chore(deps): update harbor.alexlebens.net/images/site-profile docker tag to v2.23.0

2026-03-06 23:35:54 +00:00
182 changed files with 739 additions and 959 deletions
--- a/clusters/cl01tl/helm/actual/values.yaml
+++ b/clusters/cl01tl/helm/actual/values.yaml
@@ -81,8 +81,7 @@ volsync-target-data:
    enabled: true
    schedule: 0 8 * * *
  remote:
-    enabled: true
-    schedule: 0 9 * * *
+    enabled: false
  external:
    enabled: true
-    schedule: 0 10 * * *
+    schedule: 0 9 * * *
--- a/clusters/cl01tl/helm/argo-workflows/Chart.lock
+++ b/clusters/cl01tl/helm/argo-workflows/Chart.lock
@@ -7,6 +7,6 @@ dependencies:
  version: 2.4.20
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.9.1
-digest: sha256:c3f9876ca432887c05eaa87d4e6006dcb8b3a5e654dc976103426a313fde12bc
-generated: "2026-03-11T22:55:29.202299472Z"
+  version: 7.8.0
+digest: sha256:772ba83a6e0fa6a7e3633ff1fff0f8221b45a1f36ec890489cfa383330d99f81
+generated: "2026-02-27T18:14:32.22595048Z"
--- a/clusters/cl01tl/helm/argo-workflows/Chart.yaml
+++ b/clusters/cl01tl/helm/argo-workflows/Chart.yaml
@@ -25,7 +25,7 @@ dependencies:
    repository: https://argoproj.github.io/argo-helm
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.9.1
+    version: 7.8.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 # renovate: datasource=github-releases depName=argoproj/argo-workflows
--- a/clusters/cl01tl/helm/argo-workflows/values.yaml
+++ b/clusters/cl01tl/helm/argo-workflows/values.yaml
@@ -105,7 +105,7 @@ postgres-18-cluster:
      - name: live-backup
        suspend: false
        immediate: true
-        schedule: "0 0 14 * * *"
+        schedule: "0 0 0 * * *"
        backupName: garage-local
      # - name: weekly-backup
      #   suspend: true
--- a/clusters/cl01tl/helm/argocd/Chart.lock
+++ b/clusters/cl01tl/helm/argocd/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: argo-cd
  repository: https://argoproj.github.io/argo-helm
-  version: 9.4.10
-digest: sha256:795aad956acef3f5efb8160390caf9b9792b7b4150d3a7984f1c5edbad92dfaa
-generated: "2026-03-10T18:58:35.720448421Z"
+  version: 9.4.7
+digest: sha256:9fc78ed4a6a55f65e3250e687caf67ad09e852eb7b01313e372127e75f451a79
+generated: "2026-03-03T20:05:52.081769174Z"
--- a/clusters/cl01tl/helm/argocd/Chart.yaml
+++ b/clusters/cl01tl/helm/argocd/Chart.yaml
@@ -15,8 +15,8 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: argo-cd
-    version: 9.4.10
+    version: 9.4.7
    repository: https://argoproj.github.io/argo-helm
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 # renovate: datasource=github-releases depName=argoproj/argo-cd
-appVersion: v3.3.3
+appVersion: v3.3.2
--- a/clusters/cl01tl/helm/audiobookshelf/values.yaml
+++ b/clusters/cl01tl/helm/audiobookshelf/values.yaml
@@ -21,7 +21,7 @@ audiobookshelf:
        apprise-api:
          image:
            repository: caronc/apprise
-            tag: v1.3.2
+            tag: v1.3.1
            pullPolicy: IfNotPresent
          env:
            - name: TZ
@@ -127,19 +127,17 @@ volsync-target-config:
    enabled: true
    schedule: 2 8 * * *
  remote:
-    enabled: true
-    schedule: 2 9 * * *
+    enabled: false
  external:
    enabled: true
-    schedule: 2 10 * * *
+    schedule: 2 9 * * *
 volsync-target-metadata:
  pvcTarget: audiobookshelf-metadata
  local:
    enabled: true
    schedule: 4 8 * * *
  remote:
-    enabled: true
-    schedule: 4 9 * * *
+    enabled: false
  external:
    enabled: true
-    schedule: 4 10 * * *
+    schedule: 4 9 * * *
--- a/clusters/cl01tl/helm/authentik/Chart.lock
+++ b/clusters/cl01tl/helm/authentik/Chart.lock
@@ -4,12 +4,12 @@ dependencies:
  version: 2026.2.1
 - name: cloudflared
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.4.0
+  version: 2.3.0
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.9.1
+  version: 7.8.0
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.0
-digest: sha256:abb34b7bb54393236e695453aa1940497cb4def3d3a56a45ca004a22f8e05648
-generated: "2026-03-11T22:55:49.936164674Z"
+  version: 0.3.0
+digest: sha256:750757130cded0cd2cc9b64ffdba961b55252587b653151f8ecb1031839fb9c9
+generated: "2026-03-06T06:33:03.42982917Z"
--- a/clusters/cl01tl/helm/authentik/Chart.yaml
+++ b/clusters/cl01tl/helm/authentik/Chart.yaml
@@ -25,14 +25,14 @@ dependencies:
    repository: https://charts.goauthentik.io/
  - name: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.4.0
+    version: 2.3.0
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.9.1
+    version: 7.8.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: valkey
    alias: valkey
-    version: 0.4.0
+    version: 0.3.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/authentik.png
 # renovate: datasource=github-releases depName=goauthentik/authentik
--- a/clusters/cl01tl/helm/authentik/values.yaml
+++ b/clusters/cl01tl/helm/authentik/values.yaml
@@ -68,7 +68,7 @@ postgres-18-cluster:
  recovery:
    method: objectStore
    objectStore:
-      index: 2
+      index: 1
  backup:
    objectStore:
      - name: garage-local
@@ -91,9 +91,9 @@ postgres-18-cluster:
      #   isWALArchiver: false
    scheduledBackups:
      - name: live-backup
-        suspend: false
+        suspend: true
        immediate: true
-        schedule: "0 5 14 * * *"
+        schedule: "0 0 0 * * *"
        backupName: garage-local
      # - name: weekly-backup
      #   suspend: true
--- a/clusters/cl01tl/helm/backrest/values.yaml
+++ b/clusters/cl01tl/helm/backrest/values.yaml
@@ -111,19 +111,17 @@ volsync-target-data:
    enabled: true
    schedule: 6 8 * * *
  remote:
-    enabled: true
-    schedule: 6 9 * * *
+    enabled: false
  external:
    enabled: true
-    schedule: 6 10 * * *
+    schedule: 6 9 * * *
 volsync-target-config:
  pvcTarget: backrest-config
  local:
    enabled: true
    schedule: 8 8 * * *
  remote:
-    enabled: true
-    schedule: 8 9 * * *
+    enabled: false
  external:
    enabled: true
-    schedule: 8 10 * * *
+    schedule: 8 9 * * *
--- a/clusters/cl01tl/helm/bazarr/values.yaml
+++ b/clusters/cl01tl/helm/bazarr/values.yaml
@@ -15,7 +15,7 @@ bazarr:
        main:
          image:
            repository: ghcr.io/linuxserver/bazarr
-            tag: 1.5.6@sha256:05f9d5b24884f37120453dc1a008a47be244eebec32099ae1bd29032e75b67aa
+            tag: 1.5.6@sha256:94eee5e3e14430b7b144d4556be73963a7daf6f1bddc25586627f426465482ce
            pullPolicy: IfNotPresent
          env:
            - name: TZ
@@ -87,8 +87,7 @@ volsync-target-config:
    enabled: true
    schedule: 10 8 * * *
  remote:
-    enabled: true
-    schedule: 10 9 * * *
+    enabled: false
  external:
    enabled: true
-    schedule: 10 10 * * *
+    schedule: 10 9 * * *
--- a/clusters/cl01tl/helm/blocky/Chart.lock
+++ b/clusters/cl01tl/helm/blocky/Chart.lock
@@ -4,6 +4,6 @@ dependencies:
  version: 4.6.2
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.0
-digest: sha256:a5b0099261d772b24a302a106d106cfa82ac07fa14564141e00cf107d708e859
-generated: "2026-03-09T23:06:16.853255429Z"
+  version: 0.3.0
+digest: sha256:e1300ab60ad8d986a42144940a64196aa282566e8049975a0981e4e6fc93e206
+generated: "2026-03-06T06:33:20.716599953Z"
--- a/clusters/cl01tl/helm/blocky/Chart.yaml
+++ b/clusters/cl01tl/helm/blocky/Chart.yaml
@@ -19,7 +19,7 @@ dependencies:
    version: 4.6.2
  - name: valkey
    alias: valkey
-    version: 0.4.0
+    version: 0.3.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/blocky.png
 # renovate: datasource=github-releases depName=0xerr0r/blocky
--- a/clusters/cl01tl/helm/blocky/values.yaml
+++ b/clusters/cl01tl/helm/blocky/values.yaml
@@ -135,7 +135,6 @@ blocky:
              komodo                          IN      CNAME   traefik-cl01tl
              lidarr                          IN      CNAME   traefik-cl01tl
              mail                            IN      CNAME   traefik-cl01tl
-              movie-roulette                  IN      CNAME   traefik-cl01tl
              music-grabber                   IN      CNAME   traefik-cl01tl
              navidrome                       IN      CNAME   traefik-cl01tl
              ntfy                            IN      CNAME   traefik-cl01tl
@@ -193,42 +192,36 @@ blocky:
                  *.alexlebens.dev
                  *.boreal-beaufort.ts.net
                  *.discord.com
-                  cdn.trackjs.com
              ads:
                - |
                  *.alexlebens.net
                  *.alexlebens.dev
                  *.boreal-beaufort.ts.net
                  *.discord.com
-                  cdn.trackjs.com
              priv:
                - |
                  *.alexlebens.net
                  *.alexlebens.dev
                  *.boreal-beaufort.ts.net
                  *.discord.com
-                  cdn.trackjs.com
              mal:
                - |
                  *.alexlebens.net
                  *.alexlebens.dev
                  *.boreal-beaufort.ts.net
                  *.discord.com
-                  cdn.trackjs.com
              pro:
                - |
                  *.alexlebens.net
                  *.alexlebens.dev
                  *.boreal-beaufort.ts.net
                  *.discord.com
-                  cdn.trackjs.com
              oisd:
                - |
                  *.alexlebens.net
                  *.alexlebens.dev
                  *.boreal-beaufort.ts.net
                  *.discord.com
-                  cdn.trackjs.com
            clientGroupsBlock:
              default:
                - sus
--- a/clusters/cl01tl/helm/booklore/Chart.yaml
+++ b/clusters/cl01tl/helm/booklore/Chart.yaml
@@ -30,4 +30,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/booklore.png
 # renovate: datasource=github-releases depName=booklore-app/BookLore
-appVersion: v2.2.0
+appVersion: v2.0.6
--- a/clusters/cl01tl/helm/booklore/values.yaml
+++ b/clusters/cl01tl/helm/booklore/values.yaml
@@ -9,7 +9,7 @@ booklore:
        main:
          image:
            repository: ghcr.io/booklore-app/booklore
-            tag: v2.2.0
+            tag: v2.0.6
            pullPolicy: IfNotPresent
          env:
            - name: TZ
@@ -225,11 +225,10 @@ volsync-target-config:
    enabled: true
    schedule: 12 8 * * *
  remote:
-    enabled: true
-    schedule: 12 9 * * *
+    enabled: false
  external:
    enabled: true
-    schedule: 12 10 * * *
+    schedule: 12 9 * * *
 volsync-target-data:
  pvcTarget: booklore-data
  local:
@@ -239,11 +238,11 @@ volsync-target-data:
      cacheCapacity: 10Gi
  remote:
    enabled: true
-    schedule: 14 9 * * *
+    schedule: 14 10 * * *
    restic:
      cacheCapacity: 10Gi
  external:
    enabled: true
-    schedule: 14 10 * * *
+    schedule: 14 9 * * *
    restic:
      cacheCapacity: 10Gi
--- a/clusters/cl01tl/helm/cert-manager/Chart.lock
+++ b/clusters/cl01tl/helm/cert-manager/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: cert-manager
  repository: https://charts.jetstack.io
-  version: v1.20.0
-digest: sha256:1543bd17649cb32982de3cce017fcbed1b44c41d50b76c6471b266f33e261c29
-generated: "2026-03-10T16:06:49.332999536Z"
+  version: v1.19.4
+digest: sha256:5c4a0a0568677bfcf4529e6ec6a005957cd1820fd5f1d1f108e74370d409fe88
+generated: "2026-02-24T19:30:44.415585645Z"
--- a/clusters/cl01tl/helm/cert-manager/Chart.yaml
+++ b/clusters/cl01tl/helm/cert-manager/Chart.yaml
@@ -14,8 +14,8 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: cert-manager
-    version: v1.20.0
+    version: v1.19.4
    repository: https://charts.jetstack.io
 icon: https://raw.githubusercontent.com/walkxcode/dashboard-icons/main/png/cert-manager.png
 # renovate: datasource=github-releases depName=cert-manager/cert-manager
-appVersion: v1.20.0
+appVersion: v1.19.4
--- a/clusters/cl01tl/helm/code-server/Chart.lock
+++ b/clusters/cl01tl/helm/code-server/Chart.lock
@@ -4,9 +4,9 @@ dependencies:
  version: 4.6.2
 - name: cloudflared
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.4.0
+  version: 2.3.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.8.0
-digest: sha256:dee0f52096efc543f4db3a5dc2732fd37ae9b7950b264e399a6e74c2f3e7cee6
-generated: "2026-03-09T22:04:00.58415637Z"
+digest: sha256:13a5bb68bf58c7bf00771a804e3d7291f52e0519b1cf9bece266164dd4bfe5b8
+generated: "2026-03-06T01:06:30.41359289Z"
--- a/clusters/cl01tl/helm/code-server/Chart.yaml
+++ b/clusters/cl01tl/helm/code-server/Chart.yaml
@@ -22,7 +22,7 @@ dependencies:
    version: 4.6.2
  - name: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.4.0
+    version: 2.3.0
  - name: volsync-target
    alias: volsync-target-config
    version: 0.8.0
--- a/clusters/cl01tl/helm/code-server/values.yaml
+++ b/clusters/cl01tl/helm/code-server/values.yaml
@@ -9,7 +9,7 @@ code-server:
        main:
          image:
            repository: ghcr.io/linuxserver/code-server
-            tag: 4.110.0@sha256:8473aa16fba93fccc3ca772173d095bccd2e44d4d3104467fee923df10d57cd2
+            tag: 4.109.5@sha256:aa43fb2fc31127e9d2166e903c7f13792351e38658ba29645662a89ff04ff90d
            pullPolicy: IfNotPresent
          env:
            - name: TZ
@@ -79,8 +79,7 @@ volsync-target-config:
    enabled: true
    schedule: 16 8 * * *
  remote:
-    enabled: true
-    schedule: 16 9 * * *
+    enabled: false
  external:
    enabled: true
-    schedule: 16 10 * * *
+    schedule: 16 9 * * *
--- a/clusters/cl01tl/helm/dawarich/Chart.lock
+++ b/clusters/cl01tl/helm/dawarich/Chart.lock
@@ -4,9 +4,9 @@ dependencies:
  version: 4.6.2
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.9.1
+  version: 7.8.0
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.0
-digest: sha256:9524709cf393c01f28b0d073ef6870a2f1afd46f3bc5f564e73c55450aba8dd0
-generated: "2026-03-11T22:56:11.749729235Z"
+  version: 0.3.0
+digest: sha256:c821fa072d58d7e7704b16dd8a1ca89c24922bbc77e61e360627359c0ca17a94
+generated: "2026-03-06T06:33:34.529244471Z"
--- a/clusters/cl01tl/helm/dawarich/Chart.yaml
+++ b/clusters/cl01tl/helm/dawarich/Chart.yaml
@@ -18,12 +18,12 @@ dependencies:
    version: 4.6.2
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.9.1
+    version: 7.8.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: valkey
    alias: valkey
-    version: 0.4.0
+    version: 0.3.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/dawarich.png
 # renovate: datasource=github-releases depName=Freika/dawarich
-appVersion: 1.3.2
+appVersion: 1.3.1
--- a/clusters/cl01tl/helm/dawarich/values.yaml
+++ b/clusters/cl01tl/helm/dawarich/values.yaml
@@ -9,7 +9,7 @@ dawarich:
        main:
          image:
            repository: freikin/dawarich
-            tag: 1.3.2
+            tag: 1.3.1
            pullPolicy: IfNotPresent
          command: ["web-entrypoint.sh"]
          args: ["bin/rails", "server", "-p", "3000", "-b", "::"]
@@ -106,7 +106,7 @@ dawarich:
        sidekiq:
          image:
            repository: freikin/dawarich
-            tag: 1.3.2
+            tag: 1.3.1
            pullPolicy: IfNotPresent
          command: ["sidekiq-entrypoint.sh"]
          args: ["sidekiq"]
@@ -330,7 +330,7 @@ postgres-18-cluster:
      - name: live-backup
        suspend: false
        immediate: true
-        schedule: "0 10 14 * * *"
+        schedule: "0 0 0 * * *"
        backupName: garage-local
      # - name: weekly-backup
      #   suspend: true
--- a/clusters/cl01tl/helm/descheduler/Chart.lock
+++ b/clusters/cl01tl/helm/descheduler/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: descheduler
  repository: https://kubernetes-sigs.github.io/descheduler/
-  version: 0.35.1
-digest: sha256:ed7cc8068b83ac483fda3a781227b35e12a34abdca214b5490e7036c89db1a95
-generated: "2026-03-09T21:21:45.788316167Z"
+  version: 0.35.0
+digest: sha256:afa0e5fe35f9287db619de604c82a22c3ab90dfcaa3a845ff30491e47c7a5846
+generated: "2026-02-19T23:03:22.794515683Z"
--- a/clusters/cl01tl/helm/descheduler/Chart.yaml
+++ b/clusters/cl01tl/helm/descheduler/Chart.yaml
@@ -14,8 +14,8 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: descheduler
-    version: 0.35.1
+    version: 0.35.0
    repository: https://kubernetes-sigs.github.io/descheduler/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 # renovate: datasource=github-releases depName=kubernetes-sigs/descheduler
-appVersion: v0.35.1
+appVersion: v0.35.0
--- a/clusters/cl01tl/helm/directus/Chart.lock
+++ b/clusters/cl01tl/helm/directus/Chart.lock
@@ -4,9 +4,9 @@ dependencies:
  version: 4.6.2
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.9.1
+  version: 7.8.0
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.0
-digest: sha256:0b50b4938669a7210930d6ee86a9602611b54cd13774f3386dbad04b4771e7f4
-generated: "2026-03-11T22:56:26.818980186Z"
+  version: 0.3.0
+digest: sha256:65b9b0756236f2281e3eb1a7aaa9d5f85822aa22071f6f49cc6a1ead0ec9373d
+generated: "2026-03-06T06:33:47.967177348Z"
--- a/clusters/cl01tl/helm/directus/Chart.yaml
+++ b/clusters/cl01tl/helm/directus/Chart.yaml
@@ -23,12 +23,12 @@ dependencies:
    version: 4.6.2
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.9.1
+    version: 7.8.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: valkey
    alias: valkey
-    version: 0.4.0
+    version: 0.3.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/directus.png
 # renovate: datasource=github-releases depName=directus/directus
-appVersion: 11.16.1
+appVersion: 11.16.0
--- a/clusters/cl01tl/helm/directus/templates/external-secret.yaml
+++ b/clusters/cl01tl/helm/directus/templates/external-secret.yaml
@@ -94,43 +94,6 @@ spec:
        metadataPolicy: None
        property: metric-token

---
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: directus-bucket-garage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: directus-bucket-garage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: ACCESS_KEY_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/directus-assets
-        metadataPolicy: None
-        property: ACCESS_KEY_ID
-    - secretKey: ACCESS_SECRET_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/directus-assets
-        metadataPolicy: None
-        property: ACCESS_SECRET_KEY
-    - secretKey: ACCESS_REGION
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/directus-assets
-        metadataPolicy: None
-        property: ACCESS_REGION
-
 ---
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
--- a/clusters/cl01tl/helm/directus/templates/object-bucket-claim.yaml
+++ b/clusters/cl01tl/helm/directus/templates/object-bucket-claim.yaml
@@ -0,0 +1,11 @@
+apiVersion: objectbucket.io/v1alpha1
+kind: ObjectBucketClaim
+metadata:
+  name: ceph-bucket-directus
+  labels:
+    app.kubernetes.io/name: ceph-bucket-directus
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  generateBucketName: bucket-directus
+  storageClassName: ceph-bucket
--- a/clusters/cl01tl/helm/directus/values.yaml
+++ b/clusters/cl01tl/helm/directus/values.yaml
@@ -9,7 +9,7 @@ directus:
        main:
          image:
            repository: directus/directus
-            tag: 11.16.1
+            tag: 11.16.0
            pullPolicy: IfNotPresent
          env:
            - name: PUBLIC_URL
@@ -90,22 +90,22 @@ directus:
            - name: STORAGE_S3_KEY
              valueFrom:
                secretKeyRef:
-                  name: directus-bucket-garage
-                  key: ACCESS_KEY_ID
+                  name: ceph-bucket-directus
+                  key: AWS_ACCESS_KEY_ID
            - name: STORAGE_S3_SECRET
              valueFrom:
                secretKeyRef:
-                  name: directus-bucket-garage
-                  key: ACCESS_SECRET_KEY
-            - name: STORAGE_S3_REGION
-              valueFrom:
-                secretKeyRef:
-                  name: directus-bucket-garage
-                  key: ACCESS_REGION
+                  name: ceph-bucket-directus
+                  key: AWS_SECRET_ACCESS_KEY
            - name: STORAGE_S3_BUCKET
-              value: directus-assets
+              valueFrom:
+                configMapKeyRef:
+                  name: ceph-bucket-directus
+                  key: BUCKET_NAME
+            - name: STORAGE_S3_REGION
+              value: us-east-1
            - name: STORAGE_S3_ENDPOINT
-              value: http://garage-main.garage:3900
+              value: http://rook-ceph-rgw-ceph-objectstore.rook-ceph.svc:80
            - name: STORAGE_S3_FORCE_PATH_STYLE
              value: true
            - name: AUTH_PROVIDERS
@@ -219,7 +219,7 @@ postgres-18-cluster:
      - name: live-backup
        suspend: false
        immediate: true
-        schedule: "0 15 14 * * *"
+        schedule: "0 0 0 * * *"
        backupName: garage-local
      # - name: weekly-backup
      #   suspend: true
--- a/clusters/cl01tl/helm/element-web/Chart.lock
+++ b/clusters/cl01tl/helm/element-web/Chart.lock
@@ -1,9 +1,9 @@
 dependencies:
 - name: element-web
  repository: https://ananace.gitlab.io/charts
-  version: 1.4.32
+  version: 1.4.31
 - name: cloudflared
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.4.0
-digest: sha256:49d9dd45eff7cbbc11644e4a8bd3c9d3bf84716ed034a76f097f0ba1fea4c934
-generated: "2026-03-11T16:04:17.556777286Z"
+  version: 2.3.0
+digest: sha256:7447f3828246d85acd5a2a75b6d086d8fbe29ee90ad61b96dd25de8dcfefbc4e
+generated: "2026-03-03T18:08:31.901975101Z"
--- a/clusters/cl01tl/helm/element-web/Chart.yaml
+++ b/clusters/cl01tl/helm/element-web/Chart.yaml
@@ -17,11 +17,11 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: element-web
-    version: 1.4.32
+    version: 1.4.31
    repository: https://ananace.gitlab.io/charts
  - name: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.4.0
+    version: 2.3.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/element.png
 # renovate: datasource=github-releases depName=element-hq/element-web
-appVersion: v1.12.12
+appVersion: v1.12.11
--- a/clusters/cl01tl/helm/element-web/values.yaml
+++ b/clusters/cl01tl/helm/element-web/values.yaml
@@ -2,7 +2,7 @@ element-web:
  replicaCount: 1
  image:
    repository: vectorim/element-web
-    tag: v1.12.12
+    tag: v1.12.11
    pullPolicy: IfNotPresent
  defaultServer:
    url: https://matrix.alexlebens.dev
--- a/clusters/cl01tl/helm/external-secrets/Chart.lock
+++ b/clusters/cl01tl/helm/external-secrets/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: external-secrets
  repository: https://charts.external-secrets.io
-  version: 2.1.0
-digest: sha256:b19563d51f1922403185979c6c442531a7bb13d302e8438b5a18d450259b7245
-generated: "2026-03-07T18:02:23.908145348Z"
+  version: 2.0.1
+digest: sha256:f47905e03f649c28d29f7a381799fb2df1f0a7bf122af174aeba47ba94f34847
+generated: "2026-02-20T19:29:28.137671934Z"
--- a/clusters/cl01tl/helm/external-secrets/Chart.yaml
+++ b/clusters/cl01tl/helm/external-secrets/Chart.yaml
@@ -12,7 +12,7 @@ sources:
  - https://github.com/external-secrets/external-secrets/tree/main/deploy/charts/external-secrets
 dependencies:
  - name: external-secrets
-    version: 2.1.0
+    version: 2.0.1
    repository: https://charts.external-secrets.io
 icon: https://avatars.githubusercontent.com/u/68335991?s=48&v=4
 # renovate: datasource=github-releases depName=external-secrets/external-secrets
--- a/clusters/cl01tl/helm/freshrss/Chart.lock
+++ b/clusters/cl01tl/helm/freshrss/Chart.lock
@@ -4,12 +4,12 @@ dependencies:
  version: 4.6.2
 - name: cloudflared
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.4.0
+  version: 2.3.0
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.9.1
+  version: 7.8.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.8.0
-digest: sha256:a3703e245881145524304af8a03c89d309c602479be3f7f8953c2fba120bf341
-generated: "2026-03-11T22:56:41.856429843Z"
+digest: sha256:44d4f78dd73bd2f1d4d18ab0c7a4c9b2d0ec48c6c9ee7c9bd985dd9b9b50d80c
+generated: "2026-03-06T01:06:53.677352447Z"
--- a/clusters/cl01tl/helm/freshrss/Chart.yaml
+++ b/clusters/cl01tl/helm/freshrss/Chart.yaml
@@ -23,10 +23,10 @@ dependencies:
    version: 4.6.2
  - name: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.4.0
+    version: 2.3.0
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.9.1
+    version: 7.8.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-data
--- a/clusters/cl01tl/helm/freshrss/values.yaml
+++ b/clusters/cl01tl/helm/freshrss/values.yaml
@@ -197,7 +197,7 @@ postgres-18-cluster:
  recovery:
    method: objectStore
    objectStore:
-      index: 2
+      index: 1
  backup:
    objectStore:
      - name: garage-local
@@ -222,7 +222,7 @@ postgres-18-cluster:
      - name: live-backup
        suspend: false
        immediate: true
-        schedule: "0 20 14 * * *"
+        schedule: "0 0 0 * * *"
        backupName: garage-local
      # - name: weekly-backup
      #   suspend: true
@@ -250,8 +250,7 @@ volsync-target-data:
    enabled: true
    schedule: 18 8 * * *
  remote:
-    enabled: true
-    schedule: 18 9 * * *
+    enabled: false
  external:
    enabled: true
-    schedule: 18 10 * * *
+    schedule: 18 9 * * *
--- a/clusters/cl01tl/helm/garage/templates/service.yaml
+++ b/clusters/cl01tl/helm/garage/templates/service.yaml
@@ -1,32 +0,0 @@
-apiVersion: v1
-kind: Service
-metadata:
-  name: garage-main
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: garage-main
-    app.kubernetes.io/service: garage-main
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  ports:
-    - name: admin
-      port: 3903
-      protocol: TCP
-      targetPort: 3903
-    - name: rpc
-      port: 3901
-      protocol: TCP
-      targetPort: 3901
-    - name: s3
-      port: 3900
-      protocol: TCP
-      targetPort: 3900
-    - name: web
-      port: 3902
-      protocol: TCP
-      targetPort: 3902
-  selector:
-    app.kubernetes.io/instance: garage
-    app.kubernetes.io/name: garage
-    garage-type: server
--- a/clusters/cl01tl/helm/garage/values.yaml
+++ b/clusters/cl01tl/helm/garage/values.yaml
@@ -118,9 +118,9 @@ garage:
            pullPolicy: IfNotPresent
          env:
            - name: API_BASE_URL
-              value: http://garage-main.garage:3903
+              value: http://garage-1.garage:3903
            - name: S3_ENDPOINT_URL
-              value: http://garage-main.garage:3900
+              value: http://garage-1.garage:3900
            - name: API_ADMIN_KEY
              valueFrom:
                secretKeyRef:
@@ -225,6 +225,26 @@ garage:
          api_bind_addr = "[::]:3903"
          metrics_require_token = true
  service:
+    garage-main:
+      forceRename: garage-main
+      controller: server-2
+      ports:
+        s3:
+          port: 3900
+          targetPort: 3900
+          protocol: HTTP
+        rpc:
+          port: 3901
+          targetPort: 3901
+          protocol: HTTP
+        web:
+          port: 3902
+          targetPort: 3902
+          protocol : HTTP
+        admin:
+          port: 3903
+          targetPort: 3903
+          protocol: HTTP
    server-1:
      forceRename: garage-1
      controller: server-1
--- a/clusters/cl01tl/helm/gatus/Chart.lock
+++ b/clusters/cl01tl/helm/gatus/Chart.lock
@@ -4,9 +4,9 @@ dependencies:
  version: 1.5.0
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.9.1
+  version: 7.8.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.8.0
-digest: sha256:2fe7c088e99a11e0c6dd09fe48bb1e292eb58e22d9f8ff681bb6c6790945d54e
-generated: "2026-03-11T22:56:56.957400817Z"
+digest: sha256:c0c46db33b89b7a53dd512d19d07623a1eaafcc93668f0afacbb8d8c56d71e47
+generated: "2026-03-06T01:07:17.642671539Z"
--- a/clusters/cl01tl/helm/gatus/Chart.yaml
+++ b/clusters/cl01tl/helm/gatus/Chart.yaml
@@ -22,7 +22,7 @@ dependencies:
    version: 1.5.0
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.9.1
+    version: 7.8.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-data
--- a/clusters/cl01tl/helm/gatus/values.yaml
+++ b/clusters/cl01tl/helm/gatus/values.yaml
@@ -137,9 +137,6 @@ gatus:
      - name: yamtrack
        url: https://yamtrack.alexlebens.net
        <<: *defaults
-      - name: movie-roulette
-        url: https://movie-roulette.alexlebens.net
-        <<: *defaults
      - name: jellyfin
        url: https://jellyfin.alexlebens.net
        <<: *defaults
@@ -430,7 +427,7 @@ postgres-18-cluster:
      - name: live-backup
        suspend: false
        immediate: true
-        schedule: "0 25 14 * * *"
+        schedule: "0 0 0 * * *"
        backupName: garage-local
      # - name: weekly-backup
      #   suspend: true
@@ -446,10 +443,9 @@ volsync-target-data:
  pvcTarget: gatus
  local:
    enabled: true
-    schedule: 20 8 * * *
+    schedule: 22 8 * * *
  remote:
-    enabled: true
-    schedule: 20 9 * * *
+    enabled: false
  external:
    enabled: true
-    schedule: 20 10 * * *
+    schedule: 22 9 * * *
--- a/clusters/cl01tl/helm/generic-device-plugin/Chart.lock
+++ b/clusters/cl01tl/helm/generic-device-plugin/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: generic-device-plugin
  repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-  version: 0.20.21
-digest: sha256:4f1359a01b8b85722ab1805426a86f3ea64d0134513ce14fe9c55f3f918a21fb
-generated: "2026-03-09T23:02:42.799515974Z"
+  version: 0.20.20
+digest: sha256:8841709955381394b6304b7c53345692517e419c197ddc59b66a505ae742ec04
+generated: "2026-03-03T03:03:20.457381608Z"
--- a/clusters/cl01tl/helm/generic-device-plugin/Chart.yaml
+++ b/clusters/cl01tl/helm/generic-device-plugin/Chart.yaml
@@ -15,6 +15,6 @@ maintainers:
 dependencies:
  - name: generic-device-plugin
    repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-    version: 0.20.21
+    version: 0.20.20
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 appVersion: 1.0.0
--- a/clusters/cl01tl/helm/gitea/Chart.lock
+++ b/clusters/cl01tl/helm/gitea/Chart.lock
@@ -7,21 +7,21 @@ dependencies:
  version: 0.0.3
 - name: meilisearch
  repository: https://meilisearch.github.io/meilisearch-kubernetes
-  version: 0.27.0
+  version: 0.26.0
 - name: cloudflared
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.4.0
+  version: 2.3.0
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.9.1
+  version: 7.8.0
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.0
+  version: 0.2.0
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.0
+  version: 0.2.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.8.0
-digest: sha256:8f243465537fe443e97a8813e23e95d3608a6a2898b93209d03cf43f4ca8cc5d
-generated: "2026-03-11T22:57:17.026946319Z"
+digest: sha256:a06acd0301f43e91f70c9d732cd7fac2f3f5cd5eb536d10d321419daded15ae2
+generated: "2026-03-06T00:03:20.551447-06:00"
--- a/clusters/cl01tl/helm/gitea/Chart.yaml
+++ b/clusters/cl01tl/helm/gitea/Chart.yaml
@@ -33,22 +33,22 @@ dependencies:
    repository: https://dl.gitea.com/charts/
    version: 0.0.3
  - name: meilisearch
-    version: 0.27.0
+    version: 0.26.0
    repository: https://meilisearch.github.io/meilisearch-kubernetes
  - name: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.4.0
+    version: 2.3.0
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.9.1
+    version: 7.8.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: valkey
    alias: valkey-gitea
-    version: 0.4.0
+    version: 0.3.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: valkey
    alias: valkey-renovate
-    version: 0.4.0
+    version: 0.3.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-storage
--- a/clusters/cl01tl/helm/gitea/values.yaml
+++ b/clusters/cl01tl/helm/gitea/values.yaml
@@ -145,7 +145,7 @@ gitea-actions:
        log:
          level: debug
        cache:
-          enabled: true
+          enabled: false
        runner:
          labels:
            - "ubuntu-latest:docker://harbor.alexlebens.net/proxy-hub.docker/gitea/runner-images:ubuntu-24.04"
@@ -222,7 +222,7 @@ postgres-18-cluster:
      - name: live-backup
        suspend: false
        immediate: true
-        schedule: "0 0 7 * * *"
+        schedule: "0 0 0 * * *"
        backupName: garage-local
      # - name: weekly-backup
      #   suspend: true
@@ -259,7 +259,7 @@ volsync-target-storage:
    fsGroupChangePolicy: OnRootMismatch
  local:
    enabled: true
-    schedule: 0 0 7 * * *
+    schedule: 0 0 0 * * *
    restic:
      pruneIntervalDays: 3
      retain:
--- a/clusters/cl01tl/helm/grafana-operator/Chart.lock
+++ b/clusters/cl01tl/helm/grafana-operator/Chart.lock
@@ -4,12 +4,12 @@ dependencies:
  version: 5.22.0
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.9.1
+  version: 7.8.0
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.0
+  version: 0.2.0
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.0
-digest: sha256:45cdb638fe815c3fc9703626b902d0f69ed8ffd0625e0f95bd7b33682126433b
-generated: "2026-03-11T22:57:43.133815464Z"
+  version: 0.2.0
+digest: sha256:f7cc37aae4019e4ad8bd1b474dc14490cacb2748cf511c78077b9098b4475402
+generated: "2026-03-05T22:38:27.316142-06:00"
--- a/clusters/cl01tl/helm/grafana-operator/Chart.yaml
+++ b/clusters/cl01tl/helm/grafana-operator/Chart.yaml
@@ -21,15 +21,15 @@ dependencies:
    repository: https://grafana.github.io/helm-charts
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.9.1
+    version: 7.8.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: valkey
    alias: valkey-unified-alerting
-    version: 0.4.0
+    version: 0.3.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: valkey
    alias: valkey-remote-cache
-    version: 0.4.0
+    version: 0.3.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/grafana.png
 # renovate: datasource=github-releases depName=grafana/grafana-operator
--- a/clusters/cl01tl/helm/grafana-operator/values.yaml
+++ b/clusters/cl01tl/helm/grafana-operator/values.yaml
@@ -42,7 +42,7 @@ postgres-18-cluster:
      - name: live-backup
        suspend: false
        immediate: true
-        schedule: "0 30 14 * * *"
+        schedule: "0 0 0 * * *"
        backupName: garage-local
      # - name: weekly-backup
      #   suspend: true
--- a/clusters/cl01tl/helm/harbor/Chart.lock
+++ b/clusters/cl01tl/helm/harbor/Chart.lock
@@ -4,9 +4,9 @@ dependencies:
  version: 1.18.2
 - name: postgres-cluster
  repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
-  version: 7.9.1
+  version: 7.8.0
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.0
-digest: sha256:898f51eabee5959b9e7ebe90640cb915cb2dee446e6a6649a29499fecab8b6c7
-generated: "2026-03-11T22:58:00.955579445Z"
+  version: 0.3.0
+digest: sha256:b817ae63542ddf7504830df3637c2ffd1a3001f3aee43ef85ed074051b27f967
+generated: "2026-03-06T06:34:00.802362845Z"
--- a/clusters/cl01tl/helm/harbor/Chart.yaml
+++ b/clusters/cl01tl/helm/harbor/Chart.yaml
@@ -21,12 +21,12 @@ dependencies:
    repository: https://helm.goharbor.io
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.9.1
+    version: 7.8.0
    repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
  - name: valkey
    alias: valkey
-    version: 0.4.0
+    version: 0.3.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/harbor.png
 # renovate: datasource=github-releases depName=goharbor/harbor
-appVersion: v2.14.3
+appVersion: v2.14.2
--- a/clusters/cl01tl/helm/harbor/values.yaml
+++ b/clusters/cl01tl/helm/harbor/values.yaml
@@ -41,12 +41,12 @@ harbor:
  portal:
    image:
      repository: goharbor/harbor-portal
-      tag: v2.14.3
+      tag: v2.14.2
    replicas: 2
  core:
    image:
      repository: goharbor/harbor-core
-      tag: v2.14.3
+      tag: v2.14.2
    replicas: 2
    existingSecret: harbor-secret
    secretName: harbor-secret
@@ -54,7 +54,7 @@ harbor:
  jobservice:
    image:
      repository: goharbor/harbor-jobservice
-      tag: v2.14.3
+      tag: v2.14.2
    replicas: 2
    jobLoggers:
      - stdout
@@ -63,11 +63,11 @@ harbor:
    registry:
      image:
        repository: goharbor/registry-photon
-        tag: v2.14.3
+        tag: v2.14.2
    controller:
      image:
        repository: goharbor/harbor-registryctl
-        tag: v2.14.3
+        tag: v2.14.2
    existingSecret: harbor-secret
    relativeurls: true
    credentials:
@@ -94,14 +94,14 @@ harbor:
  exporter:
    image:
      repository: goharbor/harbor-exporter
-      tag: v2.14.3
+      tag: v2.14.2
    replicas: 2
 postgres-18-cluster:
  mode: recovery
  recovery:
    method: objectStore
    objectStore:
-      index: 2
+      index: 1
  backup:
    objectStore:
      - name: garage-local
@@ -126,7 +126,7 @@ postgres-18-cluster:
      - name: live-backup
        suspend: false
        immediate: true
-        schedule: "0 35 14 * * *"
+        schedule: "0 0 0 * * *"
        backupName: garage-local
      # - name: weekly-backup
      #   suspend: true
--- a/clusters/cl01tl/helm/home-assistant/values.yaml
+++ b/clusters/cl01tl/helm/home-assistant/values.yaml
@@ -21,7 +21,7 @@ home-assistant:
        code-server:
          image:
            repository: ghcr.io/linuxserver/code-server
-            tag: 4.110.0@sha256:8473aa16fba93fccc3ca772173d095bccd2e44d4d3104467fee923df10d57cd2
+            tag: 4.109.5@sha256:aa43fb2fc31127e9d2166e903c7f13792351e38658ba29645662a89ff04ff90d
            pullPolicy: IfNotPresent
          env:
            - name: TZ
@@ -134,10 +134,9 @@ volsync-target-config:
    fsGroupChangePolicy: OnRootMismatch
  local:
    enabled: true
-    schedule: 22 8 * * *
+    schedule: 24 8 * * *
  remote:
-    enabled: true
-    schedule: 22 9 * * *
+    enabled: false
  external:
    enabled: true
-    schedule: 22 10 * * *
+    schedule: 24 9 * * *
--- a/clusters/cl01tl/helm/homepage/values.yaml
+++ b/clusters/cl01tl/helm/homepage/values.yaml
@@ -160,12 +160,6 @@ homepage:
                  href: https://yamtrack.alexlebens.net
                  siteMonitor: http://yamtrack.yamtrack:80
                  statusStyle: dot
-              - Movie Roulette:
-                  icon: https://raw.githubusercontent.com/sahara101/Movie-Roulette/refs/heads/main/static/icons/icon.png
-                  description: Movie Roulette
-                  href: https://movie-roulette.alexlebens.net
-                  siteMonitor: http://movie-roulette.movie-roulette:80
-                  statusStyle: dot
              - Movies and TV:
                  icon: sh-jellyfin.webp
                  description: Jellyfin
--- a/clusters/cl01tl/helm/immich/Chart.lock
+++ b/clusters/cl01tl/helm/immich/Chart.lock
@@ -4,12 +4,12 @@ dependencies:
  version: 4.6.2
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.9.1
+  version: 7.8.0
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.0
+  version: 0.3.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.8.0
-digest: sha256:b886b0a1555ea75fbff52a58ccbf1659acbda20e933107bcbab9b00192aa25bd
-generated: "2026-03-11T22:58:20.294240859Z"
+digest: sha256:5beaeaa5376dd6d682b978977c524c443f6b54793abb20f086ab069fc4349add
+generated: "2026-03-06T06:34:15.52342763Z"
--- a/clusters/cl01tl/helm/immich/Chart.yaml
+++ b/clusters/cl01tl/helm/immich/Chart.yaml
@@ -20,11 +20,11 @@ dependencies:
    version: 4.6.2
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.9.1
+    version: 7.8.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: valkey
    alias: valkey
-    version: 0.4.0
+    version: 0.3.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-data
--- a/clusters/cl01tl/helm/immich/values.yaml
+++ b/clusters/cl01tl/helm/immich/values.yaml
@@ -209,7 +209,7 @@ postgres-18-cluster:
      - name: live-backup
        suspend: false
        immediate: true
-        schedule: "0 40 14 * * *"
+        schedule: "0 0 0 * * *"
        backupName: garage-local
      # - name: weekly-backup
      #   suspend: true
@@ -225,16 +225,16 @@ volsync-target-data:
  pvcTarget: immich
  local:
    enabled: true
-    schedule: 24 8 * * *
+    schedule: 28 8 * * *
    restic:
      cacheCapacity: 10Gi
  remote:
    enabled: true
-    schedule: 24 9 * * *
+    schedule: 28 10 * * *
    restic:
      cacheCapacity: 10Gi
  external:
    enabled: true
-    schedule: 24 10 * * *
+    schedule: 28 9 * * *
    restic:
      cacheCapacity: 10Gi
--- a/clusters/cl01tl/helm/jellyfin/Chart.lock
+++ b/clusters/cl01tl/helm/jellyfin/Chart.lock
@@ -4,9 +4,9 @@ dependencies:
  version: 4.6.2
 - name: meilisearch
  repository: https://meilisearch.github.io/meilisearch-kubernetes
-  version: 0.27.0
+  version: 0.26.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.8.0
-digest: sha256:ca384647a640ae717ac874a2627f00ac9a1e5c97ff5eeb8f326ebdd471ab1623
-generated: "2026-03-09T15:04:08.648165537Z"
+digest: sha256:8e4c443c9467338aa34e819f7cbce78ebbe3b9cd9453e036ca8f7f0d5bf18c96
+generated: "2026-03-06T01:09:11.430446168Z"
--- a/clusters/cl01tl/helm/jellyfin/Chart.yaml
+++ b/clusters/cl01tl/helm/jellyfin/Chart.yaml
@@ -25,7 +25,7 @@ dependencies:
    repository: https://bjw-s-labs.github.io/helm-charts/
    version: 4.6.2
  - name: meilisearch
-    version: 0.27.0
+    version: 0.26.0
    repository: https://meilisearch.github.io/meilisearch-kubernetes
  - name: volsync-target
    alias: volsync-target-config
--- a/clusters/cl01tl/helm/jellyfin/values.yaml
+++ b/clusters/cl01tl/helm/jellyfin/values.yaml
@@ -143,16 +143,14 @@ volsync-target-config:
  pvcTarget: jellyfin-config
  local:
    enabled: true
-    schedule: 26 8 * * *
+    schedule: 30 8 * * *
    restic:
      cacheCapacity: 10Gi
  remote:
-    enabled: true
-    schedule: 26 9 * * *
    restic:
      cacheCapacity: 10Gi
  external:
    enabled: true
-    schedule: 26 10 * * *
+    schedule: 30 9 * * *
    restic:
      cacheCapacity: 10Gi
--- a/clusters/cl01tl/helm/jellystat/Chart.lock
+++ b/clusters/cl01tl/helm/jellystat/Chart.lock
@@ -4,9 +4,9 @@ dependencies:
  version: 4.6.2
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.9.1
+  version: 7.8.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.8.0
-digest: sha256:29b92b08c230d5f3abc13949b299acccd1e9f8ff7df1f691a5dec41df5405595
-generated: "2026-03-11T22:58:35.766813121Z"
+digest: sha256:0f8868c6e89c0f283650db5446e8f36f162cb2179f62eb58e67b5b08c03ac84d
+generated: "2026-03-06T01:09:37.09922161Z"
--- a/clusters/cl01tl/helm/jellystat/Chart.yaml
+++ b/clusters/cl01tl/helm/jellystat/Chart.yaml
@@ -21,7 +21,7 @@ dependencies:
    version: 4.6.2
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.9.1
+    version: 7.8.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-data
--- a/clusters/cl01tl/helm/jellystat/values.yaml
+++ b/clusters/cl01tl/helm/jellystat/values.yaml
@@ -129,7 +129,7 @@ postgres-18-cluster:
      - name: live-backup
        suspend: false
        immediate: true
-        schedule: "0 45 14 * * *"
+        schedule: "0 0 0 * * *"
        backupName: garage-local
      # - name: weekly-backup
      #   suspend: true
@@ -145,10 +145,9 @@ volsync-target-data:
  pvcTarget: jellystat-data
  local:
    enabled: true
-    schedule: 28 8 * * *
+    schedule: 32 8 * * *
  remote:
-    enabled: true
-    schedule: 28 9 * * *
+    enabled: false
  external:
    enabled: true
-    schedule: 28 10 * * *
+    schedule: 32 9 * * *
--- a/clusters/cl01tl/helm/karakeep/Chart.lock
+++ b/clusters/cl01tl/helm/karakeep/Chart.lock
@@ -4,12 +4,12 @@ dependencies:
  version: 4.6.2
 - name: meilisearch
  repository: https://meilisearch.github.io/meilisearch-kubernetes
-  version: 0.27.0
+  version: 0.26.0
 - name: cloudflared
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.4.0
+  version: 2.3.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.8.0
-digest: sha256:75f92316d4b6229d00e3dfa39ed5026ad39a28f833321cd3887a2048cdac34c7
-generated: "2026-03-09T22:04:48.630821646Z"
+digest: sha256:0b9a2ac92849bbc08d9c1771ad1136ae259cc38bdb3aa3afb0ea4c5841aecfd3
+generated: "2026-03-06T01:10:04.579595021Z"
--- a/clusters/cl01tl/helm/karakeep/Chart.yaml
+++ b/clusters/cl01tl/helm/karakeep/Chart.yaml
@@ -22,11 +22,11 @@ dependencies:
    repository: https://bjw-s-labs.github.io/helm-charts/
    version: 4.6.2
  - name: meilisearch
-    version: 0.27.0
+    version: 0.26.0
    repository: https://meilisearch.github.io/meilisearch-kubernetes
  - name: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.4.0
+    version: 2.3.0
  - name: volsync-target
    alias: volsync-target-data
    version: 0.8.0
--- a/clusters/cl01tl/helm/karakeep/templates/external-secret.yaml
+++ b/clusters/cl01tl/helm/karakeep/templates/external-secret.yaml
@@ -57,43 +57,6 @@ spec:
        metadataPolicy: None
        property: secret

---
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: karakeep-bucket-garage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: karakeep-bucket-garage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: ACCESS_KEY_ID
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/karakeep-assets
-        metadataPolicy: None
-        property: ACCESS_KEY_ID
-    - secretKey: ACCESS_SECRET_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/karakeep-assets
-        metadataPolicy: None
-        property: ACCESS_SECRET_KEY
-    - secretKey: ACCESS_REGION
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /garage/home-infra/karakeep-assets
-        metadataPolicy: None
-        property: ACCESS_REGION
-
 ---
 apiVersion: external-secrets.io/v1
 kind: ExternalSecret
--- a/clusters/cl01tl/helm/karakeep/templates/object-bucket-claim.yaml
+++ b/clusters/cl01tl/helm/karakeep/templates/object-bucket-claim.yaml
@@ -0,0 +1,11 @@
+apiVersion: objectbucket.io/v1alpha1
+kind: ObjectBucketClaim
+metadata:
+  name: ceph-bucket-karakeep
+  labels:
+    app.kubernetes.io/name: ceph-bucket-karakeep
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  generateBucketName: bucket-karakeep
+  storageClassName: ceph-bucket
--- a/clusters/cl01tl/helm/karakeep/values.yaml
+++ b/clusters/cl01tl/helm/karakeep/values.yaml
@@ -29,24 +29,24 @@ karakeep:
                  name: karakeep-key-secret
                  key: prometheus-token
            - name: ASSET_STORE_S3_ENDPOINT
-              value: http://garage-main.garage:3900
+              value: http://rook-ceph-rgw-ceph-objectstore.rook-ceph.svc:80
            - name: ASSET_STORE_S3_REGION
-              valueFrom:
-                secretKeyRef:
-                  name: karakeep-bucket-garage
-                  key: ACCESS_REGION
+              value: us-east-1
            - name: ASSET_STORE_S3_BUCKET
-              value: karakeep-assets
+              valueFrom:
+                configMapKeyRef:
+                  name: ceph-bucket-karakeep
+                  key: BUCKET_NAME
            - name: ASSET_STORE_S3_ACCESS_KEY_ID
              valueFrom:
                secretKeyRef:
-                  name: karakeep-bucket-garage
-                  key: ACCESS_KEY_ID
+                  name: ceph-bucket-karakeep
+                  key: AWS_ACCESS_KEY_ID
            - name: ASSET_STORE_S3_SECRET_ACCESS_KEY
              valueFrom:
                secretKeyRef:
-                  name: karakeep-bucket-garage
-                  key: ACCESS_SECRET_KEY
+                  name: ceph-bucket-karakeep
+                  key: AWS_SECRET_ACCESS_KEY
            - name: ASSET_STORE_S3_FORCE_PATH_STYLE
              value: true
            - name: MEILI_ADDR
@@ -172,10 +172,9 @@ volsync-target-data:
  pvcTarget: karakeep
  local:
    enabled: true
-    schedule: 30 8 * * *
+    schedule: 34 8 * * *
  remote:
-    enabled: true
-    schedule: 30 9 * * *
+    enabled: false
  external:
    enabled: true
-    schedule: 30 10 * * *
+    schedule: 34 9 * * *
--- a/clusters/cl01tl/helm/komodo/Chart.lock
+++ b/clusters/cl01tl/helm/komodo/Chart.lock
@@ -4,6 +4,6 @@ dependencies:
  version: 4.6.2
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.9.1
-digest: sha256:833a88f82c14f78d63abea99244f2473bee2f5124a533a898a34844956f62b27
-generated: "2026-03-11T22:58:51.287064579Z"
+  version: 7.8.0
+digest: sha256:dd1ccfe8d0bfc7248141d2f72806c6437572f21d818941e9071f58d1a0a47259
+generated: "2026-02-27T18:17:12.586352018Z"
--- a/clusters/cl01tl/helm/komodo/Chart.yaml
+++ b/clusters/cl01tl/helm/komodo/Chart.yaml
@@ -23,7 +23,7 @@ dependencies:
    version: 4.6.2
  - name: postgres-cluster
    alias: postgresql-17-fdb-cluster
-    version: 7.9.1
+    version: 7.8.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/komodo.png
 # renovate: datasource=github-releases depName=moghtech/komodo
--- a/clusters/cl01tl/helm/komodo/values.yaml
+++ b/clusters/cl01tl/helm/komodo/values.yaml
@@ -205,7 +205,7 @@ postgresql-17-fdb-cluster:
  recovery:
    method: objectStore
    objectStore:
-      index: 2
+      index: 1
  backup:
    objectStore:
      - name: garage-local
@@ -230,7 +230,7 @@ postgresql-17-fdb-cluster:
      - name: live-backup
        suspend: false
        immediate: true
-        schedule: "0 50 14 * * *"
+        schedule: "0 0 0 * * *"
        backupName: garage-local
      # - name: weekly-backup
      #   suspend: true
--- a/clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock
+++ b/clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock
@@ -1,12 +1,12 @@
 dependencies:
 - name: kube-prometheus-stack
  repository: oci://ghcr.io/prometheus-community/charts
-  version: 82.10.3
+  version: 82.10.1
 - name: app-template
  repository: https://bjw-s-labs.github.io/helm-charts/
  version: 4.6.2
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.0
-digest: sha256:37ffa4a21ed29703cae9c9f3fb029566a1dd6af6e0fe8cc3862a2226d6644114
-generated: "2026-03-10T19:02:41.11005238Z"
+  version: 0.3.0
+digest: sha256:b4f9ab333450a893ab224f478febbf8ee4d0abb3c5b2682de13a64753e340884
+generated: "2026-03-06T22:03:44.014751197Z"
--- a/clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml
+++ b/clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml
@@ -20,7 +20,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: kube-prometheus-stack
-    version: 82.10.3
+    version: 82.10.1
    repository: oci://ghcr.io/prometheus-community/charts
  - name: app-template
    alias: ntfy-alertmanager
@@ -28,7 +28,7 @@ dependencies:
    version: 4.6.2
  - name: valkey
    alias: valkey
-    version: 0.4.0
+    version: 0.3.0
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/prometheus.png
 # renovate: datasource=github-releases depName=prometheus-operator/prometheus-operator
--- a/clusters/cl01tl/helm/libation/values.yaml
+++ b/clusters/cl01tl/helm/libation/values.yaml
@@ -75,10 +75,9 @@ volsync-target-config:
  pvcTarget: libation
  local:
    enabled: true
-    schedule: 32 8 * * *
+    schedule: 36 8 * * *
  remote:
-    enabled: true
-    schedule: 32 9 * * *
+    enabled: false
  external:
    enabled: true
-    schedule: 32 10 * * *
+    schedule: 36 9 * * *
--- a/clusters/cl01tl/helm/lidarr/Chart.lock
+++ b/clusters/cl01tl/helm/lidarr/Chart.lock
@@ -4,9 +4,9 @@ dependencies:
  version: 4.6.2
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.9.1
+  version: 7.8.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.8.0
-digest: sha256:d43b95fa1fc70c93541b9d73180406b31059c6cc45aa57a0cc8d9386c64833c3
-generated: "2026-03-11T22:59:07.151659257Z"
+digest: sha256:4511a3475316ebf0bd5da452e69602b7d52746253c659a433e61851f51093285
+generated: "2026-03-06T01:10:55.882802086Z"
--- a/clusters/cl01tl/helm/lidarr/Chart.yaml
+++ b/clusters/cl01tl/helm/lidarr/Chart.yaml
@@ -24,7 +24,7 @@ dependencies:
    version: 4.6.2
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.9.1
+    version: 7.8.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-config
--- a/clusters/cl01tl/helm/lidarr/values.yaml
+++ b/clusters/cl01tl/helm/lidarr/values.yaml
@@ -15,7 +15,7 @@ lidarr:
        main:
          image:
            repository: ghcr.io/linuxserver/lidarr
-            tag: 3.1.2-nightly@sha256:2b1b64f07214c6cf05bcfed999aa74ee23825e4bc2ef2c48aba1cd5d5bf968fe
+            tag: 3.1.2-nightly@sha256:f64fabd1737d9c7d519e1a37aba97b2e110d717e1c497a6f9788766f9633cf8f
            pullPolicy: IfNotPresent
          env:
            - name: TZ
@@ -167,7 +167,7 @@ postgres-18-cluster:
      - name: live-backup
        suspend: false
        immediate: true
-        schedule: "0 55 14 * * *"
+        schedule: "0 0 0 * * *"
        backupName: garage-local
      # - name: weekly-backup
      #   suspend: true
@@ -188,10 +188,9 @@ volsync-target-config:
    fsGroupChangePolicy: OnRootMismatch
  local:
    enabled: true
-    schedule: 34 8 * * *
+    schedule: 38 8 * * *
  remote:
-    enabled: true
-    schedule: 34 9 * * *
+    enabled: false
  external:
    enabled: true
-    schedule: 34 10 * * *
+    schedule: 38 9 * * *
--- a/clusters/cl01tl/helm/local-path-provisioner/Chart.lock
+++ b/clusters/cl01tl/helm/local-path-provisioner/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: local-path-provisioner
  repository: https://charts.containeroo.ch
-  version: 0.0.36
-digest: sha256:ac212733a0ba2046767ad1718ca740d5aad3d1bfc49c5e7a5056c8414c1d65d4
-generated: "2026-03-10T19:00:30.739038561Z"
+  version: 0.0.35
+digest: sha256:c59cc5a81e797a9e2ab0f8e6bf03cb3e4dfc740555631aa1d41b7def1d2c60c8
+generated: "2026-01-10T19:01:45.394965495Z"
--- a/clusters/cl01tl/helm/local-path-provisioner/Chart.yaml
+++ b/clusters/cl01tl/helm/local-path-provisioner/Chart.yaml
@@ -15,8 +15,8 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: local-path-provisioner
-    version: 0.0.36
+    version: 0.0.35
    repository: https://charts.containeroo.ch
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 # renovate: datasource=github-releases depName=rancher/local-path-provisioner
-appVersion: v0.0.35
+appVersion: v0.0.34
--- a/clusters/cl01tl/helm/local-path-provisioner/values.yaml
+++ b/clusters/cl01tl/helm/local-path-provisioner/values.yaml
@@ -1,7 +1,7 @@
 local-path-provisioner:
  image:
    repository: rancher/local-path-provisioner
-    tag: v0.0.35
+    tag: v0.0.34
  helperImage:
    repository: busybox
    tag: 1.37.0
--- a/clusters/cl01tl/helm/loki/Chart.lock
+++ b/clusters/cl01tl/helm/loki/Chart.lock
@@ -4,6 +4,6 @@ dependencies:
  version: 6.53.0
 - name: alloy
  repository: https://grafana.github.io/helm-charts
-  version: 1.6.2
-digest: sha256:88b8ace6bcbcbff4b04727499705fbe94de7fe4b8f0b8aa254a1e7d1d2c65fac
-generated: "2026-03-10T18:56:19.38475079Z"
+  version: 1.6.1
+digest: sha256:ec17a816dcdc476ad67cd056556d9a42a9fb8057ef75a928f8604939006e3416
+generated: "2026-03-02T15:18:56.219024346Z"
--- a/clusters/cl01tl/helm/loki/Chart.yaml
+++ b/clusters/cl01tl/helm/loki/Chart.yaml
@@ -19,7 +19,7 @@ dependencies:
    version: 6.53.0
    repository: https://grafana.github.io/helm-charts
  - name: alloy
-    version: 1.6.2
+    version: 1.6.1
    repository: https://grafana.github.io/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/loki.png
 # renovate: datasource=github-releases depName=grafana/loki
--- a/clusters/cl01tl/helm/matrix-synapse/Chart.lock
+++ b/clusters/cl01tl/helm/matrix-synapse/Chart.lock
@@ -13,19 +13,19 @@ dependencies:
  version: 4.6.2
 - name: cloudflared
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.4.0
+  version: 2.3.0
 - name: cloudflared
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.4.0
+  version: 2.3.0
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.9.1
+  version: 7.8.0
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.0
+  version: 0.3.0
 - name: valkey
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.4.0
+  version: 0.3.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.8.0
@@ -38,5 +38,5 @@ dependencies:
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.8.0
-digest: sha256:3b61539bbe5efd66392178ded30fc80f23ca1bb54c1e552ab183037e478ad2a0
-generated: "2026-03-11T22:59:22.883997608Z"
+digest: sha256:c26ecd1796d394c0d10c4d64c2c9e7130303cecd8160fe52447b9ae21eedeab9
+generated: "2026-03-06T06:34:42.381145161Z"
--- a/clusters/cl01tl/helm/matrix-synapse/Chart.yaml
+++ b/clusters/cl01tl/helm/matrix-synapse/Chart.yaml
@@ -45,23 +45,23 @@ dependencies:
    version: 4.6.2
  - name: cloudflared
    alias: cloudflared-synapse
-    version: 2.4.0
+    version: 2.3.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: cloudflared
    alias: cloudflared-hookshot
-    version: 2.4.0
+    version: 2.3.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.9.1
+    version: 7.8.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: valkey
    alias: valkey-matrix-synapse
-    version: 0.4.0
+    version: 0.3.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: valkey
    alias: valkey-hookshot
-    version: 0.4.0
+    version: 0.3.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-synapse
@@ -81,4 +81,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/matrix.png
 # renovate: datasource=github-releases depName=element-hq/synapse
-appVersion: v1.149.0
+appVersion: v1.148.0
--- a/clusters/cl01tl/helm/matrix-synapse/values.yaml
+++ b/clusters/cl01tl/helm/matrix-synapse/values.yaml
@@ -434,7 +434,7 @@ postgres-18-cluster:
      - name: live-backup
        suspend: false
        immediate: true
-        schedule: "0 0 15 * * *"
+        schedule: "0 0 0 * * *"
        backupName: garage-local
      # - name: weekly-backup
      #   suspend: true
@@ -470,24 +470,22 @@ volsync-target-synapse:
  pvcTarget: matrix-synapse
  local:
    enabled: true
-    schedule: 36 8 * * *
+    schedule: 44 8 * * *
  remote:
-    enabled: true
-    schedule: 36 9 * * *
+    enabled: false
  external:
    enabled: true
-    schedule: 36 10 * * *
+    schedule: 44 9 * * *
 volsync-target-hookshot:
  pvcTarget: matrix-hookshot
  local:
    enabled: true
-    schedule: 38 8 * * *
+    schedule: 46 8 * * *
  remote:
-    enabled: true
-    schedule: 38 9 * * *
+    enabled: false
  external:
    enabled: true
-    schedule: 38 10 * * *
+    schedule: 46 9 * * *
 volsync-target-discord:
  pvcTarget: mautrix-discord
  moverSecurityContext:
@@ -495,13 +493,12 @@ volsync-target-discord:
    runAsGroup: 1337
  local:
    enabled: true
-    schedule: 40 8 * * *
+    schedule: 48 8 * * *
  remote:
-    enabled: true
-    schedule: 40 9 * * *
+    enabled: false
  external:
    enabled: true
-    schedule: 40 10 * * *
+    schedule: 48 9 * * *
 volsync-target-whatsapp:
  pvcTarget: mautrix-whatsapp
  moverSecurityContext:
@@ -509,10 +506,9 @@ volsync-target-whatsapp:
    runAsGroup: 1337
  local:
    enabled: true
-    schedule: 42 8 * * *
+    schedule: 50 8 * * *
  remote:
-    enabled: true
-    schedule: 42 9 * * *
+    enabled: false
  external:
    enabled: true
-    schedule: 42 10 * * *
+    schedule: 50 9 * * *
--- a/clusters/cl01tl/helm/movie-roulette/Chart.lock
+++ b/clusters/cl01tl/helm/movie-roulette/Chart.lock
@@ -1,6 +0,0 @@
-dependencies:
- name: app-template
-  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
-digest: sha256:faa35ccfc18b2d47fad558e168bd3c68e64790fe2b1356881452ae4f5cd8b443
-generated: "2026-03-10T16:01:13.738843-05:00"
--- a/clusters/cl01tl/helm/movie-roulette/Chart.yaml
+++ b/clusters/cl01tl/helm/movie-roulette/Chart.yaml
@@ -1,22 +0,0 @@
-apiVersion: v2
-name: movie-roulette
-version: 1.0.0
-description: Movie Roulette
-keywords:
-  - movie-roulette
-  - jellyfin
-home: https://wiki.alexlebens.dev/
-sources:
-  - https://github.com/sahara101/Movie-Roulette
-  - https://github.com/sahara101/Movie-Roulette/pkgs/container/movie-roulette
-  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: app-template
-    alias: movie-roulette
-    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
-icon: https://raw.githubusercontent.com/sahara101/Movie-Roulette/refs/heads/main/static/icons/icon.png
-# renovate: datasource=github-releases depName=sahara101/Movie-Roulette
-appVersion: v5.2.1
--- a/clusters/cl01tl/helm/movie-roulette/templates/external-secret.yaml
+++ b/clusters/cl01tl/helm/movie-roulette/templates/external-secret.yaml
@@ -1,42 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: movie-roulette-config-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: movie-roulette-config-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: secret-key
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/movie-roulette/key
-        metadataPolicy: None
-        property: secret-key
-    - secretKey: jellyfin-key
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/jellyfin/movie-roulette
-        metadataPolicy: None
-        property: jellyfin-key
-    - secretKey: jellyfin-user
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/jellyfin/movie-roulette
-        metadataPolicy: None
-        property: user
-    - secretKey: seerr-key
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/seerr/key
-        metadataPolicy: None
-        property: key
--- a/clusters/cl01tl/helm/movie-roulette/values.yaml
+++ b/clusters/cl01tl/helm/movie-roulette/values.yaml
@@ -1,128 +0,0 @@
-movie-roulette:
-  controllers:
-    main:
-      type: deployment
-      replicas: 1
-      strategy: Recreate
-      revisionHistoryLimit: 3
-      containers:
-        main:
-          image:
-            repository: ghcr.io/sahara101/movie-roulette
-            tag: v5.2.1
-            pullPolicy: IfNotPresent
-          env:
-            - name: FLASK_SECRET_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: movie-roulette-config-secret
-                  key: secret-key
-            - name: CORS_ALLOWED_ORIGINS
-              value: movie-roulette.alexlebens.net
-            - name: DISABLE_SETTINGS
-              value: "TRUE"
-            - name: AUTH_ENABLED
-              value: "TRUE"
-            - name: AUTH_SESSION_LIFETIME
-              value: "86400"
-            - name: JELLYFIN_URL
-              value: http://jellyfin.alexlebens.net
-            - name: JELLYFIN_API_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: movie-roulette-config-secret
-                  key: jellyfin-key
-            - name: JELLYFIN_USER_ID
-              valueFrom:
-                secretKeyRef:
-                  name: movie-roulette-config-secret
-                  key: jellyfin-user
-            - name: LOGIN_BACKDROP_ENABLED
-              value: "TRUE"
-            - name: HOMEPAGE_MODE
-              value: "FALSE"
-            - name: USE_LINKS
-              value: "TRUE"
-            - name: USE_FILTER
-              value: "TRUE"
-            - name: USE_WATCH_BUTTON
-              value: "TRUE"
-            - name: USE_NEXT_BUTTON
-              value: "TRUE"
-            - name: USE_GRID_VIEW
-              value: "true"
-            - name: ENABLE_MOBILE_TRUNCATION
-              value: "TRUE"
-            - name: SHOW_NOW_WATCHING_CARD
-              value: "FALSE"
-            - name: USE_HEROUI_THEME
-              value: "FALSE"
-            - name: ENABLE_MOVIE_LOGOS
-              value: "TRUE"
-            - name: LOAD_MOVIE_ON_START
-              value: "FALSE"
-            - name: SEERR_URL
-              value: http://seerr.alexlebens.net
-            - name: SEERR_API_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: movie-roulette-config-secret
-                  key: seerr-key
-            - name: REQUEST_SERVICE_DEFAULT
-              value: "seerr"
-          resources:
-            requests:
-              cpu: 10m
-              memory: 128Mi
-  service:
-    main:
-      controller: main
-      ports:
-        http:
-          port: 80
-          targetPort: 4000
-          protocol: HTTP
-  route:
-    main:
-      kind: HTTPRoute
-      parentRefs:
-        - group: gateway.networking.k8s.io
-          kind: Gateway
-          name: traefik-gateway
-          namespace: traefik
-      hostnames:
-        - movie-roulette.alexlebens.net
-      rules:
-        - backendRefs:
-            - group: ''
-              kind: Service
-              name: movie-roulette
-              port: 80
-              weight: 100
-          matches:
-            - path:
-                type: PathPrefix
-                value: /
-  persistence:
-    data:
-      forceRename: movie-roulette-data
-      storageClass: ceph-block
-      accessMode: ReadWriteOnce
-      size: 1Gi
-      retain: true
-      advancedMounts:
-        main:
-          main:
-            - path: /config
-              readOnly: false
-volsync-target-data:
-  pvcTarget: movie-roulette-data
-  local:
-    enabled: true
-    schedule: 44 8 * * *
-  remote:
-    enabled: true
-    schedule: 44 9 * * *
-  external:
-    enabled: true
-    schedule: 44 10 * * *
--- a/clusters/cl01tl/helm/music-grabber/values.yaml
+++ b/clusters/cl01tl/helm/music-grabber/values.yaml
@@ -9,7 +9,7 @@ music-grabber:
        main:
          image:
            repository: g33kphr33k/musicgrabber
-            tag: 2.3.5
+            tag: 2.3.1
            pullPolicy: IfNotPresent
          env:
            - name: MUSIC_DIR
@@ -85,10 +85,6 @@ music-grabber:
              value: 8080
            - name: DNS_UPSTREAM_RESOLVER_TYPE
              value: dot
-            - name: HTTPPROXY
-              value: "off"
-            - name: SHADOWSOCKS
-              value: "off"
          securityContext:
            privileged: True
            capabilities:
--- a/clusters/cl01tl/helm/navidrome/values.yaml
+++ b/clusters/cl01tl/helm/navidrome/values.yaml
@@ -178,10 +178,9 @@ volsync-target-data:
    fsGroupChangePolicy: OnRootMismatch
  local:
    enabled: true
-    schedule: 46 8 * * *
+    schedule: 52 8 * * *
  remote:
-    enabled: true
-    schedule: 46 9 * * *
+    enabled: false
  external:
    enabled: true
-    schedule: 46 10 * * *
+    schedule: 52 9 * * *
--- a/clusters/cl01tl/helm/ntfy/Chart.yaml
+++ b/clusters/cl01tl/helm/ntfy/Chart.yaml
@@ -20,4 +20,4 @@ dependencies:
    version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ntfy.png
 # renovate: datasource=github-releases depName=binwiederhier/ntfy
-appVersion: 2.18.0
+appVersion: 2.17.0
--- a/clusters/cl01tl/helm/ntfy/values.yaml
+++ b/clusters/cl01tl/helm/ntfy/values.yaml
@@ -9,7 +9,7 @@ ntfy:
        main:
          image:
            repository: binwiederhier/ntfy
-            tag: v2.18.0
+            tag: v2.17.0
            pullPolicy: IfNotPresent
          args: ["serve"]
          env:
--- a/clusters/cl01tl/helm/ollama/Chart.lock
+++ b/clusters/cl01tl/helm/ollama/Chart.lock
@@ -4,9 +4,9 @@ dependencies:
  version: 4.6.2
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.9.1
+  version: 7.8.0
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.8.0
-digest: sha256:a3201fc53ddfbaeb5a81d08e9d20135fb59174879e20f0b4986b1b8540011e03
-generated: "2026-03-11T22:59:44.389634096Z"
+digest: sha256:a6aa65545de5125a27cf0324f6e8cbd6d69471ca32f32083cc0f1d3fd49efa15
+generated: "2026-03-06T01:12:09.026288121Z"
--- a/clusters/cl01tl/helm/ollama/Chart.yaml
+++ b/clusters/cl01tl/helm/ollama/Chart.yaml
@@ -23,7 +23,7 @@ dependencies:
    version: 4.6.2
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.9.1
+    version: 7.8.0
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-data
--- a/clusters/cl01tl/helm/ollama/values.yaml
+++ b/clusters/cl01tl/helm/ollama/values.yaml
@@ -117,7 +117,7 @@ ollama:
        main:
          image:
            repository: ghcr.io/open-webui/open-webui
-            tag: v0.8.10
+            tag: v0.8.8
            pullPolicy: IfNotPresent
          env:
            - name: ENV
@@ -289,7 +289,7 @@ postgres-18-cluster:
      - name: live-backup
        suspend: false
        immediate: true
-        schedule: "0 5 15 * * *"
+        schedule: "0 0 0 * * *"
        backupName: garage-local
      # - name: weekly-backup
      #   suspend: true
@@ -308,10 +308,9 @@ volsync-target-data:
    runAsGroup: 1337
  local:
    enabled: true
-    schedule: 48 8 * * *
+    schedule: 54 8 * * *
  remote:
-    enabled: true
-    schedule: 48 9 * * *
+    enabled: false
  external:
    enabled: true
-    schedule: 48 10 * * *
+    schedule: 54 9 * * *
--- a/Show More
+++ b/Show More