chore(deps): update elasticsearch docker tag to v9.4.0

.gitea/workflows/lint-test-helm.yaml

@@ -343,7 +343,6 @@ jobs:
 
             helm dependency build "${CHART_PATH}" --skip-refresh
 
-            set -o pipefail
             if ! helm template "${DIR}" "${CHART_PATH}" --include-crds --namespace default --api-versions "gateway.networking.k8s.io/v1/HTTPRoute,monitoring.coreos.com/v1,monitoring.coreos.com/v1/ServiceMonitor" | \
               kubeconform \
                 ${SCHEMA_LOCATIONS} \

.gitea/workflows/render-manifests.yaml

@@ -250,8 +250,6 @@ jobs:
 
           echo ">> Rendering Manifests ..."
 
-          EXIT_CODE=0
-
           render_chart() {
             local DIR="$1"
             local CHART_PATH="${MAIN_DIR}/clusters/${CLUSTER}/helm/${DIR}"
@@ -285,17 +283,10 @@ jobs:
 
               echo ">> Formating rendered template ..."
               local TEMPLATE
-              if ! TEMPLATE=$(helm template "${CHART_NAME}" ./ --namespace "${NAMESPACE}" --include-crds --dry-run=server --api-versions "gateway.networking.k8s.io/v1/HTTPRoute,monitoring.coreos.com/v1,monitoring.coreos.com/v1/ServiceMonitor"); then
-                echo "${DIR}" > "${MAIN_DIR}/.failed_chart_${DIR}"
-                return 1
-              fi
+              TEMPLATE=$(helm template "${CHART_NAME}" ./ --namespace "${NAMESPACE}" --include-crds --dry-run=server --api-versions "gateway.networking.k8s.io/v1/HTTPRoute,monitoring.coreos.com/v1,monitoring.coreos.com/v1/ServiceMonitor")
 
               # Format and split rendered template
-              set -o pipefail
-              if ! echo "${TEMPLATE}" | yq '... comments=""' | yq 'select(. != null)' | yq -s '"'"${OUTPUT_FOLDER}"'" + .kind + "-" + .metadata.name + ".yaml"'; then
-                echo "${DIR}" > "${MAIN_DIR}/.failed_chart_${DIR}"
-                return 1
-              fi
+              echo "${TEMPLATE}" | yq '... comments=""' | yq 'select(. != null)' | yq -s '"'"${OUTPUT_FOLDER}"'" + .kind + "-" + .metadata.name + ".yaml"'
 
               # Strip comments again to ensure formatting correctness
               for file in "$OUTPUT_FOLDER"/*; do
@@ -325,16 +316,9 @@ jobs:
 
           done | xargs -P 5 -I {} bash -c 'OUT=$(render_chart "$@" 2>&1); printf "%s\n" "$OUT"' _ {}
 
-          if ls .failed_chart_* 1> /dev/null 2>&1; then
-            EXIT_CODE=1
-            rm -f .failed_chart_*
-          fi
-
           echo ""
           echo "----"
 
-          exit $EXIT_CODE
-
       - name: Check for Changes
         id: check-changes
         if: steps.check-dir-changes.outputs.changes-detected == 'true'

.gitea/workflows/renovate.yaml

@@ -13,7 +13,7 @@ on:
 jobs:
   renovate:
     runs-on: ubuntu-js
-    container: ghcr.io/renovatebot/renovate:43.191.2@sha256:539b0ce5f22bcd4b0a42681c0c984afd1c293e2ce5bb12bcb4c01e0f608d60c9
+    container: ghcr.io/renovatebot/renovate:43.167.0@sha256:244b48d3f24221edc9aae1540f0b484f5205f3d549d7ff62d992e551f638b9eb
     steps:
       - name: Checkout
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6

clusters/cl01tl/helm/actual/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.1
+  version: 4.6.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.0.0
-digest: sha256:cefbc682239406e67d7f05887c9155742d7566f1ebe0b303dd3b160f1b28aa49
-generated: "2026-05-15T00:28:22.250508809Z"
+  version: 1.1.1
+digest: sha256:e472c85ad45c6071ccc3a23047927aba42814a931865736e40ad5c16d597ea53
+generated: "2026-04-28T23:30:55.463292642Z"

clusters/cl01tl/helm/actual/Chart.yaml

@@ -17,11 +17,11 @@ dependencies:
   - name: app-template
     alias: actual
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.1
+    version: 4.6.2
   - name: volsync-target
     alias: volsync-target-data
-    version: 2.0.0
+    version: 1.1.1
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/actual-budget.png
 # renovate: datasource=github-releases depName=actualbudget/actual
-appVersion: 26.5.2
+appVersion: 26.5.0

clusters/cl01tl/helm/actual/values.yaml

@@ -8,7 +8,7 @@ actual:
         main:
           image:
             repository: ghcr.io/actualbudget/actual
-            tag: 26.5.2@sha256:1aeeb3985db55556e716dec25e08f6ce09308c2571b65cddbc6746ee6d5e0d45
+            tag: 26.5.0@sha256:b733ae30c70a66dc4d03577526e53575a0c04eab4f3ab6ace30934776251058c
           env:
             - name: ACTUAL_PORT
               value: 5006
@@ -75,7 +75,7 @@ volsync-target-data:
     schedule: 0 8 * * *
   remote:
     enabled: true
-    schedule: 0 10 * * 0
+    schedule: 0 9 * * *
   external:
     enabled: true
-    schedule: 0 9 * * 0
+    schedule: 0 10 * * *

clusters/cl01tl/helm/argocd/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: argo-cd
   repository: https://argoproj.github.io/argo-helm
-  version: 9.5.14
-digest: sha256:5cae964bb988089467bc5c46badbe33b67f64abd039f5961e66e412a5c7004a7
-generated: "2026-05-13T17:58:34.736881783Z"
+  version: 9.5.11
+digest: sha256:78e2094dde7b3d0326da14640dbc012ce6e6e899f23270dc4d9a13b168c1ef89
+generated: "2026-05-02T00:45:16.287556363Z"

clusters/cl01tl/helm/argocd/Chart.yaml

@@ -13,8 +13,8 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: argo-cd
-    version: 9.5.14
+    version: 9.5.11
     repository: https://argoproj.github.io/argo-helm
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 # renovate: datasource=github-releases depName=argoproj/argo-cd
-appVersion: v3.4.2
+appVersion: v3.3.9

clusters/cl01tl/helm/argocd/values.yaml

@@ -103,7 +103,7 @@ argo-cd:
       enabled: true
       image:
         repository: haproxy
-        tag: 3.3.10-alpine@sha256:3201152205e9d02557ab3c8ecfcf0d378126eec0a5d1b0950ea22af31ee10bf2
+        tag: 3.3.8-alpine@sha256:10690acb357180d5214c6fce59e2cefded6cc72b0f7e3febb323fea95b27e349
       resources:
         requests:
           cpu: 5m

clusters/cl01tl/helm/audiobookshelf/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.1
+  version: 4.6.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.0.0
+  version: 1.1.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.0.0
-digest: sha256:1301152734c6f4df67089c4076875022ecafc466c308dc994f4333917c3d8622
-generated: "2026-05-15T00:28:34.959229494Z"
+  version: 1.1.1
+digest: sha256:2275b211b02253019e5830e0258f936f1494380cc50cea03bc31d75281365dcc
+generated: "2026-04-28T17:54:10.288277-05:00"

clusters/cl01tl/helm/audiobookshelf/Chart.yaml

@@ -21,15 +21,15 @@ dependencies:
   - name: app-template
     alias: audiobookshelf
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.1
+    version: 4.6.2
   - name: volsync-target
     alias: volsync-target-config
-    version: 2.0.0
+    version: 1.1.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-metadata
-    version: 2.0.0
+    version: 1.1.1
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/audiobookshelf.png
 # renovate: datasource=github-releases depName=advplyr/audiobookshelf
-appVersion: 2.35.0
+appVersion: 2.34.0

clusters/cl01tl/helm/audiobookshelf/values.yaml

@@ -6,15 +6,13 @@ audiobookshelf:
       strategy: Recreate
       pod:
         securityContext:
-          runAsUser: 1000
-          runAsGroup: 1000
           fsGroup: 1000
           fsGroupChangePolicy: OnRootMismatch
       containers:
         main:
           image:
             repository: ghcr.io/advplyr/audiobookshelf
-            tag: 2.35.0@sha256:89276ff2e0b3d2f07dd334b641f27a34ab7f02e1047c60b7b8a30126cb0813a5
+            tag: 2.34.0@sha256:4143292c530f6ac6700afd13360c04f477e4f1a81c1c97c4224b1c7e4330c5c4
           env:
             - name: TZ
               value: America/Chicago
@@ -30,9 +28,9 @@ audiobookshelf:
             - name: TZ
               value: America/Chicago
             - name: PGID
-              value: 1000
+              value: "1000"
             - name: PUID
-              value: 1000
+              value: "1000"
             - name: APPRISE_STORAGE_MODE
               value: memory
             - name: APPRISE_STATEFUL_MODE
@@ -131,21 +129,21 @@ volsync-target-config:
   pvcTarget: audiobookshelf-config
   local:
     enabled: true
-    schedule: 5 8 * * *
+    schedule: 2 8 * * *
   remote:
     enabled: true
-    schedule: 5 10 * * 0
+    schedule: 2 9 * * *
   external:
     enabled: true
-    schedule: 5 9 * * 0
+    schedule: 2 10 * * *
 volsync-target-metadata:
   pvcTarget: audiobookshelf-metadata
   local:
     enabled: true
-    schedule: 10 8 * * *
+    schedule: 4 8 * * *
   remote:
     enabled: true
-    schedule: 10 10 * * 0
+    schedule: 4 9 * * *
   external:
     enabled: true
-    schedule: 10 9 * * 0
+    schedule: 4 10 * * *

clusters/cl01tl/helm/authentik/Chart.lock

@@ -1,15 +1,15 @@
 dependencies:
 - name: authentik
   repository: https://charts.goauthentik.io/
-  version: 2026.2.3
+  version: 2026.2.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 3.3.1
+  version: 2.6.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.15.0
+  version: 7.12.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.9.0
-digest: sha256:4aa66600bce643181cbf413fcba8d26563db238833f27392da16919df75246a3
-generated: "2026-05-21T20:05:03.197812688Z"
+  version: 0.7.0
+digest: sha256:808a2347fadb6a48800c0f7355c422c9ed2ce9f7d1ca3b7d64d62574be98e1f8
+generated: "2026-05-02T01:46:08.112423002Z"

clusters/cl01tl/helm/authentik/Chart.yaml

@@ -18,18 +18,18 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: authentik
-    version: 2026.2.3
+    version: 2026.2.2
     repository: https://charts.goauthentik.io/
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 3.3.1
+    version: 2.6.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.15.0
+    version: 7.12.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
-    version: 0.9.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/authentik.png
 # renovate: datasource=github-releases depName=goauthentik/authentik

clusters/cl01tl/helm/authentik/values.yaml

@@ -77,6 +77,10 @@ authentik:
       enabled: true
 postgres-18-cluster:
   mode: recovery
+  cluster:
+    resources:
+      requests:
+        memory: 150Mi
   recovery:
     method: objectStore
     objectStore:

clusters/cl01tl/helm/backrest/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.1
+  version: 4.6.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.0.0
+  version: 1.1.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.0.0
-digest: sha256:099e7a9792fceb0cbce4c13e997c5029af39807da6e5c9825a1a042b785e0887
-generated: "2026-05-15T00:28:48.302596135Z"
+  version: 1.1.1
+digest: sha256:82e85dc79199cc8b75dde412d595621817b3fa2c073c131162d0079a0b63f369
+generated: "2026-04-28T23:31:05.864191451Z"

clusters/cl01tl/helm/backrest/Chart.yaml

@@ -17,14 +17,14 @@ dependencies:
   - name: app-template
     alias: backrest
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.1
+    version: 4.6.2
   - name: volsync-target
     alias: volsync-target-config
-    version: 2.0.0
+    version: 1.1.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data
-    version: 2.0.0
+    version: 1.1.1
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/backrest.png
 # renovate: datasource=github-releases depName=garethgeorge/backrest

clusters/cl01tl/helm/backrest/values.yaml

@@ -115,21 +115,21 @@ volsync-target-data:
   pvcTarget: backrest-data
   local:
     enabled: true
-    schedule: 15 8 * * *
+    schedule: 6 8 * * *
   remote:
     enabled: true
-    schedule: 15 10 * * 0
+    schedule: 6 9 * * *
   external:
     enabled: true
-    schedule: 15 9 * * 0
+    schedule: 6 10 * * *
 volsync-target-config:
   pvcTarget: backrest-config
   local:
     enabled: true
-    schedule: 20 8 * * *
+    schedule: 8 8 * * *
   remote:
     enabled: true
-    schedule: 20 10 * * 0
+    schedule: 8 9 * * *
   external:
     enabled: true
-    schedule: 20 9 * * 0
+    schedule: 8 10 * * *

clusters/cl01tl/helm/bazarr/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.1
+  version: 4.6.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.0.0
-digest: sha256:bcced6d5e69265581b976c3e0426cc1330e36109255ce34533ef0d9b991054a5
-generated: "2026-05-15T00:29:00.968381514Z"
+  version: 1.1.1
+digest: sha256:9228c387a1b50545d8b348c94ae55b17952d32652ca48d0329c65f4ee651706e
+generated: "2026-04-28T23:31:15.743170757Z"

clusters/cl01tl/helm/bazarr/Chart.yaml

@@ -21,10 +21,10 @@ dependencies:
   - name: app-template
     alias: bazarr
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.1
+    version: 4.6.2
   - name: volsync-target
     alias: volsync-target-config
-    version: 2.0.0
+    version: 1.1.1
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/bazarr.png
 # renovate: datasource=github-releases depName=linuxserver/docker-bazarr

clusters/cl01tl/helm/bazarr/values.yaml

@@ -112,10 +112,10 @@ volsync-target-config:
     fsGroupChangePolicy: OnRootMismatch
   local:
     enabled: true
-    schedule: 25 8 * * *
+    schedule: 10 8 * * *
   remote:
     enabled: true
-    schedule: 25 10 * * 0
+    schedule: 10 9 * * *
   external:
     enabled: true
-    schedule: 25 9 * * 0
+    schedule: 10 10 * * *

clusters/cl01tl/helm/blocky/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.1
+  version: 4.6.2
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.9.0
-digest: sha256:a78dcd753753806ee7b5e81380676bc289c6f196e4e4b968f1d8f71efa8556b0
-generated: "2026-05-21T20:05:26.87528061Z"
+  version: 0.7.0
+digest: sha256:855928ecd442b96a98bbeb9f957951cb70a8ab07e3c45ffd2ab33dcd5bf85a18
+generated: "2026-05-02T01:46:25.970760734Z"

clusters/cl01tl/helm/blocky/Chart.yaml

@@ -17,11 +17,11 @@ dependencies:
   - name: app-template
     alias: blocky
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.1
+    version: 4.6.2
   - name: valkey
     alias: valkey
-    version: 0.9.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/blocky.png
 # renovate: datasource=github-releases depName=0xerr0r/blocky
-appVersion: v0.30.0
+appVersion: v0.29.0

clusters/cl01tl/helm/blocky/values.yaml

@@ -8,7 +8,7 @@ blocky:
         main:
           image:
             repository: ghcr.io/0xerr0r/blocky
-            tag: v0.30.0@sha256:d9f15eddffedded40797406349012cbd5966ef99c286b13321e7a76efddb9bdc
+            tag: v0.29.0@sha256:a6d99f323d3036a99a3767a52ad612f4d8f3f31167492bfc14d4ea57b24cdfd0
           env:
             - name: TZ
               value: America/Chicago

clusters/cl01tl/helm/cilium/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: cilium
   repository: https://helm.cilium.io/
-  version: 1.18.9
-digest: sha256:f7d127bed9b2c9154f25ffdc36ef7477ac8c8b12aeb92c5f4c20be5abd49ec11
-generated: "2026-05-10T19:25:36.71023-05:00"
+  version: 1.18.6
+digest: sha256:8ea328ac238524b5b423e6289f5e25d05ef64e6aa19cfd5de238f1d5dd533e9b
+generated: "2026-02-05T12:00:20.15778-06:00"

clusters/cl01tl/helm/cilium/Chart.yaml

@@ -14,8 +14,8 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: cilium
-    version: 1.18.9
+    version: 1.18.6
     repository: https://helm.cilium.io/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/cilium.png
 # renovate: datasource=github-releases depName=cilium/cilium
-appVersion: 1.18.9
+appVersion: 1.18.6

clusters/cl01tl/helm/cilium/templates/cilium-load-balancer-ip-pool.yaml

@@ -10,3 +10,18 @@ spec:
   blocks:
     - start: "10.232.1.21"
       stop: "10.232.1.23"
+
+---
+apiVersion: cilium.io/v2
+kind: CiliumLoadBalancerIPPool
+metadata:
+  name: bgp-ip-pool
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: bgp-ip-pool
+    {{- include "custom.labels" . | nindent 4 }}
+spec:
+  blocks:
+    - start: "10.232.2.100"
+      stop: "10.232.2.200"
+  disabled: true

clusters/cl01tl/helm/cilium/values.yaml

@@ -25,14 +25,20 @@ cilium:
         - NET_ADMIN
         - SYS_ADMIN
         - SYS_RESOURCE
+  bgpControlPlane:
+    enabled: false
   bpf:
     hostLegacyRouting: true
-    masquerade: false
   devices: end0 enp6s0
   ciliumEndpointSlice:
     enabled: true
   gatewayAPI:
-    enabled: false
+    enabled: true
+    enableAppProtocol: true
+    enableAlpn: true
+    secretsNamespace:
+      create: false
+      name: kube-system
   socketLB:
     enabled: true
     hostNamespaceOnly: true

clusters/cl01tl/helm/cloudnative-pg/Chart.lock

@@ -1,15 +1,15 @@
 dependencies:
 - name: cloudnative-pg
   repository: https://cloudnative-pg.io/charts/
-  version: 0.28.2
+  version: 0.28.0
 - name: plugin-barman-cloud
   repository: https://cloudnative-pg.io/charts/
   version: 0.6.0
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.11.4
+  version: 0.5.0
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.11.4
-digest: sha256:35ff1bb60552f176dab2055a17c0e8880cc6b6c7bfa6c64415a1eec421f8723f
-generated: "2026-05-18T02:14:30.999705779Z"
+  version: 0.5.0
+digest: sha256:5db4d27087f8a712e7825dc2aac1dc26b6b4e0f9eb11373805be67212bb38e12
+generated: "2026-05-02T01:21:57.977371366Z"

clusters/cl01tl/helm/cloudnative-pg/Chart.yaml

@@ -18,7 +18,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: cloudnative-pg
-    version: 0.28.2
+    version: 0.28.0
     repository: https://cloudnative-pg.io/charts/
   - name: plugin-barman-cloud
     version: 0.6.0
@@ -26,11 +26,11 @@ dependencies:
   - name: rclone-bucket
     alias: rclone-postgres-backups-remote
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.11.4
+    version: 0.5.0
   - name: rclone-bucket
     alias: rclone-postgres-backups-external
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.11.4
+    version: 0.5.0
 icon: https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg.github.io/refs/heads/main/assets/images/hero_image.png
 # renovate: datasource=github-releases depName=cloudnative-pg/cloudnative-pg
-appVersion: 1.29.1
+appVersion: 1.29.0

clusters/cl01tl/helm/cloudnative-pg/values.yaml

@@ -18,7 +18,7 @@ rclone-postgres-backups-remote:
   nameOverride: postgres-backups-remote-rclone
   cronJob:
     suspend: false
-    schedule: 30 6 * * 1
+    schedule: 0 6 * * 6
   rclone:
     source:
       bucketName: postgres-backups
@@ -44,16 +44,17 @@ rclone-postgres-backups-remote:
 rclone-postgres-backups-external:
   nameOverride: postgres-backups-external-rclone
   cronJob:
-    suspend: false
-    schedule: 0 6 * * 1
+    suspend: true
+    schedule: 0 6 * * 6
   rclone:
     source:
-      bucketName: postgres-backups
+      bucketName: openbao-backups
     destination:
-      bucketName: postgres-backups-775957147abfbc73
+      bucketName: postgres-backups-ecc1010276b61716
+      providerType: DigitalOcean
   prune:
     enabled: true
-    ageToPrune: 14d
+    ageToPrune: 45d
     include: "/cl01tl/*/*/*/base/**"
     exclude: "**/walls/**"
   secret:
@@ -65,10 +66,10 @@ rclone-postgres-backups-external:
           path: /garage/config
       destination:
         credentials:
-          path: /backblaze/home-infra/postgres-backups
+          path: /digital-ocean/home-infra/postgres-backups
           keyIdProperty: AWS_ACCESS_KEY_ID
           secretKeyProperty: AWS_SECRET_ACCESS_KEY
           regionProperty: AWS_REGION
         config:
-          path: /backblaze/config
+          path: /digital-ocean/config
           endpointProperty: ENDPOINT

clusters/cl01tl/helm/dawarich/Chart.lock

@@ -1,21 +1,21 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.1
+  version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.15.0
+  version: 7.12.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.9.0
+  version: 0.7.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.0.0
+  version: 1.1.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.0.0
+  version: 1.1.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.0.0
-digest: sha256:cd2b6d78d834baba995997c9e2c867012ffe555dc3bea4d59bef416875f71433
-generated: "2026-05-21T20:05:51.237084324Z"
+  version: 1.1.1
+digest: sha256:3cd2af21091719533fb337241480c613ab14b3cb5820af6e386936ddf4243c14
+generated: "2026-05-02T01:46:38.13080627Z"

clusters/cl01tl/helm/dawarich/Chart.yaml

@@ -19,27 +19,27 @@ dependencies:
   - name: app-template
     alias: dawarich
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.1
+    version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.15.0
+    version: 7.12.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
-    version: 0.9.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-storage
-    version: 2.0.0
+    version: 1.1.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-public
-    version: 2.0.0
+    version: 1.1.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-watched
-    version: 2.0.0
+    version: 1.1.1
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/dawarich.png
 # renovate: datasource=github-releases depName=Freika/dawarich
-appVersion: 1.7.9
+appVersion: 1.7.5

clusters/cl01tl/helm/dawarich/templates/external-secret.yaml

@@ -50,26 +50,3 @@ spec:
       remoteRef:
         key: /cl01tl/authentik/oidc/dawarich
         property: secret
-
----
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: dawarich-metrics-credentials
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: dawarich-metrics-credentials
-    {{- include "custom.labels" . | nindent 4 }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: openbao
-  data:
-    - secretKey: user
-      remoteRef:
-        key: /cl01tl/dawarich/metrics
-        property: user
-    - secretKey: password
-      remoteRef:
-        key: /cl01tl/dawarich/metrics
-        property: password

clusters/cl01tl/helm/dawarich/values.yaml

@@ -8,7 +8,7 @@ dawarich:
         main:
           image:
             repository: freikin/dawarich
-            tag: 1.7.9@sha256:54329b050caab65f39367308ef7a9f2f3bd1fa3b6ba969d6a33bbf4a0f5e7e84
+            tag: 1.7.5@sha256:dceef4bf7bd5e6a842d61cdd2a82440a0db34f70dc766e02b0b3b212e13b4ba6
           command:
             - "web-entrypoint.sh"
           args:
@@ -78,16 +78,6 @@ dawarich:
               value: 0.0.0.0
             - name: PROMETHEUS_EXPORTER_PORT
               value: 9394
-            - name: METRICS_USERNAME
-              valueFrom:
-                secretKeyRef:
-                  name: dawarich-metrics-credentials
-                  key: user
-            - name: METRICS_PASSWORD
-              valueFrom:
-                secretKeyRef:
-                  name: dawarich-metrics-credentials
-                  key: password
             - name: SECRET_KEY_BASE
               valueFrom:
                 secretKeyRef:
@@ -136,7 +126,7 @@ dawarich:
         sidekiq:
           image:
             repository: freikin/dawarich
-            tag: 1.7.9@sha256:54329b050caab65f39367308ef7a9f2f3bd1fa3b6ba969d6a33bbf4a0f5e7e84
+            tag: 1.7.5@sha256:dceef4bf7bd5e6a842d61cdd2a82440a0db34f70dc766e02b0b3b212e13b4ba6
           command:
             - "sidekiq-entrypoint.sh"
           args:
@@ -203,16 +193,6 @@ dawarich:
               value: 0.0.0.0
             - name: PROMETHEUS_EXPORTER_PORT
               value: 9394
-            - name: METRICS_USERNAME
-              valueFrom:
-                secretKeyRef:
-                  name: dawarich-metrics-credentials
-                  key: user
-            - name: METRICS_PASSWORD
-              valueFrom:
-                secretKeyRef:
-                  name: dawarich-metrics-credentials
-                  key: password
             - name: SECRET_KEY_BASE
               valueFrom:
                 secretKeyRef:
@@ -276,13 +256,6 @@ dawarich:
           interval: 30s
           scrapeTimeout: 15s
           path: /metrics
-          basicAuth:
-            password:
-              name: dawarich-metrics-credentials
-              key: password
-            username:
-              name: dawarich-metrics-credentials
-              key: user
   route:
     main:
       kind: HTTPRoute
@@ -374,32 +347,32 @@ volsync-target-storage:
   pvcTarget: dawarich-storage
   local:
     enabled: true
-    schedule: 30 8 * * *
+    schedule: 6 8 * * *
   remote:
     enabled: true
-    schedule: 30 10 * * 0
+    schedule: 6 9 * * *
   external:
     enabled: true
-    schedule: 30 9 * * 0
+    schedule: 6 10 * * *
 volsync-target-public:
   pvcTarget: dawarich-public
   local:
     enabled: true
-    schedule: 35 8 * * *
+    schedule: 8 8 * * *
   remote:
     enabled: true
-    schedule: 35 10 * * 0
+    schedule: 8 9 * * *
   external:
     enabled: true
-    schedule: 35 9 * * 0
+    schedule: 8 10 * * *
 volsync-target-watched:
   pvcTarget: dawarich-watched
   local:
     enabled: true
-    schedule: 40 8 * * *
+    schedule: 8 8 * * *
   remote:
     enabled: true
-    schedule: 40 10 * * 0
+    schedule: 8 9 * * *
   external:
     enabled: true
-    schedule: 40 9 * * 0
+    schedule: 8 10 * * *

clusters/cl01tl/helm/descheduler/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: descheduler
   repository: https://kubernetes-sigs.github.io/descheduler/
-  version: 0.36.0
-digest: sha256:9abc2ea808e38a19d8c153ec962d8d5fd6b28b699aeccf32a1941d2b73394184
-generated: "2026-05-20T13:05:28.892962974Z"
+  version: 0.35.1
+digest: sha256:ed7cc8068b83ac483fda3a781227b35e12a34abdca214b5490e7036c89db1a95
+generated: "2026-03-09T21:21:45.788316167Z"

clusters/cl01tl/helm/descheduler/Chart.yaml

@@ -14,8 +14,8 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: descheduler
-    version: 0.36.0
+    version: 0.35.1
     repository: https://kubernetes-sigs.github.io/descheduler/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 # renovate: datasource=github-releases depName=kubernetes-sigs/descheduler
-appVersion: vv0.36.0
+appVersion: v0.35.1

clusters/cl01tl/helm/descheduler/values.yaml

@@ -1,7 +1,7 @@
 descheduler:
   image:
     repository: registry.k8s.io/descheduler/descheduler
-    tag: v0.36.0@sha256:7ca92c0a7b4f1c51d306409da6b832005fcadb224e384795646376726734c6e5
+    tag: v0.35.1@sha256:871d3b804390b0b8c7cb09d4e9b7856cf30e31f9e9e3d29562b0301a10453bb1
   kind: Deployment
   resources:
     limits:
@@ -10,7 +10,7 @@ descheduler:
     requests:
       cpu: 10m
       memory: 50Mi
-  deschedulingInterval: 2m
+  deschedulingInterval: 5m
   replicas: 3
   leaderElection:
     enabled: true
@@ -51,13 +51,13 @@ descheduler:
           - name: LowNodeUtilization
             args:
               thresholds:
-                cpu: 30
-                memory: 30
-                pods: 30
+                cpu: 20
+                memory: 20
+                pods: 20
               targetThresholds:
-                cpu: 45
-                memory: 45
-                pods: 45
+                cpu: 50
+                memory: 50
+                pods: 60
         plugins:
           balance:
             enabled:

clusters/cl01tl/helm/directus/Chart.lock

@@ -1,18 +1,15 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.1
+  version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.15.0
+  version: 7.12.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.9.0
+  version: 0.7.0
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.11.4
-- name: rclone-bucket
-  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.11.4
-digest: sha256:6a2d1c3824f01c94572919dc58c3c72267373506979aa7566b138159d4389252
-generated: "2026-05-21T20:06:21.441505828Z"
+  version: 0.5.0
+digest: sha256:0545b7862144935e861641090f24e1cfb43ba73da7bcbca5013fae6e002e2daa
+generated: "2026-05-02T01:46:52.095684422Z"

clusters/cl01tl/helm/directus/Chart.yaml

@@ -19,23 +19,19 @@ dependencies:
   - name: app-template
     alias: directus
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.1
+    version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.15.0
+    version: 7.12.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
-    version: 0.9.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: rclone-bucket
     alias: rclone-directus-assets-remote
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.11.4
-  - name: rclone-bucket
-    alias: rclone-directus-assets-external
-    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.11.4
+    version: 0.5.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/directus.png
 # renovate: datasource=github-releases depName=directus/directus
 appVersion: 11.17.4

clusters/cl01tl/helm/directus/values.yaml

@@ -211,10 +211,9 @@ valkey:
         default:
           permissions: "~* &* +@all"
 rclone-directus-assets-remote:
-  nameOverride: directus-assets-remote-rclone
   cronJob:
     suspend: false
-    schedule: 30 6 * * 2
+    schedule: 0 0 * * *
   rclone:
     source:
       bucketName: directus-assets
@@ -232,26 +231,3 @@ rclone-directus-assets-remote:
           path: /garage/home-infra/directus-assets
         config:
           path: /garage/config
-rclone-directus-assets-external:
-  nameOverride: directus-assets-external-rclone
-  cronJob:
-    suspend: false
-    schedule: 0 6 * * 2
-  rclone:
-    source:
-      bucketName: directus-assets
-    destination:
-      bucketName: directus-assets-37363a16b71dc59b
-  secret:
-    externalSecret:
-      source:
-        credentials:
-          path: /garage/home-infra/directus-assets
-        config:
-          path: /garage/config
-      destination:
-        credentials:
-          path: /backblaze/home-infra/directus-assets
-        config:
-          path: /backblaze/config
-          endpointProperty: ENDPOINT

clusters/cl01tl/helm/elastic-operator/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: eck-operator
   repository: https://helm.elastic.co
-  version: 3.4.0
-digest: sha256:b4787630154471f65ceeb12f65fa24616eab9470e61e089b8e656e42f05f74f1
-generated: "2026-05-06T19:10:32.416627028Z"
+  version: 3.3.2
+digest: sha256:ac7a849a6d8244ef56c11f18438c4c76133f92d245228c5a1c8369d42562c177
+generated: "2026-04-01T21:30:02.975920565Z"

clusters/cl01tl/helm/elastic-operator/Chart.yaml

@@ -14,8 +14,8 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: eck-operator
-    version: 3.4.0
+    version: 3.3.2
     repository: https://helm.elastic.co
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/elastic.png
 # renovate: datasource=github-releases depName=elastic/cloud-on-k8s
-appVersion: v3.4.0
+appVersion: v3.3.2

clusters/cl01tl/helm/element-web/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 1.4.36
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 3.3.1
-digest: sha256:37a41dfedd352f4122d78d17f4f3b7a703055553c45983bca0aa377cdd599fa2
-generated: "2026-05-18T02:02:39.83645496Z"
+  version: 2.6.0
+digest: sha256:36b3f340ee46f20961fdaac41724528c6c3d4b34bf26d97779da7e33087250a1
+generated: "2026-05-03T00:56:23.054212477Z"

clusters/cl01tl/helm/element-web/Chart.yaml

@@ -19,7 +19,7 @@ dependencies:
     repository: https://ananace.gitlab.io/charts
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 3.3.1
+    version: 2.6.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/element.png
 # renovate: datasource=github-releases depName=element-hq/element-web
-appVersion: v1.12.18
+appVersion: v1.12.17

clusters/cl01tl/helm/element-web/values.yaml

@@ -2,7 +2,7 @@ element-web:
   replicaCount: 1
   image:
     repository: ghcr.io/element-hq/element-web
-    tag: v1.12.18@sha256:c21772a1eabeededa19be591343f548995e458ec34ba8f27425ae923c10af82e
+    tag: v1.12.17@sha256:f4a81a24d49a9c5b97e02e77a3013ec799873e500e69041078a28be98e4f1280
   defaultServer:
     url: https://matrix.alexlebens.dev
     name: alexlebens.dev

clusters/cl01tl/helm/eraser/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 1.4.1
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.1
-digest: sha256:70822dce88f0eb843477b28caa6f738d38a6436e6e3a99b0003e3e1da69b8ed9
-generated: "2026-05-15T00:29:53.572114523Z"
+  version: 4.6.2
+digest: sha256:8414813d3d9d195b16ef7ebf814f7095a16413f4b0e579fcb37738000624f68c
+generated: "2026-04-08T21:39:05.689756-05:00"

clusters/cl01tl/helm/eraser/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
   - name: app-template
     alias: eraser-metrics
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.1
+    version: 4.6.2
 icon: https://raw.githubusercontent.com/eraser-dev/eraser/refs/heads/main/images/eraser-logo-color-1c.png
 # renovate: datasource=github-releases depName=eraser-dev/eraser
 appVersion: v1.4.1

clusters/cl01tl/helm/eraser/templates/namespace.yaml

@@ -1,10 +0,0 @@
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: {{ .Release.Namespace }}
-    {{- include "custom.labels" . | nindent 4 }}
-    pod-security.kubernetes.io/audit: privileged
-    pod-security.kubernetes.io/enforce: privileged
-    pod-security.kubernetes.io/warn: privileged

clusters/cl01tl/helm/eraser/values.yaml

@@ -44,13 +44,11 @@ eraser-metrics:
       type: deployment
       replicas: 1
       strategy: Recreate
-      serviceAccount:
-        name: eraser-metrics
       containers:
         main:
           image:
             repository: ghcr.io/open-telemetry/opentelemetry-collector-releases/opentelemetry-collector
-            tag: 0.152.1@sha256:c5cde41675a68e392322140d25fa232b4585e4e7fdc5f8c39d61d968bc13dae6
+            tag: 0.151.0@sha256:49a12827519134ed72881a64247ea43fbf4bdac50cfa41ceb495fc1c684451e2
           command:
             - /otelcol
             - --config=/conf/otel-collector-config.yaml
@@ -85,9 +83,6 @@ eraser-metrics:
                   - otlp
                 exporters:
                   - prometheus
-  serviceAccount:
-    eraser:
-      enabled: true
   service:
     main:
       controller: main

clusters/cl01tl/helm/excalidraw/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.1
-digest: sha256:a8a769a74eddcce81dd9c5740ad124125ebfc1a291332c8ed10c0bdc5230a7b4
-generated: "2026-05-15T00:30:12.00717252Z"
+  version: 4.6.2
+digest: sha256:e05d84dd266b8b456a8bc7f9a2bb3ab01f4ac926efd1a58cf405b0cdab343d3f
+generated: "2026-01-17T18:27:08.062835-06:00"

clusters/cl01tl/helm/excalidraw/Chart.yaml

@@ -16,7 +16,7 @@ dependencies:
   - name: app-template
     alias: excalidraw
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.1
+    version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/excalidraw.png
 # renovate: datasource=github-releases depName=excalidraw/excalidraw
 appVersion: v0.18.1

clusters/cl01tl/helm/excalidraw/values.yaml

@@ -8,7 +8,7 @@ excalidraw:
         main:
           image:
             repository: excalidraw/excalidraw
-            tag: latest@sha256:f7ee194addd607bf831d2af0f0a34463dd4225e426cf35199ef0b12a803398e9
+            tag: latest@sha256:b6cd04431d88f2756a7c3095cf7970884e8fd6b2800c9445b5a60a5c715bbf0c
           env:
             - name: NODE_ENV
               value: production

clusters/cl01tl/helm/external-secrets/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: external-secrets
   repository: https://charts.external-secrets.io
-  version: 2.5.0
-digest: sha256:8aa24d4e44c2d9ff6a88a4d126ca3ae6ec2e960b87e9a34a2862e7dca157404f
-generated: "2026-05-15T16:12:48.985351129Z"
+  version: 2.4.1
+digest: sha256:f862e1236cdbd9ddea5692ae63f7a05a4dc1f3d60bcae33015237cc0a630c224
+generated: "2026-04-28T18:30:17.998349684Z"

clusters/cl01tl/helm/external-secrets/Chart.yaml

@@ -14,8 +14,8 @@ sources:
 dependencies:
   - name: external-secrets
     alias: external-secrets
-    version: 2.5.0
+    version: 2.4.1
     repository: https://charts.external-secrets.io
 icon: https://raw.githubusercontent.com/external-secrets/external-secrets/refs/heads/main/assets/eso-logo-large.png
 # renovate: datasource=github-releases depName=external-secrets/external-secrets
-appVersion: vv2.5.0
+appVersion: v2.4.1

clusters/cl01tl/helm/external-secrets/values.yaml

@@ -2,7 +2,7 @@ external-secrets:
   replicaCount: 3
   image:
     repository: ghcr.io/external-secrets/external-secrets
-    tag: v2.5.0@sha256:45e7bee4e743331288df01efce0e35b41738cffdc89c86a235359a5153257489
+    tag: v2.4.1@sha256:9440a40b394791a5e93f3f7e1b33399ecbdc0e38273de1d69ed83fe12936fc09
   installCRDs: true
   crds:
     createClusterExternalSecret: true
@@ -29,7 +29,7 @@ external-secrets:
   webhook:
     image:
       repository: ghcr.io/external-secrets/external-secrets
-      tag: v2.5.0@sha256:45e7bee4e743331288df01efce0e35b41738cffdc89c86a235359a5153257489
+      tag: v2.4.1@sha256:9440a40b394791a5e93f3f7e1b33399ecbdc0e38273de1d69ed83fe12936fc09
     resources:
       requests:
         cpu: 1m
@@ -37,7 +37,7 @@ external-secrets:
   certController:
     image:
       repository: ghcr.io/external-secrets/external-secrets
-      tag: v2.5.0@sha256:45e7bee4e743331288df01efce0e35b41738cffdc89c86a235359a5153257489
+      tag: v2.4.1@sha256:9440a40b394791a5e93f3f7e1b33399ecbdc0e38273de1d69ed83fe12936fc09
     resources:
       requests:
         cpu: 1m

clusters/cl01tl/helm/foldergram/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.1
+  version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 3.3.1
+  version: 2.6.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.0.0
-digest: sha256:5637258c6907d062d327578a8b4f6a97112446f2f1ef2f1085e9317baba49310
-generated: "2026-05-18T02:02:50.886833918Z"
+  version: 1.1.1
+digest: sha256:942224d5a91527ca20a46363d9c5b165643b11df043c119a315f94931e9e4975
+generated: "2026-04-28T23:31:37.471509638Z"

clusters/cl01tl/helm/foldergram/Chart.yaml

@@ -18,14 +18,14 @@ dependencies:
   - name: app-template
     alias: foldergram
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.1
+    version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 3.3.1
+    version: 2.6.0
   - name: volsync-target
     alias: volsync-target-db
-    version: 2.0.0
+    version: 1.1.1
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://raw.githubusercontent.com/foldergram/foldergram/refs/heads/main/client/public/icon-512.png
 # renovate: datasource=github-releases depName=foldergram/foldergram
-appVersion: v1.2.0
+appVersion: v1.1.0

clusters/cl01tl/helm/foldergram/values.yaml

@@ -12,7 +12,7 @@ foldergram:
         main:
           image:
             repository: ghcr.io/foldergram/foldergram
-            tag: 1.2.0@sha256:325e7fcd257cbecaf29a8623cebcbf6f7935fe90454160adf0a43e0a0fcddb91
+            tag: 1.1.0@sha256:b08c7f30a15a3d3e4cf0877a5271cb76be6a36ab83751f040c115ccdb76b736a
           env:
             - name: IMAGE_DETAIL_SOURCE
               value: original
@@ -87,10 +87,10 @@ volsync-target-db:
   pvcTarget: foldergram-db
   local:
     enabled: true
-    schedule: 0 8 * * *
+    schedule: 46 11 * * *
   remote:
     enabled: true
-    schedule: 0 10 * * 1
+    schedule: 46 12 * * *
   external:
     enabled: true
-    schedule: 0 9 * * 1
+    schedule: 46 13 * * *

clusters/cl01tl/helm/freshrss/Chart.lock

@@ -1,15 +1,15 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.1
+  version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 3.3.1
+  version: 2.6.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.15.0
+  version: 7.12.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.0.0
-digest: sha256:84e460d3ab6bb300c80858d3261d8a8e4395e3e1d099b7aed4f9e8d68dca54ac
-generated: "2026-05-19T16:29:45.768206873Z"
+  version: 1.1.1
+digest: sha256:6b2bae691798ed86c9549dfce0c455015533f00fff92363b58bce61201fbfc8d
+generated: "2026-04-28T23:31:47.227478798Z"

clusters/cl01tl/helm/freshrss/Chart.yaml

@@ -19,18 +19,18 @@ dependencies:
   - name: app-template
     alias: freshrss
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.1
+    version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 3.3.1
+    version: 2.6.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.15.0
+    version: 7.12.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data
-    version: 2.0.0
+    version: 1.1.1
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/freshrss.png
 # renovate: datasource=github-releases depName=FreshRSS/FreshRSS
-appVersion: 1.29.1
+appVersion: 1.28.1

clusters/cl01tl/helm/freshrss/values.yaml

@@ -8,7 +8,7 @@ freshrss:
         main:
           image:
             repository: freshrss/freshrss
-            tag: 1.29.1@sha256:ab6b363102ccdbc39f6a62db926f567c61a5289bf25ba460f1c34423d8cc1a4d
+            tag: 1.28.1@sha256:9100f649f5c946f589f54cdb9be7a65996528f48f691ef90eb262a0e06e5a522
           env:
             - name: PGID
               value: "568"
@@ -126,10 +126,10 @@ volsync-target-data:
     fsGroupChangePolicy: OnRootMismatch
   local:
     enabled: true
-    schedule: 5 8 * * *
+    schedule: 18 8 * * *
   remote:
     enabled: true
-    schedule: 5 10 * * 1
+    schedule: 18 9 * * *
   external:
     enabled: true
-    schedule: 5 9 * * 1
+    schedule: 18 10 * * *

clusters/cl01tl/helm/garage/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.1
-digest: sha256:3f06ada15810597c2673ed3de9e9fdabf21a6d42273b736a15759c21b889024a
-generated: "2026-05-15T00:31:00.309678009Z"
+  version: 4.6.2
+digest: sha256:86536c14fa61870a64540b77f65afae8f4308e41a66eefae7fe85b83bf0df30e
+generated: "2026-01-16T18:46:33.321938614Z"

clusters/cl01tl/helm/garage/Chart.yaml

@@ -18,7 +18,7 @@ dependencies:
   - name: app-template
     alias: garage
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.1
+    version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/garage.png
 # renovate: datasource=docker depName=dxflrs/garage
 appVersion: v2.3.0

clusters/cl01tl/helm/gatus/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 1.5.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.15.0
+  version: 7.12.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.0.0
-digest: sha256:6e5cf76d66ca20457d663526d2922d200ce2e38223d564b0b6dfa6ef2179abe7
-generated: "2026-05-19T16:30:05.366292277Z"
+  version: 1.1.1
+digest: sha256:883863a9121ecbd519b19c6ffcfbaf7df0f7273b0877d303ed8922ba07f79c4b
+generated: "2026-04-28T23:31:56.941778354Z"

clusters/cl01tl/helm/gatus/Chart.yaml

@@ -20,12 +20,12 @@ dependencies:
     version: 1.5.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.15.0
+    version: 7.12.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data
-    version: 2.0.0
+    version: 1.1.1
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/gatus.png
 # renovate: datasource=github-releases depName=TwiN/gatus
-appVersion: v5.36.0
+appVersion: v5.35.0

clusters/cl01tl/helm/gatus/values.yaml

@@ -3,7 +3,7 @@ gatus:
     strategy: Recreate
   image:
     repository: ghcr.io/twin/gatus
-    tag: v5.36.0@sha256:c5f210d095fa78e6efaa20ffeb14803f2ba4f10615e16a6d12087697149617f0
+    tag: v5.35.0@sha256:21609f31be8c4e680ce3004b24276305666239c99aff58391503f3fb6142f39d
   annotations:
     reloader.stakater.com/auto: "true"
   gateway:
@@ -92,7 +92,6 @@ gatus:
         scopes: [openid]
     storage:
       type: postgres
-      caching: true
       path: "postgres://${POSTGRES_USER}:${POSTGRES_PASSWORD}@${POSTGRES_HOST}:${POSTGRES_PORT}/${POSTGRES_DB}?sslmode=disable"
     default-endpoint: &defaults
       group: core
@@ -413,10 +412,10 @@ volsync-target-data:
   pvcTarget: gatus
   local:
     enabled: true
-    schedule: 15 8 * * *
+    schedule: 20 8 * * *
   remote:
     enabled: true
-    schedule: 15 10 * * 1
+    schedule: 20 9 * * *
   external:
     enabled: true
-    schedule: 15 9 * * 1
+    schedule: 20 10 * * *

clusters/cl01tl/helm/generic-device-plugin/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: generic-device-plugin
   repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-  version: 0.21.6
-digest: sha256:a2cdefb5c528e5c7045ae3e3bc1ebd9932ef0333fe8d72905e8f3ec3731c9dea
-generated: "2026-05-19T15:06:32.886164281Z"
+  version: 0.20.31
+digest: sha256:2e073f735a5ff699844eb67715ab20d403261b3e9c035ebdc4292cee9666b4f4
+generated: "2026-04-15T01:16:30.361061773Z"

clusters/cl01tl/helm/generic-device-plugin/Chart.yaml

@@ -14,6 +14,6 @@ maintainers:
 dependencies:
   - name: generic-device-plugin
     repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-    version: 0.21.6
+    version: 0.20.31
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 appVersion: 1.0.0

clusters/cl01tl/helm/gitea/Chart.lock

@@ -1,7 +1,7 @@
 dependencies:
 - name: gitea
   repository: https://dl.gitea.com/charts/
-  version: 12.6.0
+  version: 12.5.3
 - name: actions
   repository: https://dl.gitea.com/charts/
   version: 0.1.0
@@ -10,18 +10,18 @@ dependencies:
   version: 0.32.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 3.3.1
+  version: 2.6.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.15.0
+  version: 7.12.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.9.0
+  version: 0.7.0
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.9.0
+  version: 0.7.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.0.0
-digest: sha256:f9460da517cf3e230d71a2afd2d5e5d4c6b98e8e021a4aa13dfd34d31170790a
-generated: "2026-05-21T20:06:46.936063837Z"
+  version: 1.1.1
+digest: sha256:511ffcd0b9ab17ff7c9dff6fc72a2ef802a51a14a4f03e416acee40fa0d1f12a
+generated: "2026-05-02T01:47:05.386747243Z"

clusters/cl01tl/helm/gitea/Chart.yaml

@@ -26,7 +26,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: gitea
-    version: 12.6.0
+    version: 12.5.3
     repository: https://dl.gitea.com/charts/
   - name: actions
     alias: gitea-actions
@@ -37,23 +37,23 @@ dependencies:
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 3.3.1
+    version: 2.6.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.15.0
+    version: 7.12.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey-gitea
-    version: 0.9.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey-renovate
-    version: 0.9.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-storage
-    version: 2.0.0
+    version: 1.1.1
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/gitea.png
 # renovate: datasource=github-releases depName=go-gitea/gitea
-appVersion: 1.26.1
+appVersion: 1.26.0

clusters/cl01tl/helm/gitea/values.yaml

@@ -9,7 +9,7 @@ gitea:
       maxUnavailable: 1
   image:
     repository: gitea/gitea
-    tag: 1.26.1
+    tag: 1.25.5
   service:
     http:
       type: ClusterIP
@@ -212,7 +212,7 @@ gitea-actions:
       registry: docker.io
       repository: docker
       # renovate: datasource=docker depName=docker
-      tag: 29.5.1-dind@sha256:eed377f3ce14afda560e742c5b3ae446df1ce00a16e1beab2ac6c78c1477fe85
+      tag: 29.4.1-dind@sha256:c77e5d7912f9b137cc67051fdc2991d8f5ae22c55ddf532bb836dcb693a04940
       extraVolumeMounts:
         - name: docker-vol
           mountPath: /var/lib/docker
@@ -255,11 +255,7 @@ postgres-18-cluster:
   cluster:
     resources:
       requests:
-        memory: 2Gi
         cpu: 100m
-    postgresql:
-      parameters:
-        shared_buffers: 2GB
   recovery:
     method: objectStore
     objectStore:

clusters/cl01tl/helm/grafana-operator/Chart.lock

@@ -1,15 +1,15 @@
 dependencies:
 - name: grafana-operator
   repository: https://grafana.github.io/helm-charts
-  version: 5.23.0
+  version: 5.22.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.15.0
+  version: 7.12.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.9.0
+  version: 0.7.0
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.9.0
-digest: sha256:8e441f3d69aa8b4186265cd7b265d75f6faae8883fb4ecb8d23db2d61ec2a954
-generated: "2026-05-22T00:24:27.626131121Z"
+  version: 0.7.0
+digest: sha256:1abbac7c3dd999e08b60bc86d45bf4d5740c02a078d4ee7145c5379c274e93d3
+generated: "2026-05-02T01:47:25.480915936Z"

clusters/cl01tl/helm/grafana-operator/Chart.yaml

@@ -16,20 +16,20 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: grafana-operator
-    version: 5.23.0
+    version: 5.22.2
     repository: https://grafana.github.io/helm-charts
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.15.0
+    version: 7.12.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey-unified-alerting
-    version: 0.9.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey-remote-cache
-    version: 0.9.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/grafana.png
 # renovate: datasource=github-releases depName=grafana/grafana-operator
-appVersion: v5.23.0
+appVersion: v5.22.2

clusters/cl01tl/helm/grafana-operator/templates/grafana-dashboard.yaml

@@ -195,24 +195,6 @@ spec:
   resyncPeriod: 6h
   url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/service/cert-manager.json
 
----
-apiVersion: grafana.integreatly.org/v1beta1
-kind: GrafanaDashboard
-metadata:
-  name: grafana-dashboard-cloudflare-tunnels
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: grafana-dashboard-cloudflare-tunnels
-    {{- include "custom.labels" . | nindent 4 }}
-spec:
-  instanceSelector:
-    matchLabels:
-      app: grafana-main
-  contentCacheDuration: 6h
-  folderUID: grafana-folder-service
-  resyncPeriod: 6h
-  url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/service/cloudflare-tunnels.json
-
 ---
 apiVersion: grafana.integreatly.org/v1beta1
 kind: GrafanaDashboard
@@ -429,6 +411,24 @@ spec:
   resyncPeriod: 6h
   url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/service/unpoller.json
 
+---
+apiVersion: grafana.integreatly.org/v1beta1
+kind: GrafanaDashboard
+metadata:
+  name: grafana-dashboard-version-checker-internal
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: grafana-dashboard-version-checker-internal
+    {{- include "custom.labels" . | nindent 4 }}
+spec:
+  instanceSelector:
+    matchLabels:
+      app: grafana-main
+  contentCacheDuration: 6h
+  folderUID: grafana-folder-service
+  resyncPeriod: 6h
+  url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/service/version-checker-internal.json
+
 ---
 apiVersion: grafana.integreatly.org/v1beta1
 kind: GrafanaDashboard
@@ -573,24 +573,6 @@ spec:
   resyncPeriod: 6h
   url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/platform/qbittorrent.json
 
----
-apiVersion: grafana.integreatly.org/v1beta1
-kind: GrafanaDashboard
-metadata:
-  name: grafana-dashboard-rclone
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: grafana-dashboard-rclone
-    {{- include "custom.labels" . | nindent 4 }}
-spec:
-  instanceSelector:
-    matchLabels:
-      app: grafana-main
-  contentCacheDuration: 6h
-  folderUID: grafana-folder-platform
-  resyncPeriod: 6h
-  url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/platform/rclone.json
-
 ---
 apiVersion: grafana.integreatly.org/v1beta1
 kind: GrafanaDashboard

clusters/cl01tl/helm/grafana-operator/values.yaml

@@ -3,7 +3,7 @@ grafana-operator:
     registry: ghcr.io
     repository: grafana/grafana-operator
     # renovate: datasource=docker depName=ghcr.io/grafana/grafana-operator
-    tag: v5.23.0@sha256:3abeaccdf54e9e02c2f4b6215be594c8f78b94a866961ada7f92b677bf33c9b4
+    tag: v5.22.2@sha256:d45fc24e8f43d83286d81625ee8d919d0fc88255a6500b63f68d7966a4f9e9af
   replicas: 2
   resources:
     requests:

clusters/cl01tl/helm/grimmory/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.1
+  version: 4.6.2
 - name: mariadb-cluster
   repository: https://helm.mariadb.com/mariadb-operator
   version: 26.3.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.0.0
-digest: sha256:4eba9af92ba90b1ee08c1a7cf60d37fdabbde58c8490c783e11fe55c1864847d
-generated: "2026-05-14T19:19:34.565874-05:00"
+  version: 1.1.1
+digest: sha256:3e1a513297b39105174d3f1d6010ac85526de3d9cf6418ea724599b42e8c0cd9
+generated: "2026-04-28T23:32:22.706602876Z"

clusters/cl01tl/helm/grimmory/Chart.yaml

@@ -18,14 +18,14 @@ dependencies:
   - name: app-template
     alias: grimmory
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.1
+    version: 4.6.2
   - name: mariadb-cluster
     version: 26.3.0
     repository: https://helm.mariadb.com/mariadb-operator
   - name: volsync-target
     alias: volsync-target-config
-    version: 2.0.0
+    version: 1.1.1
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/grimmory.png
 # renovate: datasource=github-releases depName=grimmory-tools/grimmory
-appVersion: v3.1.0
+appVersion: v3.0.3

clusters/cl01tl/helm/grimmory/values.yaml

@@ -12,7 +12,7 @@ grimmory:
         main:
           image:
             repository: ghcr.io/grimmory-tools/grimmory
-            tag: v3.1.0@sha256:c83dcb59975c9a680ecdf84d60e7e5c9b05200818bab8794f4d84a7e008a549a
+            tag: v3.0.3@sha256:a903a2b44c308bd1738b6f7cdb5a2e5a2a1ae23a092f30eb68581e2be1af50cd
           env:
             - name: TZ
               value: America/Chicago
@@ -37,37 +37,6 @@ grimmory:
             requests:
               cpu: 10m
               memory: 1Gi
-          probes:
-            liveness:
-              enabled: true
-              custom: true
-              spec:
-                httpGet:
-                  path: /api/v1/healthcheck
-                  port: 6060
-                failureThreshold: 5
-                periodSeconds: 10
-                timeoutSeconds: 5
-            readiness:
-              enabled: true
-              custom: true
-              spec:
-                httpGet:
-                  path: /api/v1/healthcheck
-                  port: 6060
-                failureThreshold: 5
-                periodSeconds: 10
-                timeoutSeconds: 5
-            startup:
-              enabled: true
-              custom: true
-              spec:
-                httpGet:
-                  path: /api/v1/healthcheck
-                  port: 6060
-                failureThreshold: 30
-                periodSeconds: 60
-                timeoutSeconds: 5
   service:
     main:
       controller: main
@@ -251,10 +220,10 @@ volsync-target-config:
     fsGroupChangePolicy: OnRootMismatch
   local:
     enabled: true
-    schedule: 20 8 * * *
+    schedule: 12 8 * * *
   remote:
     enabled: true
-    schedule: 20 10 * * 1
+    schedule: 12 9 * * *
   external:
     enabled: true
-    schedule: 20 9 * * 1
+    schedule: 12 10 * * *

clusters/cl01tl/helm/harbor/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: harbor
   repository: https://helm.goharbor.io
-  version: 1.19.0
+  version: 1.18.3
 - name: postgres-cluster
   repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
-  version: 7.15.0
+  version: 7.12.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.9.0
-digest: sha256:3f12966ac47aa1912f222875b5dedce047de094768e43082aaa0b85f3c2a366d
-generated: "2026-05-21T20:07:47.472198246Z"
+  version: 0.7.0
+digest: sha256:8ce1125e688aa0f2da0f9f11157b8bab9bbc11aa82d16ed8e7c5141dccb508fd
+generated: "2026-05-02T01:47:39.632625858Z"

clusters/cl01tl/helm/harbor/Chart.yaml

@@ -16,16 +16,16 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: harbor
-    version: 1.19.0
+    version: 1.18.3
     repository: https://helm.goharbor.io
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.15.0
+    version: 7.12.1
     repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
   - name: valkey
     alias: valkey
-    version: 0.9.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/harbor.png
 # renovate: datasource=github-releases depName=goharbor/harbor
-appVersion: v2.15.1
+appVersion: v2.15.0

clusters/cl01tl/helm/harbor/values.yaml

@@ -59,7 +59,7 @@ harbor:
     registry:
       image:
         repository: goharbor/registry-photon
-        tag: v2.15.1@sha256:ebf0325c2661729dbb317cbf839608eb8b15cfa158911a94976f2c21563c466e
+        tag: v2.15.0@sha256:beb49fd16cf0906c04a2bf51a22f7210289e7cc2ae43a733e2a0364380aceae6
     controller:
       image:
         repository: ghcr.io/goharbor/harbor-registryctl

clusters/cl01tl/helm/headlamp/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: headlamp
   repository: https://kubernetes-sigs.github.io/headlamp/
-  version: 0.42.0
-digest: sha256:09efb4cfe9ef92337074c8ae52a564bf902be41f9fcd742dde34b3fe4b4331fa
-generated: "2026-05-07T20:38:18.198513024Z"
+  version: 0.41.0
+digest: sha256:b1cbc64b393c6c9e1c460510adab528cee8336735659040b9c517976e5c6f15d
+generated: "2026-03-26T15:07:50.703213905Z"

clusters/cl01tl/helm/headlamp/Chart.yaml

@@ -13,8 +13,8 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: headlamp
-    version: 0.42.0
+    version: 0.41.0
     repository: https://kubernetes-sigs.github.io/headlamp/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/headlamp.png
 # renovate: datasource=github-releases depName=headlamp-k8s/headlamp
-appVersion: vv0.42.0
+appVersion: v0.41.0

clusters/cl01tl/helm/headlamp/values.yaml

@@ -3,7 +3,7 @@ headlamp:
   image:
     registry: ghcr.io
     repository: headlamp-k8s/headlamp
-    tag: v0.42.0@sha256:c9754bae1d799220da0547e51ceee234f6e66ebadc138518ca73e33ecd331e59
+    tag: v0.41.0@sha256:89c6c65810bfde61796483c93c70d659104355593792bf55cab680d685da8eeb
   config:
     oidc:
       secret:

clusters/cl01tl/helm/home-assistant/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.1
+  version: 4.6.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.0.0
-digest: sha256:dcee661c9cf87129758d2ddc0b3f190ce97792a6fc440d1e377c0405c2737927
-generated: "2026-05-15T00:31:14.847026559Z"
+  version: 1.1.1
+digest: sha256:0c0dd41e2bd0102b956697b2171e223988042072fe61b7b979d4091e76fca9d4
+generated: "2026-04-28T23:32:34.16634307Z"

clusters/cl01tl/helm/home-assistant/Chart.yaml

@@ -17,11 +17,11 @@ dependencies:
   - name: app-template
     alias: home-assistant
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.1
+    version: 4.6.2
   - name: volsync-target
     alias: volsync-target-config
-    version: 2.0.0
+    version: 1.1.1
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/home-assistant.png
 # renovate: datasource=github-releases depName=home-assistant/core
-appVersion: 2026.5.3
+appVersion: 2026.4.4

clusters/cl01tl/helm/home-assistant/values.yaml

@@ -12,7 +12,7 @@ home-assistant:
         main:
           image:
             repository: ghcr.io/home-assistant/home-assistant
-            tag: 2026.5.3@sha256:ff875078181a0383bf3fca9f061be12d6180896dbd531de04e094e25505b0bb9
+            tag: 2026.4.4@sha256:c1e5f0147f4cb51ccb05bb30b62a1269cc1bd48a6274792d3b38a77ab274dfd2
           env:
             - name: TZ
               value: America/Chicago
@@ -23,7 +23,7 @@ home-assistant:
         code-server:
           image:
             repository: ghcr.io/linuxserver/code-server
-            tag: 4.121.0-ls339@sha256:9aa515147487869f15421944069674ac9797ad4c0629041fd9a003f95b796d6c
+            tag: 4.117.0-ls334@sha256:1f384394d473c43ab6a39b2227ba3aa9c95af648ce3a67e1b4da1969c16c7c0d
           env:
             - name: TZ
               value: America/Chicago
@@ -121,10 +121,10 @@ volsync-target-config:
     fsGroupChangePolicy: OnRootMismatch
   local:
     enabled: true
-    schedule: 25 8 * * *
+    schedule: 22 8 * * *
   remote:
     enabled: true
-    schedule: 25 10 * * 1
+    schedule: 22 9 * * *
   external:
     enabled: true
-    schedule: 25 9 * * 1
+    schedule: 22 10 * * *

clusters/cl01tl/helm/homepage/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.1
-digest: sha256:412193f3faa2c9f10bfeb9574cc34cf4fd0b15c67542afe26a8ba77e667e310e
-generated: "2026-05-15T00:31:25.50600653Z"
+  version: 4.6.2
+digest: sha256:1f6cc724b7c88b5209d893b4b3c914e4064a5450e9bb6ca89ef5642199020f2b
+generated: "2026-01-16T18:47:06.186790637Z"

clusters/cl01tl/helm/homepage/Chart.yaml

@@ -16,7 +16,7 @@ dependencies:
   - name: app-template
     alias: homepage
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.1
+    version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/homepage.png
 # renovate: datasource=github-releases depName=gethomepage/homepage
-appVersion: v1.13.1
+appVersion: v1.12.3

clusters/cl01tl/helm/homepage/values.yaml

@@ -8,13 +8,15 @@ homepage:
       strategy: Recreate
       annotations:
         reloader.stakater.com/auto: "true"
+      serviceAccount:
+        name: homepage
       pod:
         automountServiceAccountToken: true
       containers:
         main:
           image:
             repository: ghcr.io/gethomepage/homepage
-            tag: v1.13.1@sha256:d8d784e5090111b6e4c56dfd90e272d2953a2094e87349f647165df0fa6c4401
+            tag: v1.12.3@sha256:cc84f2f5eb3c7734353701ccbaa24ed02dacb0d119114e50e4251e2005f3990a
           env:
             - name: HOMEPAGE_ALLOWED_HOSTS
               value: home.alexlebens.net
@@ -25,6 +27,10 @@ homepage:
             requests:
               cpu: 1m
               memory: 128Mi
+  serviceAccount:
+    homepage:
+      enabled: true
+      staticToken: true
   configMaps:
     config:
       enabled: true
@@ -268,10 +274,10 @@ homepage:
                   siteMonitor: http://ollama-web.ollama:80
                   statusStyle: dot
               - AI Image:
-                  icon: sh-invoke-ai.webp
-                  description: Invoke AI
-                  href: https://invoke-ai-pd05wd.boreal-beaufort.ts.net/app
-                  siteMonitor: https://invoke-ai-pd05wd.boreal-beaufort.ts.net
+                  icon: https://user-images.githubusercontent.com/36368048/196280761-1535f413-a91e-4b6a-af6a-b890f8ae204c.png
+                  description: Stable Diffusion
+                  href: https://stable-diffusion-pd05wd.boreal-beaufort.ts.net
+                  siteMonitor: https://stable-diffusion-pd05wd.boreal-beaufort.ts.net
                   statusStyle: dot
               - Search:
                   icon: sh-searxng.webp
@@ -879,9 +885,9 @@ homepage:
               - Github:
                   - abbr: GH
                     href: https://github.com/alexlebens
-              - Backblaze:
-                  - abbr: BB
-                    href: https://secure.backblaze.com
+              - Digital Ocean:
+                  - abbr: DO
+                    href: https://www.digitalocean.com/
               - Cloudflare:
                   - abbr: CF
                     href: https://dash.cloudflare.com/b76e303258b84076ee01fd0f515c0768
@@ -891,6 +897,9 @@ homepage:
               - ProtonVPN:
                   - abbr: PV
                     href: https://account.protonvpn.com/
+              - AirVPN:
+                  - abbr: AV
+                    href: https://airvpn.org/
               - Unifi:
                   - abbr: UF
                     href: https://unifi.ui.com/

clusters/cl01tl/helm/houndarr/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.1
+  version: 4.6.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.0.0
-digest: sha256:0bbdd30b65e6074a608d257108e9e94c0906f729c237916777f299c14319520d
-generated: "2026-05-15T00:31:36.907874668Z"
+  version: 1.1.1
+digest: sha256:de21eea7c5550645f0f1208758c3a81c6e015b90eae728c0b9740ddfc3f26880
+generated: "2026-04-28T23:32:44.359353393Z"

clusters/cl01tl/helm/houndarr/Chart.yaml

@@ -18,10 +18,10 @@ dependencies:
   - name: app-template
     alias: houndarr
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.1
+    version: 4.6.2
   - name: volsync-target
     alias: volsync-target-data
-    version: 2.0.0
+    version: 1.1.1
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/houndarr.png
 # renovate: datasource=github-releases depName=av1155/houndarr

clusters/cl01tl/helm/houndarr/values.yaml

@@ -69,10 +69,10 @@ volsync-target-data:
     fsGroupChangePolicy: OnRootMismatch
   local:
     enabled: true
-    schedule: 30 8 * * *
+    schedule: 40 11 * * *
   remote:
     enabled: true
-    schedule: 30 10 * * 1
+    schedule: 40 12 * * *
   external:
     enabled: true
-    schedule: 30 9 * * 1
+    schedule: 40 14 * * *

clusters/cl01tl/helm/immich/Chart.lock

@@ -1,15 +1,15 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.1
+  version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.15.0
+  version: 7.12.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.9.0
+  version: 0.7.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.0.0
-digest: sha256:61c7ed165fd02bd41fc1703b3b213c68cdbae746576ffeedbec35725db4c7e76
-generated: "2026-05-21T20:08:09.249760256Z"
+  version: 1.1.1
+digest: sha256:a0fdf72de4f4e2a475035e6ece26fe570e548895db02374a08fd4f3481c55dc0
+generated: "2026-05-02T01:47:54.093954603Z"

clusters/cl01tl/helm/immich/Chart.yaml

@@ -18,18 +18,18 @@ dependencies:
   - name: app-template
     alias: immich
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.1
+    version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.15.0
+    version: 7.12.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
-    version: 0.9.0
+    version: 0.7.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data
-    version: 2.0.0
+    version: 1.1.1
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/immich.png
 # renovate: datasource=github-releases depName=immich-app/immich

clusters/cl01tl/helm/immich/values.yaml

@@ -4,8 +4,8 @@ immich:
       type: deployment
       replicas: 1
       strategy: Recreate
-      pod:
-        automountServiceAccountToken: true
+      serviceAccount:
+        name: immich
       containers:
         main:
           image:
@@ -88,6 +88,10 @@ immich:
               gpu.intel.com/i915: 1
               cpu: 10m
               memory: 500Mi
+  serviceAccount:
+    immich:
+      enabled: true
+      staticToken: true
   service:
     main:
       controller: main
@@ -167,8 +171,10 @@ postgres-18-cluster:
   cluster:
     image:
       repository: ghcr.io/tensorchord/cloudnative-vectorchord
-      tag: 18.3-1.1.1
+      tag: 18.0-0.5.3
     postgresql:
+      parameters:
+        shared_buffers: 256MB
       shared_preload_libraries:
         - "vchord.so"
     initdb:
@@ -198,16 +204,16 @@ volsync-target-data:
   pvcTarget: immich
   local:
     enabled: true
-    schedule: 35 8 * * *
+    schedule: 24 8 * * *
     restic:
       cacheCapacity: 10Gi
   remote:
     enabled: true
-    schedule: 35 10 * * 1
+    schedule: 24 9 * * *
     restic:
       cacheCapacity: 10Gi
   external:
     enabled: true
-    schedule: 35 9 * * 1
+    schedule: 24 10 * * *
     restic:
       cacheCapacity: 10Gi

clusters/cl01tl/helm/isponsorblocktv/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.1
-digest: sha256:c633b45cb97c5270952a5bd9a13fd63b031af94d66e0a630a17a35da10706752
-generated: "2026-05-15T00:32:02.180685732Z"
+  version: 4.6.2
+digest: sha256:65da71c32b4576a11e590f059d97dae22137448cb71049258d018cf5b7bb4a92
+generated: "2026-04-26T14:59:16.326539-05:00"

clusters/cl01tl/helm/isponsorblocktv/Chart.yaml

@@ -16,7 +16,7 @@ dependencies:
   - name: app-template
     alias: isponsorblocktv
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.1
+    version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/youtube.png
 # renovate: datasource=github-releases depName=dmunozv04/iSponsorBlockTV
-appVersion: v2.9.0
+appVersion: v2.8.1

clusters/cl01tl/helm/isponsorblocktv/values.yaml

@@ -4,17 +4,21 @@ isponsorblocktv:
       type: deployment
       replicas: 1
       strategy: Recreate
-      pod:
-        automountServiceAccountToken: true
+      serviceAccount:
+        name: isponsorblocktv
       containers:
         main:
           image:
             repository: ghcr.io/dmunozv04/isponsorblocktv
-            tag: v2.9.0@sha256:5b8cfa805cb60b99a9e83a2df62d41c63865a315f7ee7cfed1a78052d93650b6
+            tag: v2.8.1@sha256:ac35b5d861f437cd5c71d0ccea7c3ed7ea0938ae08cbb6e256de06a236b106f5
           resources:
             requests:
               cpu: 1m
               memory: 20Mi
+  serviceAccount:
+    isponsorblocktv:
+      enabled: true
+      staticToken: true
   persistence:
     config:
       type: custom