chore(deps): update dependency ollama/ollama to v0.20.5

.gitea/workflows/lint-test-helm.yaml

@@ -378,232 +378,249 @@ jobs:
           actions: '[{"action": "view", "label": "View Run", "url": "${{ vars.USER_URL }}/${{ github.repository }}/actions/runs/${{ github.run_id }}", "clear": true}]'
           image: true
 
-  # argo-diff:
-  #   needs: lint-helm
-  #   runs-on: ubuntu-js
-  #   if: |
-  #     needs.lint-helm.result == 'success' &&
-  #     needs.lint-helm.outputs.changes-detected == 'true' &&
-  #     github.event_name == 'pull_request'
-  #   steps:
-  #     - name: Checkout
-  #       uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
-  #       with:
-  #         fetch-depth: 0
+  argo-diff:
+    needs: lint-helm
+    runs-on: ubuntu-js
+    if: |
+      needs.lint-helm.result == 'success' &&
+      needs.lint-helm.outputs.changes-detected == 'true' &&
+      github.event_name == 'pull_request'
+    steps:
+      - name: Checkout
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+        with:
+          fetch-depth: 0
 
-  #     - name: Cache ArgoCD CLI
-  #       id: cache-argocd
-  #       uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5
-  #       with:
-  #         path: /usr/local/bin/argocd
-  #         key: ${{ runner.os }}-argocd-${{ env.ARGOCD_VERSION }}
-  #         restore-keys: |
-  #           ${{ runner.os }}-argocd-
+      - name: Cache ArgoCD CLI
+        id: cache-argocd
+        uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5
+        with:
+          path: /usr/local/bin/argocd
+          key: ${{ runner.os }}-argocd-${{ env.ARGOCD_VERSION }}
+          restore-keys: |
+            ${{ runner.os }}-argocd-
 
-  #     - name: Install ArgoCD CLI
-  #       if: steps.cache-argocd.outputs.cache-hit != 'true'
-  #       run: |
-  #         echo ">> Downloading ArgoCD CLI, version: ${{ env.ARGOCD_VERSION }} ..."
-  #         curl -sSL -o argocd-linux-amd64 https://github.com/argoproj/argo-cd/releases/download/${{ env.ARGOCD_VERSION }}/argocd-linux-amd64
+      - name: Install ArgoCD CLI
+        if: steps.cache-argocd.outputs.cache-hit != 'true'
+        run: |
+          echo ">> Downloading ArgoCD CLI, version: ${{ env.ARGOCD_VERSION }} ..."
+          curl -sSL -o argocd-linux-amd64 https://github.com/argoproj/argo-cd/releases/download/${{ env.ARGOCD_VERSION }}/argocd-linux-amd64
 
-  #         echo ""
-  #         echo ">> Installing ArgoCD CLI ..."
-  #         sudo install -m 555 argocd-linux-amd64 /usr/local/bin/argocd
+          echo ""
+          echo ">> Installing ArgoCD CLI ..."
+          sudo install -m 555 argocd-linux-amd64 /usr/local/bin/argocd
 
-  #         echo ""
-  #         echo "----"
+          echo ""
+          echo "----"
 
-  #     - name: Verify installation
-  #       run: |
-  #         echo ""
-  #         echo ">> Verifying installation ..."
-  #         argocd version --client
+      - name: Verify installation
+        run: |
+          echo ""
+          echo ">> Verifying installation ..."
+          argocd version --client
 
-  #         echo ""
-  #         echo "----"
+          echo ""
+          echo "----"
 
-  #     - name: Set Up Helm
-  #       uses: azure/setup-helm@dda3372f752e03dde6b3237bc9431cdc2f7a02a2 # v5
-  #       with:
-  #         token: ${{ secrets.GITEA_TOKEN }}
-  #         # renovate: datasource=github-releases depName=helm/helm
-  #         version: v4.1.3
-  #         cache: true
+      - name: Set Up Helm
+        uses: azure/setup-helm@dda3372f752e03dde6b3237bc9431cdc2f7a02a2 # v5
+        with:
+          token: ${{ secrets.GITEA_TOKEN }}
+          # renovate: datasource=github-releases depName=helm/helm
+          version: v4.1.3
+          cache: true
 
-  #     - name: Cache Helm Dependencies
-  #       uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5
-  #       with:
-  #         path: |
-  #           ~/.cache/helm
-  #           ~/.config/helm
-  #         key: helm-cache-${{ runner.os }}-${{ hashFiles('infrastructure/clusters/cl01tl/helm/**/Chart.yaml', 'infrastructure/clusters/cl01tl/helm/**/Chart.lock') }}
-  #         restore-keys: |
-  #           helm-cache-${{ runner.os }}-
+      - name: Cache Helm Dependencies
+        uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5
+        with:
+          path: |
+            ~/.cache/helm
+            ~/.config/helm
+          key: helm-cache-${{ runner.os }}-${{ hashFiles('infrastructure/clusters/cl01tl/helm/**/Chart.yaml', 'infrastructure/clusters/cl01tl/helm/**/Chart.lock') }}
+          restore-keys: |
+            helm-cache-${{ runner.os }}-
 
-  #     - name: Add Repositories
-  #       env:
-  #         CHANGED_CHARTS: ${{ needs.lint-helm.outputs.chart-dir }}
-  #       run: |
-  #         echo ">> Adding repositories for chart dependencies ..."
-  #         echo ""
+      - name: Add Repositories
+        env:
+          CHANGED_CHARTS: ${{ needs.lint-helm.outputs.chart-dir }}
+        run: |
+          echo ">> Adding repositories for chart dependencies ..."
+          echo ""
 
-  #         for DIR in ${CHANGED_CHARTS}; do
-  #           helm dependency list --max-col-width 120 clusters/${CLUSTER}/helm/${DIR} 2> /dev/null \
-  #             | tail -n +2 \
-  #             | awk 'NF > 0 { print $1, $3 }' \
-  #             | while read -r REPO_NAME REPO_URL; do
-  #               if [[ "${REPO_URL}" == oci://* ]]; then
-  #                 echo ">> Ignoring OCI repo: ${REPO_URL}"
+          for DIR in ${CHANGED_CHARTS}; do
+            helm dependency list --max-col-width 120 clusters/${CLUSTER}/helm/${DIR} 2> /dev/null \
+              | tail -n +2 \
+              | awk 'NF > 0 { print $1, $3 }' \
+              | while read -r REPO_NAME REPO_URL; do
+                if [[ "${REPO_URL}" == oci://* ]]; then
+                  echo ">> Ignoring OCI repo: ${REPO_URL}"
 
-  #               elif [[ -n "${REPO_NAME}" && -n "${REPO_URL}" ]]; then
-  #                 helm repo add "${REPO_NAME}" "${REPO_URL}"
+                elif [[ -n "${REPO_NAME}" && -n "${REPO_URL}" ]]; then
+                  helm repo add "${REPO_NAME}" "${REPO_URL}"
 
-  #               fi
+                fi
 
-  #             done || true
-  #         done
+              done || true
+          done
 
-  #         if helm repo list > /dev/null 2>&1; then
-  #           echo ""
-  #           echo ">> Update repository cache ..."
-  #           helm repo update
+          if helm repo list > /dev/null 2>&1; then
+            echo ""
+            echo ">> Update repository cache ..."
+            helm repo update
 
-  #         fi
+          fi
 
-  #         echo ""
-  #         echo "----"
+          echo ""
+          echo "----"
 
-  #     - name: Render Templates
-  #       id: render
-  #       env:
-  #         CHANGED_CHARTS: ${{ needs.lint-helm.outputs.chart-dir }}
-  #       run: |
-  #         for APP_NAME in ${CHANGED_CHARTS}; do
-  #           echo ">> Render templates for ${APP_NAME} ..."
-  #           CHART_PATH="clusters/${CLUSTER}/helm/${APP_NAME}"
-  #           OUTPUT_FOLDER="clusters/${CLUSTER}/manifests/${APP_NAME}/"
+      - name: Render Templates
+        id: render
+        env:
+          CHANGED_CHARTS: ${{ needs.lint-helm.outputs.chart-dir }}
+        run: |
+          for APP_NAME in ${CHANGED_CHARTS}; do
+            echo ">> Render templates for ${APP_NAME} ..."
+            CHART_PATH="clusters/${CLUSTER}/helm/${APP_NAME}"
+            OUTPUT_FOLDER="clusters/${CLUSTER}/manifests/${APP_NAME}/"
 
-  #           helm dependency build "${CHART_PATH}" --skip-refresh
+            helm dependency build "${CHART_PATH}" --skip-refresh
 
-  #           NAMESPACE="${APP_NAME}"
-  #           case "${APP_NAME}" in
-  #             "stack")
-  #               NAMESPACE="argocd"
-  #               echo ">> Special Rendering into 'argocd' namespace ..."
-  #               ;;
-  #             "cilium" | "coredns" | "metrics-server")
-  #               NAMESPACE="kube-system"
-  #               echo ">> Special Rendering for ${APP_NAME} into 'kube-system' namespace ..."
-  #               ;;
-  #             *)
-  #               echo ">> Standard Rendering ..."
-  #           esac
+            NAMESPACE="${APP_NAME}"
+            case "${APP_NAME}" in
+              "stack")
+                NAMESPACE="argocd"
+                echo ">> Special Rendering into 'argocd' namespace ..."
+                ;;
+              "cilium" | "coredns" | "metrics-server")
+                NAMESPACE="kube-system"
+                echo ">> Special Rendering for ${APP_NAME} into 'kube-system' namespace ..."
+                ;;
+              *)
+                echo ">> Standard Rendering ..."
+            esac
 
-  #           TEMPLATE=$(helm template "${APP_NAME}" "${CHART_PATH}" --include-crds --namespace "${NAMESPACE}" --include-crds --api-versions "gateway.networking.k8s.io/v1/HTTPRoute,monitoring.coreos.com/v1,monitoring.coreos.com/v1/ServiceMonitor")
+            TEMPLATE=$(helm template "${APP_NAME}" "${CHART_PATH}" --include-crds --namespace "${NAMESPACE}" --include-crds --api-versions "gateway.networking.k8s.io/v1/HTTPRoute,monitoring.coreos.com/v1,monitoring.coreos.com/v1/ServiceMonitor")
 
-  #           # Format and split rendered template
-  #           echo "${TEMPLATE}" | yq '... comments=""' | yq 'select(. != null)' | yq -s '"'"${OUTPUT_FOLDER}"'" + .kind + "-" + .metadata.name + ".yaml"'
+            # Format and split rendered template
+            echo "${TEMPLATE}" | yq '... comments=""' | yq 'select(. != null)' | yq -s '"'"${OUTPUT_FOLDER}"'" + .kind + "-" + .metadata.name + ".yaml"'
 
-  #           # Strip comments again to ensure formatting correctness
-  #           for file in "$OUTPUT_FOLDER"/*; do
-  #             yq -i '... comments=""' $file
+            # Strip comments again to ensure formatting correctness
+            for file in "$OUTPUT_FOLDER"/*; do
+              yq -i '... comments=""' $file
 
-  #           done
+            done
 
-  #           echo ""
-  #           echo ">> Templates in output folder: ${OUTPUT_FOLDER}"
-  #           ls ${OUTPUT_FOLDER}
-  #         done
+            echo ""
+            echo ">> Templates in outpute folder: ${OUTPUT_FOLDER}"
+            ls ${OUTPUT_FOLDER}
+          done
 
-  #         echo "----"
+          echo "----"
 
-  #     - name: Run App Diff
-  #       id: diff
-  #       env:
-  #         ARGOCD_SERVER: ${{ secrets.ARGOCD_SERVER }}
-  #         ARGOCD_AUTH_TOKEN: ${{ secrets.ARGOCD_AUTH_TOKEN }}
-  #         CHANGED_CHARTS: ${{ needs.lint-helm.outputs.chart-dir }}
-  #       run: |
-  #         FAILED_CHARTS=""
-  #         DIFF_FOUND="false"
+      - name: Run App Diff
+        id: diff
+        env:
+          ARGOCD_SERVER: ${{ secrets.ARGOCD_SERVER }}
+          ARGOCD_AUTH_TOKEN: ${{ secrets.ARGOCD_AUTH_TOKEN }}
+          CHANGED_CHARTS: ${{ needs.lint-helm.outputs.chart-dir }}
+        run: |
+          # argo diff outputs 1 on any diff, but this is expected, only error on output 2+
+          set +e
+          OVERALL_EXIT_CODE=0
+          FAILED_CHARTS=""
+          DIFF_FOUND="false"
 
-  #         for APP_NAME in ${CHANGED_CHARTS}; do
-  #           echo ">> Running argocd app diff for ${APP_NAME} ..."
-  #           argocd app diff "${APP_NAME}" \
-  #             --server "${ARGOCD_SERVER}" \
-  #             --revision ${{ gitea.sha }} \
-  #             --diff-exit-code 0 \
-  #             --local "clusters/${CLUSTER}/manifests/${APP_NAME}" \
-  #             --local-repo-root "." \
-  #             --grpc-web > "diff_output_${APP_NAME}.txt"
+          for APP_NAME in ${CHANGED_CHARTS}; do
+            echo ">> Running argocd app diff for ${APP_NAME} ..."
 
-  #           if [ -s "diff_output_${APP_NAME}.txt" ]; then
-  #             echo ">> Argo diff:"
-  #             echo ""
-  #             cat diff_output_${APP_NAME}.txt
-  #             echo ""
+            argocd app diff "${APP_NAME}" \
+              --server "${ARGOCD_SERVER}" \
+              --revision ${{ gitea.sha }} \
+              --grpc-web > diff_output_${APP_NAME}.txt
 
-  #             DIFF_FOUND="true"
+            EXIT_CODE=$?
 
-  #           else
-  #             echo ">> No Argo diff found for ${APP_NAME}"
-  #             rm "diff_output_${APP_NAME}.txt"
+            if [ -s "diff_output_${APP_NAME}.txt" ]; then
+              echo ">> Argo diff:"
+              echo ""
+              cat diff_output_${APP_NAME}.txt
+              echo ""
 
-  #           fi
-  #         done
+              DIFF_FOUND="true"
 
-  #         echo "----"
-  #         echo "diff-detected=${DIFF_FOUND}" >> "$GITHUB_OUTPUT"
-  #         echo "failed-charts=${FAILED_CHARTS}" >> "$GITHUB_OUTPUT"
+            else
+              echo ">> No Argo diff found for ${APP_NAME}"
+              rm "diff_output_${APP_NAME}.txt"
 
-  #         exit $OVERALL_EXIT_CODE
+            fi
 
-  #     - name: Post Diff
-  #       if: |
-  #         always() &&
-  #         steps.diff.outputs.diff-detected == 'true' &&
-  #         gitea.event.pull_request.number != null
-  #       env:
-  #         GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}
-  #       run: |
-  #         COMMENT_BODY="### ArgoCD Diff Results
-  #         "
+            if [ $EXIT_CODE -eq 2 ]; then
+              echo ">> ArgoCD diff failed for ${APP_NAME} due to a manifest error"
 
-  #         for f in diff_output_*.txt; do
-  #           APP_NAME=$(echo $f | sed 's/diff_output_//;s/.txt//')
-  #           DIFF_CONTENT=$(cat "$f")
+              OVERALL_EXIT_CODE=1
 
-  #           COMMENT_BODY="${COMMENT_BODY}
-  #         #### App: ${APP_NAME}
-  #         "
+              if [ -z "${FAILED_CHARTS}" ]; then
+                FAILED_CHARTS="${APP_NAME}"
 
-  #           if [ -z "$DIFF_CONTENT" ]; then
-  #             COMMENT_BODY="${COMMENT_BODY} No changes detected."
-  #           else
-  #             COMMENT_BODY="${COMMENT_BODY}
-  #         \`\`\`diff
-  #         ${DIFF_CONTENT}
-  #         \`\`\`"
-  #           fi
-  #         done
+              else
+                FAILED_CHARTS="${FAILED_CHARTS}, ${APP_NAME}"
 
-  #         curl -X 'POST' \
-  #           "${{ gitea.server_url }}/api/v1/repos/${{ gitea.repository }}/issues/${{ gitea.event.pull_request.number }}/comments" \
-  #           -H "Authorization: token ${GITEA_TOKEN}" \
-  #           -H "Content-Type: application/json" \
-  #           -d "$(jq -n --arg body "$COMMENT_BODY" '{body: $body}')"
+              fi
+            fi
+          done
 
-  #     - name: ntfy Failed
-  #       uses: niniyas/ntfy-action@96acac57fdc91d4c4f50b78486c1ed6f03f9f61c # master
-  #       if: failure()
-  #       with:
-  #         url: '${{ secrets.NTFY_URL }}'
-  #         topic: '${{ secrets.NTFY_TOPIC }}'
-  #         title: 'ArgoCD Diff Failure'
-  #         priority: 3
-  #         headers: '{"Authorization": "Bearer ${{ secrets.NTFY_CRED }}"}'
-  #         tags: action,failed
-  #         details: "ArgoCD diff for cluster '${{ env.CLUSTER }}' failed on charts: ${{ steps.diff.outputs.failed-charts }}"
-  #         icon: 'https://cdn.jsdelivr.net/gh/selfhst/icons/png/gitea.png'
-  #         actions: '[{"action": "view", "label": "View Run", "url": "${{ vars.USER_URL }}/${{ github.repository }}/actions/runs/${{ github.run_id }}", "clear": true}]'
-  #         image: true
+          echo "----"
+          echo "diff-detected=${DIFF_FOUND}" >> "$GITHUB_OUTPUT"
+          echo "failed-charts=${FAILED_CHARTS}" >> "$GITHUB_OUTPUT"
+
+          exit $OVERALL_EXIT_CODE
+
+      - name: Post Diff
+        if: |
+          always() &&
+          steps.diff.outputs.diff-detected == 'true' &&
+          gitea.event.pull_request.number != null
+        env:
+          GITEA_TOKEN: ${{ secrets.GITEA_TOKEN }}
+        run: |
+          COMMENT_BODY="### ArgoCD Diff Results
+          "
+
+          for f in diff_output_*.txt; do
+            APP_NAME=$(echo $f | sed 's/diff_output_//;s/.txt//')
+            DIFF_CONTENT=$(cat "$f")
+
+            COMMENT_BODY="${COMMENT_BODY}
+          #### App: ${APP_NAME}
+          "
+
+            if [ -z "$DIFF_CONTENT" ]; then
+              COMMENT_BODY="${COMMENT_BODY} No changes detected."
+            else
+              COMMENT_BODY="${COMMENT_BODY}
+          \`\`\`diff
+          ${DIFF_CONTENT}
+          \`\`\`"
+            fi
+          done
+
+          curl -X 'POST' \
+            "${{ gitea.server_url }}/api/v1/repos/${{ gitea.repository }}/issues/${{ gitea.event.pull_request.number }}/comments" \
+            -H "Authorization: token ${GITEA_TOKEN}" \
+            -H "Content-Type: application/json" \
+            -d "$(jq -n --arg body "$COMMENT_BODY" '{body: $body}')"
+
+      - name: ntfy Failed
+        uses: niniyas/ntfy-action@96acac57fdc91d4c4f50b78486c1ed6f03f9f61c # master
+        if: failure()
+        with:
+          url: '${{ secrets.NTFY_URL }}'
+          topic: '${{ secrets.NTFY_TOPIC }}'
+          title: 'ArgoCD Diff Failure'
+          priority: 3
+          headers: '{"Authorization": "Bearer ${{ secrets.NTFY_CRED }}"}'
+          tags: action,failed
+          details: "ArgoCD diff for cluster '${{ env.CLUSTER }}' failed on charts: ${{ steps.diff.outputs.failed-charts }}"
+          icon: 'https://cdn.jsdelivr.net/gh/selfhst/icons/png/gitea.png'
+          actions: '[{"action": "view", "label": "View Run", "url": "${{ vars.USER_URL }}/${{ github.repository }}/actions/runs/${{ github.run_id }}", "clear": true}]'
+          image: true

.gitea/workflows/renovate.yaml

@@ -13,7 +13,7 @@ on:
 jobs:
   renovate:
     runs-on: ubuntu-latest
-    container: ghcr.io/renovatebot/renovate:43.119.0@sha256:81c17fc52c5a1f80947407ee0f49a67cb337f7817cfaf6178184ece7b1b3a2f7
+    container: ghcr.io/renovatebot/renovate:43.111.0@sha256:b70f50fc874a6443809ede68809a9169d8f308418eb2c5cd67ff88edda036f1c
     steps:
       - name: Checkout
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6

clusters/cl01tl/helm/authentik/Chart.lock

@@ -10,6 +10,6 @@ dependencies:
   version: 7.11.2
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.1
-digest: sha256:22fe4d9ec592aa74cbff5596e8d900f607bd68ea14c7df70a94b4ef76727614d
-generated: "2026-04-13T20:32:12.748342469Z"
+  version: 0.6.0
+digest: sha256:6c697902b9c4e997c961b474b55aed3c254d2ef4565f921a1caf023347878718
+generated: "2026-04-10T01:33:14.668094273Z"

clusters/cl01tl/helm/authentik/Chart.yaml

@@ -29,7 +29,7 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
-    version: 0.6.1
+    version: 0.6.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/authentik.png
 # renovate: datasource=github-releases depName=goauthentik/authentik

clusters/cl01tl/helm/blocky/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.6.2
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.1
-digest: sha256:6ed3a7587906fbda581d0091ff2c29a1816b8b0b8ae40add9885e6a68b2b82ae
-generated: "2026-04-13T20:32:34.844998902Z"
+  version: 0.6.0
+digest: sha256:58bcab9a78afad1037cb9d5047becb7a836fbfb3543883f24764a1bbb8db7290
+generated: "2026-04-10T01:33:35.406965206Z"

clusters/cl01tl/helm/blocky/Chart.yaml

@@ -20,7 +20,7 @@ dependencies:
     version: 4.6.2
   - name: valkey
     alias: valkey
-    version: 0.6.1
+    version: 0.6.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/blocky.png
 # renovate: datasource=github-releases depName=0xerr0r/blocky

clusters/cl01tl/helm/blocky/values.yaml

@@ -160,7 +160,6 @@ blocky:
               sonarr                          IN      CNAME   traefik-cl01tl
               sonarr-4k                       IN      CNAME   traefik-cl01tl
               sonarr-anime                    IN      CNAME   traefik-cl01tl
-              sparkyfitness                   IN      CNAME   traefik-cl01tl
               stalwart                        IN      CNAME   traefik-cl01tl
               tdarr                           IN      CNAME   traefik-cl01tl
               tubearchivist                   IN      CNAME   traefik-cl01tl

clusters/cl01tl/helm/cert-manager/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: cert-manager
   repository: https://charts.jetstack.io
-  version: v1.20.2
-digest: sha256:f218239b4538c64d57e098a56c69dcbc4e076ffcc3d320c5a5fef1e6309e38cf
-generated: "2026-04-13T23:02:59.380767677Z"
+  version: v1.20.1
+digest: sha256:1bf36eba44cf096b40355a697b8cffb302f07f9135374222aabdf686f017b7a9
+generated: "2026-03-28T01:35:24.542754563Z"

clusters/cl01tl/helm/cert-manager/Chart.yaml

@@ -13,8 +13,8 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: cert-manager
-    version: v1.20.2
+    version: v1.20.1
     repository: https://charts.jetstack.io
 icon: https://raw.githubusercontent.com/cert-manager/cert-manager/refs/heads/master/logo/logo.png
 # renovate: datasource=github-releases depName=cert-manager/cert-manager
-appVersion: v1.20.2
+appVersion: v1.20.1

clusters/cl01tl/helm/cloudnative-pg/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 0.28.0
 - name: plugin-barman-cloud
   repository: https://cloudnative-pg.io/charts/
-  version: 0.6.0
-digest: sha256:48241acb753e635a01b306b90cfbce13ed3c0105a33ec7d36f159e3a7fe607f3
-generated: "2026-04-14T09:03:10.332065288Z"
+  version: 0.5.0
+digest: sha256:3e9b26d00fdb61af60f003bcb327e05d02799eb6088e30aaabd01c49c6021aac
+generated: "2026-04-01T20:05:40.198140255Z"

clusters/cl01tl/helm/cloudnative-pg/Chart.yaml

@@ -20,7 +20,7 @@ dependencies:
     version: 0.28.0
     repository: https://cloudnative-pg.io/charts/
   - name: plugin-barman-cloud
-    version: 0.6.0
+    version: 0.5.0
     repository: https://cloudnative-pg.io/charts/
 icon: https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg.github.io/refs/heads/main/assets/images/hero_image.png
 # renovate: datasource=github-releases depName=cloudnative-pg/cloudnative-pg

clusters/cl01tl/helm/dawarich/Chart.lock

@@ -7,7 +7,7 @@ dependencies:
   version: 7.11.2
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.1
+  version: 0.6.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
@@ -17,5 +17,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:6ece439d5549b7d7ccd75053846bb9b2e8f9798a2e2163eac6f62bf5cf222587
-generated: "2026-04-13T20:32:54.380897459Z"
+digest: sha256:46a4d88528ac64e1f228a8516c0fd00e45c2403bdd713140b82e7ab28506ec74
+generated: "2026-04-10T01:34:00.034582668Z"

clusters/cl01tl/helm/dawarich/Chart.yaml

@@ -26,7 +26,7 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
-    version: 0.6.1
+    version: 0.6.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-storage

clusters/cl01tl/helm/directus/Chart.lock

@@ -7,6 +7,6 @@ dependencies:
   version: 7.11.2
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.1
-digest: sha256:78f5065d1125792c88e4d24f5ac1ee3d6310b4997f552020c44d0615335ea329
-generated: "2026-04-13T20:33:13.909018545Z"
+  version: 0.6.0
+digest: sha256:1ef062c01049dc3150f24b4bf1502a1026beda856ecca88df70b61701eaf659e
+generated: "2026-04-10T01:34:22.131775797Z"

clusters/cl01tl/helm/directus/Chart.yaml

@@ -25,7 +25,7 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
-    version: 0.6.1
+    version: 0.6.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/directus.png
 # renovate: datasource=github-releases depName=directus/directus

clusters/cl01tl/helm/eraser/values.yaml

@@ -48,7 +48,7 @@ eraser-metrics:
         main:
           image:
             repository: ghcr.io/open-telemetry/opentelemetry-collector-releases/opentelemetry-collector
-            tag: 0.150.1@sha256:618f7867e49fdb173d9b46d535b01f82254b0b14beac6ab1f6f2eb8cf62c5d42
+            tag: 0.149.0@sha256:dd56aed607fd02f8ac01dddb27a859c0c2cc750539abce927803778fafc736ae
           command:
             - /otelcol
             - --config=/conf/otel-collector-config.yaml

clusters/cl01tl/helm/gatus/values.yaml

@@ -155,8 +155,8 @@ gatus:
       - name: searxng
         url: https://searxng.alexlebens.net
         <<: *defaults
-      - name: sparkyfitness
-        url: https://sparkyfitness.alexlebens.net
+      - name: roundcube
+        url: https://mail.alexlebens.net
         <<: *defaults
       - name: paperless-ngx
         url: https://paperless-ngx.alexlebens.net
@@ -212,9 +212,6 @@ gatus:
       - name: authentik
         url: https://authentik.alexlebens.net
         <<: *defaults
-      - name: roundcube
-        url: https://mail.alexlebens.net
-        <<: *defaults
       - name: stalwart
         url: https://stalwart.alexlebens.net
         <<: *defaults

clusters/cl01tl/helm/generic-device-plugin/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: generic-device-plugin
   repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-  version: 0.20.30
-digest: sha256:9bc92f3ced6f5bad9f656ce355f5a633c200183f1ab6fa26c897bea9f76054ee
-generated: "2026-04-14T00:59:53.650540444Z"
+  version: 0.20.29
+digest: sha256:927c4aaf7484f3522ecd92d456f184555f4c742adc1c63b32a149cbb847e9eee
+generated: "2026-04-10T17:19:10.852938614Z"

clusters/cl01tl/helm/generic-device-plugin/Chart.yaml

@@ -14,6 +14,6 @@ maintainers:
 dependencies:
   - name: generic-device-plugin
     repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-    version: 0.20.30
+    version: 0.20.29
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 appVersion: 1.0.0

clusters/cl01tl/helm/gitea/Chart.lock

@@ -1,13 +1,13 @@
 dependencies:
 - name: gitea
   repository: https://dl.gitea.com/charts/
-  version: 12.5.1
+  version: 12.5.0
 - name: actions
   repository: https://dl.gitea.com/charts/
-  version: 0.1.0
+  version: 0.0.5
 - name: meilisearch
   repository: https://meilisearch.github.io/meilisearch-kubernetes
-  version: 0.31.0
+  version: 0.30.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.5.0
@@ -16,12 +16,12 @@ dependencies:
   version: 7.11.2
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.1
+  version: 0.6.0
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.1
+  version: 0.6.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:66755bfa33469a3fb85d55a0ad1c850a9db86538f5a225f7d66ab6b991530083
-generated: "2026-04-14T21:04:57.623628301Z"
+digest: sha256:1834a2f731f3dfd1f2c1997ef827c941f63436e3d4766b7713771f6ab147a285
+generated: "2026-04-10T01:34:45.637993565Z"

clusters/cl01tl/helm/gitea/Chart.yaml

@@ -26,14 +26,14 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: gitea
-    version: 12.5.1
+    version: 12.5.0
     repository: https://dl.gitea.com/charts/
   - name: actions
     alias: gitea-actions
     repository: https://dl.gitea.com/charts/
-    version: 0.1.0
+    version: 0.0.5
   - name: meilisearch
-    version: 0.31.0
+    version: 0.30.0
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
@@ -44,11 +44,11 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey-gitea
-    version: 0.6.1
+    version: 0.6.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey-renovate
-    version: 0.6.1
+    version: 0.6.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-storage

clusters/cl01tl/helm/grafana-operator/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 7.11.2
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.1
+  version: 0.6.0
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.1
-digest: sha256:6c086da896f573fdb1b81abab43b90181f2af7bf57a62333c4426f3f30496ffa
-generated: "2026-04-13T20:33:58.123069628Z"
+  version: 0.6.0
+digest: sha256:92931c4ed7e060931fd1aa0e4c3021cc548c1375bdd8a150ed61c858496af72c
+generated: "2026-04-10T01:35:19.405893161Z"

clusters/cl01tl/helm/grafana-operator/Chart.yaml

@@ -24,11 +24,11 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey-unified-alerting
-    version: 0.6.1
+    version: 0.6.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey-remote-cache
-    version: 0.6.1
+    version: 0.6.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/grafana.png
 # renovate: datasource=github-releases depName=grafana/grafana-operator

clusters/cl01tl/helm/harbor/Chart.lock

@@ -7,6 +7,6 @@ dependencies:
   version: 7.11.2
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.1
-digest: sha256:fc508a58ea7dffe1b92049a89c3fe2f0034d05ecdad38807bb6e02c68a1cb957
-generated: "2026-04-13T20:34:25.515547207Z"
+  version: 0.6.0
+digest: sha256:b153dff647b1657cca3e2efc2ad188214496374eed1137f9ecb887184f8a4470
+generated: "2026-04-10T01:35:42.967388076Z"

clusters/cl01tl/helm/harbor/Chart.yaml

@@ -24,7 +24,7 @@ dependencies:
     repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
   - name: valkey
     alias: valkey
-    version: 0.6.1
+    version: 0.6.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/harbor.png
 # renovate: datasource=github-releases depName=goharbor/harbor

clusters/cl01tl/helm/home-assistant/Chart.yaml

@@ -24,4 +24,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/home-assistant.png
 # renovate: datasource=github-releases depName=home-assistant/core
-appVersion: 2026.4.2
+appVersion: 2026.4.1

clusters/cl01tl/helm/home-assistant/values.yaml

@@ -12,7 +12,7 @@ home-assistant:
         main:
           image:
             repository: ghcr.io/home-assistant/home-assistant
-            tag: 2026.4.2@sha256:4c940155cfd5b0187a6faee2db5d52b98bb573edc1aeee95d0818bb17b6534d7
+            tag: 2026.4.1@sha256:8848691147f01a6eee7753de2ade21b04d6168fcd2e2a7089f6f84e3b7b86960
           env:
             - name: TZ
               value: America/Chicago

clusters/cl01tl/helm/homepage/values.yaml

@@ -285,11 +285,11 @@ homepage:
                   href: https://searxng.alexlebens.net/
                   siteMonitor: http://searxng-browser.searxng:80
                   statusStyle: dot
-              - Fitness Tracker:
-                  icon: sh-sparkyfitness.webp
-                  description: Sparky Fitness
-                  href: https://sparkyfitness.alexlebens.net
-                  siteMonitor: http://sparkyfitness-frontend.sparkyfitness:80
+              - Email:
+                  icon: sh-roundcube.webp
+                  description: Roundcube
+                  href: https://mail.alexlebens.net
+                  siteMonitor: http://roundcube.roundcube:80
                   statusStyle: dot
               - Documents:
                   icon: sh-paperless-ngx.webp
@@ -487,13 +487,7 @@ homepage:
                   href: https://authentik.alexlebens.net
                   siteMonitor: http://authentik-server.authentik:80
                   statusStyle: dot
-              - Email Client:
-                  icon: sh-roundcube.webp
-                  description: Roundcube
-                  href: https://mail.alexlebens.net
-                  siteMonitor: http://roundcube.roundcube:80
-                  statusStyle: dot
-              - Email Server:
+              - Email:
                   icon: sh-stalwart.webp
                   description: Stalwart
                   href: https://stalwart.alexlebens.net

clusters/cl01tl/helm/immich/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 7.11.2
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.1
+  version: 0.6.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:73ee46c366adf205ca50a7382a404ccd0e548a2ebeb39fa5f5afbadf6e0d539f
-generated: "2026-04-13T20:34:57.11369553Z"
+digest: sha256:cc71770c9558038b988a2d7a893fffe6ba64a77e8b0d8c403b1183e48d168cd9
+generated: "2026-04-10T01:36:07.229979615Z"

clusters/cl01tl/helm/immich/Chart.yaml

@@ -25,7 +25,7 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
-    version: 0.6.1
+    version: 0.6.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data
@@ -33,4 +33,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/immich.png
 # renovate: datasource=github-releases depName=immich-app/immich
-appVersion: v2.7.5
+appVersion: v2.7.2

clusters/cl01tl/helm/immich/values.yaml

@@ -8,7 +8,7 @@ immich:
         main:
           image:
             repository: ghcr.io/immich-app/immich-server
-            tag: v2.7.5@sha256:c15bff75068effb03f4355997d03dc7e0fc58720c2b54ad6f7f10d1bc57efaa5
+            tag: v2.7.2@sha256:6a2952539e2a9c8adcf6fb74850bb1ba7e1db2804050acea21baafdc9154c430
           env:
             - name: TZ
               value: America/Chicago

clusters/cl01tl/helm/jellyfin/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: meilisearch
   repository: https://meilisearch.github.io/meilisearch-kubernetes
-  version: 0.31.0
+  version: 0.30.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:ea0f20c4c1b5566288185283141ece9938f8bbce246e27ec464cb1e6fd376fba
-generated: "2026-04-14T17:48:23.813297015Z"
+digest: sha256:32b9a206e77eabcdf1bbbc4d7e93067c40d6a621e4a07c1827e4d23961e2d82b
+generated: "2026-03-30T16:13:40.879082765Z"

clusters/cl01tl/helm/jellyfin/Chart.yaml

@@ -22,7 +22,7 @@ dependencies:
     repository: https://bjw-s-labs.github.io/helm-charts/
     version: 4.6.2
   - name: meilisearch
-    version: 0.31.0
+    version: 0.30.0
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/karakeep/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.6.2
 - name: meilisearch
   repository: https://meilisearch.github.io/meilisearch-kubernetes
-  version: 0.31.0
+  version: 0.30.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:f0f26138eeca6430c2b9ad7dc6d6ad8467b0db2a5660015b2755efc802e8ac84
-generated: "2026-04-14T17:48:43.81459819Z"
+digest: sha256:9939407bba4f0ac9d5ed47250490d0a80dc48881cfeb7bc924ece655fa0b5b05
+generated: "2026-04-10T01:17:47.911315172Z"

clusters/cl01tl/helm/karakeep/Chart.yaml

@@ -23,7 +23,7 @@ dependencies:
     repository: https://bjw-s-labs.github.io/helm-charts/
     version: 4.6.2
   - name: meilisearch
-    version: 0.31.0
+    version: 0.30.0
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts

clusters/cl01tl/helm/komodo/Chart.yaml

@@ -31,4 +31,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/komodo.png
 # renovate: datasource=github-releases depName=moghtech/komodo
-appVersion: v2.1.2
+appVersion: v2.1.1

clusters/cl01tl/helm/komodo/values.yaml

@@ -8,7 +8,7 @@ komodo:
         main:
           image:
             repository: ghcr.io/moghtech/komodo-core
-            tag: 2.1.2@sha256:8a7dbba232e4e49797bb412be5f78207c89fcf22cc2727b38631ae30f7518a4c
+            tag: 2.1.1@sha256:2bbbb1efd3534211dac35091e0818f10398d9bdd98fdbf0ddef09e9e0b5ec4ba
           env:
             - name: COMPOSE_LOGGING_DRIVER
               value: local

clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock

@@ -1,7 +1,7 @@
 dependencies:
 - name: kube-prometheus-stack
   repository: oci://ghcr.io/prometheus-community/charts
-  version: 83.4.1
+  version: 83.4.0
 - name: prometheus-operator-crds
   repository: oci://ghcr.io/prometheus-community/charts
   version: 28.0.1
@@ -10,6 +10,6 @@ dependencies:
   version: 4.6.2
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.1
-digest: sha256:cdc5f72d9531ec26bfa06a71819a17ba9944ceb6ec8fbf67d3ac8f22431535a5
-generated: "2026-04-13T22:34:25.816994271Z"
+  version: 0.6.0
+digest: sha256:94ed4d62bfc30d84c74fab1eb3439be43243952686245de16bb5b0ba15b50965
+generated: "2026-04-10T17:23:18.478974013Z"

clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml

@@ -20,7 +20,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: kube-prometheus-stack
-    version: 83.4.1
+    version: 83.4.0
     repository: oci://ghcr.io/prometheus-community/charts
   - name: prometheus-operator-crds
     version: 28.0.1
@@ -31,7 +31,7 @@ dependencies:
     version: 4.6.2
   - name: valkey
     alias: valkey
-    version: 0.6.1
+    version: 0.6.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/prometheus.png
 # renovate: datasource=github-releases depName=prometheus-operator/prometheus-operator

clusters/cl01tl/helm/matrix-synapse/Chart.lock

@@ -22,10 +22,10 @@ dependencies:
   version: 7.11.2
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.1
+  version: 0.6.0
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.1
+  version: 0.6.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
@@ -38,5 +38,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:e3b47e528b086c6f1b2aefb3b429026e77a5e7b95ff3946ef0769b366542ba5a
-generated: "2026-04-13T20:35:45.244907297Z"
+digest: sha256:a3ec2977db9a8d902c8691281e5305f2dfb4501d64591bc67dc2c86e59743133
+generated: "2026-04-10T01:36:45.779720254Z"

clusters/cl01tl/helm/matrix-synapse/Chart.yaml

@@ -54,11 +54,11 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey-matrix-synapse
-    version: 0.6.1
+    version: 0.6.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey-hookshot
-    version: 0.6.1
+    version: 0.6.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-synapse

clusters/cl01tl/helm/music-grabber/Chart.yaml

@@ -24,4 +24,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/music-grabber.png
 # renovate: datasource=docker depName=g33kphr33k/musicgrabber
-appVersion: 2.6.2
+appVersion: 2.6.1

clusters/cl01tl/helm/music-grabber/values.yaml

@@ -12,7 +12,7 @@ music-grabber:
         main:
           image:
             repository: g33kphr33k/musicgrabber
-            tag: 2.6.2@sha256:620441179d3ba9e82eb3ccedef45ee470e30da685891e0defa40ad16cf758d63
+            tag: 2.6.1@sha256:52b81df8e69062b4023a416fa4168d4bc0e6d8fba48901a5a5a3080bdd748696
           env:
             - name: MUSIC_DIR
               value: /mnt/store/Music Grabber/

clusters/cl01tl/helm/navidrome/values.yaml

@@ -12,7 +12,7 @@ navidrome:
         main:
           image:
             repository: ghcr.io/navidrome/navidrome
-            tag: 0.61.2@sha256:9fa40b3d8dec43ceb2213d1fa551da3dcfef6ac6d19c2e534efb92527c2bafd2
+            tag: 0.61.1@sha256:1e1660054a856cc09f227d6929252e45a519fdb16004b464dd637f7294ca3ec1
           env:
             - name: ND_MUSICFOLDER
               value: /music

clusters/cl01tl/helm/ollama/Chart.yaml

@@ -31,4 +31,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ollama.png
 # renovate: datasource=github-releases depName=ollama/ollama
-appVersion: 0.20.7
+appVersion: 0.20.5

clusters/cl01tl/helm/ollama/values.yaml

@@ -21,7 +21,7 @@ ollama:
         main:
           image:
             repository: ollama/ollama
-            tag: 0.20.7@sha256:487324a9312240e3e122446f351b1f1e3f68d884ef854c246db2e08792440d94
+            tag: 0.20.3@sha256:87d71eb588a28c747094ca5d011392a3790f6ea9bd9c87594780ad7c65cc7ed1
           env:
             - name: OLLAMA_KEEP_ALIVE
               value: 24h
@@ -55,7 +55,7 @@ ollama:
         main:
           image:
             repository: ollama/ollama
-            tag: 0.20.7@sha256:487324a9312240e3e122446f351b1f1e3f68d884ef854c246db2e08792440d94
+            tag: 0.20.3@sha256:87d71eb588a28c747094ca5d011392a3790f6ea9bd9c87594780ad7c65cc7ed1
           env:
             - name: OLLAMA_KEEP_ALIVE
               value: 24h
@@ -89,7 +89,7 @@ ollama:
         main:
           image:
             repository: ollama/ollama
-            tag: 0.20.7@sha256:487324a9312240e3e122446f351b1f1e3f68d884ef854c246db2e08792440d94
+            tag: 0.20.3@sha256:87d71eb588a28c747094ca5d011392a3790f6ea9bd9c87594780ad7c65cc7ed1
           env:
             - name: OLLAMA_KEEP_ALIVE
               value: 24h

clusters/cl01tl/helm/outline/Chart.lock

@@ -10,9 +10,9 @@ dependencies:
   version: 7.11.2
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.1
+  version: 0.6.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:9b15e04e7fc3cec27b64509c22f95e70ae0e8d65f6c1f2ea42ddcdd342545509
-generated: "2026-04-13T20:36:08.758439372Z"
+digest: sha256:dfed4e1149e3daaad1a36f00ad63a3353895799f0bb0c8f4cfa3e5190f04b062
+generated: "2026-04-10T01:37:10.437687272Z"

clusters/cl01tl/helm/outline/Chart.yaml

@@ -30,7 +30,7 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
-    version: 0.6.1
+    version: 0.6.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data

clusters/cl01tl/helm/paperless-ngx/Chart.lock

@@ -7,7 +7,7 @@ dependencies:
   version: 7.11.2
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.1
+  version: 0.6.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
@@ -20,5 +20,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:88f27775fa063ed8595dd46c1c7467f1ee684ea6f68dd47e1198a105757ebcee
-generated: "2026-04-13T20:36:24.921277015Z"
+digest: sha256:d9a1a2c899d5f8cb9cb00d749ea313af889ded789e1d3dadc1df12b7567b9cd1
+generated: "2026-04-10T01:37:28.340143265Z"

clusters/cl01tl/helm/paperless-ngx/Chart.yaml

@@ -28,7 +28,7 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
-    version: 0.6.1
+    version: 0.6.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data

clusters/cl01tl/helm/plex/Chart.yaml

@@ -20,4 +20,4 @@ dependencies:
     version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/plex.png
 # renovate: datasource=github-releases depName=linuxserver/docker-plex
-appVersion: 1.43.1.10611-1e34174b1-ls301
+appVersion: 1.43.1.10576-06378bdcd-ls300

clusters/cl01tl/helm/plex/values.yaml

@@ -22,7 +22,7 @@ plex:
         main:
           image:
             repository: ghcr.io/linuxserver/plex
-            tag: 1.43.1.10611-1e34174b1-ls301@sha256:1dd281365d61fb76fd4474ba67e36ec94d2e8dbc67a8032ba10731c01701c97e
+            tag: 1.43.1.10576-06378bdcd-ls300@sha256:09fe33e5efd991681ea3cbd3e3cb262cd1ae26d4a0145a4141ead284d8f21de6
           env:
             - name: TZ
               value: America/Chicago

clusters/cl01tl/helm/postiz/Chart.lock

@@ -4,7 +4,7 @@ dependencies:
   version: 4.6.2
 - name: temporal
   repository: https://go.temporal.io/helm-charts
-  version: 1.1.0
+  version: 1.0.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.5.0
@@ -13,12 +13,12 @@ dependencies:
   version: 7.11.2
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.1
+  version: 0.6.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:d1b13d32b16492565c0093890ac1d99726b15e5e2b096c28b6a0609eedf71586
-generated: "2026-04-14T17:54:17.434851432Z"
+digest: sha256:baf167465e08bfba842267aeb17c8aacc598342766761ceba7e82839d5952e11
+generated: "2026-04-10T01:37:49.479823098Z"

clusters/cl01tl/helm/postiz/Chart.yaml

@@ -29,7 +29,7 @@ dependencies:
     version: 4.6.2
   - name: temporal
     repository: https://go.temporal.io/helm-charts
-    version: 1.1.0
+    version: 1.0.0
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
     version: 2.5.0
@@ -39,7 +39,7 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
-    version: 0.6.1
+    version: 0.6.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config
@@ -51,4 +51,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/postiz.png
 # renovate: datasource=github-releases depName=gitroomhq/postiz-app
-appVersion: v2.21.6
+appVersion: v2.21.5

clusters/cl01tl/helm/postiz/values.yaml

@@ -8,7 +8,7 @@ postiz:
         main:
           image:
             repository: ghcr.io/gitroomhq/postiz-app
-            tag: v2.21.6@sha256:c140cd81e4b8269e386e149a9595fdc22a0de3b41368ba6767aeb087c1d14257
+            tag: v2.21.4@sha256:a339e9ee256537526d0eda19e5919e01fa7649a40596ebec5d9e1389850836bc
           env:
             - name: JWT_SECRET
               valueFrom:
@@ -150,7 +150,7 @@ temporal:
   server:
     image:
       repository: temporalio/server
-      tag: 1.30.4@sha256:0aacc0c00d079aeaf6797b6e845e3e387746733ee077564bfe57ac847fa56837
+      tag: 1.30.3@sha256:a3d0f727caad0ecca5dc6e94766135aab448551f2c6c0d33d3c67576458e6a0d
     metrics:
       serviceMonitor:
         enabled: true
@@ -224,7 +224,7 @@ temporal:
   admintools:
     image:
       repository: temporalio/admin-tools
-      tag: 1.30.4@sha256:9ac15d500f4020f7cc694ecc17085dfcfc2d4b1d0d2020dbe83b6f3d49e156e0
+      tag: 1.30.3@sha256:2c2272b008f1af295b3719963e6feeef64f838d1105d895cf6acfcf96dd31741
     resources:
       requests:
         cpu: 10m
@@ -232,7 +232,7 @@ temporal:
   web:
     image:
       repository: temporalio/ui
-      tag: 2.48.2@sha256:8625626deb0b2447eff6fc81a1fba1d782c9e41e72d527016f1297a62e715241
+      tag: 2.48.1@sha256:edb5dd1b3e0ddb35611939dde9b573533afd6fbafbbf077b73c7131a30ca91ff
     resources:
       requests:
         cpu: 10m

clusters/cl01tl/helm/radarr-4k/Chart.yaml

@@ -33,4 +33,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/radarr-4k.png
 # renovate: datasource=github-releases depName=linuxserver/docker-radarr
-appVersion: 6.1.1.10360-ls299
+appVersion: 6.1.1.10360-ls298

clusters/cl01tl/helm/radarr-4k/values.yaml

@@ -14,7 +14,7 @@ radarr-4k:
         main:
           image:
             repository: ghcr.io/linuxserver/radarr
-            tag: 6.1.1.10360-ls299@sha256:6f1dda18354ea7f28cead8f6d099fc8222498c3ae165f567d504ed04d70980d7
+            tag: 6.1.1.10360-ls298@sha256:cd70546fc97169788530386b42cf47ba1b16d091b4dc2264cd54099dd13c6f7f
           env:
             - name: TZ
               value: America/Chicago

clusters/cl01tl/helm/radarr-anime/Chart.yaml

@@ -33,4 +33,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/radarr-anime.png
 # renovate: datasource=github-releases depName=linuxserver/docker-radarr
-appVersion: 6.1.1.10360-ls299
+appVersion: 6.1.1.10360-ls298

clusters/cl01tl/helm/radarr-anime/values.yaml

@@ -14,7 +14,7 @@ radarr-anime:
         main:
           image:
             repository: ghcr.io/linuxserver/radarr
-            tag: 6.1.1.10360-ls299@sha256:6f1dda18354ea7f28cead8f6d099fc8222498c3ae165f567d504ed04d70980d7
+            tag: 6.1.1.10360-ls298@sha256:cd70546fc97169788530386b42cf47ba1b16d091b4dc2264cd54099dd13c6f7f
           env:
             - name: TZ
               value: America/Chicago

clusters/cl01tl/helm/radarr-standup/Chart.yaml

@@ -33,4 +33,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/radarr.png
 # renovate: datasource=github-releases depName=linuxserver/docker-radarr
-appVersion: 6.1.1.10360-ls299
+appVersion: 6.1.1.10360-ls298

clusters/cl01tl/helm/radarr-standup/values.yaml

@@ -14,7 +14,7 @@ radarr-standup:
         main:
           image:
             repository: ghcr.io/linuxserver/radarr
-            tag: 6.1.1.10360-ls299@sha256:6f1dda18354ea7f28cead8f6d099fc8222498c3ae165f567d504ed04d70980d7
+            tag: 6.1.1.10360-ls298@sha256:cd70546fc97169788530386b42cf47ba1b16d091b4dc2264cd54099dd13c6f7f
           env:
             - name: TZ
               value: America/Chicago

clusters/cl01tl/helm/radarr/Chart.yaml

@@ -33,4 +33,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/radarr.png
 # renovate: datasource=github-releases depName=linuxserver/docker-radarr
-appVersion: 6.1.1.10360-ls299
+appVersion: 6.1.1.10360-ls298

clusters/cl01tl/helm/radarr/values.yaml

@@ -14,7 +14,7 @@ radarr:
         main:
           image:
             repository: ghcr.io/linuxserver/radarr
-            tag: 6.1.1.10360-ls299@sha256:6f1dda18354ea7f28cead8f6d099fc8222498c3ae165f567d504ed04d70980d7
+            tag: 6.1.1.10360-ls298@sha256:cd70546fc97169788530386b42cf47ba1b16d091b4dc2264cd54099dd13c6f7f
           env:
             - name: TZ
               value: America/Chicago

clusters/cl01tl/helm/reloader/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: reloader
   repository: https://stakater.github.io/stakater-charts
-  version: 2.2.10
-digest: sha256:87ae8d844f1b602a109e306e00b2f06060443fd9ef5d97689e89a84950b9fdd6
-generated: "2026-04-13T20:31:19.310944569Z"
+  version: 2.2.9
+digest: sha256:9926bf770a774f391fae9ec2d8db4bd5f37f5fe14439326da1c1b592795f0d2b
+generated: "2026-03-06T04:03:42.972601201Z"

clusters/cl01tl/helm/reloader/Chart.yaml

@@ -13,8 +13,8 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: reloader
-    version: 2.2.10
+    version: 2.2.9
     repository: https://stakater.github.io/stakater-charts
 icon: https://raw.githubusercontent.com/stakater/Reloader/refs/heads/master/assets/web/reloader.jpg
 # renovate: datasource=github-releases depName=stakater/Reloader
-appVersion: v1.4.15
+appVersion: v1.4.14

clusters/cl01tl/helm/rybbit/values.yaml

@@ -112,7 +112,7 @@ rybbit:
         main:
           image:
             repository: clickhouse/clickhouse-server
-            tag: 26.3.9@sha256:537014a67ce8bf1f5c79c2e2b26fb30b8285a86ffff03875bb14ed17ea35db62
+            tag: 26.3.5@sha256:0115c4aa8d29ef873a533bcebaf5a65ec12815cf3b08b4fe6a20c30d460e8133
           env:
             - name: CLICKHOUSE_DB
               value: analytics

clusters/cl01tl/helm/searxng/values.yaml

@@ -8,7 +8,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:4c6b4f3e1fc10a907a40b7eaaf5b92d50f5b4097d6fb5b02041c0f9926233b36
+            tag: latest@sha256:e86a5bd7537b6eb01176a8bfd53f9b535fe14bcf193d04648b6c0892d7b59d2f
           env:
             - name: SEARXNG_BASE_URL
               value: http://searxng-api.searxng:8080
@@ -36,7 +36,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:4c6b4f3e1fc10a907a40b7eaaf5b92d50f5b4097d6fb5b02041c0f9926233b36
+            tag: latest@sha256:e86a5bd7537b6eb01176a8bfd53f9b535fe14bcf193d04648b6c0892d7b59d2f
           env:
             - name: SEARXNG_BASE_URL
               value: https://searxng.alexlebens.net/

clusters/cl01tl/helm/seerr/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: seerr-chart
   repository: oci://ghcr.io/seerr-team/seerr
-  version: 3.4.2
+  version: 3.4.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:f9f2649fcd5ae23d2e8bedc81c8dec7c65464328901c4fd4e47b00549e315514
-generated: "2026-04-13T18:43:39.927316242Z"
+digest: sha256:821fc73d7411c89f0eba2c35a7a455523dadaa4f9d5149b17b2c96cf594f5e1a
+generated: "2026-04-08T17:24:50.724009386Z"

clusters/cl01tl/helm/seerr/Chart.yaml

@@ -17,11 +17,11 @@ maintainers:
 dependencies:
   - name: seerr-chart
     repository: oci://ghcr.io/seerr-team/seerr
-    version: 3.4.2
+    version: 3.4.1
   - name: volsync-target
     alias: volsync-target-config
     version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/seerr.png
 # renovate: datasource=github-releases depName=seerr-team/seerr
-appVersion: v3.1.1
+appVersion: v3.1.0

clusters/cl01tl/helm/seerr/values.yaml

@@ -2,7 +2,7 @@ seerr-chart:
   image:
     registry: ghcr.io
     repository: seerr-team/seerr
-    tag: v3.1.1
+    tag: v3.1.0
     sha: b35ba0461c4a1033d117ac1e5968fd4cbe777899e4cbfbdeaf3d10a42a0eb7e9
   config:
     persistence:

clusters/cl01tl/helm/site-documentation/values.yaml

@@ -10,7 +10,7 @@ site-documentation:
         main:
           image:
             repository: harbor.alexlebens.net/images/site-documentation
-            tag: 0.25.0@sha256:1509b20e703617ce8e6fc78fa599a56c09be178541adc82da406632f9af15d97
+            tag: 0.24.0@sha256:4de96b40683bdb4998219b38b728a46e821de7ccd28b2ff6cc69ff26a712e7af
           resources:
             requests:
               cpu: 10m

clusters/cl01tl/helm/site-profile/values.yaml

@@ -10,7 +10,7 @@ site-profile:
         main:
           image:
             repository: harbor.alexlebens.net/images/site-profile
-            tag: 3.18.1@sha256:94c120ecd381b4e1568e1fe6619b3472d58870a5a5c5da4bc4b40e0e6b6cbfb1
+            tag: 3.18.0@sha256:1219a291faaaef87761e9f8b0857270165c505d95c0a30325fe4e2be422ba377
           resources:
             requests:
               cpu: 10m

clusters/cl01tl/helm/site-saralebens/values.yaml

@@ -10,7 +10,7 @@ site-saralebens:
         main:
           image:
             repository: harbor.alexlebens.net/images/site-saralebens
-            tag: 1.1.1@sha256:b1a92f492127dd0e6b1756dd6798e72fbc991c7b334c0bec87ba39cb9bb14ee3
+            tag: 1.1.0@sha256:118dd5c65edcc0c77b00bbb6d9c70aab307aa04ba211f3fd74435e9b06c38304
           resources:
             requests:
               cpu: 10m

clusters/cl01tl/helm/sonarr-4k/Chart.yaml

@@ -33,4 +33,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/sonarr.png
 # renovate: datasource=github-releases depName=linuxserver/docker-sonarr
-appVersion: 4.0.17.2952-ls307
+appVersion: 4.0.17.2952-ls306

clusters/cl01tl/helm/sonarr-4k/values.yaml

@@ -13,7 +13,7 @@ sonarr-4k:
         main:
           image:
             repository: ghcr.io/linuxserver/sonarr
-            tag: 4.0.17.2952-ls307@sha256:6854df9de20b8c82e1982604f39473d64dbb4c4584b1013f18f9ade1ee92af13
+            tag: 4.0.17.2952-ls306@sha256:b5670a3adb0f8a8b0f277feeaa69a5fbe3869ba4bb9fa7c0f0764c3b3f0e698f
           env:
             - name: TZ
               value: America/Chicago

clusters/cl01tl/helm/sonarr-anime/Chart.yaml

@@ -33,4 +33,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/sonarr.png
 # renovate: datasource=github-releases depName=linuxserver/docker-sonarr
-appVersion: 4.0.17.2952-ls307
+appVersion: 4.0.17.2952-ls306

clusters/cl01tl/helm/sonarr-anime/values.yaml

@@ -13,7 +13,7 @@ sonarr-anime:
         main:
           image:
             repository: ghcr.io/linuxserver/sonarr
-            tag: 4.0.17.2952-ls307@sha256:6854df9de20b8c82e1982604f39473d64dbb4c4584b1013f18f9ade1ee92af13
+            tag: 4.0.17.2952-ls306@sha256:b5670a3adb0f8a8b0f277feeaa69a5fbe3869ba4bb9fa7c0f0764c3b3f0e698f
           env:
             - name: TZ
               value: America/Chicago

clusters/cl01tl/helm/sonarr/Chart.yaml

@@ -33,4 +33,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/sonarr.png
 # renovate: datasource=github-releases depName=linuxserver/docker-sonarr
-appVersion: 4.0.17.2952-ls307
+appVersion: 4.0.17.2952-ls306

clusters/cl01tl/helm/sonarr/values.yaml

@@ -12,7 +12,7 @@ sonarr:
         main:
           image:
             repository: ghcr.io/linuxserver/sonarr
-            tag: 4.0.17.2952-ls307@sha256:6854df9de20b8c82e1982604f39473d64dbb4c4584b1013f18f9ade1ee92af13
+            tag: 4.0.17.2952-ls306@sha256:b5670a3adb0f8a8b0f277feeaa69a5fbe3869ba4bb9fa7c0f0764c3b3f0e698f
           env:
             - name: TZ
               value: America/Chicago

clusters/cl01tl/helm/sparkyfitness/Chart.lock

@@ -1,12 +0,0 @@
-dependencies:
-- name: sparkyfitness
-  repository: oci://ghcr.io/codewithcj/charts
-  version: 0.16.5-7
-- name: postgres-cluster
-  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.2
-- name: volsync-target
-  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.8.0
-digest: sha256:cbe47d5c90cb22ba40b6de948b0a49733c6ce40b1be92555d5df3f0f1e610950
-generated: "2026-04-13T19:27:44.289967-05:00"

clusters/cl01tl/helm/sparkyfitness/Chart.yaml

@@ -1,32 +0,0 @@
-apiVersion: v2
-name: sparkyfitness
-version: 1.0.0
-description: Sparky Fitness
-keywords:
-  - sparky-fitness
-  - fitness-tracking
-home: https://docs.alexlebens.dev/applications/sparkyfitness/
-sources:
-  - https://github.com/CodeWithCJ/SparkyFitness
-  - https://github.com/CodeWithCJ/SparkyFitness/pkgs/container/sparkyfitness-server
-  - https://github.com/CodeWithCJ/SparkyFitness/pkgs/container/sparkyfitness-frontend
-  - https://github.com/CodeWithCJ/SparkyFitness/tree/main/helm/chart
-  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/postgres-cluster
-  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/volsync-target
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: sparkyfitness
-    version: 0.16.5-7
-    repository: oci://ghcr.io/codewithcj/charts
-  - name: postgres-cluster
-    alias: postgres-18-cluster
-    version: 7.11.2
-    repository: oci://harbor.alexlebens.net/helm-charts
-  - name: volsync-target
-    alias: volsync-target-backup
-    version: 0.8.0
-    repository: oci://harbor.alexlebens.net/helm-charts
-icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/sparkyfitness.png
-# renovate: datasource=github-releases depName=CodeWithCJ/SparkyFitness
-appVersion: v0.16.5.7

clusters/cl01tl/helm/sparkyfitness/templates/external-secret.yaml

@@ -1,46 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: sparkyfitness-key-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: sparkyfitness-key-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: api_encryption_key
-      remoteRef:
-        key: /cl01tl/sparkyfitness/key
-        property: api_encryption_key
-    - secretKey: better_auth_secret
-      remoteRef:
-        key: /cl01tl/sparkyfitness/key
-        property: better_auth_secret
-
----
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: sparkyfitness-oidc-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: sparkyfitness-oidc-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: client_id
-      remoteRef:
-        key: /authentik/oidc/sparkyfitness
-        property: client
-    - secretKey: client_secret
-      remoteRef:
-        key: /authentik/oidc/sparkyfitness
-        property: secret

clusters/cl01tl/helm/sparkyfitness/values.yaml

@@ -1,101 +0,0 @@
-sparkyfitness:
-  config:
-    timezone: America/Chicago
-    allowPrivateNetworkCors: true
-    extraTrustedOrigins: https://sparkyfitness.alexlebens.net
-    oidc:
-      enabled: true
-      providerSlug: sparky-fitness
-      providerName: Authentik
-      issuerUrl: https://authentik.alexlebens.net/application/o/sparky-fitness
-      logoUrl: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/authentik.webp
-      secrets:
-        existingSecret: sparkyfitness-oidc-secret
-  httpRoute:
-    enabled: true
-    hostname: sparkyfitness.alexlebens.net
-    parentRef:
-      name: traefik-gateway
-      namespace: traefik
-  server:
-    image:
-      repository: ghcr.io/codewithcj/sparkyfitness-server
-      tag: v0.16.5.7@sha256:7cdb8cb3ae7f90c7590dac3b92cea3a8e24d51b28eb836a1f6d5201cd45bc080
-    resources:
-      requests:
-        cpu: 100m
-        memory: 200Mi
-      limits:
-        cpu: null
-        memory: null
-    secrets:
-      generate: false
-      existingSecret: sparkyfitness-key-secret
-    appDatabase:
-      existingSecret: sparkyfitness-postgresql-18-cluster-app
-    persistence:
-      backup:
-        size: 5Gi
-        accessMode: ReadWriteOnce
-        storageClass: ceph-block
-      uploads:
-        size: 10Gi
-        accessMode: ReadWriteOnce
-        storageClass: ceph-block
-  frontend:
-    image:
-      repository: ghcr.io/codewithcj/sparkyfitness-frontend
-      tag: v0.16.5.7@sha256:c57a0a07b3470bd0c280d63d02b45adfe7360441b396e9bd445d7b0d22823356
-    resources:
-      requests:
-        cpu: 10m
-        memory: 40Mi
-      limits:
-        cpu: null
-        memory: null
-  postgresql:
-    enabled: false
-  externalDatabase:
-    host: sparkyfitness-postgresql-18-cluster-rw
-    port: 5432
-    database: app
-    auth:
-      existingSecret: sparkyfitness-postgresql-18-cluster-superuser
-postgres-18-cluster:
-  mode: recovery
-  cluster:
-    enableSuperuserAccess: true
-    initdb:
-      postInitTemplateSQL:
-        - CREATE EXTENSION IF NOT EXISTS "uuid-ossp";
-        - CREATE EXTENSION IF NOT EXISTS "pgcrypto";
-        - CREATE EXTENSION IF NOT EXISTS "pg_stat_statements";
-        - GRANT EXECUTE ON ALL FUNCTIONS IN SCHEMA public TO "app" WITH GRANT OPTION;
-  recovery:
-    method: objectStore
-    objectStore:
-      index: 1
-  backup:
-    objectStore:
-      - name: garage-local
-        index: 1
-        destinationBucket: postgres-backups
-        externalSecretCredentialPath: /garage/home-infra/postgres-backups
-        isWALArchiver: true
-    scheduledBackups:
-      - name: live-backup
-        suspend: false
-        immediate: true
-        schedule: "0 0 16 * * *"
-        backupName: garage-local
-volsync-target-backup:
-  pvcTarget: sparkyfitness-server-backup
-  local:
-    enabled: true
-    schedule: 26 11 * * *
-  remote:
-    enabled: true
-    schedule: 26 12 * * *
-  external:
-    enabled: true
-    schedule: 26 13 * * *

clusters/cl01tl/helm/stalwart/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 7.11.2
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.1
+  version: 0.6.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:43cd8aaed427de6d753914a639d497393bea839a37431db8b4461d977299b378
-generated: "2026-04-13T20:37:07.401151724Z"
+digest: sha256:d7c2cebff885977642306d8f55fe9547ab80d26f360986f873f3106789f50083
+generated: "2026-04-10T01:38:12.691274606Z"

clusters/cl01tl/helm/stalwart/Chart.yaml

@@ -26,7 +26,7 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
-    version: 0.6.1
+    version: 0.6.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/tubearchivist/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.6.2
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.1
-digest: sha256:30856a39a1cd1670a9ab26be30c64d82c19e1283e998b9eeab2df058ea28d284
-generated: "2026-04-13T20:37:24.431820385Z"
+  version: 0.6.0
+digest: sha256:2b8f3071852e7025428e57e8460f981fbd9192184ac4afb4cd23ba6b4d90f097
+generated: "2026-04-10T01:38:33.594012137Z"

clusters/cl01tl/helm/tubearchivist/Chart.yaml

@@ -24,7 +24,7 @@ dependencies:
     version: 4.6.2
   - name: valkey
     alias: valkey
-    version: 0.6.1
+    version: 0.6.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/tube-archivist.png
 # renovate: datasource=github-releases depName=tubearchivist/tubearchivist

clusters/cl01tl/helm/vault/templates/external-secret.yaml

@@ -138,20 +138,40 @@ spec:
   data:
     - secretKey: ENVIRONMENT
       remoteRef:
-        key: /cl01tl/vault/unseal
+        key: /cl01tl/vault/unseal/config-1
         property: ENVIRONMENT
+    - secretKey: CHECK_INTERVAL
+      remoteRef:
+        key: /cl01tl/vault/unseal/config-1
+        property: CHECK_INTERVAL
+    - secretKey: MAX_CHECK_INTERVAL
+      remoteRef:
+        key: /cl01tl/vault/unseal/config-1
+        property: MAX_CHECK_INTERVAL
     - secretKey: NODES
       remoteRef:
-        key: /cl01tl/vault/unseal
+        key: /cl01tl/vault/unseal/config-1
         property: NODES
+    - secretKey: TLS_SKIP_VERIFY
+      remoteRef:
+        key: /cl01tl/vault/unseal/config-1
+        property: TLS_SKIP_VERIFY
     - secretKey: TOKENS
       remoteRef:
-        key: /cl01tl/vault/unseal
-        property: TOKENS_1
-    - secretKey: NOTIFY_QUEUE_URLS
+        key: /cl01tl/vault/unseal/config-1
+        property: TOKENS
+    - secretKey: EMAIL_ENABLED
       remoteRef:
-        key: /cl01tl/vault/unseal
-        property: NOTIFY_QUEUE_URLS
+        key: /cl01tl/vault/unseal/config-1
+        property: EMAIL_ENABLED
+    - secretKey: NOTIFY_MAX_ELAPSED
+      remoteRef:
+        key: /cl01tl/vault/unseal/config-1
+        property: NOTIFY_MAX_ELAPSED
+    - secretKey: NOTIFY_QUEUE_DELAY
+      remoteRef:
+        key: /cl01tl/vault/unseal/config-1
+        property: NOTIFY_QUEUE_DELAY
 
 ---
 apiVersion: external-secrets.io/v1
@@ -170,20 +190,40 @@ spec:
   data:
     - secretKey: ENVIRONMENT
       remoteRef:
-        key: /cl01tl/vault/unseal
+        key: /cl01tl/vault/unseal/config-2
         property: ENVIRONMENT
+    - secretKey: CHECK_INTERVAL
+      remoteRef:
+        key: /cl01tl/vault/unseal/config-2
+        property: CHECK_INTERVAL
+    - secretKey: MAX_CHECK_INTERVAL
+      remoteRef:
+        key: /cl01tl/vault/unseal/config-2
+        property: MAX_CHECK_INTERVAL
     - secretKey: NODES
       remoteRef:
-        key: /cl01tl/vault/unseal
+        key: /cl01tl/vault/unseal/config-2
         property: NODES
+    - secretKey: TLS_SKIP_VERIFY
+      remoteRef:
+        key: /cl01tl/vault/unseal/config-2
+        property: TLS_SKIP_VERIFY
     - secretKey: TOKENS
       remoteRef:
-        key: /cl01tl/vault/unseal
-        property: TOKENS_2
-    - secretKey: NOTIFY_QUEUE_URLS
+        key: /cl01tl/vault/unseal/config-2
+        property: TOKENS
+    - secretKey: EMAIL_ENABLED
       remoteRef:
-        key: /cl01tl/vault/unseal
-        property: NOTIFY_QUEUE_URLS
+        key: /cl01tl/vault/unseal/config-2
+        property: EMAIL_ENABLED
+    - secretKey: NOTIFY_MAX_ELAPSED
+      remoteRef:
+        key: /cl01tl/vault/unseal/config-2
+        property: NOTIFY_MAX_ELAPSED
+    - secretKey: NOTIFY_QUEUE_DELAY
+      remoteRef:
+        key: /cl01tl/vault/unseal/config-2
+        property: NOTIFY_QUEUE_DELAY
 
 ---
 apiVersion: external-secrets.io/v1
@@ -202,20 +242,40 @@ spec:
   data:
     - secretKey: ENVIRONMENT
       remoteRef:
-        key: /cl01tl/vault/unseal
+        key: /cl01tl/vault/unseal/config-3
         property: ENVIRONMENT
+    - secretKey: CHECK_INTERVAL
+      remoteRef:
+        key: /cl01tl/vault/unseal/config-3
+        property: CHECK_INTERVAL
+    - secretKey: MAX_CHECK_INTERVAL
+      remoteRef:
+        key: /cl01tl/vault/unseal/config-3
+        property: MAX_CHECK_INTERVAL
     - secretKey: NODES
       remoteRef:
-        key: /cl01tl/vault/unseal
+        key: /cl01tl/vault/unseal/config-3
         property: NODES
+    - secretKey: TLS_SKIP_VERIFY
+      remoteRef:
+        key: /cl01tl/vault/unseal/config-3
+        property: TLS_SKIP_VERIFY
     - secretKey: TOKENS
       remoteRef:
-        key: /cl01tl/vault/unseal
-        property: TOKENS_3
-    - secretKey: NOTIFY_QUEUE_URLS
+        key: /cl01tl/vault/unseal/config-3
+        property: TOKENS
+    - secretKey: EMAIL_ENABLED
       remoteRef:
-        key: /cl01tl/vault/unseal
-        property: NOTIFY_QUEUE_URLS
+        key: /cl01tl/vault/unseal/config-3
+        property: EMAIL_ENABLED
+    - secretKey: NOTIFY_MAX_ELAPSED
+      remoteRef:
+        key: /cl01tl/vault/unseal/config-3
+        property: NOTIFY_MAX_ELAPSED
+    - secretKey: NOTIFY_QUEUE_DELAY
+      remoteRef:
+        key: /cl01tl/vault/unseal/config-3
+        property: NOTIFY_QUEUE_DELAY
 
 ---
 apiVersion: external-secrets.io/v1

clusters/cl01tl/helm/vault/values.yaml

@@ -272,7 +272,7 @@ unseal:
         main:
           image:
             repository: ghcr.io/lrstanley/vault-unseal
-            tag: 1.0.0@sha256:24ca9bceccdb0a22ae57574346dee4bec107c9b849f836811972b8f7f1baa4ef
+            tag: 0.7.2@sha256:b25d0c2f6a73d1b9a3907befa473f08fe9fac828d248d7e9702517c5b967733c
           envFrom:
             - secretRef:
                 name: vault-unseal-config-1
@@ -288,7 +288,7 @@ unseal:
         main:
           image:
             repository: ghcr.io/lrstanley/vault-unseal
-            tag: 1.0.0@sha256:24ca9bceccdb0a22ae57574346dee4bec107c9b849f836811972b8f7f1baa4ef
+            tag: 0.7.2@sha256:b25d0c2f6a73d1b9a3907befa473f08fe9fac828d248d7e9702517c5b967733c
           envFrom:
             - secretRef:
                 name: vault-unseal-config-2
@@ -304,7 +304,7 @@ unseal:
         main:
           image:
             repository: ghcr.io/lrstanley/vault-unseal
-            tag: 1.0.0@sha256:24ca9bceccdb0a22ae57574346dee4bec107c9b849f836811972b8f7f1baa4ef
+            tag: 0.7.2@sha256:b25d0c2f6a73d1b9a3907befa473f08fe9fac828d248d7e9702517c5b967733c
           envFrom:
             - secretRef:
                 name: vault-unseal-config-3

clusters/cl01tl/helm/vaultwarden/Chart.yaml

@@ -33,4 +33,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/vaultwarden.png
 # renovate: datasource=github-releases depName=dani-garcia/vaultwarden
-appVersion: 1.35.7
+appVersion: 1.35.4

clusters/cl01tl/helm/vaultwarden/values.yaml

@@ -8,7 +8,7 @@ vaultwarden:
         main:
           image:
             repository: ghcr.io/dani-garcia/vaultwarden
-            tag: 1.35.7@sha256:9a8eec71f4a52411cc43edc7a50f33e9b6f62b5baca0dd95f0c6e7fd60f1a341
+            tag: 1.35.4@sha256:43498a94b22f9563f2a94b53760ab3e710eefc0d0cac2efda4b12b9eb8690664
           env:
             - name: DOMAIN
               value: https://passwords.alexlebens.dev

clusters/cl01tl/helm/yamtrack/Chart.lock

@@ -7,6 +7,6 @@ dependencies:
   version: 7.11.2
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.6.1
-digest: sha256:2813da7ed0ced5dac8696b7edc36432dd4b5ba6c17bf76f6f68995b6144ea901
-generated: "2026-04-13T20:37:41.085447768Z"
+  version: 0.6.0
+digest: sha256:499d9f4e23d4d10b156c2a41ff0b08570daaed15294f790fddd5248beebfa9fe
+generated: "2026-04-10T01:38:53.59511716Z"

clusters/cl01tl/helm/yamtrack/Chart.yaml

@@ -25,8 +25,8 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
-    version: 0.6.1
+    version: 0.6.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/yamtrack.png
 # renovate: datasource=github-releases depName=FuzzyGrim/Yamtrack
-appVersion: 0.25.1
+appVersion: 0.25.0

clusters/cl01tl/helm/yamtrack/values.yaml

@@ -8,7 +8,7 @@ yamtrack:
         main:
           image:
             repository: ghcr.io/fuzzygrim/yamtrack
-            tag: 0.25.1@sha256:9f40ac038b2bdd7dae7c596f7fa2506ec248fd213857693f4f0008421a2b6ced
+            tag: 0.25.0@sha256:df76008258452a6cda73d971dc4ffbcbca96c5220154a02c9b70bf0bb0e24931
           env:
             - name: TZ
               value: America/Chicago

hosts/ps08rp/blocky/config.yml

@@ -137,7 +137,6 @@ customDNS:
     sonarr                          IN      CNAME   traefik-cl01tl
     sonarr-4k                       IN      CNAME   traefik-cl01tl
     sonarr-anime                    IN      CNAME   traefik-cl01tl
-    sparkyfitness                   IN      CNAME   traefik-cl01tl
     stalwart                        IN      CNAME   traefik-cl01tl
     tdarr                           IN      CNAME   traefik-cl01tl
     tubearchivist                   IN      CNAME   traefik-cl01tl

hosts/ps09rp/blocky/config.yml

@@ -158,7 +158,6 @@ customDNS:
     sonarr                          IN      CNAME   traefik-cl01tl
     sonarr-4k                       IN      CNAME   traefik-cl01tl
     sonarr-anime                    IN      CNAME   traefik-cl01tl
-    sparkyfitness                   IN      CNAME   traefik-cl01tl
     stalwart                        IN      CNAME   traefik-cl01tl
     tdarr                           IN      CNAME   traefik-cl01tl
     tubearchivist                   IN      CNAME   traefik-cl01tl

hosts/ps10rp/komodo-periphery/compose.yaml

@@ -20,7 +20,7 @@ services:
             - /dev/net/tun:/dev/net/tun
 
     komodo-periphery:
-        image: ghcr.io/moghtech/komodo-periphery:2.1.2@sha256:8ac9f2ef9c1461b95c862d445da00253005e7094d1e30f5b7b04b8d60ca7a3d6
+        image: ghcr.io/moghtech/komodo-periphery:2.1.1@sha256:9324baa15d355796fc8ab7fb4a4de7f2904327238100fa78fc2c814ba9d56022
         container_name: komodo-periphery
         init: true
         env_file: