chore(deps): update helm release openbao to v0.28.2

.gitea/workflows/lint-test-docker.yaml

@@ -18,7 +18,7 @@ env:
 
 jobs:
   lint-docker-compose:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-js
     steps:
       - name: Checkout
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6

.gitea/workflows/lint-test-helm.yaml

@@ -21,7 +21,7 @@ env:
 
 jobs:
   lint-helm:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-js
     outputs:
       chart-dir: ${{ steps.check-dir-changes.outputs.chart-dir }}
       chart-dir-csv: ${{ steps.check-dir-changes.outputs.chart-dir-csv }}
@@ -231,7 +231,7 @@ jobs:
 
   validate-kubeconform:
     needs: lint-helm
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-js
     if: |
       needs.lint-helm.result == 'success' &&
       needs.lint-helm.outputs.changes-detected == 'true' &&
@@ -343,7 +343,6 @@ jobs:
 
             helm dependency build "${CHART_PATH}" --skip-refresh
 
-            set -o pipefail
             if ! helm template "${DIR}" "${CHART_PATH}" --include-crds --namespace default --api-versions "gateway.networking.k8s.io/v1/HTTPRoute,monitoring.coreos.com/v1,monitoring.coreos.com/v1/ServiceMonitor" | \
               kubeconform \
                 ${SCHEMA_LOCATIONS} \

.gitea/workflows/render-manifests.yaml

@@ -24,7 +24,7 @@ env:
 
 jobs:
   render-manifests:
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-js
     if: >-
       github.event_name == 'schedule' ||
       github.event_name == 'workflow_dispatch' ||
@@ -250,8 +250,6 @@ jobs:
 
           echo ">> Rendering Manifests ..."
 
-          EXIT_CODE=0
-
           render_chart() {
             local DIR="$1"
             local CHART_PATH="${MAIN_DIR}/clusters/${CLUSTER}/helm/${DIR}"
@@ -285,17 +283,10 @@ jobs:
 
               echo ">> Formating rendered template ..."
               local TEMPLATE
-              if ! TEMPLATE=$(helm template "${CHART_NAME}" ./ --namespace "${NAMESPACE}" --include-crds --dry-run=server --api-versions "gateway.networking.k8s.io/v1/HTTPRoute,monitoring.coreos.com/v1,monitoring.coreos.com/v1/ServiceMonitor"); then
-                echo "${DIR}" > "${MAIN_DIR}/.failed_chart_${DIR}"
-                return 1
-              fi
+              TEMPLATE=$(helm template "${CHART_NAME}" ./ --namespace "${NAMESPACE}" --include-crds --dry-run=server --api-versions "gateway.networking.k8s.io/v1/HTTPRoute,monitoring.coreos.com/v1,monitoring.coreos.com/v1/ServiceMonitor")
 
               # Format and split rendered template
-              set -o pipefail
-              if ! echo "${TEMPLATE}" | yq '... comments=""' | yq 'select(. != null)' | yq -s '"'"${OUTPUT_FOLDER}"'" + .kind + "-" + .metadata.name + ".yaml"'; then
-                echo "${DIR}" > "${MAIN_DIR}/.failed_chart_${DIR}"
-                return 1
-              fi
+              echo "${TEMPLATE}" | yq '... comments=""' | yq 'select(. != null)' | yq -s '"'"${OUTPUT_FOLDER}"'" + .kind + "-" + .metadata.name + ".yaml"'
 
               # Strip comments again to ensure formatting correctness
               for file in "$OUTPUT_FOLDER"/*; do
@@ -325,16 +316,9 @@ jobs:
 
           done | xargs -P 5 -I {} bash -c 'OUT=$(render_chart "$@" 2>&1); printf "%s\n" "$OUT"' _ {}
 
-          if ls .failed_chart_* 1> /dev/null 2>&1; then
-            EXIT_CODE=1
-            rm -f .failed_chart_*
-          fi
-
           echo ""
           echo "----"
 
-          exit $EXIT_CODE
-
       - name: Check for Changes
         id: check-changes
         if: steps.check-dir-changes.outputs.changes-detected == 'true'

.gitea/workflows/renovate.yaml

@@ -12,8 +12,8 @@ on:
 
 jobs:
   renovate:
-    runs-on: ubuntu-latest
-    container: ghcr.io/renovatebot/renovate:43.195.0@sha256:47421f2f3f82048e969b5195dd808d5ac2c5f69d43d192191c4a3dca390afe06
+    runs-on: ubuntu-js
+    container: ghcr.io/renovatebot/renovate:43.177.7@sha256:a4a5e5090d29ff323b132b63441be1395c66bd35e2b5f8b32ed5b1901ecbf3e5
     steps:
       - name: Checkout
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6

clusters/cl01tl/helm/actual/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.1
+  version: 5.0.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
-digest: sha256:cefbc682239406e67d7f05887c9155742d7566f1ebe0b303dd3b160f1b28aa49
-generated: "2026-05-15T00:28:22.250508809Z"
+digest: sha256:9468b3406ab0d91bf44a1a940eca8648782f3519d0c683d21b33e16c258c9175
+generated: "2026-05-07T21:23:05.56246-05:00"

clusters/cl01tl/helm/actual/Chart.yaml

@@ -17,7 +17,7 @@ dependencies:
   - name: app-template
     alias: actual
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.1
+    version: 5.0.0
   - name: volsync-target
     alias: volsync-target-data
     version: 2.0.0

clusters/cl01tl/helm/argocd/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: argo-cd
   repository: https://argoproj.github.io/argo-helm
-  version: 9.5.15
-digest: sha256:e9c84de9594f6fb4e05a0f0c1bd87aea8743fcbae08bd8394ea785c167dfcc11
-generated: "2026-05-22T01:09:44.579860771Z"
+  version: 9.5.14
+digest: sha256:5cae964bb988089467bc5c46badbe33b67f64abd039f5961e66e412a5c7004a7
+generated: "2026-05-13T17:58:34.736881783Z"

clusters/cl01tl/helm/argocd/Chart.yaml

@@ -13,7 +13,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: argo-cd
-    version: 9.5.15
+    version: 9.5.14
     repository: https://argoproj.github.io/argo-helm
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 # renovate: datasource=github-releases depName=argoproj/argo-cd

clusters/cl01tl/helm/audiobookshelf/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.1
+  version: 5.0.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
-digest: sha256:1301152734c6f4df67089c4076875022ecafc466c308dc994f4333917c3d8622
-generated: "2026-05-15T00:28:34.959229494Z"
+digest: sha256:57c3cc8da25c1dfc8684c5f20f804ce4642abee25cb317097ce6bd17f8bb0504
+generated: "2026-05-07T21:23:15.021738-05:00"

clusters/cl01tl/helm/audiobookshelf/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
   - name: app-template
     alias: audiobookshelf
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.1
+    version: 5.0.0
   - name: volsync-target
     alias: volsync-target-config
     version: 2.0.0
@@ -32,4 +32,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/audiobookshelf.png
 # renovate: datasource=github-releases depName=advplyr/audiobookshelf
-appVersion: 2.35.0
+appVersion: 2.34.0

clusters/cl01tl/helm/audiobookshelf/values.yaml

@@ -6,15 +6,13 @@ audiobookshelf:
       strategy: Recreate
       pod:
         securityContext:
-          runAsUser: 1000
-          runAsGroup: 1000
           fsGroup: 1000
           fsGroupChangePolicy: OnRootMismatch
       containers:
         main:
           image:
             repository: ghcr.io/advplyr/audiobookshelf
-            tag: 2.35.0@sha256:89276ff2e0b3d2f07dd334b641f27a34ab7f02e1047c60b7b8a30126cb0813a5
+            tag: 2.34.0@sha256:4143292c530f6ac6700afd13360c04f477e4f1a81c1c97c4224b1c7e4330c5c4
           env:
             - name: TZ
               value: America/Chicago
@@ -30,9 +28,9 @@ audiobookshelf:
             - name: TZ
               value: America/Chicago
             - name: PGID
-              value: 1000
+              value: "1000"
             - name: PUID
-              value: 1000
+              value: "1000"
             - name: APPRISE_STORAGE_MODE
               value: memory
             - name: APPRISE_STATEFUL_MODE

clusters/cl01tl/helm/authentik/Chart.lock

@@ -1,15 +1,15 @@
 dependencies:
 - name: authentik
   repository: https://charts.goauthentik.io/
-  version: 2026.5.0
+  version: 2026.2.3
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 3.3.1
+  version: 3.2.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.15.0
+  version: 7.12.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.9.0
-digest: sha256:8688b819ca57468c53821b0bda7e1ae21cf7fd3570724c2bf2bce52e88c20171
-generated: "2026-05-22T19:44:38.634358324Z"
+  version: 0.8.0
+digest: sha256:f690cd3742371fda919b728b2b65071eb301d8bef6bbcf013e5eb3998d1e66b6
+generated: "2026-05-13T00:09:37.476993903Z"

clusters/cl01tl/helm/authentik/Chart.yaml

@@ -18,18 +18,18 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: authentik
-    version: 2026.5.0
+    version: 2026.2.3
     repository: https://charts.goauthentik.io/
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 3.3.1
+    version: 3.2.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.15.0
+    version: 7.12.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
-    version: 0.9.0
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/authentik.png
 # renovate: datasource=github-releases depName=goauthentik/authentik

clusters/cl01tl/helm/authentik/values.yaml

@@ -77,6 +77,10 @@ authentik:
       enabled: true
 postgres-18-cluster:
   mode: recovery
+  cluster:
+    resources:
+      requests:
+        memory: 150Mi
   recovery:
     method: objectStore
     objectStore:

clusters/cl01tl/helm/backrest/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.1
+  version: 5.0.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
-digest: sha256:099e7a9792fceb0cbce4c13e997c5029af39807da6e5c9825a1a042b785e0887
-generated: "2026-05-15T00:28:48.302596135Z"
+digest: sha256:440dd48f7cb11c3f84c4543fd51dedeea511b29a96571cefdf3d42ddb988554f
+generated: "2026-05-08T20:52:47.164685-05:00"

clusters/cl01tl/helm/backrest/Chart.yaml

@@ -17,7 +17,7 @@ dependencies:
   - name: app-template
     alias: backrest
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.1
+    version: 5.0.0
   - name: volsync-target
     alias: volsync-target-config
     version: 2.0.0

clusters/cl01tl/helm/bazarr/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.1
+  version: 5.0.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
-digest: sha256:bcced6d5e69265581b976c3e0426cc1330e36109255ce34533ef0d9b991054a5
-generated: "2026-05-15T00:29:00.968381514Z"
+digest: sha256:a792d16034f5d4f2a94833480ba8700366c9b64d50443934e15033c349a28e81
+generated: "2026-05-08T20:52:50.463541-05:00"

clusters/cl01tl/helm/bazarr/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
   - name: app-template
     alias: bazarr
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.1
+    version: 5.0.0
   - name: volsync-target
     alias: volsync-target-config
     version: 2.0.0

clusters/cl01tl/helm/blocky/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.1
+  version: 5.0.0
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.9.0
-digest: sha256:a78dcd753753806ee7b5e81380676bc289c6f196e4e4b968f1d8f71efa8556b0
-generated: "2026-05-21T20:05:26.87528061Z"
+  version: 0.8.0
+digest: sha256:c1b8be978ecda2e495eb0a65c62f1794edd1de5c47e288abb8b53b65be4353ac
+generated: "2026-05-08T02:30:25.905416473Z"

clusters/cl01tl/helm/blocky/Chart.yaml

@@ -17,11 +17,11 @@ dependencies:
   - name: app-template
     alias: blocky
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.1
+    version: 5.0.0
   - name: valkey
     alias: valkey
-    version: 0.9.0
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/blocky.png
 # renovate: datasource=github-releases depName=0xerr0r/blocky
-appVersion: v0.30.0
+appVersion: v0.29.0

clusters/cl01tl/helm/blocky/values.yaml

@@ -8,7 +8,7 @@ blocky:
         main:
           image:
             repository: ghcr.io/0xerr0r/blocky
-            tag: v0.30.0@sha256:d9f15eddffedded40797406349012cbd5966ef99c286b13321e7a76efddb9bdc
+            tag: v0.29.0@sha256:a6d99f323d3036a99a3767a52ad612f4d8f3f31167492bfc14d4ea57b24cdfd0
           env:
             - name: TZ
               value: America/Chicago
@@ -164,6 +164,7 @@ blocky:
               sparkyfitness                   IN      CNAME   traefik-cl01tl
               tdarr                           IN      CNAME   traefik-cl01tl
               tubearchivist                   IN      CNAME   traefik-cl01tl
+              vault                           IN      CNAME   traefik-cl01tl
               whodb                           IN      CNAME   traefik-cl01tl
               yamtrack                        IN      CNAME   traefik-cl01tl
               yubal                           IN      CNAME   traefik-cl01tl

clusters/cl01tl/helm/cloudnative-pg/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 0.6.0
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.11.4
+  version: 0.11.3
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.11.4
-digest: sha256:35ff1bb60552f176dab2055a17c0e8880cc6b6c7bfa6c64415a1eec421f8723f
-generated: "2026-05-18T02:14:30.999705779Z"
+  version: 0.11.3
+digest: sha256:a08719a82de76d62cddfec163dbc9feecfbea83ab406f3750d25d4deaf586f0c
+generated: "2026-05-13T00:10:14.309341878Z"

clusters/cl01tl/helm/cloudnative-pg/Chart.yaml

@@ -26,11 +26,11 @@ dependencies:
   - name: rclone-bucket
     alias: rclone-postgres-backups-remote
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.11.4
+    version: 0.11.3
   - name: rclone-bucket
     alias: rclone-postgres-backups-external
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.11.4
+    version: 0.11.3
 icon: https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg.github.io/refs/heads/main/assets/images/hero_image.png
 # renovate: datasource=github-releases depName=cloudnative-pg/cloudnative-pg
 appVersion: 1.29.1

clusters/cl01tl/helm/cloudnative-pg/values.yaml

@@ -53,7 +53,7 @@ rclone-postgres-backups-external:
       bucketName: postgres-backups-775957147abfbc73
   prune:
     enabled: true
-    ageToPrune: 14d
+    ageToPrune: 45d
     include: "/cl01tl/*/*/*/base/**"
     exclude: "**/walls/**"
   secret:

clusters/cl01tl/helm/dawarich/Chart.lock

@@ -1,13 +1,13 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.1
+  version: 5.0.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.15.0
+  version: 7.12.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.9.0
+  version: 0.8.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
@@ -17,5 +17,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
-digest: sha256:cd2b6d78d834baba995997c9e2c867012ffe555dc3bea4d59bef416875f71433
-generated: "2026-05-21T20:05:51.237084324Z"
+digest: sha256:0d0edd3f24d5ae14aa81d31cea6ea065527e4220644235d479b7b079ac5484d8
+generated: "2026-05-08T20:53:11.730706-05:00"

clusters/cl01tl/helm/dawarich/Chart.yaml

@@ -19,14 +19,14 @@ dependencies:
   - name: app-template
     alias: dawarich
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.1
+    version: 5.0.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.15.0
+    version: 7.12.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
-    version: 0.9.0
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-storage
@@ -42,4 +42,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/dawarich.png
 # renovate: datasource=github-releases depName=Freika/dawarich
-appVersion: 1.7.9
+appVersion: 1.7.7

clusters/cl01tl/helm/dawarich/values.yaml

@@ -8,7 +8,7 @@ dawarich:
         main:
           image:
             repository: freikin/dawarich
-            tag: 1.7.9@sha256:54329b050caab65f39367308ef7a9f2f3bd1fa3b6ba969d6a33bbf4a0f5e7e84
+            tag: 1.7.7@sha256:f7eea22def731ef98f0644b191c477917790bb0e5449b0014bac2f349ce178a7
           command:
             - "web-entrypoint.sh"
           args:
@@ -136,7 +136,7 @@ dawarich:
         sidekiq:
           image:
             repository: freikin/dawarich
-            tag: 1.7.9@sha256:54329b050caab65f39367308ef7a9f2f3bd1fa3b6ba969d6a33bbf4a0f5e7e84
+            tag: 1.7.7@sha256:f7eea22def731ef98f0644b191c477917790bb0e5449b0014bac2f349ce178a7
           command:
             - "sidekiq-entrypoint.sh"
           args:

clusters/cl01tl/helm/descheduler/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: descheduler
   repository: https://kubernetes-sigs.github.io/descheduler/
-  version: 0.36.0
-digest: sha256:9abc2ea808e38a19d8c153ec962d8d5fd6b28b699aeccf32a1941d2b73394184
-generated: "2026-05-20T13:05:28.892962974Z"
+  version: 0.35.1
+digest: sha256:ed7cc8068b83ac483fda3a781227b35e12a34abdca214b5490e7036c89db1a95
+generated: "2026-03-09T21:21:45.788316167Z"

clusters/cl01tl/helm/descheduler/Chart.yaml

@@ -14,8 +14,8 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: descheduler
-    version: 0.36.0
+    version: 0.35.1
     repository: https://kubernetes-sigs.github.io/descheduler/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 # renovate: datasource=github-releases depName=kubernetes-sigs/descheduler
-appVersion: vv0.36.0
+appVersion: v0.35.1

clusters/cl01tl/helm/descheduler/values.yaml

@@ -1,7 +1,7 @@
 descheduler:
   image:
     repository: registry.k8s.io/descheduler/descheduler
-    tag: v0.36.0@sha256:7ca92c0a7b4f1c51d306409da6b832005fcadb224e384795646376726734c6e5
+    tag: v0.35.1@sha256:871d3b804390b0b8c7cb09d4e9b7856cf30e31f9e9e3d29562b0301a10453bb1
   kind: Deployment
   resources:
     limits:

clusters/cl01tl/helm/directus/Chart.lock

@@ -1,18 +1,18 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.1
+  version: 5.0.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.15.0
+  version: 7.12.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.9.0
+  version: 0.8.0
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.11.4
+  version: 0.11.3
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.11.4
-digest: sha256:6a2d1c3824f01c94572919dc58c3c72267373506979aa7566b138159d4389252
-generated: "2026-05-21T20:06:21.441505828Z"
+  version: 0.11.3
+digest: sha256:6051301e1205014989b92b460b771fb45418199a52f575fc3bd984796e7c7a82
+generated: "2026-05-09T02:54:59.609475776Z"

clusters/cl01tl/helm/directus/Chart.yaml

@@ -19,23 +19,23 @@ dependencies:
   - name: app-template
     alias: directus
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.1
+    version: 5.0.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.15.0
+    version: 7.12.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
-    version: 0.9.0
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: rclone-bucket
     alias: rclone-directus-assets-remote
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.11.4
+    version: 0.11.3
   - name: rclone-bucket
     alias: rclone-directus-assets-external
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.11.4
+    version: 0.11.3
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/directus.png
 # renovate: datasource=github-releases depName=directus/directus
 appVersion: 11.17.4

clusters/cl01tl/helm/element-web/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 1.4.36
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 3.3.1
-digest: sha256:37a41dfedd352f4122d78d17f4f3b7a703055553c45983bca0aa377cdd599fa2
-generated: "2026-05-18T02:02:39.83645496Z"
+  version: 3.2.2
+digest: sha256:a30fa9f1c69652d0ea4c2e12cba7a21df544e60c20d25c88e66f6f3de3e1ab83
+generated: "2026-05-08T22:56:45.533196593Z"

clusters/cl01tl/helm/element-web/Chart.yaml

@@ -19,7 +19,7 @@ dependencies:
     repository: https://ananace.gitlab.io/charts
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 3.3.1
+    version: 3.2.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/element.png
 # renovate: datasource=github-releases depName=element-hq/element-web
-appVersion: v1.12.18
+appVersion: v1.12.17

clusters/cl01tl/helm/eraser/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 1.4.1
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.1
-digest: sha256:70822dce88f0eb843477b28caa6f738d38a6436e6e3a99b0003e3e1da69b8ed9
-generated: "2026-05-15T00:29:53.572114523Z"
+  version: 5.0.0
+digest: sha256:b510fa700aade3c4ff5d8cacd8099c6f52d958aff97d436d4fe63abde2200439
+generated: "2026-05-07T20:44:14.408868308Z"

clusters/cl01tl/helm/eraser/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
   - name: app-template
     alias: eraser-metrics
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.1
+    version: 5.0.0
 icon: https://raw.githubusercontent.com/eraser-dev/eraser/refs/heads/main/images/eraser-logo-color-1c.png
 # renovate: datasource=github-releases depName=eraser-dev/eraser
 appVersion: v1.4.1

clusters/cl01tl/helm/eraser/values.yaml

@@ -50,7 +50,7 @@ eraser-metrics:
         main:
           image:
             repository: ghcr.io/open-telemetry/opentelemetry-collector-releases/opentelemetry-collector
-            tag: 0.152.1@sha256:c5cde41675a68e392322140d25fa232b4585e4e7fdc5f8c39d61d968bc13dae6
+            tag: 0.152.0@sha256:f358f8028c6eb44f765444de1c8899b4f97d7ba54be5264a8753f2c182bc5757
           command:
             - /otelcol
             - --config=/conf/otel-collector-config.yaml

clusters/cl01tl/helm/excalidraw/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.1
-digest: sha256:a8a769a74eddcce81dd9c5740ad124125ebfc1a291332c8ed10c0bdc5230a7b4
-generated: "2026-05-15T00:30:12.00717252Z"
+  version: 5.0.0
+digest: sha256:297d4f45c64ccbaac66c103774e97bacde3f249cab40afef06c0c1106b62ab79
+generated: "2026-05-07T20:44:26.213030206Z"

clusters/cl01tl/helm/excalidraw/Chart.yaml

@@ -16,7 +16,7 @@ dependencies:
   - name: app-template
     alias: excalidraw
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.1
+    version: 5.0.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/excalidraw.png
 # renovate: datasource=github-releases depName=excalidraw/excalidraw
 appVersion: v0.18.1

clusters/cl01tl/helm/external-secrets/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: external-secrets
   repository: https://charts.external-secrets.io
-  version: 2.5.0
-digest: sha256:8aa24d4e44c2d9ff6a88a4d126ca3ae6ec2e960b87e9a34a2862e7dca157404f
-generated: "2026-05-15T16:12:48.985351129Z"
+  version: 2.4.1
+digest: sha256:f862e1236cdbd9ddea5692ae63f7a05a4dc1f3d60bcae33015237cc0a630c224
+generated: "2026-04-28T18:30:17.998349684Z"

clusters/cl01tl/helm/external-secrets/Chart.yaml

@@ -14,8 +14,8 @@ sources:
 dependencies:
   - name: external-secrets
     alias: external-secrets
-    version: 2.5.0
+    version: 2.4.1
     repository: https://charts.external-secrets.io
 icon: https://raw.githubusercontent.com/external-secrets/external-secrets/refs/heads/main/assets/eso-logo-large.png
 # renovate: datasource=github-releases depName=external-secrets/external-secrets
-appVersion: vv2.5.0
+appVersion: v2.4.1

clusters/cl01tl/helm/external-secrets/values.yaml

@@ -2,7 +2,7 @@ external-secrets:
   replicaCount: 3
   image:
     repository: ghcr.io/external-secrets/external-secrets
-    tag: v2.5.0@sha256:45e7bee4e743331288df01efce0e35b41738cffdc89c86a235359a5153257489
+    tag: v2.4.1@sha256:9440a40b394791a5e93f3f7e1b33399ecbdc0e38273de1d69ed83fe12936fc09
   installCRDs: true
   crds:
     createClusterExternalSecret: true
@@ -29,7 +29,7 @@ external-secrets:
   webhook:
     image:
       repository: ghcr.io/external-secrets/external-secrets
-      tag: v2.5.0@sha256:45e7bee4e743331288df01efce0e35b41738cffdc89c86a235359a5153257489
+      tag: v2.4.1@sha256:9440a40b394791a5e93f3f7e1b33399ecbdc0e38273de1d69ed83fe12936fc09
     resources:
       requests:
         cpu: 1m
@@ -37,7 +37,7 @@ external-secrets:
   certController:
     image:
       repository: ghcr.io/external-secrets/external-secrets
-      tag: v2.5.0@sha256:45e7bee4e743331288df01efce0e35b41738cffdc89c86a235359a5153257489
+      tag: v2.4.1@sha256:9440a40b394791a5e93f3f7e1b33399ecbdc0e38273de1d69ed83fe12936fc09
     resources:
       requests:
         cpu: 1m

clusters/cl01tl/helm/foldergram/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.1
+  version: 5.0.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 3.3.1
+  version: 3.2.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
-digest: sha256:5637258c6907d062d327578a8b4f6a97112446f2f1ef2f1085e9317baba49310
-generated: "2026-05-18T02:02:50.886833918Z"
+digest: sha256:2ad0cb505a0ad6dcfcc34aa7ac3bf675669983caa71dfee3f3a0868dfd5917c8
+generated: "2026-05-08T20:53:44.939991-05:00"

clusters/cl01tl/helm/foldergram/Chart.yaml

@@ -18,14 +18,14 @@ dependencies:
   - name: app-template
     alias: foldergram
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.1
+    version: 5.0.0
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 3.3.1
+    version: 3.2.2
   - name: volsync-target
     alias: volsync-target-db
     version: 2.0.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://raw.githubusercontent.com/foldergram/foldergram/refs/heads/main/client/public/icon-512.png
 # renovate: datasource=github-releases depName=foldergram/foldergram
-appVersion: v1.2.0
+appVersion: v1.1.0

clusters/cl01tl/helm/foldergram/values.yaml

@@ -12,7 +12,7 @@ foldergram:
         main:
           image:
             repository: ghcr.io/foldergram/foldergram
-            tag: 1.2.0@sha256:325e7fcd257cbecaf29a8623cebcbf6f7935fe90454160adf0a43e0a0fcddb91
+            tag: 1.1.0@sha256:b08c7f30a15a3d3e4cf0877a5271cb76be6a36ab83751f040c115ccdb76b736a
           env:
             - name: IMAGE_DETAIL_SOURCE
               value: original

clusters/cl01tl/helm/freshrss/Chart.lock

@@ -1,15 +1,15 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.1
+  version: 5.0.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 3.3.1
+  version: 3.2.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.15.0
+  version: 7.12.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
-digest: sha256:84e460d3ab6bb300c80858d3261d8a8e4395e3e1d099b7aed4f9e8d68dca54ac
-generated: "2026-05-19T16:29:45.768206873Z"
+digest: sha256:1ad2ebba1ab013fb1eb7301517787ffd7841ed3e5b464da65283917bb9f18d94
+generated: "2026-05-08T20:53:48.242974-05:00"

clusters/cl01tl/helm/freshrss/Chart.yaml

@@ -19,13 +19,13 @@ dependencies:
   - name: app-template
     alias: freshrss
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.1
+    version: 5.0.0
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 3.3.1
+    version: 3.2.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.15.0
+    version: 7.12.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data
@@ -33,4 +33,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/freshrss.png
 # renovate: datasource=github-releases depName=FreshRSS/FreshRSS
-appVersion: 1.29.1
+appVersion: 1.29.0

clusters/cl01tl/helm/freshrss/values.yaml

@@ -8,7 +8,7 @@ freshrss:
         main:
           image:
             repository: freshrss/freshrss
-            tag: 1.29.1@sha256:ab6b363102ccdbc39f6a62db926f567c61a5289bf25ba460f1c34423d8cc1a4d
+            tag: 1.29.0@sha256:cca8988d05cd449e1c6c69405971b1e6fc2c2116ceeb45c9fa3fc33837997a75
           env:
             - name: PGID
               value: "568"

clusters/cl01tl/helm/garage/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.1
-digest: sha256:3f06ada15810597c2673ed3de9e9fdabf21a6d42273b736a15759c21b889024a
-generated: "2026-05-15T00:31:00.309678009Z"
+  version: 5.0.0
+digest: sha256:925129100b32d9daf71142dc3fc42914cc26d40581a523c574c81ec79e2a0fc6
+generated: "2026-05-07T20:44:57.951189479Z"

clusters/cl01tl/helm/garage/Chart.yaml

@@ -18,7 +18,7 @@ dependencies:
   - name: app-template
     alias: garage
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.1
+    version: 5.0.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/garage.png
 # renovate: datasource=docker depName=dxflrs/garage
 appVersion: v2.3.0

clusters/cl01tl/helm/gatus/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 1.5.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.15.0
+  version: 7.12.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
-digest: sha256:6e5cf76d66ca20457d663526d2922d200ce2e38223d564b0b6dfa6ef2179abe7
-generated: "2026-05-19T16:30:05.366292277Z"
+digest: sha256:25d95b64934fb0fe59914f82b752de38979929342c0a8dad1be77e4a1b2ed93f
+generated: "2026-05-08T20:53:54.376296-05:00"

clusters/cl01tl/helm/gatus/Chart.yaml

@@ -20,7 +20,7 @@ dependencies:
     version: 1.5.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.15.0
+    version: 7.12.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data
@@ -28,4 +28,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/gatus.png
 # renovate: datasource=github-releases depName=TwiN/gatus
-appVersion: v5.36.0
+appVersion: v5.35.0

clusters/cl01tl/helm/gatus/values.yaml

@@ -3,7 +3,7 @@ gatus:
     strategy: Recreate
   image:
     repository: ghcr.io/twin/gatus
-    tag: v5.36.0@sha256:c5f210d095fa78e6efaa20ffeb14803f2ba4f10615e16a6d12087697149617f0
+    tag: v5.35.0@sha256:21609f31be8c4e680ce3004b24276305666239c99aff58391503f3fb6142f39d
   annotations:
     reloader.stakater.com/auto: "true"
   gateway:
@@ -92,7 +92,6 @@ gatus:
         scopes: [openid]
     storage:
       type: postgres
-      caching: true
       path: "postgres://${POSTGRES_USER}:${POSTGRES_PASSWORD}@${POSTGRES_HOST}:${POSTGRES_PORT}/${POSTGRES_DB}?sslmode=disable"
     default-endpoint: &defaults
       group: core
@@ -258,6 +257,9 @@ gatus:
       - name: whodb
         url: https://whodb.alexlebens.net
         <<: *defaults
+      - name: vault
+        url: https://vault.alexlebens.net
+        <<: *defaults
       - name: openbao
         url: https://bao.alexlebens.net
         <<: *defaults

clusters/cl01tl/helm/generic-device-plugin/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: generic-device-plugin
   repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-  version: 0.21.6
-digest: sha256:a2cdefb5c528e5c7045ae3e3bc1ebd9932ef0333fe8d72905e8f3ec3731c9dea
-generated: "2026-05-19T15:06:32.886164281Z"
+  version: 0.21.3
+digest: sha256:2122d1fdfa7e596323caae612325eebbdb0337f6d2a290c3a0ce8f4c3fbbbbd5
+generated: "2026-05-13T00:11:06.857277817Z"

clusters/cl01tl/helm/generic-device-plugin/Chart.yaml

@@ -14,6 +14,6 @@ maintainers:
 dependencies:
   - name: generic-device-plugin
     repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
-    version: 0.21.6
+    version: 0.21.3
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 appVersion: 1.0.0

clusters/cl01tl/helm/gitea/Chart.lock

@@ -1,27 +1,27 @@
 dependencies:
 - name: gitea
   repository: https://dl.gitea.com/charts/
-  version: 12.6.0
+  version: 12.5.3
 - name: actions
   repository: https://dl.gitea.com/charts/
-  version: 0.1.1
+  version: 0.1.0
 - name: meilisearch
   repository: https://meilisearch.github.io/meilisearch-kubernetes
   version: 0.32.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 3.3.1
+  version: 3.2.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.15.0
+  version: 7.12.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.9.0
+  version: 0.8.0
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.9.0
+  version: 0.8.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
-digest: sha256:c6dbbe309deaa50180021a1bd54a16425591f7081c07165db22c971abfd86ee3
-generated: "2026-05-22T01:09:01.919731791Z"
+digest: sha256:9041a1e7404b01fa42825616a239d886aebcd753528b8b2868ef125e042c9dde
+generated: "2026-05-08T20:54:01.685912-05:00"

clusters/cl01tl/helm/gitea/Chart.yaml

@@ -26,29 +26,29 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: gitea
-    version: 12.6.0
+    version: 12.5.3
     repository: https://dl.gitea.com/charts/
   - name: actions
     alias: gitea-actions
     repository: https://dl.gitea.com/charts/
-    version: 0.1.1
+    version: 0.1.0
   - name: meilisearch
     version: 0.32.0
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 3.3.1
+    version: 3.2.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.15.0
+    version: 7.12.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey-gitea
-    version: 0.9.0
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey-renovate
-    version: 0.9.0
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-storage
@@ -56,4 +56,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/gitea.png
 # renovate: datasource=github-releases depName=go-gitea/gitea
-appVersion: 1.26.2
+appVersion: 1.26.0

clusters/cl01tl/helm/gitea/values.yaml

@@ -9,7 +9,7 @@ gitea:
       maxUnavailable: 1
   image:
     repository: gitea/gitea
-    tag: 1.26.2
+    tag: 1.25.5
   service:
     http:
       type: ClusterIP
@@ -190,11 +190,11 @@ gitea-actions:
               resources:
                 requests:
                   storage: 50Gi
-    runner:
+    actRunner:
       registry: docker.io
-      repository: gitea/runner
-      # renovate: datasource=docker depName=gitea/runner
-      tag: 1.0.6@sha256:ab581a3e1a260efa0521886ad8051f0e8c4ff1f1d52aa8ef0a2e3ad7465f8b74
+      repository: gitea/act_runner
+      # renovate: datasource=docker depName=gitea/act_runner
+      tag: 0.6.1@sha256:b5c35d6bdbb9bb25e531230bfc7cc663cb751406cbec90a2a891b85fea54de86
       extraVolumeMounts:
         - name: workspace-vol
           mountPath: /workspace
@@ -212,7 +212,7 @@ gitea-actions:
       registry: docker.io
       repository: docker
       # renovate: datasource=docker depName=docker
-      tag: 29.5.2-dind@sha256:6b9cd914eb9c6b342c040a49a27a5eb3804453bae6ecc90f7ff96133595a95e8
+      tag: 29.4.3-dind@sha256:685b91dca8eab7de1dce1c303dbb7a763e4082d6a60db10968adf3295fbd2495
       extraVolumeMounts:
         - name: docker-vol
           mountPath: /var/lib/docker
@@ -255,11 +255,7 @@ postgres-18-cluster:
   cluster:
     resources:
       requests:
-        memory: 2Gi
         cpu: 100m
-    postgresql:
-      parameters:
-        shared_buffers: 2GB
   recovery:
     method: objectStore
     objectStore:

clusters/cl01tl/helm/grafana-operator/Chart.lock

@@ -1,15 +1,15 @@
 dependencies:
 - name: grafana-operator
   repository: https://grafana.github.io/helm-charts
-  version: 5.23.0
+  version: 5.22.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.15.0
+  version: 7.12.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.9.0
+  version: 0.8.0
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.9.0
-digest: sha256:8e441f3d69aa8b4186265cd7b265d75f6faae8883fb4ecb8d23db2d61ec2a954
-generated: "2026-05-22T00:24:27.626131121Z"
+  version: 0.8.0
+digest: sha256:a8553690c0fa8cbb9b6707388c3bcc11f2f38314d6512b1b9b2467f862cca4d9
+generated: "2026-05-08T02:31:18.145858152Z"

clusters/cl01tl/helm/grafana-operator/Chart.yaml

@@ -16,20 +16,20 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: grafana-operator
-    version: 5.23.0
+    version: 5.22.2
     repository: https://grafana.github.io/helm-charts
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.15.0
+    version: 7.12.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey-unified-alerting
-    version: 0.9.0
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey-remote-cache
-    version: 0.9.0
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/grafana.png
 # renovate: datasource=github-releases depName=grafana/grafana-operator
-appVersion: v5.23.0
+appVersion: v5.22.2

clusters/cl01tl/helm/grafana-operator/templates/grafana-dashboard.yaml

@@ -591,6 +591,24 @@ spec:
   resyncPeriod: 6h
   url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/platform/rclone.json
 
+---
+apiVersion: grafana.integreatly.org/v1beta1
+kind: GrafanaDashboard
+metadata:
+  name: grafana-dashboard-vault
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: grafana-dashboard-vault
+    {{- include "custom.labels" . | nindent 4 }}
+spec:
+  instanceSelector:
+    matchLabels:
+      app: grafana-main
+  contentCacheDuration: 6h
+  folderUID: grafana-folder-platform
+  resyncPeriod: 6h
+  url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/platform/vault.json
+
 ---
 apiVersion: grafana.integreatly.org/v1beta1
 kind: GrafanaDashboard

clusters/cl01tl/helm/grafana-operator/values.yaml

@@ -3,7 +3,7 @@ grafana-operator:
     registry: ghcr.io
     repository: grafana/grafana-operator
     # renovate: datasource=docker depName=ghcr.io/grafana/grafana-operator
-    tag: v5.23.0@sha256:3abeaccdf54e9e02c2f4b6215be594c8f78b94a866961ada7f92b677bf33c9b4
+    tag: v5.22.2@sha256:d45fc24e8f43d83286d81625ee8d919d0fc88255a6500b63f68d7966a4f9e9af
   replicas: 2
   resources:
     requests:

clusters/cl01tl/helm/grimmory/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.1
+  version: 5.0.0
 - name: mariadb-cluster
   repository: https://helm.mariadb.com/mariadb-operator
   version: 26.3.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
-digest: sha256:4eba9af92ba90b1ee08c1a7cf60d37fdabbde58c8490c783e11fe55c1864847d
-generated: "2026-05-14T19:19:34.565874-05:00"
+digest: sha256:27ac7e85baa400d8bf3ae2d7fa84bef1cb4f240043b34b6b6316d8fe4bf88851
+generated: "2026-05-08T20:54:16.639097-05:00"

clusters/cl01tl/helm/grimmory/Chart.yaml

@@ -18,7 +18,7 @@ dependencies:
   - name: app-template
     alias: grimmory
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.1
+    version: 5.0.0
   - name: mariadb-cluster
     version: 26.3.0
     repository: https://helm.mariadb.com/mariadb-operator
@@ -28,4 +28,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/grimmory.png
 # renovate: datasource=github-releases depName=grimmory-tools/grimmory
-appVersion: v3.1.0
+appVersion: v3.0.3

clusters/cl01tl/helm/grimmory/values.yaml

@@ -12,7 +12,7 @@ grimmory:
         main:
           image:
             repository: ghcr.io/grimmory-tools/grimmory
-            tag: v3.1.0@sha256:c83dcb59975c9a680ecdf84d60e7e5c9b05200818bab8794f4d84a7e008a549a
+            tag: v3.0.3@sha256:a903a2b44c308bd1738b6f7cdb5a2e5a2a1ae23a092f30eb68581e2be1af50cd
           env:
             - name: TZ
               value: America/Chicago
@@ -37,37 +37,6 @@ grimmory:
             requests:
               cpu: 10m
               memory: 1Gi
-          probes:
-            liveness:
-              enabled: true
-              custom: true
-              spec:
-                httpGet:
-                  path: /api/v1/healthcheck
-                  port: 6060
-                failureThreshold: 5
-                periodSeconds: 10
-                timeoutSeconds: 5
-            readiness:
-              enabled: true
-              custom: true
-              spec:
-                httpGet:
-                  path: /api/v1/healthcheck
-                  port: 6060
-                failureThreshold: 5
-                periodSeconds: 10
-                timeoutSeconds: 5
-            startup:
-              enabled: true
-              custom: true
-              spec:
-                httpGet:
-                  path: /api/v1/healthcheck
-                  port: 6060
-                failureThreshold: 30
-                periodSeconds: 60
-                timeoutSeconds: 5
   service:
     main:
       controller: main

clusters/cl01tl/helm/harbor/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 1.19.0
 - name: postgres-cluster
   repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
-  version: 7.15.0
+  version: 7.12.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.9.0
-digest: sha256:3f12966ac47aa1912f222875b5dedce047de094768e43082aaa0b85f3c2a366d
-generated: "2026-05-21T20:07:47.472198246Z"
+  version: 0.8.0
+digest: sha256:4ef3c0544281466cf714f5c6410309d4e090463d7f9a5750cd954c520abb0a40
+generated: "2026-05-08T02:31:31.873945824Z"

clusters/cl01tl/helm/harbor/Chart.yaml

@@ -20,11 +20,11 @@ dependencies:
     repository: https://helm.goharbor.io
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.15.0
+    version: 7.12.1
     repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
   - name: valkey
     alias: valkey
-    version: 0.9.0
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/harbor.png
 # renovate: datasource=github-releases depName=goharbor/harbor

clusters/cl01tl/helm/home-assistant/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.1
+  version: 5.0.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
-digest: sha256:dcee661c9cf87129758d2ddc0b3f190ce97792a6fc440d1e377c0405c2737927
-generated: "2026-05-15T00:31:14.847026559Z"
+digest: sha256:89add90994b0d2fe2f54bd69d273fd3091f72171876f0e8c9d5921424a75eeb9
+generated: "2026-05-08T20:54:29.67904-05:00"

clusters/cl01tl/helm/home-assistant/Chart.yaml

@@ -17,11 +17,11 @@ dependencies:
   - name: app-template
     alias: home-assistant
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.1
+    version: 5.0.0
   - name: volsync-target
     alias: volsync-target-config
     version: 2.0.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/home-assistant.png
 # renovate: datasource=github-releases depName=home-assistant/core
-appVersion: 2026.5.4
+appVersion: 2026.5.1

clusters/cl01tl/helm/home-assistant/values.yaml

@@ -12,7 +12,7 @@ home-assistant:
         main:
           image:
             repository: ghcr.io/home-assistant/home-assistant
-            tag: 2026.5.4@sha256:ceb1202133a5a036e8b03e20a10eb113186cc2f871968323c6fc6c3fc4205716
+            tag: 2026.5.1@sha256:d4fbec16196d5c8bedf32647f0ca7165f654d92a2e81f35a373508d3226cb867
           env:
             - name: TZ
               value: America/Chicago
@@ -23,7 +23,7 @@ home-assistant:
         code-server:
           image:
             repository: ghcr.io/linuxserver/code-server
-            tag: 4.121.0-ls339@sha256:9aa515147487869f15421944069674ac9797ad4c0629041fd9a003f95b796d6c
+            tag: 4.118.0-ls336@sha256:6e542034343228a692e0b24f12cbcc8ade3650ec1e2c9e195bc291f2bf024e3c
           env:
             - name: TZ
               value: America/Chicago

clusters/cl01tl/helm/homepage/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.1
-digest: sha256:412193f3faa2c9f10bfeb9574cc34cf4fd0b15c67542afe26a8ba77e667e310e
-generated: "2026-05-15T00:31:25.50600653Z"
+  version: 5.0.0
+digest: sha256:81785552a943df54d09164776a170a007573e38ab96b00872bb22030079076e9
+generated: "2026-05-07T20:45:33.699577658Z"

clusters/cl01tl/helm/homepage/Chart.yaml

@@ -16,7 +16,7 @@ dependencies:
   - name: app-template
     alias: homepage
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.1
+    version: 5.0.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/homepage.png
 # renovate: datasource=github-releases depName=gethomepage/homepage
 appVersion: v1.13.1

clusters/cl01tl/helm/homepage/values.yaml

@@ -601,6 +601,18 @@ homepage:
                   href: https://whodb.alexlebens.net
                   siteMonitor: http://whodb.whodb:80
                   statusStyle: dot
+              - Secrets:
+                  icon: sh-hashicorp-vault.webp
+                  description: Vault
+                  href: https://vault.alexlebens.net
+                  siteMonitor: http://vault.vault:8200
+                  statusStyle: dot
+                  namespace: vault
+                  app: vault
+                  podSelector: >-
+                      app.kubernetes.io/instance in (
+                          vault
+                      )
               - Secrets:
                   icon: sh-openbao.webp
                   description: OpenBao

clusters/cl01tl/helm/houndarr/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.1
+  version: 5.0.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
-digest: sha256:0bbdd30b65e6074a608d257108e9e94c0906f729c237916777f299c14319520d
-generated: "2026-05-15T00:31:36.907874668Z"
+digest: sha256:9041fccd2b6c8370f137ee36fc304054966b82a675fea5dd78b0c58d8e36d739
+generated: "2026-05-08T21:41:40.774422-05:00"

clusters/cl01tl/helm/houndarr/Chart.yaml

@@ -18,7 +18,7 @@ dependencies:
   - name: app-template
     alias: houndarr
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.1
+    version: 5.0.0
   - name: volsync-target
     alias: volsync-target-data
     version: 2.0.0

clusters/cl01tl/helm/immich/Chart.lock

@@ -1,15 +1,15 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.1
+  version: 5.0.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.15.0
+  version: 7.12.1
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.9.0
+  version: 0.8.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
-digest: sha256:61c7ed165fd02bd41fc1703b3b213c68cdbae746576ffeedbec35725db4c7e76
-generated: "2026-05-21T20:08:09.249760256Z"
+digest: sha256:84d4796c8b111f9888e31181cc560604500ea4b9fd8749c9ad5bcf05e23c8ae8
+generated: "2026-05-08T21:41:44.198307-05:00"

clusters/cl01tl/helm/immich/Chart.yaml

@@ -18,14 +18,14 @@ dependencies:
   - name: app-template
     alias: immich
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.1
+    version: 5.0.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.15.0
+    version: 7.12.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
-    version: 0.9.0
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data

clusters/cl01tl/helm/immich/values.yaml

@@ -167,8 +167,10 @@ postgres-18-cluster:
   cluster:
     image:
       repository: ghcr.io/tensorchord/cloudnative-vectorchord
-      tag: 18.3-1.1.1
+      tag: 18.0-0.5.3
     postgresql:
+      parameters:
+        shared_buffers: 256MB
       shared_preload_libraries:
         - "vchord.so"
     initdb:

clusters/cl01tl/helm/isponsorblocktv/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.1
-digest: sha256:c633b45cb97c5270952a5bd9a13fd63b031af94d66e0a630a17a35da10706752
-generated: "2026-05-15T00:32:02.180685732Z"
+  version: 5.0.0
+digest: sha256:61c0d967c3f1f6e12fc8effa4add37ba7b307f680280f8e5ff2cb772cfc73213
+generated: "2026-05-07T20:46:03.870794632Z"

clusters/cl01tl/helm/isponsorblocktv/Chart.yaml

@@ -16,7 +16,7 @@ dependencies:
   - name: app-template
     alias: isponsorblocktv
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.1
+    version: 5.0.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/youtube.png
 # renovate: datasource=github-releases depName=dmunozv04/iSponsorBlockTV
 appVersion: v2.9.0

clusters/cl01tl/helm/jellyfin/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.1
+  version: 5.0.0
 - name: meilisearch
   repository: https://meilisearch.github.io/meilisearch-kubernetes
   version: 0.32.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
-digest: sha256:fee93a156e5896c3abbff3ba0182f3c5f78d4f0d358bcaee9b01cdcc061141e5
-generated: "2026-05-15T00:32:15.476837452Z"
+digest: sha256:1de3f59fa3ae926fa3a49f39d92f0b78f5eb7ebc6009e1dc397fb90b3eaa9e94
+generated: "2026-05-08T21:41:56.073291-05:00"

clusters/cl01tl/helm/jellyfin/Chart.yaml

@@ -20,7 +20,7 @@ dependencies:
   - name: app-template
     alias: jellyfin
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.1
+    version: 5.0.0
   - name: meilisearch
     version: 0.32.0
     repository: https://meilisearch.github.io/meilisearch-kubernetes
@@ -30,4 +30,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/jellyfin.png
 # renovate: datasource=github-releases depName=jellyfin/jellyfin
-appVersion: 10.11.9
+appVersion: 10.11.8

clusters/cl01tl/helm/jellyfin/values.yaml

@@ -22,7 +22,7 @@ jellyfin:
         main:
           image:
             repository: ghcr.io/jellyfin/jellyfin
-            tag: 10.11.9@sha256:ef4d95143a5475d1ba4d9a6983342cac300044d676a30648b7d0e0688961712a
+            tag: 10.11.8@sha256:93227545077893cc9516f28b3adb733b67bc4691f41b6167428a2a0e3220b81c
           env:
             - name: TZ
               value: America/Chicago

clusters/cl01tl/helm/jellystat/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.1
+  version: 5.0.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.15.0
+  version: 7.12.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
-digest: sha256:a2b85a4c82c14ebd8c5a1d2234eefe738ce762162b89f77760380b28500d395e
-generated: "2026-05-19T16:30:56.96102133Z"
+digest: sha256:516f2350d8782dd6507067995b2b86a5cc650998673a0e25379043ee76d43602
+generated: "2026-05-08T21:41:59.903493-05:00"

clusters/cl01tl/helm/jellystat/Chart.yaml

@@ -18,10 +18,10 @@ dependencies:
   - name: app-template
     alias: jellystat
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.1
+    version: 5.0.0
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.15.0
+    version: 7.12.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data

clusters/cl01tl/helm/karakeep/Chart.lock

@@ -1,21 +1,21 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.1
+  version: 5.0.0
 - name: meilisearch
   repository: https://meilisearch.github.io/meilisearch-kubernetes
   version: 0.32.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 3.3.1
+  version: 3.2.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.11.4
+  version: 0.11.3
 - name: rclone-bucket
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.11.4
-digest: sha256:3610dac0450402003fb81ee6b21167526b97ae90f4cb060649ed555d0003cb45
-generated: "2026-05-18T02:15:00.671974648Z"
+  version: 0.11.3
+digest: sha256:cab194bf12e80d3d14a3422588b8800ba0177084141e3ece25df5ed0197b8590
+generated: "2026-05-09T19:38:52.749584-05:00"

clusters/cl01tl/helm/karakeep/Chart.yaml

@@ -22,13 +22,13 @@ dependencies:
   - name: app-template
     alias: karakeep
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.1
+    version: 5.0.0
   - name: meilisearch
     version: 0.32.0
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 3.3.1
+    version: 3.2.2
   - name: volsync-target
     alias: volsync-target-data
     version: 2.0.0
@@ -36,11 +36,11 @@ dependencies:
   - name: rclone-bucket
     alias: rclone-karakeep-assets-remote
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.11.4
+    version: 0.11.3
   - name: rclone-bucket
     alias: rclone-karakeep-assets-external
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 0.11.4
+    version: 0.11.3
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/karakeep.png
 # renovate: datasource=github-releases depName=karakeep-app/karakeep
 appVersion: 0.32.0

clusters/cl01tl/helm/kiwix/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.1
-digest: sha256:15e432e23a64ced3377cf3b0af6c45ae07671b8649119460e9b477da509ba467
-generated: "2026-05-15T00:32:57.56080423Z"
+  version: 5.0.0
+digest: sha256:c2ea7bdfa94d5489a0ace86b807949d3cfb0d436ce49a78bcbde0c6f1798608b
+generated: "2026-05-07T20:46:50.166598682Z"

clusters/cl01tl/helm/kiwix/Chart.yaml

@@ -16,7 +16,7 @@ dependencies:
   - name: app-template
     alias: kiwix
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.1
+    version: 5.0.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kiwix-dark.png
 # renovate: datasource=github-releases depName=kiwix/kiwix-tools
 appVersion: 3.8.2

clusters/cl01tl/helm/komodo/Chart.lock

@@ -1,12 +1,12 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.1
+  version: 5.0.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.15.0
+  version: 7.12.1
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
-digest: sha256:31cc26b2ebd4c249165621445a389c136ecff8d1f95b88d8f0fe1631be395b4c
-generated: "2026-05-18T19:59:09.154172-05:00"
+digest: sha256:3f0db4bc60cd7ab4a44b4488d3cedb34f85dd40c91d9134345f06ecab711420a
+generated: "2026-05-08T21:42:12.202843-05:00"

clusters/cl01tl/helm/komodo/Chart.yaml

@@ -20,10 +20,10 @@ dependencies:
   - name: app-template
     alias: komodo
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.1
+    version: 5.0.0
   - name: postgres-cluster
     alias: postgresql-17-fdb-cluster
-    version: 7.15.0
+    version: 7.12.1
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-keys

clusters/cl01tl/helm/komodo/values.yaml

@@ -10,6 +10,8 @@ komodo:
             repository: ghcr.io/moghtech/komodo-core
             tag: 2.2.0@sha256:833880ca8b1a6c1c133efb07e8633525bf63094b4faa72700cf52f60fd69e6c6
           env:
+            - name: COMPOSE_LOGGING_DRIVER
+              value: local
             - name: KOMODO_HOST
               value: https://komodo.alexlebens.net
             - name: KOMODO_TITLE
@@ -20,13 +22,9 @@ komodo:
                   name: komodo-secret
                   key: passkey
             - name: KOMODO_MONITORING_INTERVAL
-              value: 5-min
+              value: 15-sec
             - name: KOMODO_RESOURCE_POLL_INTERVAL
-              value: 3-hr
-            - name: KOMODO_KEEP_STATS_FOR_DAYS
-              value: 3
-            - name: KOMODO_KEEP_ALERTS_FOR_DAYS
-              value: 3
+              value: 5-min
             - name: KOMODO_PASSKEY
               valueFrom:
                 secretKeyRef:
@@ -186,6 +184,9 @@ postgresql-17-fdb-cluster:
         documentdb.enableBypassDocumentValidation: "true"
         documentdb.enableUserCrud: "true"
         documentdb.maxUserLimit: "100"
+        shared_buffers: 128MB
+        max_slot_wal_keep_size: 2000MB
+        hot_standby_feedback: "on"
       pg_hba:
         - host ferretDB postgres localhost trust
         - host ferretDB ferret localhost trust

clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock

@@ -1,15 +1,15 @@
 dependencies:
 - name: kube-prometheus-stack
   repository: oci://ghcr.io/prometheus-community/charts
-  version: 85.2.2
+  version: 85.0.2
 - name: prometheus-operator-crds
   repository: oci://ghcr.io/prometheus-community/charts
   version: 29.0.0
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.1
+  version: 5.0.0
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.9.0
-digest: sha256:1778799905ce3862ad26eecd89ab337fcbf5b8c56e878d67c2a3c464c23c8f63
-generated: "2026-05-22T18:21:37.821260669Z"
+  version: 0.8.0
+digest: sha256:8ac7065eceeff40ab6da60d8abd939031cc3e4677c0cfa353cd11a3e1bac25b6
+generated: "2026-05-12T18:05:16.45686921Z"

clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml

@@ -20,7 +20,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: kube-prometheus-stack
-    version: 85.2.2
+    version: 85.0.2
     repository: oci://ghcr.io/prometheus-community/charts
   - name: prometheus-operator-crds
     version: 29.0.0
@@ -28,10 +28,10 @@ dependencies:
   - name: app-template
     alias: ntfy-alertmanager
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.1
+    version: 5.0.0
   - name: valkey
     alias: valkey
-    version: 0.9.0
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/prometheus.png
 # renovate: datasource=github-releases depName=prometheus-operator/prometheus-operator

clusters/cl01tl/helm/kubelet-serving-cert-approver/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.1
-digest: sha256:d962a798e93d69ea99f415eb9a353f6ed41ed77c2af14dc59bfdb4eb3d8d18f6
-generated: "2026-05-15T00:33:37.399905668Z"
+  version: 5.0.0
+digest: sha256:f646d2de1a56914cc1b94a661a869e7f89579f0000bbc79078801b757925931a
+generated: "2026-05-07T20:47:20.425067929Z"

clusters/cl01tl/helm/kubelet-serving-cert-approver/Chart.yaml

@@ -16,7 +16,7 @@ dependencies:
   - name: app-template
     alias: kubelet-serving-cert-approver
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.1
+    version: 5.0.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 # renovate: datasource=github-releases depName=alex1989hu/kubelet-serving-cert-approver
-appVersion: 0.11.0
+appVersion: 0.10.3

clusters/cl01tl/helm/kubelet-serving-cert-approver/values.yaml

@@ -35,7 +35,7 @@ kubelet-serving-cert-approver:
         main:
           image:
             repository: ghcr.io/alex1989hu/kubelet-serving-cert-approver
-            tag: 0.11.0@sha256:f17017b53983fe93f5a07ef85b2e448b9e4be848d45f05c325c8f2c77e1171c4
+            tag: 0.10.3@sha256:4cdc92140c48341433513dce3201806309d5256cfbac6f830feae1e7e9fb0d7d
           args:
             - serve
           env:

clusters/cl01tl/helm/kubernetes-cloudflare-ddns/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.1
-digest: sha256:48698bdd1dba4bf04b0a7fe69ba28529f33128f6d66166f7cd0c0708cd3ae40d
-generated: "2026-05-15T00:33:49.779808282Z"
+  version: 5.0.0
+digest: sha256:f79a24fbe6769992af0f7c5034713b564f91208497da193265fbce5aac8fb637
+generated: "2026-05-07T20:47:30.731469034Z"

clusters/cl01tl/helm/kubernetes-cloudflare-ddns/Chart.yaml

@@ -17,7 +17,7 @@ dependencies:
   - name: app-template
     alias: kubernetes-cloudflare-ddns
     repository: https://bjw-s-labs.github.io/helm-charts/
-    version: 5.0.1
+    version: 5.0.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/cloudflare.png
 # renovate: datasource=github-releases depName=kubitodev/kubernetes-cloudflare-ddns
 appVersion: v2.0.0

clusters/cl01tl/helm/languagetool/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
-  version: 5.0.1
+  version: 5.0.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 2.0.0
-digest: sha256:fc651ba34251df7395f4fe02d9c6836394dfc04266b318bdcca6b0cc56e6afd7
-generated: "2026-05-15T00:34:02.627214605Z"
+digest: sha256:05112ce6f2fc6ab5ae80412fdb18ff9f91a94be564870098c7ad037e3a12196b
+generated: "2026-05-08T21:42:27.127012-05:00"