feat: merge

.gitea/workflows/renovate.yaml

@@ -13,7 +13,7 @@ on:
 jobs:
   renovate:
     runs-on: ubuntu-latest
-    container: ghcr.io/renovatebot/renovate:43.104.4@sha256:54369958207b06c85398d8c4dffc70997c89f07546fa0a4703b3774f48f48dab
+    container: ghcr.io/renovatebot/renovate:43.104.3@sha256:8248aad190150ce3f1016f9e93b45185679f075c428bca093e724a59f1fd426e
     steps:
       - name: Checkout
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6

clusters/cl01tl/helm/actual/Chart.yaml

@@ -24,4 +24,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/actual-budget.png
 # renovate: datasource=github-releases depName=actualbudget/actual
-appVersion: 26.4.0
+appVersion: 26.3.0

clusters/cl01tl/helm/actual/values.yaml

@@ -8,7 +8,7 @@ actual:
         main:
           image:
             repository: ghcr.io/actualbudget/actual
-            tag: 26.4.0@sha256:b0e732e2c41b3dc468a71548e88ef76d3f0c157fc43d15fa05d14ec1c5747e1e
+            tag: 26.3.0@sha256:eb8bc26f53025e07e464594c12d77c52c4b95840c8dadd9b95c4f0c4660f8ad2
           env:
             - name: ACTUAL_PORT
               value: 5006

clusters/cl01tl/helm/authentik/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 2.4.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.2
+  version: 7.11.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.5.0
-digest: sha256:7302a85008aee7950aa345aa7d64563c1b0da8f07e348ec9709f9438503a41ff
-generated: "2026-04-04T21:00:59.689114-05:00"
+digest: sha256:4b90c5af4cc7f37b04284aafd75ddda1241c71acb726932e7e21520b5bf98543
+generated: "2026-03-31T18:36:26.87524-05:00"

clusters/cl01tl/helm/authentik/Chart.yaml

@@ -25,7 +25,7 @@ dependencies:
     version: 2.4.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.2
+    version: 7.11.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey

clusters/cl01tl/helm/blocky/values.yaml

@@ -109,7 +109,6 @@ blocky:
               bazarr                          IN      CNAME   traefik-cl01tl
               ceph                            IN      CNAME   traefik-cl01tl
               dawarich                        IN      CNAME   traefik-cl01tl
-              dependency-track                IN      CNAME   traefik-cl01tl
               directus                        IN      CNAME   traefik-cl01tl
               excalidraw                      IN      CNAME   traefik-cl01tl
               feishin                         IN      CNAME   traefik-cl01tl
@@ -143,6 +142,7 @@ blocky:
               ollama                          IN      CNAME   traefik-cl01tl
               omni-tools                      IN      CNAME   traefik-cl01tl
               paperless-ngx                   IN      CNAME   traefik-cl01tl
+              photoview                       IN      CNAME   traefik-cl01tl
               plex                            IN      CNAME   traefik-cl01tl
               postiz                          IN      CNAME   traefik-cl01tl
               prometheus                      IN      CNAME   traefik-cl01tl

clusters/cl01tl/helm/dawarich/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.2
+  version: 7.11.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.5.0
-digest: sha256:b070640b7006e3ad528193ca784cfbca602994c87afbef4ef4b40a05229cab10
-generated: "2026-04-04T21:01:27.376484-05:00"
+digest: sha256:1f513bd53430dd0fbba301ab5577aca85e984394dfdca9f615aae944a09c6bc0
+generated: "2026-03-31T18:37:35.858603-05:00"

clusters/cl01tl/helm/dawarich/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.2
+    version: 7.11.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey

clusters/cl01tl/helm/dependency-track/Chart.lock

@@ -1,9 +0,0 @@
-dependencies:
-- name: dependency-track
-  repository: https://dependencytrack.github.io/helm-charts
-  version: 0.44.0
-- name: postgres-cluster
-  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.2
-digest: sha256:6ea7e8066cce675a02ce76393ee2b0e23300d2f5c72ae64946ae667fc12fde1f
-generated: "2026-04-05T17:32:11.221935-05:00"

clusters/cl01tl/helm/dependency-track/Chart.yaml

@@ -1,26 +0,0 @@
-apiVersion: v2
-name: dependency-track
-version: 1.0.0
-description: Dependency Track
-keywords:
-  - dependency-track
-  - vulnerability-scanner
-home: https://docs.alexlebens.dev/applications/dependency-track/
-sources:
-  - https://github.com/DependencyTrack/dependency-track
-  - https://hub.docker.com/r/dependencytrack/apiserver
-  - https://hub.docker.com/r/dependencytrack/frontend
-  - https://github.com/DependencyTrack/helm-charts/tree/main/charts/dependency-track
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: dependency-track
-    version: 0.44.0
-    repository: https://dependencytrack.github.io/helm-charts
-  - name: postgres-cluster
-    alias: postgres-18-cluster
-    version: 7.11.2
-    repository: oci://harbor.alexlebens.net/helm-charts
-icon: https://avatars.githubusercontent.com/u/40258585
-# renovate: datasource=github-releases depName=DependencyTrack/dependency-track
-appVersion: 4.14.1

clusters/cl01tl/helm/dependency-track/templates/external-secret.yaml

@@ -1,42 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: dependency-track-key-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: dependency-track-key-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: secret.key
-      remoteRef:
-        key: /cl01tl/dependency-track/key
-        property: key
-
----
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: dependency-track-oidc-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: dependency-track-oidc-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: client
-      remoteRef:
-        key: /authentik/oidc/dependency-track
-        property: client
-    - secretKey: secret
-      remoteRef:
-        key: /authentik/oidc/dependency-track
-        property: secret

clusters/cl01tl/helm/dependency-track/values.yaml

@@ -1,112 +0,0 @@
-dependency-track:
-  common:
-    secretKey:
-      createSecret: false
-      existingSecretName: dependency-track-key-secret
-  apiServer:
-    image:
-      repository: dependencytrack/apiserver
-      tag: 4.14.1@sha256:2d8813e1ba4ada4aa23087d908c1b5a3ffce39261ead5555c397a1d67c7cbe9d
-    resources:
-      requests:
-        cpu: 100m
-        memory: 100Mi
-      limits:
-        memory: null
-    persistentVolume:
-      enabled: true
-      className: ceph-block
-      size: 5Gi
-    extraEnv:
-      - name: ALPINE_DATABASE_MODE
-        value: external
-      - name: ALPINE_DATABASE_DRIVER
-        value: org.postgresql.Driver
-      - name: ALPINE_DATABASE_URL
-        valueFrom:
-          secretKeyRef:
-            name: dependency-track-postgresql-18-cluster-app
-            key: jdbc-uri
-      - name: ALPINE_DATABASE_USERNAME
-        valueFrom:
-          secretKeyRef:
-            name: dependency-track-postgresql-18-cluster-app
-            key: user
-      - name: ALPINE_DATABASE_PASSWORD
-        valueFrom:
-          secretKeyRef:
-            name: dependency-track-postgresql-18-cluster-app
-            key: password
-      - name: ALPINE_OIDC_ENABLED
-        value: "true"
-      - name: ALPINE_OIDC_CLIENT_ID
-        valueFrom:
-          secretKeyRef:
-            name: dependency-track-oidc-secret
-            key: client
-      - name: ALPINE_OIDC_ISSUER
-        value: https://authentik.alexlebens.net/application/o/dependency-track/
-      - name: ALPINE_OIDC_USERNAME_CLAIM
-        value: preferred_username
-      - name: ALPINE_OIDC_TEAMS_CLAIM
-        value: groups
-      - name: ALPINE_OIDC_USER_PROVISIONING
-        value: "true"
-      - name: ALPINE_OIDC_TEAM_SYNCHRONIZATION
-        value: "true"
-      - name: ALPINE_CORS_ENABLED
-        value: "true"
-      - name: ALPINE_CORS_ALLOW_ORIGIN
-        value: dependency-track.alexlebens.net dependency-track.dependency-track
-    serviceMonitor:
-      enabled: true
-      namespace: dependency-track
-  frontend:
-    image:
-      repository: dependencytrack/frontend
-      tag: 4.14.1@sha256:8217737050b26ea69a6ddd6fe2cb419531a0bae0b903a87a04077a2415fc9f35
-    resources:
-      requests:
-        cpu: 10m
-        memory: 60Mi
-      limits:
-        memory: null
-    extraEnv:
-      - name: OIDC_ISSUER
-        value: https://authentik.alexlebens.net/application/o/dependency-track/
-      - name: OIDC_CLIENT_ID
-        valueFrom:
-          secretKeyRef:
-            name: dependency-track-oidc-secret
-            key: client
-      - name: OIDC_LOGIN_BUTTON_TEXT
-        value: Authentik
-    apiBaseUrl: dependency-track.alexlebens.net
-  httpRoute:
-    enabled: true
-    hostnames:
-      - dependency-track.alexlebens.net
-    parentRefs:
-      - group: gateway.networking.k8s.io
-        kind: Gateway
-        name: traefik-gateway
-        namespace: traefik
-postgres-18-cluster:
-  mode: standalone
-  recovery:
-    method: objectStore
-    objectStore:
-      index: 1
-  backup:
-    objectStore:
-      - name: garage-local
-        index: 1
-        destinationBucket: postgres-backups
-        externalSecretCredentialPath: /garage/home-infra/postgres-backups
-        isWALArchiver: true
-    scheduledBackups:
-      - name: live-backup
-        suspend: false
-        immediate: true
-        schedule: "0 10 14 * * *"
-        backupName: garage-local

clusters/cl01tl/helm/directus/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.2
+  version: 7.11.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.5.0
-digest: sha256:5fa84b2d82a160c35e002690e4d299275b8136463da9da789be9ca7c6ff998c4
-generated: "2026-04-04T21:01:37.322862-05:00"
+digest: sha256:116183cdff428293215553b7e60be9aefafbbaaaf64c01f1fc974badd3e0754b
+generated: "2026-03-31T18:37:42.414041-05:00"

clusters/cl01tl/helm/directus/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.2
+    version: 7.11.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey

clusters/cl01tl/helm/foldergram/values.yaml

@@ -17,7 +17,7 @@ foldergram:
             - name: IMAGE_DETAIL_SOURCE
               value: original
             - name: DERIVATIVE_MODE
-              value: eager
+              value: lazy
             - name: DATA_ROOT
               value: ./data
             - name: GALLERY_ROOT

clusters/cl01tl/helm/freshrss/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 2.4.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.2
+  version: 7.11.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:f709ef2ce041d934faf75dfa31cc86e536aa62ab31ab82584c9751652561744c
-generated: "2026-04-04T21:02:01.689182-05:00"
+digest: sha256:ebf08159809ef0d69fcb8742b47245c82994b528c2f58e5ed40293555e085ecd
+generated: "2026-03-31T18:37:59.187695-05:00"

clusters/cl01tl/helm/freshrss/Chart.yaml

@@ -25,7 +25,7 @@ dependencies:
     version: 2.4.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.2
+    version: 7.11.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data

clusters/cl01tl/helm/gatus/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 1.5.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.2
+  version: 7.11.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:b2a7ef962a91dff4313f66c1d04356f1b2aeefc752d672a9a27ea227db4b8c7d
-generated: "2026-04-04T21:02:09.187828-05:00"
+digest: sha256:1f530794c6d9c4a487d30443dce7ddf556524c7f875c6e5249b135e81528f0c5
+generated: "2026-03-31T19:06:30.871275-05:00"

clusters/cl01tl/helm/gatus/Chart.yaml

@@ -20,7 +20,7 @@ dependencies:
     version: 1.5.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.2
+    version: 7.11.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data

clusters/cl01tl/helm/gatus/values.yaml

@@ -131,6 +131,9 @@ gatus:
       - name: immich
         url: https://immich.alexlebens.net
         <<: *defaults
+      - name: photoview
+        url: https://photoview.alexlebens.net
+        <<: *defaults
       - name: foldergram
         url: https://foldergram.alexlebens.net
         <<: *defaults
@@ -179,9 +182,6 @@ gatus:
       - name: komodo
         url: https://komodo.alexlebens.net
         <<: *defaults
-      - name: dependency-track
-        url: https://dependency-track.alexlebens.net
-        <<: *defaults
       - name: omni-tools
         url: https://omni-tools.alexlebens.net
         <<: *defaults
@@ -353,7 +353,7 @@ gatus:
         <<: *defaults
         group: external
       - name: outline
-        url: https://outline.alexlebens.dev
+        url: https://wiki.alexlebens.dev
         <<: *defaults
         group: external
       - name: vaultwarden

clusters/cl01tl/helm/generic-device-plugin/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: generic-device-plugin
   repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-  version: 0.20.28
-digest: sha256:16e4470b394110a11721fe38a57ad1cfa7c994bca440bfbbc5b3b7a46a79f165
-generated: "2026-04-05T02:12:22.980217268Z"
+  version: 0.20.27
+digest: sha256:b66a7ab013f5eda47ccf94824796e026642e1abfc051e498957ee0f59743e9fc
+generated: "2026-03-31T21:37:08.823163353Z"

clusters/cl01tl/helm/generic-device-plugin/Chart.yaml

@@ -14,6 +14,6 @@ maintainers:
 dependencies:
   - name: generic-device-plugin
     repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-    version: 0.20.28
+    version: 0.20.27
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 appVersion: 1.0.0

clusters/cl01tl/helm/gitea/Chart.lock

@@ -13,7 +13,7 @@ dependencies:
   version: 2.4.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.2
+  version: 7.10.0
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.5.0
@@ -23,5 +23,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:4dc7ea441a81261a431f917521e528819ab708f6ddb4b3a77412464aecec3598
-generated: "2026-04-04T21:14:18.193631-05:00"
+digest: sha256:a31820970bf7a7e5fa51ff09668238ab5e3b9d4433a71e35d07b779ff632b94c
+generated: "2026-04-01T21:57:18.743604859Z"

clusters/cl01tl/helm/gitea/Chart.yaml

@@ -39,7 +39,7 @@ dependencies:
     version: 2.4.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.2
+    version: 7.10.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey-gitea

clusters/cl01tl/helm/gitea/values.yaml

@@ -245,6 +245,7 @@ postgres-18-cluster:
     resources:
       requests:
         cpu: 100m
+        memory: 150Mi
   recovery:
     method: objectStore
     objectStore:

clusters/cl01tl/helm/grafana-operator/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 5.22.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.2
+  version: 7.11.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.5.0
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.5.0
-digest: sha256:6c096d1ce729469f12e66b2d0d0c677990d06643ff49401ee8fa69f5ed738e9c
-generated: "2026-04-04T21:02:18.686653-05:00"
+digest: sha256:1f6bf4f0f24f85d8c362766010e4f42d26458c0412b67afab9b05f2e17eacced
+generated: "2026-03-31T19:12:08.326471-05:00"

clusters/cl01tl/helm/grafana-operator/Chart.yaml

@@ -20,7 +20,7 @@ dependencies:
     repository: https://grafana.github.io/helm-charts
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.2
+    version: 7.11.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey-unified-alerting

clusters/cl01tl/helm/grafana-operator/templates/grafana-dashboard.yaml

@@ -396,44 +396,6 @@ spec:
   resyncPeriod: 6h
   url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/service/unpoller.json
 
----
-apiVersion: grafana.integreatly.org/v1beta1
-kind: GrafanaDashboard
-metadata:
-  name: grafana-dashboard-version-checker-internal
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: grafana-dashboard-version-checker-internal
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  instanceSelector:
-    matchLabels:
-      app: grafana-main
-  contentCacheDuration: 6h
-  folderUID: grafana-folder-service
-  resyncPeriod: 6h
-  url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/service/version-checker-internal.json
-
----
-apiVersion: grafana.integreatly.org/v1beta1
-kind: GrafanaDashboard
-metadata:
-  name: grafana-dashboard-version-checker
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: grafana-dashboard-version-checker
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  instanceSelector:
-    matchLabels:
-      app: grafana-main
-  contentCacheDuration: 6h
-  folderUID: grafana-folder-service
-  resyncPeriod: 6h
-  url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/service/version-checker.json
-
 ---
 apiVersion: grafana.integreatly.org/v1beta1
 kind: GrafanaDashboard

clusters/cl01tl/helm/homepage/values.yaml

@@ -175,6 +175,12 @@ homepage:
                   href: https://immich.alexlebens.net
                   siteMonitor: http://immich.immich:2283
                   statusStyle: dot
+              - Pictures:
+                  icon: sh-photoview.webp
+                  description: Photoview
+                  href: https://photoview.alexlebens.net
+                  siteMonitor: http://photoview.photoview:80
+                  statusStyle: dot
               - Pictures:
                   icon: sh-foldergram.webp
                   description: Foldergram
@@ -196,7 +202,7 @@ homepage:
                   statusStyle: dot
               - Documentation:
                   icon: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/logo-new-round.png
-                  description: Homelab Docs
+                  description: Documentation Wiki
                   href: https://docs.alexlebens.dev
                   siteMonitor: https://docs.alexlebens.dev
                   statusStyle: dot
@@ -224,11 +230,11 @@ homepage:
                   href: https://chat.alexlebens.dev
                   siteMonitor: https://chat.alexlebens.dev
                   statusStyle: dot
-              - Knowledge Base:
+              - Wiki:
                   icon: sh-outline.webp
                   description: Outline
-                  href: https://outline.alexlebens.dev
-                  siteMonitor: https://outline.alexlebens.dev
+                  href: https://wiki.alexlebens.dev
+                  siteMonitor: https://wiki.alexlebens.dev
                   statusStyle: dot
               - Passwords:
                   icon: sh-vaultwarden-light.webp
@@ -297,7 +303,7 @@ homepage:
                   href: https://paperless-ngx.alexlebens.net
                   siteMonitor: http://paperless-ngx.paperless-ngx:80
                   statusStyle: dot
-              - Wikipedia:
+              - Wiki:
                   icon: sh-kiwix-light.webp
                   description: Kiwix
                   href: https://kiwix.alexlebens.net
@@ -375,12 +381,6 @@ homepage:
                       secret: {{ "{{HOMEPAGE_VAR_KOMODO_API_SECRET}}" }}
                       showStacks: true
                       fields: ["running", "down", "unhealthy", "unknown"]
-              - Vulnerability Scanning:
-                  icon: https://raw.githubusercontent.com/DependencyTrack/branding/f77a4ad3b469ff656856ea225f26b1610b89a584/dt-logo-symbol.svg
-                  description: Dependency Track
-                  href: https://dependency-track.alexlebens.net
-                  siteMonitor: http://dependency-track.dependency-track:8080
-                  statusStyle: dot
               - Uptime:
                   icon: sh-gatus.webp
                   description: Gatus

clusters/cl01tl/helm/immich/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.2
+  version: 7.11.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:8b9129d1bbef82d6e0033610da9c25b2b98ce078027d389429cd947c8d22823e
-generated: "2026-04-04T21:02:46.154937-05:00"
+digest: sha256:b52be61811b2c4b8f1ac733be19de51e33540589b71337af99fc97727a1894e8
+generated: "2026-04-01T19:49:30.408077-05:00"

clusters/cl01tl/helm/immich/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.2
+    version: 7.11.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey

clusters/cl01tl/helm/jellyfin/Chart.yaml

@@ -30,4 +30,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/jellyfin.png
 # renovate: datasource=github-releases depName=jellyfin/jellyfin
-appVersion: 10.11.8
+appVersion: 10.11.7

clusters/cl01tl/helm/jellyfin/values.yaml

@@ -22,7 +22,7 @@ jellyfin:
         main:
           image:
             repository: ghcr.io/jellyfin/jellyfin
-            tag: 10.11.8@sha256:93227545077893cc9516f28b3adb733b67bc4691f41b6167428a2a0e3220b81c
+            tag: 10.11.7@sha256:2b93aa3830dcd0aab7185c635e20edef1f8dc5d2e999768baf1724e88c078004
           env:
             - name: TZ
               value: America/Chicago
@@ -40,7 +40,7 @@ jellyfin:
         exporter:
           image:
             repository: rebelcore/jellyfin-exporter
-            tag: v1.5.0@sha256:37e6d389654180ad9e1661210a48fee71a6dc355a160670235a00329da0dbf80
+            tag: v1.4.0@sha256:dd35d901df663141025670b4b44a62a178b331e9fa084b17016f6fba46343ce9
           args:
             - '--jellyfin.address=http://127.0.0.1:8096'
             - '--jellyfin.token=$(TOKEN)'

clusters/cl01tl/helm/jellystat/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.2
+  version: 7.11.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:4ff8555c97c457923957fac499a0c9469edac8b3dd7ab0fab46f7d4e07e8eff5
-generated: "2026-04-04T21:02:58.694365-05:00"
+digest: sha256:a5b2ddd5097971d246b0d1f519ffafb662594d9f84ddc854b8eedf8702d2035f
+generated: "2026-04-01T19:49:45.674314-05:00"

clusters/cl01tl/helm/jellystat/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.2
+    version: 7.11.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data

clusters/cl01tl/helm/komodo/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.2
+  version: 7.11.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:ed3362c98ab60b195a47d0789f2420e041e907be955cdd122f84e363a00f4c73
-generated: "2026-04-04T21:03:12.459168-05:00"
+digest: sha256:9af0fa5ab5e1895e94d64ea5983b5ee58c8b4dd9c5c8ef8021c8c7f950fd54c4
+generated: "2026-04-02T20:28:17.818342-05:00"

clusters/cl01tl/helm/komodo/Chart.yaml

@@ -23,7 +23,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgresql-17-fdb-cluster
-    version: 7.11.2
+    version: 7.11.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-keys

clusters/cl01tl/helm/lidarr/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.2
+  version: 7.11.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:eaa092df6ae81137c5a62622f9e09495a9bc886ae908202b120969948206d786
-generated: "2026-04-04T21:03:34.837519-05:00"
+digest: sha256:28d9013864be22eb7085fc88a45c0b8a555a582026c779dd72fca4a2e1728d2a
+generated: "2026-04-03T19:30:51.252965-05:00"

clusters/cl01tl/helm/lidarr/Chart.yaml

@@ -25,7 +25,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.2
+    version: 7.11.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/matrix-synapse/Chart.lock

@@ -19,7 +19,7 @@ dependencies:
   version: 2.4.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.2
+  version: 7.11.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.5.0
@@ -38,5 +38,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:0e8b1b79a98952ed49c87c6da83dcc2eed2aabbd755d9ebf1bdd3090f3ccc44c
-generated: "2026-04-04T21:03:48.737144-05:00"
+digest: sha256:70a7f9dc242a1102eafa0b8a5c481954793d3450eea907c7fb5fd86cb81b1bea
+generated: "2026-04-03T21:00:39.545529-05:00"

clusters/cl01tl/helm/matrix-synapse/Chart.yaml

@@ -50,7 +50,7 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.2
+    version: 7.11.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey-matrix-synapse

clusters/cl01tl/helm/matrix-synapse/values.yaml

@@ -463,6 +463,9 @@ volsync-target-discord:
     schedule: 40 10 * * *
 volsync-target-whatsapp:
   pvcTarget: mautrix-whatsapp
+  moverSecurityContext:
+    runAsUser: 1337
+    runAsGroup: 1337
   local:
     enabled: true
     schedule: 42 8 * * *

clusters/cl01tl/helm/music-grabber/Chart.yaml

@@ -24,4 +24,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/music-grabber.png
 # renovate: datasource=docker depName=g33kphr33k/musicgrabber
-appVersion: 2.5.6
+appVersion: 2.5.5

clusters/cl01tl/helm/music-grabber/values.yaml

@@ -12,7 +12,7 @@ music-grabber:
         main:
           image:
             repository: g33kphr33k/musicgrabber
-            tag: 2.5.6@sha256:457b149917fa0f525c83c08d2cf3a39b4e42c64513b272ecc2d41edcd4cb6c7c
+            tag: 2.5.5@sha256:756ce91653b2f5f17f8f47e5c91f07df5af82162608acdf507e6209a16725373
           env:
             - name: MUSIC_DIR
               value: /mnt/store/Music Grabber/

clusters/cl01tl/helm/navidrome/values.yaml

@@ -12,7 +12,7 @@ navidrome:
         main:
           image:
             repository: ghcr.io/navidrome/navidrome
-            tag: 0.61.1@sha256:1e1660054a856cc09f227d6929252e45a519fdb16004b464dd637f7294ca3ec1
+            tag: 0.61.0@sha256:b14a6acb5cd5ee73f3a13d63d8d68ede82dedb796aa522fbada94769d990cf0b
           env:
             - name: ND_MUSICFOLDER
               value: /music

clusters/cl01tl/helm/ntfy/values.yaml

@@ -105,6 +105,16 @@ ntfy:
             - path:
                 type: PathPrefix
                 value: /
+  persistence:
+    cache:
+      storageClass: ceph-block
+      accessMode: ReadWriteOnce
+      size: 5Gi
+      advancedMounts:
+        main:
+          main:
+            - path: /var/cache/ntfy
+              readOnly: false
 postgres-18-cluster:
   mode: recovery
   recovery:

clusters/cl01tl/helm/ollama/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.2
+  version: 7.10.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:440e79999ff635a9c687e92515866b741dc610743753f2d494f3ef523a4746a7
-generated: "2026-04-04T21:04:23.125059-05:00"
+digest: sha256:d0f47712bf5d2bab8136c43f1d5bac41860f067b53c741282a4647ce93a7cd93
+generated: "2026-03-15T20:07:27.179378683Z"

clusters/cl01tl/helm/ollama/Chart.yaml

@@ -5,15 +5,15 @@ description: Ollama
 keywords:
   - ollama
   - ai
-home: https://docs.alexlebens.dev/applications/ollama/
+home: https://wiki.alexlebens.dev/s/9f4823e0-8488-4c23-b85e-81ca0ee7ea1a
 sources:
   - https://github.com/ollama/ollama
   - https://github.com/open-webui/open-webui
+  - https://github.com/cloudnative-pg/cloudnative-pg
   - https://hub.docker.com/r/ollama/ollama
   - https://github.com/open-webui/open-webui/pkgs/container/open-webui
   - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
   - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/postgres-cluster
-  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/volsync-target
 maintainers:
   - name: alexlebens
 dependencies:
@@ -23,7 +23,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.2
+    version: 7.10.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data
@@ -31,4 +31,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ollama.png
 # renovate: datasource=github-releases depName=ollama/ollama
-appVersion: 0.20.2
+appVersion: 0.20.0

clusters/cl01tl/helm/ollama/templates/external-secret.yaml

@@ -15,7 +15,10 @@ spec:
   data:
     - secretKey: key
       remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
         key: /cl01tl/ollama/key
+        metadataPolicy: None
         property: key
 
 ---
@@ -35,9 +38,15 @@ spec:
   data:
     - secretKey: client
       remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
         key: /authentik/oidc/ollama
+        metadataPolicy: None
         property: client
     - secretKey: secret
       remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
         key: /authentik/oidc/ollama
+        metadataPolicy: None
         property: secret

clusters/cl01tl/helm/ollama/values.yaml

@@ -4,6 +4,7 @@ ollama:
       type: deployment
       replicas: 1
       strategy: Recreate
+      revisionHistoryLimit: 3
       pod:
         labels:
           ollama-type: server
@@ -21,7 +22,8 @@ ollama:
         main:
           image:
             repository: ollama/ollama
-            tag: 0.20.2@sha256:0455f166da85b1d07f694c33ba09278ca649603c0611ba8e46272b16eed7fccd
+            tag: 0.20.0
+            pullPolicy: IfNotPresent
           env:
             - name: OLLAMA_KEEP_ALIVE
               value: 24h
@@ -31,13 +33,14 @@ ollama:
             limits:
               gpu.intel.com/i915: 1
             requests:
-              cpu: 10m
-              memory: 20Mi
+              cpu: 100m
+              memory: 1Gi
               gpu.intel.com/i915: 1
     server-2:
       type: deployment
       replicas: 1
       strategy: Recreate
+      revisionHistoryLimit: 3
       pod:
         labels:
           ollama-type: server
@@ -55,7 +58,8 @@ ollama:
         main:
           image:
             repository: ollama/ollama
-            tag: 0.20.2@sha256:0455f166da85b1d07f694c33ba09278ca649603c0611ba8e46272b16eed7fccd
+            tag: 0.20.0
+            pullPolicy: IfNotPresent
           env:
             - name: OLLAMA_KEEP_ALIVE
               value: 24h
@@ -65,13 +69,14 @@ ollama:
             limits:
               gpu.intel.com/i915: 1
             requests:
-              cpu: 10m
-              memory: 20Mi
+              cpu: 100m
+              memory: 1Gi
               gpu.intel.com/i915: 1
     server-3:
       type: deployment
       replicas: 1
       strategy: Recreate
+      revisionHistoryLimit: 3
       pod:
         labels:
           ollama-type: server
@@ -89,7 +94,8 @@ ollama:
         main:
           image:
             repository: ollama/ollama
-            tag: 0.20.2@sha256:0455f166da85b1d07f694c33ba09278ca649603c0611ba8e46272b16eed7fccd
+            tag: 0.20.0
+            pullPolicy: IfNotPresent
           env:
             - name: OLLAMA_KEEP_ALIVE
               value: 24h
@@ -99,18 +105,20 @@ ollama:
             limits:
               gpu.intel.com/i915: 1
             requests:
-              cpu: 10m
-              memory: 20Mi
+              cpu: 100m
+              memory: 1Gi
               gpu.intel.com/i915: 1
     web:
       type: deployment
       replicas: 1
       strategy: Recreate
+      revisionHistoryLimit: 3
       containers:
         main:
           image:
             repository: ghcr.io/open-webui/open-webui
-            tag: v0.8.12@sha256:8113fa5510020ef05a44afc0c42d33eabeeb2524a996e3e3fb8c437c00f0d792
+            tag: v0.8.12
+            pullPolicy: IfNotPresent
           env:
             - name: ENV
               value: prod
@@ -157,7 +165,7 @@ ollama:
           resources:
             requests:
               cpu: 10m
-              memory: 650Mi
+              memory: 1Gi
   service:
     server-1:
       controller: server-1
@@ -165,24 +173,28 @@ ollama:
         http:
           port: 11434
           targetPort: 11434
+          protocol: HTTP
     server-2:
       controller: server-2
       ports:
         http:
           port: 11434
           targetPort: 11434
+          protocol: HTTP
     server-3:
       controller: server-3
       ports:
         http:
           port: 11434
           targetPort: 11434
+          protocol: HTTP
     web:
       controller: web
       ports:
         http:
           port: 80
           targetPort: 8080
+          protocol: HTTP
   route:
     main:
       kind: HTTPRoute
@@ -195,8 +207,11 @@ ollama:
         - ollama.alexlebens.net
       rules:
         - backendRefs:
-            - name: ollama-web
+            - group: ''
+              kind: Service
+              name: ollama-web
               port: 80
+              weight: 100
           matches:
             - path:
                 type: PathPrefix
@@ -206,6 +221,7 @@ ollama:
       storageClass: ceph-block
       accessMode: ReadWriteOnce
       size: 40Gi
+      retain: true
       advancedMounts:
         server-1:
           main:
@@ -215,6 +231,7 @@ ollama:
       storageClass: ceph-block
       accessMode: ReadWriteOnce
       size: 40Gi
+      retain: true
       advancedMounts:
         server-2:
           main:
@@ -224,6 +241,7 @@ ollama:
       storageClass: ceph-block
       accessMode: ReadWriteOnce
       size: 40Gi
+      retain: true
       advancedMounts:
         server-3:
           main:
@@ -234,6 +252,7 @@ ollama:
       storageClass: ceph-block
       accessMode: ReadWriteOnce
       size: 5Gi
+      retain: true
       advancedMounts:
         web:
           main:
@@ -253,12 +272,35 @@ postgres-18-cluster:
         destinationBucket: postgres-backups
         externalSecretCredentialPath: /garage/home-infra/postgres-backups
         isWALArchiver: true
+      # - name: garage-remote
+      #   index: 1
+      #   destinationBucket: postgres-backups
+      #   externalSecretCredentialPath: /garage/home-infra/postgres-backups
+      #   retentionPolicy: "90d"
+      #   data:
+      #     compression: bzip2
+      # - name: external
+      #   index: 1
+      #   endpointURL: https://nyc3.digitaloceanspaces.com
+      #   destinationBucket: postgres-backups-ce540ddf106d186bbddca68a
+      #   externalSecretCredentialPath: /garage/home-infra/postgres-backups
+      #   isWALArchiver: false
     scheduledBackups:
       - name: live-backup
         suspend: false
         immediate: true
         schedule: "0 5 15 * * *"
         backupName: garage-local
+      # - name: weekly-backup
+      #   suspend: true
+      #   immediate: true
+      #   schedule: "0 0 4 * * SAT"
+      #   backupName: garage-remote
+      # - name: daily-backup
+      #   suspend: true
+      #   immediate: true
+      #   schedule: "0 0 0 * * *"
+      #   backupName: external
 volsync-target-data:
   pvcTarget: ollama-web-data
   moverSecurityContext:

clusters/cl01tl/helm/omni-tools/Chart.yaml

@@ -4,7 +4,7 @@ version: 1.0.0
 description: OmniTools
 keywords:
   - omni-tools
-home: https://docs.alexlebens.dev/applications/omni-tools/
+home: https://wiki.alexlebens.dev/s/8820cd36-dcf6-4ddf-8b2f-584271628a54
 sources:
   - https://github.com/iib0011/omni-tools
   - https://hub.docker.com/r/iib0011/omni-tools

clusters/cl01tl/helm/omni-tools/values.yaml

@@ -4,15 +4,17 @@ omni-tools:
       type: deployment
       replicas: 1
       strategy: Recreate
+      revisionHistoryLimit: 3
       containers:
         main:
           image:
             repository: iib0011/omni-tools
-            tag: 0.6.0@sha256:ceb5acc317daf387634f7f212cefe4722fd1243ad1cba74203f25254195b6c69
+            tag: 0.6.0
+            pullPolicy: IfNotPresent
           resources:
             requests:
-              cpu: 10m
-              memory: 10Mi
+              cpu: 50m
+              memory: 512Mi
   service:
     main:
       controller: main
@@ -20,6 +22,7 @@ omni-tools:
         http:
           port: 80
           targetPort: 80
+          protocol: HTTP
   route:
     main:
       kind: HTTPRoute
@@ -32,8 +35,11 @@ omni-tools:
         - omni-tools.alexlebens.net
       rules:
         - backendRefs:
-            - name: omni-tools
+            - group: ''
+              kind: Service
+              name: omni-tools
               port: 80
+              weight: 100
           matches:
             - path:
                 type: PathPrefix

clusters/cl01tl/helm/outline/Chart.lock

@@ -7,12 +7,12 @@ dependencies:
   version: 2.4.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.2
+  version: 7.10.0
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.5.0
+  version: 0.4.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:9e8ec16e175ae5aa778a7bd2e785d56dea98d025b7a818fe76d9959680f117b1
-generated: "2026-04-04T20:56:43.600438-05:00"
+digest: sha256:02780454fad48c10e95851e73e45e8a98091596d9dce8ada9e361e7212e581df
+generated: "2026-03-15T20:07:38.818063491Z"

clusters/cl01tl/helm/outline/Chart.yaml

@@ -4,16 +4,17 @@ version: 1.0.0
 description: Outline
 keywords:
   - outline
-  - knowledge-base
-home: https://docs.alexlebens.dev/applications/outline/
+  - wiki
+  - documentation
+home: https://wiki.alexlebens.dev/s/c530c2b9-82b7-44df-b7ef-870c8b29242f
 sources:
   - https://github.com/outline/outline
+  - https://github.com/cloudflare/cloudflared
+  - https://github.com/cloudnative-pg/cloudnative-pg
   - https://hub.docker.com/r/outlinewiki/outline
   - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
   - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/cloudflared
   - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/postgres-cluster
-  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/valkey
-  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/volsync-target
 maintainers:
   - name: alexlebens
 dependencies:
@@ -26,11 +27,11 @@ dependencies:
     version: 2.4.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.2
+    version: 7.10.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
-    version: 0.5.0
+    version: 0.4.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data

clusters/cl01tl/helm/outline/templates/external-secret.yaml

@@ -14,11 +14,17 @@ spec:
   data:
     - secretKey: secret-key
       remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
         key: /cl01tl/outline/key
+        metadataPolicy: None
         property: secret-key
     - secretKey: utils-key
       remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
         key: /cl01tl/outline/key
+        metadataPolicy: None
         property: utils-key
 
 ---
@@ -38,9 +44,15 @@ spec:
   data:
     - secretKey: client
       remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
         key: /authentik/oidc/outline
+        metadataPolicy: None
         property: client
     - secretKey: secret
       remoteRef:
+        conversionStrategy: Default
+        decodingStrategy: None
         key: /authentik/oidc/outline
+        metadataPolicy: None
         property: secret

clusters/cl01tl/helm/outline/values.yaml

@@ -4,6 +4,7 @@ outline:
       type: deployment
       replicas: 1
       strategy: Recreate
+      revisionHistoryLimit: 3
       pod:
         securityContext:
           fsGroup: 1001
@@ -11,12 +12,13 @@ outline:
         main:
           image:
             repository: outlinewiki/outline
-            tag: 1.6.1@sha256:a750f764080ce28d4a7393176011c8e2e4170b41689a8f6d91327dadf4904eb6
+            tag: 1.6.1
+            pullPolicy: IfNotPresent
           env:
             - name: NODE_ENV
               value: production
             - name: URL
-              value: https://outline.alexlebens.dev
+              value: https://wiki.alexlebens.dev
             - name: PORT
               value: 3000
             - name: SECRET_KEY
@@ -111,7 +113,7 @@ outline:
           resources:
             requests:
               cpu: 10m
-              memory: 500Mi
+              memory: 512Mi
   service:
     main:
       controller: main
@@ -119,12 +121,14 @@ outline:
         http:
           port: 3000
           targetPort: 3000
+          protocol: HTTP
   persistence:
     data:
       forceRename: outline-data
       storageClass: ceph-block
       accessMode: ReadWriteOnce
       size: 5Gi
+      retain: true
       advancedMounts:
         main:
           main:
@@ -143,12 +147,35 @@ postgres-18-cluster:
         destinationBucket: postgres-backups
         externalSecretCredentialPath: /garage/home-infra/postgres-backups
         isWALArchiver: true
+      # - name: garage-remote
+      #   index: 1
+      #   destinationBucket: postgres-backups
+      #   externalSecretCredentialPath: /garage/home-infra/postgres-backups
+      #   retentionPolicy: "90d"
+      #   data:
+      #     compression: bzip2
+      # - name: external
+      #   index: 1
+      #   endpointURL: https://nyc3.digitaloceanspaces.com
+      #   destinationBucket: postgres-backups-ce540ddf106d186bbddca68a
+      #   externalSecretCredentialPath: /garage/home-infra/postgres-backups
+      #   isWALArchiver: false
     scheduledBackups:
       - name: live-backup
         suspend: false
         immediate: true
         schedule: "0 10 15 * * *"
         backupName: garage-local
+      # - name: weekly-backup
+      #   suspend: true
+      #   immediate: true
+      #   schedule: "0 0 4 * * SAT"
+      #   backupName: garage-remote
+      # - name: daily-backup
+      #   suspend: true
+      #   immediate: true
+      #   schedule: "0 0 0 * * *"
+      #   backupName: external
 volsync-target-data:
   pvcTarget: outline-data
   moverSecurityContext:

clusters/cl01tl/helm/paperless-ngx/values.yaml

@@ -49,7 +49,7 @@ paperless-ngx:
             - name: PAPERLESS_URL
               value: https://paperless-ngx.alexlebens.net
             - name: PAPERLESS_ALLOWED_HOSTS
-              value: paperless-ngx.paperless-ngx
+              value: paperless-ngx.alexlebens.net, paperless-ngx.paperless-ngx
             - name: PAPERLESS_ADMIN_USER
               valueFrom:
                 secretKeyRef:
@@ -75,14 +75,12 @@ paperless-ngx:
                 secretKeyRef:
                   name: paperless-ngx-oidc-secret
                   key: PAPERLESS_SOCIALACCOUNT_PROVIDERS
-            - name: PAPERLESS_SOCIALACCOUNT_DEFAULT_PERMISSIONS
-              value: '["view_uisettings", "view_savedview", "add_uisettings", "change_uisettings", "delete_uisettings"]'
             - name: PAPERLESS_TIME_ZONE
               value: America/Chicago
           resources:
             requests:
-              cpu: 10m
-              memory: 600Mi
+              cpu: 1m
+              memory: 100Mi
         gotenberg:
           image:
             repository: gotenberg/gotenberg

clusters/cl01tl/helm/photoview/Chart.lock

@@ -0,0 +1,9 @@
+dependencies:
+- name: app-template
+  repository: https://bjw-s-labs.github.io/helm-charts/
+  version: 4.6.2
+- name: postgres-cluster
+  repository: oci://harbor.alexlebens.net/helm-charts
+  version: 7.10.0
+digest: sha256:fe266f506edd672979091e0ad12379d6ad7dddd2c982e196e602dcda268d6f76
+generated: "2026-03-15T20:07:52.831926834Z"

clusters/cl01tl/helm/photoview/Chart.yaml

@@ -0,0 +1,27 @@
+apiVersion: v2
+name: photoview
+version: 1.0.0
+description: Photoview
+keywords:
+  - photoview
+  - pictures
+home: https://wiki.alexlebens.dev/s/f519a435-8388-4503-a9f9-401bdb424151
+sources:
+  - https://github.com/photoview/photoview
+  - https://github.com/cloudnative-pg/cloudnative-pg
+  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
+  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/postgres-cluster
+maintainers:
+  - name: alexlebens
+dependencies:
+  - name: app-template
+    alias: photoview
+    repository: https://bjw-s-labs.github.io/helm-charts/
+    version: 4.6.2
+  - name: postgres-cluster
+    alias: postgres-18-cluster
+    version: 7.10.0
+    repository: oci://harbor.alexlebens.net/helm-charts
+icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/photoview.png
+# renovate: datasource=github-releases depName=photoview/photoview
+appVersion: 2.4.0

clusters/cl01tl/helm/photoview/templates/persistent-volume-claim.yaml

@@ -0,0 +1,17 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: photoview-nfs-storage
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: photoview-nfs-storage
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  volumeName: photoview-nfs-storage
+  storageClassName: nfs-client
+  accessModes:
+    - ReadWriteMany
+  resources:
+    requests:
+      storage: 1Gi

clusters/cl01tl/helm/photoview/templates/persistent-volume.yaml

@@ -0,0 +1,23 @@
+apiVersion: v1
+kind: PersistentVolume
+metadata:
+  name: photoview-nfs-storage
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: photoview-nfs-storage
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  persistentVolumeReclaimPolicy: Retain
+  storageClassName: nfs-client
+  capacity:
+    storage: 1Gi
+  accessModes:
+    - ReadWriteMany
+  nfs:
+    path: /volume2/Storage/Pictures
+    server: synologybond.alexlebens.net
+  mountOptions:
+    - vers=4
+    - minorversion=1
+    - noac

clusters/cl01tl/helm/photoview/values.yaml

@@ -0,0 +1,137 @@
+photoview:
+  controllers:
+    main:
+      type: deployment
+      replicas: 1
+      strategy: Recreate
+      revisionHistoryLimit: 3
+      initContainers:
+        init-chmod-data:
+          securityContext:
+            runAsUser: 0
+          image:
+            repository: busybox
+            tag: 1.37.0
+            pullPolicy: IfNotPresent
+          command:
+            - /bin/sh
+            - -ec
+            - |
+              /bin/chown -R 999:999 /app/cache
+          resources:
+            requests:
+              cpu: 100m
+              memory: 128Mi
+      containers:
+        main:
+          image:
+            repository: photoview/photoview
+            tag: 2.4.0
+            pullPolicy: IfNotPresent
+          env:
+            - name: PHOTOVIEW_DATABASE_DRIVER
+              value: postgres
+            - name: PHOTOVIEW_POSTGRES_URL
+              valueFrom:
+                secretKeyRef:
+                  name: photoview-postgresql-18-cluster-app
+                  key: uri
+            - name: PHOTOVIEW_MEDIA_CACHE
+              value: /app/cache
+          resources:
+            requests:
+              cpu: 10m
+              memory: 512Mi
+  service:
+    main:
+      controller: main
+      ports:
+        http:
+          port: 80
+          targetPort: 80
+          protocol: HTTP
+  route:
+    main:
+      kind: HTTPRoute
+      parentRefs:
+        - group: gateway.networking.k8s.io
+          kind: Gateway
+          name: traefik-gateway
+          namespace: traefik
+      hostnames:
+        - photoview.alexlebens.net
+      rules:
+        - backendRefs:
+            - group: ''
+              kind: Service
+              name: photoview
+              port: 80
+              weight: 100
+          matches:
+            - path:
+                type: PathPrefix
+                value: /
+  persistence:
+    cache:
+      forceRename: photoview-cache
+      storageClass: ceph-block
+      accessMode: ReadWriteOnce
+      size: 10Gi
+      retain: false
+      advancedMounts:
+        main:
+          init-chmod-data:
+            - path: /app/cache
+              readOnly: false
+          main:
+            - path: /app/cache
+              readOnly: false
+    media:
+      existingClaim: photoview-nfs-storage
+      advancedMounts:
+        main:
+          main:
+            - path: /photos
+              readOnly: true
+postgres-18-cluster:
+  mode: recovery
+  recovery:
+    method: objectStore
+    objectStore:
+      index: 1
+  backup:
+    objectStore:
+      - name: garage-local
+        index: 1
+        destinationBucket: postgres-backups
+        externalSecretCredentialPath: /garage/home-infra/postgres-backups
+        isWALArchiver: true
+      # - name: garage-remote
+      #   index: 1
+      #   destinationBucket: postgres-backups
+      #   externalSecretCredentialPath: /garage/home-infra/postgres-backups
+      #   retentionPolicy: "90d"
+      #   data:
+      #     compression: bzip2
+      # - name: external
+      #   index: 1
+      #   endpointURL: https://nyc3.digitaloceanspaces.com
+      #   destinationBucket: postgres-backups-ce540ddf106d186bbddca68a
+      #   externalSecretCredentialPath: /garage/home-infra/postgres-backups
+      #   isWALArchiver: false
+    scheduledBackups:
+      - name: live-backup
+        suspend: false
+        immediate: true
+        schedule: "0 15 15 * * *"
+        backupName: garage-local
+      # - name: weekly-backup
+      #   suspend: true
+      #   immediate: true
+      #   schedule: "0 0 4 * * SAT"
+      #   backupName: garage-remote
+      # - name: daily-backup
+      #   suspend: true
+      #   immediate: true
+      #   schedule: "0 0 0 * * *"
+      #   backupName: external

clusters/cl01tl/helm/plex/Chart.yaml

@@ -4,8 +4,10 @@ version: 1.0.0
 description: Plex
 keywords:
   - plex
-  - media
-home: https://docs.alexlebens.dev/applications/plex/
+  - tv shows
+  - movies
+  - live tv
+home: https://wiki.alexlebens.dev/s/e2833eed-f991-4b00-9fa0-5d7f403a8183
 sources:
   - https://www.plex.tv/
   - https://github.com/linuxserver/docker-plex
@@ -20,4 +22,4 @@ dependencies:
     version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/plex.png
 # renovate: datasource=github-releases depName=linuxserver/docker-plex
-appVersion: 1.43.0.10492-121068a07-ls298
+appVersion: 1.42.2

clusters/cl01tl/helm/plex/values.yaml

@@ -4,10 +4,8 @@ plex:
       type: deployment
       replicas: 1
       strategy: Recreate
+      revisionHistoryLimit: 3
       pod:
-        securityContext:
-          fsGroup: 1000
-          fsGroupChangePolicy: OnRootMismatch
         affinity:
           podAntiAffinity:
             requiredDuringSchedulingIgnoredDuringExecution:
@@ -22,10 +20,11 @@ plex:
         main:
           image:
             repository: ghcr.io/linuxserver/plex
-            tag: 1.43.0.10492-121068a07-ls298@sha256:cbd631f9a972a1c453953a9192c1781dd7d2084db075a1bee78a3cc6387fb103
+            tag: 1.43.0@sha256:a27f1ce1e1d14cd3627ed217f042bf8de0f796ed274fb27b2dc971ae22a64b95
+            pullPolicy: IfNotPresent
           env:
             - name: TZ
-              value: America/Chicago
+              value: US/Central
             - name: VERSION
               value: docker
           resources:
@@ -33,8 +32,8 @@ plex:
               gpu.intel.com/i915: 1
             requests:
               gpu.intel.com/i915: 1
-              cpu: 100m
-              memory: 250Mi
+              cpu: 10m
+              memory: 512Mi
   service:
     main:
       controller: main
@@ -43,6 +42,7 @@ plex:
         http:
           port: 32400
           targetPort: 32400
+          protocol: HTTP
   route:
     main:
       kind: HTTPRoute
@@ -55,8 +55,11 @@ plex:
         - plex.alexlebens.net
       rules:
         - backendRefs:
-            - name: plex
+            - group: ''
+              kind: Service
+              name: plex
               port: 32400
+              weight: 100
           matches:
             - path:
                 type: PathPrefix

clusters/cl01tl/helm/postiz/Chart.lock

@@ -7,7 +7,7 @@ dependencies:
   version: 2.4.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.2
+  version: 7.10.0
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.4.0
@@ -17,5 +17,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:bf8a2ac62745b9868be341ceb3ce282dd5c0adbf5eddd952b8175abbe74a66ea
-generated: "2026-04-06T00:36:22.202573581Z"
+digest: sha256:de3fb540df1cf7385a19316741854d01e002740c0bf346f3da0ff3a809b1fc3d
+generated: "2026-03-15T20:08:06.855136249Z"

clusters/cl01tl/helm/postiz/Chart.yaml

@@ -26,7 +26,7 @@ dependencies:
     version: 2.4.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.2
+    version: 7.10.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey

clusters/cl01tl/helm/radarr-4k/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.2
+  version: 7.10.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:f644b5d539a1aa786eae75f7e397ca12383320bcb52618eaf611c45c08e6f205
-generated: "2026-04-06T00:36:41.198658709Z"
+digest: sha256:d76563fe1a7a9f8ceaf6937831bd0c5511eb7369abb8eb54110dfb69e6dce224
+generated: "2026-03-15T20:08:21.236792423Z"

clusters/cl01tl/helm/radarr-4k/Chart.yaml

@@ -27,7 +27,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.2
+    version: 7.10.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/radarr-anime/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.2
+  version: 7.10.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:ff7a0dc34eba6f1958b56a90fd4b47d5baac88eb5c40349b5b9aa8223fa6ffd6
-generated: "2026-04-06T00:36:58.342685271Z"
+digest: sha256:21bde3a8778fb94e40f2177383ca418123e69f3f3f463b31d35e9f9bf83dfa9d
+generated: "2026-03-15T20:08:35.497440433Z"

clusters/cl01tl/helm/radarr-anime/Chart.yaml

@@ -27,7 +27,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.2
+    version: 7.10.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/radarr-standup/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.2
+  version: 7.10.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:c032454ad1ce0729f69b7d79571880d4d27af6dc6f638b3a32e0a1633c1ee996
-generated: "2026-04-06T00:37:15.332613443Z"
+digest: sha256:ebd25d2a12ca1924b66c62d6dd2c69476ae4526825020796198b65c2ebd2c6eb
+generated: "2026-03-15T20:08:49.811429784Z"

clusters/cl01tl/helm/radarr-standup/Chart.yaml

@@ -26,7 +26,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.2
+    version: 7.10.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/radarr/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.2
+  version: 7.10.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:26dca3bc43e9b3613d3fe817bf6254ffe8ca31152596fa6a141458734aab6950
-generated: "2026-04-06T00:37:32.501249849Z"
+digest: sha256:05ce0d746d9c42a00338df5e6673fde8baeefa6f598ef8c85a32e6bc393b94ca
+generated: "2026-03-15T20:09:03.538226001Z"

clusters/cl01tl/helm/radarr/Chart.yaml

@@ -26,7 +26,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.2
+    version: 7.10.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/roundcube/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.2
+  version: 7.10.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:3385cf67283187e62972293322a24c0bd3cf979cd870a3f157728e50b601e4f6
-generated: "2026-04-06T00:37:49.808064747Z"
+digest: sha256:755aa4db5c7142d46af4a80c9fce49c3c558cc81042c9a00a0bdcd607276e856
+generated: "2026-03-15T20:09:18.053504671Z"

clusters/cl01tl/helm/roundcube/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.2
+    version: 7.10.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data

clusters/cl01tl/helm/rybbit/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 2.4.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.2
+  version: 7.10.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:95bab760e3dc94ba3affe42d2f91bc274ed520865a461cdaac61ba47eab6f39f
-generated: "2026-04-06T00:38:06.764280798Z"
+digest: sha256:9342eb966ec3e8020aa6b1d6d2ac72d2c4a46c4ed70c5cf52c16ff25d2f2b0fa
+generated: "2026-03-15T20:09:33.800790437Z"

clusters/cl01tl/helm/rybbit/Chart.yaml

@@ -23,7 +23,7 @@ dependencies:
     version: 2.4.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.2
+    version: 7.10.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-clickhouse-data

clusters/cl01tl/helm/searxng/values.yaml

@@ -9,7 +9,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:4da2820fd56920bf05303183b2f3a8c8cce18fcbcd88526cae31bc039b2d4dd1
+            tag: latest@sha256:054395b06d5afc43b8d0f51b65257290896779bdd8a1fdc7075dda52461585e1
             pullPolicy: IfNotPresent
           env:
             - name: SEARXNG_BASE_URL
@@ -39,7 +39,7 @@ searxng:
         main:
           image:
             repository: searxng/searxng
-            tag: latest@sha256:4da2820fd56920bf05303183b2f3a8c8cce18fcbcd88526cae31bc039b2d4dd1
+            tag: latest@sha256:054395b06d5afc43b8d0f51b65257290896779bdd8a1fdc7075dda52461585e1
             pullPolicy: IfNotPresent
           env:
             - name: SEARXNG_BASE_URL

clusters/cl01tl/helm/site-documentation/values.yaml

@@ -11,7 +11,7 @@ site-documentation:
         main:
           image:
             repository: harbor.alexlebens.net/images/site-documentation
-            tag: 0.18.0
+            tag: 0.16.0
             pullPolicy: IfNotPresent
           resources:
             requests:

clusters/cl01tl/helm/sonarr-4k/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.2
+  version: 7.10.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:83fca5b0c0428efe33183648047cb649ee6ee7931e1441c360bcf63aad3ced20
-generated: "2026-04-06T00:38:25.611711788Z"
+digest: sha256:27cc019786592c0e7fce9509543792c9f281a4e676c463ce5d6ba2a6df05e3b2
+generated: "2026-03-15T20:09:49.767646568Z"

clusters/cl01tl/helm/sonarr-4k/Chart.yaml

@@ -27,7 +27,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.2
+    version: 7.10.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/sonarr-anime/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.2
+  version: 7.10.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:d5bb985d028ae1d477dc2b7796e82515ee173232334c3441269cbd0b2a359ab5
-generated: "2026-04-06T00:38:44.617113893Z"
+digest: sha256:0f8016577e9fedaf8e5bd36688da2bf19b51185bc8100b817b64ce48ec87433b
+generated: "2026-03-15T20:10:04.000906771Z"

clusters/cl01tl/helm/sonarr-anime/Chart.yaml

@@ -26,7 +26,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.2
+    version: 7.10.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/sonarr/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.2
+  version: 7.10.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:56992d382fb09e68be6f3b20736b323868fe8a0eb694b76c8b5e98635576be7e
-generated: "2026-04-06T00:39:02.663856776Z"
+digest: sha256:a20b4dd7e2f0c8777ed2be1bd2c702bc4d7cfeb51e4a29d781c041c555821aa1
+generated: "2026-03-15T20:10:17.242764683Z"

clusters/cl01tl/helm/sonarr/Chart.yaml

@@ -26,7 +26,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.2
+    version: 7.10.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/stalwart/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.2
+  version: 7.10.0
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.4.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:e0c2ef4d7cf4ccfa1e0500ab060c9f788896930db7c6419541bc737db096a465
-generated: "2026-04-06T00:39:23.259908572Z"
+digest: sha256:6ffe4bd6af377f2ba5134389027e86085928d5e1108bb5ecf0d4b1e4cc908b67
+generated: "2026-03-15T20:10:31.966910173Z"

clusters/cl01tl/helm/stalwart/Chart.yaml

@@ -23,7 +23,7 @@ dependencies:
     repository: https://bjw-s-labs.github.io/helm-charts/
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.2
+    version: 7.10.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey

clusters/cl01tl/helm/vaultwarden/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 2.4.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.2
+  version: 7.10.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:1b1949361ed77479733f8634a2ac6d74d4d8ba3144339446f5508643a0b57a31
-generated: "2026-04-06T00:39:44.249147168Z"
+digest: sha256:6f78b41937412c1db5e0f612287d29ea81c1d9169b8a0efd98a0dd4be3e532d1
+generated: "2026-03-15T20:10:47.852109985Z"

clusters/cl01tl/helm/vaultwarden/Chart.yaml

@@ -27,7 +27,7 @@ dependencies:
     version: 2.4.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.2
+    version: 7.10.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data

clusters/cl01tl/helm/version-checker/Chart.lock

@@ -1,6 +0,0 @@
-dependencies:
-- name: version-checker
-  repository: https://charts.jetstack.io
-  version: v0.10.0
-digest: sha256:2bcc64d0fbaf7b40b95118203ed913fee3de0a8fe6a2b909868651f1524a5ad7
-generated: "2026-04-05T18:37:45.250923-05:00"

clusters/cl01tl/helm/version-checker/Chart.yaml

@@ -1,21 +0,0 @@
-apiVersion: v2
-name: version-checker
-version: 1.0.0
-description: Version Checker
-keywords:
-  - version-checker
-  - update-tracker
-home: https://docs.alexlebens.dev/applications/version-checker/
-sources:
-  - https://github.com/jetstack/version-checker
-  - https://quay.io/repository/jetstack/version-checker?tab=tags
-  - https://github.com/jetstack/version-checker/tree/main/deploy/charts/version-checker
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: version-checker
-    repository: https://charts.jetstack.io
-    version: v0.10.0
-icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/omnitools.png
-# renovate: datasource=github-releases depName=jetstack/version-checker
-appVersion: v0.10.0

clusters/cl01tl/helm/version-checker/values.yaml

@@ -1,17 +0,0 @@
-version-checker:
-  image:
-    repository: quay.io/jetstack/version-checker
-    tag: v0.10.0@sha256:ea7a85422684479d0e51a41efc8edb12bed8f43aa89ab59dfea45aa92b2e8c8d
-  selfhosted:
-    - name: Harbor
-      host: http://harbor-registry.harbor:5000
-    - name: Gitea
-      host: http://gitea-http.gitea:3000
-  resources:
-    requests:
-      cpu: 1m
-      memory: 40Mi
-  prometheus:
-    enabled: true
-    replicas: 1
-    serviceAccountName: version-checker-prometheus

clusters/cl01tl/helm/yamtrack/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.2
+  version: 7.10.0
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.4.0
-digest: sha256:2d0dc9c81ac07ac67670396d9a2f619f7abc8c1311c6bf03e71377dc1354d642
-generated: "2026-04-06T00:40:05.110617289Z"
+digest: sha256:71da007e1cef75e45b1678caa51b0d2317cb8f4dfdf7df675d534194f03650aa
+generated: "2026-03-15T20:11:03.591727143Z"

clusters/cl01tl/helm/yamtrack/Chart.yaml

@@ -22,7 +22,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.11.2
+    version: 7.10.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey

hosts/ps08rp/blocky/config.yml

@@ -86,7 +86,6 @@ customDNS:
     bazarr                          IN      CNAME   traefik-cl01tl
     ceph                            IN      CNAME   traefik-cl01tl
     dawarich                        IN      CNAME   traefik-cl01tl
-    dependency-track                IN      CNAME   traefik-cl01tl
     directus                        IN      CNAME   traefik-cl01tl
     excalidraw                      IN      CNAME   traefik-cl01tl
     feishin                         IN      CNAME   traefik-cl01tl
@@ -120,6 +119,7 @@ customDNS:
     ollama                          IN      CNAME   traefik-cl01tl
     omni-tools                      IN      CNAME   traefik-cl01tl
     paperless-ngx                   IN      CNAME   traefik-cl01tl
+    photoview                       IN      CNAME   traefik-cl01tl
     plex                            IN      CNAME   traefik-cl01tl
     postiz                          IN      CNAME   traefik-cl01tl
     prometheus                      IN      CNAME   traefik-cl01tl

hosts/ps09rp/blocky/config.yml

@@ -107,7 +107,6 @@ customDNS:
     bazarr                          IN      CNAME   traefik-cl01tl
     ceph                            IN      CNAME   traefik-cl01tl
     dawarich                        IN      CNAME   traefik-cl01tl
-    dependency-track                IN      CNAME   traefik-cl01tl
     directus                        IN      CNAME   traefik-cl01tl
     excalidraw                      IN      CNAME   traefik-cl01tl
     feishin                         IN      CNAME   traefik-cl01tl
@@ -141,6 +140,7 @@ customDNS:
     ollama                          IN      CNAME   traefik-cl01tl
     omni-tools                      IN      CNAME   traefik-cl01tl
     paperless-ngx                   IN      CNAME   traefik-cl01tl
+    photoview                       IN      CNAME   traefik-cl01tl
     plex                            IN      CNAME   traefik-cl01tl
     postiz                          IN      CNAME   traefik-cl01tl
     prometheus                      IN      CNAME   traefik-cl01tl

hosts/ps10rp/cloudflare-ddns/compose.yaml

@@ -1,7 +1,7 @@
 ---
 services:
     cloudflare-ddns:
-        image: favonia/cloudflare-ddns:1.16.2@sha256:bc53b40b13c8b2a84e9b93c21f65fcd7d574b741014fb93912eb9efd93015aa2
+        image: favonia/cloudflare-ddns:1.16.1@sha256:d9eb06b9ddb1ef121334095645e2b55ac208ea1ef1f363a201a255aa8a9798cc
         container_name: cloudflare-ddns
         cap_drop:
             - all

renovate.json

@@ -10,6 +10,7 @@
   "prHourlyLimit": 0,
   "prConcurrentLimit": 0,
   "pinDigests": true,
+  "minimumReleaseAgeBehaviour": "timestamp-optional",
   "baseBranchPatterns": [
     "main"
   ],
@@ -21,7 +22,7 @@
         "/(^|/)Chart\\.yaml$/"
       ],
       "matchStrings": [
-        "#\\s*renovate:\\s*datasource=(?<datasource>\\S+)\\s+depName=(?<depName>\\S+)(?:\\s+versioning=(?<versioning>\\S+))?\\s+appVersion:\\s*[\"']?v?(?<currentValue>[^\\s\"']+)[\"']?"
+        "#\\s*renovate:\\s*datasource=(?<datasource>\\S+)\\s+depName=(?<depName>\\S+)(?:\\s+versioning=(?<versioning>\\S+))?\\s+appVersion:\\s*[\"']?(?<currentValue>[^\\s\"']+)[\"']?"
       ],
       "versioningTemplate": "{{#if versioning}}{{{versioning}}}{{else}}semver-coerced{{/if}}"
     },
@@ -102,7 +103,7 @@
     },
     {
       "description": "Versioning for LinuxServer images",
-      "versioning": "regex:^v?(?<major>\\d+)\\.(?<minor>\\d+)\\.(?<patch>\\d+)(?:\\.(?<build>\\d+))?(?:-[a-zA-Z0-9]+)*-ls(?<revision>\\d+)$",
+      "versioning": "regex:^v?(?<major>\\d+)\\.(?<minor>\\d+)\\.(?<patch>\\d+)-ls(?<revision>\\d+)$",
       "matchPackageNames": [
         "/^linuxserver//",
         "/^ghcr\\.io/linuxserver//",