chore(deps): update postgres-cluster docker tag to v7.13.2

.gitea/workflows/lint-test-docker.yaml

@@ -18,7 +18,7 @@ env:
 
 jobs:
   lint-docker-compose:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-js
     steps:
       - name: Checkout
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6

.gitea/workflows/lint-test-helm.yaml

@@ -21,7 +21,7 @@ env:
 
 jobs:
   lint-helm:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-js
     outputs:
       chart-dir: ${{ steps.check-dir-changes.outputs.chart-dir }}
       chart-dir-csv: ${{ steps.check-dir-changes.outputs.chart-dir-csv }}
@@ -231,7 +231,7 @@ jobs:
 
   validate-kubeconform:
     needs: lint-helm
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-js
     if: |
       needs.lint-helm.result == 'success' &&
       needs.lint-helm.outputs.changes-detected == 'true' &&

.gitea/workflows/render-manifests.yaml

@@ -24,7 +24,7 @@ env:
 
 jobs:
   render-manifests:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-js
     if: >-
       github.event_name == 'schedule' ||
       github.event_name == 'workflow_dispatch' ||

.gitea/workflows/renovate.yaml

@@ -12,8 +12,8 @@ on:
 
 jobs:
   renovate:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-js
-    container: ghcr.io/renovatebot/renovate:43.195.0@sha256:47421f2f3f82048e969b5195dd808d5ac2c5f69d43d192191c4a3dca390afe06
+    container: ghcr.io/renovatebot/renovate:43.182.3@sha256:0880115f66a080a15e1debf09c72af806e198a81ef5645270c30e67288907ad0
     steps:
       - name: Checkout
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6

clusters/cl01tl/helm/argocd/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: argo-cd
   repository: https://argoproj.github.io/argo-helm
-  version: 9.5.15
+  version: 9.5.14
-digest: sha256:e9c84de9594f6fb4e05a0f0c1bd87aea8743fcbae08bd8394ea785c167dfcc11
+digest: sha256:5cae964bb988089467bc5c46badbe33b67f64abd039f5961e66e412a5c7004a7
-generated: "2026-05-22T01:09:44.579860771Z"
+generated: "2026-05-13T17:58:34.736881783Z"

clusters/cl01tl/helm/argocd/Chart.yaml

@@ -13,7 +13,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: argo-cd
-    version: 9.5.15
+    version: 9.5.14
     repository: https://argoproj.github.io/argo-helm
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 # renovate: datasource=github-releases depName=argoproj/argo-cd

clusters/cl01tl/helm/audiobookshelf/Chart.yaml

@@ -32,4 +32,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/audiobookshelf.png
 # renovate: datasource=github-releases depName=advplyr/audiobookshelf
-appVersion: 2.35.0
+appVersion: 2.34.0

clusters/cl01tl/helm/audiobookshelf/values.yaml

@@ -6,15 +6,13 @@ audiobookshelf:
       strategy: Recreate
       pod:
         securityContext:
-          runAsUser: 1000
-          runAsGroup: 1000
           fsGroup: 1000
           fsGroupChangePolicy: OnRootMismatch
       containers:
         main:
           image:
             repository: ghcr.io/advplyr/audiobookshelf
-            tag: 2.35.0@sha256:89276ff2e0b3d2f07dd334b641f27a34ab7f02e1047c60b7b8a30126cb0813a5
+            tag: 2.34.0@sha256:4143292c530f6ac6700afd13360c04f477e4f1a81c1c97c4224b1c7e4330c5c4
           env:
             - name: TZ
               value: America/Chicago
@@ -30,9 +28,9 @@ audiobookshelf:
             - name: TZ
               value: America/Chicago
             - name: PGID
-              value: 1000
+              value: "1000"
             - name: PUID
-              value: 1000
+              value: "1000"
             - name: APPRISE_STORAGE_MODE
               value: memory
             - name: APPRISE_STATEFUL_MODE

clusters/cl01tl/helm/authentik/Chart.lock

@@ -1,15 +1,15 @@
 dependencies:
 - name: authentik
   repository: https://charts.goauthentik.io/
-  version: 2026.5.0
+  version: 2026.2.3
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 3.3.1
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.15.0
+  version: 7.13.2
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.9.0
+  version: 0.8.0
-digest: sha256:8688b819ca57468c53821b0bda7e1ae21cf7fd3570724c2bf2bce52e88c20171
+digest: sha256:85f2ae934f85e58fdaac3a938f14a380a677e68a83d6f845e7fd50798c118fdc
-generated: "2026-05-22T19:44:38.634358324Z"
+generated: "2026-05-18T10:11:31.015884207Z"

clusters/cl01tl/helm/authentik/Chart.yaml

@@ -18,18 +18,18 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: authentik
-    version: 2026.5.0
+    version: 2026.2.3
     repository: https://charts.goauthentik.io/
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
     version: 3.3.1
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.15.0
+    version: 7.13.2
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
-    version: 0.9.0
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/authentik.png
 # renovate: datasource=github-releases depName=goauthentik/authentik

clusters/cl01tl/helm/authentik/values.yaml

@@ -77,6 +77,10 @@ authentik:
       enabled: true
 postgres-18-cluster:
   mode: recovery
+  cluster:
+    resources:
+      requests:
+        memory: 150Mi
   recovery:
     method: objectStore
     objectStore:

clusters/cl01tl/helm/blocky/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 5.0.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.9.0
+  version: 0.8.0
-digest: sha256:a78dcd753753806ee7b5e81380676bc289c6f196e4e4b968f1d8f71efa8556b0
+digest: sha256:adbf5c062f0be520b579854a9ec75e6932b472508d9b1ec7277bacc3940c20e9
-generated: "2026-05-21T20:05:26.87528061Z"
+generated: "2026-05-15T00:29:14.40707075Z"

clusters/cl01tl/helm/blocky/Chart.yaml

@@ -20,8 +20,8 @@ dependencies:
     version: 5.0.1
   - name: valkey
     alias: valkey
-    version: 0.9.0
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/blocky.png
 # renovate: datasource=github-releases depName=0xerr0r/blocky
-appVersion: v0.30.0
+appVersion: v0.29.0

clusters/cl01tl/helm/blocky/values.yaml

@@ -8,7 +8,7 @@ blocky:
         main:
           image:
             repository: ghcr.io/0xerr0r/blocky
-            tag: v0.30.0@sha256:d9f15eddffedded40797406349012cbd5966ef99c286b13321e7a76efddb9bdc
+            tag: v0.29.0@sha256:a6d99f323d3036a99a3767a52ad612f4d8f3f31167492bfc14d4ea57b24cdfd0
           env:
             - name: TZ
               value: America/Chicago
@@ -164,6 +164,7 @@ blocky:
               sparkyfitness                   IN      CNAME   traefik-cl01tl
               tdarr                           IN      CNAME   traefik-cl01tl
               tubearchivist                   IN      CNAME   traefik-cl01tl
+              vault                           IN      CNAME   traefik-cl01tl
               whodb                           IN      CNAME   traefik-cl01tl
               yamtrack                        IN      CNAME   traefik-cl01tl
               yubal                           IN      CNAME   traefik-cl01tl

clusters/cl01tl/helm/cloudnative-pg/values.yaml

@@ -53,7 +53,7 @@ rclone-postgres-backups-external:
       bucketName: postgres-backups-775957147abfbc73
   prune:
     enabled: true
-    ageToPrune: 14d
+    ageToPrune: 45d
     include: "/cl01tl/*/*/*/base/**"
     exclude: "**/walls/**"
   secret:

clusters/cl01tl/helm/dawarich/Chart.lock

@@ -4,10 +4,10 @@ dependencies:
   version: 5.0.1
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.15.0
+  version: 7.13.2
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.9.0
+  version: 0.8.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
@@ -17,5 +17,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
-digest: sha256:cd2b6d78d834baba995997c9e2c867012ffe555dc3bea4d59bef416875f71433
+digest: sha256:e9aeb312208bbe325024bb7ab9fdb804366720dac850d3ad4f91139f0d187d69
-generated: "2026-05-21T20:05:51.237084324Z"
+generated: "2026-05-18T10:11:49.231847203Z"

clusters/cl01tl/helm/dawarich/Chart.yaml

@@ -22,11 +22,11 @@ dependencies:
     version: 5.0.1
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.15.0
+    version: 7.13.2
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
-    version: 0.9.0
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-storage
@@ -42,4 +42,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/dawarich.png
 # renovate: datasource=github-releases depName=Freika/dawarich
-appVersion: 1.7.9
+appVersion: 1.7.8

clusters/cl01tl/helm/dawarich/values.yaml

@@ -8,7 +8,7 @@ dawarich:
         main:
           image:
             repository: freikin/dawarich
-            tag: 1.7.9@sha256:54329b050caab65f39367308ef7a9f2f3bd1fa3b6ba969d6a33bbf4a0f5e7e84
+            tag: 1.7.8@sha256:dea326d03e728cd3b8d051b72d293cf375d0db6c00e22c55f338daedfdfdb3a4
           command:
             - "web-entrypoint.sh"
           args:
@@ -136,7 +136,7 @@ dawarich:
         sidekiq:
           image:
             repository: freikin/dawarich
-            tag: 1.7.9@sha256:54329b050caab65f39367308ef7a9f2f3bd1fa3b6ba969d6a33bbf4a0f5e7e84
+            tag: 1.7.8@sha256:dea326d03e728cd3b8d051b72d293cf375d0db6c00e22c55f338daedfdfdb3a4
           command:
             - "sidekiq-entrypoint.sh"
           args:

clusters/cl01tl/helm/descheduler/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: descheduler
   repository: https://kubernetes-sigs.github.io/descheduler/
-  version: 0.36.0
+  version: 0.35.1
-digest: sha256:9abc2ea808e38a19d8c153ec962d8d5fd6b28b699aeccf32a1941d2b73394184
+digest: sha256:ed7cc8068b83ac483fda3a781227b35e12a34abdca214b5490e7036c89db1a95
-generated: "2026-05-20T13:05:28.892962974Z"
+generated: "2026-03-09T21:21:45.788316167Z"

clusters/cl01tl/helm/descheduler/Chart.yaml

@@ -14,8 +14,8 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: descheduler
-    version: 0.36.0
+    version: 0.35.1
     repository: https://kubernetes-sigs.github.io/descheduler/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 # renovate: datasource=github-releases depName=kubernetes-sigs/descheduler
-appVersion: vv0.36.0
+appVersion: v0.35.1

clusters/cl01tl/helm/descheduler/values.yaml

@@ -1,7 +1,7 @@
 descheduler:
   image:
     repository: registry.k8s.io/descheduler/descheduler
-    tag: v0.36.0@sha256:7ca92c0a7b4f1c51d306409da6b832005fcadb224e384795646376726734c6e5
+    tag: v0.35.1@sha256:871d3b804390b0b8c7cb09d4e9b7856cf30e31f9e9e3d29562b0301a10453bb1
   kind: Deployment
   resources:
     limits:

clusters/cl01tl/helm/directus/Chart.lock

@@ -4,15 +4,15 @@ dependencies:
   version: 5.0.1
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.15.0
+  version: 7.13.2
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.9.0
+  version: 0.8.0
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.11.4
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.11.4
-digest: sha256:6a2d1c3824f01c94572919dc58c3c72267373506979aa7566b138159d4389252
+digest: sha256:e9e5a81f0a3c9f63fbb76fddf01115beec1c5c4f8c3127b4125a92c6b627de8f
-generated: "2026-05-21T20:06:21.441505828Z"
+generated: "2026-05-18T10:12:07.663128653Z"

clusters/cl01tl/helm/directus/Chart.yaml

@@ -22,11 +22,11 @@ dependencies:
     version: 5.0.1
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.15.0
+    version: 7.13.2
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
-    version: 0.9.0
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: rclone-bucket
     alias: rclone-directus-assets-remote

clusters/cl01tl/helm/eraser/values.yaml

@@ -50,7 +50,7 @@ eraser-metrics:
         main:
           image:
             repository: ghcr.io/open-telemetry/opentelemetry-collector-releases/opentelemetry-collector
-            tag: 0.152.1@sha256:c5cde41675a68e392322140d25fa232b4585e4e7fdc5f8c39d61d968bc13dae6
+            tag: 0.152.0@sha256:f358f8028c6eb44f765444de1c8899b4f97d7ba54be5264a8753f2c182bc5757
           command:
             - /otelcol
             - --config=/conf/otel-collector-config.yaml

clusters/cl01tl/helm/foldergram/Chart.yaml

@@ -28,4 +28,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://raw.githubusercontent.com/foldergram/foldergram/refs/heads/main/client/public/icon-512.png
 # renovate: datasource=github-releases depName=foldergram/foldergram
-appVersion: v1.2.0
+appVersion: v1.1.0

clusters/cl01tl/helm/foldergram/values.yaml

@@ -12,7 +12,7 @@ foldergram:
         main:
           image:
             repository: ghcr.io/foldergram/foldergram
-            tag: 1.2.0@sha256:325e7fcd257cbecaf29a8623cebcbf6f7935fe90454160adf0a43e0a0fcddb91
+            tag: 1.1.0@sha256:b08c7f30a15a3d3e4cf0877a5271cb76be6a36ab83751f040c115ccdb76b736a
           env:
             - name: IMAGE_DETAIL_SOURCE
               value: original

clusters/cl01tl/helm/freshrss/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 3.3.1
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.15.0
+  version: 7.13.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
-digest: sha256:84e460d3ab6bb300c80858d3261d8a8e4395e3e1d099b7aed4f9e8d68dca54ac
+digest: sha256:b5ac2401a011c28e9a8ff5b7999ff2fd8a89b0cb24aad746d92a7bbcb3d23e5c
-generated: "2026-05-19T16:29:45.768206873Z"
+generated: "2026-05-18T10:12:28.046717594Z"

clusters/cl01tl/helm/freshrss/Chart.yaml

@@ -25,7 +25,7 @@ dependencies:
     version: 3.3.1
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.15.0
+    version: 7.13.2
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data
@@ -33,4 +33,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/freshrss.png
 # renovate: datasource=github-releases depName=FreshRSS/FreshRSS
-appVersion: 1.29.1
+appVersion: 1.29.0

clusters/cl01tl/helm/freshrss/values.yaml

@@ -8,7 +8,7 @@ freshrss:
         main:
           image:
             repository: freshrss/freshrss
-            tag: 1.29.1@sha256:ab6b363102ccdbc39f6a62db926f567c61a5289bf25ba460f1c34423d8cc1a4d
+            tag: 1.29.0@sha256:cca8988d05cd449e1c6c69405971b1e6fc2c2116ceeb45c9fa3fc33837997a75
           env:
             - name: PGID
               value: "568"

clusters/cl01tl/helm/gatus/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 1.5.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.15.0
+  version: 7.13.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
-digest: sha256:6e5cf76d66ca20457d663526d2922d200ce2e38223d564b0b6dfa6ef2179abe7
+digest: sha256:f82c3599b226fe769a2620552319ad1e9a07b4b9899fca80992d84048632e26b
-generated: "2026-05-19T16:30:05.366292277Z"
+generated: "2026-05-18T10:12:48.563818592Z"

clusters/cl01tl/helm/gatus/Chart.yaml

@@ -20,7 +20,7 @@ dependencies:
     version: 1.5.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.15.0
+    version: 7.13.2
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data
@@ -28,4 +28,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/gatus.png
 # renovate: datasource=github-releases depName=TwiN/gatus
-appVersion: v5.36.0
+appVersion: v5.35.0

clusters/cl01tl/helm/gatus/values.yaml

@@ -3,7 +3,7 @@ gatus:
     strategy: Recreate
   image:
     repository: ghcr.io/twin/gatus
-    tag: v5.36.0@sha256:c5f210d095fa78e6efaa20ffeb14803f2ba4f10615e16a6d12087697149617f0
+    tag: v5.35.0@sha256:21609f31be8c4e680ce3004b24276305666239c99aff58391503f3fb6142f39d
   annotations:
     reloader.stakater.com/auto: "true"
   gateway:
@@ -92,7 +92,6 @@ gatus:
         scopes: [openid]
     storage:
       type: postgres
-      caching: true
       path: "postgres://${POSTGRES_USER}:${POSTGRES_PASSWORD}@${POSTGRES_HOST}:${POSTGRES_PORT}/${POSTGRES_DB}?sslmode=disable"
     default-endpoint: &defaults
       group: core
@@ -258,6 +257,9 @@ gatus:
       - name: whodb
         url: https://whodb.alexlebens.net
         <<: *defaults
+      - name: vault
+        url: https://vault.alexlebens.net
+        <<: *defaults
       - name: openbao
         url: https://bao.alexlebens.net
         <<: *defaults

clusters/cl01tl/helm/generic-device-plugin/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: generic-device-plugin
   repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-  version: 0.21.6
+  version: 0.21.5
-digest: sha256:a2cdefb5c528e5c7045ae3e3bc1ebd9932ef0333fe8d72905e8f3ec3731c9dea
+digest: sha256:251f49de55063d4b8cd0b035cc18f6ad10798975c7817c15d00c4adee003cbd9
-generated: "2026-05-19T15:06:32.886164281Z"
+generated: "2026-05-17T01:21:31.249733118Z"

clusters/cl01tl/helm/generic-device-plugin/Chart.yaml

@@ -14,6 +14,6 @@ maintainers:
 dependencies:
   - name: generic-device-plugin
     repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-    version: 0.21.6
+    version: 0.21.5
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 appVersion: 1.0.0

clusters/cl01tl/helm/gitea/Chart.lock

@@ -4,7 +4,7 @@ dependencies:
   version: 12.6.0
 - name: actions
   repository: https://dl.gitea.com/charts/
-  version: 0.1.1
+  version: 0.1.0
 - name: meilisearch
   repository: https://meilisearch.github.io/meilisearch-kubernetes
   version: 0.32.0
@@ -13,15 +13,15 @@ dependencies:
   version: 3.3.1
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.15.0
+  version: 7.13.2
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.9.0
+  version: 0.8.0
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.9.0
+  version: 0.8.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
-digest: sha256:c6dbbe309deaa50180021a1bd54a16425591f7081c07165db22c971abfd86ee3
+digest: sha256:e8cc040e977de44dbeee0246221553ed4958d5e0b2ca95759fc724ca315d138b
-generated: "2026-05-22T01:09:01.919731791Z"
+generated: "2026-05-17T22:17:22.170622-05:00"

clusters/cl01tl/helm/gitea/Chart.yaml

@@ -31,7 +31,7 @@ dependencies:
   - name: actions
     alias: gitea-actions
     repository: https://dl.gitea.com/charts/
-    version: 0.1.1
+    version: 0.1.0
   - name: meilisearch
     version: 0.32.0
     repository: https://meilisearch.github.io/meilisearch-kubernetes
@@ -40,15 +40,15 @@ dependencies:
     version: 3.3.1
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.15.0
+    version: 7.13.2
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey-gitea
-    version: 0.9.0
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey-renovate
-    version: 0.9.0
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-storage
@@ -56,4 +56,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/gitea.png
 # renovate: datasource=github-releases depName=go-gitea/gitea
-appVersion: 1.26.2
+appVersion: 1.26.1

clusters/cl01tl/helm/gitea/values.yaml

@@ -9,7 +9,7 @@ gitea:
       maxUnavailable: 1
   image:
     repository: gitea/gitea
-    tag: 1.26.2
+    tag: 1.26.1
   service:
     http:
       type: ClusterIP
@@ -190,11 +190,11 @@ gitea-actions:
               resources:
                 requests:
                   storage: 50Gi
-    runner:
+    actRunner:
       registry: docker.io
-      repository: gitea/runner
+      repository: gitea/act_runner
-      # renovate: datasource=docker depName=gitea/runner
+      # renovate: datasource=docker depName=gitea/act_runner
-      tag: 1.0.6@sha256:ab581a3e1a260efa0521886ad8051f0e8c4ff1f1d52aa8ef0a2e3ad7465f8b74
+      tag: 0.6.1@sha256:b5c35d6bdbb9bb25e531230bfc7cc663cb751406cbec90a2a891b85fea54de86
       extraVolumeMounts:
         - name: workspace-vol
           mountPath: /workspace
@@ -212,7 +212,7 @@ gitea-actions:
       registry: docker.io
       repository: docker
       # renovate: datasource=docker depName=docker
-      tag: 29.5.2-dind@sha256:6b9cd914eb9c6b342c040a49a27a5eb3804453bae6ecc90f7ff96133595a95e8
+      tag: 29.5.0-dind@sha256:8e3fae900cbfbdc14e8abca89a9e44363065cb535f34a09283c59cc0dde2de20
       extraVolumeMounts:
         - name: docker-vol
           mountPath: /var/lib/docker
@@ -224,7 +224,7 @@ gitea-actions:
       registry: docker.io
       repository: busybox
       # renovate: datasource=docker depName=busybox
-      tag: 1.38.0@sha256:b6762ddf4a50aabb5f4d21aa6f447d05d5633fb09f09c08b33f22356a2f98be0
+      tag: 1.37.0@sha256:1487d0af5f52b4ba31c7e465126ee2123fe3f2305d638e7827681e7cf6c83d5e
   existingSecret: gitea-runner-secret
   existingSecretKey: token
   giteaRootURL: http://gitea-http.gitea:3000

clusters/cl01tl/helm/grafana-operator/Chart.lock

@@ -1,15 +1,15 @@
 dependencies:
 - name: grafana-operator
   repository: https://grafana.github.io/helm-charts
-  version: 5.23.0
+  version: 5.22.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.15.0
+  version: 7.13.2
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.9.0
+  version: 0.8.0
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.9.0
+  version: 0.8.0
-digest: sha256:8e441f3d69aa8b4186265cd7b265d75f6faae8883fb4ecb8d23db2d61ec2a954
+digest: sha256:afaaa565e4d8c3d628ab0b0a149fa4cc8cf1353b291e38b50da47f764377cc05
-generated: "2026-05-22T00:24:27.626131121Z"
+generated: "2026-05-18T10:13:10.689076001Z"

clusters/cl01tl/helm/grafana-operator/Chart.yaml

@@ -16,20 +16,20 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: grafana-operator
-    version: 5.23.0
+    version: 5.22.2
     repository: https://grafana.github.io/helm-charts
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.15.0
+    version: 7.13.2
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey-unified-alerting
-    version: 0.9.0
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey-remote-cache
-    version: 0.9.0
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/grafana.png
 # renovate: datasource=github-releases depName=grafana/grafana-operator
-appVersion: v5.23.0
+appVersion: v5.22.2

clusters/cl01tl/helm/grafana-operator/templates/grafana-dashboard.yaml

@@ -591,6 +591,24 @@ spec:
   resyncPeriod: 6h
   url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/platform/rclone.json
 
+---
+apiVersion: grafana.integreatly.org/v1beta1
+kind: GrafanaDashboard
+metadata:
+  name: grafana-dashboard-vault
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: grafana-dashboard-vault
+    {{- include "custom.labels" . | nindent 4 }}
+spec:
+  instanceSelector:
+    matchLabels:
+      app: grafana-main
+  contentCacheDuration: 6h
+  folderUID: grafana-folder-platform
+  resyncPeriod: 6h
+  url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/platform/vault.json
+
 ---
 apiVersion: grafana.integreatly.org/v1beta1
 kind: GrafanaDashboard

clusters/cl01tl/helm/grafana-operator/values.yaml

@@ -3,7 +3,7 @@ grafana-operator:
     registry: ghcr.io
     repository: grafana/grafana-operator
     # renovate: datasource=docker depName=ghcr.io/grafana/grafana-operator
-    tag: v5.23.0@sha256:3abeaccdf54e9e02c2f4b6215be594c8f78b94a866961ada7f92b677bf33c9b4
+    tag: v5.22.2@sha256:d45fc24e8f43d83286d81625ee8d919d0fc88255a6500b63f68d7966a4f9e9af
   replicas: 2
   resources:
     requests:

clusters/cl01tl/helm/harbor/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 1.19.0
 - name: postgres-cluster
   repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
-  version: 7.15.0
+  version: 7.13.2
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.9.0
+  version: 0.8.0
-digest: sha256:3f12966ac47aa1912f222875b5dedce047de094768e43082aaa0b85f3c2a366d
+digest: sha256:b6ea5b415a49f4aac1e9c6d61920d38dcea7c4de83f7f18fc2fa882c795874a9
-generated: "2026-05-21T20:07:47.472198246Z"
+generated: "2026-05-18T10:13:33.502140238Z"

clusters/cl01tl/helm/harbor/Chart.yaml

@@ -20,11 +20,11 @@ dependencies:
     repository: https://helm.goharbor.io
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.15.0
+    version: 7.13.2
     repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
   - name: valkey
     alias: valkey
-    version: 0.9.0
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/harbor.png
 # renovate: datasource=github-releases depName=goharbor/harbor

clusters/cl01tl/helm/harbor/values.yaml

@@ -18,7 +18,7 @@ harbor:
       registry:
         storageClass: ceph-block
         accessMode: ReadWriteOnce
-        size: 200Gi
+        size: 100Gi
   existingSecretAdminPassword: harbor-secret
   existingSecretAdminPasswordKey: HARBOR_ADMIN_PASSWORD
   ipFamily:

clusters/cl01tl/helm/home-assistant/Chart.yaml

@@ -24,4 +24,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/home-assistant.png
 # renovate: datasource=github-releases depName=home-assistant/core
-appVersion: 2026.5.4
+appVersion: 2026.5.2

clusters/cl01tl/helm/home-assistant/values.yaml

@@ -12,7 +12,7 @@ home-assistant:
         main:
           image:
             repository: ghcr.io/home-assistant/home-assistant
-            tag: 2026.5.4@sha256:ceb1202133a5a036e8b03e20a10eb113186cc2f871968323c6fc6c3fc4205716
+            tag: 2026.5.2@sha256:f0baa7922ecec7790c40c41baf08ab218b6ab8db5f96dc03b03a0ae33d987c3d
           env:
             - name: TZ
               value: America/Chicago
@@ -23,7 +23,7 @@ home-assistant:
         code-server:
           image:
             repository: ghcr.io/linuxserver/code-server
-            tag: 4.121.0-ls339@sha256:9aa515147487869f15421944069674ac9797ad4c0629041fd9a003f95b796d6c
+            tag: 4.118.0-ls336@sha256:6e542034343228a692e0b24f12cbcc8ade3650ec1e2c9e195bc291f2bf024e3c
           env:
             - name: TZ
               value: America/Chicago

clusters/cl01tl/helm/homepage/values.yaml

@@ -601,6 +601,18 @@ homepage:
                   href: https://whodb.alexlebens.net
                   siteMonitor: http://whodb.whodb:80
                   statusStyle: dot
+              - Secrets:
+                  icon: sh-hashicorp-vault.webp
+                  description: Vault
+                  href: https://vault.alexlebens.net
+                  siteMonitor: http://vault.vault:8200
+                  statusStyle: dot
+                  namespace: vault
+                  app: vault
+                  podSelector: >-
+                      app.kubernetes.io/instance in (
+                          vault
+                      )
               - Secrets:
                   icon: sh-openbao.webp
                   description: OpenBao

clusters/cl01tl/helm/immich/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 5.0.1
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.15.0
+  version: 7.13.2
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.9.0
+  version: 0.8.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
-digest: sha256:61c7ed165fd02bd41fc1703b3b213c68cdbae746576ffeedbec35725db4c7e76
+digest: sha256:02b640ac73da51519f4054feb19c264a4444150e690687d0af48d69dd01eadf4
-generated: "2026-05-21T20:08:09.249760256Z"
+generated: "2026-05-18T10:13:56.026480642Z"

clusters/cl01tl/helm/immich/Chart.yaml

@@ -21,11 +21,11 @@ dependencies:
     version: 5.0.1
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.15.0
+    version: 7.13.2
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
-    version: 0.9.0
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data

clusters/cl01tl/helm/immich/values.yaml

@@ -167,8 +167,10 @@ postgres-18-cluster:
   cluster:
     image:
       repository: ghcr.io/tensorchord/cloudnative-vectorchord
-      tag: 18.3-1.1.1
+      tag: 18.0-0.5.3
     postgresql:
+      parameters:
+        shared_buffers: 256MB
       shared_preload_libraries:
         - "vchord.so"
     initdb:

clusters/cl01tl/helm/jellyfin/Chart.yaml

@@ -30,4 +30,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/jellyfin.png
 # renovate: datasource=github-releases depName=jellyfin/jellyfin
-appVersion: 10.11.9
+appVersion: 10.11.8

clusters/cl01tl/helm/jellyfin/values.yaml

@@ -22,7 +22,7 @@ jellyfin:
         main:
           image:
             repository: ghcr.io/jellyfin/jellyfin
-            tag: 10.11.9@sha256:ef4d95143a5475d1ba4d9a6983342cac300044d676a30648b7d0e0688961712a
+            tag: 10.11.8@sha256:93227545077893cc9516f28b3adb733b67bc4691f41b6167428a2a0e3220b81c
           env:
             - name: TZ
               value: America/Chicago
@@ -97,7 +97,7 @@ jellyfin:
       forceRename: jellyfin-config
       storageClass: ceph-block
       accessMode: ReadWriteOnce
-      size: 200Gi
+      size: 100Gi
       advancedMounts:
         main:
           main:

clusters/cl01tl/helm/jellystat/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 5.0.1
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.15.0
+  version: 7.13.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
-digest: sha256:a2b85a4c82c14ebd8c5a1d2234eefe738ce762162b89f77760380b28500d395e
+digest: sha256:ee1aeb6acb2724b727287e86b29ccc5e66416175ffedaaa7f098e036be66aa9f
-generated: "2026-05-19T16:30:56.96102133Z"
+generated: "2026-05-18T10:14:14.960539645Z"

clusters/cl01tl/helm/jellystat/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     version: 5.0.1
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.15.0
+    version: 7.13.2
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data

clusters/cl01tl/helm/komodo/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 5.0.1
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.15.0
+  version: 7.13.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
-digest: sha256:31cc26b2ebd4c249165621445a389c136ecff8d1f95b88d8f0fe1631be395b4c
+digest: sha256:9fd7f807198d557e4f55ffb01c791eaa0e1a57653f22dc2e1e8e72b984c64fda
-generated: "2026-05-18T19:59:09.154172-05:00"
+generated: "2026-05-18T10:14:36.852879874Z"

clusters/cl01tl/helm/komodo/Chart.yaml

@@ -23,7 +23,7 @@ dependencies:
     version: 5.0.1
   - name: postgres-cluster
     alias: postgresql-17-fdb-cluster
-    version: 7.15.0
+    version: 7.13.2
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-keys

clusters/cl01tl/helm/komodo/values.yaml

@@ -10,6 +10,8 @@ komodo:
             repository: ghcr.io/moghtech/komodo-core
             tag: 2.2.0@sha256:833880ca8b1a6c1c133efb07e8633525bf63094b4faa72700cf52f60fd69e6c6
           env:
+            - name: COMPOSE_LOGGING_DRIVER
+              value: local
             - name: KOMODO_HOST
               value: https://komodo.alexlebens.net
             - name: KOMODO_TITLE
@@ -20,13 +22,9 @@ komodo:
                   name: komodo-secret
                   key: passkey
             - name: KOMODO_MONITORING_INTERVAL
-              value: 5-min
+              value: 15-sec
             - name: KOMODO_RESOURCE_POLL_INTERVAL
-              value: 3-hr
+              value: 5-min
-            - name: KOMODO_KEEP_STATS_FOR_DAYS
-              value: 3
-            - name: KOMODO_KEEP_ALERTS_FOR_DAYS
-              value: 3
             - name: KOMODO_PASSKEY
               valueFrom:
                 secretKeyRef:
@@ -186,6 +184,9 @@ postgresql-17-fdb-cluster:
         documentdb.enableBypassDocumentValidation: "true"
         documentdb.enableUserCrud: "true"
         documentdb.maxUserLimit: "100"
+        shared_buffers: 128MB
+        max_slot_wal_keep_size: 2000MB
+        hot_standby_feedback: "on"
       pg_hba:
         - host ferretDB postgres localhost trust
         - host ferretDB ferret localhost trust

clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock

@@ -1,7 +1,7 @@
 dependencies:
 - name: kube-prometheus-stack
   repository: oci://ghcr.io/prometheus-community/charts
-  version: 85.3.0
+  version: 85.1.3
 - name: prometheus-operator-crds
   repository: oci://ghcr.io/prometheus-community/charts
   version: 29.0.0
@@ -10,6 +10,6 @@ dependencies:
   version: 5.0.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.9.0
+  version: 0.8.0
-digest: sha256:01c56752d357b60d032c1b6d31d6ba67a6e340c78f2fe642092ef280fe231af7
+digest: sha256:67a7c994af3e36ed3668123a1c5add5144e5460149dce40e7686e71c79c5123a
-generated: "2026-05-23T05:02:47.998164467Z"
+generated: "2026-05-17T15:05:47.249164073Z"

clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml

@@ -20,7 +20,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: kube-prometheus-stack
-    version: 85.3.0
+    version: 85.1.3
     repository: oci://ghcr.io/prometheus-community/charts
   - name: prometheus-operator-crds
     version: 29.0.0
@@ -31,7 +31,7 @@ dependencies:
     version: 5.0.1
   - name: valkey
     alias: valkey
-    version: 0.9.0
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/prometheus.png
 # renovate: datasource=github-releases depName=prometheus-operator/prometheus-operator

clusters/cl01tl/helm/kubelet-serving-cert-approver/Chart.yaml

@@ -19,4 +19,4 @@ dependencies:
     version: 5.0.1
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 # renovate: datasource=github-releases depName=alex1989hu/kubelet-serving-cert-approver
-appVersion: 0.11.0
+appVersion: 0.10.3

clusters/cl01tl/helm/kubelet-serving-cert-approver/values.yaml

@@ -35,7 +35,7 @@ kubelet-serving-cert-approver:
         main:
           image:
             repository: ghcr.io/alex1989hu/kubelet-serving-cert-approver
-            tag: 0.11.0@sha256:f17017b53983fe93f5a07ef85b2e448b9e4be848d45f05c325c8f2c77e1171c4
+            tag: 0.10.3@sha256:4cdc92140c48341433513dce3201806309d5256cfbac6f830feae1e7e9fb0d7d
           args:
             - serve
           env:

clusters/cl01tl/helm/libation/Chart.yaml

@@ -26,4 +26,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/libation.png
 # renovate: datasource=github-releases depName=rmcrackan/Libation
-appVersion: 13.4.3
+appVersion: 13.4.1

clusters/cl01tl/helm/libation/values.yaml

@@ -12,7 +12,7 @@ libation:
         main:
           image:
             repository: rmcrackan/libation
-            tag: 13.4.3@sha256:51ba31d839c60599185684615564618dbb669ace677254f56e8419b1ef19c603
+            tag: 13.4.1@sha256:41cf509a8a1592c01c37cb4dc0d5a2e0c84faab20ecd8927f6bb3d73b237981b
           env:
             - name: SLEEP_TIME
               value: "-1"

clusters/cl01tl/helm/lidarr/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 5.0.1
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.15.0
+  version: 7.13.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
-digest: sha256:e6401b3fddac7fa0560dfe632356aa42f6fb8469fefe48e0022e02aa2aeac3c7
+digest: sha256:70485bed1d8d1e9634aa33518bc780942c72c26e2d541ec4a77c256c5ce38416
-generated: "2026-05-19T16:31:10.724669583Z"
+generated: "2026-05-18T10:14:57.468960653Z"

clusters/cl01tl/helm/lidarr/Chart.yaml

@@ -25,7 +25,7 @@ dependencies:
     version: 5.0.1
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.15.0
+    version: 7.13.2
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/local-path-provisioner/values.yaml

@@ -5,7 +5,7 @@ local-path-provisioner:
     tag: v0.0.36@sha256:1eba82e9c386038b4af6d69cca7519fac738c28c42735ed48ce70c882ad0d80f
   helperImage:
     repository: busybox
-    tag: 1.38.0@sha256:b6762ddf4a50aabb5f4d21aa6f447d05d5633fb09f09c08b33f22356a2f98be0
+    tag: 1.37.0@sha256:1487d0af5f52b4ba31c7e465126ee2123fe3f2305d638e7827681e7cf6c83d5e
   storageClass:
     create: true
     defaultClass: false

clusters/cl01tl/helm/loki/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: loki
   repository: oci://ghcr.io/grafana-community/helm-charts
-  version: 17.0.1
+  version: 16.0.0
 - name: alloy
   repository: https://grafana.github.io/helm-charts
   version: 1.8.1
-digest: sha256:d8d28f5f194afb6200255175add00858b150366e128f80b9d94f6e7e3dce9d4d
+digest: sha256:d193d6954e39080db717baf7f48ff1dd08ab9a544d6e39fe54dea146f1e2057c
-generated: "2026-05-22T19:45:18.821213515Z"
+generated: "2026-05-17T14:10:38.197763019Z"

clusters/cl01tl/helm/loki/Chart.yaml

@@ -15,7 +15,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: loki
-    version: 17.0.1
+    version: 16.0.0
     repository: oci://ghcr.io/grafana-community/helm-charts
   - name: alloy
     version: 1.8.1

clusters/cl01tl/helm/matrix-synapse/Chart.lock

@@ -1,7 +1,7 @@
 dependencies:
 - name: matrix-synapse
   repository: https://ananace.gitlab.io/charts
-  version: 3.12.28
+  version: 3.12.26
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
   version: 5.0.1
@@ -19,13 +19,13 @@ dependencies:
   version: 3.3.1
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.15.0
+  version: 7.13.2
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.9.0
+  version: 0.8.0
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.9.0
+  version: 0.8.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
@@ -38,5 +38,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
-digest: sha256:7f72074216b5af8e4af37c76f91880d97aecedbf7aa557e032c8f66e312238e1
+digest: sha256:2a4cc81868107e46c742e56a0df042aa9125fe0c067f9db436be9638b9f32900
-generated: "2026-05-21T20:08:53.38814427Z"
+generated: "2026-05-18T10:15:21.540887411Z"

clusters/cl01tl/helm/matrix-synapse/Chart.yaml

@@ -26,7 +26,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: matrix-synapse
-    version: 3.12.28
+    version: 3.12.26
     repository: https://ananace.gitlab.io/charts
   - name: app-template
     alias: matrix-hookshot
@@ -50,15 +50,15 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.15.0
+    version: 7.13.2
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey-matrix-synapse
-    version: 0.9.0
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey-hookshot
-    version: 0.9.0
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-synapse
@@ -78,4 +78,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/matrix.png
 # renovate: datasource=github-releases depName=element-hq/synapse
-appVersion: vv1.153.0
+appVersion: vv1.152.1

clusters/cl01tl/helm/matrix-synapse/values.yaml

@@ -1,7 +1,7 @@
 matrix-synapse:
   image:
     repository: ghcr.io/element-hq/synapse
-    tag: v1.153.0@sha256:8ba9310909c4f255f942e504d9e5e5d9a7f20e3fa1cdf5aea8acb704b6a15098
+    tag: v1.152.1@sha256:ea13612748d2c3cd7d37314e4d2bb3833831e7fe9c1cc2ba2a05a0e51ab78297
   serverName: alexlebens.dev
   publicServerName: matrix.alexlebens.dev
   argoCD: true

clusters/cl01tl/helm/medialyze/Chart.yaml

@@ -24,4 +24,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://raw.githubusercontent.com/frederikemmer/MediaLyze/d8f69c0628bac7c047b90f91a66341648029c273/frontend/public/favicon.svg
 # renovate: datasource=github-releases depName=frederikemmer/MediaLyze
-appVersion: 0.11.2
+appVersion: 0.11.0

clusters/cl01tl/helm/medialyze/values.yaml

@@ -12,7 +12,7 @@ medialyze:
         main:
           image:
             repository: ghcr.io/frederikemmer/medialyze
-            tag: 0.11.2@sha256:696494d76fe6013cabc85838a115221cfec14e72b5f86df1d22710c302c17313
+            tag: 0.11.1@sha256:9be0ac02eac5315e18645fae049f9859f3357b4e771cd2a759b5df1c6cc32d63
           env:
             - name: HOST_PORT
               value: 8080

clusters/cl01tl/helm/music-grabber/Chart.yaml

@@ -24,4 +24,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/music-grabber.png
 # renovate: datasource=docker depName=g33kphr33k/musicgrabber
-appVersion: 2.8.13
+appVersion: 2.8.8

clusters/cl01tl/helm/music-grabber/values.yaml

@@ -12,7 +12,7 @@ music-grabber:
         main:
           image:
             repository: g33kphr33k/musicgrabber
-            tag: 2.8.13@sha256:9895b8d50a732248a3ceec611c8db15d08d46438b5a3cc7932c5fa7fe2f8a6d2
+            tag: 2.8.8@sha256:72dd1056fab07c873276c854bea08b8ef07bb54b8fbe0413047d8701d2abc146
           env:
             - name: MUSIC_DIR
               value: /mnt/store/Music Grabber/

clusters/cl01tl/helm/ntfy/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 5.0.1
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.15.0
+  version: 7.13.2
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.11.4
-digest: sha256:d11cb37a168a31042852d59b297e06ca8af40812967a6885a386971e57f790c9
+digest: sha256:57f2f04c6919d2535cb8fb7eadf04a7042524761f88f05ac2983b33489a7883e
-generated: "2026-05-19T16:31:45.644293222Z"
+generated: "2026-05-18T10:15:45.983238834Z"

clusters/cl01tl/helm/ntfy/Chart.yaml

@@ -20,7 +20,7 @@ dependencies:
     version: 5.0.1
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.15.0
+    version: 7.13.2
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: rclone-bucket
     alias: rclone-ntfy-attachments-remote
@@ -28,4 +28,4 @@ dependencies:
     version: 0.11.4
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ntfy.png
 # renovate: datasource=github-releases depName=binwiederhier/ntfy
-appVersion: 2.23.0
+appVersion: 2.22.0

clusters/cl01tl/helm/ntfy/values.yaml

@@ -8,7 +8,7 @@ ntfy:
         main:
           image:
             repository: binwiederhier/ntfy
-            tag: v2.23.0@sha256:b32b4221a64ec2e7c000f0782b2feef24022e1a09a24e531640f4cbba6cfa1e6
+            tag: v2.22.0@sha256:d8b3408c75d5ae78e03339af6103e7e6195e56573eea6f1ad34bb4dc4f44f340
           args: ["serve"]
           env:
             - name: TZ

clusters/cl01tl/helm/ollama/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 5.0.1
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.15.0
+  version: 7.13.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
-digest: sha256:aa33e56d1cc749da477e3cd431c85a45d128370d6d7c8d918fe36f3bf0689481
+digest: sha256:93201056cf268f776c4dc0cb07ba56f99b13eaa3db17bd0c5d4fc2fc2f4b4dd8
-generated: "2026-05-19T16:31:56.732275961Z"
+generated: "2026-05-18T10:16:06.201268733Z"

clusters/cl01tl/helm/ollama/Chart.yaml

@@ -23,7 +23,7 @@ dependencies:
     version: 5.0.1
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.15.0
+    version: 7.13.2
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data

clusters/cl01tl/helm/openbao/Chart.lock

@@ -1,7 +1,7 @@
 dependencies:
 - name: openbao
   repository: https://openbao.github.io/openbao-helm
-  version: 0.28.3
+  version: 0.28.2
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
   version: 5.0.1
@@ -11,5 +11,5 @@ dependencies:
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.11.4
-digest: sha256:5e743ed99053774e3b3bd6afe3c97d85ece29e86f20f81ddfc456e80d10f47a8
+digest: sha256:bd0ab8f854917701e69215e81bc77899d0365908998d658aba02de4afaffd889
-generated: "2026-05-22T01:11:07.608089959Z"
+generated: "2026-05-18T02:15:31.062887311Z"

clusters/cl01tl/helm/openbao/Chart.yaml

@@ -20,7 +20,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: openbao
-    version: 0.28.3
+    version: 0.28.2
     repository: https://openbao.github.io/openbao-helm
   - name: app-template
     alias: unseal
@@ -36,4 +36,4 @@ dependencies:
     version: 0.11.4
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/openbao.png
 # renovate: datasource=github-releases depName=openbao/openbao
-appVersion: v2.5.4
+appVersion: v2.5.3

clusters/cl01tl/helm/openbao/values.yaml

@@ -9,7 +9,7 @@ openbao:
     image:
       registry: quay.io
       repository: openbao/openbao
-      tag: 2.5.4@sha256:436eaf9778cad75507ff70ea26ace30dcbe15606e619ac3823495663d7f7c115
+      tag: 2.5.3@sha256:fdc6da21ca6963560c32336fd7feb9cf2d5e52668f1a1647205a4b41171f0806
     resources:
       requests:
         cpu: 50m
@@ -109,7 +109,7 @@ openbao:
       image:
         registry: quay.io
         repository: openbao/openbao
-        tag: 2.5.4@sha256:436eaf9778cad75507ff70ea26ace30dcbe15606e619ac3823495663d7f7c115
+        tag: 2.5.3@sha256:fdc6da21ca6963560c32336fd7feb9cf2d5e52668f1a1647205a4b41171f0806
       resources:
         requests:
           cpu: 10m

clusters/cl01tl/helm/outline/Chart.lock

@@ -7,12 +7,12 @@ dependencies:
   version: 3.3.1
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.15.0
+  version: 7.13.2
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.9.0
+  version: 0.8.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
-digest: sha256:79c32aa3dde61902c1ce8614aef90164ee649958dc8a4be2afd131e1843256e8
+digest: sha256:af5fba3640fcc2763933cd96627cc685be366a96efb68f1220742ee875abc388
-generated: "2026-05-21T20:09:17.731275764Z"
+generated: "2026-05-18T10:16:26.474627771Z"

clusters/cl01tl/helm/outline/Chart.yaml

@@ -26,11 +26,11 @@ dependencies:
     version: 3.3.1
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.15.0
+    version: 7.13.2
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
-    version: 0.9.0
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data

clusters/cl01tl/helm/paperless-ngx/Chart.lock

@@ -4,10 +4,10 @@ dependencies:
   version: 5.0.1
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.15.0
+  version: 7.13.2
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.9.0
+  version: 0.8.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
@@ -20,5 +20,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
-digest: sha256:812cebb8d13669a0d9a3ff2663f59cf8ba7ae5186cae098103fa4fe68f7192fe
+digest: sha256:28a4767d490e0ec6c5d29582edef4e1640dd45cf91bd1f4b288b00b446c9a1ef
-generated: "2026-05-21T20:09:47.142294164Z"
+generated: "2026-05-18T10:16:45.928749387Z"

clusters/cl01tl/helm/paperless-ngx/Chart.yaml

@@ -24,11 +24,11 @@ dependencies:
     version: 5.0.1
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.15.0
+    version: 7.13.2
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
-    version: 0.9.0
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data

clusters/cl01tl/helm/plex/Chart.yaml

@@ -20,4 +20,4 @@ dependencies:
     version: 5.0.1
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/plex.png
 # renovate: datasource=github-releases depName=linuxserver/docker-plex
-appVersion: 1.43.2.10687-563d026ea-ls307
+appVersion: 1.43.1.10611-1e34174b1-ls305

clusters/cl01tl/helm/plex/values.yaml

@@ -22,7 +22,7 @@ plex:
         main:
           image:
             repository: ghcr.io/linuxserver/plex
-            tag: 1.43.2.10687-563d026ea-ls307@sha256:626eb0d52b4522db3be91110a89161be6ccffc0741e9abf0e93aaf4fea98ccb9
+            tag: 1.43.1.10611-1e34174b1-ls305@sha256:8d937dd32659bb1defa02d713a3b1cc99919f12aa17a072d588e770a6f1d7d26
           env:
             - name: TZ
               value: America/Chicago
@@ -66,7 +66,7 @@ plex:
       forceRename: plex-config
       storageClass: ceph-block
       accessMode: ReadWriteOnce
-      size: 200Gi
+      size: 100Gi
       advancedMounts:
         main:
           main:

clusters/cl01tl/helm/postiz/Chart.lock

@@ -10,15 +10,15 @@ dependencies:
   version: 3.3.1
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.15.0
+  version: 7.13.2
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.9.0
+  version: 0.8.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
-digest: sha256:75f99ea76fd535b49dfd49ec5cde400ce3957585f67507066ce7356640f2d46e
+digest: sha256:94acca39c3e97ac8d57b1ed8f679d8272bfd8db6c11d8d819a1729e1350f2b4e
-generated: "2026-05-21T20:10:12.033103279Z"
+generated: "2026-05-18T10:17:10.287562273Z"

clusters/cl01tl/helm/postiz/Chart.yaml

@@ -35,11 +35,11 @@ dependencies:
     version: 3.3.1
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.15.0
+    version: 7.13.2
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
-    version: 0.9.0
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/postiz/values.yaml

@@ -8,7 +8,7 @@ postiz:
         main:
           image:
             repository: ghcr.io/gitroomhq/postiz-app
-            tag: v2.21.8@sha256:3ec7bc8ecf61f08c22e0954291702b097f944def515dc259cb3a441aba4046c0
+            tag: v2.21.7@sha256:29a40ab11ef597c340f7f25764e7f040429c6b72c3eda33d15a429ddb66d0933
           env:
             - name: JWT_SECRET
               valueFrom:
@@ -232,7 +232,7 @@ temporal:
   web:
     image:
       repository: temporalio/ui
-      tag: 2.50.0@sha256:49a61456f6b770af926d6d7d74f63ebb4b9a3c5abc4fb68ddb146321d49391e4
+      tag: 2.49.1@sha256:a066bdf5c4de689cabaf80cc357871f1db5e6d750a6bcfc42e877b913e31ef24
     resources:
       requests:
         cpu: 10m

clusters/cl01tl/helm/prowlarr/Chart.yaml

@@ -28,4 +28,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/prowlarr.png
 # renovate: datasource=github-releases depName=linuxserver/docker-prowlarr
-appVersion: 2.3.5.5327-ls147
+appVersion: 2.3.5.5327-ls146

clusters/cl01tl/helm/prowlarr/values.yaml

@@ -12,7 +12,7 @@ prowlarr:
         main:
           image:
             repository: ghcr.io/linuxserver/prowlarr
-            tag: 2.3.5.5327-ls147@sha256:c9fe528f34b1fd3715438b6f6d6991d64e2965f2c055db36398bc66a0e7eab01
+            tag: 2.3.5.5327-ls146@sha256:a89f252d6a22bd25af14a5380aec0adcc3c3af2e3282164f981680e6844070f3
           env:
             - name: TZ
               value: America/Chicago

clusters/cl01tl/helm/qbittorrent/values.yaml

@@ -22,7 +22,7 @@ qbittorrent:
         init-sysctl:
           image:
             repository: busybox
-            tag: 1.38.0@sha256:b6762ddf4a50aabb5f4d21aa6f447d05d5633fb09f09c08b33f22356a2f98be0
+            tag: 1.37.0@sha256:1487d0af5f52b4ba31c7e465126ee2123fe3f2305d638e7827681e7cf6c83d5e
           securityContext:
             privileged: True
           command:
@@ -133,7 +133,7 @@ qbittorrent:
         init-copy-config:
           image:
             repository: busybox
-            tag: 1.38.0@sha256:b6762ddf4a50aabb5f4d21aa6f447d05d5633fb09f09c08b33f22356a2f98be0
+            tag: 1.37.0@sha256:1487d0af5f52b4ba31c7e465126ee2123fe3f2305d638e7827681e7cf6c83d5e
           command:
             - /bin/sh
             - -ec
@@ -143,7 +143,7 @@ qbittorrent:
         qbit-manage:
           image:
             repository: ghcr.io/stuffanthings/qbit_manage
-            tag: v4.7.1@sha256:56e1eeec5582e202e82479b42b588e3807ececca25716f91c7a29f5c597c55d0
+            tag: v4.7.0@sha256:8786f2efc6fb8e26281f09bf6c5d0004e2d2420fd4781af0aed123ae01558e21
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -196,7 +196,7 @@ qbittorrent:
         qui:
           image:
             repository: ghcr.io/autobrr/qui
-            tag: v1.19.0@sha256:baa07db5326f75f8c2246703603cbe2132476c8ad0ab31c976a960cb4c4731f5
+            tag: v1.18.0@sha256:2e768c8509831afd1f606d27d9aa8e5f3fc722fac4ea88acfdc4fa3b0e9b13ae
           env:
             - name: QUI__METRICS_ENABLED
               value: true

clusters/cl01tl/helm/radarr-4k/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 5.0.1
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.15.0
+  version: 7.13.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
-digest: sha256:f4082c24ef6c34337f40e8cc43e1164473c99e25f72eaa5878d617acc4456a6f
+digest: sha256:b653665a5ae3942b8e47b540b133cf96434113eb8b18ca0dd6b1d05b1d41e33f
-generated: "2026-05-19T16:32:53.737835305Z"
+generated: "2026-05-18T10:17:37.64187668Z"

clusters/cl01tl/helm/radarr-4k/Chart.yaml

@@ -25,7 +25,7 @@ dependencies:
     version: 5.0.1
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.15.0
+    version: 7.13.2
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config
@@ -33,4 +33,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/radarr-4k.png
 # renovate: datasource=github-releases depName=linuxserver/docker-radarr
-appVersion: 6.1.1.10360-ls303
+appVersion: 6.1.1.10360-ls302

clusters/cl01tl/helm/radarr-anime/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 5.0.1
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.15.0
+  version: 7.13.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
-digest: sha256:53b0bae5bd4df32ba7b0b1028bdb15a6b0ba424a3f56eb24ff152eac9f966127
+digest: sha256:0d3da66bafac37d2ca7829d222c020f2f3325fcf27e0dc14ebd4d0099f242527
-generated: "2026-05-19T16:33:09.996300641Z"
+generated: "2026-05-18T10:17:57.912539167Z"

clusters/cl01tl/helm/radarr-anime/Chart.yaml

@@ -25,7 +25,7 @@ dependencies:
     version: 5.0.1
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.15.0
+    version: 7.13.2
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config
@@ -33,4 +33,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/radarr-anime.png
 # renovate: datasource=github-releases depName=linuxserver/docker-radarr
-appVersion: 6.1.1.10360-ls303
+appVersion: 6.1.1.10360-ls302

clusters/cl01tl/helm/radarr-standup/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 5.0.1
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.15.0
+  version: 7.13.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
-digest: sha256:b63d4dbaaedc7d749c3e57bf9cd90aaf735f9f73c579e1f235f8d4e4ed02dbc9
+digest: sha256:9d564f1f954d15b7a4fbe8d31bbda901b6c6a30ea540b58e19e22521afdec151
-generated: "2026-05-19T16:33:24.800611329Z"
+generated: "2026-05-18T10:18:20.12741211Z"