Update Helm release loki to v6.46.0

2025-11-17 03:47:42 +00:00
15 changed files with 37 additions and 90 deletions
--- a/clusters/cl01tl/applications/booklore/templates/external-secret.yaml
+++ b/clusters/cl01tl/applications/booklore/templates/external-secret.yaml
@@ -81,10 +81,10 @@ spec:
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
 metadata:
-  name: booklore-mariadb-cluster-backup-secret-external
+  name: booklore-mariadb-cluster-backup-secret
  namespace: {{ .Release.Namespace }}
  labels:
-    app.kubernetes.io/name: booklore-mariadb-cluster-backup-secret-external
+    app.kubernetes.io/name: booklore-mariadb-cluster-backup-secret
    app.kubernetes.io/instance: {{ .Release.Name }}
    app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
@@ -92,47 +92,17 @@ spec:
    kind: ClusterSecretStore
    name: vault
  data:
-    - secretKey: access
+    - secretKey: access-key-id
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        key: /digital-ocean/home-infra/mariadb-backups
        metadataPolicy: None
        property: access
-    - secretKey: secret
+    - secretKey: secret-access-key
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        key: /digital-ocean/home-infra/mariadb-backups
        metadataPolicy: None
        property: secret
-
---
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: booklore-mariadb-cluster-backup-secret-garage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: booklore-mariadb-cluster-backup-secret-garage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: access
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/mariadb-backups
-        metadataPolicy: None
-        property: access
-    - secretKey: secret
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/mariadb-backups
-        metadataPolicy: None
-        property: secret
--- a/clusters/cl01tl/applications/booklore/values.yaml
+++ b/clusters/cl01tl/applications/booklore/values.yaml
@@ -15,7 +15,7 @@ booklore:
            - name: TZ
              value: America/Chicago
            - name: DATABASE_URL
-              value: jdbc:mariadb://booklore-mariadb-cluster-primary.booklore:3306/booklore
+              value: jdbc:mariadb://booklore-mariadb.mariadb:3306/booklore
            - name: DATABASE_USERNAME
              value: booklore
            - name: DATABASE_PASSWORD
@@ -64,10 +64,9 @@ booklore:
          main:
            - path: /bookdrop
              readOnly: false
-mariadb-cluster:
+mariadb:
  mariadb:
    rootPasswordSecretKeyRef:
-      generate: false
      name: booklore-database-secret
      key: password
    storage:
@@ -86,7 +85,7 @@ mariadb-cluster:
      passwordSecretKeyRef:
        name: booklore-database-secret
        key: password
-      host: '%'
+      host: "%"
      cleanupPolicy: Delete
      requeueInterval: 10h
      retryInterval: 30s
@@ -98,48 +97,26 @@ mariadb-cluster:
      table: "*"
      username: booklore
      grantOption: true
-      host: '%'
+      host: "%"
      cleanupPolicy: Delete
      requeueInterval: 10h
      retryInterval: 30s
-  physicalBackups:
-    - name: backup-external
+  backups:
+    - name: backup
      schedule:
-        cron: "0 0 * * 0"
+        cron: "0 0 0 * *"
        suspend: false
-        immediate: true
      compression: gzip
-      maxRetention: 720h
+      maxRetention: 720h # 30 days
      storage:
        s3:
          bucket: mariadb-backups-b230a2f5aecf080a4b372c08
-          prefix: cl01tl/booklore
-          endpoint: nyc3.digitaloceanspaces.com
-          region: us-east-1
+          prefix: cl01tl
+          endpoint: https://nyc3.digitaloceanspaces.com
+          region:  us-east-1
          accessKeyIdSecretKeyRef:
-            name: booklore-mariadb-cluster-backup-secret-external
-            key: access
+            name: booklore-mariadb-cluster-backup-secret
+            key: access-key-id
          secretAccessKeySecretKeyRef:
-            name: booklore-mariadb-cluster-backup-secret-external
-            key: secret
-          tls:
-            enabled: true
-    - name: backup-garage
-      schedule:
-        cron: "0 0 * * *"
-        suspend: false
-        immediate: true
-      compression: gzip
-      maxRetention: 360h
-      storage:
-        s3:
-          bucket: mariadb-backups
-          prefix: cl01tl/booklore
-          endpoint: garage-main.garage:3900
-          region: us-east-1
-          accessKeyIdSecretKeyRef:
-            name: booklore-mariadb-cluster-backup-secret-garage
-            key: access
-          secretAccessKeySecretKeyRef:
-            name: booklore-mariadb-cluster-backup-secret-garage
-            key: secret
+            name: booklore-mariadb-cluster-backup-secret
+            key: secret-access-key
--- a/clusters/cl01tl/applications/calibre-web-automated/values.yaml
+++ b/clusters/cl01tl/applications/calibre-web-automated/values.yaml
@@ -55,7 +55,7 @@ calibre-web-automated:
        bypass:
          image:
            repository: ghcr.io/sarperavci/cloudflarebypassforscraping
-            tag: latest@sha256:53b50a04bc9bc70cac350040a13bb23e9f31de59ca94d50d0bf8e4c50a73c656
+            tag: latest@sha256:15675e4e5cb65c69de52edb491b1b82d76f815250745a0d4cebd91e5e53a87f8
            pullPolicy: IfNotPresent
          resources:
            requests:
--- a/clusters/cl01tl/applications/element-web/values.yaml
+++ b/clusters/cl01tl/applications/element-web/values.yaml
@@ -2,7 +2,7 @@ element-web:
  replicaCount: 1
  image:
    repository: vectorim/element-web
-    tag: v1.12.4
+    tag: v1.12.3
    pullPolicy: IfNotPresent
  defaultServer:
    url: https://matrix.alexlebens.dev
--- a/clusters/cl01tl/applications/ephemera/values.yaml
+++ b/clusters/cl01tl/applications/ephemera/values.yaml
@@ -24,9 +24,9 @@ ephemera:
            - name: LG_BASE_URL
              value: https://gen.com
            - name: PUID
-              value: 0
+              value: 1000
            - name: PGID
-              value: 0
+              value: 100
          probes:
            liveness:
              enabled: true
--- a/clusters/cl01tl/applications/homepage/values.yaml
+++ b/clusters/cl01tl/applications/homepage/values.yaml
@@ -45,7 +45,7 @@ homepage:
          color: zinc
          background:
            image: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/background.jpg
-            brightness: 50
+            brightness: 60
          theme: dark
          disableCollapse: true
          layout:
@@ -693,13 +693,13 @@ homepage:
                  siteMonitor: http://ephemera.ephemera:80
                  statusStyle: dot
              - CWA Downloader:
-                  icon: sh-cwa-book-downloader.webp
+                  icon: sh-calibre.webp
                  description: Books
                  href: https://calibre-downloader.alexlebens.net
                  siteMonitor: http://calibre-web-automated-downloader.calibre-web-automated:8084
                  statusStyle: dot
              - Listenarr:
-                  icon: sh-audiobookrequest.webp
+                  icon: sh-listenarr.webp
                  description: Audiobooks
                  href: https://listenarr.alexlebens.net
                  siteMonitor: http://listenarr.listenarr:80
--- a/clusters/cl01tl/applications/listenarr/values.yaml
+++ b/clusters/cl01tl/applications/listenarr/values.yaml
@@ -43,4 +43,4 @@ listenarr:
        main:
          main:
            - path: /data
-              readOnly: false
+              readOnly: true
--- a/clusters/cl01tl/applications/outline/values.yaml
+++ b/clusters/cl01tl/applications/outline/values.yaml
@@ -9,7 +9,7 @@ outline:
        main:
          image:
            repository: outlinewiki/outline
-            tag: 1.1.0
+            tag: 1.0.1
            pullPolicy: IfNotPresent
          env:
            - name: NODE_ENV
--- a/clusters/cl01tl/applications/searxng/values.yaml
+++ b/clusters/cl01tl/applications/searxng/values.yaml
@@ -9,7 +9,7 @@ searxng:
        main:
          image:
            repository: searxng/searxng
-            tag: latest@sha256:91da34403fc1d2c7ac23d1459af87870d87810b7d50b0c6a4585ab78846cb534
+            tag: latest@sha256:d5a54dde3968851d6a15f394bd1d64e0ac5e440e6b21c73bddf215dfcd82fe16
            pullPolicy: IfNotPresent
          env:
            - name: SEARXNG_BASE_URL
@@ -43,7 +43,7 @@ searxng:
        main:
          image:
            repository: searxng/searxng
-            tag: latest@sha256:91da34403fc1d2c7ac23d1459af87870d87810b7d50b0c6a4585ab78846cb534
+            tag: latest@sha256:d5a54dde3968851d6a15f394bd1d64e0ac5e440e6b21c73bddf215dfcd82fe16
            pullPolicy: IfNotPresent
          env:
            - name: SEARXNG_BASE_URL
--- a/clusters/cl01tl/platform/gitea/values.yaml
+++ b/clusters/cl01tl/platform/gitea/values.yaml
@@ -212,7 +212,7 @@ backup:
        s3-backup:
          image:
            repository: d3fk/s3cmd
-            tag: latest@sha256:caccff69634d420705b9f676d69e15d574fb65d1dd475b7412d3bc18df99e00f
+            tag: latest@sha256:4252b3d04c18dc7fec2117259ab5dc0e51cb46b8719e661762222b44f6559189
            pullPolicy: IfNotPresent
          command:
            - /bin/sh
@@ -236,7 +236,7 @@ backup:
        s3-prune:
          image:
            repository: d3fk/s3cmd
-            tag: latest@sha256:caccff69634d420705b9f676d69e15d574fb65d1dd475b7412d3bc18df99e00f
+            tag: latest@sha256:4252b3d04c18dc7fec2117259ab5dc0e51cb46b8719e661762222b44f6559189
            pullPolicy: IfNotPresent
          command:
            - /bin/sh
--- a/clusters/cl01tl/platform/ntfy/values.yaml
+++ b/clusters/cl01tl/platform/ntfy/values.yaml
@@ -9,7 +9,7 @@ ntfy:
        main:
          image:
            repository: binwiederhier/ntfy
-            tag: v2.15.0
+            tag: v2.14.0
            pullPolicy: IfNotPresent
          args: ["serve"]
          env:
--- a/clusters/cl01tl/platform/vault/values.yaml
+++ b/clusters/cl01tl/platform/vault/values.yaml
@@ -198,7 +198,7 @@ snapshot:
        s3-backup:
          image:
            repository: d3fk/s3cmd
-            tag: latest@sha256:caccff69634d420705b9f676d69e15d574fb65d1dd475b7412d3bc18df99e00f
+            tag: latest@sha256:4252b3d04c18dc7fec2117259ab5dc0e51cb46b8719e661762222b44f6559189
            pullPolicy: IfNotPresent
          command:
            - /bin/sh
--- a/clusters/cl01tl/services/harbor/Chart.yaml
+++ b/clusters/cl01tl/services/harbor/Chart.yaml
@@ -21,7 +21,7 @@ dependencies:
    repository: https://helm.goharbor.io
  - name: postgres-cluster
    alias: postgres-17-cluster
-    version: 6.16.0
+    version: 6.15.0
    repository: http://gitea-http.gitea:3000/api/packages/alexlebens/helm
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/harbor.png
 appVersion: v2.13.0
--- a/clusters/cl01tl/services/talos/values.yaml
+++ b/clusters/cl01tl/services/talos/values.yaml
@@ -73,7 +73,7 @@ etcd-backup:
        s3-prune:
          image:
            repository: d3fk/s3cmd
-            tag: latest@sha256:caccff69634d420705b9f676d69e15d574fb65d1dd475b7412d3bc18df99e00f
+            tag: latest@sha256:4252b3d04c18dc7fec2117259ab5dc0e51cb46b8719e661762222b44f6559189
            pullPolicy: IfNotPresent
          command:
            - /bin/sh
--- a/clusters/cl01tl/storage/whodb/values.yaml
+++ b/clusters/cl01tl/storage/whodb/values.yaml
@@ -8,7 +8,7 @@ whodb:
        main:
          image:
            repository: clidey/whodb
-            tag: 0.75.0
+            tag: 0.74.0
            pullPolicy: IfNotPresent
          env:
            - name: WHODB_OLLAMA_HOST