chore(deps): update dependency grafana/loki to v3.6.5

2026-02-07 15:02:24 +00:00
185 changed files with 770 additions and 1363 deletions
--- a/clusters/cl01tl/helm/argo-workflows/Chart.lock
+++ b/clusters/cl01tl/helm/argo-workflows/Chart.lock
@@ -1,12 +1,12 @@
 dependencies:
 - name: argo-workflows
  repository: https://argoproj.github.io/argo-helm
-  version: 0.47.4
+  version: 0.47.3
 - name: argo-events
  repository: https://argoproj.github.io/argo-helm
  version: 2.4.20
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.7.0
-digest: sha256:aab605d619f2f5940f84f61f60cdc41c7c8d786d0c870e0162168dcfa3ad3d6e
-generated: "2026-02-21T13:03:47.154277853Z"
+  version: 7.5.1
+digest: sha256:d634e2aba7e8ba644eac9b5cff7f959090a755e69c041c15889e4ba1ba8d04f0
+generated: "2026-02-07T02:27:32.331360382Z"
--- a/clusters/cl01tl/helm/argo-workflows/Chart.yaml
+++ b/clusters/cl01tl/helm/argo-workflows/Chart.yaml
@@ -18,15 +18,15 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: argo-workflows
-    version: 0.47.4
+    version: 0.47.3
    repository: https://argoproj.github.io/argo-helm
  - name: argo-events
    version: 2.4.20
    repository: https://argoproj.github.io/argo-helm
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.7.0
+    version: 7.5.1
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 # renovate: datasource=github-releases depName=argoproj/argo-workflows
-appVersion: v4.0.1
+appVersion: v4.0.0
--- a/clusters/cl01tl/helm/argocd/Chart.lock
+++ b/clusters/cl01tl/helm/argocd/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: argo-cd
  repository: https://argoproj.github.io/argo-helm
-  version: 9.4.3
-digest: sha256:412638aff55e51b317017050b3858423593469e0f58c80d58c3ab3f102e577c8
-generated: "2026-02-18T18:03:59.328005375Z"
+  version: 9.4.1
+digest: sha256:6686031538b67a4b79a89b90de06199758c4718a9b7e0a0e6863a5be8964ed9d
+generated: "2026-02-05T20:06:46.998124019Z"
--- a/clusters/cl01tl/helm/argocd/Chart.yaml
+++ b/clusters/cl01tl/helm/argocd/Chart.yaml
@@ -15,8 +15,8 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: argo-cd
-    version: 9.4.3
+    version: 9.4.1
    repository: https://argoproj.github.io/argo-helm
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 # renovate: datasource=github-releases depName=argoproj/argo-cd
-appVersion: v3.3.1
+appVersion: v3.3.0
--- a/clusters/cl01tl/helm/argocd/values.yaml
+++ b/clusters/cl01tl/helm/argocd/values.yaml
@@ -4,7 +4,6 @@ argo-cd:
  configs:
    cm:
      admin.enabled: true
-      accounts.homepage: apiKey
      timeout.reconciliation: 100s
      timeout.reconciliation.jitter: 60s
      url: https://argocd.alexlebens.net
@@ -30,7 +29,6 @@ argo-cd:
    rbac:
      policy.csv: |
        g, ArgoCD Admins, role:admin
-        g, homepage, role:readonly
  controller:
    replicas: 1
    metrics:
--- a/clusters/cl01tl/helm/authentik/Chart.lock
+++ b/clusters/cl01tl/helm/authentik/Chart.lock
@@ -1,15 +1,15 @@
 dependencies:
 - name: authentik
  repository: https://charts.goauthentik.io/
-  version: 2025.12.4
+  version: 2025.12.3
 - name: cloudflared
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 2.3.0
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.7.0
+  version: 7.5.1
 - name: redis-replication
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 1.0.4
-digest: sha256:9e8f037f9d581ad83edde8d4a68672860cbe9d0192b10c37708710315a017469
-generated: "2026-02-21T13:04:06.808436719Z"
+digest: sha256:0ddd9eef110b22a07e2d7baee3b9ae4bd6ce6dafc89b72a38cfc254594a629d0
+generated: "2026-02-07T02:27:46.31096754Z"
--- a/clusters/cl01tl/helm/authentik/Chart.yaml
+++ b/clusters/cl01tl/helm/authentik/Chart.yaml
@@ -21,14 +21,14 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: authentik
-    version: 2025.12.4
+    version: 2025.12.3
    repository: https://charts.goauthentik.io/
  - name: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
    version: 2.3.0
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.7.0
+    version: 7.5.1
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: redis-replication
    version: 1.0.4
--- a/clusters/cl01tl/helm/bazarr/values.yaml
+++ b/clusters/cl01tl/helm/bazarr/values.yaml
@@ -15,7 +15,7 @@ bazarr:
        main:
          image:
            repository: ghcr.io/linuxserver/bazarr
-            tag: 1.5.5@sha256:1cf40186b1bc35bec87f4e4892d5d8c06086da331010be03e3459a86869c5e74
+            tag: 1.5.5@sha256:d40ee61030a9afafddfdd58d160281b865bfcad7cb66e920116fd6fd40668cbb
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/helm/blocky/values.yaml
+++ b/clusters/cl01tl/helm/blocky/values.yaml
@@ -112,7 +112,6 @@ blocky:
              booklore                        IN      CNAME   traefik-cl01tl
              ceph                            IN      CNAME   traefik-cl01tl
              code-server                     IN      CNAME   traefik-cl01tl
-              directus                        IN      CNAME   traefik-cl01tl
              excalidraw                      IN      CNAME   traefik-cl01tl
              feishin                         IN      CNAME   traefik-cl01tl
              garage-s3                       IN      CNAME   traefik-cl01tl
@@ -134,12 +133,12 @@ blocky:
              komodo                          IN      CNAME   traefik-cl01tl
              lidarr                          IN      CNAME   traefik-cl01tl
              mail                            IN      CNAME   traefik-cl01tl
-              music-grabber                   IN      CNAME   traefik-cl01tl
              navidrome                       IN      CNAME   traefik-cl01tl
              ntfy                            IN      CNAME   traefik-cl01tl
              objects                         IN      CNAME   traefik-cl01tl
              ollama                          IN      CNAME   traefik-cl01tl
              omni-tools                      IN      CNAME   traefik-cl01tl
+              overseerr                       IN      CNAME   traefik-cl01tl
              photoview                       IN      CNAME   traefik-cl01tl
              plex                            IN      CNAME   traefik-cl01tl
              postiz                          IN      CNAME   traefik-cl01tl
--- a/clusters/cl01tl/helm/cilium/Chart.yaml
+++ b/clusters/cl01tl/helm/cilium/Chart.yaml
@@ -19,4 +19,4 @@ dependencies:
    repository: https://helm.cilium.io/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/cilium.png
 # renovate: datasource=github-releases depName=cilium/cilium
-appVersion: 1.19.1
+appVersion: 1.19.0
--- a/clusters/cl01tl/helm/cilium/templates/cilium-l2-announcement-policy.yaml
+++ b/clusters/cl01tl/helm/cilium/templates/cilium-l2-announcement-policy.yaml
@@ -0,0 +1,18 @@
+# apiVersion: "cilium.io/v2alpha1"
+# kind: CiliumL2AnnouncementPolicy
+# metadata:
+#   name: node-gateway-l2-policy
+#   namespace: {{ .Release.Namespace }}
+#   labels:
+#     app.kubernetes.io/name: node-gateway-l2-policy
+#     app.kubernetes.io/instance: {{ .Release.Name }}
+#     app.kubernetes.io/part-of: {{ .Release.Name }}
+# spec:
+#   nodeSelector:
+#     matchLabels:
+#       kubernetes.io/hostname: talos-ix7-xku
+#   interfaces:
+#     - end0
+#     - enp6s0
+#   externalIPs: true
+#   loadBalancerIPs: true
--- a/clusters/cl01tl/helm/cilium/templates/cilium-load-balancer-ip-pool.yaml
+++ b/clusters/cl01tl/helm/cilium/templates/cilium-load-balancer-ip-pool.yaml
@@ -11,6 +11,8 @@ spec:
  blocks:
    - start: "10.232.1.21"
      stop: "10.232.1.23"
+    - start: "10.232.2.21"
+      stop: "10.232.2.23"

 ---
 apiVersion: cilium.io/v2
--- a/clusters/cl01tl/helm/cilium/templates/gateway.yaml
+++ b/clusters/cl01tl/helm/cilium/templates/gateway.yaml
@@ -9,6 +9,7 @@
 #     app.kubernetes.io/part-of: {{ .Release.Name }}
 #   annotations:
 #     cert-manager.io/cluster-issuer: letsencrypt-issuer
+#     io.cilium/lb-ipam-ips: "10.232.1.23"
 # spec:
 #   addresses:
 #     - type: IPAddress
--- a/clusters/cl01tl/helm/cilium/values.yaml
+++ b/clusters/cl01tl/helm/cilium/values.yaml
@@ -38,6 +38,7 @@ cilium:
  bpf:
    hostLegacyRouting: true
  devices: end0 enp6s0
+  enableK8sEndpointSlice: true
  ciliumEndpointSlice:
    enabled: true
  ingressController:
@@ -46,8 +47,6 @@ cilium:
    enabled: true
    enableAlpn: true
    enableAppProtocol: true
-    gatewayClass:
-      create: auto
  externalIPs:
    enabled: true
  socketLB:
--- a/clusters/cl01tl/helm/code-server/values.yaml
+++ b/clusters/cl01tl/helm/code-server/values.yaml
@@ -9,7 +9,7 @@ code-server:
        main:
          image:
            repository: ghcr.io/linuxserver/code-server
-            tag: 4.109.2@sha256:3c6a1f70ba898b47d77dec0ce6d43a3a9223091587d3c57935607eefa77511da
+            tag: 4.108.2@sha256:a59301fe97af3d9bf9150ce53e5c7b12486f2803eea0446a38f8d545ac877c9a
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/helm/descheduler/Chart.lock
+++ b/clusters/cl01tl/helm/descheduler/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: descheduler
  repository: https://kubernetes-sigs.github.io/descheduler/
-  version: 0.35.0
-digest: sha256:afa0e5fe35f9287db619de604c82a22c3ab90dfcaa3a845ff30491e47c7a5846
-generated: "2026-02-19T23:03:22.794515683Z"
+  version: 0.34.0
+digest: sha256:1020c1fc8c179744f308e9b79f010dcaf59a05019f7d007157974be97063e12b
+generated: "2025-12-01T20:25:26.970808-06:00"
--- a/clusters/cl01tl/helm/descheduler/Chart.yaml
+++ b/clusters/cl01tl/helm/descheduler/Chart.yaml
@@ -14,8 +14,8 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: descheduler
-    version: 0.35.0
+    version: 0.34.0
    repository: https://kubernetes-sigs.github.io/descheduler/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 # renovate: datasource=github-releases depName=kubernetes-sigs/descheduler
-appVersion: v0.35.0
+appVersion: 0.34.0
--- a/clusters/cl01tl/helm/directus/Chart.lock
+++ b/clusters/cl01tl/helm/directus/Chart.lock
@@ -2,11 +2,14 @@ dependencies:
 - name: app-template
  repository: https://bjw-s-labs.github.io/helm-charts/
  version: 4.6.2
+- name: cloudflared
+  repository: oci://harbor.alexlebens.net/helm-charts
+  version: 2.3.0
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.7.0
+  version: 7.5.1
 - name: redis-replication
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 1.0.4
-digest: sha256:c769752a4e07a8313c0fa354e80fcaeb0175c599f49c03afe55b75d4e8823d9e
-generated: "2026-02-21T13:04:39.035692394Z"
+digest: sha256:ff9c3684242fa6ce85051e3ab15cd482ad721dbb589853545e8db184644e47b8
+generated: "2026-02-07T02:27:57.805810517Z"
--- a/clusters/cl01tl/helm/directus/Chart.yaml
+++ b/clusters/cl01tl/helm/directus/Chart.yaml
@@ -21,13 +21,16 @@ dependencies:
    alias: directus
    repository: https://bjw-s-labs.github.io/helm-charts/
    version: 4.6.2
+  - name: cloudflared
+    repository: oci://harbor.alexlebens.net/helm-charts
+    version: 2.3.0
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.7.0
+    version: 7.5.1
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: redis-replication
    version: 1.0.4
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/directus.png
 # renovate: datasource=github-releases depName=directus/directus
-appVersion: 11.15.4
+appVersion: 11.15.0
--- a/clusters/cl01tl/helm/directus/values.yaml
+++ b/clusters/cl01tl/helm/directus/values.yaml
@@ -9,11 +9,11 @@ directus:
        main:
          image:
            repository: directus/directus
-            tag: 11.15.4
+            tag: 11.15.0
            pullPolicy: IfNotPresent
          env:
            - name: PUBLIC_URL
-              value: https://directus.alexlebens.net
+              value: https://directus.alexlebens.dev
            - name: WEBSOCKETS_ENABLED
              value: true
            - name: ADMIN_EMAIL
@@ -125,7 +125,7 @@ directus:
            - name: AUTH_AUTHENTIK_SCOPE
              value: openid profile email
            - name: AUTH_AUTHENTIK_ISSUER_URL
-              value: https://authentik.alexlebens.net/application/o/directus/.well-known/openid-configuration
+              value: https://auth.alexlebens.dev/application/o/directus/.well-known/openid-configuration
            - name: AUTH_AUTHENTIK_IDENTIFIER_KEY
              value: email
            - name: AUTH_AUTHENTIK_ALLOW_PUBLIC_REGISTRATION
@@ -168,27 +168,6 @@ directus:
          bearerTokenSecret:
            name: directus-metric-token
            key: metric-token
-  route:
-    main:
-      kind: HTTPRoute
-      parentRefs:
-        - group: gateway.networking.k8s.io
-          kind: Gateway
-          name: traefik-gateway
-          namespace: traefik
-      hostnames:
-        - directus.alexlebens.net
-      rules:
-        - backendRefs:
-            - group: ''
-              kind: Service
-              name: directus
-              port: 80
-              weight: 100
-          matches:
-            - path:
-                type: PathPrefix
-                value: /
 postgres-18-cluster:
  mode: recovery
  recovery:
--- a/clusters/cl01tl/helm/element-web/Chart.lock
+++ b/clusters/cl01tl/helm/element-web/Chart.lock
@@ -1,9 +1,9 @@
 dependencies:
 - name: element-web
  repository: https://ananace.gitlab.io/charts
-  version: 1.4.30
+  version: 1.4.29
 - name: cloudflared
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 2.3.0
-digest: sha256:90a1767a625f0a5ba0f5f23015b2ae7c2ae2cecac311e6cb2dc2ce3c483916b3
-generated: "2026-02-16T20:12:50.293216516Z"
+digest: sha256:8596c403427f8ba2f257ed45bb2604c4de0da72dfb03d44d1b0e96f6576c3920
+generated: "2026-02-07T00:37:18.77202934Z"
--- a/clusters/cl01tl/helm/element-web/Chart.yaml
+++ b/clusters/cl01tl/helm/element-web/Chart.yaml
@@ -17,11 +17,11 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: element-web
-    version: 1.4.30
+    version: 1.4.29
    repository: https://ananace.gitlab.io/charts
  - name: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
    version: 2.3.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/element.png
 # renovate: datasource=github-releases depName=element-hq/element-web
-appVersion: v1.12.10
+appVersion: v1.12.9
--- a/clusters/cl01tl/helm/element-web/values.yaml
+++ b/clusters/cl01tl/helm/element-web/values.yaml
@@ -2,7 +2,7 @@ element-web:
  replicaCount: 1
  image:
    repository: vectorim/element-web
-    tag: v1.12.10
+    tag: v1.12.9
    pullPolicy: IfNotPresent
  defaultServer:
    url: https://matrix.alexlebens.dev
--- a/clusters/cl01tl/helm/external-dns/values.yaml
+++ b/clusters/cl01tl/helm/external-dns/values.yaml
@@ -19,7 +19,7 @@ external-dns-unifi:
    webhook:
      image:
        repository: ghcr.io/kashalls/external-dns-unifi-webhook
-        tag: v0.8.2
+        tag: v0.8.1
      env:
        - name: UNIFI_HOST
          value: https://192.168.1.1
--- a/clusters/cl01tl/helm/external-secrets/Chart.lock
+++ b/clusters/cl01tl/helm/external-secrets/Chart.lock
@@ -1,6 +1,6 @@
 dependencies:
 - name: external-secrets
  repository: https://charts.external-secrets.io
-  version: 2.0.1
-digest: sha256:f47905e03f649c28d29f7a381799fb2df1f0a7bf122af174aeba47ba94f34847
-generated: "2026-02-20T19:29:28.137671934Z"
+  version: 2.0.0
+digest: sha256:3833a9f099d80f50e8a7c9874138b9eba42c18fe5f5f5dc605031f7c44bd3971
+generated: "2026-02-06T15:40:39.917039721Z"
--- a/clusters/cl01tl/helm/external-secrets/Chart.yaml
+++ b/clusters/cl01tl/helm/external-secrets/Chart.yaml
@@ -12,8 +12,8 @@ sources:
  - https://github.com/external-secrets/external-secrets/tree/main/deploy/charts/external-secrets
 dependencies:
  - name: external-secrets
-    version: 2.0.1
+    version: 2.0.0
    repository: https://charts.external-secrets.io
 icon: https://avatars.githubusercontent.com/u/68335991?s=48&v=4
 # renovate: datasource=github-releases depName=external-secrets/external-secrets
-appVersion: v2.0.1
+appVersion: v2.0.0
--- a/clusters/cl01tl/helm/freshrss/Chart.lock
+++ b/clusters/cl01tl/helm/freshrss/Chart.lock
@@ -7,9 +7,9 @@ dependencies:
  version: 2.3.0
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.7.0
+  version: 7.5.1
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.7.0
-digest: sha256:57f4836c78051b4fbb5c99befa063c34645348b04943e2e5826a30815b2729d7
-generated: "2026-02-21T13:05:01.426287862Z"
+digest: sha256:d3129463df789e53981fc7e57b5574d6eba00a44f4b9f906efacf563d70b36f3
+generated: "2026-02-07T02:28:08.830228688Z"
--- a/clusters/cl01tl/helm/freshrss/Chart.yaml
+++ b/clusters/cl01tl/helm/freshrss/Chart.yaml
@@ -26,7 +26,7 @@ dependencies:
    version: 2.3.0
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.7.0
+    version: 7.5.1
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-data
--- a/clusters/cl01tl/helm/garage/values.yaml
+++ b/clusters/cl01tl/helm/garage/values.yaml
@@ -34,7 +34,7 @@ garage:
        debug:
          image:
            repository: ubuntu
-            tag: resolute-20260108
+            tag: resolute-20260106.1
            pullPolicy: IfNotPresent
          command:
            - "sleep"
--- a/clusters/cl01tl/helm/gatus/Chart.lock
+++ b/clusters/cl01tl/helm/gatus/Chart.lock
@@ -1,12 +1,12 @@
 dependencies:
 - name: gatus
  repository: https://twin.github.io/helm-charts
-  version: 1.5.0
+  version: 1.4.5
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.7.0
+  version: 7.5.1
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.7.0
-digest: sha256:c63adfdf69c3a5b818216e3d257d5f789b28d4153b9edb6364f6d0f6281d4544
-generated: "2026-02-21T13:05:33.803798865Z"
+digest: sha256:e170966054efa7ed147520c17421e32ab2c951d5b8ab9d3625e019373114d64a
+generated: "2026-02-07T02:28:21.222846345Z"
--- a/clusters/cl01tl/helm/gatus/Chart.yaml
+++ b/clusters/cl01tl/helm/gatus/Chart.yaml
@@ -19,10 +19,10 @@ maintainers:
 dependencies:
  - name: gatus
    repository: https://twin.github.io/helm-charts
-    version: 1.5.0
+    version: 1.4.5
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.7.0
+    version: 7.5.1
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-data
@@ -30,4 +30,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/gatus.png
 # renovate: datasource=github-releases depName=TwiN/gatus
-appVersion: v5.35.0
+appVersion: v5.34.0
--- a/clusters/cl01tl/helm/gatus/templates/http-route.yaml
+++ b/clusters/cl01tl/helm/gatus/templates/http-route.yaml
@@ -0,0 +1,28 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: gatus
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: gatus
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  parentRefs:
+    - group: gateway.networking.k8s.io
+      kind: Gateway
+      name: traefik-gateway
+      namespace: traefik
+  hostnames:
+    - gatus.alexlebens.net
+  rules:
+    - matches:
+      - path:
+          type: PathPrefix
+          value: /
+      backendRefs:
+        - group: ''
+          kind: Service
+          name: gatus
+          port: 80
+          weight: 100
--- a/clusters/cl01tl/helm/gatus/values.yaml
+++ b/clusters/cl01tl/helm/gatus/values.yaml
@@ -7,7 +7,7 @@ gatus:
    enabled: true
  image:
    repository: ghcr.io/twin/gatus
-    tag: v5.35.0
+    tag: v5.34.0
  annotations:
    reloader.stakater.com/auto: "true"
  service:
@@ -17,18 +17,6 @@ gatus:
    portName: http
  ingress:
    enabled: false
-  gateway:
-    apiVersion: gateway.networking.k8s.io/v1
-    route:
-      enabled: true
-      path: /
-      parentRefs:
-        - group: gateway.networking.k8s.io
-          kind: Gateway
-          name: traefik-gateway
-          namespace: traefik
-      hosts:
-        - gatus.alexlebens.net
  env:
    NTFY_TOKEN:
      valueFrom:
@@ -131,6 +119,9 @@ gatus:
        <<: *defaults
        conditions:
          - "[STATUS] == 401"
+      - name: overseerr
+        url: https://overseerr.alexlebens.net
+        <<: *defaults
      - name: seerr
        url: https://seerr.alexlebens.net
        <<: *defaults
@@ -161,9 +152,6 @@ gatus:
      - name: booklore
        url: https://booklore.alexlebens.net
        <<: *defaults
-      - name: directus
-        url: https://directus.alexlebens.net
-        <<: *defaults
      - name: home-assistant
        url: https://home-assistant.alexlebens.net
        <<: *defaults
@@ -322,15 +310,12 @@ gatus:
      - name: lidarr
        url: https://lidarr.alexlebens.net
        <<: *defaults
-      - name: yubal
-        url: https://yubal.alexlebens.net
-        <<: *defaults
-      - name: music-grabber
-        url: https://music-grabber.alexlebens.net
-        <<: *defaults
      - name: spotisub
        url: https://spotisub.alexlebens.net
        <<: *defaults
+      - name: yubal
+        url: https://yubal.alexlebens.net
+        <<: *defaults
      - name: slskd
        url: https://slskd.alexlebens.net
        <<: *defaults
@@ -341,8 +326,8 @@ gatus:
        url: https://www.alexlebens.dev
        <<: *defaults
        group: external
-      - name: rybbit
-        url: https://rybbit.alexlebens.dev
+      - name: directus
+        url: https://directus.alexlebens.dev
        <<: *defaults
        group: external
      - name: postiz
@@ -384,6 +369,10 @@ gatus:
        url: https://auth.alexlebens.dev
        <<: *defaults
        group: external
+      - name: public homepage
+        url: https://home.alexlebens.dev
+        <<: *defaults
+        group: external
 postgres-18-cluster:
  mode: recovery
  recovery:
--- a/clusters/cl01tl/helm/gitea/Chart.lock
+++ b/clusters/cl01tl/helm/gitea/Chart.lock
@@ -13,7 +13,7 @@ dependencies:
  version: 2.3.0
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.7.0
+  version: 7.5.1
 - name: redis-replication
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 1.0.4
@@ -23,5 +23,5 @@ dependencies:
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.7.0
-digest: sha256:a13dd7f2ad2292d7c265aefb059ffcd47f3b8f9bd8f12d442acd9ea1382eb288
-generated: "2026-02-21T13:06:00.491950321Z"
+digest: sha256:0b376cdddc09bf3346d7c9789452a0bfe6af630faf3b005e75426f5a3635ef1f
+generated: "2026-02-07T02:28:33.614969361Z"
--- a/clusters/cl01tl/helm/gitea/Chart.yaml
+++ b/clusters/cl01tl/helm/gitea/Chart.yaml
@@ -39,7 +39,7 @@ dependencies:
    version: 2.3.0
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.7.0
+    version: 7.5.1
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: redis-replication
    alias: redis-replication-gitea
--- a/clusters/cl01tl/helm/grafana-operator/Chart.lock
+++ b/clusters/cl01tl/helm/grafana-operator/Chart.lock
@@ -4,12 +4,12 @@ dependencies:
  version: 5.21.4
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.7.0
+  version: 7.5.1
 - name: redis-replication
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 1.0.4
 - name: redis-replication
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 1.0.4
-digest: sha256:e93e3ce24fc395b07f64b9536a48c7b91e1a5de594406df9e5690c3b6b04f63a
-generated: "2026-02-21T13:07:02.42223641Z"
+digest: sha256:5775ad67f466afd5e7bf986826e5385b4127c65bf81ed885df4690ffb8bd2876
+generated: "2026-02-07T02:28:49.454143056Z"
--- a/clusters/cl01tl/helm/grafana-operator/Chart.yaml
+++ b/clusters/cl01tl/helm/grafana-operator/Chart.yaml
@@ -21,7 +21,7 @@ dependencies:
    repository: https://grafana.github.io/helm-charts
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.7.0
+    version: 7.5.1
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: redis-replication
    alias: redis-replication-unified-alerting
--- a/clusters/cl01tl/helm/harbor/Chart.lock
+++ b/clusters/cl01tl/helm/harbor/Chart.lock
@@ -4,9 +4,9 @@ dependencies:
  version: 1.18.2
 - name: postgres-cluster
  repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
-  version: 7.7.0
+  version: 7.5.1
 - name: redis-replication
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 1.0.4
-digest: sha256:21ac96cde674b5db272eef5b4ae1aedea1e02c2b49dff88c2acb11282c3839e8
-generated: "2026-02-21T13:07:31.300561507Z"
+digest: sha256:5786e414b8b1b61468c0ec283c8e0038944fb383a766d8181564c9301df76ef3
+generated: "2026-02-07T02:29:36.127187941Z"
--- a/clusters/cl01tl/helm/harbor/Chart.yaml
+++ b/clusters/cl01tl/helm/harbor/Chart.yaml
@@ -21,7 +21,7 @@ dependencies:
    repository: https://helm.goharbor.io
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.7.0
+    version: 7.5.1
    repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
  - name: redis-replication
    version: 1.0.4
--- a/clusters/cl01tl/helm/headlamp/Chart.yaml
+++ b/clusters/cl01tl/helm/headlamp/Chart.yaml
@@ -18,4 +18,4 @@ dependencies:
    repository: https://kubernetes-sigs.github.io/headlamp/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/headlamp.png
 # renovate: datasource=github-releases depName=headlamp-k8s/headlamp
-appVersion: v0.40.1
+appVersion: v0.40.0
--- a/clusters/cl01tl/helm/home-assistant/Chart.yaml
+++ b/clusters/cl01tl/helm/home-assistant/Chart.yaml
@@ -25,4 +25,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/home-assistant.png
 # renovate: datasource=github-releases depName=home-assistant/core
-appVersion: 2026.2.3
+appVersion: 2026.2.0
--- a/clusters/cl01tl/helm/home-assistant/values.yaml
+++ b/clusters/cl01tl/helm/home-assistant/values.yaml
@@ -9,7 +9,7 @@ home-assistant:
        main:
          image:
            repository: ghcr.io/home-assistant/home-assistant
-            tag: 2026.2.3
+            tag: 2026.2.1
            pullPolicy: IfNotPresent
          env:
            - name: TZ
@@ -21,7 +21,7 @@ home-assistant:
        code-server:
          image:
            repository: ghcr.io/linuxserver/code-server
-            tag: 4.109.2@sha256:3c6a1f70ba898b47d77dec0ce6d43a3a9223091587d3c57935607eefa77511da
+            tag: 4.108.2@sha256:a59301fe97af3d9bf9150ce53e5c7b12486f2803eea0446a38f8d545ac877c9a
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/helm/homepage-dev/Chart.lock
+++ b/clusters/cl01tl/helm/homepage-dev/Chart.lock
@@ -0,0 +1,9 @@
+dependencies:
+- name: app-template
+  repository: https://bjw-s-labs.github.io/helm-charts/
+  version: 4.6.2
+- name: cloudflared
+  repository: oci://harbor.alexlebens.net/helm-charts
+  version: 2.3.0
+digest: sha256:2fc70a1313bfa34701f7004e56bae7c4df26e2bcc3784ddd1234b0455c5017c2
+generated: "2026-02-07T00:37:59.293216238Z"
--- a/clusters/cl01tl/helm/homepage-dev/Chart.yaml
+++ b/clusters/cl01tl/helm/homepage-dev/Chart.yaml
@@ -0,0 +1,27 @@
+apiVersion: v2
+name: homepage
+version: 1.0.0
+description: Homepage
+keywords:
+  - homepage
+  - dashboard
+home: https://wiki.alexlebens.dev/s/a5fabd91-3d89-4e2b-9417-06111aedaeaa
+sources:
+  - https://github.com/gethomepage/homepage
+  - https://github.com/cloudflare/cloudflared
+  - https://github.com/gethomepage/homepage/pkgs/container/homepage
+  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
+  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/cloudflared
+maintainers:
+  - name: alexlebens
+dependencies:
+  - name: app-template
+    alias: homepage
+    repository: https://bjw-s-labs.github.io/helm-charts/
+    version: 4.6.2
+  - name: cloudflared
+    repository: oci://harbor.alexlebens.net/helm-charts
+    version: 2.3.0
+icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/homepage.png
+# renovate: datasource=github-releases depName=gethomepage/homepage
+appVersion: v1.10.1
--- a/clusters/cl01tl/helm/homepage-dev/values.yaml
+++ b/clusters/cl01tl/helm/homepage-dev/values.yaml
@@ -0,0 +1,165 @@
+homepage:
+  global:
+    nameOverride: homepage
+  controllers:
+    main:
+      type: deployment
+      annotations:
+        reloader.stakater.com/auto: "true"
+      strategy: Recreate
+      containers:
+        main:
+          image:
+            repository: ghcr.io/gethomepage/homepage
+            tag: v1.10.1
+            pullPolicy: IfNotPresent
+          env:
+            - name: HOMEPAGE_ALLOWED_HOSTS
+              value: home.alexlebens.dev
+          resources:
+            requests:
+              cpu: 10m
+              memory: 128Mi
+  configMaps:
+    config:
+      enabled: true
+      data:
+        docker.yaml: ""
+        kubernetes.yaml: ""
+        settings.yaml: |
+          favicon: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/logo-new-round.svg
+          headerStyle: clean
+          hideVersion: true
+          color: zinc
+          background:
+            image: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/background.jpg
+            brightness: 50
+          theme: dark
+          disableCollapse: true
+        widgets.yaml: |
+          - logo:
+              icon: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/logo-new-round.png
+          - datetime:
+              text_size: xl
+              format:
+                dateStyle: long
+                timeStyle: short
+                hour12: false
+          - openmeteo:
+              label: St. Paul
+              latitude: 44.954445
+              longitude: -93.091301
+              timezone: America/Chicago
+              units: metric
+              cache: 5
+              format:
+                maximumFractionDigits: 0
+        services.yaml: |
+          - Applications:
+              - Auth:
+                  icon: sh-authentik.webp
+                  description: Authentik
+                  href: https://auth.alexlebens.dev
+                  siteMonitor: https://auth.alexlebens.dev
+                  statusStyle: dot
+              - Gitea:
+                  icon: sh-gitea.webp
+                  description: Gitea
+                  href: https://gitea.alexlebens.dev
+                  siteMonitor: https://gitea.alexlebens.dev
+                  statusStyle: dot
+              - Code:
+                  icon: sh-visual-studio-code.webp
+                  description: VS Code
+                  href: https://codeserver.alexlebens.dev
+                  siteMonitor: https://codeserver.alexlebens.dev
+                  statusStyle: dot
+              - Site:
+                  icon: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/logo-new-round.png
+                  description: Profile Website
+                  href: https://www.alexlebens.dev
+                  siteMonitor: https://www.alexlebens.dev
+                  statusStyle: dot
+              - Content Management:
+                  icon: directus.png
+                  description: Directus
+                  href: https://directus.alexlebens.dev
+                  siteMonitor: https://directus.alexlebens.dev
+                  statusStyle: dot
+              - Social Media Management:
+                  icon: sh-postiz.webp
+                  description: Postiz
+                  href: https://postiz.alexlebens.dev
+                  siteMonitor: https://postiz.alexlebens.dev
+                  statusStyle: dot
+              - Chat:
+                  icon: sh-element.webp
+                  description: Matrix
+                  href: https://chat.alexlebens.dev
+                  siteMonitor: https://chat.alexlebens.dev
+                  statusStyle: dot
+              - Wiki:
+                  icon: sh-outline.webp
+                  description: Outline
+                  href: https://wiki.alexlebens.dev
+                  siteMonitor: https://wiki.alexlebens.dev
+                  statusStyle: dot
+              - Passwords:
+                  icon: sh-vaultwarden-light.webp
+                  description: Vaultwarden
+                  href: https://passwords.alexlebens.dev
+                  siteMonitor: https://passwords.alexlebens.dev
+                  statusStyle: dot
+              - Bookmarks:
+                  icon: sh-karakeep-light.webp
+                  description: Karakeep
+                  href: https://karakeep.alexlebens.dev
+                  siteMonitor: https://karakeep.alexlebens.dev
+                  statusStyle: dot
+              - RSS:
+                  icon: sh-freshrss.webp
+                  description: FreshRSS
+                  href: https://rss.alexlebens.dev
+                  siteMonitor: https://rss.alexlebens.dev
+                  statusStyle: dot
+        bookmarks.yaml: ""
+  service:
+    http:
+      controller: main
+      ports:
+        http:
+          port: 80
+          targetPort: 3000
+          protocol: HTTP
+  persistence:
+    config:
+      enabled: true
+      type: configMap
+      name: homepage-dev
+      advancedMounts:
+        main:
+          main:
+            - path: /app/config/bookmarks.yaml
+              readOnly: true
+              mountPropagation: None
+              subPath: bookmarks.yaml
+            - path: /app/config/docker.yaml
+              readOnly: true
+              mountPropagation: None
+              subPath: docker.yaml
+            - path: /app/config/kubernetes.yaml
+              readOnly: true
+              mountPropagation: None
+              subPath: kubernetes.yaml
+            - path: /app/config/services.yaml
+              readOnly: true
+              mountPropagation: None
+              subPath: services.yaml
+            - path: /app/config/settings.yaml
+              readOnly: true
+              mountPropagation: None
+              subPath: settings.yaml
+            - path: /app/config/widgets.yaml
+              readOnly: true
+              mountPropagation: None
+              subPath: widgets.yaml
--- a/clusters/cl01tl/helm/homepage/templates/external-secret.yaml
+++ b/clusters/cl01tl/helm/homepage/templates/external-secret.yaml
@@ -12,41 +12,6 @@ spec:
    kind: ClusterSecretStore
    name: vault
  data:
-    - secretKey: HOMEPAGE_VAR_GITEA_API_TOKEN
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/gitea/auth/homepage
-        metadataPolicy: None
-        property: token
-    - secretKey: HOMEPAGE_VAR_ARGOCD_API_TOKEN
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/argocd/credentials/homepage
-        metadataPolicy: None
-        property: token
-    - secretKey: HOMEPAGE_VAR_KOMODO_API_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/komodo/homepage
-        metadataPolicy: None
-        property: key
-    - secretKey: HOMEPAGE_VAR_KOMODO_API_SECRET
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/komodo/homepage
-        metadataPolicy: None
-        property: secret
-    - secretKey: HOMEPAGE_VAR_JELLYSTAT_API_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/jellystat/homepage
-        metadataPolicy: None
-        property: key
    - secretKey: HOMEPAGE_VAR_SYNOLOGY_USER
      remoteRef:
        conversionStrategy: Default
@@ -61,13 +26,20 @@ spec:
        key: /synology/auth/cl01tl
        metadataPolicy: None
        property: password
-    - secretKey: HOMEPAGE_VAR_UNIFI_API_KEY
+    - secretKey: HOMEPAGE_VAR_UNIFI_USER
      remoteRef:
        conversionStrategy: Default
        decodingStrategy: None
        key: /unifi/auth/cl01tl
        metadataPolicy: None
-        property: api-key
+        property: user
+    - secretKey: HOMEPAGE_VAR_UNIFI_PASSWORD
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /unifi/auth/cl01tl
+        metadataPolicy: None
+        property: password
    - secretKey: HOMEPAGE_VAR_SONARR_KEY
      remoteRef:
        conversionStrategy: Default
--- a/clusters/cl01tl/helm/homepage/values.yaml
+++ b/clusters/cl01tl/helm/homepage/values.yaml
@@ -4,10 +4,9 @@ homepage:
  controllers:
    main:
      type: deployment
-      replicas: 1
-      strategy: RollingUpdate
      annotations:
        reloader.stakater.com/auto: "true"
+      strategy: Recreate
      serviceAccount:
        name: homepage
      pod:
@@ -131,7 +130,13 @@ homepage:
        services.yaml: |
          - Media:
              - Media Requests:
-                  icon: sh-seerr.webp
+                  icon: sh-overseerr.webp
+                  description: Overseerr
+                  href: https://overseerr.alexlebens.net
+                  siteMonitor: http://overseerr.overseerr:80
+                  statusStyle: dot
+              - Media Requests (New):
+                  icon: sh-overseerr.webp
                  description: Seerr
                  href: https://seerr.alexlebens.net
                  siteMonitor: http://seerr-seerr-chart.seerr:80
@@ -191,23 +196,11 @@ homepage:
                  href: https://www.alexlebens.dev
                  siteMonitor: https://www.alexlebens.dev
                  statusStyle: dot
-              - Documentation:
-                  icon: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/logo-new-round.png
-                  description: Documentation Wiki
-                  href: https://docs.alexlebens.dev
-                  siteMonitor: https://docs.alexlebens.dev
-                  statusStyle: dot
              - Content Management:
                  icon: directus.png
                  description: Directus
-                  href: https://directus.alexlebens.net
-                  siteMonitor: http://directus.directus:80
-                  statusStyle: dot
-              - Analytics:
-                  icon: sh-rybbit-light.webp
-                  description: Rybbit
-                  href: https://rybbit.alexlebens.dev
-                  siteMonitor: http://rybbit-client.rybbit:3002
+                  href: https://directus.alexlebens.dev
+                  siteMonitor: https://directus.alexlebens.dev
                  statusStyle: dot
              - Social Media Management:
                  icon: sh-postiz.webp
@@ -301,16 +294,6 @@ homepage:
                  href: https://gitea.alexlebens.dev
                  siteMonitor: https://gitea.alexlebens.dev
                  statusStyle: dot
-                  namespace: gitea
-                  app: gitea
-                  podSelector: >-
-                      app.kubernetes.io/instance in (
-                          gitea
-                      )
-                  widget:
-                      type: gitea
-                      url: http://gitea-http.gitea:3000
-                      key: {{ "{{HOMEPAGE_VAR_GITEA_API_TOKEN}}" }}
              - Code (Local):
                  icon: sh-gitea.webp
                  description: Gitea
@@ -335,37 +318,19 @@ homepage:
                  href: https://home-assistant-code-server.alexlebens.net
                  siteMonitor: http://home-assistant-code-server.home-assistant:8443
                  statusStyle: dot
-          - Automation:
              - Continuous Deployment:
                  icon: sh-argo-cd.webp
                  description: ArgoCD
                  href: https://argocd.alexlebens.net
                  siteMonitor: http://argocd-server.argocd:80
                  statusStyle: dot
-                  namespace: argocd
-                  app: argocd
-                  podSelector: >-
-                      app.kubernetes.io/instance in (
-                          argocd
-                      )
-                  widget:
-                      type: argocd
-                      url: http://argocd-server.argocd:80
-                      key: {{ "{{HOMEPAGE_VAR_ARGOCD_API_TOKEN}}" }}
-                      fields: ["outOfSync", "progressing", "suspended", "degraded"]
              - Docker Deployment:
                  icon: sh-komodo-light.webp
                  description: Komodo
                  href: https://komodo.alexlebens.net
                  siteMonitor: http://komodo-main.komodo:80
                  statusStyle: dot
-                  widget:
-                      type: komodo
-                      url: http://komodo-main.komodo:80
-                      key: {{ "{{HOMEPAGE_VAR_KOMODO_API_KEY}}" }}
-                      secret: {{ "{{HOMEPAGE_VAR_KOMODO_API_SECRET}}" }}
-                      showStacks: true
-                      fields: ["running", "down", "unhealthy", "unknown"]
+          - Automation:
              - Deployment Workflows:
                  icon: sh-argo-cd.webp
                  description: Argo Workflows
@@ -391,36 +356,24 @@ homepage:
                  href: https://headlamp.alexlebens.net
                  siteMonitor: http://headlamp.headlamp:80
                  statusStyle: dot
-              - Dashboard:
-                  icon: sh-grafana.webp
-                  description: Grafana
-                  href: https://grafana.alexlebens.net
-                  siteMonitor: http://grafana-main-service.grafana-operator:3000/api/health
-                  statusStyle: dot
              - Network Monitoring:
                  icon: sh-cilium.webp
                  description: Hubble for Cilium
                  href: https://hubble.alexlebens.net
                  siteMonitor: http://hubble-ui.kube-system:80
                  statusStyle: dot
-                  namespace: kube-system
-                  app: cilium-operator
-                  podSelector: >-
-                      app.kubernetes.io/part-of in (
-                          cilium
-                      )
+              - Dashboard:
+                  icon: sh-grafana.webp
+                  description: Grafana
+                  href: https://grafana.alexlebens.net
+                  siteMonitor: http://grafana-main-service.grafana-operator:3000/api/health
+                  statusStyle: dot
              - Metrics:
                  icon: sh-prometheus.webp
                  description: Prometheus
                  href: https://prometheus.alexlebens.net
                  siteMonitor: http://kube-prometheus-stack-prometheus.kube-prometheus-stack:9090
                  statusStyle: dot
-                  namespace: kube-prometheus-stack
-                  app: prometheus
-                  podSelector: >-
-                      app.kubernetes.io/instance in (
-                          kube-prometheus-stack
-                      )
                  widget:
                    type: prometheus
                    url: http://kube-prometheus-stack-prometheus.kube-prometheus-stack:9090
@@ -494,11 +447,6 @@ homepage:
                  href: https://unifi.alexlebens.net
                  siteMonitor: https://unifi.alexlebens.net
                  statusStyle: dot
-                  widget:
-                      type: unifi
-                      url: https://unifi.alexlebens.net
-                      key: {{ "{{HOMEPAGE_VAR_UNIFI_API_KEY}}" }}
-                      fields: ["uptime", "wan", "lan_devices", "wlan_devices"]
              - Network Attached Storage:
                  icon: sh-synology-light.webp
                  description: Synology
@@ -571,9 +519,6 @@ homepage:
                  href: https://backrest.alexlebens.net
                  siteMonitor: http://backrest.backrest:80
                  statusStyle: dot
-                  widget:
-                      type: backrest
-                      url: http://backrest.backrest:80
          - Content:
              - qUI:
                  icon: https://raw.githubusercontent.com/autobrr/qui/8487c818886df9abb2b1456f43b54e0ba180a2bd/web/public/icons.svg
@@ -712,19 +657,13 @@ homepage:
                    fields: ["wanted", "queued", "artists"]
              - Yubal:
                  icon: sh-yubal.webp
-                  description: Replicate Youtube playlists
+                  description: Replicate Youtube playlist
                  href: https://yubal.alexlebens.net
                  siteMonitor: http://yubal.yubal:80
                  statusStyle: dot
-              - Music Grabber:
-                  icon: sh-music-service.webp
-                  description: Replicate Music playlists
-                  href: https://music-grabber.alexlebens.net
-                  siteMonitor: http://music-grabber.music-grabber:80
-                  statusStyle: dot
              - Spotisub:
                  icon: sh-spotify.webp
-                  description: Replicate Spotify playlists
+                  description: Replicate Spotify playlist
                  href: https://spotisub.alexlebens.net
                  siteMonitor: http://spotisub.spotisub:80
                  statusStyle: dot
@@ -742,6 +681,12 @@ homepage:
                  siteMonitor: http://shelfmark.shelfmark:80
                  statusStyle: dot
          - Other Homes:
+              - Dev:
+                  icon: sh-homepage.webp
+                  description: Public Homepage
+                  href: https://home.alexlebens.dev
+                  siteMonitor: https://home.alexlebens.dev
+                  statusStyle: dot
              - Lebens Home:
                  icon: sh-homepage.webp
                  description: Lebens Homepage
--- a/clusters/cl01tl/helm/huntarr/Chart.yaml
+++ b/clusters/cl01tl/helm/huntarr/Chart.yaml
@@ -23,4 +23,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/huntarr.png
 # renovate: datasource=github-releases depName=plexguide/huntarr
-appVersion: 9.3.7
+appVersion: 9.2.2
--- a/clusters/cl01tl/helm/huntarr/values.yaml
+++ b/clusters/cl01tl/helm/huntarr/values.yaml
@@ -9,7 +9,7 @@ huntarr:
        main:
          image:
            repository: ghcr.io/plexguide/huntarr
-            tag: 9.3.7
+            tag: 9.2.2
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/helm/immich/Chart.lock
+++ b/clusters/cl01tl/helm/immich/Chart.lock
@@ -4,12 +4,12 @@ dependencies:
  version: 4.6.2
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.7.0
+  version: 7.5.1
 - name: redis-replication
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 1.0.4
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.7.0
-digest: sha256:546a643992ac53aa9c91060ac43b2732fc96d3c644972eb7edc85675aa65c180
-generated: "2026-02-21T13:07:51.322772048Z"
+digest: sha256:4c93a50fcb190f191510da0b1ede039fea04055eb5b16890eb40c8c4899a63ec
+generated: "2026-02-07T02:30:26.038265281Z"
--- a/clusters/cl01tl/helm/immich/Chart.yaml
+++ b/clusters/cl01tl/helm/immich/Chart.yaml
@@ -20,7 +20,7 @@ dependencies:
    version: 4.6.2
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.7.0
+    version: 7.5.1
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: redis-replication
    version: 1.0.4
@@ -31,4 +31,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/immich.png
 # renovate: datasource=github-releases depName=immich-app/immich
-appVersion: v2.5.6
+appVersion: v2.5.5
--- a/clusters/cl01tl/helm/immich/values.yaml
+++ b/clusters/cl01tl/helm/immich/values.yaml
@@ -9,7 +9,7 @@ immich:
        main:
          image:
            repository: ghcr.io/immich-app/immich-server
-            tag: v2.5.6
+            tag: v2.5.5
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/helm/intel-device-plugin/Chart.lock
+++ b/clusters/cl01tl/helm/intel-device-plugin/Chart.lock
@@ -1,9 +1,9 @@
 dependencies:
 - name: intel-device-plugins-operator
  repository: https://intel.github.io/helm-charts/
-  version: 0.35.0
+  version: 0.34.1
 - name: intel-device-plugins-gpu
  repository: https://intel.github.io/helm-charts/
-  version: 0.35.0
-digest: sha256:90b9b3c1c513009ef2356643d3a006069c871f8fbd451e26d2b5f392a011febe
-generated: "2026-02-20T19:33:54.514699811Z"
+  version: 0.34.1
+digest: sha256:73b2b6f28ec36be02c7bf3e0ef5608e790344a4cdb3e5f183b6b079723e8b53a
+generated: "2025-12-12T08:03:32.455070212Z"
--- a/clusters/cl01tl/helm/intel-device-plugin/Chart.yaml
+++ b/clusters/cl01tl/helm/intel-device-plugin/Chart.yaml
@@ -16,11 +16,11 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: intel-device-plugins-operator
-    version: 0.35.0
+    version: 0.34.1
    repository: https://intel.github.io/helm-charts/
  - name: intel-device-plugins-gpu
-    version: 0.35.0
+    version: 0.34.1
    repository: https://intel.github.io/helm-charts/
 icon: https://avatars.githubusercontent.com/u/17888862?s=48&v=4
 # renovate: datasource=github-releases depName=intel/intel-device-plugins-for-kubernetes
-appVersion: 0.35.0
+appVersion: 0.34.1
--- a/clusters/cl01tl/helm/jellystat/Chart.lock
+++ b/clusters/cl01tl/helm/jellystat/Chart.lock
@@ -4,9 +4,9 @@ dependencies:
  version: 4.6.2
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.7.0
+  version: 7.5.1
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.7.0
-digest: sha256:d02018739c1cdeff4faeab0865db311f8162df35705401222dfbcc5e5fc13175
-generated: "2026-02-21T13:08:22.143875837Z"
+digest: sha256:13a3c6ea43b01d77aded07becb15a9e57ee3541053a67054b9d832cc29e6e9e3
+generated: "2026-02-07T02:31:01.535664696Z"
--- a/clusters/cl01tl/helm/jellystat/Chart.yaml
+++ b/clusters/cl01tl/helm/jellystat/Chart.yaml
@@ -21,7 +21,7 @@ dependencies:
    version: 4.6.2
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.7.0
+    version: 7.5.1
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-data
--- a/clusters/cl01tl/helm/jellystat/values.yaml
+++ b/clusters/cl01tl/helm/jellystat/values.yaml
@@ -9,7 +9,7 @@ jellystat:
        main:
          image:
            repository: cyfershepard/jellystat
-            tag: 1.1.8
+            tag: 1.1.7
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/helm/komodo/Chart.lock
+++ b/clusters/cl01tl/helm/komodo/Chart.lock
@@ -4,6 +4,6 @@ dependencies:
  version: 4.6.2
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.7.0
-digest: sha256:2a40bd773b5c828c546185bc4b0a7cae23b48e57adeb71c59679431de2957612
-generated: "2026-02-21T13:08:45.26466913Z"
+  version: 7.5.1
+digest: sha256:a8c457a1480e3f0f189de780b3f1649877c17bac8c3cf59a9db68fd08363829b
+generated: "2026-02-07T02:31:20.129379883Z"
--- a/clusters/cl01tl/helm/komodo/Chart.yaml
+++ b/clusters/cl01tl/helm/komodo/Chart.yaml
@@ -23,7 +23,7 @@ dependencies:
    version: 4.6.2
  - name: postgres-cluster
    alias: postgresql-17-fdb-cluster
-    version: 7.7.0
+    version: 7.5.1
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/komodo.png
 # renovate: datasource=github-releases depName=moghtech/komodo
--- a/clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock
+++ b/clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock
@@ -1,12 +1,12 @@
 dependencies:
 - name: kube-prometheus-stack
  repository: oci://ghcr.io/prometheus-community/charts
-  version: 82.2.0
+  version: 81.5.0
 - name: app-template
  repository: https://bjw-s-labs.github.io/helm-charts/
  version: 4.6.2
 - name: redis-replication
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 1.0.4
-digest: sha256:00762fccd6819bc6cc15eb36c6afcc3006198a3861ce4886456028910205fe43
-generated: "2026-02-20T15:03:56.36908709Z"
+digest: sha256:62ceeea1ed2f1f3a838e468665c3f291cb67ac547f3fa37863131f088736a750
+generated: "2026-02-03T20:37:14.907439914Z"
--- a/clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml
+++ b/clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml
@@ -20,7 +20,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: kube-prometheus-stack
-    version: 82.2.0
+    version: 81.5.0
    repository: oci://ghcr.io/prometheus-community/charts
  - name: app-template
    alias: ntfy-alertmanager
--- a/clusters/cl01tl/helm/kubelet-serving-cert-approver/Chart.yaml
+++ b/clusters/cl01tl/helm/kubelet-serving-cert-approver/Chart.yaml
@@ -20,4 +20,4 @@ dependencies:
    version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 # renovate: datasource=github-releases depName=alex1989hu/kubelet-serving-cert-approver
-appVersion: 0.10.3
+appVersion: 0.10.2
--- a/clusters/cl01tl/helm/kubelet-serving-cert-approver/values.yaml
+++ b/clusters/cl01tl/helm/kubelet-serving-cert-approver/values.yaml
@@ -38,7 +38,7 @@ kubelet-serving-cert-approver:
        main:
          image:
            repository: ghcr.io/alex1989hu/kubelet-serving-cert-approver
-            tag: 0.10.3
+            tag: 0.10.2
            pullPolicy: Always
          args:
            - serve
--- a/clusters/cl01tl/helm/libation/values.yaml
+++ b/clusters/cl01tl/helm/libation/values.yaml
@@ -35,7 +35,7 @@ libation:
        main:
          image:
            repository: ubuntu
-            tag: resolute-20260108
+            tag: resolute-20260106.1
            pullPolicy: IfNotPresent
          command:
            - "sleep"
--- a/clusters/cl01tl/helm/lidarr/Chart.lock
+++ b/clusters/cl01tl/helm/lidarr/Chart.lock
@@ -4,9 +4,9 @@ dependencies:
  version: 4.6.2
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.7.0
+  version: 7.5.1
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.7.0
-digest: sha256:ff8f2ca5b39b9677fd58bb7a9b4e6cf3f7115bbb15924331616a46d3ddc840cf
-generated: "2026-02-21T13:09:02.090591354Z"
+digest: sha256:628ab2c174a9cf9b24f4c9822d325fee3d63548b526f406f6555bbc7cbabf759
+generated: "2026-02-07T02:31:36.916431665Z"
--- a/clusters/cl01tl/helm/lidarr/Chart.yaml
+++ b/clusters/cl01tl/helm/lidarr/Chart.yaml
@@ -24,7 +24,7 @@ dependencies:
    version: 4.6.2
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.7.0
+    version: 7.5.1
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-config
--- a/clusters/cl01tl/helm/lidarr/values.yaml
+++ b/clusters/cl01tl/helm/lidarr/values.yaml
@@ -15,7 +15,7 @@ lidarr:
        main:
          image:
            repository: ghcr.io/linuxserver/lidarr
-            tag: 3.1.2-nightly@sha256:bcad2fdb95a60cf3e634a37ec833a54f8dc5346fe9e8d8963b44ba35bb78c9cd
+            tag: 3.1.2-nightly@sha256:adc776c4deb0b36909472a8d22ce00306b4a37f0d584407d846efd59060279ac
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/helm/loki/Chart.lock
+++ b/clusters/cl01tl/helm/loki/Chart.lock
@@ -1,9 +1,9 @@
 dependencies:
 - name: loki
  repository: https://grafana.github.io/helm-charts
-  version: 6.53.0
+  version: 6.52.0
 - name: alloy
  repository: https://grafana.github.io/helm-charts
  version: 1.6.0
-digest: sha256:a65f68b2e68defa63d15cf84317ba45a770b5b9cbb5bebc6fed219cefed99b69
-generated: "2026-02-10T19:12:00.80383488Z"
+digest: sha256:097f893b362b3ba6a1498d6df00dc57030c4d1321cf3301268adb9e30d5043ed
+generated: "2026-02-05T22:01:50.699662067Z"
--- a/clusters/cl01tl/helm/loki/Chart.yaml
+++ b/clusters/cl01tl/helm/loki/Chart.yaml
@@ -16,11 +16,11 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: loki
-    version: 6.53.0
+    version: 6.52.0
    repository: https://grafana.github.io/helm-charts
  - name: alloy
    version: 1.6.0
    repository: https://grafana.github.io/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/loki.png
 # renovate: datasource=github-releases depName=grafana/loki
-appVersion: 3.6.6
+appVersion: 3.6.5
--- a/clusters/cl01tl/helm/matrix-synapse/Chart.lock
+++ b/clusters/cl01tl/helm/matrix-synapse/Chart.lock
@@ -1,7 +1,7 @@
 dependencies:
 - name: matrix-synapse
  repository: https://ananace.gitlab.io/charts
-  version: 3.12.21
+  version: 3.12.19
 - name: app-template
  repository: https://bjw-s-labs.github.io/helm-charts/
  version: 4.6.2
@@ -19,7 +19,7 @@ dependencies:
  version: 2.3.0
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.7.0
+  version: 7.5.1
 - name: redis-replication
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 1.0.4
@@ -38,5 +38,5 @@ dependencies:
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.7.0
-digest: sha256:c90f4e4cf247a2fc0b1bc455ab8840f48e7fdf825aad3ebb3a41a9996ae4bc19
-generated: "2026-02-21T13:09:27.723381309Z"
+digest: sha256:d373bf3fea08bde2c3eea21d421f9d0d385ee141be60229427f281d2fbae4c54
+generated: "2026-02-07T02:31:51.33670708Z"
--- a/clusters/cl01tl/helm/matrix-synapse/Chart.yaml
+++ b/clusters/cl01tl/helm/matrix-synapse/Chart.yaml
@@ -29,7 +29,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: matrix-synapse
-    version: 3.12.21
+    version: 3.12.19
    repository: https://ananace.gitlab.io/charts
  - name: app-template
    alias: matrix-hookshot
@@ -53,7 +53,7 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.7.0
+    version: 7.5.1
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: redis-replication
    alias: redis-replication-matrix-synapse
@@ -81,4 +81,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/matrix.png
 # renovate: datasource=github-releases depName=element-hq/synapse
-appVersion: v1.147.1
+appVersion: 1.146.0
--- a/clusters/cl01tl/helm/matrix-synapse/values.yaml
+++ b/clusters/cl01tl/helm/matrix-synapse/values.yaml
@@ -260,7 +260,7 @@ mautrix-discord:
        main:
          image:
            repository: dock.mau.dev/mautrix/discord
-            tag: v0.7.6
+            tag: v0.7.5
            pullPolicy: IfNotPresent
          resources:
            requests:
@@ -345,7 +345,7 @@ mautrix-whatsapp:
        main:
          image:
            repository: dock.mau.dev/mautrix/whatsapp
-            tag: v0.2602.0
+            tag: v0.2601.0
            pullPolicy: IfNotPresent
          resources:
            requests:
--- a/clusters/cl01tl/helm/music-grabber/Chart.lock
+++ b/clusters/cl01tl/helm/music-grabber/Chart.lock
@@ -1,6 +0,0 @@
-dependencies:
- name: app-template
-  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
-digest: sha256:ed8d23326d2567f51cd8391aab6afd5f53c57df3c9f2bfc352cd22f9759d596e
-generated: "2026-02-20T18:33:14.633756-06:00"
--- a/clusters/cl01tl/helm/music-grabber/Chart.yaml
+++ b/clusters/cl01tl/helm/music-grabber/Chart.yaml
@@ -1,20 +0,0 @@
-apiVersion: v2
-name: music-grabber
-version: 1.0.0
-description: Music Grabber
-keywords:
-  - music-grabber
-  - music
-home: https://wiki.alexlebens.dev/s/
-sources:
-  - https://gitlab.com/g33kphr33k/musicgrabber
-  - https://hub.docker.com/r/g33kphr33k/musicgrabber/tags
-  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: app-template
-    alias: music-grabber
-    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
-appVersion: 2.0.4
--- a/clusters/cl01tl/helm/music-grabber/templates/external-secret.yaml
+++ b/clusters/cl01tl/helm/music-grabber/templates/external-secret.yaml
@@ -1,79 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: music-grabber-config-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: music-grabber-config-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: navidrome-user
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/navidrome/admin
-        metadataPolicy: None
-        property: user
-    - secretKey: navidrome-password
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/navidrome/admin
-        metadataPolicy: None
-        property: password
-    - secretKey: slskd-user
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/slskd/auth
-        metadataPolicy: None
-        property: user
-    - secretKey: slskd-password
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/slskd/auth
-        metadataPolicy: None
-        property: password
-
---
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: music-grabber-wireguard-conf
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: music-grabber-wireguard-conf
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: private-key
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /protonvpn/conf/cl01tl
-        metadataPolicy: None
-        property: private-key
-    - secretKey: proton-email
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /protonvpn/conf/cl01tl
-        metadataPolicy: None
-        property: email
-    - secretKey: proton-password
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /protonvpn/conf/cl01tl
-        metadataPolicy: None
-        property: password
--- a/clusters/cl01tl/helm/music-grabber/templates/namespace.yaml
+++ b/clusters/cl01tl/helm/music-grabber/templates/namespace.yaml
@@ -1,11 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: music-grabber
-  labels:
-    app.kubernetes.io/name: music-grabber
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-    pod-security.kubernetes.io/audit: privileged
-    pod-security.kubernetes.io/enforce: privileged
-    pod-security.kubernetes.io/warn: privileged
--- a/clusters/cl01tl/helm/music-grabber/templates/persistent-volume-claim.yaml
+++ b/clusters/cl01tl/helm/music-grabber/templates/persistent-volume-claim.yaml
@@ -1,17 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: music-grabber-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: music-grabber-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  volumeName: music-grabber-nfs-storage
-  storageClassName: nfs-client
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 1Gi
--- a/clusters/cl01tl/helm/music-grabber/templates/persistent-volume.yaml
+++ b/clusters/cl01tl/helm/music-grabber/templates/persistent-volume.yaml
@@ -1,23 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: music-grabber-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: music-grabber-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: nfs-client
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  nfs:
-    path: /volume2/Storage
-    server: synologybond.alexlebens.net
-  mountOptions:
-    - vers=4
-    - minorversion=1
-    - noac
--- a/clusters/cl01tl/helm/music-grabber/values.yaml
+++ b/clusters/cl01tl/helm/music-grabber/values.yaml
@@ -1,159 +0,0 @@
-music-grabber:
-  controllers:
-    main:
-      type: deployment
-      replicas: 1
-      strategy: Recreate
-      revisionHistoryLimit: 3
-      containers:
-        main:
-          image:
-            repository: g33kphr33k/musicgrabber
-            tag: 2.0.4
-            pullPolicy: IfNotPresent
-          env:
-            - name: MUSIC_DIR
-              value: /mnt/store/Music Grabber/
-            - name: ENABLE_MUSICBRAINZ
-              value: true
-            - name: ORGANISE_BY_ARTIST
-              value: true
-            - name: NAVIDROME_URL
-              value: http://navidrome-main.navidrome:80
-            - name: NAVIDROME_USER
-              valueFrom:
-                secretKeyRef:
-                  name: music-grabber-config-secret
-                  key: navidrome-user
-            - name: NAVIDROME_PASS
-              valueFrom:
-                secretKeyRef:
-                  name: music-grabber-config-secret
-                  key: navidrome-password
-            - name: SLSKD_URL
-              value: http://slskd.slskd:5030
-            - name: SLSKD_USER
-              valueFrom:
-                secretKeyRef:
-                  name: music-grabber-config-secret
-                  key: slskd-user
-            - name: SLSKD_PASS
-              valueFrom:
-                secretKeyRef:
-                  name: music-grabber-config-secret
-                  key: slskd-password
-            - name: SLSKD_DOWNLOADS_PATH
-              value: /mnt/store/slskd/Downloads
-          resources:
-            requests:
-              cpu: 10m
-              memory: 128Mi
-        gluetun:
-          image:
-            repository: ghcr.io/qdm12/gluetun
-            tag: v3.41.1@sha256:1a5bf4b4820a879cdf8d93d7ef0d2d963af56670c9ebff8981860b6804ebc8ab
-            pullPolicy: IfNotPresent
-          lifecycle:
-            postStart:
-              exec:
-                command: ["/bin/sh", "-c", "(ip rule del table 51820; ip -6 rule del table 51820) || true"]
-          env:
-            - name: VPN_SERVICE_PROVIDER
-              value: protonvpn
-            - name: VPN_TYPE
-              value: wireguard
-            - name: WIREGUARD_PRIVATE_KEY
-              valueFrom:
-                secretKeyRef:
-                  name: music-grabber-wireguard-conf
-                  key: private-key
-            - name: UPDATER_PROTONVPN_EMAIL
-              valueFrom:
-                secretKeyRef:
-                  name: music-grabber-wireguard-conf
-                  key: proton-email
-            - name: UPDATER_PROTONVPN_PASSWORD
-              valueFrom:
-                secretKeyRef:
-                  name: music-grabber-wireguard-conf
-                  key: proton-password
-            - name: FIREWALL_OUTBOUND_SUBNETS
-              value: 10.0.0.0/8
-            - name: FIREWALL_INPUT_PORTS
-              value: 8080
-            - name: DNS_UPSTREAM_RESOLVER_TYPE
-              value: dot
-          securityContext:
-            privileged: True
-            capabilities:
-              add:
-                - NET_ADMIN
-                - SYS_MODULE
-          probes:
-            liveness:
-              enabled: true
-              custom: true
-              spec:
-                exec:
-                  command:
-                    - /gluetun-entrypoint
-                    - healthcheck
-                failureThreshold: 5
-                initialDelaySeconds: 30
-                periodSeconds: 30
-                successThreshold: 1
-                timeoutSeconds: 15
-          resources:
-            limits:
-              devic.es/tun: "1"
-            requests:
-              devic.es/tun: "1"
-              cpu: 10m
-              memory: 128Mi
-  service:
-    main:
-      controller: main
-      ports:
-        http:
-          port: 80
-          targetPort: 8080
-          protocol: HTTP
-  route:
-    main:
-      kind: HTTPRoute
-      parentRefs:
-        - group: gateway.networking.k8s.io
-          kind: Gateway
-          name: traefik-gateway
-          namespace: traefik
-      hostnames:
-        - music-grabber.alexlebens.net
-      rules:
-        - backendRefs:
-            - group: ''
-              kind: Service
-              name: music-grabber
-              port: 80
-              weight: 100
-          matches:
-            - path:
-                type: PathPrefix
-                value: /
-  persistence:
-    cache:
-      storageClass: ceph-block
-      accessMode: ReadWriteOnce
-      size: 1Gi
-      retain: true
-      advancedMounts:
-        main:
-          main:
-            - path: /data
-              readOnly: false
-    music:
-      existingClaim: music-grabber-nfs-storage
-      advancedMounts:
-        main:
-          main:
-            - path: /mnt/store/
-              readOnly: false
--- a/clusters/cl01tl/helm/navidrome/templates/persistent-volume-claim.yaml
+++ b/clusters/cl01tl/helm/navidrome/templates/persistent-volume-claim.yaml
@@ -35,25 +35,6 @@ spec:
    requests:
      storage: 1Gi

---
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: navidrome-music-grabber-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: navidrome-music-grabber-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  volumeName: navidrome-music-grabber-nfs-storage
-  storageClassName: nfs-client
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 1Gi
-
 ---
 apiVersion: v1
 kind: PersistentVolumeClaim
--- a/clusters/cl01tl/helm/navidrome/templates/persistent-volume.yaml
+++ b/clusters/cl01tl/helm/navidrome/templates/persistent-volume.yaml
@@ -47,31 +47,6 @@ spec:
    - minorversion=1
    - noac

---
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: navidrome-music-grabber-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: navidrome-music-grabber-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: nfs-client
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  nfs:
-    path: /volume2/Storage/Music Grabber/
-    server: synologybond.alexlebens.net
-  mountOptions:
-    - vers=4
-    - minorversion=1
-    - noac
-
 ---
 apiVersion: v1
 kind: PersistentVolume
--- a/clusters/cl01tl/helm/navidrome/values.yaml
+++ b/clusters/cl01tl/helm/navidrome/values.yaml
@@ -9,7 +9,7 @@ navidrome:
        main:
          image:
            repository: deluan/navidrome
-            tag: 0.60.3@sha256:a5dce8f33304714dd138e870cca0dcab3d937ca236be1a9f2b97da009d1a0048
+            tag: 0.60.0@sha256:5d0f6ab343397c043c7063db14ae10e4e3980e54ae7388031cbce47e84af6657
            pullPolicy: IfNotPresent
          env:
            - name: ND_MUSICFOLDER
@@ -155,13 +155,6 @@ navidrome:
          main:
            - path: /music-youtube
              readOnly: true
-    music-grabber:
-      existingClaim: navidrome-music-grabber-nfs-storage
-      advancedMounts:
-        main:
-          main:
-            - path: /music-grabber
-              readOnly: true
    music-single:
      existingClaim: navidrome-music-single-nfs-storage
      advancedMounts:
--- a/clusters/cl01tl/helm/ntfy/Chart.yaml
+++ b/clusters/cl01tl/helm/ntfy/Chart.yaml
@@ -20,4 +20,4 @@ dependencies:
    version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ntfy.png
 # renovate: datasource=github-releases depName=binwiederhier/ntfy
-appVersion: 2.17.0
+appVersion: 2.16.0
--- a/clusters/cl01tl/helm/ntfy/values.yaml
+++ b/clusters/cl01tl/helm/ntfy/values.yaml
@@ -9,7 +9,7 @@ ntfy:
        main:
          image:
            repository: binwiederhier/ntfy
-            tag: v2.17.0
+            tag: v2.16.0
            pullPolicy: IfNotPresent
          args: ["serve"]
          env:
--- a/clusters/cl01tl/helm/ollama/Chart.lock
+++ b/clusters/cl01tl/helm/ollama/Chart.lock
@@ -4,9 +4,9 @@ dependencies:
  version: 4.6.2
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.7.0
+  version: 7.5.1
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.7.0
-digest: sha256:963647140cc0342b9992ee086207415058dad35f599f78133ec889d9c373ab8d
-generated: "2026-02-21T13:10:40.81364472Z"
+digest: sha256:016ca629a1fbe06f6791b663b6b5e99f05184ee5042fabc2e9cb60975032baf8
+generated: "2026-02-07T02:32:11.063809451Z"
--- a/clusters/cl01tl/helm/ollama/Chart.yaml
+++ b/clusters/cl01tl/helm/ollama/Chart.yaml
@@ -23,7 +23,7 @@ dependencies:
    version: 4.6.2
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.7.0
+    version: 7.5.1
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: volsync-target
    alias: volsync-target-data
@@ -31,4 +31,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ollama.png
 # renovate: datasource=github-releases depName=ollama/ollama
-appVersion: 0.16.3
+appVersion: 0.15.5
--- a/clusters/cl01tl/helm/ollama/values.yaml
+++ b/clusters/cl01tl/helm/ollama/values.yaml
@@ -22,7 +22,7 @@ ollama:
        main:
          image:
            repository: ollama/ollama
-            tag: 0.16.3
+            tag: 0.15.6
            pullPolicy: IfNotPresent
          env:
            - name: OLLAMA_KEEP_ALIVE
@@ -58,7 +58,7 @@ ollama:
        main:
          image:
            repository: ollama/ollama
-            tag: 0.16.3
+            tag: 0.15.6
            pullPolicy: IfNotPresent
          env:
            - name: OLLAMA_KEEP_ALIVE
@@ -94,7 +94,7 @@ ollama:
        main:
          image:
            repository: ollama/ollama
-            tag: 0.16.3
+            tag: 0.15.6
            pullPolicy: IfNotPresent
          env:
            - name: OLLAMA_KEEP_ALIVE
@@ -117,7 +117,7 @@ ollama:
        main:
          image:
            repository: ghcr.io/open-webui/open-webui
-            tag: v0.8.3
+            tag: 0.7.2
            pullPolicy: IfNotPresent
          env:
            - name: ENV
--- a/clusters/cl01tl/helm/outline/Chart.lock
+++ b/clusters/cl01tl/helm/outline/Chart.lock
@@ -7,9 +7,9 @@ dependencies:
  version: 2.3.0
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.7.0
+  version: 7.5.1
 - name: redis-replication
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 1.0.4
-digest: sha256:5ac6b293226ce26c698158b2b44dcbe3907ca37aa4046d392653577ca274f0e3
-generated: "2026-02-21T13:11:03.299399865Z"
+digest: sha256:5beab8bbe25bbcafae4cb9a55494212b00f8f52053ec0ee545288a23bc6ea61c
+generated: "2026-02-07T02:32:25.090868738Z"
--- a/clusters/cl01tl/helm/outline/Chart.yaml
+++ b/clusters/cl01tl/helm/outline/Chart.yaml
@@ -27,11 +27,11 @@ dependencies:
    version: 2.3.0
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.7.0
+    version: 7.5.1
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: redis-replication
    version: 1.0.4
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/outline.png
 # renovate: datasource=github-releases depName=outline/outline
-appVersion: 1.5.0
+appVersion: 1.4.0
--- a/clusters/cl01tl/helm/outline/values.yaml
+++ b/clusters/cl01tl/helm/outline/values.yaml
@@ -9,7 +9,7 @@ outline:
        main:
          image:
            repository: outlinewiki/outline
-            tag: 1.5.0
+            tag: 1.4.0
            pullPolicy: IfNotPresent
          env:
            - name: NODE_ENV
--- a/clusters/cl01tl/helm/overseerr/Chart.lock
+++ b/clusters/cl01tl/helm/overseerr/Chart.lock
@@ -0,0 +1,6 @@
+dependencies:
+- name: app-template
+  repository: https://bjw-s-labs.github.io/helm-charts/
+  version: 4.6.2
+digest: sha256:c7f53a9c86a84aab15434cde30a70cf024cf9898ff8485438a0ecdc6ca815ecc
+generated: "2026-01-16T18:51:06.856481136Z"
--- a/clusters/cl01tl/helm/overseerr/Chart.yaml
+++ b/clusters/cl01tl/helm/overseerr/Chart.yaml
@@ -0,0 +1,22 @@
+apiVersion: v2
+name: overseerr
+version: 1.0.0
+description: Overseerr
+keywords:
+  - overseer
+  - media
+  - request
+home: https://wiki.alexlebens.dev/s/ba89ec92-a15c-48d5-9c33-a28a0134b0f9
+sources:
+  - https://github.com/sct/overseerr
+  - https://github.com/sct/overseerr/pkgs/container/overseerr
+  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
+maintainers:
+  - name: alexlebens
+dependencies:
+  - name: app-template
+    repository: https://bjw-s-labs.github.io/helm-charts/
+    version: 4.6.2
+icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/overseerr.png
+# renovate: datasource=github-releases depName=sct/overseerr
+appVersion: 1.34.0
--- a/clusters/cl01tl/helm/overseerr/templates/external-secret.yaml
+++ b/clusters/cl01tl/helm/overseerr/templates/external-secret.yaml
@@ -0,0 +1,55 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: overseerr-main-backup-secret
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: overseerr-main-backup-secret
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  target:
+    template:
+      mergePolicy: Merge
+      engineVersion: v2
+      data:
+        RESTIC_REPOSITORY: "{{ `{{ .BUCKET_ENDPOINT }}` }}/overseerr/overseerr-main"
+  data:
+    - secretKey: BUCKET_ENDPOINT
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/volsync/restic/config
+        metadataPolicy: None
+        property: S3_BUCKET_ENDPOINT
+    - secretKey: RESTIC_PASSWORD
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/volsync/restic/config
+        metadataPolicy: None
+        property: RESTIC_PASSWORD
+    - secretKey: AWS_DEFAULT_REGION
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /cl01tl/volsync/restic/config
+        metadataPolicy: None
+        property: AWS_DEFAULT_REGION
+    - secretKey: AWS_ACCESS_KEY_ID
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /digital-ocean/home-infra/volsync-backups
+        metadataPolicy: None
+        property: access_key
+    - secretKey: AWS_SECRET_ACCESS_KEY
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /digital-ocean/home-infra/volsync-backups
+        metadataPolicy: None
+        property: secret_key
--- a/clusters/cl01tl/helm/overseerr/templates/replication-source.yaml
+++ b/clusters/cl01tl/helm/overseerr/templates/replication-source.yaml
@@ -0,0 +1,25 @@
+apiVersion: volsync.backube/v1alpha1
+kind: ReplicationSource
+metadata:
+  name: overseerr-main-backup-source
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: overseerr-main-backup-source
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  sourcePVC: overseerr-main
+  trigger:
+    schedule: 0 4 * * *
+  restic:
+    pruneIntervalDays: 7
+    repository: overseerr-main-backup-secret
+    retain:
+      hourly: 1
+      daily: 3
+      weekly: 2
+      monthly: 2
+      yearly: 4
+    copyMethod: Snapshot
+    storageClassName: ceph-block
+    volumeSnapshotClassName: ceph-blockpool-snapshot
--- a/clusters/cl01tl/helm/overseerr/values.yaml
+++ b/clusters/cl01tl/helm/overseerr/values.yaml
@@ -0,0 +1,61 @@
+app-template:
+  controllers:
+    main:
+      type: deployment
+      replicas: 1
+      strategy: Recreate
+      revisionHistoryLimit: 3
+      containers:
+        main:
+          image:
+            repository: ghcr.io/sct/overseerr
+            tag: 1.34.0
+            pullPolicy: IfNotPresent
+          env:
+            - name: TZ
+              value: US/Central
+          resources:
+            requests:
+              cpu: 10m
+              memory: 512Mi
+  service:
+    main:
+      controller: main
+      ports:
+        http:
+          port: 80
+          targetPort: 5055
+          protocol: HTTP
+  route:
+    main:
+      kind: HTTPRoute
+      parentRefs:
+        - group: gateway.networking.k8s.io
+          kind: Gateway
+          name: traefik-gateway
+          namespace: traefik
+      hostnames:
+        - overseerr.alexlebens.net
+      rules:
+        - backendRefs:
+            - group: ''
+              kind: Service
+              name: overseerr
+              port: 80
+              weight: 100
+          matches:
+            - path:
+                type: PathPrefix
+                value: /
+  persistence:
+    main:
+      forceRename: overseerr-main
+      storageClass: ceph-block
+      accessMode: ReadWriteOnce
+      size: 10Gi
+      retain: true
+      advancedMounts:
+        main:
+          main:
+            - path: /app/config
+              readOnly: false
--- a/clusters/cl01tl/helm/photoview/Chart.lock
+++ b/clusters/cl01tl/helm/photoview/Chart.lock
@@ -4,6 +4,6 @@ dependencies:
  version: 4.6.2
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.7.0
-digest: sha256:35bc71fbdeec5cda0e88c3fc51274282343d7b00442b797b7ce0f9fdd4c55c62
-generated: "2026-02-21T13:11:32.01561891Z"
+  version: 7.5.1
+digest: sha256:00b4fff6726d8bb1c7d8cd7ad9a1717d91f9d5d8ba1785527e0a49a665c6f76a
+generated: "2026-02-07T02:32:37.367202037Z"
--- a/clusters/cl01tl/helm/photoview/Chart.yaml
+++ b/clusters/cl01tl/helm/photoview/Chart.yaml
@@ -20,7 +20,7 @@ dependencies:
    version: 4.6.2
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.7.0
+    version: 7.5.1
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/photoview.png
 # renovate: datasource=github-releases depName=photoview/photoview
--- a/clusters/cl01tl/helm/plex/values.yaml
+++ b/clusters/cl01tl/helm/plex/values.yaml
@@ -9,7 +9,7 @@ plex:
        main:
          image:
            repository: ghcr.io/linuxserver/plex
-            tag: 1.43.0@sha256:bbe0118e39e2c071fc5fe39af3f32072207bf4146d56b6a8901bcb23082df207
+            tag: 1.43.0@sha256:66c6a46ec3dc244aea20508b49dce4b46291c2fd2dba8851117e675d1c5dd52d
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/helm/postiz/Chart.lock
+++ b/clusters/cl01tl/helm/postiz/Chart.lock
@@ -7,7 +7,7 @@ dependencies:
  version: 2.3.0
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.7.0
+  version: 7.5.1
 - name: redis-replication
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 1.0.4
@@ -17,5 +17,5 @@ dependencies:
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.7.0
-digest: sha256:c0f190c1ab7ab255c2c9505836c2e1f5927efd76fbf04ffcc89f7777af701c37
-generated: "2026-02-21T13:11:48.366019771Z"
+digest: sha256:399468e311fa4b9a52681770fcf5f0c247764b99883c847a18c166a1d40726be
+generated: "2026-02-07T02:32:49.436802609Z"
--- a/clusters/cl01tl/helm/postiz/Chart.yaml
+++ b/clusters/cl01tl/helm/postiz/Chart.yaml
@@ -26,7 +26,7 @@ dependencies:
    version: 2.3.0
  - name: postgres-cluster
    alias: postgres-18-cluster
-    version: 7.7.0
+    version: 7.5.1
    repository: oci://harbor.alexlebens.net/helm-charts
  - name: redis-replication
    version: 1.0.4
@@ -41,4 +41,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/postiz.png
 # renovate: datasource=github-releases depName=gitroomhq/postiz-app
-appVersion: v2.19.0
+appVersion: v2.14.0
--- a/Show More
+++ b/Show More