objectbucket.io/v1alpha1
+kind: ObjectBucketClaim
+metadata:
+  name: ceph-bucket-outline
+  labels:
+    app.kubernetes.io/name: ceph-bucket-outline
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  generateBucketName: bucket-outline
+  storageClassName: ceph-bucket
+  # additionalConfig:
+  #   bucketPolicy: |
+  #       {
+  #           "Version": "2012-10-17",
+  #           "Statement": [
+  #               {
+  #                   "Sid": "VisualEditor",
+  #                   "Effect": "Allow",
+  #                   "Action": [
+  #                       "s3:GetObjectAcl",
+  #                       "s3:DeleteObject",
+  #                       "s3:PutObject",
+  #                       "s3:GetObject",
+  #                       "s3:PutObjectAcl"
+  #                   ],
+  #                   "Resource": "arn:aws:s3:::bucket-outline-630c57e0-d475-4d78-926c-c1c082291d73/*"
+  #               }
+  #           ]
+  #       }
--- a/clusters/cl01tl/helm/outline/values.yaml
+++ b/clusters/cl01tl/helm/outline/values.yaml
@@ -5,9 +5,6 @@ outline:
      replicas: 1
      strategy: Recreate
      revisionHistoryLimit: 3
-      pod:
-        securityContext:
-          fsGroup: 1001
      containers:
        main:
          image:
@@ -69,7 +66,30 @@ outline:
            - name: REDIS_URL
              value: redis://outline-valkey.outline:6379
            - name: FILE_STORAGE
-              value: local
+              value: s3
+            - name: AWS_ACCESS_KEY_ID
+              valueFrom:
+                secretKeyRef:
+                  name: ceph-bucket-outline
+                  key: AWS_ACCESS_KEY_ID
+            - name: AWS_SECRET_ACCESS_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: ceph-bucket-outline
+                  key: AWS_SECRET_ACCESS_KEY
+            - name: AWS_REGION
+              value: us-east-1
+            - name: AWS_S3_UPLOAD_BUCKET_NAME
+              valueFrom:
+                configMapKeyRef:
+                  name: ceph-bucket-outline
+                  key: BUCKET_NAME
+            - name: AWS_S3_UPLOAD_BUCKET_URL
+              value: https://objects.alexlebens.dev
+            - name: AWS_S3_FORCE_PATH_STYLE
+              value: true
+            - name: AWS_S3_ACL
+              value: private
            - name: FILE_STORAGE_UPLOAD_MAX_SIZE
              value: "26214400"
            - name: FORCE_HTTPS
@@ -122,18 +142,6 @@ outline:
          port: 3000
          targetPort: 3000
          protocol: HTTP
-  persistence:
-    data:
-      forceRename: outline-data
-      storageClass: ceph-block
-      accessMode: ReadWriteOnce
-      size: 5Gi
-      retain: true
-      advancedMounts:
-        main:
-          main:
-            - path: /var/lib/outline/data
-              readOnly: false
 postgres-18-cluster:
  mode: recovery
  recovery:
@@ -176,16 +184,3 @@ postgres-18-cluster:
      #   immediate: true
      #   schedule: "0 0 0 * * *"
      #   backupName: external
-volsync-target-data:
-  pvcTarget: outline-data
-  moverSecurityContext:
-    fsGroup: 1001
-  local:
-    enabled: true
-    schedule: 50 8 * * *
-  remote:
-    enabled: true
-    schedule: 50 9 * * *
-  external:
-    enabled: true
-    schedule: 50 10 * * *
--- a/clusters/cl01tl/helm/postiz/Chart.lock
+++ b/clusters/cl01tl/helm/postiz/Chart.lock
@@ -4,18 +4,18 @@ dependencies:
  version: 4.6.2
 - name: cloudflared
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.4.0
+  version: 2.3.0
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 7.8.0
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.0
+  version: 0.3.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.8.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.8.0
-digest: sha256:219e5c5fc45cba34092606802cf1024d99325d8af71d07bbb8758899c0ad5a8f
-generated: "2026-03-09T23:08:31.811042987Z"
+digest: sha256:46f73365e01d62e214775293b3925ec7934523ab055cfd1ffb2b10b0c5e73a31
+generated: "2026-03-06T06:35:11.27539669Z"
--- a/clusters/cl01tl/helm/postiz/Chart.yaml
+++ b/clusters/cl01tl/helm/postiz/Chart.yaml
@@ -23,14 +23,14 @@ dependencies:
    version: 4.6.2
  - name: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.4.0
+    version: 2.3.0
  - name: postgres-cluster
    alias: postgres-18-cluster
    version: 7.8.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: valkey
    alias: valkey
-    version: 0.4.0
+    version: 0.3.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-config
@@ -42,4 +42,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/postiz.png
 # renovate: datasource=github-releases depName=gitroomhq/postiz-app
-appVersion: v2.20.2
+appVersion: v2.20.0
--- a/clusters/cl01tl/helm/postiz/values.yaml
+++ b/clusters/cl01tl/helm/postiz/values.yaml
@@ -9,7 +9,7 @@ postiz:
        main:
          image:
            repository: ghcr.io/gitroomhq/postiz-app
-            tag: v2.20.2
+            tag: v2.20.0
            pullPolicy: IfNotPresent
          env:
            - name: MAIN_URL
@@ -181,21 +181,19 @@ volsync-target-config:
  pvcTarget: postiz-config
  local:
    enabled: true
-    schedule: 52 8 * * *
+    schedule: 56 8 * * *
  remote:
-    enabled: true
-    schedule: 52 9 * * *
+    enabled: false
  external:
    enabled: true
-    schedule: 52 10 * * *
+    schedule: 56 9 * * *
 volsync-target-upload:
  pvcTarget: postiz-uploads
  local:
    enabled: true
-    schedule: 54 8 * * *
+    schedule: 58 8 * * *
  remote:
-    enabled: true
-    schedule: 54 9 * * *
+    enabled: false
  external:
    enabled: true
-    schedule: 54 10 * * *
+    schedule: 58 9 * * *
--- a/clusters/cl01tl/helm/prowlarr/values.yaml
+++ b/clusters/cl01tl/helm/prowlarr/values.yaml
@@ -20,7 +20,7 @@ prowlarr:
        main:
          image:
            repository: ghcr.io/linuxserver/prowlarr
-            tag: 2.3.0@sha256:9ef5d8bf832edcacb6082f9262cb36087854e78eb7b1c3e1d4375056055b2d82
+            tag: 2.3.0@sha256:a8fe7b9c502f979146b6d0f22438b825c38e068241bb8a708c473062dffdbb03
            pullPolicy: IfNotPresent
          env:
            - name: TZ
@@ -84,10 +84,9 @@ volsync-target-config:
      - 65539
  local:
    enabled: true
-    schedule: 56 8 * * *
+    schedule: 0 11 * * *
  remote:
-    enabled: true
-    schedule: 56 9 * * *
+    enabled: false
  external:
    enabled: true
-    schedule: 56 10 * * *
+    schedule: 0 12 * * *
--- a/clusters/cl01tl/helm/qbittorrent/values.yaml
+++ b/clusters/cl01tl/helm/qbittorrent/values.yaml
@@ -28,7 +28,7 @@ qbittorrent:
        qbittorrent:
          image:
            repository: ghcr.io/linuxserver/qbittorrent
-            tag: 5.1.4@sha256:6a7ffbfff04dd109bff37c474bfee00aa08dea5edb78c670439be3ed242b70fa
+            tag: 5.1.4@sha256:3ee43a4d08ce4a0108e4c8150f570544a8c4a4a11e2ca95b86d46006547f80d5
            pullPolicy: IfNotPresent
          env:
            - name: TZ
@@ -86,10 +86,6 @@ qbittorrent:
              value: 8080,9022
            - name: DNS_UPSTREAM_RESOLVER_TYPE
              value: dot
-            - name: HTTPPROXY
-              value: "off"
-            - name: SHADOWSOCKS
-              value: "off"
          securityContext:
            privileged: True
            capabilities:
@@ -183,7 +179,7 @@ qbittorrent:
        apprise-api:
          image:
            repository: caronc/apprise
-            tag: v1.3.2
+            tag: v1.3.1
            pullPolicy: IfNotPresent
          env:
            - name: TZ
@@ -452,21 +448,19 @@ volsync-target-config:
    fsGroupChangePolicy: OnRootMismatch
  local:
    enabled: true
-    schedule: 58 8 * * *
+    schedule: 2 11 * * *
    restic:
      copyMethod: Snapshot
      storageClassName: ceph-filesystem
      volumeSnapshotClassName: ceph-filesystem-snapshot
  remote:
-    enabled: true
-    schedule: 58 9 * * *
    restic:
      copyMethod: Snapshot
      storageClassName: ceph-filesystem
      volumeSnapshotClassName: ceph-filesystem-snapshot
  external:
    enabled: true
-    schedule: 58 10 * * *
+    schedule: 2 12 * * *
    restic:
      copyMethod: Snapshot
      storageClassName: ceph-filesystem
@@ -475,21 +469,19 @@ volsync-target-qbit-manage-config:
  pvcTarget: qbittorrent-qbit-manage-config-data
  local:
    enabled: true
-    schedule: 0 11 * * *
+    schedule: 4 11 * * *
  remote:
-    enabled: true
-    schedule: 0 12 * * *
+    enabled: false
  external:
    enabled: true
-    schedule: 0 13 * * *
+    schedule: 4 12 * * *
 volsync-target-qui-config:
  pvcTarget: qbittorrent-qui-config-data
  local:
    enabled: true
-    schedule: 2 11 * * *
+    schedule: 6 11 * * *
  remote:
-    enabled: true
-    schedule: 2 12 * * *
+    enabled: false
  external:
    enabled: true
-    schedule: 2 13 * * *
+    schedule: 6 12 * * *
--- a/clusters/cl01tl/helm/radarr-4k/values.yaml
+++ b/clusters/cl01tl/helm/radarr-4k/values.yaml
@@ -15,7 +15,7 @@ radarr-4k:
        main:
          image:
            repository: ghcr.io/linuxserver/radarr
-            tag: 6.0.4@sha256:ca43905eaf2dd11425efdcfe184892e43806b1ae0a830440c825cecbc2629cfb
+            tag: 6.0.4@sha256:a360633a3682d41e96f71a07ff36ecbdf2394a9628465b84b0a8437087715b41
            pullPolicy: IfNotPresent
          env:
            - name: TZ
@@ -188,10 +188,9 @@ volsync-target-config:
    fsGroupChangePolicy: OnRootMismatch
  local:
    enabled: true
-    schedule: 6 11 * * *
+    schedule: 10 11 * * *
  remote:
-    enabled: true
-    schedule: 6 12 * * *
+    enabled: false
  external:
    enabled: true
-    schedule: 6 13 * * *
+    schedule: 10 12 * * *
--- a/clusters/cl01tl/helm/radarr-anime/values.yaml
+++ b/clusters/cl01tl/helm/radarr-anime/values.yaml
@@ -13,7 +13,7 @@ radarr-anime:
        main:
          image:
            repository: ghcr.io/linuxserver/radarr
-            tag: 6.0.4@sha256:ca43905eaf2dd11425efdcfe184892e43806b1ae0a830440c825cecbc2629cfb
+            tag: 6.0.4@sha256:a360633a3682d41e96f71a07ff36ecbdf2394a9628465b84b0a8437087715b41
            pullPolicy: IfNotPresent
          env:
            - name: TZ
@@ -186,10 +186,9 @@ volsync-target-config:
    fsGroupChangePolicy: OnRootMismatch
  local:
    enabled: true
-    schedule: 8 11 * * *
+    schedule: 12 11 * * *
  remote:
-    enabled: true
-    schedule: 8 12 * * *
+    enabled: false
  external:
    enabled: true
-    schedule: 8 13 * * *
+    schedule: 12 12 * * *
--- a/clusters/cl01tl/helm/radarr-standup/values.yaml
+++ b/clusters/cl01tl/helm/radarr-standup/values.yaml
@@ -13,7 +13,7 @@ radarr-standup:
        main:
          image:
            repository: ghcr.io/linuxserver/radarr
-            tag: 6.0.4@sha256:ca43905eaf2dd11425efdcfe184892e43806b1ae0a830440c825cecbc2629cfb
+            tag: 6.0.4@sha256:a360633a3682d41e96f71a07ff36ecbdf2394a9628465b84b0a8437087715b41
            pullPolicy: IfNotPresent
          env:
            - name: TZ
@@ -186,10 +186,9 @@ volsync-target-config:
    fsGroupChangePolicy: OnRootMismatch
  local:
    enabled: true
-    schedule: 10 11 * * *
+    schedule: 14 11 * * *
  remote:
-    enabled: true
-    schedule: 10 12 * * *
+    enabled: false
  external:
    enabled: true
-    schedule: 10 13 * * *
+    schedule: 14 12 * * *
--- a/clusters/cl01tl/helm/radarr/values.yaml
+++ b/clusters/cl01tl/helm/radarr/values.yaml
@@ -15,7 +15,7 @@ radarr:
        main:
          image:
            repository: ghcr.io/linuxserver/radarr
-            tag: 6.0.4@sha256:ca43905eaf2dd11425efdcfe184892e43806b1ae0a830440c825cecbc2629cfb
+            tag: 6.0.4@sha256:a360633a3682d41e96f71a07ff36ecbdf2394a9628465b84b0a8437087715b41
            pullPolicy: IfNotPresent
          env:
            - name: TZ
@@ -188,10 +188,9 @@ volsync-target-config:
    fsGroupChangePolicy: OnRootMismatch
  local:
    enabled: true
-    schedule: 4 11 * * *
+    schedule: 8 11 * * *
  remote:
-    enabled: true
-    schedule: 4 12 * * *
+    enabled: false
  external:
    enabled: true
-    schedule: 4 13 * * *
+    schedule: 8 12 * * *
--- a/clusters/cl01tl/helm/rook-ceph/Chart.lock
+++ b/clusters/cl01tl/helm/rook-ceph/Chart.lock
@@ -7,6 +7,6 @@ dependencies:
  version: v1.19.2
 - name: cloudflared
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.4.0
-digest: sha256:4bd2987d8b6b91e0c4dc026c5d20419c69bd81c82063d7850bbfe8d7dbea3b82
-generated: "2026-03-09T22:05:44.444530464Z"
+  version: 2.3.0
+digest: sha256:32298e3004a4b411ded3a82a2eea31b350b8e8909bd193538fa3c6be0b8a0e94
+generated: "2026-02-24T20:18:18.200779597Z"
--- a/Show More
+++ b/Show More