Update ghcr.io/immich-app/immich-machine-learning Docker tag to v1.135.3

.gitea/workflows/process-issues.yaml

@@ -1,11 +1,11 @@
-name: process-repository
+name: process-issues
 
 on:
   schedule:
-    - cron: "@daily"
+    - cron: '@daily'
 
 jobs:
-  process-repository:
+  process-issues:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Python Script
@@ -14,27 +14,22 @@ jobs:
           repository: alexlebens/workflow-scripts
           ref: main
           token: ${{ secrets.BOT_TOKEN }}
-          path: workflow-scripts
+          path: scripts
 
       - name: Set up Python
         uses: actions/setup-python@v5
         with:
-          python-version: "3.13"
+          python-version: '3.13'
 
       - name: Install dependencies
-        run: pip install requests immutabledict
+        run: pip install requests
 
       - name: Run Script
         env:
           INSTANCE_URL: ${{ vars.INSTANCE_URL }}
-          OWNER: ${{ gitea.owner }}
           REPOSITORY: ${{ gitea.repository }}
           TOKEN: ${{ secrets.BOT_TOKEN }}
-          LOG_LEVEL: DEBUG
+          STALE_DAYS: 3
-          ISSUE_STALE_DAYS: 3
+          STALE_TAG: 'stale'
-          ISSUE_STALE_TAG: 16
+          EXCLUDE_TAG: 'renovate'
-          ISSUE_EXCLUDE_TAG: 20
+        run: python ./scripts/scripts/process-issues.py
-          PULL_REQUEST_STALE_DAYS: 3
-          PULL_REQUEST_STALE_TAG: 16
-          PULL_REQUEST_REQUIRED_TAG: 15
-        run: python ./workflow-scripts/process-repository.py

.gitea/workflows/process-pull-requests.yaml

@@ -0,0 +1,35 @@
+name: process-pull-requests
+
+on:
+  schedule:
+    - cron: '@daily'
+
+jobs:
+  process-pull-requests:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout Python Script
+        uses: actions/checkout@v4
+        with:
+          repository: alexlebens/workflow-scripts
+          ref: main
+          token: ${{ secrets.BOT_TOKEN }}
+          path: scripts
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: '3.13'
+
+      - name: Install dependencies
+        run: pip install requests
+
+      - name: Run Script
+        env:
+          INSTANCE_URL: ${{ vars.INSTANCE_URL }}
+          REPOSITORY: ${{ gitea.repository }}
+          TOKEN: ${{ secrets.BOT_TOKEN }}
+          STALE_DAYS: 3
+          STALE_TAG: 'stale'
+          REQUIRED_TAG: 'automerge'
+        run: python ./scripts/scripts/process-pull-requests.py

clusters/cl01tl/applications/audiobookshelf/values.yaml

@@ -9,7 +9,7 @@ audiobookshelf:
         main:
           image:
             repository: ghcr.io/advplyr/audiobookshelf
-            tag: 2.26.1
+            tag: 2.25.1
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/applications/calibre-web-automated/values.yaml

@@ -31,7 +31,7 @@ calibre-web-automated:
         main:
           image:
             repository: ghcr.io/calibrain/calibre-web-automated-book-downloader
-            tag: latest@sha256:518908641a2260249513f349eef9f30e580f8f428d1adfa830096b43a818e97b
+            tag: latest@sha256:914a9e80b1c5b81b0e17a7d82ad1d1e22b0050164a739131203831123c60baf7
             pullPolicy: IfNotPresent
           env:
             - name: FLASK_PORT

clusters/cl01tl/applications/code-server/values.yaml

@@ -9,7 +9,7 @@ code-server:
         main:
           image:
             repository: ghcr.io/linuxserver/code-server
-            tag: 4.102.1@sha256:61d3d01f1716a0dac5dec2a000a4fa8b48d3c0d9ded31860dbe994f0f6096cb5
+            tag: 4.101.2@sha256:e95165de246ed30656081fc9a517b6ceccc00a2232b8455a996faab42c252f5e
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/applications/directus/Chart.yaml

@@ -24,7 +24,7 @@ dependencies:
     repository: https://bjw-s-labs.github.io/helm-charts/
     version: 4.1.2
   - name: valkey
-    version: 3.0.22
+    version: 3.0.20
     repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
   - name: cloudflared
     alias: cloudflared-directus
@@ -32,7 +32,7 @@ dependencies:
     version: 1.18.0
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 6.4.4
+    version: 5.1.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/directus.png
 appVersion: 11.7.2

clusters/cl01tl/applications/directus/values.yaml

@@ -9,7 +9,7 @@ directus:
         main:
           image:
             repository: directus/directus
-            tag: 11.9.3
+            tag: 11.9.2
             pullPolicy: IfNotPresent
           env:
             - name: PUBLIC_URL

clusters/cl01tl/applications/element-web/Chart.yaml

@@ -17,7 +17,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: element-web
-    version: 1.4.16
+    version: 1.4.14
     repository: https://ananace.gitlab.io/charts
   - name: cloudflared
     alias: cloudflared

clusters/cl01tl/applications/element-web/values.yaml

@@ -2,7 +2,7 @@ element-web:
   replicaCount: 1
   image:
     repository: vectorim/element-web
-    tag: v1.11.106
+    tag: v1.11.105
     pullPolicy: IfNotPresent
   defaultServer:
     url: https://matrix.alexlebens.dev

clusters/cl01tl/applications/freshrss/Chart.yaml

@@ -27,7 +27,7 @@ dependencies:
     version: 1.18.0
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 6.4.4
+    version: 5.1.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/freshrss.png
 appVersion: 1.26.2

clusters/cl01tl/applications/freshrss/values.yaml

@@ -11,7 +11,7 @@ freshrss:
             runAsUser: 0
           image:
             repository: alpine
-            tag: 3.22.1
+            tag: 3.22.0
             pullPolicy: IfNotPresent
           command:
             - /bin/sh
@@ -35,7 +35,7 @@ freshrss:
             runAsUser: 0
           image:
             repository: alpine
-            tag: 3.22.1
+            tag: 3.22.0
             pullPolicy: IfNotPresent
           command:
             - /bin/sh

clusters/cl01tl/applications/home-assistant/values.yaml

@@ -9,7 +9,7 @@ home-assistant:
         main:
           image:
             repository: ghcr.io/home-assistant/home-assistant
-            tag: 2025.7.2
+            tag: 2025.7.1
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -21,7 +21,7 @@ home-assistant:
         code-server:
           image:
             repository: ghcr.io/linuxserver/code-server
-            tag: 4.102.1@sha256:61d3d01f1716a0dac5dec2a000a4fa8b48d3c0d9ded31860dbe994f0f6096cb5
+            tag: 4.101.2@sha256:e95165de246ed30656081fc9a517b6ceccc00a2232b8455a996faab42c252f5e
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/applications/homepage-dev/values.yaml

@@ -11,7 +11,7 @@ homepage:
         main:
           image:
             repository: ghcr.io/gethomepage/homepage
-            tag: v1.4.0
+            tag: v1.3.2
             pullPolicy: IfNotPresent
           env:
             - name: HOMEPAGE_ALLOWED_HOSTS

clusters/cl01tl/applications/homepage/values.yaml

@@ -15,7 +15,7 @@ homepage:
         main:
           image:
             repository: ghcr.io/gethomepage/homepage
-            tag: v1.4.0
+            tag: v1.3.2
             pullPolicy: IfNotPresent
           env:
             - name: HOMEPAGE_ALLOWED_HOSTS

clusters/cl01tl/applications/huntarr/values.yaml

@@ -9,7 +9,7 @@ huntarr:
         main:
           image:
             repository: ghcr.io/plexguide/huntarr
-            tag: 8.1.15
+            tag: 8.1.11
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/applications/immich/Chart.yaml

@@ -21,11 +21,11 @@ dependencies:
     repository: https://bjw-s-labs.github.io/helm-charts/
     version: 4.1.2
   - name: valkey
-    version: 3.0.22
+    version: 3.0.20
     repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
   - name: postgres-cluster
     alias: postgres-16-cluster
-    version: 6.4.4
+    version: 5.1.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/immich.png
 appVersion: v1.132.3

clusters/cl01tl/applications/immich/values.yaml

@@ -99,7 +99,7 @@ immich:
         main:
           image:
             repository: ghcr.io/immich-app/immich-machine-learning
-            tag: v1.134.0
+            tag: v1.135.3
             pullPolicy: IfNotPresent
           env:
             - name: TRANSFORMERS_CACHE

clusters/cl01tl/applications/jellystat/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     version: 4.1.2
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 6.4.4
+    version: 5.1.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/jellystat.png
 appVersion: 1.1.6

clusters/cl01tl/applications/libation/values.yaml

@@ -16,7 +16,7 @@ libation:
         main:
           image:
             repository: rmcrackan/libation
-            tag: 12.4.7
+            tag: 12.4.5
             pullPolicy: IfNotPresent
           env:
             - name: SLEEP_TIME

clusters/cl01tl/applications/lidarr/Chart.yaml

@@ -24,7 +24,7 @@ dependencies:
     version: 4.1.2
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 6.4.4
+    version: 5.1.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/lidarr.png
 appVersion: 2.11.2

clusters/cl01tl/applications/lidarr/values.yaml

@@ -15,7 +15,7 @@ lidarr:
         main:
           image:
             repository: ghcr.io/linuxserver/lidarr
-            tag: 2.12.4@sha256:d902a742ec417cc0f8fb87977f0d1e8df2c6f8dd43c96ff7b16e29c70b4776b8
+            tag: 2.12.4@sha256:b1daebbda8ee180e509bb726378b0dd7816ac29eef43a8e85f6071be4d4e6904
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/applications/omni-tools/values.yaml

@@ -9,7 +9,7 @@ omni-tools:
         main:
           image:
             repository: iib0011/omni-tools
-            tag: 0.5.0
+            tag: 0.4.0
             pullPolicy: IfNotPresent
           resources:
             requests:

clusters/cl01tl/applications/outline/Chart.yaml

@@ -25,7 +25,7 @@ dependencies:
     repository: https://bjw-s-labs.github.io/helm-charts/
     version: 4.1.2
   - name: valkey
-    version: 3.0.22
+    version: 3.0.20
     repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
   - name: cloudflared
     alias: cloudflared-outline
@@ -33,7 +33,7 @@ dependencies:
     version: 1.18.0
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 6.4.4
+    version: 5.1.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/outline.png
 appVersion: 0.84.0

clusters/cl01tl/applications/outline/values.yaml

@@ -9,7 +9,7 @@ outline:
         main:
           image:
             repository: outlinewiki/outline
-            tag: 0.85.1
+            tag: 0.85.0
             pullPolicy: IfNotPresent
           env:
             - name: NODE_ENV

clusters/cl01tl/applications/photoview/Chart.yaml

@@ -20,7 +20,7 @@ dependencies:
     version: 4.1.2
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 6.4.4
+    version: 5.1.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/photoview.png
 appVersion: 2.4.0

clusters/cl01tl/applications/plex/values.yaml

@@ -9,7 +9,7 @@ plex:
         main:
           image:
             repository: ghcr.io/linuxserver/plex
-            tag: 1.41.9@sha256:f8ed359f87f1becab37c2586af9f3414bd5c604d031d47f75e8422baf5224ef5
+            tag: 1.41.8@sha256:2bae6500e2328fbc48fcc9ec1c0c17d6f95e8d024fcbff5c60d154093f29832d
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/applications/postiz/Chart.yaml

@@ -24,14 +24,14 @@ dependencies:
     repository: https://bjw-s-labs.github.io/helm-charts/
     version: 4.1.2
   - name: valkey
-    version: 3.0.22
+    version: 3.0.20
     repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
     version: 1.18.0
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 6.4.4
+    version: 5.1.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/postiz.png
 appVersion: v1.43.3

clusters/cl01tl/applications/postiz/values.yaml

@@ -9,7 +9,7 @@ postiz:
         main:
           image:
             repository: ghcr.io/gitroomhq/postiz-app
-            tag: v1.65.1
+            tag: v1.61.3
             pullPolicy: IfNotPresent
           env:
             - name: MAIN_URL

clusters/cl01tl/applications/prowlarr/values.yaml

@@ -20,7 +20,7 @@ prowlarr:
         main:
           image:
             repository: ghcr.io/linuxserver/prowlarr
-            tag: 1.37.0@sha256:89eac63d2099477094df8c2329a6a750b8b5e382f8975dd18e7861678b55cca4
+            tag: 1.37.0@sha256:b6583aeaa0fe637da09b5d8e498a3f6dcb9eef96aa59d4c455bf021c9f914119
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/applications/radarr-4k/Chart.yaml

@@ -27,7 +27,7 @@ dependencies:
     version: 4.1.2
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 6.4.4
+    version: 5.1.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/radarr-4k.png
 appVersion: 5.22.4

clusters/cl01tl/applications/radarr-4k/values.yaml

@@ -15,7 +15,7 @@ radarr-4k:
         main:
           image:
             repository: ghcr.io/linuxserver/radarr
-            tag: 5.26.2@sha256:ae89f05ad7023258730ed62f5fcca63aab1e27ee5adcca1edb55d716f7cef356
+            tag: 5.26.2@sha256:3f6c13cd920e60469e24fac6b25338b0805832e6dea108f8316814d0f4147ab6
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/applications/radarr-anime/Chart.yaml

@@ -27,7 +27,7 @@ dependencies:
     version: 4.1.2
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 6.4.4
+    version: 5.1.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/radarr-anime.png
 appVersion: 5.22.4

clusters/cl01tl/applications/radarr-anime/values.yaml

@@ -13,7 +13,7 @@ radarr-anime:
         main:
           image:
             repository: ghcr.io/linuxserver/radarr
-            tag: 5.26.2@sha256:ae89f05ad7023258730ed62f5fcca63aab1e27ee5adcca1edb55d716f7cef356
+            tag: 5.26.2@sha256:3f6c13cd920e60469e24fac6b25338b0805832e6dea108f8316814d0f4147ab6
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/applications/radarr-standup/Chart.yaml

@@ -26,7 +26,7 @@ dependencies:
     version: 4.1.2
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 6.4.4
+    version: 5.1.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/radarr.png
 appVersion: 5.22.4

clusters/cl01tl/applications/radarr-standup/values.yaml

@@ -13,7 +13,7 @@ radarr-standup:
         main:
           image:
             repository: ghcr.io/linuxserver/radarr
-            tag: 5.26.2@sha256:ae89f05ad7023258730ed62f5fcca63aab1e27ee5adcca1edb55d716f7cef356
+            tag: 5.26.2@sha256:3f6c13cd920e60469e24fac6b25338b0805832e6dea108f8316814d0f4147ab6
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/applications/radarr/Chart.yaml

@@ -26,7 +26,7 @@ dependencies:
     version: 4.1.2
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 6.4.4
+    version: 5.1.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/radarr.png
 appVersion: 5.22.4

clusters/cl01tl/applications/radarr/values.yaml

@@ -15,7 +15,7 @@ radarr:
         main:
           image:
             repository: ghcr.io/linuxserver/radarr
-            tag: 5.26.2@sha256:ae89f05ad7023258730ed62f5fcca63aab1e27ee5adcca1edb55d716f7cef356
+            tag: 5.26.2@sha256:3f6c13cd920e60469e24fac6b25338b0805832e6dea108f8316814d0f4147ab6
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/applications/roundcube/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     version: 4.1.2
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 6.4.4
+    version: 5.1.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/roundcube.png
 appVersion: 1.6.10

clusters/cl01tl/applications/searxng/Chart.yaml

@@ -19,7 +19,7 @@ dependencies:
     repository: https://bjw-s-labs.github.io/helm-charts/
     version: 4.1.2
   - name: valkey
-    version: 3.0.22
+    version: 3.0.20
     repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/searxng.png
 appVersion: 1.0.0

clusters/cl01tl/applications/searxng/values.yaml

@@ -9,7 +9,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:8f1196f03960ebae2292ba7b6d3e074c643abded31ad5bb0d0e971e20670156c
+            tag: latest@sha256:8f757f615fe5dc634ba16fae8576a5189b695b55fc225f6bae2efb5b9aa8d3da
             pullPolicy: IfNotPresent
           env:
             - name: SEARXNG_BASE_URL
@@ -43,7 +43,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:8f1196f03960ebae2292ba7b6d3e074c643abded31ad5bb0d0e971e20670156c
+            tag: latest@sha256:8f757f615fe5dc634ba16fae8576a5189b695b55fc225f6bae2efb5b9aa8d3da
             pullPolicy: IfNotPresent
           env:
             - name: SEARXNG_BASE_URL

clusters/cl01tl/applications/site-profile/values.yaml

@@ -11,7 +11,7 @@ site-profile:
         main:
           image:
             repository: harbor.alexlebens.net/images/site-profile
-            tag: 0.11.2
+            tag: 0.8.12
             pullPolicy: IfNotPresent
           resources:
             requests:

clusters/cl01tl/applications/sonarr-4k/Chart.yaml

@@ -27,7 +27,7 @@ dependencies:
     version: 4.1.2
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 6.4.4
+    version: 5.1.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/sonarr.png
 appVersion: 4.0.14

clusters/cl01tl/applications/sonarr-4k/values.yaml

@@ -13,7 +13,7 @@ sonarr-4k:
         main:
           image:
             repository: ghcr.io/linuxserver/sonarr
-            tag: 4.0.15@sha256:b0ac15772c04f329964ed79cb446ab23fd1ee28f33b58b10f0264feac17d33cd
+            tag: 4.0.15@sha256:4afcb099e40ef263a7327f1ee9a870a510a516f872ae79b863c11b94d0b9ebb7
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/applications/sonarr-anime/Chart.yaml

@@ -26,7 +26,7 @@ dependencies:
     version: 4.1.2
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 6.4.4
+    version: 5.1.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/sonarr.png
 appVersion: 4.0.14

clusters/cl01tl/applications/sonarr-anime/values.yaml

@@ -13,7 +13,7 @@ sonarr-anime:
         main:
           image:
             repository: ghcr.io/linuxserver/sonarr
-            tag: 4.0.15@sha256:b0ac15772c04f329964ed79cb446ab23fd1ee28f33b58b10f0264feac17d33cd
+            tag: 4.0.15@sha256:4afcb099e40ef263a7327f1ee9a870a510a516f872ae79b863c11b94d0b9ebb7
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/applications/sonarr/Chart.yaml

@@ -26,7 +26,7 @@ dependencies:
     version: 4.1.2
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 6.4.4
+    version: 5.1.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/sonarr.png
 appVersion: 4.0.14

clusters/cl01tl/applications/sonarr/values.yaml

@@ -13,7 +13,7 @@ sonarr:
         main:
           image:
             repository: ghcr.io/linuxserver/sonarr
-            tag: 4.0.15@sha256:b0ac15772c04f329964ed79cb446ab23fd1ee28f33b58b10f0264feac17d33cd
+            tag: 4.0.15@sha256:4afcb099e40ef263a7327f1ee9a870a510a516f872ae79b863c11b94d0b9ebb7
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/applications/tubearchivist/Chart.yaml

@@ -24,10 +24,10 @@ dependencies:
     repository: https://bjw-s-labs.github.io/helm-charts/
     version: 4.1.2
   - name: valkey
-    version: 3.0.22
+    version: 3.0.20
     repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
   - name: elasticsearch
-    version: 22.0.13
+    version: 22.0.11
     repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/tube-archivist.png
 appVersion: v0.5.2

clusters/cl01tl/applications/vaultwarden/Chart.yaml

@@ -28,7 +28,7 @@ dependencies:
     version: 1.18.0
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 6.4.4
+    version: 5.1.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/vaultwarden.png
 appVersion: 1.33.2

clusters/cl01tl/applications/yamtrack/Chart.yaml

@@ -23,11 +23,11 @@ dependencies:
     repository: https://bjw-s-labs.github.io/helm-charts/
     version: 4.1.2
   - name: valkey
-    version: 3.0.22
+    version: 3.0.20
     repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 6.4.4
+    version: 5.1.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/yamtrack.png
 appVersion: 0.22.7

clusters/cl01tl/deployment/argocd/Chart.yaml

@@ -15,7 +15,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: argo-cd
-    version: 8.1.3
+    version: 8.1.2
     repository: https://argoproj.github.io/argo-helm
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 appVersion: 3.0.0

clusters/cl01tl/management/argo-workflows/Chart.yaml

@@ -18,14 +18,14 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: argo-workflows
-    version: 0.45.20
+    version: 0.45.19
     repository: https://argoproj.github.io/argo-helm
   - name: argo-events
-    version: 2.4.16
+    version: 2.4.15
     repository: https://argoproj.github.io/argo-helm
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 6.4.4
+    version: 5.1.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 appVersion: v3.6.7

clusters/cl01tl/management/komodo/Chart.yaml

@@ -23,7 +23,7 @@ dependencies:
     version: 4.1.2
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 6.4.4
+    version: 5.1.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/komodo.png
 appVersion: v1.17.5

clusters/cl01tl/monitoring/gatus/Chart.yaml

@@ -22,7 +22,7 @@ dependencies:
     version: 1.3.0
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 6.4.4
+    version: 5.1.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/gatus.png
 appVersion: v5.12.0

clusters/cl01tl/monitoring/grafana-operator/Chart.yaml

@@ -21,15 +21,15 @@ dependencies:
     repository: https://grafana.github.io/helm-charts
   - name: valkey
     alias: valkey-unified-alerting
-    version: 3.0.22
+    version: 3.0.20
     repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
   - name: valkey
     alias: valkey-remote-cache
-    version: 3.0.22
+    version: 3.0.20
     repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 6.4.4
+    version: 5.1.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/grafana.png
 appVersion: v5.18.0

clusters/cl01tl/monitoring/grafana-operator/templates/grafana-dashboard.yaml

@@ -382,10 +382,10 @@ spec:
 apiVersion: grafana.integreatly.org/v1beta1
 kind: GrafanaDashboard
 metadata:
-  name: grafana-dashboard-s3
+  name: grafana-dashboard-digital-ocean-s3
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: grafana-dashboard-s3
+    app.kubernetes.io/name: grafana-dashboard-digital-ocean-s3
     app.kubernetes.io/instance: {{ .Release.Name }}
     app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
@@ -395,7 +395,7 @@ spec:
   contentCacheDuration: 1h
   folderUID: grafana-folder-platform
   resyncPeriod: 1h
-  url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/platform/s3.json
+  url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/platform/digital-ocean-s3.json
 
 ---
 apiVersion: grafana.integreatly.org/v1beta1

clusters/cl01tl/monitoring/kube-prometheus-stack/Chart.yaml

@@ -17,7 +17,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: kube-prometheus-stack
-    version: 75.12.0
+    version: 75.9.0
     repository: oci://ghcr.io/prometheus-community/charts
   - name: app-template
     alias: ntfy-alertmanager
@@ -25,7 +25,7 @@ dependencies:
     version: 4.1.2
   - name: valkey
     alias: valkey-ntfy-alertmanager
-    version: 3.0.22
+    version: 3.0.20
     repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/prometheus.png
 appVersion: v0.82.0

clusters/cl01tl/monitoring/loki/Chart.yaml

@@ -16,7 +16,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: loki
-    version: 6.32.0
+    version: 6.30.1
     repository: https://grafana.github.io/helm-charts
   - name: promtail
     version: 6.17.0

clusters/cl01tl/monitoring/s3-exporter/Chart.yaml

@@ -9,8 +9,8 @@ keywords:
   - metrics
 home: https://wiki.alexlebens.dev/s/
 sources:
-  - https://github.com/molu8bits/s3bucket_exporter
+  - https://github.com/ribbybibby/s3_exporter
-  - https://hub.docker.com/r/molu8bits/s3bucket_exporter
+  - https://hub.docker.com/r/ribbybibby/s3-exporter
   - https://github.com/bjw-s/helm-charts/blob/main/charts/other/app-template
 maintainers:
   - name: alexlebens
@@ -19,4 +19,4 @@ dependencies:
     alias: s3-exporter
     repository: https://bjw-s-labs.github.io/helm-charts/
     version: 4.1.2
-appVersion: 1.0.2
+appVersion: v0.5.0

clusters/cl01tl/monitoring/s3-exporter/templates/external-secret.yaml

@@ -1,42 +1,5 @@
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
-metadata:
-  name: s3-ceph-directus-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: s3-ceph-directus-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: AWS_ACCESS_KEY_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/directus/ceph
-        metadataPolicy: None
-        property: AWS_ACCESS_KEY_ID
-    - secretKey: AWS_SECRET_ACCESS_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/directus/ceph
-        metadataPolicy: None
-        property: AWS_SECRET_ACCESS_KEY
-    - secretKey: BUCKET_HOST
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/directus/ceph
-        metadataPolicy: None
-        property: BUCKET_HOST
-
----
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
 metadata:
   name: s3-do-home-infra-secret
   namespace: {{ .Release.Namespace }}
@@ -53,14 +16,14 @@ spec:
       remoteRef:
         conversionStrategy: Default
         decodingStrategy: None
-        key: /digital-ocean/home-infra/all-access
+        key: /digital-ocean/home-infra/prometheus-exporter
         metadataPolicy: None
         property: AWS_ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
         conversionStrategy: Default
         decodingStrategy: None
-        key: /digital-ocean/home-infra/all-access
+        key: /digital-ocean/home-infra/prometheus-exporter
         metadataPolicy: None
         property: AWS_SECRET_ACCESS_KEY
     - secretKey: AWS_REGION

clusters/cl01tl/monitoring/s3-exporter/templates/scrape-config.yaml

@@ -0,0 +1,16 @@
+apiVersion: monitoring.coreos.com/v1alpha1
+kind: ScrapeConfig
+metadata:
+  name: s3-do-home-infra
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: s3-do-home-infra
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  jobName: s3-do-home-infra
+  metricsPath: /probe
+  scrapeInterval: 12h
+  scrapeTimeout: 120s
+  httpSDConfigs:
+    - url: http://s3-exporter.s3-exporter:9340/discovery

clusters/cl01tl/monitoring/s3-exporter/templates/service-monitor.yaml

@@ -1,42 +0,0 @@
-apiVersion: monitoring.coreos.com/v1
-kind: ServiceMonitor
-metadata:
-  name: s3-exporter-digital-ocean
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: s3-exporter-digital-ocean
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  selector:
-    matchLabels:
-      app.kubernetes.io/name: s3-exporter
-      app.kubernetes.io/instance: {{ .Release.Name }}
-      app.kubernetes.io/service: s3-exporter-digital-ocean
-  endpoints:
-    - port: metrics
-      interval: 6h
-      scrapeTimeout: 120s
-      path: /metrics
-
----
-apiVersion: monitoring.coreos.com/v1
-kind: ServiceMonitor
-metadata:
-  name: s3-exporter-ceph-directus
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: s3-exporter-ceph-directus
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  selector:
-    matchLabels:
-      app.kubernetes.io/name: s3-exporter
-      app.kubernetes.io/instance: {{ .Release.Name }}
-      app.kubernetes.io/service: s3-exporter-ceph-directus
-  endpoints:
-    - port: metrics
-      interval: 6h
-      scrapeTimeout: 120s
-      path: /metrics

clusters/cl01tl/monitoring/s3-exporter/values.yaml

@@ -1,6 +1,6 @@
 s3-exporter:
   controllers:
-    digital-ocean:
+    main:
       type: deployment
       replicas: 1
       strategy: Recreate
@@ -8,88 +8,28 @@ s3-exporter:
       containers:
         main:
           image:
-            repository: molu8bits/s3bucket_exporter
+            repository: ribbybibby/s3-exporter
-            tag: 1.0.2
+            tag: v0.5.0
             pullPolicy: IfNotPresent
           env:
-            - name: S3_NAME
+            - name: S3_EXPORTER_WEB_LISTEN_ADDRESS
-              value: digital-ocean
+              value: :9340
-            - name: S3_ENDPOINT
+            - name: S3_EXPORTER_S3_ENDPOINT_URL
-              value: https://nyc3.digitaloceanspaces.com
+              value: https://postgres-backups-ce540ddf106d186bbddca68a.nyc3.digitaloceanspaces.com
-            - name: S3_ACCESS_KEY
+            - name: S3_EXPORTER_LOG_LEVEL
-              valueFrom:
-                secretKeyRef:
-                  name: s3-do-home-infra-secret
-                  key: AWS_ACCESS_KEY_ID
-            - name: S3_SECRET_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: s3-do-home-infra-secret
-                  key: AWS_SECRET_ACCESS_KEY
-            - name: S3_REGION
-              valueFrom:
-                secretKeyRef:
-                  name: s3-do-home-infra-secret
-                  key: AWS_REGION
-            - name: LOG_LEVEL
               value: debug
-            - name: S3_FORCE_PATH_STYLE
+          envFrom:
-              value: false
+            - secretRef:
-          resources:
+                name: s3-do-home-infra-secret
-            requests:
-              cpu: 10m
-              memory: 64Mi
-    ceph-directus:
-      type: deployment
-      replicas: 1
-      strategy: Recreate
-      revisionHistoryLimit: 3
-      containers:
-        main:
-          image:
-            repository: molu8bits/s3bucket_exporter
-            tag: 1.0.2
-            pullPolicy: IfNotPresent
-          env:
-            - name: S3_NAME
-              value: ceph-directus
-            - name: S3_ENDPOINT
-              valueFrom:
-                secretKeyRef:
-                  name: s3-ceph-directus-secret
-                  key: BUCKET_HOST
-            - name: S3_ACCESS_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: s3-ceph-directus-secret
-                  key: AWS_ACCESS_KEY_ID
-            - name: S3_SECRET_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: s3-ceph-directus-secret
-                  key: AWS_SECRET_ACCESS_KEY
-            - name: S3_REGION
-              value: us-east-1
-            - name: LOG_LEVEL
-              value: debug
-            - name: S3_FORCE_PATH_STYLE
-              value: true
           resources:
             requests:
               cpu: 10m
               memory: 64Mi
   service:
-    digital-ocean:
+    main:
-      controller: digital-ocean
+      controller: main
       ports:
         metrics:
-          port: 9655
+          port: 9340
-          targetPort: 9655
+          targetPort: 9340
-          protocol: TCP
-    ceph-directus:
-      controller: ceph-directus
-      ports:
-        metrics:
-          port: 9655
-          targetPort: 9655
           protocol: TCP

clusters/cl01tl/monitoring/trivy/Chart.yaml

@@ -16,7 +16,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: trivy-operator
-    version: 0.29.3
+    version: 0.29.2
     repository: https://aquasecurity.github.io/helm-charts/
 icon: https://raw.githubusercontent.com/aquasecurity/trivy/main/docs/imgs/logo.png
 appVersion: v0.26.1

clusters/cl01tl/platform/authentik/Chart.yaml

@@ -29,7 +29,7 @@ dependencies:
     version: 1.18.0
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 6.4.4
+    version: 5.1.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/authentik.png
 appVersion: 2025.4.1

clusters/cl01tl/platform/gitea/Chart.yaml

@@ -28,7 +28,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: gitea
-    version: 12.1.2
+    version: 12.1.1
     repository: https://dl.gitea.io/charts/
   - name: gitea-actions
     repository: oci://harbor.alexlebens.net/helm-charts
@@ -41,11 +41,11 @@ dependencies:
     version: 0.14.0
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: valkey
-    version: 3.0.22
+    version: 3.0.20
     repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
   - name: valkey
     alias: valkey-renovate
-    version: 3.0.22
+    version: 3.0.20
     repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
   - name: cloudflared
     alias: cloudflared
@@ -53,7 +53,7 @@ dependencies:
     version: 1.18.0
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 6.4.4
+    version: 5.1.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/gitea.png
 appVersion: 1.23.7

clusters/cl01tl/platform/gitea/values.yaml

@@ -4,7 +4,7 @@ gitea:
   replicaCount: 3
   image:
     repository: gitea/gitea
-    tag: 1.24.3
+    tag: 1.24.2
   service:
     http:
       type: ClusterIP
@@ -175,7 +175,7 @@ backup:
         backup:
           image:
             repository: bitnami/kubectl
-            tag: 1.33.3
+            tag: 1.33.2
             pullPolicy: IfNotPresent
           command:
             - sh
@@ -192,7 +192,7 @@ backup:
         s3-backup:
           image:
             repository: d3fk/s3cmd
-            tag: latest@sha256:4e1ea572a90e25f42fe0550b86bad601508033030dd6989c63b85a79e143c8b4
+            tag: latest@sha256:dacbd4baa0c66df934e96a9325b9e34563c2ab8e4dd0fe9fd1bd9793d53fb606
             pullPolicy: IfNotPresent
           command:
             - /bin/sh
@@ -216,7 +216,7 @@ backup:
         s3-prune:
           image:
             repository: d3fk/s3cmd
-            tag: latest@sha256:4e1ea572a90e25f42fe0550b86bad601508033030dd6989c63b85a79e143c8b4
+            tag: latest@sha256:dacbd4baa0c66df934e96a9325b9e34563c2ab8e4dd0fe9fd1bd9793d53fb606
             pullPolicy: IfNotPresent
           command:
             - /bin/sh
@@ -227,14 +227,14 @@ backup:
               export FILE_MATCH="$BUCKET/cl01tl/gitea-backup-$DATE_RANGE-09-00.zip"
               echo ">> Running S3 prune for Gitea backup repository"
               echo ">> Backups prior to '$DATE_RANGE' will be removed"
-              echo ">> Backups to be removed:"
+              echo ">> File list:"
-              s3cmd ls ${BUCKET}/cl01tl/ |
+              s3cmd ls ${BUCKET}/cl01tl/
-                awk -v file_match="$FILE_MATCH" '$4 < file_match {print $4}'
               echo ">> Deleting ..."
               s3cmd ls ${BUCKET}/cl01tl/ |
-                awk -v file_match="$FILE_MATCH" '$4 < file_match {print $4}' |
+                awk file_match="$FILE_MATCH" '$4 < file_match {print $4}' |
-                while read file; do
+                while read file;
-                  s3cmd del "$file";
+                  do s3cmd del "$file";
+                  echo ">> Deleted $file";
                 done;
               echo ">> Completed S3 prune for Gitea backup repository"
           env:

clusters/cl01tl/platform/matrix-synapse/Chart.yaml

@@ -31,7 +31,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: matrix-synapse
-    version: 3.12.5
+    version: 3.12.3
     repository: https://ananace.gitlab.io/charts
   - name: app-template
     alias: matrix-hookshot
@@ -47,11 +47,11 @@ dependencies:
   #   version: 4.0.1
   - name: valkey
     alias: valkey-synapse
-    version: 3.0.22
+    version: 3.0.20
     repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
   - name: valkey
     alias: valkey-hookshot
-    version: 3.0.22
+    version: 3.0.20
     repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
   - name: cloudflared
     alias: cloudflared-synapse
@@ -63,7 +63,7 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 6.4.4
+    version: 5.1.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/matrix.png
 appVersion: 1.129.0

clusters/cl01tl/platform/matrix-synapse/values.yaml

@@ -203,7 +203,7 @@ mautrix-discord:
         main:
           image:
             repository: dock.mau.dev/mautrix/discord
-            tag: v0.7.5
+            tag: v0.7.4
             pullPolicy: IfNotPresent
           resources:
             requests:
@@ -252,7 +252,7 @@ mautrix-whatsapp:
         main:
           image:
             repository: dock.mau.dev/mautrix/whatsapp
-            tag: v0.12.3
+            tag: v0.12.2
             pullPolicy: IfNotPresent
           resources:
             requests:

clusters/cl01tl/platform/n8n/Chart.yaml

@@ -22,11 +22,11 @@ dependencies:
     repository: https://bjw-s-labs.github.io/helm-charts/
     version: 4.1.2
   - name: valkey
-    version: 3.0.22
+    version: 3.0.20
     repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 6.4.4
+    version: 5.1.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/n8n.png
 appVersion: 1.93.0

clusters/cl01tl/platform/n8n/values.yaml

@@ -9,7 +9,7 @@ n8n:
         main:
           image:
             repository: ghcr.io/n8n-io/n8n
-            tag: 1.103.1
+            tag: 1.102.1
             pullPolicy: IfNotPresent
           env:
             - name: GENERIC_TIMEZONE
@@ -93,7 +93,7 @@ n8n:
         main:
           image:
             repository: ghcr.io/n8n-io/n8n
-            tag: 1.103.1
+            tag: 1.102.1
             pullPolicy: IfNotPresent
           command:
             - n8n
@@ -182,7 +182,7 @@ n8n:
         main:
           image:
             repository: ghcr.io/n8n-io/n8n
-            tag: 1.103.1
+            tag: 1.102.1
             pullPolicy: IfNotPresent
           command:
             - n8n

clusters/cl01tl/platform/ntfy/values.yaml

@@ -9,7 +9,7 @@ ntfy:
         main:
           image:
             repository: binwiederhier/ntfy
-            tag: v2.13.0
+            tag: v2.12.0
             pullPolicy: IfNotPresent
           args: ["serve"]
           env:

clusters/cl01tl/platform/ollama/Chart.yaml

@@ -23,7 +23,7 @@ dependencies:
     version: 4.1.2
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 6.4.4
+    version: 5.1.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ollama.png
 appVersion: 0.7.0

clusters/cl01tl/platform/ollama/values.yaml

@@ -117,7 +117,7 @@ ollama:
         main:
           image:
             repository: ghcr.io/open-webui/open-webui
-            tag: v0.6.18
+            tag: v0.6.15
             pullPolicy: IfNotPresent
           env:
             - name: ENV

clusters/cl01tl/platform/qbittorrent/templates/config-map.yaml

@@ -42,7 +42,7 @@ data:
       rem_orphaned: true
       tag_nohardlinks: false
       share_limits: true
-      skip_qb_version_check: true
+      skip_qb_version_check: false
       skip_cleanup: false
 
     qbt:

clusters/cl01tl/platform/qbittorrent/values.yaml

@@ -28,7 +28,7 @@ qbittorrent:
         qbittorrent:
           image:
             repository: ghcr.io/linuxserver/qbittorrent
-            tag: 5.1.0@sha256:ca6325989299ff807ab94c9505c138b6cadfe8a77c4ef14c5690094cbbe40d7d
+            tag: 5.1.2@sha256:a3fe8465b4fa5e711358338ee90a958424033ec1e5030dda98d565efc25e0816
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -135,7 +135,7 @@ qbittorrent:
         qbit-manage:
           image:
             repository: ghcr.io/stuffanthings/qbit_manage
-            tag: v4.5.1
+            tag: v4.4.0
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/platform/stalwart/Chart.yaml

@@ -25,14 +25,14 @@ dependencies:
     version: 4.1.2
     repository: https://bjw-s-labs.github.io/helm-charts/
   - name: valkey
-    version: 3.0.22
+    version: 3.0.20
     repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
   - name: elasticsearch
-    version: 22.0.13
+    version: 22.0.11
     repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 6.4.4
+    version: 5.1.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/stalwart-mail-server.png
 appVersion: v0.11.8

clusters/cl01tl/platform/vault/values.yaml

@@ -198,7 +198,7 @@ snapshot:
         s3-backup:
           image:
             repository: d3fk/s3cmd
-            tag: latest@sha256:4e1ea572a90e25f42fe0550b86bad601508033030dd6989c63b85a79e143c8b4
+            tag: latest@sha256:dacbd4baa0c66df934e96a9325b9e34563c2ab8e4dd0fe9fd1bd9793d53fb606
             pullPolicy: IfNotPresent
           command:
             - /bin/sh
@@ -219,6 +219,39 @@ snapshot:
             requests:
               cpu: 100m
               memory: 128Mi
+        s3-prune:
+          image:
+            repository: d3fk/s3cmd
+            tag: latest@sha256:dacbd4baa0c66df934e96a9325b9e34563c2ab8e4dd0fe9fd1bd9793d53fb606
+            pullPolicy: IfNotPresent
+          command:
+            - /bin/sh
+          args:
+            - -ec
+            - |
+              export MONTH_AGO=$(date -d @$(( $(date +%s) - 2592000 )) +%Y-%m-%d\ %H:%M:%S);
+              export TIME_RANGE="$MONTH_AGO"
+              echo ">> Running S3 prune for Vault snapshot repository"
+              echo ">> Backups prior to '$TIME_RANGE' will be removed"
+              echo ">> File list:"
+              s3cmd ls -v ${BUCKET}/cl01tl/cl01tl-vault-snapshots/
+              echo ">> Deleting ..."
+              s3cmd ls -v ${BUCKET}/cl01tl/cl01tl-vault-snapshots/ |
+                awk -v month_ago="$MONTH_AGO" '$1 < month_ago {print $4}' |
+                while read file;
+                  do s3cmd del -v "$file";
+                done;
+              echo ">> Completed S3 prune for Vault snapshot repository"
+          env:
+            - name: BUCKET
+              valueFrom:
+                secretKeyRef:
+                  name: vault-s3cmd-config
+                  key: BUCKET
+          resources:
+            requests:
+              cpu: 100m
+              memory: 128Mi
   persistence:
     config:
       existingClaim: vault-nfs-storage-backup
@@ -241,6 +274,11 @@ snapshot:
               readOnly: true
               mountPropagation: None
               subPath: .s3cfg
+          s3-prune:
+            - path: /root/.s3cfg
+              readOnly: true
+              mountPropagation: None
+              subPath: .s3cfg
 unseal:
   global:
     fullnameOverride: vault-unseal

clusters/cl01tl/services/blocky/Chart.yaml

@@ -20,7 +20,7 @@ dependencies:
     repository: https://bjw-s-labs.github.io/helm-charts/
     version: 4.1.2
   - name: valkey
-    version: 3.0.22
+    version: 3.0.20
     repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/blocky.png
 appVersion: v0.25

clusters/cl01tl/services/generic-device-plugin/Chart.yaml

@@ -15,6 +15,6 @@ maintainers:
 dependencies:
   - name: generic-device-plugin
     repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-    version: 0.4.0
+    version: 0.3.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 appVersion: 0.1.10

clusters/cl01tl/services/generic-device-plugin/values.yaml

@@ -1,7 +1,7 @@
 generic-device-plugin:
   image:
     repository: ghcr.io/squat/generic-device-plugin
-    tag: latest@sha256:1f779444c72c7bf06b082c44698d6268a8e642ebd9488a35c84a603087940e64
+    tag: latest@sha256:d7d0951df7f11479185fd9fba1c1cb4d9c8f3232d38a5468d6fe80074f2b45d5
   config:
     enabled: true
     data: |

clusters/cl01tl/services/harbor/Chart.yaml

@@ -22,11 +22,11 @@ dependencies:
     version: 1.17.1
     repository: https://helm.goharbor.io
   - name: valkey
-    version: 3.0.22
+    version: 3.0.20
     repository: oci://harbor.alexlebens.net/proxy-registry-1.docker.io/bitnamicharts
   - name: postgres-cluster
     alias: postgres-17-cluster
-    version: 6.4.4
+    version: 5.1.0
     repository: http://gitea-http.gitea:3000/api/packages/alexlebens/helm
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/harbor.png
 appVersion: v2.13.0

clusters/cl01tl/services/talos/values.yaml

@@ -73,27 +73,28 @@ etcd-backup:
         s3-prune:
           image:
             repository: d3fk/s3cmd
-            tag: latest@sha256:4e1ea572a90e25f42fe0550b86bad601508033030dd6989c63b85a79e143c8b4
+            tag: latest@sha256:dacbd4baa0c66df934e96a9325b9e34563c2ab8e4dd0fe9fd1bd9793d53fb606
             pullPolicy: IfNotPresent
           command:
             - /bin/sh
           args:
             - -ec
             - |
-              export DATE_RANGE=$(date -d @$(( $(date +%s) - 1209600 )) +%Y-%m-%dT%H:%M:%SZ);
+              export ONE_WEEK_AGO=$(date -d @$(( $(date +%s) - 604800 )) +%Y-%m-%d\ %H:%M:%S);
-              export FILE_MATCH="$BUCKET/cl01tl/etcd/cl01tl-$DATE_RANGE.snap.age"
+              export TWO_WEEK_AGO=$(date -d @$(( $(date +%s) - 1209600 )) +%Y-%m-%d\ %H:%M:%S);
-              echo ">> Running S3 prune for Talos backup repository"
+              export TIME_RANGE="$TWO_WEEK_AGO"
-              echo ">> Backups prior to '$DATE_RANGE' will be removed"
+              echo ">> Running S3 prune for Gitea backup repository"
-              echo ">> Backups to be removed:"
+              echo ">> Backups prior to '$TIME_RANGE' will be removed"
-              s3cmd ls ${BUCKET}/cl01tl/etcd/ |
+              echo ">> File list:"
-                awk -v file_match="$FILE_MATCH" '$4 < file_match {print $4}'
+              s3cmd ls -v ${BUCKET}/cl01tl/etcd/
               echo ">> Deleting ..."
-              s3cmd ls ${BUCKET}/cl01tl/etcd/ |
+              s3cmd ls -v ${BUCKET}/cl01tl/etcd/ |
-                awk -v file_match="$FILE_MATCH" '$4 < file_match {print $4}' |
+                awk -v time_range="$TIME_RANGE" '$1 < time_range {print $4}' |
-                while read file; do
+                while read file;
-                  s3cmd del "$file";
+                  do s3cmd del -v "$file";
+                  echo ">> Deleted $file";
                 done;
-              echo ">> Completed S3 prune for Talos backup repository"
+              echo ">> Completed S3 prune for Gitea backup repository"
           env:
             - name: BUCKET
               valueFrom:

clusters/cl01tl/standalone/cilium/Chart.yaml

@@ -15,7 +15,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: cilium
-    version: 1.17.6
+    version: 1.17.5
     repository: https://helm.cilium.io/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/cilium.png
 appVersion: 1.17.3

clusters/cl01tl/standalone/prometheus-operator-crds/Chart.yaml

@@ -15,7 +15,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: prometheus-operator-crds
-    version: 22.0.1
+    version: 21.0.0
     repository: oci://ghcr.io/prometheus-community/charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/prometheus.png
 appVersion: v0.82.0

clusters/cl01tl/storage/rook-ceph/Chart.yaml

@@ -16,10 +16,10 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: rook-ceph
-    version: v1.17.6
+    version: v1.17.5
     repository: https://charts.rook.io/release
   - name: rook-ceph-cluster
-    version: v1.17.6
+    version: v1.17.5
     repository: https://charts.rook.io/release
   - name: cloudflared
     alias: cloudflared-rgw

clusters/cl01tl/storage/volsync/Chart.yaml

@@ -16,7 +16,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: volsync
-    version: 0.13.0
+    version: 0.12.1
     repository: https://backube.github.io/helm-charts/
 icon: https://raw.githubusercontent.com/backube/volsync/main/docs/media/volsync.svg?sanitize=true
 appVersion: 0.12.1

hosts/ps08rp/traefik/compose.yaml

@@ -1,7 +1,7 @@
 ---
 services:
     traefik:
-        image: ghcr.io/traefik/traefik:v3.4.4
+        image: ghcr.io/traefik/traefik:v3.4.3
         container_name: traefik
         command:
             - "--global.checkNewVersion=false"

hosts/ps09rp/traefik/compose.yaml

@@ -1,7 +1,7 @@
 ---
 services:
     traefik:
-        image: ghcr.io/traefik/traefik:v3.4.4
+        image: ghcr.io/traefik/traefik:v3.4.3
         container_name: traefik
         command:
             - "--global.checkNewVersion=false"

hosts/ps10rp/gitea/compose.yaml

@@ -33,7 +33,7 @@ services:
             - postgresql:/var/lib/postgresql/data
 
     gitea:
-        image: gitea/gitea:1.24.3
+        image: gitea/gitea:1.24.2
         container_name: gitea
         depends_on:
             - postgresql

hosts/ps10rp/homepage/compose.yaml

@@ -32,7 +32,7 @@ services:
             - /var/run/docker.sock:/var/run/docker.sock:ro
 
     homepage:
-        image: ghcr.io/gethomepage/homepage:v1.4.0
+        image: ghcr.io/gethomepage/homepage:v1.3.2
         container_name: homepage
         labels:
             traefik.enable: true

hosts/ps10rp/traefik/compose.yaml

@@ -20,7 +20,7 @@ services:
             - /dev/net/tun:/dev/net/tun
 
     traefik:
-        image: ghcr.io/traefik/traefik:v3.4.4
+        image: ghcr.io/traefik/traefik:v3.4.3
         container_name: traefik
         command:
             - "--global.checkNewVersion=false"