chore(deps): update yubal to v0.8.0

.gitea/workflows/renovate.yaml

@@ -13,7 +13,7 @@ on:
 jobs:
   renovate:
     runs-on: ubuntu-js
-    container: ghcr.io/renovatebot/renovate:43.169.3@sha256:8545351921176f15250454ec6a634d97e6f2b4ee6182507226daadba13180334
+    container: ghcr.io/renovatebot/renovate:43.163.4@sha256:b9e6514e1b1feeb77a4898ecab9e6623a9c9cb495983e1b0d2646a7e3d4e81ea
     steps:
       - name: Checkout
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6

clusters/cl01tl/helm/argocd/Chart.yaml

@@ -13,8 +13,8 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: argo-cd
-    version: 9.5.12
+    version: 9.5.11
     repository: https://argoproj.github.io/argo-helm
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 # renovate: datasource=github-releases depName=argoproj/argo-cd
-appVersion: v3.4.1
+appVersion: v3.3.9

clusters/cl01tl/helm/argocd/values.yaml

@@ -91,7 +91,7 @@ argo-cd:
     enabled: true
     image:
       repository: redis
-      tag: 8.6.3-alpine@sha256:69f2c586c8a7e9cce4ae1ee9bbaf60bc4bb5f4bb3880e4ed022b1fd758a7cab9
+      tag: 8.6.2-alpine@sha256:81b6f81d6a6c5b9019231a2e8eb10085e3a139a34f833dcc965a8a959b040b72
     persistentVolume:
       enabled: true
     redis:

clusters/cl01tl/helm/cloudnative-pg/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 0.6.0
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
+  version: 0.5.0
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-digest: sha256:756a06f08b0e8b888049195e02136115f3c3b09dabfb01c934934c9053cfb40b
-generated: "2026-05-07T01:19:41.214483969Z"
+  version: 0.5.0
+digest: sha256:5db4d27087f8a712e7825dc2aac1dc26b6b4e0f9eb11373805be67212bb38e12
+generated: "2026-05-02T01:21:57.977371366Z"

clusters/cl01tl/helm/cloudnative-pg/Chart.yaml

@@ -26,11 +26,11 @@ dependencies:
   - name: rclone-bucket
     alias: rclone-postgres-backups-remote
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.7.0
+    version: 0.5.0
   - name: rclone-bucket
     alias: rclone-postgres-backups-external
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.7.0
+    version: 0.5.0
 icon: https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg.github.io/refs/heads/main/assets/images/hero_image.png
 # renovate: datasource=github-releases depName=cloudnative-pg/cloudnative-pg
 appVersion: 1.29.0

clusters/cl01tl/helm/cloudnative-pg/values.yaml

@@ -18,7 +18,7 @@ rclone-postgres-backups-remote:
   nameOverride: postgres-backups-remote-rclone
   cronJob:
     suspend: false
-    schedule: 30 6 * * 1
+    schedule: 0 6 * * 6
   rclone:
     source:
       bucketName: postgres-backups
@@ -44,13 +44,14 @@ rclone-postgres-backups-remote:
 rclone-postgres-backups-external:
   nameOverride: postgres-backups-external-rclone
   cronJob:
-    suspend: false
-    schedule: 0 6 * * 1
+    suspend: true
+    schedule: 0 6 * * 6
   rclone:
     source:
-      bucketName: postgres-backups
+      bucketName: openbao-backups
     destination:
-      bucketName: postgres-backups-775957147abfbc73
+      bucketName: postgres-backups-ecc1010276b61716
+      providerType: DigitalOcean
   prune:
     enabled: true
     ageToPrune: 45d
@@ -65,10 +66,10 @@ rclone-postgres-backups-external:
           path: /garage/config
       destination:
         credentials:
-          path: /backblaze/home-infra/postgres-backups
+          path: /digital-ocean/home-infra/postgres-backups
           keyIdProperty: AWS_ACCESS_KEY_ID
           secretKeyProperty: AWS_SECRET_ACCESS_KEY
           regionProperty: AWS_REGION
         config:
-          path: /backblaze/config
+          path: /digital-ocean/config
           endpointProperty: ENDPOINT

clusters/cl01tl/helm/descheduler/values.yaml

@@ -10,7 +10,7 @@ descheduler:
     requests:
       cpu: 10m
       memory: 50Mi
-  deschedulingInterval: 2m
+  deschedulingInterval: 5m
   replicas: 3
   leaderElection:
     enabled: true
@@ -51,13 +51,13 @@ descheduler:
           - name: LowNodeUtilization
             args:
               thresholds:
-                cpu: 30
-                memory: 30
-                pods: 30
+                cpu: 20
+                memory: 20
+                pods: 20
               targetThresholds:
-                cpu: 45
-                memory: 45
-                pods: 45
+                cpu: 50
+                memory: 50
+                pods: 60
         plugins:
           balance:
             enabled:

clusters/cl01tl/helm/directus/Chart.lock

@@ -10,9 +10,6 @@ dependencies:
   version: 0.7.0
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-- name: rclone-bucket
-  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-digest: sha256:5be9eefefbda2ebe4b33dd0e0684f3688781de408bb666113e3b44e6e6b606dc
-generated: "2026-05-07T15:08:44.150931-05:00"
+  version: 0.5.0
+digest: sha256:0545b7862144935e861641090f24e1cfb43ba73da7bcbca5013fae6e002e2daa
+generated: "2026-05-02T01:46:52.095684422Z"

clusters/cl01tl/helm/directus/Chart.yaml

@@ -31,11 +31,7 @@ dependencies:
   - name: rclone-bucket
     alias: rclone-directus-assets-remote
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.7.0
-  - name: rclone-bucket
-    alias: rclone-directus-assets-external
-    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.7.0
+    version: 0.5.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/directus.png
 # renovate: datasource=github-releases depName=directus/directus
 appVersion: 11.17.4

clusters/cl01tl/helm/directus/values.yaml

@@ -211,10 +211,9 @@ valkey:
         default:
           permissions: "~* &* +@all"
 rclone-directus-assets-remote:
-  nameOverride: directus-assets-remote-rclone
   cronJob:
     suspend: false
-    schedule: 30 6 * * 2
+    schedule: 0 0 * * *
   rclone:
     source:
       bucketName: directus-assets
@@ -232,26 +231,3 @@ rclone-directus-assets-remote:
           path: /garage/home-infra/directus-assets
         config:
           path: /garage/config
-rclone-directus-assets-external:
-  nameOverride: directus-assets-external-rclone
-  cronJob:
-    suspend: false
-    schedule: 0 6 * * 2
-  rclone:
-    source:
-      bucketName: directus-assets
-    destination:
-      bucketName: directus-assets-37363a16b71dc59b
-  secret:
-    externalSecret:
-      source:
-        credentials:
-          path: /garage/home-infra/directus-assets
-        config:
-          path: /garage/config
-      destination:
-        credentials:
-          path: /backblaze/home-infra/directus-assets
-        config:
-          path: /backblaze/config
-          endpointProperty: ENDPOINT

clusters/cl01tl/helm/elastic-operator/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: eck-operator
   repository: https://helm.elastic.co
-  version: 3.4.0
-digest: sha256:b4787630154471f65ceeb12f65fa24616eab9470e61e089b8e656e42f05f74f1
-generated: "2026-05-06T19:10:32.416627028Z"
+  version: 3.3.2
+digest: sha256:ac7a849a6d8244ef56c11f18438c4c76133f92d245228c5a1c8369d42562c177
+generated: "2026-04-01T21:30:02.975920565Z"

clusters/cl01tl/helm/elastic-operator/Chart.yaml

@@ -14,8 +14,8 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: eck-operator
-    version: 3.4.0
+    version: 3.3.2
     repository: https://helm.elastic.co
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/elastic.png
 # renovate: datasource=github-releases depName=elastic/cloud-on-k8s
-appVersion: v3.4.0
+appVersion: v3.3.2

clusters/cl01tl/helm/excalidraw/values.yaml

@@ -8,7 +8,7 @@ excalidraw:
         main:
           image:
             repository: excalidraw/excalidraw
-            tag: latest@sha256:f7ee194addd607bf831d2af0f0a34463dd4225e426cf35199ef0b12a803398e9
+            tag: latest@sha256:20ffa04668e19616bb0c1b3632849e5cd96e0bc7a1336b73d9d072667f2c2854
           env:
             - name: NODE_ENV
               value: production

clusters/cl01tl/helm/generic-device-plugin/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: generic-device-plugin
   repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-  version: 0.20.33
-digest: sha256:c08407bfa5509e7805760023be163f2597ff41af1183a9b258413230e907d830
-generated: "2026-05-07T19:57:30.083273789Z"
+  version: 0.20.31
+digest: sha256:2e073f735a5ff699844eb67715ab20d403261b3e9c035ebdc4292cee9666b4f4
+generated: "2026-04-15T01:16:30.361061773Z"

clusters/cl01tl/helm/generic-device-plugin/Chart.yaml

@@ -14,6 +14,6 @@ maintainers:
 dependencies:
   - name: generic-device-plugin
     repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-    version: 0.20.33
+    version: 0.20.31
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 appVersion: 1.0.0

clusters/cl01tl/helm/harbor/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: harbor
   repository: https://helm.goharbor.io
-  version: 1.19.0
+  version: 1.18.3
 - name: postgres-cluster
   repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
   version: 7.12.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:d4582a89bf46e503bf83d266aca5effaeec2554808a9e84cd1460e47f895f3e0
-generated: "2026-05-07T00:54:42.114366405Z"
+digest: sha256:8ce1125e688aa0f2da0f9f11157b8bab9bbc11aa82d16ed8e7c5141dccb508fd
+generated: "2026-05-02T01:47:39.632625858Z"

clusters/cl01tl/helm/harbor/Chart.yaml

@@ -16,7 +16,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: harbor
-    version: 1.19.0
+    version: 1.18.3
     repository: https://helm.goharbor.io
   - name: postgres-cluster
     alias: postgres-18-cluster
@@ -28,4 +28,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/harbor.png
 # renovate: datasource=github-releases depName=goharbor/harbor
-appVersion: v2.15.1
+appVersion: v2.15.0

clusters/cl01tl/helm/harbor/values.yaml

@@ -37,12 +37,12 @@ harbor:
   portal:
     image:
       repository: ghcr.io/goharbor/harbor-portal
-      tag: v2.15.1@sha256:ac55161c57a8351807adf8f8def264bdd52667c371d0436beefebdac4341c9e2
+      tag: v2.15.0@sha256:541d5fa95bf77240d46a438f86245cdfd6afa6dd7fdd0cf4dd4c905af6a980b1
     replicas: 2
   core:
     image:
       repository: ghcr.io/goharbor/harbor-core
-      tag: v2.15.1@sha256:887a85b8ea98b76bfc9f715f1a0785bb99f9a1034241513902dd6e95be922a83
+      tag: v2.15.0@sha256:32a13f6693a278261e9c9cb7eb606c5e2aa021308ae44fdc73225755048500a8
     replicas: 2
     existingSecret: harbor-secret
     secretName: harbor-secret
@@ -50,7 +50,7 @@ harbor:
   jobservice:
     image:
       repository: ghcr.io/goharbor/harbor-jobservice
-      tag: v2.15.1@sha256:0de4fd2ce3a02d3e6591b439e4674ea085885ddf43652b44004cc67eb19dba12
+      tag: v2.15.0@sha256:a22c7cccba4673b26ffb96f5c37971d85d879dd837bc82448e01c0170b68cf28
     replicas: 2
     jobLoggers:
       - stdout
@@ -59,11 +59,11 @@ harbor:
     registry:
       image:
         repository: goharbor/registry-photon
-        tag: v2.15.1@sha256:ebf0325c2661729dbb317cbf839608eb8b15cfa158911a94976f2c21563c466e
+        tag: v2.15.0@sha256:beb49fd16cf0906c04a2bf51a22f7210289e7cc2ae43a733e2a0364380aceae6
     controller:
       image:
         repository: ghcr.io/goharbor/harbor-registryctl
-        tag: v2.15.1@sha256:554147a956989175f63f8d41573d716c6ddf6052acd1749c88c0f99ce6ee2bff
+        tag: v2.15.0@sha256:463172f71d3a1e8d4f9e3b4e687a447f41fbc3126316d8c150dba04a903bbc47
     existingSecret: harbor-secret
     relativeurls: true
     credentials:
@@ -74,7 +74,7 @@ harbor:
     enabled: true
     image:
       repository: ghcr.io/goharbor/trivy-adapter-photon
-      tag: v2.15.1@sha256:f0c52bed36c083ec4fded26cefab01e4cd58c9354c261cb3156c69f57bb50131
+      tag: v2.15.0@sha256:6fd6de9cfbbb04cb1d94722cfa01cf71b8994d3f9e7891d3b03a89a7536480ba
   database:
     type: external
     external:
@@ -90,7 +90,7 @@ harbor:
   exporter:
     image:
       repository: ghcr.io/goharbor/harbor-exporter
-      tag: v2.15.1@sha256:372275b6b6abeb571fa7bd5de458e3d75f1a1636503b3c0abe02938f2b285d75
+      tag: v2.15.0@sha256:ad065e4e1a0ee900a0bb1a03d57028ed4b51dc04933f5c1cb5c4aee301a72ddb
     replicas: 2
 postgres-18-cluster:
   mode: recovery

clusters/cl01tl/helm/headlamp/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: headlamp
   repository: https://kubernetes-sigs.github.io/headlamp/
-  version: 0.42.0
-digest: sha256:09efb4cfe9ef92337074c8ae52a564bf902be41f9fcd742dde34b3fe4b4331fa
-generated: "2026-05-07T20:38:18.198513024Z"
+  version: 0.41.0
+digest: sha256:b1cbc64b393c6c9e1c460510adab528cee8336735659040b9c517976e5c6f15d
+generated: "2026-03-26T15:07:50.703213905Z"

clusters/cl01tl/helm/headlamp/Chart.yaml

@@ -13,8 +13,8 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: headlamp
-    version: 0.42.0
+    version: 0.41.0
     repository: https://kubernetes-sigs.github.io/headlamp/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/headlamp.png
 # renovate: datasource=github-releases depName=headlamp-k8s/headlamp
-appVersion: vv0.42.0
+appVersion: v0.41.0

clusters/cl01tl/helm/headlamp/values.yaml

@@ -3,7 +3,7 @@ headlamp:
   image:
     registry: ghcr.io
     repository: headlamp-k8s/headlamp
-    tag: v0.42.0@sha256:c9754bae1d799220da0547e51ceee234f6e66ebadc138518ca73e33ecd331e59
+    tag: v0.41.0@sha256:89c6c65810bfde61796483c93c70d659104355593792bf55cab680d685da8eeb
   config:
     oidc:
       secret:

clusters/cl01tl/helm/home-assistant/Chart.yaml

@@ -24,4 +24,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/home-assistant.png
 # renovate: datasource=github-releases depName=home-assistant/core
-appVersion: 2026.5.0
+appVersion: 2026.4.4

clusters/cl01tl/helm/home-assistant/values.yaml

@@ -12,7 +12,7 @@ home-assistant:
         main:
           image:
             repository: ghcr.io/home-assistant/home-assistant
-            tag: 2026.5.0@sha256:8edcb16cff8158e87a3a2b48b3bcca05c30dcea0212eb6a2fe940b6d52ed216a
+            tag: 2026.4.4@sha256:c1e5f0147f4cb51ccb05bb30b62a1269cc1bd48a6274792d3b38a77ab274dfd2
           env:
             - name: TZ
               value: America/Chicago
@@ -23,7 +23,7 @@ home-assistant:
         code-server:
           image:
             repository: ghcr.io/linuxserver/code-server
-            tag: 4.118.0-ls336@sha256:6e542034343228a692e0b24f12cbcc8ade3650ec1e2c9e195bc291f2bf024e3c
+            tag: 4.117.0-ls334@sha256:1f384394d473c43ab6a39b2227ba3aa9c95af648ce3a67e1b4da1969c16c7c0d
           env:
             - name: TZ
               value: America/Chicago

clusters/cl01tl/helm/karakeep/Chart.lock

@@ -13,9 +13,6 @@ dependencies:
   version: 1.1.1
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-- name: rclone-bucket
-  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-digest: sha256:be0234cbbed7e9cd59ceaa9f0c8f4478cbd572867a8766f45840ec6d79a6a6aa
-generated: "2026-05-07T15:09:58.731382-05:00"
+  version: 0.5.0
+digest: sha256:399d686a6186e665a804f98a3dca1132d028f6cb9fc458866ec94b09920dbb6f
+generated: "2026-05-02T01:23:08.040832303Z"

clusters/cl01tl/helm/karakeep/Chart.yaml

@@ -36,11 +36,7 @@ dependencies:
   - name: rclone-bucket
     alias: rclone-karakeep-assets-remote
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.7.0
-  - name: rclone-bucket
-    alias: rclone-karakeep-assets-external
-    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.7.0
+    version: 0.5.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/karakeep.png
 # renovate: datasource=github-releases depName=karakeep-app/karakeep
 appVersion: 0.31.0

clusters/cl01tl/helm/karakeep/values.yaml

@@ -175,7 +175,7 @@ volsync-target-data:
 rclone-karakeep-assets-remote:
   cronJob:
     suspend: false
-    schedule: 30 6 * * 3
+    schedule: 10 0 * * *
   rclone:
     source:
       bucketName: karakeep-assets
@@ -193,26 +193,3 @@ rclone-karakeep-assets-remote:
           path: /garage/home-infra/karakeep-assets
         config:
           path: /garage/config
-rclone-karakeep-assets-external:
-  nameOverride: karakeep-assets-external-rclone
-  cronJob:
-    suspend: false
-    schedule: 0 6 * * 3
-  rclone:
-    source:
-      bucketName: karakeep-assets
-    destination:
-      bucketName: karakeep-assets-bcb0bc04dac3e3fd
-  secret:
-    externalSecret:
-      source:
-        credentials:
-          path: /garage/home-infra/karakeep-assets
-        config:
-          path: /garage/config
-      destination:
-        credentials:
-          path: /backblaze/home-infra/karakeep-assets
-        config:
-          path: /backblaze/config
-          endpointProperty: ENDPOINT

clusters/cl01tl/helm/komodo/Chart.yaml

@@ -31,4 +31,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/komodo.png
 # renovate: datasource=github-releases depName=moghtech/komodo
-appVersion: v2.2.0
+appVersion: v2.1.2

clusters/cl01tl/helm/komodo/values.yaml

@@ -8,7 +8,7 @@ komodo:
         main:
           image:
             repository: ghcr.io/moghtech/komodo-core
-            tag: 2.2.0@sha256:833880ca8b1a6c1c133efb07e8633525bf63094b4faa72700cf52f60fd69e6c6
+            tag: 2.1.2@sha256:8a7dbba232e4e49797bb412be5f78207c89fcf22cc2727b38631ae30f7518a4c
           env:
             - name: COMPOSE_LOGGING_DRIVER
               value: local

clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml

@@ -35,4 +35,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/prometheus.png
 # renovate: datasource=github-releases depName=prometheus-operator/prometheus-operator
-appVersion: v0.91.0
+appVersion: v0.90.1

clusters/cl01tl/helm/libation/Chart.yaml

@@ -26,4 +26,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/libation.png
 # renovate: datasource=github-releases depName=rmcrackan/Libation
-appVersion: 13.4.1
+appVersion: 13.3.6

clusters/cl01tl/helm/libation/values.yaml

@@ -12,7 +12,7 @@ libation:
         main:
           image:
             repository: rmcrackan/libation
-            tag: 13.4.1@sha256:41cf509a8a1592c01c37cb4dc0d5a2e0c84faab20ecd8927f6bb3d73b237981b
+            tag: 13.3.6@sha256:54695675b9e838b7448c99f7fa03f5c34e0e35c7d7c82c44663959888be9c1b6
           env:
             - name: SLEEP_TIME
               value: "-1"

clusters/cl01tl/helm/loki/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: loki
   repository: oci://ghcr.io/grafana-community/helm-charts
-  version: 13.6.1
+  version: 13.5.0
 - name: alloy
   repository: https://grafana.github.io/helm-charts
-  version: 1.8.1
-digest: sha256:2590c2358db4fc9313f9c506998f4e851ee291ae9c1419f1fe5bb9a73d464e60
-generated: "2026-05-07T19:56:09.168096358Z"
+  version: 1.8.0
+digest: sha256:bef475f5b6770e4b582b4499e38417789b2bb59ce0ee93c0390daef780e5728d
+generated: "2026-05-02T19:36:44.416322-05:00"

clusters/cl01tl/helm/loki/Chart.yaml

@@ -15,10 +15,10 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: loki
-    version: 13.6.1
+    version: 13.5.0
     repository: oci://ghcr.io/grafana-community/helm-charts
   - name: alloy
-    version: 1.8.1
+    version: 1.8.0
     repository: https://grafana.github.io/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/loki.png
 # renovate: datasource=github-releases depName=grafana/loki

clusters/cl01tl/helm/matrix-synapse/Chart.yaml

@@ -78,4 +78,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/matrix.png
 # renovate: datasource=github-releases depName=element-hq/synapse
-appVersion: vv1.152.1
+appVersion: vv1.152.0

clusters/cl01tl/helm/matrix-synapse/values.yaml

@@ -1,7 +1,7 @@
 matrix-synapse:
   image:
     repository: ghcr.io/element-hq/synapse
-    tag: v1.152.1@sha256:ea13612748d2c3cd7d37314e4d2bb3833831e7fe9c1cc2ba2a05a0e51ab78297
+    tag: v1.152.0@sha256:6216aaa0a111fedc007002c0e595b2b913dc7bdfc59442d1e04b72912fa23a9c
   serverName: alexlebens.dev
   publicServerName: matrix.alexlebens.dev
   argoCD: true

clusters/cl01tl/helm/medialyze/Chart.yaml

@@ -24,4 +24,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://raw.githubusercontent.com/frederikemmer/MediaLyze/d8f69c0628bac7c047b90f91a66341648029c273/frontend/public/favicon.svg
 # renovate: datasource=github-releases depName=frederikemmer/MediaLyze
-appVersion: 0.10.2
+appVersion: 0.10.0

clusters/cl01tl/helm/medialyze/values.yaml

@@ -12,7 +12,7 @@ medialyze:
         main:
           image:
             repository: ghcr.io/frederikemmer/medialyze
-            tag: 0.10.2@sha256:2ecf2cd277b7f54e0771d8f87fe0f0e10afe5a0c31832d9ba7c6e6f4b7100319
+            tag: 0.10.1@sha256:4139a6ea9839cb0ff8a1883568d8ae1833ec62eea34a19f777c7e0ac84ff6848
           env:
             - name: HOST_PORT
               value: 8080

clusters/cl01tl/helm/music-grabber/Chart.yaml

@@ -24,4 +24,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/music-grabber.png
 # renovate: datasource=docker depName=g33kphr33k/musicgrabber
-appVersion: 2.8.4
+appVersion: 2.8.1

clusters/cl01tl/helm/music-grabber/values.yaml

@@ -12,7 +12,7 @@ music-grabber:
         main:
           image:
             repository: g33kphr33k/musicgrabber
-            tag: 2.8.4@sha256:bf889837c5ddff5cd9bc4162c0e0e52920e4dc3678554f7a87075d50eb1510f7
+            tag: 2.8.1@sha256:b0946724ca54944c239bceddd445bc78f91cfc0d439379c4f063d3819e7b47d3
           env:
             - name: MUSIC_DIR
               value: /mnt/store/Music Grabber/

clusters/cl01tl/helm/ntfy/Chart.lock

@@ -7,6 +7,6 @@ dependencies:
   version: 7.12.1
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-digest: sha256:e770cdcc60422973c2d15f60180d711f4afbcbd2bf2447441ff8d8b11e6911bd
-generated: "2026-05-07T01:20:45.92882726Z"
+  version: 0.5.0
+digest: sha256:7defcecc03024b82d4f1e19b39f0fbe1725b1077e72e1664326ffa0e40e4f27f
+generated: "2026-05-02T01:23:52.599948616Z"

clusters/cl01tl/helm/ntfy/Chart.yaml

@@ -25,7 +25,7 @@ dependencies:
   - name: rclone-bucket
     alias: rclone-ntfy-attachments-remote
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.7.0
+    version: 0.5.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ntfy.png
 # renovate: datasource=github-releases depName=binwiederhier/ntfy
 appVersion: 2.22.0

clusters/cl01tl/helm/ntfy/values.yaml

@@ -127,7 +127,7 @@ postgres-18-cluster:
 rclone-ntfy-attachments-remote:
   cronJob:
     suspend: false
-    schedule: 0 1 * * *
+    schedule: 50 0 * * *
   rclone:
     source:
       bucketName: ntfy-attachments

clusters/cl01tl/helm/ollama/Chart.yaml

@@ -31,4 +31,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ollama.png
 # renovate: datasource=github-releases depName=ollama/ollama
-appVersion: 0.23.1
+appVersion: 0.23.0

clusters/cl01tl/helm/ollama/values.yaml

@@ -21,7 +21,7 @@ ollama:
         main:
           image:
             repository: ollama/ollama
-            tag: 0.23.1@sha256:6077dbbd6508dce8973f8b91c30d8026b1279ab0483e15f0dfad469dba676c2f
+            tag: 0.23.0@sha256:5600a652d1081050f398152127c584222546354491f27fe47ccbc6351bc870bd
           env:
             - name: OLLAMA_KEEP_ALIVE
               value: 24h
@@ -55,7 +55,7 @@ ollama:
         main:
           image:
             repository: ollama/ollama
-            tag: 0.23.1@sha256:6077dbbd6508dce8973f8b91c30d8026b1279ab0483e15f0dfad469dba676c2f
+            tag: 0.23.0@sha256:5600a652d1081050f398152127c584222546354491f27fe47ccbc6351bc870bd
           env:
             - name: OLLAMA_KEEP_ALIVE
               value: 24h
@@ -89,7 +89,7 @@ ollama:
         main:
           image:
             repository: ollama/ollama
-            tag: 0.23.1@sha256:6077dbbd6508dce8973f8b91c30d8026b1279ab0483e15f0dfad469dba676c2f
+            tag: 0.23.0@sha256:5600a652d1081050f398152127c584222546354491f27fe47ccbc6351bc870bd
           env:
             - name: OLLAMA_KEEP_ALIVE
               value: 24h

clusters/cl01tl/helm/openbao/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 4.6.2
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
+  version: 0.5.0
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-digest: sha256:3ff32c3b9dc70492a0dbabbbe6f51d9b1ffa36b677fb3f8bb6a790b4f9f05b34
-generated: "2026-05-07T01:21:04.452421645Z"
+  version: 0.5.0
+digest: sha256:ba842213ae2aad9eb8311f9316f21597f8b595a86d0fb3f579d61dd400782a0d
+generated: "2026-05-02T01:24:36.047963846Z"

clusters/cl01tl/helm/openbao/Chart.yaml

@@ -29,11 +29,11 @@ dependencies:
   - name: rclone-bucket
     alias: rclone-openbao-backups-remote
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.7.0
+    version: 0.5.0
   - name: rclone-bucket
     alias: rclone-openbao-backups-external
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.7.0
+    version: 0.5.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/openbao.png
 # renovate: datasource=github-releases depName=openbao/openbao
 appVersion: v2.5.3

clusters/cl01tl/helm/openbao/values.yaml

@@ -243,7 +243,7 @@ rclone-openbao-backups-remote:
   nameOverride: openbao-backups-remote-rclone
   cronJob:
     suspend: false
-    schedule: 30 6 * * 4
+    schedule: 0 1 * * *
   rclone:
     source:
       bucketName: openbao-backups
@@ -268,12 +268,13 @@ rclone-openbao-backups-external:
   nameOverride: openbao-backups-external-rclone
   cronJob:
     suspend: false
-    schedule: 0 6 * * 4
+    schedule: 10 1 * * *
   rclone:
     source:
       bucketName: openbao-backups
     destination:
       bucketName: openbao-backups-038053cd180284dc
+      providerType: Other
   prune:
     enabled: true
     ageToPrune: 90d

clusters/cl01tl/helm/outline/Chart.yaml

@@ -38,4 +38,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/outline.png
 # renovate: datasource=github-releases depName=outline/outline
-appVersion: 1.7.1
+appVersion: 1.7.0

clusters/cl01tl/helm/outline/values.yaml

@@ -11,7 +11,7 @@ outline:
         main:
           image:
             repository: outlinewiki/outline
-            tag: 1.7.1@sha256:361df7040e6f0d7abac768b99f40122197921626a7e69501aabb5fcb496fc1b4
+            tag: 1.7.0@sha256:b13ccd15653513a79eb66283bfa91287f5e3d0944d8cb056d5288b8565992de5
           env:
             - name: NODE_ENV
               value: production

clusters/cl01tl/helm/plex/Chart.yaml

@@ -20,4 +20,4 @@ dependencies:
     version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/plex.png
 # renovate: datasource=github-releases depName=linuxserver/docker-plex
-appVersion: 1.43.1.10611-1e34174b1-ls304
+appVersion: 1.43.1.10611-1e34174b1-ls303

clusters/cl01tl/helm/prowlarr/values.yaml

@@ -12,7 +12,7 @@ prowlarr:
         main:
           image:
             repository: ghcr.io/linuxserver/prowlarr
-            tag: 2.3.5.5327-ls145@sha256:4b52038b7b6452a20c145239fa07d8218d1541d736a96c43aa0a5f60141cab28
+            tag: 2.3.5.5327-ls144@sha256:b4204e18666179472225935b443a99cf6c66dcb7bbc2d35034427a3851f13135
           env:
             - name: TZ
               value: America/Chicago

clusters/cl01tl/helm/qbittorrent/values.yaml

@@ -199,7 +199,7 @@ qbittorrent:
         qui:
           image:
             repository: ghcr.io/autobrr/qui
-            tag: v1.18.0@sha256:2e768c8509831afd1f606d27d9aa8e5f3fc722fac4ea88acfdc4fa3b0e9b13ae
+            tag: v1.17.0@sha256:fb3832e68f66b056e1b049d16c40732661e7b73999bc642d4b11469a3ebbabd3
           env:
             - name: QUI__METRICS_ENABLED
               value: true

clusters/cl01tl/helm/rclone/Chart.lock

@@ -1,9 +1,6 @@
 dependencies:
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-- name: rclone-bucket
-  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-digest: sha256:28ae198008893310d81c9452c799cb178d3d3cb54bd65936b6e12cf495f2840c
-generated: "2026-05-07T15:17:54.435967-05:00"
+  version: 0.5.0
+digest: sha256:3b046c434d4913304077d8b5f72552f604ea0c0704c1f267981798508a5ef497
+generated: "2026-05-02T01:25:18.948375366Z"

clusters/cl01tl/helm/rclone/Chart.yaml

@@ -13,14 +13,10 @@ sources:
 maintainers:
   - name: alexlebens
 dependencies:
-  - name: rclone-bucket
-    alias: rclone-web-assets-local
-    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.7.0
   - name: rclone-bucket
     alias: rclone-web-assets-remote
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.7.0
+    version: 0.5.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/rclone.png
 # renovate: datasource=github-releases depName=rclone/rclone
 appVersion: v1.74.0

clusters/cl01tl/helm/rclone/values.yaml

@@ -1,49 +1,144 @@
-rclone-web-assets-local:
-  cronJob:
-    suspend: false
-    schedule: 0 6 * * 5
-  rclone:
-    source:
-      bucketName: web-assets-770aef58c931fcf4
-    destination:
-      bucketName: web-assets
-  secret:
-    externalSecret:
-      source:
-        credentials:
-          path: /backblaze/home-infra/web-assets
-          keyIdProperty: AWS_ACCESS_KEY_ID
-          secretKeyProperty: AWS_SECRET_ACCESS_KEY
-          regionProperty: AWS_REGION
-        config:
-          path: /backblaze/config
-          endpointProperty: ENDPOINT
-      destination:
-        credentials:
-          path: /garage/home-infra/web-assets
-        config:
-          path: /garage/config
-          endpointProperty: ENDPOINT_LOCAL
+rclone:
+  controllers:
+    postgres-backups:
+      type: cronjob
+      cronjob:
+        suspend: false
+        timeZone: America/Chicago
+        schedule: 40 0 * * *
+        backoffLimit: 3
+        parallelism: 1
+      containers:
+        sync:
+          image:
+            repository: rclone/rclone
+            tag: 1.74.0@sha256:d2e0e88359d0b2e67cfcd2c43d5405185eb8adfc207079df27c42da82c5207bc
+          args:
+            - sync
+            - src:postgres-backups
+            - dest:postgres-backups
+            - --s3-no-check-bucket
+            - --max-age
+            - 30d
+            - --include
+            - "/cl01tl/*/*/*/base/**"
+            - --exclude
+            - "**/walls/**"
+            - --verbose
+          env:
+            - name: RCLONE_S3_PROVIDER
+              value: Other
+            - name: RCLONE_CONFIG_SRC_TYPE
+              value: s3
+            - name: RCLONE_CONFIG_SRC_PROVIDER
+              value: Other
+            - name: RCLONE_CONFIG_SRC_ENV_AUTH
+              value: false
+            - name: RCLONE_CONFIG_SRC_ACCESS_KEY_ID
+              valueFrom:
+                secretKeyRef:
+                  name: garage-postgres-backups-secret
+                  key: ACCESS_KEY_ID
+            - name: RCLONE_CONFIG_SRC_SECRET_ACCESS_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: garage-postgres-backups-secret
+                  key: ACCESS_SECRET_KEY
+            - name: RCLONE_CONFIG_SRC_REGION
+              valueFrom:
+                secretKeyRef:
+                  name: garage-postgres-backups-secret
+                  key: ACCESS_REGION
+            - name: RCLONE_CONFIG_SRC_ENDPOINT
+              valueFrom:
+                secretKeyRef:
+                  name: garage-postgres-backups-secret
+                  key: SRC_ENDPOINT
+            - name: RCLONE_CONFIG_SRC_S3_FORCE_PATH_STYLE
+              value: true
+            - name: RCLONE_CONFIG_DEST_TYPE
+              value: s3
+            - name: RCLONE_CONFIG_DEST_PROVIDER
+              value: Other
+            - name: RCLONE_CONFIG_DEST_ENV_AUTH
+              value: false
+            - name: RCLONE_CONFIG_DEST_ACCESS_KEY_ID
+              valueFrom:
+                secretKeyRef:
+                  name: garage-postgres-backups-secret
+                  key: ACCESS_KEY_ID
+            - name: RCLONE_CONFIG_DEST_SECRET_ACCESS_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: garage-postgres-backups-secret
+                  key: ACCESS_SECRET_KEY
+            - name: RCLONE_CONFIG_DEST_REGION
+              valueFrom:
+                secretKeyRef:
+                  name: garage-postgres-backups-secret
+                  key: ACCESS_REGION
+            - name: RCLONE_CONFIG_DEST_ENDPOINT
+              valueFrom:
+                secretKeyRef:
+                  name: garage-postgres-backups-secret
+                  key: DEST_ENDPOINT
+            - name: RCLONE_CONFIG_SRC_DEST_FORCE_PATH_STYLE
+              value: true
+        prune:
+          image:
+            repository: rclone/rclone
+            tag: 1.74.0@sha256:d2e0e88359d0b2e67cfcd2c43d5405185eb8adfc207079df27c42da82c5207bc
+          args:
+            - delete
+            - dest:postgres-backups
+            - --min-age
+            - 30d
+            - --verbose
+          env:
+            - name: RCLONE_CONFIG_DEST_TYPE
+              value: s3
+            - name: RCLONE_CONFIG_DEST_PROVIDER
+              value: Other
+            - name: RCLONE_CONFIG_DEST_ENV_AUTH
+              value: false
+            - name: RCLONE_CONFIG_DEST_ACCESS_KEY_ID
+              valueFrom:
+                secretKeyRef:
+                  name: garage-postgres-backups-secret
+                  key: ACCESS_KEY_ID
+            - name: RCLONE_CONFIG_DEST_SECRET_ACCESS_KEY
+              valueFrom:
+                secretKeyRef:
+                  name: garage-postgres-backups-secret
+                  key: ACCESS_SECRET_KEY
+            - name: RCLONE_CONFIG_DEST_REGION
+              valueFrom:
+                secretKeyRef:
+                  name: garage-postgres-backups-secret
+                  key: ACCESS_REGION
+            - name: RCLONE_CONFIG_DEST_ENDPOINT
+              valueFrom:
+                secretKeyRef:
+                  name: garage-postgres-backups-secret
+                  key: DEST_ENDPOINT
+            - name: RCLONE_CONFIG_SRC_S3_FORCE_PATH_STYLE
+              value: true
 rclone-web-assets-remote:
   cronJob:
     suspend: false
-    schedule: 0 6 * * 6
+    schedule: 30 0 * * *
   rclone:
     source:
-      bucketName: web-assets-770aef58c931fcf4
+      bucketName: web-assets
     destination:
       bucketName: web-assets
   secret:
     externalSecret:
       source:
         credentials:
-          path: /backblaze/home-infra/web-assets
-          keyIdProperty: AWS_ACCESS_KEY_ID
-          secretKeyProperty: AWS_SECRET_ACCESS_KEY
-          regionProperty: AWS_REGION
+          path: /garage/home-infra/web-assets
         config:
-          path: /backblaze/config
-          endpointProperty: ENDPOINT
+          path: /garage/config
       destination:
         credentials:
           path: /garage/home-infra/web-assets

clusters/cl01tl/helm/rybbit/values.yaml

@@ -112,7 +112,7 @@ rybbit:
         main:
           image:
             repository: clickhouse/clickhouse-server
-            tag: 26.4.2@sha256:6d8f358747b59f7db044749eaf951e828e75cc16f9c487f855b114272c44b82c
+            tag: 26.3.9@sha256:537014a67ce8bf1f5c79c2e2b26fb30b8285a86ffff03875bb14ed17ea35db62
           env:
             - name: CLICKHOUSE_DB
               value: analytics

clusters/cl01tl/helm/searxng/values.yaml

@@ -10,7 +10,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:ae455704c4edb2dc750b80efad9476ca41a21a55fd5d870f90a23c5ca6fc11af
+            tag: latest@sha256:b2211b2ad11fc9822ed8d94502a609a862d6587e13f052e18847559586c76b71
           env:
             - name: SEARXNG_BASE_URL
               value: http://searxng-api.searxng:8080
@@ -38,7 +38,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:ae455704c4edb2dc750b80efad9476ca41a21a55fd5d870f90a23c5ca6fc11af
+            tag: latest@sha256:b2211b2ad11fc9822ed8d94502a609a862d6587e13f052e18847559586c76b71
           env:
             - name: SEARXNG_BASE_URL
               value: https://searxng.alexlebens.net/

clusters/cl01tl/helm/snapshot-controller/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: snapshot-controller
   repository: https://piraeus.io/helm-charts/
-  version: 5.0.4
-digest: sha256:b5b31a39dcb780f2d8c54fa3d4bc9c45f03b91bb66735f6101c2e75e6e98fc42
-generated: "2026-05-05T18:25:41.007106464Z"
+  version: 5.0.3
+digest: sha256:53f2282222ab38cbc77af5c3328c28cdc4e8c0b4eaa4d6a202301eb1e003c8f3
+generated: "2026-02-17T19:47:27.760584237Z"

clusters/cl01tl/helm/snapshot-controller/Chart.yaml

@@ -13,7 +13,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: snapshot-controller
-    version: 5.0.4
+    version: 5.0.3
     repository: https://piraeus.io/helm-charts/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 # renovate: datasource=github-releases depName=kubernetes-csi/external-snapshotter

clusters/cl01tl/helm/sparkyfitness/values.yaml

@@ -20,7 +20,7 @@ sparkyfitness:
   server:
     image:
       repository: ghcr.io/codewithcj/sparkyfitness-server
-      tag: v0.16.6.1@sha256:5710eba08e2fcbd1718f74dfcf72273a8d7e7dab3fe49c87bbab23e9d2b08c6f
+      tag: v0.16.6.0@sha256:fda636e5adce8da495fe649df4aa230f37c47edbd134798163ac8461479ca725
     resources:
       requests:
         cpu: 100m
@@ -45,7 +45,7 @@ sparkyfitness:
   frontend:
     image:
       repository: ghcr.io/codewithcj/sparkyfitness-frontend
-      tag: v0.16.6.1@sha256:9a52fc95e96375d86990a036aa8ffebd9de8866c8601e3f2d27a483f8e102166
+      tag: v0.16.6.0@sha256:8680cbcd2f2cb5d582600c508c9328cd0c20c13d14e0402a5261cdf51eb925c8
     resources:
       requests:
         cpu: 10m

clusters/cl01tl/helm/talos/templates/external-secret.yaml

@@ -91,23 +91,23 @@ spec:
   data:
     - secretKey: AWS_ACCESS_KEY_ID
       remoteRef:
-        key: /backblaze/home-infra/talos-backups
+        key: /digital-ocean/home-infra/talos-backups
         property: AWS_ACCESS_KEY_ID
     - secretKey: AWS_SECRET_ACCESS_KEY
       remoteRef:
-        key: /backblaze/home-infra/talos-backups
+        key: /digital-ocean/home-infra/talos-backups
         property: AWS_SECRET_ACCESS_KEY
     - secretKey: AWS_REGION
       remoteRef:
-        key: /backblaze/home-infra/talos-backups
+        key: /digital-ocean/home-infra/talos-backups
         property: AWS_REGION
     - secretKey: BUCKET_NAME
       remoteRef:
-        key: /backblaze/home-infra/talos-backups
+        key: /digital-ocean/home-infra/talos-backups
         property: BUCKET
     - secretKey: BUCKET
       remoteRef:
-        key: /backblaze/home-infra/talos-backups
+        key: /digital-ocean/home-infra/talos-backups
         property: BUCKET_PATH
     - secretKey: AGE_X25519_PUBLIC_KEY
       remoteRef:

clusters/cl01tl/helm/talos/values.yaml

@@ -21,7 +21,7 @@ etcd-backup:
         backup:
           image:
             repository: ghcr.io/siderolabs/talos-backup
-            tag: v0.1.0-beta.3-10-gb9fd478@sha256:7fc186ff37a3137f470082cb609bf1dc3bcece13dd9a6421ec09cfdf4f33ae6c
+            tag: v0.1.0-beta.3-7-ge8e193c@sha256:d6f98bf2817bb0bd46be49e41251e24d713945a6af6e893529cc17d524187953
           command:
             - /talos-backup
           workingDir: /tmp
@@ -109,7 +109,7 @@ etcd-backup:
         backup:
           image:
             repository: ghcr.io/siderolabs/talos-backup
-            tag: v0.1.0-beta.3-10-gb9fd478@sha256:7fc186ff37a3137f470082cb609bf1dc3bcece13dd9a6421ec09cfdf4f33ae6c
+            tag: v0.1.0-beta.3-7-ge8e193c@sha256:d6f98bf2817bb0bd46be49e41251e24d713945a6af6e893529cc17d524187953
           command:
             - /talos-backup
           workingDir: /tmp
@@ -197,7 +197,7 @@ etcd-backup:
         backup:
           image:
             repository: ghcr.io/siderolabs/talos-backup
-            tag: v0.1.0-beta.3-10-gb9fd478@sha256:7fc186ff37a3137f470082cb609bf1dc3bcece13dd9a6421ec09cfdf4f33ae6c
+            tag: v0.1.0-beta.3-7-ge8e193c@sha256:d6f98bf2817bb0bd46be49e41251e24d713945a6af6e893529cc17d524187953
           command:
             - /talos-backup
           workingDir: /tmp
@@ -228,7 +228,7 @@ etcd-backup:
                   name: talos-etcd-backup-external-config
                   key: AWS_REGION
             - name: CUSTOM_S3_ENDPOINT
-              value: https://s3.us-east-005.backblazeb2.com
+              value: https://nyc3.digitaloceanspaces.com
             - name: BUCKET
               valueFrom:
                 secretKeyRef:
@@ -405,7 +405,7 @@ etcd-defrag:
         main:
           image:
             repository: ghcr.io/siderolabs/talosctl
-            tag: v1.13.0@sha256:cf5be4c584572787eda0f5818404d2380f041b1022ce85454b25d4e01334fba6
+            tag: v1.12.6@sha256:a027cf02cf74a75eee83ccffa201f3a9455d77e795d092b87cae5e637f143e54
           args:
             - etcd
             - defrag
@@ -435,7 +435,7 @@ etcd-defrag:
         main:
           image:
             repository: ghcr.io/siderolabs/talosctl
-            tag: v1.13.0@sha256:cf5be4c584572787eda0f5818404d2380f041b1022ce85454b25d4e01334fba6
+            tag: v1.12.6@sha256:a027cf02cf74a75eee83ccffa201f3a9455d77e795d092b87cae5e637f143e54
           args:
             - etcd
             - defrag
@@ -465,7 +465,7 @@ etcd-defrag:
         main:
           image:
             repository: ghcr.io/siderolabs/talosctl
-            tag: v1.13.0@sha256:cf5be4c584572787eda0f5818404d2380f041b1022ce85454b25d4e01334fba6
+            tag: v1.12.6@sha256:a027cf02cf74a75eee83ccffa201f3a9455d77e795d092b87cae5e637f143e54
           args:
             - etcd
             - defrag

clusters/cl01tl/helm/traefik/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: traefik
   repository: https://traefik.github.io/charts
-  version: 40.0.0
+  version: 39.0.8
 - name: traefik-crds
   repository: https://traefik.github.io/charts
-  version: 1.18.0
-digest: sha256:d887af2faf8b07488d6c4c3731337768492292d99edf69040498e24efe5b0a65
-generated: "2026-05-06T23:28:40.081576086Z"
+  version: 1.17.0
+digest: sha256:93a74b11097a301c811ad03080fd1d6a1c1e695b6794b2c6cff7d61ae98ecc4f
+generated: "2026-04-24T16:35:47.354173673Z"

clusters/cl01tl/helm/traefik/Chart.yaml

@@ -14,11 +14,11 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: traefik
-    version: 40.0.0
+    version: 39.0.8
     repository: https://traefik.github.io/charts
   - name: traefik-crds
-    version: 1.18.0
+    version: 1.17.0
     repository: https://traefik.github.io/charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/traefik.png
 # renovate: datasource=github-releases depName=traefik/traefik
-appVersion: v3.7.0
+appVersion: v3.6.15

clusters/cl01tl/helm/traefik/values.yaml

@@ -2,7 +2,7 @@ traefik:
   image:
     registry: docker.io
     repository: traefik
-    tag: v3.7.0@sha256:eb328e2c806c53aafbbace6c451fa54d268961261a85452fcf0fb752a30c17be
+    tag: v3.6.15@sha256:8cb20d16e01a53d8d7f7696ac2f1af7d200d5c9984d226ce2299731d9eab6d6c
   deployment:
     kind: DaemonSet
   ingressClass:

clusters/cl01tl/helm/tubearchivist/templates/elasticsearch.yaml

@@ -8,7 +8,7 @@ metadata:
     {{- include "custom.labels" . | nindent 4 }}
 spec:
   # renovate: datasource=docker depName=elasticsearch
-  version: 9.4.0
+  version: 9.3.4
   auth:
     fileRealm:
       - secretName: tubearchivist-elasticsearch-config

hosts/ps08rp/traefik/compose.yaml

@@ -1,7 +1,7 @@
 ---
 services:
     traefik:
-        image: ghcr.io/traefik/traefik:v3.7.0@sha256:eb328e2c806c53aafbbace6c451fa54d268961261a85452fcf0fb752a30c17be
+        image: ghcr.io/traefik/traefik:v3.6.15@sha256:8cb20d16e01a53d8d7f7696ac2f1af7d200d5c9984d226ce2299731d9eab6d6c
         container_name: traefik
         command:
             - "--global.checkNewVersion=false"

hosts/ps09rp/traefik/compose.yaml

@@ -1,7 +1,7 @@
 ---
 services:
     traefik:
-        image: ghcr.io/traefik/traefik:v3.7.0@sha256:eb328e2c806c53aafbbace6c451fa54d268961261a85452fcf0fb752a30c17be
+        image: ghcr.io/traefik/traefik:v3.6.15@sha256:8cb20d16e01a53d8d7f7696ac2f1af7d200d5c9984d226ce2299731d9eab6d6c
         container_name: traefik
         command:
             - "--global.checkNewVersion=false"

hosts/ps10rp/komodo-periphery/compose.yaml

@@ -20,7 +20,7 @@ services:
             - /dev/net/tun:/dev/net/tun
 
     komodo-periphery:
-        image: ghcr.io/moghtech/komodo-periphery:2.2.0@sha256:7fb1a4807d125ce036a17d37c940b4001402afcaf342a2c720c98d096b1b54da
+        image: ghcr.io/moghtech/komodo-periphery:2.1.2@sha256:8ac9f2ef9c1461b95c862d445da00253005e7094d1e30f5b7b04b8d60ca7a3d6
         container_name: komodo-periphery
         init: true
         env_file:

hosts/ps10rp/traefik/compose.yaml

@@ -20,7 +20,7 @@ services:
             - /dev/net/tun:/dev/net/tun
 
     traefik:
-        image: ghcr.io/traefik/traefik:v3.7.0@sha256:eb328e2c806c53aafbbace6c451fa54d268961261a85452fcf0fb752a30c17be
+        image: ghcr.io/traefik/traefik:v3.6.15@sha256:8cb20d16e01a53d8d7f7696ac2f1af7d200d5c9984d226ce2299731d9eab6d6c
         container_name: traefik
         command:
             - "--global.checkNewVersion=false"

renovate.json

@@ -166,26 +166,17 @@
       ],
       "matchPackageNames": [
         "/(^|/|-)(actual)/",
-        "/(^|/|-)(alloy)/",
-        "/(^|/|-)(clickhouse)/",
-        "/(^|/|-)(code-server)/",
-        "/(^|/|-)(home-assistant)/",
         "/(^|/|-)(kube-prometheus-stack)/",
-        "/(^|/|-)(libation|Libation)/",
         "/(^|/|-)(lidarr)/",
-        "/(^|/|-)(loki)/",
         "/(^|/|-)(medialyze|MediaLyze)/",
         "/(^|/|-)(musicgrabber)/",
         "/(^|/|-)(ollama)/",
         "/(^|/|-)(outline)/",
-        "/(^|/|-)(prowlarr)/",
         "/(^|/|-)(qui)/",
         "/(^|/|-)(radarr)/",
         "/(^|/|-)(renovate)/",
         "/(^|/|-)(sonarr)/",
         "/(^|/|-)(tdarr)/",
-        "/(^|/|-)(traefik)/",
-        "/(^|/|-)(valkey)/",
         "/(^|/|-)(yubal)/"
       ],
       "addLabels": [