chore(deps): update helm release loki to v6.53.0

2026-02-10 18:37:29 +00:00
51 changed files with 106 additions and 482 deletions
--- a/clusters/cl01tl/helm/authentik/Chart.lock
+++ b/clusters/cl01tl/helm/authentik/Chart.lock
@@ -1,7 +1,7 @@
 dependencies:
 - name: authentik
  repository: https://charts.goauthentik.io/
-  version: 2025.12.4
+  version: 2025.12.3
 - name: cloudflared
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 2.3.0
@@ -11,5 +11,5 @@ dependencies:
 - name: redis-replication
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 1.0.4
-digest: sha256:6a491f698eefa7ffdf87c8468dc34c0445a854325ad4483a70f543baf20eab4f
-generated: "2026-02-12T21:02:34.17798029Z"
+digest: sha256:0ddd9eef110b22a07e2d7baee3b9ae4bd6ce6dafc89b72a38cfc254594a629d0
+generated: "2026-02-07T02:27:46.31096754Z"
--- a/clusters/cl01tl/helm/authentik/Chart.yaml
+++ b/clusters/cl01tl/helm/authentik/Chart.yaml
@@ -21,7 +21,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: authentik
-    version: 2025.12.4
+    version: 2025.12.3
    repository: https://charts.goauthentik.io/
  - name: cloudflared
    repository: oci://harbor.alexlebens.net/helm-charts
--- a/clusters/cl01tl/helm/bazarr/values.yaml
+++ b/clusters/cl01tl/helm/bazarr/values.yaml
@@ -15,7 +15,7 @@ bazarr:
        main:
          image:
            repository: ghcr.io/linuxserver/bazarr
-            tag: 1.5.5@sha256:18ff732dffcebd559d15a91845fc3360d49652ea01dccfbfd98b8248ceb86e38
+            tag: 1.5.5@sha256:d40ee61030a9afafddfdd58d160281b865bfcad7cb66e920116fd6fd40668cbb
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/helm/cilium/templates/cilium-l2-announcement-policy.yaml
+++ b/clusters/cl01tl/helm/cilium/templates/cilium-l2-announcement-policy.yaml
@@ -0,0 +1,18 @@
+# apiVersion: "cilium.io/v2alpha1"
+# kind: CiliumL2AnnouncementPolicy
+# metadata:
+#   name: node-gateway-l2-policy
+#   namespace: {{ .Release.Namespace }}
+#   labels:
+#     app.kubernetes.io/name: node-gateway-l2-policy
+#     app.kubernetes.io/instance: {{ .Release.Name }}
+#     app.kubernetes.io/part-of: {{ .Release.Name }}
+# spec:
+#   nodeSelector:
+#     matchLabels:
+#       kubernetes.io/hostname: talos-ix7-xku
+#   interfaces:
+#     - end0
+#     - enp6s0
+#   externalIPs: true
+#   loadBalancerIPs: true
--- a/clusters/cl01tl/helm/cilium/templates/cilium-load-balancer-ip-pool.yaml
+++ b/clusters/cl01tl/helm/cilium/templates/cilium-load-balancer-ip-pool.yaml
@@ -11,6 +11,8 @@ spec:
  blocks:
    - start: "10.232.1.21"
      stop: "10.232.1.23"
+    - start: "10.232.2.21"
+      stop: "10.232.2.23"

 ---
 apiVersion: cilium.io/v2
--- a/clusters/cl01tl/helm/cilium/templates/gateway.yaml
+++ b/clusters/cl01tl/helm/cilium/templates/gateway.yaml
@@ -9,6 +9,7 @@
 #     app.kubernetes.io/part-of: {{ .Release.Name }}
 #   annotations:
 #     cert-manager.io/cluster-issuer: letsencrypt-issuer
+#     io.cilium/lb-ipam-ips: "10.232.1.23"
 # spec:
 #   addresses:
 #     - type: IPAddress
--- a/clusters/cl01tl/helm/cilium/values.yaml
+++ b/clusters/cl01tl/helm/cilium/values.yaml
@@ -38,6 +38,7 @@ cilium:
  bpf:
    hostLegacyRouting: true
  devices: end0 enp6s0
+  enableK8sEndpointSlice: true
  ciliumEndpointSlice:
    enabled: true
  ingressController:
@@ -46,8 +47,6 @@ cilium:
    enabled: true
    enableAlpn: true
    enableAppProtocol: true
-    gatewayClass:
-      create: auto
  externalIPs:
    enabled: true
  socketLB:
--- a/clusters/cl01tl/helm/code-server/values.yaml
+++ b/clusters/cl01tl/helm/code-server/values.yaml
@@ -9,7 +9,7 @@ code-server:
        main:
          image:
            repository: ghcr.io/linuxserver/code-server
-            tag: 4.109.2@sha256:3c6a1f70ba898b47d77dec0ce6d43a3a9223091587d3c57935607eefa77511da
+            tag: 4.108.2@sha256:280ce0bfa4ab49fa5d252e4e2cbffd0dc5f461902e17fa2734d4f493460f84b0
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/helm/element-web/Chart.yaml
+++ b/clusters/cl01tl/helm/element-web/Chart.yaml
@@ -24,4 +24,4 @@ dependencies:
    version: 2.3.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/element.png
 # renovate: datasource=github-releases depName=element-hq/element-web
-appVersion: v1.12.10
+appVersion: v1.12.9
--- a/clusters/cl01tl/helm/gatus/Chart.lock
+++ b/clusters/cl01tl/helm/gatus/Chart.lock
@@ -1,12 +1,12 @@
 dependencies:
 - name: gatus
  repository: https://twin.github.io/helm-charts
-  version: 1.5.0
+  version: 1.4.5
 - name: postgres-cluster
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 7.5.1
 - name: volsync-target
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 0.7.0
-digest: sha256:327091258e0174bea1932e66b0a1a7b54b475365cf23fe776b37ac446ae3c7e9
-generated: "2026-02-10T21:50:24.906374-06:00"
+digest: sha256:e170966054efa7ed147520c17421e32ab2c951d5b8ab9d3625e019373114d64a
+generated: "2026-02-07T02:28:21.222846345Z"
--- a/clusters/cl01tl/helm/gatus/Chart.yaml
+++ b/clusters/cl01tl/helm/gatus/Chart.yaml
@@ -19,7 +19,7 @@ maintainers:
 dependencies:
  - name: gatus
    repository: https://twin.github.io/helm-charts
-    version: 1.5.0
+    version: 1.4.5
  - name: postgres-cluster
    alias: postgres-18-cluster
    version: 7.5.1
--- a/clusters/cl01tl/helm/gatus/templates/http-route.yaml
+++ b/clusters/cl01tl/helm/gatus/templates/http-route.yaml
@@ -0,0 +1,28 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: gatus
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: gatus
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  parentRefs:
+    - group: gateway.networking.k8s.io
+      kind: Gateway
+      name: traefik-gateway
+      namespace: traefik
+  hostnames:
+    - gatus.alexlebens.net
+  rules:
+    - matches:
+      - path:
+          type: PathPrefix
+          value: /
+      backendRefs:
+        - group: ''
+          kind: Service
+          name: gatus
+          port: 80
+          weight: 100
--- a/clusters/cl01tl/helm/gatus/values.yaml
+++ b/clusters/cl01tl/helm/gatus/values.yaml
@@ -17,18 +17,6 @@ gatus:
    portName: http
  ingress:
    enabled: false
-  gateway:
-    apiVersion: gateway.networking.k8s.io/v1
-    route:
-      enabled: true
-      path: /
-      parentRefs:
-        - group: gateway.networking.k8s.io
-          kind: Gateway
-          name: traefik-gateway
-          namespace: traefik
-      hosts:
-        - gatus.alexlebens.net
  env:
    NTFY_TOKEN:
      valueFrom:
@@ -164,9 +152,6 @@ gatus:
      - name: booklore
        url: https://booklore.alexlebens.net
        <<: *defaults
-      - name: directus
-        url: https://directus.alexlebens.net
-        <<: *defaults
      - name: home-assistant
        url: https://home-assistant.alexlebens.net
        <<: *defaults
@@ -341,8 +326,8 @@ gatus:
        url: https://www.alexlebens.dev
        <<: *defaults
        group: external
-      - name: rybbit
-        url: https://rybbit.alexlebens.dev
+      - name: directus
+        url: https://directus.alexlebens.net
        <<: *defaults
        group: external
      - name: postiz
--- a/clusters/cl01tl/helm/headlamp/Chart.yaml
+++ b/clusters/cl01tl/helm/headlamp/Chart.yaml
@@ -18,4 +18,4 @@ dependencies:
    repository: https://kubernetes-sigs.github.io/headlamp/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/headlamp.png
 # renovate: datasource=github-releases depName=headlamp-k8s/headlamp
-appVersion: v0.40.1
+appVersion: v0.40.0
--- a/clusters/cl01tl/helm/home-assistant/values.yaml
+++ b/clusters/cl01tl/helm/home-assistant/values.yaml
@@ -21,7 +21,7 @@ home-assistant:
        code-server:
          image:
            repository: ghcr.io/linuxserver/code-server
-            tag: 4.109.2@sha256:3c6a1f70ba898b47d77dec0ce6d43a3a9223091587d3c57935607eefa77511da
+            tag: 4.108.2@sha256:280ce0bfa4ab49fa5d252e4e2cbffd0dc5f461902e17fa2734d4f493460f84b0
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/helm/homepage/values.yaml
+++ b/clusters/cl01tl/helm/homepage/values.yaml
@@ -209,12 +209,6 @@ homepage:
                  href: https://directus.alexlebens.net
                  siteMonitor: http://directus.directus:80
                  statusStyle: dot
-              - Analytics:
-                  icon: sh-rybbit-light.webp
-                  description: Rybbit
-                  href: https://rybbit.alexlebens.dev
-                  siteMonitor: http://rybbit-client.rybbit:80
-                  statusStyle: dot
              - Social Media Management:
                  icon: sh-postiz.webp
                  description: Postiz
--- a/clusters/cl01tl/helm/huntarr/Chart.yaml
+++ b/clusters/cl01tl/helm/huntarr/Chart.yaml
@@ -23,4 +23,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/huntarr.png
 # renovate: datasource=github-releases depName=plexguide/huntarr
-appVersion: 9.2.4
+appVersion: 9.2.3
--- a/clusters/cl01tl/helm/huntarr/values.yaml
+++ b/clusters/cl01tl/helm/huntarr/values.yaml
@@ -9,7 +9,7 @@ huntarr:
        main:
          image:
            repository: ghcr.io/plexguide/huntarr
-            tag: 9.2.4
+            tag: 9.2.3
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/helm/immich/Chart.yaml
+++ b/clusters/cl01tl/helm/immich/Chart.yaml
@@ -31,4 +31,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/immich.png
 # renovate: datasource=github-releases depName=immich-app/immich
-appVersion: v2.5.6
+appVersion: v2.5.5
--- a/clusters/cl01tl/helm/immich/values.yaml
+++ b/clusters/cl01tl/helm/immich/values.yaml
@@ -9,7 +9,7 @@ immich:
        main:
          image:
            repository: ghcr.io/immich-app/immich-server
-            tag: v2.5.6
+            tag: v2.5.5
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock
+++ b/clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock
@@ -1,12 +1,12 @@
 dependencies:
 - name: kube-prometheus-stack
  repository: oci://ghcr.io/prometheus-community/charts
-  version: 81.6.3
+  version: 81.6.1
 - name: app-template
  repository: https://bjw-s-labs.github.io/helm-charts/
  version: 4.6.2
 - name: redis-replication
  repository: oci://harbor.alexlebens.net/helm-charts
  version: 1.0.4
-digest: sha256:81381261982252c9cf795dca982d25b905346f733d40178b37cc434847cd3490
-generated: "2026-02-12T21:03:09.101291141Z"
+digest: sha256:5620c76f888c65e275d33ede933fca9dd5d0cf330cce7be884655fd9027c048b
+generated: "2026-02-10T18:34:27.265951045Z"
--- a/clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml
+++ b/clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml
@@ -20,7 +20,7 @@ maintainers:
  - name: alexlebens
 dependencies:
  - name: kube-prometheus-stack
-    version: 81.6.3
+    version: 81.6.1
    repository: oci://ghcr.io/prometheus-community/charts
  - name: app-template
    alias: ntfy-alertmanager
--- a/clusters/cl01tl/helm/lidarr/values.yaml
+++ b/clusters/cl01tl/helm/lidarr/values.yaml
@@ -15,7 +15,7 @@ lidarr:
        main:
          image:
            repository: ghcr.io/linuxserver/lidarr
-            tag: 3.1.2-nightly@sha256:bcad2fdb95a60cf3e634a37ec833a54f8dc5346fe9e8d8963b44ba35bb78c9cd
+            tag: 3.1.2-nightly@sha256:adc776c4deb0b36909472a8d22ce00306b4a37f0d584407d846efd59060279ac
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/helm/loki/Chart.lock
+++ b/clusters/cl01tl/helm/loki/Chart.lock
@@ -6,4 +6,4 @@ dependencies:
  repository: https://grafana.github.io/helm-charts
  version: 1.6.0
 digest: sha256:a65f68b2e68defa63d15cf84317ba45a770b5b9cbb5bebc6fed219cefed99b69
-generated: "2026-02-10T19:12:00.80383488Z"
+generated: "2026-02-10T18:37:21.397463723Z"
--- a/clusters/cl01tl/helm/matrix-synapse/Chart.yaml
+++ b/clusters/cl01tl/helm/matrix-synapse/Chart.yaml
@@ -81,4 +81,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/matrix.png
 # renovate: datasource=github-releases depName=element-hq/synapse
-appVersion: v1.147.1
+appVersion: 1.147.0
--- a/clusters/cl01tl/helm/navidrome/values.yaml
+++ b/clusters/cl01tl/helm/navidrome/values.yaml
@@ -9,7 +9,7 @@ navidrome:
        main:
          image:
            repository: deluan/navidrome
-            tag: 0.60.3@sha256:a5dce8f33304714dd138e870cca0dcab3d937ca236be1a9f2b97da009d1a0048
+            tag: 0.60.2@sha256:1b3f9556fc4f70cb1c2d3995543e734bdc90c762c9c6ee9a7c5f6a9745efbc3e
            pullPolicy: IfNotPresent
          env:
            - name: ND_MUSICFOLDER
--- a/clusters/cl01tl/helm/ollama/Chart.yaml
+++ b/clusters/cl01tl/helm/ollama/Chart.yaml
@@ -31,4 +31,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ollama.png
 # renovate: datasource=github-releases depName=ollama/ollama
-appVersion: 0.16.0
+appVersion: 0.15.6
--- a/clusters/cl01tl/helm/ollama/values.yaml
+++ b/clusters/cl01tl/helm/ollama/values.yaml
@@ -22,7 +22,7 @@ ollama:
        main:
          image:
            repository: ollama/ollama
-            tag: 0.16.0
+            tag: 0.15.6
            pullPolicy: IfNotPresent
          env:
            - name: OLLAMA_KEEP_ALIVE
@@ -58,7 +58,7 @@ ollama:
        main:
          image:
            repository: ollama/ollama
-            tag: 0.16.0
+            tag: 0.15.6
            pullPolicy: IfNotPresent
          env:
            - name: OLLAMA_KEEP_ALIVE
@@ -94,7 +94,7 @@ ollama:
        main:
          image:
            repository: ollama/ollama
-            tag: 0.16.0
+            tag: 0.15.6
            pullPolicy: IfNotPresent
          env:
            - name: OLLAMA_KEEP_ALIVE
@@ -117,7 +117,7 @@ ollama:
        main:
          image:
            repository: ghcr.io/open-webui/open-webui
-            tag: v0.8.0
+            tag: 0.7.2
            pullPolicy: IfNotPresent
          env:
            - name: ENV
--- a/clusters/cl01tl/helm/plex/values.yaml
+++ b/clusters/cl01tl/helm/plex/values.yaml
@@ -9,7 +9,7 @@ plex:
        main:
          image:
            repository: ghcr.io/linuxserver/plex
-            tag: 1.43.0@sha256:bbe0118e39e2c071fc5fe39af3f32072207bf4146d56b6a8901bcb23082df207
+            tag: 1.43.0@sha256:66c6a46ec3dc244aea20508b49dce4b46291c2fd2dba8851117e675d1c5dd52d
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/helm/postiz/Chart.yaml
+++ b/clusters/cl01tl/helm/postiz/Chart.yaml
@@ -41,4 +41,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/postiz.png
 # renovate: datasource=github-releases depName=gitroomhq/postiz-app
-appVersion: v2.17.0
+appVersion: v2.16.0
--- a/clusters/cl01tl/helm/postiz/values.yaml
+++ b/clusters/cl01tl/helm/postiz/values.yaml
@@ -9,7 +9,7 @@ postiz:
        main:
          image:
            repository: ghcr.io/gitroomhq/postiz-app
-            tag: v2.17.0
+            tag: v2.16.0
            pullPolicy: IfNotPresent
          env:
            - name: MAIN_URL
--- a/clusters/cl01tl/helm/prowlarr/values.yaml
+++ b/clusters/cl01tl/helm/prowlarr/values.yaml
@@ -20,7 +20,7 @@ prowlarr:
        main:
          image:
            repository: ghcr.io/linuxserver/prowlarr
-            tag: 2.3.0@sha256:e74a1e093dcc223d671d4b7061e2b4946f1989a4d3059654ff4e623b731c9134
+            tag: 2.3.0@sha256:5339e9050cfcc0cb5331e9c98610ed9d4ce70ef481a5461ea664a13dda3f1eb0
            pullPolicy: IfNotPresent
          env:
            - name: TZ
--- a/clusters/cl01tl/helm/qbittorrent/values.yaml
+++ b/clusters/cl01tl/helm/qbittorrent/values.yaml
@@ -48,7 +48,7 @@ qbittorrent:
        gluetun:
          image:
            repository: ghcr.io/qdm12/gluetun
-            tag: v3.41.1@sha256:1a5bf4b4820a879cdf8d93d7ef0d2d963af56670c9ebff8981860b6804ebc8ab
+            tag: v3.41.0@sha256:6b54856716d0de56e5bb00a77029b0adea57284cf5a466f23aad5979257d3045
            pullPolicy: IfNotPresent
          lifecycle:
            postStart:
--- a/clusters/cl01tl/helm/rybbit/Chart.lock
+++ b/clusters/cl01tl/helm/rybbit/Chart.lock
@@ -1,15 +0,0 @@
-dependencies:
- name: app-template
-  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
- name: cloudflared
-  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.3.0
- name: postgres-cluster
-  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.6.0
- name: volsync-target
-  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-digest: sha256:57e8ad153b6ef3f02c647b5996307869c0ba620b726ae8eafdf13680d7ad4a48
-generated: "2026-02-13T12:46:23.518948-06:00"
--- a/clusters/cl01tl/helm/rybbit/Chart.yaml
+++ b/clusters/cl01tl/helm/rybbit/Chart.yaml
@@ -1,34 +0,0 @@
-apiVersion: v2
-name: rybbit
-version: 1.0.0
-description: Rybbit
-keywords:
-  - rybbit
-  - analytics
-home: https://wiki.alexlebens.dev/s/
-sources:
-  - https://github.com/rybbit-io/rybbit
-  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/cloudflared
-  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/postgres-cluster
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: app-template
-    alias: rybbit
-    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
-  - name: cloudflared
-    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.3.0
-  - name: postgres-cluster
-    alias: postgres-18-cluster
-    version: 7.6.0
-    repository: oci://harbor.alexlebens.net/helm-charts
-  - name: volsync-target
-    alias: volsync-target-config
-    version: 0.7.0
-    repository: oci://harbor.alexlebens.net/helm-charts
-icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/rybbit.webp
-# renovate: datasource=github-releases depName=rybbit-io/rybbit
-appVersion: v2.4.0
--- a/clusters/cl01tl/helm/rybbit/templates/external-secret.yaml
+++ b/clusters/cl01tl/helm/rybbit/templates/external-secret.yaml
@@ -1,42 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: rybbit-config-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: rybbit-config-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: clickhouse-user
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/rybbit/clickhouse
-        metadataPolicy: None
-        property: user
-    - secretKey: clickhouse-password
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/rybbit/clickhouse
-        metadataPolicy: None
-        property: password
-    - secretKey: better-auth-secret
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/rybbit/auth
-        metadataPolicy: None
-        property: better-auth-secret
-    - secretKey: mapbox-token
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/rybbit/auth
-        metadataPolicy: None
-        property: mapbox-token
--- a/clusters/cl01tl/helm/rybbit/values.yaml
+++ b/clusters/cl01tl/helm/rybbit/values.yaml
@@ -1,312 +0,0 @@
-rybbit:
-  controllers:
-    backend:
-      type: deployment
-      replicas: 1
-      strategy: Recreate
-      revisionHistoryLimit: 3
-      containers:
-        main:
-          image:
-            repository: ghcr.io/rybbit-io/rybbit-backend
-            tag: v2.4.0
-            pullPolicy: IfNotPresent
-          env:
-            - name: NODE_ENV
-              value: production
-            - name: CLICKHOUSE_HOST
-              value: http://rybbit-clickhouse.rybbit:8123
-            - name: CLICKHOUSE_DB
-              value: analytics
-            - name: CLICKHOUSE_USER
-              valueFrom:
-                secretKeyRef:
-                  name: rybbit-config-secret
-                  key: clickhouse-user
-            - name: CLICKHOUSE_PASSWORD
-              valueFrom:
-                secretKeyRef:
-                  name: rybbit-config-secret
-                  key: clickhouse-password
-            - name: POSTGRES_HOST
-              valueFrom:
-                secretKeyRef:
-                  name: rybbit-postgresql-18-cluster-app
-                  key: host
-            - name: POSTGRES_PORT
-              valueFrom:
-                secretKeyRef:
-                  name: rybbit-postgresql-18-cluster-app
-                  key: port
-            - name: POSTGRES_DB
-              valueFrom:
-                secretKeyRef:
-                  name: rybbit-postgresql-18-cluster-app
-                  key: dbname
-            - name: POSTGRES_USER
-              valueFrom:
-                secretKeyRef:
-                  name: rybbit-postgresql-18-cluster-app
-                  key: user
-            - name: POSTGRES_PASSWORD
-              valueFrom:
-                secretKeyRef:
-                  name: rybbit-postgresql-18-cluster-app
-                  key: password
-            - name: BETTER_AUTH_SECRET
-              valueFrom:
-                secretKeyRef:
-                  name: rybbit-config-secret
-                  key: better-auth-secret
-            - name: BASE_URL
-              value: https://rybbit.alexlebens.dev
-            - name: DISABLE_SIGNUP
-              value: false
-            - name: DISABLE_TELEMETRY
-              value: true
-            - name: MAPBOX_TOKEN
-              valueFrom:
-                secretKeyRef:
-                  name: rybbit-config-secret
-                  key: mapbox-token
-          probes:
-            liveness:
-              enabled: true
-              custom: true
-              spec:
-                exec:
-                  command:
-                  - CMD
-                  - wget
-                  - --no-verbose
-                  - --tries=1
-                  - --spider
-                  - http://127.0.0.1:3001/api/health
-                failureThreshold: 5
-                initialDelaySeconds: 10
-                periodSeconds: 30
-                successThreshold: 1
-                timeoutSeconds: 5
-          resources:
-            requests:
-              cpu: 10m
-              memory: 256Mi
-    client:
-      type: deployment
-      replicas: 1
-      strategy: Recreate
-      revisionHistoryLimit: 3
-      containers:
-        main:
-          image:
-            repository: ghcr.io/rybbit-io/rybbit-client
-            tag: v2.4.0
-            pullPolicy: IfNotPresent
-          env:
-            - name: NODE_ENV
-              value: production
-            - name: NEXT_PUBLIC_BACKEND_URL
-              value: http://rybbit-backend.rybbit:3001
-            - name: NEXT_PUBLIC_DISABLE_SIGNUP
-              value: false
-          resources:
-            requests:
-              cpu: 10m
-              memory: 256Mi
-    clickhouse:
-      type: deployment
-      replicas: 1
-      strategy: Recreate
-      revisionHistoryLimit: 3
-      containers:
-        main:
-          image:
-            repository: clickhouse/clickhouse-server
-            tag: 26.1.2
-            pullPolicy: IfNotPresent
-          env:
-            - name: CLICKHOUSE_DB
-              value: analytics
-            - name: CLICKHOUSE_USER
-              valueFrom:
-                secretKeyRef:
-                  name: rybbit-config-secret
-                  key: clickhouse-user
-            - name: CLICKHOUSE_PASSWORD
-              valueFrom:
-                secretKeyRef:
-                  name: rybbit-config-secret
-                  key: clickhouse-password
-          probes:
-            liveness:
-              enabled: true
-              custom: true
-              spec:
-                exec:
-                  command:
-                  - CMD
-                  - wget
-                  - --no-verbose
-                  - --tries=1
-                  - --spider
-                  - http://localhost:8123/ping
-                failureThreshold: 5
-                initialDelaySeconds: 10
-                periodSeconds: 30
-                successThreshold: 1
-                timeoutSeconds: 5
-          resources:
-            requests:
-              cpu: 10m
-              memory: 256Mi
-  configMaps:
-    config:
-      enabled: true
-      forceRename: clickhouse-config
-      data:
-        network.xml: |
-          <clickhouse>
-              <listen_host>0.0.0.0</listen_host>
-          </clickhouse>
-        enable_json.xml: |
-          <clickhouse>
-              <settings>
-                  <enable_json_type>1</enable_json_type>
-              </settings>
-          </clickhouse>
-        logging_rules.xml: |
-          <clickhouse>
-            <logger>
-                <level>warning</level>
-                <console>true</console>
-            </logger>
-            <query_thread_log remove="remove"/>
-            <query_log remove="remove"/>
-            <text_log remove="remove"/>
-            <trace_log remove="remove"/>
-            <metric_log remove="remove"/>
-            <asynchronous_metric_log remove="remove"/>
-            <session_log remove="remove"/>
-            <part_log remove="remove"/>
-            <latency_log remove="remove"/>
-            <processors_profile_log remove="remove"/>
-          </clickhouse>
-        user_logging.xml: |
-          <clickhouse>
-            <profiles>
-              <default>
-                <log_queries>0</log_queries>
-                <log_query_threads>0</log_query_threads>
-                <log_processors_profiles>0</log_processors_profiles>
-              </default>
-            </profiles>
-          </clickhouse>
-  service:
-    backend:
-      controller: backend
-      ports:
-        http:
-          port: 3001
-          targetPort: 3001
-          protocol: HTTP
-    client:
-      controller: client
-      ports:
-        http:
-          port: 80
-          targetPort: 3002
-          protocol: TCP
-    clickhouse:
-      controller: clickhouse
-      ports:
-        http:
-          port: 8123
-          targetPort: 8123
-          protocol: TCP
-  persistence:
-    clickhouse:
-      forceRename: clickhouse-data
-      storageClass: ceph-block
-      accessMode: ReadWriteOnce
-      size: 10Gi
-      retain: true
-      advancedMounts:
-        clickhouse:
-          main:
-            - path: /var/lib/clickhouse
-              readOnly: false
-    clickhouse-config:
-      enabled: true
-      type: configMap
-      name: clickhouse-config
-      advancedMounts:
-        clickhouse:
-          main:
-            - path: /etc/clickhouse-server/config.d/network.xml
-              readOnly: true
-              mountPropagation: None
-              subPath: network.xml
-            - path: /etc/clickhouse-server/config.d/enable_json.xml
-              readOnly: true
-              mountPropagation: None
-              subPath: enable_json.xml
-            - path: /etc/clickhouse-server/config.d/logging_rules.xml
-              readOnly: true
-              mountPropagation: None
-              subPath: logging_rules.xml
-            - path: /etc/clickhouse-server/config.d/user_logging.xml
-              readOnly: true
-              mountPropagation: None
-              subPath: user_logging.xml
-postgres-18-cluster:
-  mode: standalone
-  recovery:
-    method: objectStore
-    objectStore:
-      index: 1
-  backup:
-    objectStore:
-      - name: garage-local
-        index: 1
-        destinationBucket: postgres-backups
-        externalSecretCredentialPath: /garage/home-infra/postgres-backups
-        isWALArchiver: true
-      # - name: garage-remote
-      #   index: 1
-      #   destinationBucket: postgres-backups
-      #   externalSecretCredentialPath: /garage/home-infra/postgres-backups
-      #   retentionPolicy: "90d"
-      #   data:
-      #     compression: bzip2
-      # - name: external
-      #   index: 1
-      #   endpointURL: https://nyc3.digitaloceanspaces.com
-      #   destinationBucket: postgres-backups-ce540ddf106d186bbddca68a
-      #   externalSecretCredentialPath: /garage/home-infra/postgres-backups
-      #   isWALArchiver: false
-    scheduledBackups:
-      - name: live-backup
-        suspend: true
-        immediate: true
-        schedule: "0 0 0 * * *"
-        backupName: garage-local
-      # - name: weekly-backup
-      #   suspend: true
-      #   immediate: true
-      #   schedule: "0 0 4 * * SAT"
-      #   backupName: garage-remote
-      # - name: daily-backup
-      #   suspend: true
-      #   immediate: true
-      #   schedule: "0 0 0 * * *"
-      #   backupName: external
-volsync-target-clickhouse-data:
-  pvcTarget: clickhouse-data
-  local:
-    enabled: false
-    schedule: 38 11 * * *
-  remote:
-    enabled: false
-  external:
-    enabled: false
-    schedule: 38 12 * * *
--- a/clusters/cl01tl/helm/searxng/values.yaml
+++ b/clusters/cl01tl/helm/searxng/values.yaml
@@ -9,7 +9,7 @@ searxng:
        main:
          image:
            repository: searxng/searxng
-            tag: latest@sha256:4d3e9dbb1cabe0fb77b831f55350f81fe3eb46ad5e3147c0a8169189fb5380c0
+            tag: latest@sha256:670bd1076097640fc25221bf92a8af7d344503ce17ba3305abedf28e3634e807
            pullPolicy: IfNotPresent
          env:
            - name: SEARXNG_BASE_URL
@@ -39,7 +39,7 @@ searxng:
        main:
          image:
            repository: searxng/searxng
-            tag: latest@sha256:4d3e9dbb1cabe0fb77b831f55350f81fe3eb46ad5e3147c0a8169189fb5380c0
+            tag: latest@sha256:670bd1076097640fc25221bf92a8af7d344503ce17ba3305abedf28e3634e807
            pullPolicy: IfNotPresent
          env:
            - name: SEARXNG_BASE_URL
--- a/clusters/cl01tl/helm/site-documentation/values.yaml
+++ b/clusters/cl01tl/helm/site-documentation/values.yaml
@@ -11,7 +11,7 @@ site-documentation:
        main:
          image:
            repository: harbor.alexlebens.net/images/site-documentation
-            tag: 0.1.2
+            tag: 0.1.0
            pullPolicy: IfNotPresent
          resources:
            requests:
--- a/clusters/cl01tl/helm/site-profile/values.yaml
+++ b/clusters/cl01tl/helm/site-profile/values.yaml
@@ -11,7 +11,7 @@ site-profile:
        main:
          image:
            repository: harbor.alexlebens.net/images/site-profile
-            tag: 2.7.0
+            tag: 2.5.0
            pullPolicy: IfNotPresent
          resources:
            requests:
--- a/clusters/cl01tl/helm/slskd/values.yaml
+++ b/clusters/cl01tl/helm/slskd/values.yaml
@@ -46,7 +46,7 @@ slskd:
        gluetun:
          image:
            repository: ghcr.io/qdm12/gluetun
-            tag: v3.41.1@sha256:1a5bf4b4820a879cdf8d93d7ef0d2d963af56670c9ebff8981860b6804ebc8ab
+            tag: v3.41.0@sha256:6b54856716d0de56e5bb00a77029b0adea57284cf5a466f23aad5979257d3045
            pullPolicy: IfNotPresent
          lifecycle:
            postStart:
--- a/clusters/cl01tl/helm/snapshot-controller/Chart.yaml
+++ b/clusters/cl01tl/helm/snapshot-controller/Chart.yaml
@@ -19,4 +19,4 @@ dependencies:
    repository: https://piraeus.io/helm-charts/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 # renovate: datasource=github-releases depName=kubernetes-csi/external-snapshotter
-appVersion: v8.5.0
+appVersion: v8.4.0
--- a/clusters/cl01tl/helm/spotisub/values.yaml
+++ b/clusters/cl01tl/helm/spotisub/values.yaml
@@ -86,7 +86,7 @@ spotisub:
        gluetun:
          image:
            repository: ghcr.io/qdm12/gluetun
-            tag: v3.41.1@sha256:1a5bf4b4820a879cdf8d93d7ef0d2d963af56670c9ebff8981860b6804ebc8ab
+            tag: v3.41.0@sha256:6b54856716d0de56e5bb00a77029b0adea57284cf5a466f23aad5979257d3045
            pullPolicy: IfNotPresent
          lifecycle:
            postStart:
--- a/clusters/cl01tl/helm/talos/values.yaml
+++ b/clusters/cl01tl/helm/talos/values.yaml
@@ -69,7 +69,7 @@ etcd-backup:
        s3-prune:
          image:
            repository: d3fk/s3cmd
-            tag: latest@sha256:45908a3d51489bb914c040b136f6075bdaca53ff76dd4b37f951a7efe18a7289
+            tag: latest@sha256:e78ca093c593ff719b11bd42a8e640d0d9dd381bd6a9d579ed8ac8d31319a335
            pullPolicy: IfNotPresent
          command:
            - /bin/sh
@@ -155,7 +155,7 @@ etcd-backup:
        s3-prune:
          image:
            repository: d3fk/s3cmd
-            tag: latest@sha256:45908a3d51489bb914c040b136f6075bdaca53ff76dd4b37f951a7efe18a7289
+            tag: latest@sha256:e78ca093c593ff719b11bd42a8e640d0d9dd381bd6a9d579ed8ac8d31319a335
            pullPolicy: IfNotPresent
          command:
            - /bin/sh
@@ -241,7 +241,7 @@ etcd-backup:
        s3-prune:
          image:
            repository: d3fk/s3cmd
-            tag: latest@sha256:45908a3d51489bb914c040b136f6075bdaca53ff76dd4b37f951a7efe18a7289
+            tag: latest@sha256:e78ca093c593ff719b11bd42a8e640d0d9dd381bd6a9d579ed8ac8d31319a335
            pullPolicy: IfNotPresent
          command:
            - /bin/sh
--- a/clusters/cl01tl/helm/traefik/Chart.yaml
+++ b/clusters/cl01tl/helm/traefik/Chart.yaml
@@ -22,4 +22,4 @@ dependencies:
    repository: https://traefik.github.io/charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/webp/traefik.webp
 # renovate: datasource=github-releases depName=traefik/traefik
-appVersion: v3.6.8
+appVersion: v3.6.7
--- a/clusters/cl01tl/helm/tubearchivist/values.yaml
+++ b/clusters/cl01tl/helm/tubearchivist/values.yaml
@@ -45,7 +45,7 @@ tubearchivist:
        gluetun:
          image:
            repository: ghcr.io/qdm12/gluetun
-            tag: v3.41.1@sha256:1a5bf4b4820a879cdf8d93d7ef0d2d963af56670c9ebff8981860b6804ebc8ab
+            tag: v3.41.0@sha256:6b54856716d0de56e5bb00a77029b0adea57284cf5a466f23aad5979257d3045
            pullPolicy: IfNotPresent
          lifecycle:
            postStart:
--- a/clusters/cl01tl/helm/vault/values.yaml
+++ b/clusters/cl01tl/helm/vault/values.yaml
@@ -187,7 +187,7 @@ snapshot:
        s3-backup-local:
          image:
            repository: d3fk/s3cmd
-            tag: latest@sha256:45908a3d51489bb914c040b136f6075bdaca53ff76dd4b37f951a7efe18a7289
+            tag: latest@sha256:e78ca093c593ff719b11bd42a8e640d0d9dd381bd6a9d579ed8ac8d31319a335
            pullPolicy: IfNotPresent
          command:
            - /bin/sh
@@ -208,7 +208,7 @@ snapshot:
        s3-backup-remote:
          image:
            repository: d3fk/s3cmd
-            tag: latest@sha256:45908a3d51489bb914c040b136f6075bdaca53ff76dd4b37f951a7efe18a7289
+            tag: latest@sha256:e78ca093c593ff719b11bd42a8e640d0d9dd381bd6a9d579ed8ac8d31319a335
            pullPolicy: IfNotPresent
          command:
            - /bin/sh
@@ -229,7 +229,7 @@ snapshot:
        s3-backup-external:
          image:
            repository: d3fk/s3cmd
-            tag: latest@sha256:45908a3d51489bb914c040b136f6075bdaca53ff76dd4b37f951a7efe18a7289
+            tag: latest@sha256:e78ca093c593ff719b11bd42a8e640d0d9dd381bd6a9d579ed8ac8d31319a335
            pullPolicy: IfNotPresent
          command:
            - /bin/sh
--- a/clusters/cl01tl/helm/vaultwarden/Chart.yaml
+++ b/clusters/cl01tl/helm/vaultwarden/Chart.yaml
@@ -35,4 +35,4 @@ dependencies:
    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/vaultwarden.png
 # renovate: datasource=github-releases depName=dani-garcia/vaultwarden
-appVersion: 1.35.3
+appVersion: 1.35.2
--- a/clusters/cl01tl/helm/vaultwarden/values.yaml
+++ b/clusters/cl01tl/helm/vaultwarden/values.yaml
@@ -9,7 +9,7 @@ vaultwarden:
        main:
          image:
            repository: vaultwarden/server
-            tag: 1.35.3
+            tag: 1.35.2
            pullPolicy: IfNotPresent
          env:
            - name: DOMAIN
--- a/clusters/cl01tl/helm/whodb/Chart.yaml
+++ b/clusters/cl01tl/helm/whodb/Chart.yaml
@@ -20,4 +20,4 @@ dependencies:
    version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/whodb.png
 # renovate: datasource=github-releases depName=clidey/whodb
-appVersion: 0.92.0
+appVersion: 0.91.0
--- a/clusters/cl01tl/helm/whodb/values.yaml
+++ b/clusters/cl01tl/helm/whodb/values.yaml
@@ -8,7 +8,7 @@ whodb:
        main:
          image:
            repository: clidey/whodb
-            tag: 0.92.0
+            tag: 0.91.0
            pullPolicy: IfNotPresent
          env:
            - name: WHODB_OLLAMA_HOST