chore(deps): pin dependencies

.gitea/workflows/lint-test-docker.yaml

@@ -120,7 +120,7 @@ jobs:
           echo "----"
 
       - name: ntfy Failed
-        uses: niniyas/ntfy-action@96acac57fdc91d4c4f50b78486c1ed6f03f9f61c # master
+        uses: niniyas/ntfy-action@master
         if: failure()
         with:
           url: '${{ secrets.NTFY_URL }}'

.gitea/workflows/lint-test-helm.yaml

@@ -209,7 +209,7 @@ jobs:
           exit $EXIT_CODE
 
       - name: ntfy Failed
-        uses: niniyas/ntfy-action@96acac57fdc91d4c4f50b78486c1ed6f03f9f61c # master
+        uses: niniyas/ntfy-action@master
         if: failure()
         with:
           url: '${{ secrets.NTFY_URL }}'
@@ -352,7 +352,7 @@ jobs:
           exit $EXIT_CODE
 
       - name: ntfy Failed
-        uses: niniyas/ntfy-action@96acac57fdc91d4c4f50b78486c1ed6f03f9f61c # master
+        uses: niniyas/ntfy-action@master
         if: failure()
         with:
           url: '${{ secrets.NTFY_URL }}'

.gitea/workflows/render-manifests.yaml

@@ -568,7 +568,7 @@ jobs:
           echo "----"
 
       - name: ntfy Created
-        uses: niniyas/ntfy-action@96acac57fdc91d4c4f50b78486c1ed6f03f9f61c # master
+        uses: niniyas/ntfy-action@master
         if: steps.create-pull-request.outputs.pull-request-operation == 'created' && steps.mode.outputs.is-automerge == 'false'
         with:
           url: "${{ secrets.NTFY_URL }}"
@@ -582,7 +582,7 @@ jobs:
           actions: '[{"action": "view", "label": "View PR", "url": "${{ vars.USER_URL }}/${{ github.repository }}/pulls/${{ steps.create-pull-request.outputs.pull-request-number }}", "clear": true}]'
 
       - name: ntfy Updated
-        uses: niniyas/ntfy-action@96acac57fdc91d4c4f50b78486c1ed6f03f9f61c # master
+        uses: niniyas/ntfy-action@master
         if: steps.commit-push.outputs.push == 'true' && steps.check-for-pull-request.outputs.pull-request-exists != 'false' && steps.mode.outputs.is-automerge == 'false'
         with:
           url: "${{ secrets.NTFY_URL }}"
@@ -596,7 +596,7 @@ jobs:
           actions: '[{"action": "view", "label": "View PR", "url": "${{ vars.USER_URL }}/${{ github.repository }}/pulls/${{ steps.create-pull-request.outputs.pull-request-number }}", "clear": true}]'
 
       - name: ntfy Merged
-        uses: niniyas/ntfy-action@96acac57fdc91d4c4f50b78486c1ed6f03f9f61c # master
+        uses: niniyas/ntfy-action@master
         if: steps.merge-changes.outputs.pull-request-operation == 'merged'
         with:
           url: "${{ secrets.NTFY_URL }}"
@@ -610,7 +610,7 @@ jobs:
           actions: '[{"action": "view", "label": "View PR", "url": "${{ vars.USER_URL }}/${{ github.repository }}/pulls/${{ steps.create-pull-request.outputs.pull-request-number }}", "clear": true}]'
 
       - name: ntfy Failed
-        uses: niniyas/ntfy-action@96acac57fdc91d4c4f50b78486c1ed6f03f9f61c # master
+        uses: niniyas/ntfy-action@master
         if: failure()
         with:
           url: "${{ secrets.NTFY_URL }}"

.gitea/workflows/renovate.yaml

@@ -13,7 +13,7 @@ on:
 jobs:
   renovate:
     runs-on: ubuntu-latest
-    container: ghcr.io/renovatebot/renovate:43.84.2@sha256:92285747b3aac062a4f567762c272a12dce037843a20177a02c95b7c420e20cb
+    container: ghcr.io/renovatebot/renovate:43@sha256:92285747b3aac062a4f567762c272a12dce037843a20177a02c95b7c420e20cb
     steps:
       - name: Checkout
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6

clusters/cl01tl/helm/blocky/values.yaml

@@ -98,7 +98,7 @@ blocky:
 
               traefik-cl01tl                  IN      A       10.232.1.21
               blocky                          IN      A       10.232.1.22
-              plex-lb                         IN      A       10.232.1.23
+              cilium-cl01tl                   IN      A       10.232.1.23
 
 
               ;; Application Names
@@ -117,7 +117,6 @@ blocky:
               directus                        IN      CNAME   traefik-cl01tl
               excalidraw                      IN      CNAME   traefik-cl01tl
               feishin                         IN      CNAME   traefik-cl01tl
-              foldergram                      IN      CNAME   traefik-cl01tl
               garage-s3                       IN      CNAME   traefik-cl01tl
               garage-webui                    IN      CNAME   traefik-cl01tl
               gatus                           IN      CNAME   traefik-cl01tl

clusters/cl01tl/helm/dawarich/Chart.yaml

@@ -26,4 +26,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/dawarich.png
 # renovate: datasource=github-releases depName=Freika/dawarich
-appVersion: 1.4.0
+appVersion: 1.3.4

clusters/cl01tl/helm/dawarich/values.yaml

@@ -9,7 +9,7 @@ dawarich:
         main:
           image:
             repository: freikin/dawarich
-            tag: 1.4.0
+            tag: 1.3.4
             pullPolicy: IfNotPresent
           command: ["web-entrypoint.sh"]
           args: ["bin/rails", "server", "-p", "3000", "-b", "::"]
@@ -106,7 +106,7 @@ dawarich:
         sidekiq:
           image:
             repository: freikin/dawarich
-            tag: 1.4.0
+            tag: 1.3.4
             pullPolicy: IfNotPresent
           command: ["sidekiq-entrypoint.sh"]
           args: ["sidekiq"]

clusters/cl01tl/helm/foldergram/Chart.lock

@@ -1,9 +0,0 @@
-dependencies:
-- name: app-template
-  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
-- name: volsync-target
-  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.8.0
-digest: sha256:59100c6fbfb829f9d703b9ee1cf869c4fd77b6ff53c63b0c644a757223027e58
-generated: "2026-03-22T12:42:43.150705-05:00"

clusters/cl01tl/helm/foldergram/Chart.yaml

@@ -1,25 +0,0 @@
-apiVersion: v2
-name: foldergram
-version: 1.0.0
-description: Foldergram
-keywords:
-  - foldergram
-  - pictures
-home: https://wiki.alexlebens.dev/
-sources:
-  - https://github.com/foldergram/foldergram
-  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: app-template
-    alias: foldergram
-    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
-  - name: volsync-target
-    alias: volsync-target-data
-    version: 0.8.0
-    repository: oci://harbor.alexlebens.net/helm-charts
-icon: https://raw.githubusercontent.com/foldergram/foldergram/refs/heads/main/client/public/icon-512.png
-# renovate: datasource=github-releases depName=foldergram/foldergram
-appVersion: v1.0.5

clusters/cl01tl/helm/foldergram/templates/persistent-volume-claim.yaml

@@ -1,17 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: foldergram-pictures-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: foldergram-pictures-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  volumeName: foldergram-pictures-nfs-storage
-  storageClassName: nfs-client
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 1Gi

clusters/cl01tl/helm/foldergram/templates/persistent-volume.yaml

@@ -1,23 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: foldergram-pictures-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: foldergram-pictures-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: nfs-client
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  nfs:
-    path: /volume2/Storage/Pictures
-    server: synologybond.alexlebens.net
-  mountOptions:
-    - vers=4
-    - minorversion=1
-    - noac

clusters/cl01tl/helm/foldergram/values.yaml

@@ -1,87 +0,0 @@
-foldergram:
-  controllers:
-    main:
-      type: deployment
-      replicas: 1
-      strategy: Recreate
-      revisionHistoryLimit: 3
-      containers:
-        main:
-          image:
-            repository: ghcr.io/foldergram/foldergram
-            tag: 1.0.5
-            pullPolicy: IfNotPresent
-          env:
-            - name: IMAGE_DETAIL_SOURCE
-              value: original
-            - name: DERIVATIVE_MODE
-              value: lazy
-            - name: DATA_ROOT
-              value: ./data
-            - name: GALLERY_ROOT
-              value: /gallery
-            - name: CSRF_TRUSTED_ORIGINS
-              value: https://foldergram.alexlebens.net
-          resources:
-            requests:
-              cpu: 10m
-              memory: 128Mi
-  service:
-    main:
-      controller: main
-      ports:
-        http:
-          port: 80
-          targetPort: 4141
-          protocol: HTTP
-  route:
-    main:
-      kind: HTTPRoute
-      parentRefs:
-        - group: gateway.networking.k8s.io
-          kind: Gateway
-          name: traefik-gateway
-          namespace: traefik
-      hostnames:
-        - foldergram.alexlebens.net
-      rules:
-        - backendRefs:
-            - group: ''
-              kind: Service
-              name: foldergram
-              port: 80
-              weight: 100
-          matches:
-            - path:
-                type: PathPrefix
-                value: /
-  persistence:
-    cache:
-      forceRename: foldergram-data
-      storageClass: ceph-block
-      accessMode: ReadWriteOnce
-      size: 10Gi
-      retain: false
-      advancedMounts:
-        main:
-          main:
-            - path: /app/data
-              readOnly: false
-    pictures:
-      existingClaim: foldergram-pictures-nfs-storage
-      advancedMounts:
-        main:
-          main:
-            - path: /gallery/pictures
-              readOnly: true
-volsync-target-data:
-  pvcTarget: foldergram-data
-  local:
-    enabled: true
-    schedule: 46 11 * * *
-  remote:
-    enabled: true
-    schedule: 46 12 * * *
-  external:
-    enabled: true
-    schedule: 46 13 * * *

clusters/cl01tl/helm/gatus/values.yaml

@@ -161,9 +161,6 @@ gatus:
       - name: photoview
         url: https://photoview.alexlebens.net
         <<: *defaults
-      - name: foldergram
-        url: https://foldergram.alexlebens.net
-        <<: *defaults
       - name: booklore
         url: https://booklore.alexlebens.net
         <<: *defaults

clusters/cl01tl/helm/homepage/values.yaml

@@ -202,12 +202,6 @@ homepage:
                   href: https://photoview.alexlebens.net
                   siteMonitor: http://photoview.photoview:80
                   statusStyle: dot
-              - Pictures:
-                  icon: https://raw.githubusercontent.com/foldergram/foldergram/refs/heads/main/client/public/icon-512.png
-                  description: Foldergram
-                  href: https://foldergram.alexlebens.net
-                  siteMonitor: http://foldergram.foldergram:80
-                  statusStyle: dot
               - Books:
                   icon: sh-booklore.webp
                   description: Grimmory

clusters/cl01tl/helm/houndarr/Chart.lock

@@ -1,9 +0,0 @@
-dependencies:
-- name: app-template
-  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
-- name: volsync-target
-  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.8.0
-digest: sha256:375d6c2eb2f097717c44c5a28cb162da24f4ff154a971e5a68ccd0e0b77e936f
-generated: "2026-03-21T22:31:01.142752-05:00"

clusters/cl01tl/helm/houndarr/values.yaml

@@ -14,10 +14,6 @@ houndarr:
           env:
             - name: TZ
               value: America/Chicago
-            - name: PUID
-              value: 1000
-            - name: PGID
-              value: 1000
             - name: HOUNDARR_SECURE_COOKIES
               value: true
             - name: HOUNDARR_TRUSTED_PROXIES
@@ -68,11 +64,6 @@ houndarr:
               readOnly: false
 volsync-target-data:
   pvcTarget: houndarr-data
-  moverSecurityContext:
-    runAsUser: 1000
-    runAsGroup: 1000
-    fsGroup: 1000
-    fsGroupChangePolicy: OnRootMismatch
   local:
     enabled: true
     schedule: 40 11 * * *

clusters/cl01tl/helm/matrix-synapse/values.yaml

@@ -345,7 +345,7 @@ mautrix-whatsapp:
         main:
           image:
             repository: dock.mau.dev/mautrix/whatsapp
-            tag: v0.2603.0
+            tag: v0.2602.0
             pullPolicy: IfNotPresent
           resources:
             requests:

clusters/cl01tl/helm/plex/values.yaml

@@ -26,7 +26,6 @@ plex:
   service:
     main:
       controller: main
-      type: LoadBalancer
       ports:
         http:
           port: 32400

hosts/ps08rp/blocky/config.yml

@@ -73,7 +73,7 @@ customDNS:
 
     traefik-cl01tl                  IN      A       10.232.1.21
     blocky                          IN      A       10.232.1.22
-    plex-lb                         IN      A       10.232.1.23
+    cilium-cl01tl                   IN      A       10.232.1.23
 
 
     ;; Application Names
@@ -92,7 +92,6 @@ customDNS:
     directus                        IN      CNAME   traefik-cl01tl
     excalidraw                      IN      CNAME   traefik-cl01tl
     feishin                         IN      CNAME   traefik-cl01tl
-    foldergram                      IN      CNAME   traefik-cl01tl
     garage-s3                       IN      CNAME   traefik-cl01tl
     garage-webui                    IN      CNAME   traefik-cl01tl
     gatus                           IN      CNAME   traefik-cl01tl

hosts/ps09rp/blocky/config.yml

@@ -94,7 +94,7 @@ customDNS:
 
     traefik-cl01tl                  IN      A       10.232.1.21
     blocky                          IN      A       10.232.1.22
-    plex-lb                         IN      A       10.232.1.23
+    cilium-cl01tl                   IN      A       10.232.1.23
 
 
     ;; Application Names
@@ -113,7 +113,6 @@ customDNS:
     directus                        IN      CNAME   traefik-cl01tl
     excalidraw                      IN      CNAME   traefik-cl01tl
     feishin                         IN      CNAME   traefik-cl01tl
-    foldergram                      IN      CNAME   traefik-cl01tl
     garage-s3                       IN      CNAME   traefik-cl01tl
     garage-webui                    IN      CNAME   traefik-cl01tl
     gatus                           IN      CNAME   traefik-cl01tl

renovate.json

@@ -31,7 +31,7 @@
         "/(^|/)templates/.*\\.yaml$/"
       ],
       "matchStrings": [
-        "# renovate: datasource=(?<datasource>[^\\s]+)\\s+depName=(?<depName>[^\\s]+)\\s+tag:\\s*[\"']?(?<currentValue>[^@\"'\\s\n]+)(?:@(?<currentDigest>sha256:[a-f0-9]+))?[\"']?"
+        "# renovate: datasource=(?<datasource>.*?) depName=(?<depName>.*?)\\s+tag: (?<currentValue>.*)"
       ]
     },
     {
@@ -69,22 +69,6 @@
       ],
       "enabled": false
     },
-    {
-      "description": "Automerge digests for actions",
-      "matchManagers": [
-        "github-actions"
-      ],
-      "matchUpdateTypes": [
-        "digest"
-      ],
-      "addLabels": [
-        "actions",
-        "automerge"
-      ],
-      "enabled": true,
-      "automerge": true,
-      "minimumReleaseAge": "1 days"
-    },
     {
       "description": "Label charts",
       "matchDatasources": [
@@ -126,7 +110,7 @@
       "automergeType": "branch"
     },
     {
-      "description": "Label images",
+      "description": "Label images, docker",
       "matchDatasources": [
         "docker"
       ],
@@ -136,10 +120,9 @@
       "automerge": false
     },
     {
-      "description": "Automerge image patches",
+      "description": "Automerge image patches, docker",
       "matchUpdateTypes": [
-        "patch",
-        "pinDigest"
+        "patch"
       ],
       "matchDatasources": [
         "docker"
@@ -152,26 +135,7 @@
       "minimumReleaseAge": "1 days"
     },
     {
-      "description": "Automerge images, specific packages",
-      "matchUpdateTypes": [
-        "patch",
-        "minor"
-      ],
-      "matchDatasources": [
-        "docker"
-      ],
-      "matchPackageNames": [
-        "ghcr.io/renovatebot/renovate"
-      ],
-      "addLabels": [
-        "image",
-        "automerge"
-      ],
-      "automerge": true,
-      "minimumReleaseAge": "1 days"
-    },
-    {
-      "description": "Automerge digest updates, specific packages",
+      "description": "Allow digest updates for specific packages",
       "matchUpdateTypes": [
         "digest"
       ],
@@ -181,16 +145,12 @@
       "matchPackageNames": [
         "searxng/searxng"
       ],
-      "addLabels": [
-        "image",
-        "automerge"
-      ],
       "enabled": true,
       "automerge": true,
       "minimumReleaseAge": "1 days"
     },
     {
-      "description": "Label appVersion and images, merged",
+      "description": "Label charts and docker, merged",
       "matchManagers": [
         "custom.regex",
         "helm-values"
@@ -203,10 +163,9 @@
       "automerge": false
     },
     {
-      "description": "Automerge appVersion and images, merged",
+      "description": "Automerge charts and docker, merged",
       "matchUpdateTypes": [
-        "patch",
-        "pinDigest"
+        "patch"
       ],
       "matchManagers": [
         "custom.regex",
@@ -220,19 +179,6 @@
       ],
       "automerge": true,
       "minimumReleaseAge": "1 days"
-    },
-    {
-      "description": "Group unmatched Dawarich dependencies",
-      "matchPackageNames": [
-        "freikin/dawarich",
-        "freika/dawarich",
-        "ghcr.io/freikin/dawarich",
-        "ghcr.io/freika/dawarich",
-        "docker.io/freikin/dawarich",
-        "docker.io/freika/dawarich"
-      ],
-      "groupName": "dawarich",
-      "groupSlug": "unified-dawarich"
     }
   ]
 }