chore(deps): update temporalio/admin-tools docker tag to v1.31.0

.gitea/workflows/renovate.yaml

@@ -13,7 +13,7 @@ on:
 jobs:
   renovate:
     runs-on: ubuntu-js
-    container: ghcr.io/renovatebot/renovate:43.169.3@sha256:8545351921176f15250454ec6a634d97e6f2b4ee6182507226daadba13180334
+    container: ghcr.io/renovatebot/renovate:43.160.0@sha256:28d6d66ffe2f4fd86bb29c9e9b5cae7215ada90b17605a45e35fa8d4a73159ac
     steps:
       - name: Checkout
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6

clusters/cl01tl/helm/actual/Chart.yaml

@@ -24,4 +24,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/actual-budget.png
 # renovate: datasource=github-releases depName=actualbudget/actual
-appVersion: 26.5.0
+appVersion: 26.4.0

clusters/cl01tl/helm/actual/values.yaml

@@ -8,7 +8,7 @@ actual:
         main:
           image:
             repository: ghcr.io/actualbudget/actual
-            tag: 26.5.0@sha256:b733ae30c70a66dc4d03577526e53575a0c04eab4f3ab6ace30934776251058c
+            tag: 26.4.0@sha256:b0e732e2c41b3dc468a71548e88ef76d3f0c157fc43d15fa05d14ec1c5747e1e
           env:
             - name: ACTUAL_PORT
               value: 5006

clusters/cl01tl/helm/argocd/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: argo-cd
   repository: https://argoproj.github.io/argo-helm
-  version: 9.5.11
-digest: sha256:78e2094dde7b3d0326da14640dbc012ce6e6e899f23270dc4d9a13b168c1ef89
-generated: "2026-05-02T00:45:16.287556363Z"
+  version: 9.5.6
+digest: sha256:81edcf69a6e3d7c8a567984024ed0c3a1ccf7db284f547492dcce9af1b4ecbfa
+generated: "2026-04-28T18:24:45.609699191Z"

clusters/cl01tl/helm/argocd/Chart.yaml

@@ -13,8 +13,8 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: argo-cd
-    version: 9.5.12
+    version: 9.5.6
     repository: https://argoproj.github.io/argo-helm
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 # renovate: datasource=github-releases depName=argoproj/argo-cd
-appVersion: v3.4.1
+appVersion: v3.3.8

clusters/cl01tl/helm/argocd/values.yaml

@@ -91,7 +91,7 @@ argo-cd:
     enabled: true
     image:
       repository: redis
-      tag: 8.6.3-alpine@sha256:69f2c586c8a7e9cce4ae1ee9bbaf60bc4bb5f4bb3880e4ed022b1fd758a7cab9
+      tag: 8.6.2-alpine@sha256:81b6f81d6a6c5b9019231a2e8eb10085e3a139a34f833dcc965a8a959b040b72
     persistentVolume:
       enabled: true
     redis:
@@ -103,7 +103,7 @@ argo-cd:
       enabled: true
       image:
         repository: haproxy
-        tag: 3.3.8-alpine@sha256:10690acb357180d5214c6fce59e2cefded6cc72b0f7e3febb323fea95b27e349
+        tag: 3.3.7-alpine@sha256:2afa53c856e4e9fcc7dfb35b807fcb189896d7e62b38d363f9bedea92bce7f9a
       resources:
         requests:
           cpu: 5m

clusters/cl01tl/helm/audiobookshelf/values.yaml

@@ -23,7 +23,7 @@ audiobookshelf:
         apprise-api:
           image:
             repository: ghcr.io/caronc/apprise
-            tag: v1.4.1@sha256:25e0577915c2f06233ae1dce077f05c0fc9ba4f0ea89de5aee18a32b2ee9a75c
+            tag: v1.4.0@sha256:9d97a6b9b42cf6afdf3b5466dbed2a59cd42a4bb777ec6aa57b5f2ee623569eb
           env:
             - name: TZ
               value: America/Chicago

clusters/cl01tl/helm/authentik/Chart.lock

@@ -10,6 +10,6 @@ dependencies:
   version: 7.12.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-digest: sha256:808a2347fadb6a48800c0f7355c422c9ed2ce9f7d1ca3b7d64d62574be98e1f8
-generated: "2026-05-02T01:46:08.112423002Z"
+  version: 0.6.1
+digest: sha256:d1dbca83e5b63a58a9bf9f2903d1b45bbadca3e8599541367bc61ef2ce938cdb
+generated: "2026-04-24T21:50:21.398658595Z"

clusters/cl01tl/helm/authentik/Chart.yaml

@@ -29,7 +29,7 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
-    version: 0.7.0
+    version: 0.6.1
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/authentik.png
 # renovate: datasource=github-releases depName=goauthentik/authentik

clusters/cl01tl/helm/backrest/Chart.yaml

@@ -28,4 +28,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/backrest.png
 # renovate: datasource=github-releases depName=garethgeorge/backrest
-appVersion: v1.13.0
+appVersion: v1.12.1

clusters/cl01tl/helm/backrest/values.yaml

@@ -8,7 +8,7 @@ backrest:
         main:
           image:
             repository: ghcr.io/garethgeorge/backrest
-            tag: v1.13.0@sha256:9c9966b5c285ec791a6b06cb4545fa0247424d05442e12f9558b4322d9f8a15f
+            tag: v1.12.1@sha256:f4d34bd6fa985d13bdb6c01c5d8727e07708899afa9567d800808357d77b9fb0
           env:
             - name: TZ
               value: America/Chicago

clusters/cl01tl/helm/blocky/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.6.2
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-digest: sha256:855928ecd442b96a98bbeb9f957951cb70a8ab07e3c45ffd2ab33dcd5bf85a18
-generated: "2026-05-02T01:46:25.970760734Z"
+  version: 0.6.1
+digest: sha256:6ed3a7587906fbda581d0091ff2c29a1816b8b0b8ae40add9885e6a68b2b82ae
+generated: "2026-04-13T20:32:34.844998902Z"

clusters/cl01tl/helm/blocky/Chart.yaml

@@ -20,7 +20,7 @@ dependencies:
     version: 4.6.2
   - name: valkey
     alias: valkey
-    version: 0.7.0
+    version: 0.6.1
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/blocky.png
 # renovate: datasource=github-releases depName=0xerr0r/blocky

clusters/cl01tl/helm/blocky/values.yaml

@@ -134,7 +134,7 @@ blocky:
               komodo                          IN      CNAME   traefik-cl01tl
               languagetool                    IN      CNAME   traefik-cl01tl
               lidarr                          IN      CNAME   traefik-cl01tl
-              loki                            IN      CNAME   traefik-cl01tl
+              mail                            IN      CNAME   traefik-cl01tl
               medialyze                       IN      CNAME   traefik-cl01tl
               music-grabber                   IN      CNAME   traefik-cl01tl
               navidrome                       IN      CNAME   traefik-cl01tl
@@ -162,6 +162,7 @@ blocky:
               sonarr-4k                       IN      CNAME   traefik-cl01tl
               sonarr-anime                    IN      CNAME   traefik-cl01tl
               sparkyfitness                   IN      CNAME   traefik-cl01tl
+              stalwart                        IN      CNAME   traefik-cl01tl
               tdarr                           IN      CNAME   traefik-cl01tl
               tubearchivist                   IN      CNAME   traefik-cl01tl
               vault                           IN      CNAME   traefik-cl01tl

clusters/cl01tl/helm/cloudnative-pg/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 0.6.0
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
+  version: 0.4.3
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-digest: sha256:756a06f08b0e8b888049195e02136115f3c3b09dabfb01c934934c9053cfb40b
-generated: "2026-05-07T01:19:41.214483969Z"
+  version: 0.4.3
+digest: sha256:75d7078b7009082521a1bb8b49141e20b442343dabe7f76f5e7a16a352cfe205
+generated: "2026-04-26T15:36:31.678086-05:00"

clusters/cl01tl/helm/cloudnative-pg/Chart.yaml

@@ -26,11 +26,11 @@ dependencies:
   - name: rclone-bucket
     alias: rclone-postgres-backups-remote
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.7.0
+    version: 0.4.3
   - name: rclone-bucket
     alias: rclone-postgres-backups-external
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.7.0
+    version: 0.4.3
 icon: https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg.github.io/refs/heads/main/assets/images/hero_image.png
 # renovate: datasource=github-releases depName=cloudnative-pg/cloudnative-pg
 appVersion: 1.29.0

clusters/cl01tl/helm/cloudnative-pg/values.yaml

@@ -18,7 +18,7 @@ rclone-postgres-backups-remote:
   nameOverride: postgres-backups-remote-rclone
   cronJob:
     suspend: false
-    schedule: 30 6 * * 1
+    schedule: 0 6 * * 6
   rclone:
     source:
       bucketName: postgres-backups
@@ -44,13 +44,14 @@ rclone-postgres-backups-remote:
 rclone-postgres-backups-external:
   nameOverride: postgres-backups-external-rclone
   cronJob:
-    suspend: false
-    schedule: 0 6 * * 1
+    suspend: true
+    schedule: 0 6 * * 6
   rclone:
     source:
-      bucketName: postgres-backups
+      bucketName: openbao-backups
     destination:
-      bucketName: postgres-backups-775957147abfbc73
+      bucketName: postgres-backups-ecc1010276b61716
+      providerType: DigitalOcean
   prune:
     enabled: true
     ageToPrune: 45d
@@ -65,10 +66,10 @@ rclone-postgres-backups-external:
           path: /garage/config
       destination:
         credentials:
-          path: /backblaze/home-infra/postgres-backups
+          path: /digital-ocean/home-infra/postgres-backups
           keyIdProperty: AWS_ACCESS_KEY_ID
           secretKeyProperty: AWS_SECRET_ACCESS_KEY
           regionProperty: AWS_REGION
         config:
-          path: /backblaze/config
+          path: /digital-ocean/config
           endpointProperty: ENDPOINT

clusters/cl01tl/helm/coredns/values.yaml

@@ -1,7 +1,7 @@
 coredns:
   image:
-    repository: coredns/coredns
-    tag: 1.14.3@sha256:b21d26b915e10acb5bc78715c1e8b6047ab2675389b2bcc18b3a6499d90e74c0
+    repository: registry.k8s.io/coredns/coredns
+    tag: v1.14.2@sha256:e7e6440cfd1e919280958f5b5a6ab2b184d385bba774c12ad2a9e1e4183f90d9
   replicaCount: 3
   resources:
     limits:

clusters/cl01tl/helm/dawarich/Chart.lock

@@ -7,7 +7,7 @@ dependencies:
   version: 7.12.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
+  version: 0.6.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.1.1
@@ -17,5 +17,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.1.1
-digest: sha256:3cd2af21091719533fb337241480c613ab14b3cb5820af6e386936ddf4243c14
-generated: "2026-05-02T01:46:38.13080627Z"
+digest: sha256:b18a6f20fd00a3477ef296e9a72256f2d6d50fc7710f577f89c06c18f990b6ef
+generated: "2026-04-28T23:31:26.580250793Z"

clusters/cl01tl/helm/dawarich/Chart.yaml

@@ -26,7 +26,7 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
-    version: 0.7.0
+    version: 0.6.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-storage
@@ -42,4 +42,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/dawarich.png
 # renovate: datasource=github-releases depName=Freika/dawarich
-appVersion: 1.7.5
+appVersion: 1.7.0

clusters/cl01tl/helm/dawarich/values.yaml

@@ -8,7 +8,7 @@ dawarich:
         main:
           image:
             repository: freikin/dawarich
-            tag: 1.7.5@sha256:dceef4bf7bd5e6a842d61cdd2a82440a0db34f70dc766e02b0b3b212e13b4ba6
+            tag: 1.7.0@sha256:7d5f99c61121fcfa4cbdd6a153392630d9f059ffb0156759278d3e049085ec62
           command:
             - "web-entrypoint.sh"
           args:
@@ -126,7 +126,7 @@ dawarich:
         sidekiq:
           image:
             repository: freikin/dawarich
-            tag: 1.7.5@sha256:dceef4bf7bd5e6a842d61cdd2a82440a0db34f70dc766e02b0b3b212e13b4ba6
+            tag: 1.7.0@sha256:7d5f99c61121fcfa4cbdd6a153392630d9f059ffb0156759278d3e049085ec62
           command:
             - "sidekiq-entrypoint.sh"
           args:

clusters/cl01tl/helm/descheduler/values.yaml

@@ -10,7 +10,7 @@ descheduler:
     requests:
       cpu: 10m
       memory: 50Mi
-  deschedulingInterval: 2m
+  deschedulingInterval: 5m
   replicas: 3
   leaderElection:
     enabled: true
@@ -51,13 +51,13 @@ descheduler:
           - name: LowNodeUtilization
             args:
               thresholds:
-                cpu: 30
-                memory: 30
-                pods: 30
+                cpu: 20
+                memory: 20
+                pods: 20
               targetThresholds:
-                cpu: 45
-                memory: 45
-                pods: 45
+                cpu: 50
+                memory: 50
+                pods: 60
         plugins:
           balance:
             enabled:

clusters/cl01tl/helm/directus/Chart.lock

@@ -7,12 +7,9 @@ dependencies:
   version: 7.12.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
+  version: 0.6.1
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-- name: rclone-bucket
-  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-digest: sha256:5be9eefefbda2ebe4b33dd0e0684f3688781de408bb666113e3b44e6e6b606dc
-generated: "2026-05-07T15:08:44.150931-05:00"
+  version: 0.4.3
+digest: sha256:df3b79c6b8868d749d98d232741fef4a26b73894bce3bf4588581340c15fc3da
+generated: "2026-04-26T21:06:27.85398357Z"

clusters/cl01tl/helm/directus/Chart.yaml

@@ -26,16 +26,12 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
-    version: 0.7.0
+    version: 0.6.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: rclone-bucket
     alias: rclone-directus-assets-remote
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.7.0
-  - name: rclone-bucket
-    alias: rclone-directus-assets-external
-    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.7.0
+    version: 0.4.3
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/directus.png
 # renovate: datasource=github-releases depName=directus/directus
-appVersion: 11.17.4
+appVersion: 11.17.3

clusters/cl01tl/helm/directus/values.yaml

@@ -8,7 +8,7 @@ directus:
         main:
           image:
             repository: ghcr.io/directus/directus
-            tag: 11.17.4@sha256:eb326f679ae847c0a776f93b972761dc2ebe84980e0b9d274a6bc31cd62809f7
+            tag: 11.17.3@sha256:ae6ab737fd04077d295bbefa545cc4aefccc206e3d0120c83812f9b482a8c9a5
           env:
             - name: PUBLIC_URL
               value: https://directus.alexlebens.net
@@ -210,11 +210,14 @@ valkey:
       aclUsers:
         default:
           permissions: "~* &* +@all"
+    # No option to configure metrics when auth is enabled
+    # https://github.com/valkey-io/valkey-helm/issues/135
+    metrics:
+      enabled: false
 rclone-directus-assets-remote:
-  nameOverride: directus-assets-remote-rclone
   cronJob:
     suspend: false
-    schedule: 30 6 * * 2
+    schedule: 0 0 * * *
   rclone:
     source:
       bucketName: directus-assets
@@ -232,26 +235,3 @@ rclone-directus-assets-remote:
           path: /garage/home-infra/directus-assets
         config:
           path: /garage/config
-rclone-directus-assets-external:
-  nameOverride: directus-assets-external-rclone
-  cronJob:
-    suspend: false
-    schedule: 0 6 * * 2
-  rclone:
-    source:
-      bucketName: directus-assets
-    destination:
-      bucketName: directus-assets-37363a16b71dc59b
-  secret:
-    externalSecret:
-      source:
-        credentials:
-          path: /garage/home-infra/directus-assets
-        config:
-          path: /garage/config
-      destination:
-        credentials:
-          path: /backblaze/home-infra/directus-assets
-        config:
-          path: /backblaze/config
-          endpointProperty: ENDPOINT

clusters/cl01tl/helm/elastic-operator/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: eck-operator
   repository: https://helm.elastic.co
-  version: 3.4.0
-digest: sha256:b4787630154471f65ceeb12f65fa24616eab9470e61e089b8e656e42f05f74f1
-generated: "2026-05-06T19:10:32.416627028Z"
+  version: 3.3.2
+digest: sha256:ac7a849a6d8244ef56c11f18438c4c76133f92d245228c5a1c8369d42562c177
+generated: "2026-04-01T21:30:02.975920565Z"

clusters/cl01tl/helm/elastic-operator/Chart.yaml

@@ -14,8 +14,8 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: eck-operator
-    version: 3.4.0
+    version: 3.3.2
     repository: https://helm.elastic.co
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/elastic.png
 # renovate: datasource=github-releases depName=elastic/cloud-on-k8s
-appVersion: v3.4.0
+appVersion: v3.3.2

clusters/cl01tl/helm/elastic-operator/values.yaml

@@ -1,5 +1,6 @@
 eck-operator:
   managedNamespaces:
+    - stalwart
     - tubearchivist
   installCRDs: true
   replicaCount: 2

clusters/cl01tl/helm/element-web/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: element-web
   repository: https://ananace.gitlab.io/charts
-  version: 1.4.36
+  version: 1.4.34
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.6.0
-digest: sha256:36b3f340ee46f20961fdaac41724528c6c3d4b34bf26d97779da7e33087250a1
-generated: "2026-05-03T00:56:23.054212477Z"
+digest: sha256:e988be9f997351a8f658bf5151ec4fb04ae7d877389c9bf01b7331e1a58005ef
+generated: "2026-04-24T21:06:15.882448748Z"

clusters/cl01tl/helm/element-web/Chart.yaml

@@ -15,11 +15,11 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: element-web
-    version: 1.4.36
+    version: 1.4.34
     repository: https://ananace.gitlab.io/charts
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
     version: 2.6.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/element.png
 # renovate: datasource=github-releases depName=element-hq/element-web
-appVersion: v1.12.17
+appVersion: v1.12.15

clusters/cl01tl/helm/element-web/values.yaml

@@ -2,7 +2,7 @@ element-web:
   replicaCount: 1
   image:
     repository: ghcr.io/element-hq/element-web
-    tag: v1.12.17@sha256:f4a81a24d49a9c5b97e02e77a3013ec799873e500e69041078a28be98e4f1280
+    tag: v1.12.15@sha256:c7fa40b5ba3891f8af3ce63da0818f457c1802a9ee4d2f5e46a9df36a2388eed
   defaultServer:
     url: https://matrix.alexlebens.dev
     name: alexlebens.dev

clusters/cl01tl/helm/eraser/values.yaml

@@ -48,7 +48,7 @@ eraser-metrics:
         main:
           image:
             repository: ghcr.io/open-telemetry/opentelemetry-collector-releases/opentelemetry-collector
-            tag: 0.151.0@sha256:49a12827519134ed72881a64247ea43fbf4bdac50cfa41ceb495fc1c684451e2
+            tag: 0.150.1@sha256:618f7867e49fdb173d9b46d535b01f82254b0b14beac6ab1f6f2eb8cf62c5d42
           command:
             - /otelcol
             - --config=/conf/otel-collector-config.yaml

clusters/cl01tl/helm/excalidraw/values.yaml

@@ -8,7 +8,7 @@ excalidraw:
         main:
           image:
             repository: excalidraw/excalidraw
-            tag: latest@sha256:f7ee194addd607bf831d2af0f0a34463dd4225e426cf35199ef0b12a803398e9
+            tag: latest@sha256:20ffa04668e19616bb0c1b3632849e5cd96e0bc7a1336b73d9d072667f2c2854
           env:
             - name: NODE_ENV
               value: production

clusters/cl01tl/helm/external-dns/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: external-dns
   repository: https://kubernetes-sigs.github.io/external-dns/
-  version: 1.21.1
-digest: sha256:c0fc34e2a1fd5a100043c2e22130a3a7910019b655c5e69a50424562f4322f5d
-generated: "2026-05-01T02:29:38.018973854Z"
+  version: 1.20.0
+digest: sha256:0da4dec408239ea48de1d95fa8ad7701c4fdc0efe67baa8743507c75e62e2a47
+generated: "2026-01-03T23:04:25.142170083Z"

clusters/cl01tl/helm/external-dns/Chart.yaml

@@ -16,7 +16,7 @@ maintainers:
 dependencies:
   - name: external-dns
     alias: external-dns-unifi
-    version: 1.21.1
+    version: 1.20.0
     repository: https://kubernetes-sigs.github.io/external-dns/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 # renovate: datasource=github-releases depName=kubernetes-sigs/external-dns

clusters/cl01tl/helm/external-secrets/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: external-secrets
   repository: https://charts.external-secrets.io
-  version: 2.4.1
-digest: sha256:f862e1236cdbd9ddea5692ae63f7a05a4dc1f3d60bcae33015237cc0a630c224
-generated: "2026-04-28T18:30:17.998349684Z"
+  version: 2.4.0
+digest: sha256:a31b4ba5b5ec296036576c8d7d26f8b42061eec7142817f9ca0c256a457a2ea1
+generated: "2026-04-24T19:03:31.856576444Z"

clusters/cl01tl/helm/external-secrets/Chart.yaml

@@ -14,8 +14,8 @@ sources:
 dependencies:
   - name: external-secrets
     alias: external-secrets
-    version: 2.4.1
+    version: 2.4.0
     repository: https://charts.external-secrets.io
 icon: https://raw.githubusercontent.com/external-secrets/external-secrets/refs/heads/main/assets/eso-logo-large.png
 # renovate: datasource=github-releases depName=external-secrets/external-secrets
-appVersion: v2.4.1
+appVersion: v2.4.0

clusters/cl01tl/helm/external-secrets/values.yaml

@@ -2,7 +2,7 @@ external-secrets:
   replicaCount: 3
   image:
     repository: ghcr.io/external-secrets/external-secrets
-    tag: v2.4.1@sha256:9440a40b394791a5e93f3f7e1b33399ecbdc0e38273de1d69ed83fe12936fc09
+    tag: v2.4.0@sha256:d2b74514f63f5b55360d08351f1fe5af3b1db794a81fa10389abe2ff2999c566
   installCRDs: true
   crds:
     createClusterExternalSecret: true
@@ -29,7 +29,7 @@ external-secrets:
   webhook:
     image:
       repository: ghcr.io/external-secrets/external-secrets
-      tag: v2.4.1@sha256:9440a40b394791a5e93f3f7e1b33399ecbdc0e38273de1d69ed83fe12936fc09
+      tag: v2.4.0@sha256:d2b74514f63f5b55360d08351f1fe5af3b1db794a81fa10389abe2ff2999c566
     resources:
       requests:
         cpu: 1m
@@ -37,7 +37,7 @@ external-secrets:
   certController:
     image:
       repository: ghcr.io/external-secrets/external-secrets
-      tag: v2.4.1@sha256:9440a40b394791a5e93f3f7e1b33399ecbdc0e38273de1d69ed83fe12936fc09
+      tag: v2.4.0@sha256:d2b74514f63f5b55360d08351f1fe5af3b1db794a81fa10389abe2ff2999c566
     resources:
       requests:
         cpu: 1m

clusters/cl01tl/helm/gatus/values.yaml

@@ -212,6 +212,12 @@ gatus:
       - name: authentik
         url: https://authentik.alexlebens.net
         <<: *defaults
+      - name: roundcube
+        url: https://mail.alexlebens.net
+        <<: *defaults
+      - name: stalwart
+        url: https://stalwart.alexlebens.net
+        <<: *defaults
       - name: ntfy
         url: https://ntfy.alexlebens.net
         <<: *defaults

clusters/cl01tl/helm/generic-device-plugin/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: generic-device-plugin
   repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-  version: 0.20.33
-digest: sha256:c08407bfa5509e7805760023be163f2597ff41af1183a9b258413230e907d830
-generated: "2026-05-07T19:57:30.083273789Z"
+  version: 0.20.31
+digest: sha256:2e073f735a5ff699844eb67715ab20d403261b3e9c035ebdc4292cee9666b4f4
+generated: "2026-04-15T01:16:30.361061773Z"

clusters/cl01tl/helm/generic-device-plugin/Chart.yaml

@@ -14,6 +14,6 @@ maintainers:
 dependencies:
   - name: generic-device-plugin
     repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-    version: 0.20.33
+    version: 0.20.31
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 appVersion: 1.0.0

clusters/cl01tl/helm/gitea/Chart.lock

@@ -16,12 +16,12 @@ dependencies:
   version: 7.12.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
+  version: 0.6.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
+  version: 0.6.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.1.1
-digest: sha256:511ffcd0b9ab17ff7c9dff6fc72a2ef802a51a14a4f03e416acee40fa0d1f12a
-generated: "2026-05-02T01:47:05.386747243Z"
+digest: sha256:2450851c5a627a962ab7f42c4034c383d9d4c004bfba5b9f585f282340702a73
+generated: "2026-04-28T23:32:08.412656934Z"

clusters/cl01tl/helm/gitea/Chart.yaml

@@ -44,11 +44,11 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey-gitea
-    version: 0.7.0
+    version: 0.6.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey-renovate
-    version: 0.7.0
+    version: 0.6.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-storage

clusters/cl01tl/helm/gitea/values.yaml

@@ -194,7 +194,7 @@ gitea-actions:
       registry: docker.io
       repository: gitea/act_runner
       # renovate: datasource=docker depName=gitea/act_runner
-      tag: 0.6.1@sha256:b5c35d6bdbb9bb25e531230bfc7cc663cb751406cbec90a2a891b85fea54de86
+      tag: 0.6.0@sha256:b2df7d04d17334ff8e741c32b0df099d5df046d96599cb330d4ed7c097cb087f
       extraVolumeMounts:
         - name: workspace-vol
           mountPath: /workspace

clusters/cl01tl/helm/grafana-operator/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 7.12.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
+  version: 0.6.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-digest: sha256:1abbac7c3dd999e08b60bc86d45bf4d5740c02a078d4ee7145c5379c274e93d3
-generated: "2026-05-02T01:47:25.480915936Z"
+  version: 0.6.1
+digest: sha256:fffa0806096edeb2b6a6ceead50427544ef3880a3d135afb4a9c7570d05b2042
+generated: "2026-04-24T21:52:27.743114014Z"

clusters/cl01tl/helm/grafana-operator/Chart.yaml

@@ -24,11 +24,11 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey-unified-alerting
-    version: 0.7.0
+    version: 0.6.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey-remote-cache
-    version: 0.7.0
+    version: 0.6.1
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/grafana.png
 # renovate: datasource=github-releases depName=grafana/grafana-operator

clusters/cl01tl/helm/grimmory/Chart.yaml

@@ -28,4 +28,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/grimmory.png
 # renovate: datasource=github-releases depName=grimmory-tools/grimmory
-appVersion: v3.0.3
+appVersion: v3.0.2

clusters/cl01tl/helm/grimmory/templates/external-secret.yaml

@@ -32,12 +32,12 @@ spec:
   data:
     - secretKey: access
       remoteRef:
-        key: /backblaze/home-infra/mariadb-backups
-        property: ACCESS_KEY_ID
+        key: /digital-ocean/home-infra/mariadb-backups
+        property: AWS_ACCESS_KEY_ID
     - secretKey: secret
       remoteRef:
-        key: /backblaze/home-infra/mariadb-backups
-        property: ACCESS_SECRET_KEY
+        key: /digital-ocean/home-infra/mariadb-backups
+        property: AWS_SECRET_ACCESS_KEY
 
 ---
 apiVersion: external-secrets.io/v1

clusters/cl01tl/helm/grimmory/values.yaml

@@ -12,7 +12,7 @@ grimmory:
         main:
           image:
             repository: ghcr.io/grimmory-tools/grimmory
-            tag: v3.0.3@sha256:a903a2b44c308bd1738b6f7cdb5a2e5a2a1ae23a092f30eb68581e2be1af50cd
+            tag: v3.0.2@sha256:4557a78321add7d70bef7c0b89c2617c8c023246ae39698bc2cbe636f8c97f9b
           env:
             - name: TZ
               value: America/Chicago
@@ -151,7 +151,7 @@ mariadb-cluster:
   physicalBackups:
     - name: backup-external
       schedule:
-        cron: "0 0 * * 6"
+        cron: "0 0 * * 0"
         suspend: false
         immediate: true
       compression: gzip
@@ -159,10 +159,10 @@ mariadb-cluster:
       successfulJobsHistoryLimit: 1
       storage:
         s3:
-          bucket: mariadb-backups-6e3b78870f7af040
+          bucket: mariadb-backups-b230a2f5aecf080a4b372c08
           prefix: cl01tl/grimmory
-          endpoint: s3.us-east-005.backblazeb2.com
-          region: us-east-005
+          endpoint: nyc3.digitaloceanspaces.com
+          region: us-east-1
           accessKeyIdSecretKeyRef:
             name: grimmory-mariadb-cluster-backup-secret-external
             key: access

clusters/cl01tl/helm/harbor/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: harbor
   repository: https://helm.goharbor.io
-  version: 1.19.0
+  version: 1.18.3
 - name: postgres-cluster
   repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
   version: 7.12.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-digest: sha256:d4582a89bf46e503bf83d266aca5effaeec2554808a9e84cd1460e47f895f3e0
-generated: "2026-05-07T00:54:42.114366405Z"
+  version: 0.6.1
+digest: sha256:b1f69102ef2b48dc219b41a6f92ab26d3fda803877948b3288a3c5ebc8e69d86
+generated: "2026-04-24T21:52:56.225496919Z"

clusters/cl01tl/helm/harbor/Chart.yaml

@@ -16,7 +16,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: harbor
-    version: 1.19.0
+    version: 1.18.3
     repository: https://helm.goharbor.io
   - name: postgres-cluster
     alias: postgres-18-cluster
@@ -24,8 +24,8 @@ dependencies:
     repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
   - name: valkey
     alias: valkey
-    version: 0.7.0
+    version: 0.6.1
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/harbor.png
 # renovate: datasource=github-releases depName=goharbor/harbor
-appVersion: v2.15.1
+appVersion: v2.15.0

clusters/cl01tl/helm/harbor/values.yaml

@@ -37,12 +37,12 @@ harbor:
   portal:
     image:
       repository: ghcr.io/goharbor/harbor-portal
-      tag: v2.15.1@sha256:ac55161c57a8351807adf8f8def264bdd52667c371d0436beefebdac4341c9e2
+      tag: v2.15.0@sha256:541d5fa95bf77240d46a438f86245cdfd6afa6dd7fdd0cf4dd4c905af6a980b1
     replicas: 2
   core:
     image:
       repository: ghcr.io/goharbor/harbor-core
-      tag: v2.15.1@sha256:887a85b8ea98b76bfc9f715f1a0785bb99f9a1034241513902dd6e95be922a83
+      tag: v2.15.0@sha256:32a13f6693a278261e9c9cb7eb606c5e2aa021308ae44fdc73225755048500a8
     replicas: 2
     existingSecret: harbor-secret
     secretName: harbor-secret
@@ -50,7 +50,7 @@ harbor:
   jobservice:
     image:
       repository: ghcr.io/goharbor/harbor-jobservice
-      tag: v2.15.1@sha256:0de4fd2ce3a02d3e6591b439e4674ea085885ddf43652b44004cc67eb19dba12
+      tag: v2.15.0@sha256:a22c7cccba4673b26ffb96f5c37971d85d879dd837bc82448e01c0170b68cf28
     replicas: 2
     jobLoggers:
       - stdout
@@ -59,11 +59,11 @@ harbor:
     registry:
       image:
         repository: goharbor/registry-photon
-        tag: v2.15.1@sha256:ebf0325c2661729dbb317cbf839608eb8b15cfa158911a94976f2c21563c466e
+        tag: v2.15.0@sha256:beb49fd16cf0906c04a2bf51a22f7210289e7cc2ae43a733e2a0364380aceae6
     controller:
       image:
         repository: ghcr.io/goharbor/harbor-registryctl
-        tag: v2.15.1@sha256:554147a956989175f63f8d41573d716c6ddf6052acd1749c88c0f99ce6ee2bff
+        tag: v2.15.0@sha256:463172f71d3a1e8d4f9e3b4e687a447f41fbc3126316d8c150dba04a903bbc47
     existingSecret: harbor-secret
     relativeurls: true
     credentials:
@@ -74,7 +74,7 @@ harbor:
     enabled: true
     image:
       repository: ghcr.io/goharbor/trivy-adapter-photon
-      tag: v2.15.1@sha256:f0c52bed36c083ec4fded26cefab01e4cd58c9354c261cb3156c69f57bb50131
+      tag: v2.15.0@sha256:6fd6de9cfbbb04cb1d94722cfa01cf71b8994d3f9e7891d3b03a89a7536480ba
   database:
     type: external
     external:
@@ -90,7 +90,7 @@ harbor:
   exporter:
     image:
       repository: ghcr.io/goharbor/harbor-exporter
-      tag: v2.15.1@sha256:372275b6b6abeb571fa7bd5de458e3d75f1a1636503b3c0abe02938f2b285d75
+      tag: v2.15.0@sha256:ad065e4e1a0ee900a0bb1a03d57028ed4b51dc04933f5c1cb5c4aee301a72ddb
     replicas: 2
 postgres-18-cluster:
   mode: recovery

clusters/cl01tl/helm/headlamp/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: headlamp
   repository: https://kubernetes-sigs.github.io/headlamp/
-  version: 0.42.0
-digest: sha256:09efb4cfe9ef92337074c8ae52a564bf902be41f9fcd742dde34b3fe4b4331fa
-generated: "2026-05-07T20:38:18.198513024Z"
+  version: 0.41.0
+digest: sha256:b1cbc64b393c6c9e1c460510adab528cee8336735659040b9c517976e5c6f15d
+generated: "2026-03-26T15:07:50.703213905Z"

clusters/cl01tl/helm/headlamp/Chart.yaml

@@ -13,8 +13,8 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: headlamp
-    version: 0.42.0
+    version: 0.41.0
     repository: https://kubernetes-sigs.github.io/headlamp/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/headlamp.png
 # renovate: datasource=github-releases depName=headlamp-k8s/headlamp
-appVersion: vv0.42.0
+appVersion: v0.41.0

clusters/cl01tl/helm/headlamp/values.yaml

@@ -3,7 +3,7 @@ headlamp:
   image:
     registry: ghcr.io
     repository: headlamp-k8s/headlamp
-    tag: v0.42.0@sha256:c9754bae1d799220da0547e51ceee234f6e66ebadc138518ca73e33ecd331e59
+    tag: v0.41.0@sha256:89c6c65810bfde61796483c93c70d659104355593792bf55cab680d685da8eeb
   config:
     oidc:
       secret:

clusters/cl01tl/helm/home-assistant/Chart.yaml

@@ -24,4 +24,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/home-assistant.png
 # renovate: datasource=github-releases depName=home-assistant/core
-appVersion: 2026.5.0
+appVersion: 2026.4.4

clusters/cl01tl/helm/home-assistant/values.yaml

@@ -12,7 +12,7 @@ home-assistant:
         main:
           image:
             repository: ghcr.io/home-assistant/home-assistant
-            tag: 2026.5.0@sha256:8edcb16cff8158e87a3a2b48b3bcca05c30dcea0212eb6a2fe940b6d52ed216a
+            tag: 2026.4.4@sha256:c1e5f0147f4cb51ccb05bb30b62a1269cc1bd48a6274792d3b38a77ab274dfd2
           env:
             - name: TZ
               value: America/Chicago
@@ -23,7 +23,7 @@ home-assistant:
         code-server:
           image:
             repository: ghcr.io/linuxserver/code-server
-            tag: 4.118.0-ls336@sha256:6e542034343228a692e0b24f12cbcc8ade3650ec1e2c9e195bc291f2bf024e3c
+            tag: 4.117.0-ls334@sha256:1f384394d473c43ab6a39b2227ba3aa9c95af648ce3a67e1b4da1969c16c7c0d
           env:
             - name: TZ
               value: America/Chicago

clusters/cl01tl/helm/homepage/values.yaml

@@ -487,6 +487,24 @@ homepage:
                   href: https://authentik.alexlebens.net
                   siteMonitor: http://authentik-server.authentik:80
                   statusStyle: dot
+              - Email Client:
+                  icon: sh-roundcube.webp
+                  description: Roundcube
+                  href: https://mail.alexlebens.net
+                  siteMonitor: http://roundcube.roundcube:80
+                  statusStyle: dot
+              - Email Server:
+                  icon: sh-stalwart.webp
+                  description: Stalwart
+                  href: https://stalwart.alexlebens.net
+                  siteMonitor: http://stalwart.stalwart:80
+                  statusStyle: dot
+                  namespace: stalwart
+                  app: stalwart
+                  podSelector: >-
+                      app.kubernetes.io/instance in (
+                          stalwart
+                      )
               - Notifications:
                   icon: sh-ntfy.webp
                   description: ntfy

clusters/cl01tl/helm/immich/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 7.12.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
+  version: 0.6.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.1.1
-digest: sha256:a0fdf72de4f4e2a475035e6ece26fe570e548895db02374a08fd4f3481c55dc0
-generated: "2026-05-02T01:47:54.093954603Z"
+digest: sha256:1c0a8a4209c11fbdc520b8a08d4a73f77116bc3daa42981f2a95a5336679247f
+generated: "2026-04-28T23:32:54.822466546Z"

clusters/cl01tl/helm/immich/Chart.yaml

@@ -25,7 +25,7 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
-    version: 0.7.0
+    version: 0.6.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data

clusters/cl01tl/helm/isponsorblocktv/Chart.yaml

@@ -19,4 +19,4 @@ dependencies:
     version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/youtube.png
 # renovate: datasource=github-releases depName=dmunozv04/iSponsorBlockTV
-appVersion: v2.8.1
+appVersion: v2.7.0

clusters/cl01tl/helm/isponsorblocktv/values.yaml

@@ -10,7 +10,7 @@ isponsorblocktv:
         main:
           image:
             repository: ghcr.io/dmunozv04/isponsorblocktv
-            tag: v2.8.1@sha256:ac35b5d861f437cd5c71d0ccea7c3ed7ea0938ae08cbb6e256de06a236b106f5
+            tag: v2.7.0@sha256:ff292ed53c9208ebfa7da3be7084bd863339d545a799bfefed5092396f5e8b4b
           resources:
             requests:
               cpu: 1m

clusters/cl01tl/helm/karakeep/Chart.lock

@@ -13,9 +13,6 @@ dependencies:
   version: 1.1.1
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-- name: rclone-bucket
-  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-digest: sha256:be0234cbbed7e9cd59ceaa9f0c8f4478cbd572867a8766f45840ec6d79a6a6aa
-generated: "2026-05-07T15:09:58.731382-05:00"
+  version: 0.4.3
+digest: sha256:85450973a07f19c63e3d91b72534de8504b6768b6514cedb625129c9366c2b3e
+generated: "2026-04-28T23:33:29.533736389Z"

clusters/cl01tl/helm/karakeep/Chart.yaml

@@ -36,11 +36,7 @@ dependencies:
   - name: rclone-bucket
     alias: rclone-karakeep-assets-remote
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.7.0
-  - name: rclone-bucket
-    alias: rclone-karakeep-assets-external
-    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.7.0
+    version: 0.4.3
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/karakeep.png
 # renovate: datasource=github-releases depName=karakeep-app/karakeep
 appVersion: 0.31.0

clusters/cl01tl/helm/karakeep/values.yaml

@@ -175,7 +175,7 @@ volsync-target-data:
 rclone-karakeep-assets-remote:
   cronJob:
     suspend: false
-    schedule: 30 6 * * 3
+    schedule: 10 0 * * *
   rclone:
     source:
       bucketName: karakeep-assets
@@ -193,26 +193,3 @@ rclone-karakeep-assets-remote:
           path: /garage/home-infra/karakeep-assets
         config:
           path: /garage/config
-rclone-karakeep-assets-external:
-  nameOverride: karakeep-assets-external-rclone
-  cronJob:
-    suspend: false
-    schedule: 0 6 * * 3
-  rclone:
-    source:
-      bucketName: karakeep-assets
-    destination:
-      bucketName: karakeep-assets-bcb0bc04dac3e3fd
-  secret:
-    externalSecret:
-      source:
-        credentials:
-          path: /garage/home-infra/karakeep-assets
-        config:
-          path: /garage/config
-      destination:
-        credentials:
-          path: /backblaze/home-infra/karakeep-assets
-        config:
-          path: /backblaze/config
-          endpointProperty: ENDPOINT

clusters/cl01tl/helm/komodo/Chart.yaml

@@ -31,4 +31,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/komodo.png
 # renovate: datasource=github-releases depName=moghtech/komodo
-appVersion: v2.2.0
+appVersion: v2.1.2

clusters/cl01tl/helm/komodo/values.yaml

@@ -8,7 +8,7 @@ komodo:
         main:
           image:
             repository: ghcr.io/moghtech/komodo-core
-            tag: 2.2.0@sha256:833880ca8b1a6c1c133efb07e8633525bf63094b4faa72700cf52f60fd69e6c6
+            tag: 2.1.2@sha256:8a7dbba232e4e49797bb412be5f78207c89fcf22cc2727b38631ae30f7518a4c
           env:
             - name: COMPOSE_LOGGING_DRIVER
               value: local

clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock

@@ -1,7 +1,7 @@
 dependencies:
 - name: kube-prometheus-stack
   repository: oci://ghcr.io/prometheus-community/charts
-  version: 84.5.0
+  version: 84.4.0
 - name: prometheus-operator-crds
   repository: oci://ghcr.io/prometheus-community/charts
   version: 28.0.1
@@ -10,6 +10,6 @@ dependencies:
   version: 4.6.2
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-digest: sha256:902e19ae8e5818d1ac4c30f804e616e8428b927358e4823ef6e373fdf655cba1
-generated: "2026-05-02T01:48:08.598425992Z"
+  version: 0.6.1
+digest: sha256:ba8fdbd861cc490baa2c9b85dddc51c45a7484b485d77c3fbc48abc4c6091a00
+generated: "2026-04-29T19:03:58.415084973Z"

clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml

@@ -20,7 +20,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: kube-prometheus-stack
-    version: 84.5.0
+    version: 84.4.0
     repository: oci://ghcr.io/prometheus-community/charts
   - name: prometheus-operator-crds
     version: 28.0.1
@@ -31,8 +31,8 @@ dependencies:
     version: 4.6.2
   - name: valkey
     alias: valkey
-    version: 0.7.0
+    version: 0.6.1
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/prometheus.png
 # renovate: datasource=github-releases depName=prometheus-operator/prometheus-operator
-appVersion: v0.91.0
+appVersion: v0.90.1

clusters/cl01tl/helm/libation/Chart.yaml

@@ -26,4 +26,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/libation.png
 # renovate: datasource=github-releases depName=rmcrackan/Libation
-appVersion: 13.4.1
+appVersion: 13.3.5

clusters/cl01tl/helm/libation/values.yaml

@@ -12,7 +12,7 @@ libation:
         main:
           image:
             repository: rmcrackan/libation
-            tag: 13.4.1@sha256:41cf509a8a1592c01c37cb4dc0d5a2e0c84faab20ecd8927f6bb3d73b237981b
+            tag: 13.3.5@sha256:fcfeaa406a3567e3de89d85bf761d17868029c6e8a127922672770cb812b9be8
           env:
             - name: SLEEP_TIME
               value: "-1"

clusters/cl01tl/helm/loki/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: loki
-  repository: oci://ghcr.io/grafana-community/helm-charts
-  version: 13.6.1
+  repository: https://grafana.github.io/helm-charts
+  version: 6.55.0
 - name: alloy
   repository: https://grafana.github.io/helm-charts
-  version: 1.8.1
-digest: sha256:2590c2358db4fc9313f9c506998f4e851ee291ae9c1419f1fe5bb9a73d464e60
-generated: "2026-05-07T19:56:09.168096358Z"
+  version: 1.8.0
+digest: sha256:e3c7508c21ed7737f692387ca79a0c001c3393edbedff7b05c60325469a4fb2b
+generated: "2026-04-24T17:01:55.023153925Z"

clusters/cl01tl/helm/loki/Chart.yaml

@@ -9,16 +9,16 @@ home: https://docs.alexlebens.dev/applications/loki/
 sources:
   - https://github.com/grafana/loki
   - https://github.com/grafana/alloy
-  - https://github.com/grafana-community/helm-charts/tree/main/charts/loki
+  - https://github.com/grafana/loki/tree/main/production/helm/loki
   - https://github.com/grafana/alloy/tree/main/operations/helm/charts/alloy
 maintainers:
   - name: alexlebens
 dependencies:
   - name: loki
-    version: 13.6.1
-    repository: oci://ghcr.io/grafana-community/helm-charts
+    version: 6.55.0
+    repository: https://grafana.github.io/helm-charts
   - name: alloy
-    version: 1.8.1
+    version: 1.8.0
     repository: https://grafana.github.io/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/loki.png
 # renovate: datasource=github-releases depName=grafana/loki

clusters/cl01tl/helm/loki/values.yaml

@@ -1,5 +1,5 @@
 loki:
-  deploymentMode: Monolithic
+  deploymentMode: SingleBinary
   loki:
     auth_enabled: false
     limits_config:
@@ -31,6 +31,8 @@ loki:
       pool_config:
         remote_timeout: 10s
       remote_timeout: 10s
+  enterprise:
+    enabled: false
   gateway:
     enabled: true
     resources:
@@ -39,18 +41,6 @@ loki:
         memory: 20Mi
     basicAuth:
       enabled: false
-    route:
-      main:
-        enabled: true
-        apiVersion: gateway.networking.k8s.io/v1
-        kind: HTTPRoute
-        hostnames:
-          - loki.alexlebens.net
-        parentRefs:
-          - group: gateway.networking.k8s.io
-            kind: Gateway
-            name: traefik-gateway
-            namespace: traefik
   singleBinary:
     replicas: 1
     resources:
@@ -58,16 +48,14 @@ loki:
         cpu: 100m
         memory: 800Mi
     persistence:
+      enabled: true
       size: 150Gi
       storageClass: synology-iscsi-delete
   write:
-    enabled: false
     replicas: 0
   read:
-    enabled: false
     replicas: 0
   backend:
-    enabled: false
     replicas: 0
 alloy:
   crds:

clusters/cl01tl/helm/mariadb-operator/values.yaml

@@ -2,8 +2,7 @@ mariadb-operator:
   crds:
     enabled: false
   ha:
-    enabled: false
-    replicas: 1
+    enabled: true
   metrics:
     enabled: true
   pdb:

clusters/cl01tl/helm/matrix-synapse/Chart.lock

@@ -1,7 +1,7 @@
 dependencies:
 - name: matrix-synapse
   repository: https://ananace.gitlab.io/charts
-  version: 3.12.26
+  version: 3.12.25
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
   version: 4.6.2
@@ -22,10 +22,10 @@ dependencies:
   version: 7.12.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
+  version: 0.6.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
+  version: 0.6.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.1.1
@@ -38,5 +38,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.1.1
-digest: sha256:4377d9ff96042ba996b879caf6108260d2eb9d20bccdb26ae7042d96d2772012
-generated: "2026-05-03T01:00:09.899197368Z"
+digest: sha256:4ab0a2e6d69be08294675d43bce29b9222864f42fa9686bdabec40e74fa9ca2c
+generated: "2026-04-28T23:34:25.05408586Z"

clusters/cl01tl/helm/matrix-synapse/Chart.yaml

@@ -26,7 +26,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: matrix-synapse
-    version: 3.12.26
+    version: 3.12.25
     repository: https://ananace.gitlab.io/charts
   - name: app-template
     alias: matrix-hookshot
@@ -54,11 +54,11 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey-matrix-synapse
-    version: 0.7.0
+    version: 0.6.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey-hookshot
-    version: 0.7.0
+    version: 0.6.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-synapse
@@ -78,4 +78,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/matrix.png
 # renovate: datasource=github-releases depName=element-hq/synapse
-appVersion: vv1.152.1
+appVersion: vv1.152.0

clusters/cl01tl/helm/matrix-synapse/values.yaml

@@ -1,7 +1,7 @@
 matrix-synapse:
   image:
     repository: ghcr.io/element-hq/synapse
-    tag: v1.152.1@sha256:ea13612748d2c3cd7d37314e4d2bb3833831e7fe9c1cc2ba2a05a0e51ab78297
+    tag: v1.152.0@sha256:6216aaa0a111fedc007002c0e595b2b913dc7bdfc59442d1e04b72912fa23a9c
   serverName: alexlebens.dev
   publicServerName: matrix.alexlebens.dev
   argoCD: true
@@ -445,6 +445,10 @@ valkey-matrix-synapse:
       aclUsers:
         default:
           permissions: "~* &* +@all"
+    # No option to configure metrics when auth is enabled
+    # https://github.com/valkey-io/valkey-helm/issues/135
+    metrics:
+      enabled: false
 valkey-hookshot:
   valkey:
     nameOverride: valkey-hookshot

clusters/cl01tl/helm/medialyze/Chart.yaml

@@ -24,4 +24,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://raw.githubusercontent.com/frederikemmer/MediaLyze/d8f69c0628bac7c047b90f91a66341648029c273/frontend/public/favicon.svg
 # renovate: datasource=github-releases depName=frederikemmer/MediaLyze
-appVersion: 0.10.2
+appVersion: 0.9.0

clusters/cl01tl/helm/medialyze/values.yaml

@@ -12,7 +12,7 @@ medialyze:
         main:
           image:
             repository: ghcr.io/frederikemmer/medialyze
-            tag: 0.10.2@sha256:2ecf2cd277b7f54e0771d8f87fe0f0e10afe5a0c31832d9ba7c6e6f4b7100319
+            tag: 0.9.0@sha256:3d88b4f4a3e6cf2489a5236e5174d58d6274e99008ce2ddd4159d1389744473f
           env:
             - name: HOST_PORT
               value: 8080

clusters/cl01tl/helm/music-grabber/Chart.yaml

@@ -24,4 +24,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/music-grabber.png
 # renovate: datasource=docker depName=g33kphr33k/musicgrabber
-appVersion: 2.8.4
+appVersion: 2.8.0

clusters/cl01tl/helm/music-grabber/values.yaml

@@ -12,7 +12,7 @@ music-grabber:
         main:
           image:
             repository: g33kphr33k/musicgrabber
-            tag: 2.8.4@sha256:bf889837c5ddff5cd9bc4162c0e0e52920e4dc3678554f7a87075d50eb1510f7
+            tag: 2.8.0@sha256:39f9a9b783320bfb11805e62ec4990dac038b221a2730f06e81f9fff38875f26
           env:
             - name: MUSIC_DIR
               value: /mnt/store/Music Grabber/

clusters/cl01tl/helm/ntfy/Chart.lock

@@ -7,6 +7,6 @@ dependencies:
   version: 7.12.1
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-digest: sha256:e770cdcc60422973c2d15f60180d711f4afbcbd2bf2447441ff8d8b11e6911bd
-generated: "2026-05-07T01:20:45.92882726Z"
+  version: 0.4.3
+digest: sha256:97ce7f765707305cb7ccf7020c3a0945a19cda7d7d54cb75ff341acdbf000a23
+generated: "2026-04-26T21:07:46.221034664Z"

clusters/cl01tl/helm/ntfy/Chart.yaml

@@ -25,7 +25,7 @@ dependencies:
   - name: rclone-bucket
     alias: rclone-ntfy-attachments-remote
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.7.0
+    version: 0.4.3
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ntfy.png
 # renovate: datasource=github-releases depName=binwiederhier/ntfy
 appVersion: 2.22.0

clusters/cl01tl/helm/ntfy/values.yaml

@@ -127,7 +127,7 @@ postgres-18-cluster:
 rclone-ntfy-attachments-remote:
   cronJob:
     suspend: false
-    schedule: 0 1 * * *
+    schedule: 50 0 * * *
   rclone:
     source:
       bucketName: ntfy-attachments

clusters/cl01tl/helm/ollama/Chart.yaml

@@ -31,4 +31,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ollama.png
 # renovate: datasource=github-releases depName=ollama/ollama
-appVersion: 0.23.1
+appVersion: 0.22.0

clusters/cl01tl/helm/ollama/values.yaml

@@ -21,7 +21,7 @@ ollama:
         main:
           image:
             repository: ollama/ollama
-            tag: 0.23.1@sha256:6077dbbd6508dce8973f8b91c30d8026b1279ab0483e15f0dfad469dba676c2f
+            tag: 0.22.0@sha256:05ab093b257a54318fba39293f1640d53b507d1edec8fa6ca2d3e1817c02e53b
           env:
             - name: OLLAMA_KEEP_ALIVE
               value: 24h
@@ -55,7 +55,7 @@ ollama:
         main:
           image:
             repository: ollama/ollama
-            tag: 0.23.1@sha256:6077dbbd6508dce8973f8b91c30d8026b1279ab0483e15f0dfad469dba676c2f
+            tag: 0.22.0@sha256:05ab093b257a54318fba39293f1640d53b507d1edec8fa6ca2d3e1817c02e53b
           env:
             - name: OLLAMA_KEEP_ALIVE
               value: 24h
@@ -89,7 +89,7 @@ ollama:
         main:
           image:
             repository: ollama/ollama
-            tag: 0.23.1@sha256:6077dbbd6508dce8973f8b91c30d8026b1279ab0483e15f0dfad469dba676c2f
+            tag: 0.22.0@sha256:05ab093b257a54318fba39293f1640d53b507d1edec8fa6ca2d3e1817c02e53b
           env:
             - name: OLLAMA_KEEP_ALIVE
               value: 24h

clusters/cl01tl/helm/openbao/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 4.6.2
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
+  version: 0.4.3
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-digest: sha256:3ff32c3b9dc70492a0dbabbbe6f51d9b1ffa36b677fb3f8bb6a790b4f9f05b34
-generated: "2026-05-07T01:21:04.452421645Z"
+  version: 0.4.3
+digest: sha256:cbb61cd27ce6f613cd0fb07a3b9d380008732ed9e933eed45eda2d7e379fe279
+generated: "2026-04-26T21:08:16.543052937Z"

clusters/cl01tl/helm/openbao/Chart.yaml

@@ -29,11 +29,11 @@ dependencies:
   - name: rclone-bucket
     alias: rclone-openbao-backups-remote
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.7.0
+    version: 0.4.3
   - name: rclone-bucket
     alias: rclone-openbao-backups-external
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.7.0
+    version: 0.4.3
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/openbao.png
 # renovate: datasource=github-releases depName=openbao/openbao
 appVersion: v2.5.3

clusters/cl01tl/helm/openbao/values.yaml

@@ -243,7 +243,7 @@ rclone-openbao-backups-remote:
   nameOverride: openbao-backups-remote-rclone
   cronJob:
     suspend: false
-    schedule: 30 6 * * 4
+    schedule: 0 1 * * *
   rclone:
     source:
       bucketName: openbao-backups
@@ -268,12 +268,13 @@ rclone-openbao-backups-external:
   nameOverride: openbao-backups-external-rclone
   cronJob:
     suspend: false
-    schedule: 0 6 * * 4
+    schedule: 10 1 * * *
   rclone:
     source:
       bucketName: openbao-backups
     destination:
-      bucketName: openbao-backups-038053cd180284dc
+      bucketName: openbao-backups-6e088aad5fad110b
+      providerType: DigitalOcean
   prune:
     enabled: true
     ageToPrune: 90d
@@ -286,7 +287,7 @@ rclone-openbao-backups-external:
           path: /garage/config
       destination:
         credentials:
-          path: /backblaze/home-infra/openbao-backups
+          path: /digital-ocean/home-infra/openbao-backups
         config:
-          path: /backblaze/config
+          path: /digital-ocean/config
           endpointProperty: ENDPOINT

clusters/cl01tl/helm/outline/Chart.lock

@@ -10,9 +10,9 @@ dependencies:
   version: 7.12.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
+  version: 0.6.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.1.1
-digest: sha256:19b61d32c5880ff75ea8a448e457478f265aad30b1429e1ef98f7ce81061c33a
-generated: "2026-05-02T01:48:38.163770954Z"
+digest: sha256:10eedaddab28265089eb9e3ac4696a035f315f2bff4180677064e9bdc1e6a509
+generated: "2026-04-28T23:35:18.266951842Z"

clusters/cl01tl/helm/outline/Chart.yaml

@@ -30,7 +30,7 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
-    version: 0.7.0
+    version: 0.6.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data
@@ -38,4 +38,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/outline.png
 # renovate: datasource=github-releases depName=outline/outline
-appVersion: 1.7.1
+appVersion: 1.7.0

clusters/cl01tl/helm/outline/values.yaml

@@ -11,7 +11,7 @@ outline:
         main:
           image:
             repository: outlinewiki/outline
-            tag: 1.7.1@sha256:361df7040e6f0d7abac768b99f40122197921626a7e69501aabb5fcb496fc1b4
+            tag: 1.7.0@sha256:b13ccd15653513a79eb66283bfa91287f5e3d0944d8cb056d5288b8565992de5
           env:
             - name: NODE_ENV
               value: production

clusters/cl01tl/helm/paperless-ngx/Chart.lock

@@ -7,7 +7,7 @@ dependencies:
   version: 7.12.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
+  version: 0.6.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.1.1
@@ -20,5 +20,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.1.1
-digest: sha256:3f1a8d707092db66baa608a9b8bde91b0972e25e34d42d268919576acce9e79f
-generated: "2026-05-02T01:48:51.56053895Z"
+digest: sha256:0aa4c48e3d5bf86dbde8a8797f39b4443e2774791f9990514a234a0ef6eb8d90
+generated: "2026-04-28T23:35:29.066158571Z"

clusters/cl01tl/helm/paperless-ngx/Chart.yaml

@@ -28,7 +28,7 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
-    version: 0.7.0
+    version: 0.6.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data

clusters/cl01tl/helm/paperless-ngx/values.yaml

@@ -86,7 +86,7 @@ paperless-ngx:
         gotenberg:
           image:
             repository: gotenberg/gotenberg
-            tag: 8.32.0@sha256:a40c5a46b79d812ce2f5e139278163142a054050bfd1e5f162da36d3d11c7138
+            tag: 8.31.0@sha256:f0d86e8a1dbc7b33a5a65cb251d02bb271a48ffa989da3feb5ed7d954fe4d4b3
   service:
     main:
       controller: main

clusters/cl01tl/helm/plex/Chart.yaml

@@ -20,4 +20,4 @@ dependencies:
     version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/plex.png
 # renovate: datasource=github-releases depName=linuxserver/docker-plex
-appVersion: 1.43.1.10611-1e34174b1-ls304
+appVersion: 1.43.1.10611-1e34174b1-ls303

clusters/cl01tl/helm/plex/values.yaml

@@ -22,7 +22,7 @@ plex:
         main:
           image:
             repository: ghcr.io/linuxserver/plex
-            tag: 1.43.1.10611-1e34174b1-ls304@sha256:c5e295f023b4e92b3ca467626dbc2ba8a9b5e53934810df74d99c14e38ae1857
+            tag: 1.43.1.10611-1e34174b1-ls303@sha256:b785bdd60e781662f16e0526a6b54c07856739df95ab558a674a3c084dbde423
           env:
             - name: TZ
               value: America/Chicago

clusters/cl01tl/helm/postiz/Chart.lock

@@ -4,7 +4,7 @@ dependencies:
   version: 4.6.2
 - name: temporal
   repository: https://go.temporal.io/helm-charts
-  version: 1.2.0
+  version: 1.1.1
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.6.0
@@ -13,12 +13,12 @@ dependencies:
   version: 7.12.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
+  version: 0.6.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.1.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.1.1
-digest: sha256:44a89d0e616240e5d57be216bb9a8d92f5c0498cc3a9660cf25b8634d0269a62
-generated: "2026-05-02T01:49:06.238514311Z"
+digest: sha256:97b90a26bbfc673440ca5d559776ebdd2692e3c02d5c0c5062aa5596e7fd97e8
+generated: "2026-04-28T23:35:43.477517184Z"

clusters/cl01tl/helm/postiz/Chart.yaml

@@ -29,7 +29,7 @@ dependencies:
     version: 4.6.2
   - name: temporal
     repository: https://go.temporal.io/helm-charts
-    version: 1.2.0
+    version: 1.1.1
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
     version: 2.6.0
@@ -39,7 +39,7 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
-    version: 0.7.0
+    version: 0.6.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config