chore(deps): update fuzzygrim/yamtrack to v0.25.0

clusters/cl01tl/helm/argo-workflows/Chart.lock

@@ -7,6 +7,6 @@ dependencies:
   version: 2.4.20
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.5.1
-digest: sha256:d634e2aba7e8ba644eac9b5cff7f959090a755e69c041c15889e4ba1ba8d04f0
-generated: "2026-02-07T02:27:32.331360382Z"
+  version: 7.5.0
+digest: sha256:156c07cae82be20f03a17b8f2a4a188679830ce1430711da812c4aed626c17b4
+generated: "2026-02-02T23:56:58.434603097Z"

clusters/cl01tl/helm/argo-workflows/Chart.yaml

@@ -25,7 +25,7 @@ dependencies:
     repository: https://argoproj.github.io/argo-helm
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.5.1
+    version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 # renovate: datasource=github-releases depName=argoproj/argo-workflows

clusters/cl01tl/helm/argocd/values.yaml

@@ -4,7 +4,6 @@ argo-cd:
   configs:
     cm:
       admin.enabled: true
-      accounts.homepage: apiKey
       timeout.reconciliation: 100s
       timeout.reconciliation.jitter: 60s
       url: https://argocd.alexlebens.net
@@ -30,7 +29,6 @@ argo-cd:
     rbac:
       policy.csv: |
         g, ArgoCD Admins, role:admin
-        g, homepage, role:readonly
   controller:
     replicas: 1
     metrics:

clusters/cl01tl/helm/authentik/Chart.lock

@@ -1,15 +1,15 @@
 dependencies:
 - name: authentik
   repository: https://charts.goauthentik.io/
-  version: 2025.12.4
+  version: 2025.12.3
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.3.0
+  version: 2.2.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.5.1
+  version: 7.5.0
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.0.4
-digest: sha256:6a491f698eefa7ffdf87c8468dc34c0445a854325ad4483a70f543baf20eab4f
-generated: "2026-02-12T21:02:34.17798029Z"
+digest: sha256:61110db108493eac486715c324a2233d3cd056ea623f8e5c5deda9bd828964e6
+generated: "2026-02-03T20:35:32.880480215Z"

clusters/cl01tl/helm/authentik/Chart.yaml

@@ -21,14 +21,14 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: authentik
-    version: 2025.12.4
+    version: 2025.12.3
     repository: https://charts.goauthentik.io/
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.3.0
+    version: 2.2.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.5.1
+    version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     version: 1.0.4

clusters/cl01tl/helm/bazarr/values.yaml

@@ -15,7 +15,7 @@ bazarr:
         main:
           image:
             repository: ghcr.io/linuxserver/bazarr
-            tag: 1.5.5@sha256:18ff732dffcebd559d15a91845fc3360d49652ea01dccfbfd98b8248ceb86e38
+            tag: 1.5.5@sha256:d40ee61030a9afafddfdd58d160281b865bfcad7cb66e920116fd6fd40668cbb
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/blocky/values.yaml

@@ -112,7 +112,6 @@ blocky:
               booklore                        IN      CNAME   traefik-cl01tl
               ceph                            IN      CNAME   traefik-cl01tl
               code-server                     IN      CNAME   traefik-cl01tl
-              directus                        IN      CNAME   traefik-cl01tl
               excalidraw                      IN      CNAME   traefik-cl01tl
               feishin                         IN      CNAME   traefik-cl01tl
               garage-s3                       IN      CNAME   traefik-cl01tl

clusters/cl01tl/helm/cilium/templates/cilium-l2-announcement-policy.yaml

@@ -0,0 +1,18 @@
+# apiVersion: "cilium.io/v2alpha1"
+# kind: CiliumL2AnnouncementPolicy
+# metadata:
+#   name: node-gateway-l2-policy
+#   namespace: {{ .Release.Namespace }}
+#   labels:
+#     app.kubernetes.io/name: node-gateway-l2-policy
+#     app.kubernetes.io/instance: {{ .Release.Name }}
+#     app.kubernetes.io/part-of: {{ .Release.Name }}
+# spec:
+#   nodeSelector:
+#     matchLabels:
+#       kubernetes.io/hostname: talos-ix7-xku
+#   interfaces:
+#     - end0
+#     - enp6s0
+#   externalIPs: true
+#   loadBalancerIPs: true

clusters/cl01tl/helm/cilium/templates/cilium-load-balancer-ip-pool.yaml

@@ -11,6 +11,8 @@ spec:
   blocks:
     - start: "10.232.1.21"
       stop: "10.232.1.23"
+    - start: "10.232.2.21"
+      stop: "10.232.2.23"
 
 ---
 apiVersion: cilium.io/v2

clusters/cl01tl/helm/cilium/templates/gateway.yaml

@@ -9,6 +9,7 @@
 #     app.kubernetes.io/part-of: {{ .Release.Name }}
 #   annotations:
 #     cert-manager.io/cluster-issuer: letsencrypt-issuer
+#     io.cilium/lb-ipam-ips: "10.232.1.23"
 # spec:
 #   addresses:
 #     - type: IPAddress

clusters/cl01tl/helm/cilium/values.yaml

@@ -38,6 +38,7 @@ cilium:
   bpf:
     hostLegacyRouting: true
   devices: end0 enp6s0
+  enableK8sEndpointSlice: true
   ciliumEndpointSlice:
     enabled: true
   ingressController:
@@ -46,8 +47,6 @@ cilium:
     enabled: true
     enableAlpn: true
     enableAppProtocol: true
-    gatewayClass:
-      create: auto
   externalIPs:
     enabled: true
   socketLB:

clusters/cl01tl/helm/code-server/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.3.0
+  version: 2.2.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:a170a0695881a7eed9bc2b0fc8b7f7bce18919e9bea0c5342a35e5a1a5ffa406
-generated: "2026-02-07T00:36:52.387080745Z"
+digest: sha256:185da5d4998267b90e6d2ece537b9550d800d1cca0217cac808a88f63f9fec29
+generated: "2026-02-03T03:41:32.224062229Z"

clusters/cl01tl/helm/code-server/Chart.yaml

@@ -22,7 +22,7 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.3.0
+    version: 2.2.2
   - name: volsync-target
     alias: volsync-target-config
     version: 0.7.0

clusters/cl01tl/helm/code-server/values.yaml

@@ -9,7 +9,7 @@ code-server:
         main:
           image:
             repository: ghcr.io/linuxserver/code-server
-            tag: 4.109.2@sha256:3c6a1f70ba898b47d77dec0ce6d43a3a9223091587d3c57935607eefa77511da
+            tag: 4.108.2@sha256:a59301fe97af3d9bf9150ce53e5c7b12486f2803eea0446a38f8d545ac877c9a
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/directus/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.3.0
+  version: 2.2.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.5.1
+  version: 7.5.0
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.0.4
-digest: sha256:ff9c3684242fa6ce85051e3ab15cd482ad721dbb589853545e8db184644e47b8
-generated: "2026-02-07T02:27:57.805810517Z"
+digest: sha256:c8812d427b060fc1b117ee14c92f37eb7a25a2f62b52b43184b90b74c161af48
+generated: "2026-02-03T20:35:55.199768508Z"

clusters/cl01tl/helm/directus/Chart.yaml

@@ -21,13 +21,16 @@ dependencies:
     alias: directus
     repository: https://bjw-s-labs.github.io/helm-charts/
     version: 4.6.2
+  - name: cloudflared
+    repository: oci://harbor.alexlebens.net/helm-charts
+    version: 2.2.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.5.1
+    version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     version: 1.0.4
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/directus.png
 # renovate: datasource=github-releases depName=directus/directus
-appVersion: 11.15.1
+appVersion: 11.15.0

clusters/cl01tl/helm/directus/values.yaml

@@ -9,11 +9,11 @@ directus:
         main:
           image:
             repository: directus/directus
-            tag: 11.15.1
+            tag: 11.15.0
             pullPolicy: IfNotPresent
           env:
             - name: PUBLIC_URL
-              value: https://directus.alexlebens.net
+              value: https://directus.alexlebens.dev
             - name: WEBSOCKETS_ENABLED
               value: true
             - name: ADMIN_EMAIL
@@ -125,7 +125,7 @@ directus:
             - name: AUTH_AUTHENTIK_SCOPE
               value: openid profile email
             - name: AUTH_AUTHENTIK_ISSUER_URL
-              value: https://authentik.alexlebens.net/application/o/directus/.well-known/openid-configuration
+              value: https://auth.alexlebens.dev/application/o/directus/.well-known/openid-configuration
             - name: AUTH_AUTHENTIK_IDENTIFIER_KEY
               value: email
             - name: AUTH_AUTHENTIK_ALLOW_PUBLIC_REGISTRATION
@@ -168,27 +168,6 @@ directus:
           bearerTokenSecret:
             name: directus-metric-token
             key: metric-token
-  route:
-    main:
-      kind: HTTPRoute
-      parentRefs:
-        - group: gateway.networking.k8s.io
-          kind: Gateway
-          name: traefik-gateway
-          namespace: traefik
-      hostnames:
-        - directus.alexlebens.net
-      rules:
-        - backendRefs:
-            - group: ''
-              kind: Service
-              name: directus
-              port: 80
-              weight: 100
-          matches:
-            - path:
-                type: PathPrefix
-                value: /
 postgres-18-cluster:
   mode: recovery
   recovery:

clusters/cl01tl/helm/element-web/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 1.4.29
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.3.0
-digest: sha256:8596c403427f8ba2f257ed45bb2604c4de0da72dfb03d44d1b0e96f6576c3920
-generated: "2026-02-07T00:37:18.77202934Z"
+  version: 2.2.2
+digest: sha256:a27e895a7c19b296ca63888511d865b9623020824a1ea9c39dafa5433e9e83f4
+generated: "2026-02-03T03:42:00.780507134Z"

clusters/cl01tl/helm/element-web/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     repository: https://ananace.gitlab.io/charts
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.3.0
+    version: 2.2.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/element.png
 # renovate: datasource=github-releases depName=element-hq/element-web
-appVersion: v1.12.10
+appVersion: v1.12.9

clusters/cl01tl/helm/element-web/values.yaml

@@ -2,7 +2,7 @@ element-web:
   replicaCount: 1
   image:
     repository: vectorim/element-web
-    tag: v1.12.10
+    tag: v1.12.9
     pullPolicy: IfNotPresent
   defaultServer:
     url: https://matrix.alexlebens.dev

clusters/cl01tl/helm/freshrss/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.3.0
+  version: 2.2.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.5.1
+  version: 7.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:d3129463df789e53981fc7e57b5574d6eba00a44f4b9f906efacf563d70b36f3
-generated: "2026-02-07T02:28:08.830228688Z"
+digest: sha256:85e8205ab05be520984cb7c08109aedd9020229b2e7ef22da7b82534cd5d8242
+generated: "2026-02-03T03:42:15.595589094Z"

clusters/cl01tl/helm/freshrss/Chart.yaml

@@ -23,10 +23,10 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.3.0
+    version: 2.2.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.5.1
+    version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data

clusters/cl01tl/helm/gatus/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: gatus
   repository: https://twin.github.io/helm-charts
-  version: 1.5.0
+  version: 1.4.5
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.5.1
+  version: 7.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:327091258e0174bea1932e66b0a1a7b54b475365cf23fe776b37ac446ae3c7e9
-generated: "2026-02-10T21:50:24.906374-06:00"
+digest: sha256:869bee8ae57a4c920ae6495a5fc90feabcbee12647cc7b9beb8b368823ffdbf1
+generated: "2026-01-23T00:36:25.773527504Z"

clusters/cl01tl/helm/gatus/Chart.yaml

@@ -19,10 +19,10 @@ maintainers:
 dependencies:
   - name: gatus
     repository: https://twin.github.io/helm-charts
-    version: 1.5.0
+    version: 1.4.5
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.5.1
+    version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data

clusters/cl01tl/helm/gatus/templates/http-route.yaml

@@ -0,0 +1,28 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: gatus
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: gatus
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  parentRefs:
+    - group: gateway.networking.k8s.io
+      kind: Gateway
+      name: traefik-gateway
+      namespace: traefik
+  hostnames:
+    - gatus.alexlebens.net
+  rules:
+    - matches:
+      - path:
+          type: PathPrefix
+          value: /
+      backendRefs:
+        - group: ''
+          kind: Service
+          name: gatus
+          port: 80
+          weight: 100

clusters/cl01tl/helm/gatus/values.yaml

@@ -17,18 +17,6 @@ gatus:
     portName: http
   ingress:
     enabled: false
-  gateway:
-    apiVersion: gateway.networking.k8s.io/v1
-    route:
-      enabled: true
-      path: /
-      parentRefs:
-        - group: gateway.networking.k8s.io
-          kind: Gateway
-          name: traefik-gateway
-          namespace: traefik
-      hosts:
-        - gatus.alexlebens.net
   env:
     NTFY_TOKEN:
       valueFrom:
@@ -164,9 +152,6 @@ gatus:
       - name: booklore
         url: https://booklore.alexlebens.net
         <<: *defaults
-      - name: directus
-        url: https://directus.alexlebens.net
-        <<: *defaults
       - name: home-assistant
         url: https://home-assistant.alexlebens.net
         <<: *defaults
@@ -341,8 +326,8 @@ gatus:
         url: https://www.alexlebens.dev
         <<: *defaults
         group: external
-      - name: rybbit
-        url: https://rybbit.alexlebens.dev
+      - name: directus
+        url: https://directus.alexlebens.dev
         <<: *defaults
         group: external
       - name: postiz
@@ -384,6 +369,10 @@ gatus:
         url: https://auth.alexlebens.dev
         <<: *defaults
         group: external
+      - name: public homepage
+        url: https://home.alexlebens.dev
+        <<: *defaults
+        group: external
 postgres-18-cluster:
   mode: recovery
   recovery:

clusters/cl01tl/helm/gitea/Chart.lock

@@ -10,10 +10,10 @@ dependencies:
   version: 0.25.1
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.3.0
+  version: 2.2.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.5.1
+  version: 7.5.0
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.0.4
@@ -23,5 +23,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:0b376cdddc09bf3346d7c9789452a0bfe6af630faf3b005e75426f5a3635ef1f
-generated: "2026-02-07T02:28:33.614969361Z"
+digest: sha256:e8940a4eb5bfe5aeb2d7bd8f328d7aee962d0a75c1d2aa4937401b16e5c29238
+generated: "2026-02-03T20:36:08.603489039Z"

clusters/cl01tl/helm/gitea/Chart.yaml

@@ -36,10 +36,10 @@ dependencies:
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.3.0
+    version: 2.2.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.5.1
+    version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     alias: redis-replication-gitea

clusters/cl01tl/helm/grafana-operator/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 5.21.4
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.5.1
+  version: 7.5.0
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.0.4
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.0.4
-digest: sha256:5775ad67f466afd5e7bf986826e5385b4127c65bf81ed885df4690ffb8bd2876
-generated: "2026-02-07T02:28:49.454143056Z"
+digest: sha256:9ba81c06283d46ae577e40d0d030149307404a3ff35e6c2c8d0e738aeedfcc6a
+generated: "2026-02-03T20:36:24.992188976Z"

clusters/cl01tl/helm/grafana-operator/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     repository: https://grafana.github.io/helm-charts
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.5.1
+    version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     alias: redis-replication-unified-alerting

clusters/cl01tl/helm/harbor/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 1.18.2
 - name: postgres-cluster
   repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
-  version: 7.5.1
+  version: 7.5.0
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.0.4
-digest: sha256:5786e414b8b1b61468c0ec283c8e0038944fb383a766d8181564c9301df76ef3
-generated: "2026-02-07T02:29:36.127187941Z"
+digest: sha256:a5986b8d12f26cb4d0c757e7d9946af180003d8a8a7bb4b399297cc7d5235790
+generated: "2026-02-03T20:36:39.914082171Z"

clusters/cl01tl/helm/harbor/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     repository: https://helm.goharbor.io
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.5.1
+    version: 7.5.0
     repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
   - name: redis-replication
     version: 1.0.4

clusters/cl01tl/helm/headlamp/Chart.yaml

@@ -18,4 +18,4 @@ dependencies:
     repository: https://kubernetes-sigs.github.io/headlamp/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/headlamp.png
 # renovate: datasource=github-releases depName=headlamp-k8s/headlamp
-appVersion: v0.40.1
+appVersion: v0.40.0

clusters/cl01tl/helm/home-assistant/Chart.yaml

@@ -25,4 +25,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/home-assistant.png
 # renovate: datasource=github-releases depName=home-assistant/core
-appVersion: 2026.2.1
+appVersion: 2026.2.0

clusters/cl01tl/helm/home-assistant/values.yaml

@@ -21,7 +21,7 @@ home-assistant:
         code-server:
           image:
             repository: ghcr.io/linuxserver/code-server
-            tag: 4.109.2@sha256:3c6a1f70ba898b47d77dec0ce6d43a3a9223091587d3c57935607eefa77511da
+            tag: 4.108.2@sha256:a59301fe97af3d9bf9150ce53e5c7b12486f2803eea0446a38f8d545ac877c9a
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/homepage-dev/Chart.lock

@@ -0,0 +1,9 @@
+dependencies:
+- name: app-template
+  repository: https://bjw-s-labs.github.io/helm-charts/
+  version: 4.6.2
+- name: cloudflared
+  repository: oci://harbor.alexlebens.net/helm-charts
+  version: 2.2.2
+digest: sha256:b5120e37e5b4b28a327fa2a3a5c93e93866848c5d36b9b1a8ee7c11ed81663dc
+generated: "2026-02-03T03:42:46.510379398Z"

clusters/cl01tl/helm/homepage-dev/Chart.yaml

@@ -0,0 +1,27 @@
+apiVersion: v2
+name: homepage
+version: 1.0.0
+description: Homepage
+keywords:
+  - homepage
+  - dashboard
+home: https://wiki.alexlebens.dev/s/a5fabd91-3d89-4e2b-9417-06111aedaeaa
+sources:
+  - https://github.com/gethomepage/homepage
+  - https://github.com/cloudflare/cloudflared
+  - https://github.com/gethomepage/homepage/pkgs/container/homepage
+  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
+  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/cloudflared
+maintainers:
+  - name: alexlebens
+dependencies:
+  - name: app-template
+    alias: homepage
+    repository: https://bjw-s-labs.github.io/helm-charts/
+    version: 4.6.2
+  - name: cloudflared
+    repository: oci://harbor.alexlebens.net/helm-charts
+    version: 2.2.2
+icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/homepage.png
+# renovate: datasource=github-releases depName=gethomepage/homepage
+appVersion: v1.10.1

clusters/cl01tl/helm/homepage-dev/values.yaml

@@ -0,0 +1,165 @@
+homepage:
+  global:
+    nameOverride: homepage
+  controllers:
+    main:
+      type: deployment
+      annotations:
+        reloader.stakater.com/auto: "true"
+      strategy: Recreate
+      containers:
+        main:
+          image:
+            repository: ghcr.io/gethomepage/homepage
+            tag: v1.10.1
+            pullPolicy: IfNotPresent
+          env:
+            - name: HOMEPAGE_ALLOWED_HOSTS
+              value: home.alexlebens.dev
+          resources:
+            requests:
+              cpu: 10m
+              memory: 128Mi
+  configMaps:
+    config:
+      enabled: true
+      data:
+        docker.yaml: ""
+        kubernetes.yaml: ""
+        settings.yaml: |
+          favicon: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/logo-new-round.svg
+          headerStyle: clean
+          hideVersion: true
+          color: zinc
+          background:
+            image: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/background.jpg
+            brightness: 50
+          theme: dark
+          disableCollapse: true
+        widgets.yaml: |
+          - logo:
+              icon: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/logo-new-round.png
+          - datetime:
+              text_size: xl
+              format:
+                dateStyle: long
+                timeStyle: short
+                hour12: false
+          - openmeteo:
+              label: St. Paul
+              latitude: 44.954445
+              longitude: -93.091301
+              timezone: America/Chicago
+              units: metric
+              cache: 5
+              format:
+                maximumFractionDigits: 0
+        services.yaml: |
+          - Applications:
+              - Auth:
+                  icon: sh-authentik.webp
+                  description: Authentik
+                  href: https://auth.alexlebens.dev
+                  siteMonitor: https://auth.alexlebens.dev
+                  statusStyle: dot
+              - Gitea:
+                  icon: sh-gitea.webp
+                  description: Gitea
+                  href: https://gitea.alexlebens.dev
+                  siteMonitor: https://gitea.alexlebens.dev
+                  statusStyle: dot
+              - Code:
+                  icon: sh-visual-studio-code.webp
+                  description: VS Code
+                  href: https://codeserver.alexlebens.dev
+                  siteMonitor: https://codeserver.alexlebens.dev
+                  statusStyle: dot
+              - Site:
+                  icon: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/logo-new-round.png
+                  description: Profile Website
+                  href: https://www.alexlebens.dev
+                  siteMonitor: https://www.alexlebens.dev
+                  statusStyle: dot
+              - Content Management:
+                  icon: directus.png
+                  description: Directus
+                  href: https://directus.alexlebens.dev
+                  siteMonitor: https://directus.alexlebens.dev
+                  statusStyle: dot
+              - Social Media Management:
+                  icon: sh-postiz.webp
+                  description: Postiz
+                  href: https://postiz.alexlebens.dev
+                  siteMonitor: https://postiz.alexlebens.dev
+                  statusStyle: dot
+              - Chat:
+                  icon: sh-element.webp
+                  description: Matrix
+                  href: https://chat.alexlebens.dev
+                  siteMonitor: https://chat.alexlebens.dev
+                  statusStyle: dot
+              - Wiki:
+                  icon: sh-outline.webp
+                  description: Outline
+                  href: https://wiki.alexlebens.dev
+                  siteMonitor: https://wiki.alexlebens.dev
+                  statusStyle: dot
+              - Passwords:
+                  icon: sh-vaultwarden-light.webp
+                  description: Vaultwarden
+                  href: https://passwords.alexlebens.dev
+                  siteMonitor: https://passwords.alexlebens.dev
+                  statusStyle: dot
+              - Bookmarks:
+                  icon: sh-karakeep-light.webp
+                  description: Karakeep
+                  href: https://karakeep.alexlebens.dev
+                  siteMonitor: https://karakeep.alexlebens.dev
+                  statusStyle: dot
+              - RSS:
+                  icon: sh-freshrss.webp
+                  description: FreshRSS
+                  href: https://rss.alexlebens.dev
+                  siteMonitor: https://rss.alexlebens.dev
+                  statusStyle: dot
+        bookmarks.yaml: ""
+  service:
+    http:
+      controller: main
+      ports:
+        http:
+          port: 80
+          targetPort: 3000
+          protocol: HTTP
+  persistence:
+    config:
+      enabled: true
+      type: configMap
+      name: homepage-dev
+      advancedMounts:
+        main:
+          main:
+            - path: /app/config/bookmarks.yaml
+              readOnly: true
+              mountPropagation: None
+              subPath: bookmarks.yaml
+            - path: /app/config/docker.yaml
+              readOnly: true
+              mountPropagation: None
+              subPath: docker.yaml
+            - path: /app/config/kubernetes.yaml
+              readOnly: true
+              mountPropagation: None
+              subPath: kubernetes.yaml
+            - path: /app/config/services.yaml
+              readOnly: true
+              mountPropagation: None
+              subPath: services.yaml
+            - path: /app/config/settings.yaml
+              readOnly: true
+              mountPropagation: None
+              subPath: settings.yaml
+            - path: /app/config/widgets.yaml
+              readOnly: true
+              mountPropagation: None
+              subPath: widgets.yaml

clusters/cl01tl/helm/homepage/templates/external-secret.yaml

@@ -12,41 +12,6 @@ spec:
     kind: ClusterSecretStore
     name: vault
   data:
-    - secretKey: HOMEPAGE_VAR_GITEA_API_TOKEN
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/gitea/auth/homepage
-        metadataPolicy: None
-        property: token
-    - secretKey: HOMEPAGE_VAR_ARGOCD_API_TOKEN
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/argocd/credentials/homepage
-        metadataPolicy: None
-        property: token
-    - secretKey: HOMEPAGE_VAR_KOMODO_API_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/komodo/homepage
-        metadataPolicy: None
-        property: key
-    - secretKey: HOMEPAGE_VAR_KOMODO_API_SECRET
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/komodo/homepage
-        metadataPolicy: None
-        property: secret
-    - secretKey: HOMEPAGE_VAR_JELLYSTAT_API_KEY
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/jellystat/homepage
-        metadataPolicy: None
-        property: key
     - secretKey: HOMEPAGE_VAR_SYNOLOGY_USER
       remoteRef:
         conversionStrategy: Default
@@ -61,13 +26,20 @@ spec:
         key: /synology/auth/cl01tl
         metadataPolicy: None
         property: password
-    - secretKey: HOMEPAGE_VAR_UNIFI_API_KEY
+    - secretKey: HOMEPAGE_VAR_UNIFI_USER
       remoteRef:
         conversionStrategy: Default
         decodingStrategy: None
         key: /unifi/auth/cl01tl
         metadataPolicy: None
-        property: api-key
+        property: user
+    - secretKey: HOMEPAGE_VAR_UNIFI_PASSWORD
+      remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
+        key: /unifi/auth/cl01tl
+        metadataPolicy: None
+        property: password
     - secretKey: HOMEPAGE_VAR_SONARR_KEY
       remoteRef:
         conversionStrategy: Default

clusters/cl01tl/helm/homepage/values.yaml

@@ -4,10 +4,9 @@ homepage:
   controllers:
     main:
       type: deployment
-      replicas: 1
-      strategy: RollingUpdate
       annotations:
         reloader.stakater.com/auto: "true"
+      strategy: Recreate
       serviceAccount:
         name: homepage
       pod:
@@ -197,23 +196,11 @@ homepage:
                   href: https://www.alexlebens.dev
                   siteMonitor: https://www.alexlebens.dev
                   statusStyle: dot
-              - Documentation:
-                  icon: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/logo-new-round.png
-                  description: Documentation Wiki
-                  href: https://docs.alexlebens.dev
-                  siteMonitor: https://docs.alexlebens.dev
-                  statusStyle: dot
               - Content Management:
                   icon: directus.png
                   description: Directus
-                  href: https://directus.alexlebens.net
-                  siteMonitor: http://directus.directus:80
-                  statusStyle: dot
-              - Analytics:
-                  icon: sh-rybbit-light.webp
-                  description: Rybbit
-                  href: https://rybbit.alexlebens.dev
-                  siteMonitor: http://rybbit-client.rybbit:80
+                  href: https://directus.alexlebens.dev
+                  siteMonitor: https://directus.alexlebens.dev
                   statusStyle: dot
               - Social Media Management:
                   icon: sh-postiz.webp
@@ -307,16 +294,6 @@ homepage:
                   href: https://gitea.alexlebens.dev
                   siteMonitor: https://gitea.alexlebens.dev
                   statusStyle: dot
-                  namespace: gitea
-                  app: gitea
-                  podSelector: >-
-                      app.kubernetes.io/instance in (
-                          gitea
-                      )
-                  widget:
-                      type: gitea
-                      url: http://gitea-http.gitea:3000
-                      key: {{ "{{HOMEPAGE_VAR_GITEA_API_TOKEN}}" }}
               - Code (Local):
                   icon: sh-gitea.webp
                   description: Gitea
@@ -341,37 +318,19 @@ homepage:
                   href: https://home-assistant-code-server.alexlebens.net
                   siteMonitor: http://home-assistant-code-server.home-assistant:8443
                   statusStyle: dot
-          - Automation:
               - Continuous Deployment:
                   icon: sh-argo-cd.webp
                   description: ArgoCD
                   href: https://argocd.alexlebens.net
                   siteMonitor: http://argocd-server.argocd:80
                   statusStyle: dot
-                  namespace: argocd
-                  app: argocd
-                  podSelector: >-
-                      app.kubernetes.io/instance in (
-                          argocd
-                      )
-                  widget:
-                      type: argocd
-                      url: http://argocd-server.argocd:80
-                      key: {{ "{{HOMEPAGE_VAR_ARGOCD_API_TOKEN}}" }}
-                      fields: ["outOfSync", "progressing", "suspended", "degraded"]
               - Docker Deployment:
                   icon: sh-komodo-light.webp
                   description: Komodo
                   href: https://komodo.alexlebens.net
                   siteMonitor: http://komodo-main.komodo:80
                   statusStyle: dot
-                  widget:
-                      type: komodo
-                      url: http://komodo-main.komodo:80
-                      key: {{ "{{HOMEPAGE_VAR_KOMODO_API_KEY}}" }}
-                      secret: {{ "{{HOMEPAGE_VAR_KOMODO_API_SECRET}}" }}
-                      showStacks: true
-                      fields: ["running", "down", "unhealthy", "unknown"]
+          - Automation:
               - Deployment Workflows:
                   icon: sh-argo-cd.webp
                   description: Argo Workflows
@@ -397,36 +356,24 @@ homepage:
                   href: https://headlamp.alexlebens.net
                   siteMonitor: http://headlamp.headlamp:80
                   statusStyle: dot
-              - Dashboard:
-                  icon: sh-grafana.webp
-                  description: Grafana
-                  href: https://grafana.alexlebens.net
-                  siteMonitor: http://grafana-main-service.grafana-operator:3000/api/health
-                  statusStyle: dot
               - Network Monitoring:
                   icon: sh-cilium.webp
                   description: Hubble for Cilium
                   href: https://hubble.alexlebens.net
                   siteMonitor: http://hubble-ui.kube-system:80
                   statusStyle: dot
-                  namespace: kube-system
-                  app: cilium-operator
-                  podSelector: >-
-                      app.kubernetes.io/part-of in (
-                          cilium
-                      )
+              - Dashboard:
+                  icon: sh-grafana.webp
+                  description: Grafana
+                  href: https://grafana.alexlebens.net
+                  siteMonitor: http://grafana-main-service.grafana-operator:3000/api/health
+                  statusStyle: dot
               - Metrics:
                   icon: sh-prometheus.webp
                   description: Prometheus
                   href: https://prometheus.alexlebens.net
                   siteMonitor: http://kube-prometheus-stack-prometheus.kube-prometheus-stack:9090
                   statusStyle: dot
-                  namespace: kube-prometheus-stack
-                  app: prometheus
-                  podSelector: >-
-                      app.kubernetes.io/instance in (
-                          kube-prometheus-stack
-                      )
                   widget:
                     type: prometheus
                     url: http://kube-prometheus-stack-prometheus.kube-prometheus-stack:9090
@@ -500,11 +447,6 @@ homepage:
                   href: https://unifi.alexlebens.net
                   siteMonitor: https://unifi.alexlebens.net
                   statusStyle: dot
-                  widget:
-                      type: unifi
-                      url: https://unifi.alexlebens.net
-                      key: {{ "{{HOMEPAGE_VAR_UNIFI_API_KEY}}" }}
-                      fields: ["uptime", "wan", "lan_devices", "wlan_devices"]
               - Network Attached Storage:
                   icon: sh-synology-light.webp
                   description: Synology
@@ -577,9 +519,6 @@ homepage:
                   href: https://backrest.alexlebens.net
                   siteMonitor: http://backrest.backrest:80
                   statusStyle: dot
-                  widget:
-                      type: backrest
-                      url: http://backrest.backrest:80
           - Content:
               - qUI:
                   icon: https://raw.githubusercontent.com/autobrr/qui/8487c818886df9abb2b1456f43b54e0ba180a2bd/web/public/icons.svg
@@ -742,6 +681,12 @@ homepage:
                   siteMonitor: http://shelfmark.shelfmark:80
                   statusStyle: dot
           - Other Homes:
+              - Dev:
+                  icon: sh-homepage.webp
+                  description: Public Homepage
+                  href: https://home.alexlebens.dev
+                  siteMonitor: https://home.alexlebens.dev
+                  statusStyle: dot
               - Lebens Home:
                   icon: sh-homepage.webp
                   description: Lebens Homepage

clusters/cl01tl/helm/huntarr/Chart.yaml

@@ -23,4 +23,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/huntarr.png
 # renovate: datasource=github-releases depName=plexguide/huntarr
-appVersion: 9.2.4
+appVersion: 9.2.2

clusters/cl01tl/helm/huntarr/values.yaml

@@ -9,7 +9,7 @@ huntarr:
         main:
           image:
             repository: ghcr.io/plexguide/huntarr
-            tag: 9.2.4
+            tag: 9.2.2
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/immich/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.5.1
+  version: 7.5.0
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.0.4
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:4c93a50fcb190f191510da0b1ede039fea04055eb5b16890eb40c8c4899a63ec
-generated: "2026-02-07T02:30:26.038265281Z"
+digest: sha256:c2363283e3c7614dbb15fa6f5436716e435fa18f2ecd08dca1ac82bb01ab0696
+generated: "2026-02-03T20:36:59.006280506Z"

clusters/cl01tl/helm/immich/Chart.yaml

@@ -20,7 +20,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.5.1
+    version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     version: 1.0.4
@@ -31,4 +31,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/immich.png
 # renovate: datasource=github-releases depName=immich-app/immich
-appVersion: v2.5.6
+appVersion: v2.5.5

clusters/cl01tl/helm/immich/values.yaml

@@ -9,7 +9,7 @@ immich:
         main:
           image:
             repository: ghcr.io/immich-app/immich-server
-            tag: v2.5.6
+            tag: v2.5.5
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/jellystat/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.5.1
+  version: 7.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:13a3c6ea43b01d77aded07becb15a9e57ee3541053a67054b9d832cc29e6e9e3
-generated: "2026-02-07T02:31:01.535664696Z"
+digest: sha256:74690c7f1feeb817a36cb456e7454c45dca9d030e48e2f17b1516117fd14174a
+generated: "2026-01-23T00:38:03.74023713Z"

clusters/cl01tl/helm/jellystat/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.5.1
+    version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data

clusters/cl01tl/helm/jellystat/values.yaml

@@ -9,7 +9,7 @@ jellystat:
         main:
           image:
             repository: cyfershepard/jellystat
-            tag: 1.1.8
+            tag: 1.1.7
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/karakeep/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 0.25.1
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.3.0
+  version: 2.2.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:e1b778c2c97feb493208575bf7eb345ee8013f04c1f939286012ecd44366ccd9
-generated: "2026-02-07T00:38:11.63002027Z"
+digest: sha256:5b1948702805bb46749615b98629185d495a8ff1d9d9e6bc52c972524fb6d2fa
+generated: "2026-02-03T18:06:00.958200599Z"

clusters/cl01tl/helm/karakeep/Chart.yaml

@@ -26,7 +26,7 @@ dependencies:
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.3.0
+    version: 2.2.2
   - name: volsync-target
     alias: volsync-target-data
     version: 0.7.0

clusters/cl01tl/helm/komodo/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.5.1
-digest: sha256:a8c457a1480e3f0f189de780b3f1649877c17bac8c3cf59a9db68fd08363829b
-generated: "2026-02-07T02:31:20.129379883Z"
+  version: 7.5.0
+digest: sha256:00716659773ba228fa472f8db4c0b44e5815ebe9b10416b8f6bbc8c0feef5ac6
+generated: "2026-01-23T00:38:16.85961817Z"

clusters/cl01tl/helm/komodo/Chart.yaml

@@ -23,7 +23,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgresql-17-fdb-cluster
-    version: 7.5.1
+    version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/komodo.png
 # renovate: datasource=github-releases depName=moghtech/komodo

clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: kube-prometheus-stack
   repository: oci://ghcr.io/prometheus-community/charts
-  version: 81.6.3
+  version: 81.5.0
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
   version: 4.6.2
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.0.4
-digest: sha256:81381261982252c9cf795dca982d25b905346f733d40178b37cc434847cd3490
-generated: "2026-02-12T21:03:09.101291141Z"
+digest: sha256:62ceeea1ed2f1f3a838e468665c3f291cb67ac547f3fa37863131f088736a750
+generated: "2026-02-03T20:37:14.907439914Z"

clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml

@@ -20,7 +20,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: kube-prometheus-stack
-    version: 81.6.3
+    version: 81.5.0
     repository: oci://ghcr.io/prometheus-community/charts
   - name: app-template
     alias: ntfy-alertmanager

clusters/cl01tl/helm/kubelet-serving-cert-approver/Chart.yaml

@@ -20,4 +20,4 @@ dependencies:
     version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 # renovate: datasource=github-releases depName=alex1989hu/kubelet-serving-cert-approver
-appVersion: 0.10.3
+appVersion: 0.10.2

clusters/cl01tl/helm/kubelet-serving-cert-approver/values.yaml

@@ -38,7 +38,7 @@ kubelet-serving-cert-approver:
         main:
           image:
             repository: ghcr.io/alex1989hu/kubelet-serving-cert-approver
-            tag: 0.10.3
+            tag: 0.10.2
             pullPolicy: Always
           args:
             - serve

clusters/cl01tl/helm/lidarr/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.5.1
+  version: 7.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:628ab2c174a9cf9b24f4c9822d325fee3d63548b526f406f6555bbc7cbabf759
-generated: "2026-02-07T02:31:36.916431665Z"
+digest: sha256:3eecce4de28a028bc38d6601b3867ee678a1d28bfc7de778f46982c8064fd281
+generated: "2026-01-23T00:38:33.055103699Z"

clusters/cl01tl/helm/lidarr/Chart.yaml

@@ -24,7 +24,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.5.1
+    version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/lidarr/values.yaml

@@ -15,7 +15,7 @@ lidarr:
         main:
           image:
             repository: ghcr.io/linuxserver/lidarr
-            tag: 3.1.2-nightly@sha256:bcad2fdb95a60cf3e634a37ec833a54f8dc5346fe9e8d8963b44ba35bb78c9cd
+            tag: 3.1.2-nightly@sha256:adc776c4deb0b36909472a8d22ce00306b4a37f0d584407d846efd59060279ac
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/loki/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: loki
   repository: https://grafana.github.io/helm-charts
-  version: 6.53.0
+  version: 6.52.0
 - name: alloy
   repository: https://grafana.github.io/helm-charts
   version: 1.6.0
-digest: sha256:a65f68b2e68defa63d15cf84317ba45a770b5b9cbb5bebc6fed219cefed99b69
-generated: "2026-02-10T19:12:00.80383488Z"
+digest: sha256:097f893b362b3ba6a1498d6df00dc57030c4d1321cf3301268adb9e30d5043ed
+generated: "2026-02-05T22:01:50.699662067Z"

clusters/cl01tl/helm/loki/Chart.yaml

@@ -16,11 +16,11 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: loki
-    version: 6.53.0
+    version: 6.52.0
     repository: https://grafana.github.io/helm-charts
   - name: alloy
     version: 1.6.0
     repository: https://grafana.github.io/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/loki.png
 # renovate: datasource=github-releases depName=grafana/loki
-appVersion: 3.6.5
+appVersion: 3.6.4

clusters/cl01tl/helm/matrix-synapse/Chart.lock

@@ -13,13 +13,13 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.3.0
+  version: 2.2.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.3.0
+  version: 2.2.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.5.1
+  version: 7.5.0
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.0.4
@@ -38,5 +38,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:d373bf3fea08bde2c3eea21d421f9d0d385ee141be60229427f281d2fbae4c54
-generated: "2026-02-07T02:31:51.33670708Z"
+digest: sha256:6675ba9bd3da7605e3c0243602035a96aabb76813c4d9659409580612522ba94
+generated: "2026-02-03T20:37:32.102491987Z"

clusters/cl01tl/helm/matrix-synapse/Chart.yaml

@@ -45,15 +45,15 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     alias: cloudflared-synapse
-    version: 2.3.0
+    version: 2.2.2
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: cloudflared
     alias: cloudflared-hookshot
-    version: 2.3.0
+    version: 2.2.2
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.5.1
+    version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     alias: redis-replication-matrix-synapse
@@ -81,4 +81,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/matrix.png
 # renovate: datasource=github-releases depName=element-hq/synapse
-appVersion: v1.147.1
+appVersion: 1.146.0

clusters/cl01tl/helm/navidrome/values.yaml

@@ -9,7 +9,7 @@ navidrome:
         main:
           image:
             repository: deluan/navidrome
-            tag: 0.60.3@sha256:a5dce8f33304714dd138e870cca0dcab3d937ca236be1a9f2b97da009d1a0048
+            tag: 0.60.0@sha256:5d0f6ab343397c043c7063db14ae10e4e3980e54ae7388031cbce47e84af6657
             pullPolicy: IfNotPresent
           env:
             - name: ND_MUSICFOLDER

clusters/cl01tl/helm/ntfy/Chart.yaml

@@ -20,4 +20,4 @@ dependencies:
     version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ntfy.png
 # renovate: datasource=github-releases depName=binwiederhier/ntfy
-appVersion: 2.17.0
+appVersion: 2.16.0

clusters/cl01tl/helm/ntfy/values.yaml

@@ -9,7 +9,7 @@ ntfy:
         main:
           image:
             repository: binwiederhier/ntfy
-            tag: v2.17.0
+            tag: v2.16.0
             pullPolicy: IfNotPresent
           args: ["serve"]
           env:

clusters/cl01tl/helm/ollama/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.5.1
+  version: 7.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:016ca629a1fbe06f6791b663b6b5e99f05184ee5042fabc2e9cb60975032baf8
-generated: "2026-02-07T02:32:11.063809451Z"
+digest: sha256:13774bf9b78af6c71cd86fbdf87613b632ff2c8ebc17ccb2575c16f24c954e9c
+generated: "2026-01-23T00:39:10.677757004Z"

clusters/cl01tl/helm/ollama/Chart.yaml

@@ -23,7 +23,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.5.1
+    version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data
@@ -31,4 +31,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ollama.png
 # renovate: datasource=github-releases depName=ollama/ollama
-appVersion: 0.16.0
+appVersion: 0.15.5

clusters/cl01tl/helm/ollama/values.yaml

@@ -22,7 +22,7 @@ ollama:
         main:
           image:
             repository: ollama/ollama
-            tag: 0.16.0
+            tag: 0.15.5
             pullPolicy: IfNotPresent
           env:
             - name: OLLAMA_KEEP_ALIVE
@@ -58,7 +58,7 @@ ollama:
         main:
           image:
             repository: ollama/ollama
-            tag: 0.16.0
+            tag: 0.15.5
             pullPolicy: IfNotPresent
           env:
             - name: OLLAMA_KEEP_ALIVE
@@ -94,7 +94,7 @@ ollama:
         main:
           image:
             repository: ollama/ollama
-            tag: 0.16.0
+            tag: 0.15.5
             pullPolicy: IfNotPresent
           env:
             - name: OLLAMA_KEEP_ALIVE
@@ -117,7 +117,7 @@ ollama:
         main:
           image:
             repository: ghcr.io/open-webui/open-webui
-            tag: v0.8.0
+            tag: 0.7.2
             pullPolicy: IfNotPresent
           env:
             - name: ENV

clusters/cl01tl/helm/outline/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.3.0
+  version: 2.2.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.5.1
+  version: 7.5.0
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.0.4
-digest: sha256:5beab8bbe25bbcafae4cb9a55494212b00f8f52053ec0ee545288a23bc6ea61c
-generated: "2026-02-07T02:32:25.090868738Z"
+digest: sha256:19b7ae1e31a51e8b7b47754eb5f9177fc5278c97904b38daffb9a0164c4300eb
+generated: "2026-02-03T20:37:51.993316167Z"

clusters/cl01tl/helm/outline/Chart.yaml

@@ -24,10 +24,10 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.3.0
+    version: 2.2.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.5.1
+    version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     version: 1.0.4

clusters/cl01tl/helm/photoview/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.5.1
-digest: sha256:00b4fff6726d8bb1c7d8cd7ad9a1717d91f9d5d8ba1785527e0a49a665c6f76a
-generated: "2026-02-07T02:32:37.367202037Z"
+  version: 7.5.0
+digest: sha256:f5f4f1fc51309a33c574d20b28c9be1d84f68d80dbbbbd7ad4342ed4b8bb2b83
+generated: "2026-01-23T00:39:40.547439678Z"

clusters/cl01tl/helm/photoview/Chart.yaml

@@ -20,7 +20,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.5.1
+    version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/photoview.png
 # renovate: datasource=github-releases depName=photoview/photoview

clusters/cl01tl/helm/plex/values.yaml

@@ -9,7 +9,7 @@ plex:
         main:
           image:
             repository: ghcr.io/linuxserver/plex
-            tag: 1.43.0@sha256:bbe0118e39e2c071fc5fe39af3f32072207bf4146d56b6a8901bcb23082df207
+            tag: 1.43.0@sha256:66c6a46ec3dc244aea20508b49dce4b46291c2fd2dba8851117e675d1c5dd52d
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/postiz/Chart.lock

@@ -4,10 +4,10 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.3.0
+  version: 2.2.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.5.1
+  version: 7.5.0
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 1.0.4
@@ -17,5 +17,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:399468e311fa4b9a52681770fcf5f0c247764b99883c847a18c166a1d40726be
-generated: "2026-02-07T02:32:49.436802609Z"
+digest: sha256:058c2f37a1f4c8d836c3cfe84ee6a8f9dbee9a06d3f8a732c9f51af9efeff3b9
+generated: "2026-02-03T20:38:08.21964113Z"

clusters/cl01tl/helm/postiz/Chart.yaml

@@ -23,10 +23,10 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.3.0
+    version: 2.2.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.5.1
+    version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     version: 1.0.4
@@ -41,4 +41,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/postiz.png
 # renovate: datasource=github-releases depName=gitroomhq/postiz-app
-appVersion: v2.17.0
+appVersion: v2.14.0

clusters/cl01tl/helm/postiz/values.yaml

@@ -9,7 +9,7 @@ postiz:
         main:
           image:
             repository: ghcr.io/gitroomhq/postiz-app
-            tag: v2.17.0
+            tag: v2.14.0
             pullPolicy: IfNotPresent
           env:
             - name: MAIN_URL

clusters/cl01tl/helm/prowlarr/values.yaml

@@ -20,7 +20,7 @@ prowlarr:
         main:
           image:
             repository: ghcr.io/linuxserver/prowlarr
-            tag: 2.3.0@sha256:e74a1e093dcc223d671d4b7061e2b4946f1989a4d3059654ff4e623b731c9134
+            tag: 2.3.0@sha256:5339e9050cfcc0cb5331e9c98610ed9d4ce70ef481a5461ea664a13dda3f1eb0
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/qbittorrent/values.yaml

@@ -28,7 +28,7 @@ qbittorrent:
         qbittorrent:
           image:
             repository: ghcr.io/linuxserver/qbittorrent
-            tag: 5.1.4@sha256:dfa75bc534ad4f36262f75b5c1d4c4f0ddd5e7ed5711ebc581c70920cce204ee
+            tag: 5.1.4@sha256:5b09709bb0eff4edb551f5b30029952ab4d67aa0d5ca3526889124173bd78a9c
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -48,7 +48,7 @@ qbittorrent:
         gluetun:
           image:
             repository: ghcr.io/qdm12/gluetun
-            tag: v3.41.1@sha256:1a5bf4b4820a879cdf8d93d7ef0d2d963af56670c9ebff8981860b6804ebc8ab
+            tag: v3.41.0@sha256:6b54856716d0de56e5bb00a77029b0adea57284cf5a466f23aad5979257d3045
             pullPolicy: IfNotPresent
           lifecycle:
             postStart:

clusters/cl01tl/helm/radarr-4k/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.5.1
+  version: 7.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:08a3191f712e52d0509c7371535e5eb77c140a6c0b85192dd9015870a973eca1
-generated: "2026-02-07T02:33:02.701341105Z"
+digest: sha256:3d2c1d105581280c86836b53c6ae63ea62eaedec30015696530e8cae1f40ab0d
+generated: "2026-01-23T00:40:09.301214236Z"

clusters/cl01tl/helm/radarr-4k/Chart.yaml

@@ -27,7 +27,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.5.1
+    version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/radarr-4k/values.yaml

@@ -15,7 +15,7 @@ radarr-4k:
         main:
           image:
             repository: ghcr.io/linuxserver/radarr
-            tag: 6.0.4@sha256:f08dda38e7d12e5a722d9a5cb6e54acaf63c8598fefeefec88effe0c0d0038dd
+            tag: 6.0.4@sha256:ba2693dd704b84eb0b404d40b3902bd3e62a1768dc5ee0d89b1f1d7cd51a66eb
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/radarr-anime/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.5.1
+  version: 7.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:5625dc905a3c7cc850c56cb71ea7bc07bcbb545a73aca1f96c968e7af7831507
-generated: "2026-02-07T02:33:15.765583035Z"
+digest: sha256:c1467d126586c305e521a8a09fa736f9d5e95d6fc56af174b2bc68a471d6ebf8
+generated: "2026-01-23T00:40:21.967614925Z"

clusters/cl01tl/helm/radarr-anime/Chart.yaml

@@ -27,7 +27,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.5.1
+    version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/radarr-anime/values.yaml

@@ -13,7 +13,7 @@ radarr-anime:
         main:
           image:
             repository: ghcr.io/linuxserver/radarr
-            tag: 6.0.4@sha256:f08dda38e7d12e5a722d9a5cb6e54acaf63c8598fefeefec88effe0c0d0038dd
+            tag: 6.0.4@sha256:ba2693dd704b84eb0b404d40b3902bd3e62a1768dc5ee0d89b1f1d7cd51a66eb
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/radarr-standup/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.5.1
+  version: 7.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:05835a68b6634425649a47b2fa8a5c786579b2d5783fab461d36b986b36a684a
-generated: "2026-02-07T02:33:28.091999824Z"
+digest: sha256:df19907ff395f03290f62f313be5bce6fa63b7152b045b2a0558763dbb53ae23
+generated: "2026-01-23T00:40:35.625888477Z"

clusters/cl01tl/helm/radarr-standup/Chart.yaml

@@ -26,7 +26,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.5.1
+    version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/radarr-standup/values.yaml

@@ -13,7 +13,7 @@ radarr-standup:
         main:
           image:
             repository: ghcr.io/linuxserver/radarr
-            tag: 6.0.4@sha256:f08dda38e7d12e5a722d9a5cb6e54acaf63c8598fefeefec88effe0c0d0038dd
+            tag: 6.0.4@sha256:ba2693dd704b84eb0b404d40b3902bd3e62a1768dc5ee0d89b1f1d7cd51a66eb
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/radarr/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.5.1
+  version: 7.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:496790708a46e5e0f576c8bfc736906f22c147a64091cc37800055143895e72c
-generated: "2026-02-07T02:33:39.645024251Z"
+digest: sha256:1a2117cb5a0b9f549c87ac44546b208920a52ef1c30b5e951fbd05d923bccbc2
+generated: "2026-01-23T00:40:51.409529181Z"

clusters/cl01tl/helm/radarr/Chart.yaml

@@ -26,7 +26,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.5.1
+    version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/radarr/values.yaml

@@ -15,7 +15,7 @@ radarr:
         main:
           image:
             repository: ghcr.io/linuxserver/radarr
-            tag: 6.0.4@sha256:f08dda38e7d12e5a722d9a5cb6e54acaf63c8598fefeefec88effe0c0d0038dd
+            tag: 6.0.4@sha256:ba2693dd704b84eb0b404d40b3902bd3e62a1768dc5ee0d89b1f1d7cd51a66eb
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/rook-ceph/Chart.lock

@@ -7,6 +7,6 @@ dependencies:
   version: v1.19.1
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.3.0
-digest: sha256:99e0dea26a3c15cea01fb21fd0db36d3bef27de332858e5126f1b36310c2901e
-generated: "2026-02-07T00:39:02.693159674Z"
+  version: 2.2.2
+digest: sha256:fbb82644c29122639312301d76b2f2300f2a86eeb17159e9f368b2d46e4e6a7c
+generated: "2026-02-06T03:39:57.898917443Z"

clusters/cl01tl/helm/rook-ceph/Chart.yaml

@@ -24,7 +24,7 @@ dependencies:
   - name: cloudflared
     alias: cloudflared-rgw
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.3.0
+    version: 2.2.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ceph.png
 # renovate: datasource=github-releases depName=rook/rook
 appVersion: v1.19.1

clusters/cl01tl/helm/roundcube/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.5.1
+  version: 7.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:67a0d8c3f3180dd5686ecc045cd86c97e74f3a38879ed3b893828c68fa2bfac6
-generated: "2026-02-07T02:33:50.475604441Z"
+digest: sha256:14ceef4763245d49898d6e6f25708df9462932c3e5c082802172586958e3ad8d
+generated: "2026-01-23T00:41:05.403815298Z"

clusters/cl01tl/helm/roundcube/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.5.1
+    version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data
@@ -29,4 +29,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/roundcube.png
 # renovate: datasource=github-releases depName=roundcube/roundcubemail
-appVersion: 1.6.13
+appVersion: 1.6.12

clusters/cl01tl/helm/roundcube/values.yaml

@@ -9,7 +9,7 @@ roundcube:
         main:
           image:
             repository: roundcube/roundcubemail
-            tag: 1.6.13-fpm-alpine
+            tag: 1.6.12-fpm-alpine
             pullPolicy: IfNotPresent
           env:
             - name: ROUNDCUBEMAIL_DB_TYPE
@@ -85,7 +85,7 @@ roundcube:
         backup:
           image:
             repository: roundcube/roundcubemail
-            tag: 1.6.13-fpm-alpine
+            tag: 1.6.12-fpm-alpine
             pullPolicy: IfNotPresent
           env:
             - name: ROUNDCUBEMAIL_DB_TYPE

clusters/cl01tl/helm/rybbit/Chart.lock

@@ -1,15 +0,0 @@
-dependencies:
-- name: app-template
-  repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 4.6.2
-- name: cloudflared
-  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.3.0
-- name: postgres-cluster
-  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.6.0
-- name: volsync-target
-  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.7.0
-digest: sha256:57e8ad153b6ef3f02c647b5996307869c0ba620b726ae8eafdf13680d7ad4a48
-generated: "2026-02-13T12:46:23.518948-06:00"

clusters/cl01tl/helm/rybbit/Chart.yaml

@@ -1,34 +0,0 @@
-apiVersion: v2
-name: rybbit
-version: 1.0.0
-description: Rybbit
-keywords:
-  - rybbit
-  - analytics
-home: https://wiki.alexlebens.dev/s/
-sources:
-  - https://github.com/rybbit-io/rybbit
-  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
-  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/cloudflared
-  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/postgres-cluster
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: app-template
-    alias: rybbit
-    repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 4.6.2
-  - name: cloudflared
-    repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.3.0
-  - name: postgres-cluster
-    alias: postgres-18-cluster
-    version: 7.6.0
-    repository: oci://harbor.alexlebens.net/helm-charts
-  - name: volsync-target
-    alias: volsync-target-config
-    version: 0.7.0
-    repository: oci://harbor.alexlebens.net/helm-charts
-icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/rybbit.webp
-# renovate: datasource=github-releases depName=rybbit-io/rybbit
-appVersion: v2.4.0

clusters/cl01tl/helm/rybbit/templates/external-secret.yaml

@@ -1,42 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: rybbit-config-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: rybbit-config-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: clickhouse-user
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/rybbit/clickhouse
-        metadataPolicy: None
-        property: user
-    - secretKey: clickhouse-password
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/rybbit/clickhouse
-        metadataPolicy: None
-        property: password
-    - secretKey: better-auth-secret
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/rybbit/auth
-        metadataPolicy: None
-        property: better-auth-secret
-    - secretKey: mapbox-token
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/rybbit/auth
-        metadataPolicy: None
-        property: mapbox-token

clusters/cl01tl/helm/rybbit/values.yaml

@@ -1,318 +0,0 @@
-rybbit:
-  controllers:
-    backend:
-      type: deployment
-      replicas: 1
-      strategy: Recreate
-      revisionHistoryLimit: 3
-      containers:
-        main:
-          image:
-            repository: ghcr.io/rybbit-io/rybbit-backend
-            tag: v2.4.0
-            pullPolicy: IfNotPresent
-          env:
-            - name: NODE_ENV
-              value: production
-            - name: CLICKHOUSE_HOST
-              value: http://rybbit-clickhouse.rybbit:8123
-            - name: CLICKHOUSE_DB
-              value: analytics
-            - name: CLICKHOUSE_USER
-              valueFrom:
-                secretKeyRef:
-                  name: rybbit-config-secret
-                  key: clickhouse-user
-            - name: CLICKHOUSE_PASSWORD
-              valueFrom:
-                secretKeyRef:
-                  name: rybbit-config-secret
-                  key: clickhouse-password
-            - name: POSTGRES_HOST
-              valueFrom:
-                secretKeyRef:
-                  name: rybbit-postgresql-18-cluster-app
-                  key: host
-            - name: POSTGRES_PORT
-              valueFrom:
-                secretKeyRef:
-                  name: rybbit-postgresql-18-cluster-app
-                  key: port
-            - name: POSTGRES_DB
-              valueFrom:
-                secretKeyRef:
-                  name: rybbit-postgresql-18-cluster-app
-                  key: dbname
-            - name: POSTGRES_USER
-              valueFrom:
-                secretKeyRef:
-                  name: rybbit-postgresql-18-cluster-app
-                  key: user
-            - name: POSTGRES_PASSWORD
-              valueFrom:
-                secretKeyRef:
-                  name: rybbit-postgresql-18-cluster-app
-                  key: password
-            - name: BETTER_AUTH_SECRET
-              valueFrom:
-                secretKeyRef:
-                  name: rybbit-config-secret
-                  key: better-auth-secret
-            - name: BASE_URL
-              value: https://rybbit.alexlebens.dev
-            - name: DISABLE_SIGNUP
-              value: false
-            - name: DISABLE_TELEMETRY
-              value: true
-            - name: MAPBOX_TOKEN
-              valueFrom:
-                secretKeyRef:
-                  name: rybbit-config-secret
-                  key: mapbox-token
-          probes:
-            liveness:
-              enabled: true
-              custom: true
-              spec:
-                exec:
-                  command:
-                  - CMD
-                  - wget
-                  - --no-verbose
-                  - --tries=1
-                  - --spider
-                  - http://127.0.0.1:3001/api/health
-                failureThreshold: 5
-                initialDelaySeconds: 10
-                periodSeconds: 30
-                successThreshold: 1
-                timeoutSeconds: 5
-          resources:
-            requests:
-              cpu: 10m
-              memory: 256Mi
-    client:
-      type: deployment
-      replicas: 1
-      strategy: Recreate
-      revisionHistoryLimit: 3
-      containers:
-        main:
-          image:
-            repository: ghcr.io/rybbit-io/rybbit-client
-            tag: v2.4.0
-            pullPolicy: IfNotPresent
-          env:
-            - name: NODE_ENV
-              value: production
-            - name: USE_WEBSERVER
-              value: false
-            - name: HOST_BACKEND_PORT
-              value: 3001
-            - name: HOST_CLIENT_PORT
-              value: 3002
-            - name: NEXT_PUBLIC_BACKEND_URL
-              value: http://rybbit-backend.rybbit:3001
-            - name: NEXT_PUBLIC_DISABLE_SIGNUP
-              value: false
-          resources:
-            requests:
-              cpu: 10m
-              memory: 256Mi
-    clickhouse:
-      type: deployment
-      replicas: 1
-      strategy: Recreate
-      revisionHistoryLimit: 3
-      containers:
-        main:
-          image:
-            repository: clickhouse/clickhouse-server
-            tag: 26.1.2
-            pullPolicy: IfNotPresent
-          env:
-            - name: CLICKHOUSE_DB
-              value: analytics
-            - name: CLICKHOUSE_USER
-              valueFrom:
-                secretKeyRef:
-                  name: rybbit-config-secret
-                  key: clickhouse-user
-            - name: CLICKHOUSE_PASSWORD
-              valueFrom:
-                secretKeyRef:
-                  name: rybbit-config-secret
-                  key: clickhouse-password
-          probes:
-            liveness:
-              enabled: true
-              custom: true
-              spec:
-                exec:
-                  command:
-                  - CMD
-                  - wget
-                  - --no-verbose
-                  - --tries=1
-                  - --spider
-                  - http://localhost:8123/ping
-                failureThreshold: 5
-                initialDelaySeconds: 10
-                periodSeconds: 30
-                successThreshold: 1
-                timeoutSeconds: 5
-          resources:
-            requests:
-              cpu: 10m
-              memory: 256Mi
-  configMaps:
-    config:
-      enabled: true
-      forceRename: clickhouse-config
-      data:
-        network.xml: |
-          <clickhouse>
-              <listen_host>0.0.0.0</listen_host>
-          </clickhouse>
-        enable_json.xml: |
-          <clickhouse>
-              <settings>
-                  <enable_json_type>1</enable_json_type>
-              </settings>
-          </clickhouse>
-        logging_rules.xml: |
-          <clickhouse>
-            <logger>
-                <level>warning</level>
-                <console>true</console>
-            </logger>
-            <query_thread_log remove="remove"/>
-            <query_log remove="remove"/>
-            <text_log remove="remove"/>
-            <trace_log remove="remove"/>
-            <metric_log remove="remove"/>
-            <asynchronous_metric_log remove="remove"/>
-            <session_log remove="remove"/>
-            <part_log remove="remove"/>
-            <latency_log remove="remove"/>
-            <processors_profile_log remove="remove"/>
-          </clickhouse>
-        user_logging.xml: |
-          <clickhouse>
-            <profiles>
-              <default>
-                <log_queries>0</log_queries>
-                <log_query_threads>0</log_query_threads>
-                <log_processors_profiles>0</log_processors_profiles>
-              </default>
-            </profiles>
-          </clickhouse>
-  service:
-    backend:
-      controller: backend
-      ports:
-        http:
-          port: 3001
-          targetPort: 3001
-          protocol: HTTP
-    client:
-      controller: client
-      ports:
-        http:
-          port: 80
-          targetPort: 3002
-          protocol: TCP
-    clickhouse:
-      controller: clickhouse
-      ports:
-        http:
-          port: 8123
-          targetPort: 8123
-          protocol: TCP
-  persistence:
-    clickhouse:
-      forceRename: clickhouse-data
-      storageClass: ceph-block
-      accessMode: ReadWriteOnce
-      size: 10Gi
-      retain: true
-      advancedMounts:
-        clickhouse:
-          main:
-            - path: /var/lib/clickhouse
-              readOnly: false
-    clickhouse-config:
-      enabled: true
-      type: configMap
-      name: clickhouse-config
-      advancedMounts:
-        clickhouse:
-          main:
-            - path: /etc/clickhouse-server/config.d/network.xml
-              readOnly: true
-              mountPropagation: None
-              subPath: network.xml
-            - path: /etc/clickhouse-server/config.d/enable_json.xml
-              readOnly: true
-              mountPropagation: None
-              subPath: enable_json.xml
-            - path: /etc/clickhouse-server/config.d/logging_rules.xml
-              readOnly: true
-              mountPropagation: None
-              subPath: logging_rules.xml
-            - path: /etc/clickhouse-server/config.d/user_logging.xml
-              readOnly: true
-              mountPropagation: None
-              subPath: user_logging.xml
-postgres-18-cluster:
-  mode: standalone
-  recovery:
-    method: objectStore
-    objectStore:
-      index: 1
-  backup:
-    objectStore:
-      - name: garage-local
-        index: 1
-        destinationBucket: postgres-backups
-        externalSecretCredentialPath: /garage/home-infra/postgres-backups
-        isWALArchiver: true
-      # - name: garage-remote
-      #   index: 1
-      #   destinationBucket: postgres-backups
-      #   externalSecretCredentialPath: /garage/home-infra/postgres-backups
-      #   retentionPolicy: "90d"
-      #   data:
-      #     compression: bzip2
-      # - name: external
-      #   index: 1
-      #   endpointURL: https://nyc3.digitaloceanspaces.com
-      #   destinationBucket: postgres-backups-ce540ddf106d186bbddca68a
-      #   externalSecretCredentialPath: /garage/home-infra/postgres-backups
-      #   isWALArchiver: false
-    scheduledBackups:
-      - name: live-backup
-        suspend: true
-        immediate: true
-        schedule: "0 0 0 * * *"
-        backupName: garage-local
-      # - name: weekly-backup
-      #   suspend: true
-      #   immediate: true
-      #   schedule: "0 0 4 * * SAT"
-      #   backupName: garage-remote
-      # - name: daily-backup
-      #   suspend: true
-      #   immediate: true
-      #   schedule: "0 0 0 * * *"
-      #   backupName: external
-volsync-target-clickhouse-data:
-  pvcTarget: clickhouse-data
-  local:
-    enabled: false
-    schedule: 38 11 * * *
-  remote:
-    enabled: false
-  external:
-    enabled: false
-    schedule: 38 12 * * *