1 Commits

Author SHA1 Message Date
8134aff230 chore(deps): update dependency binwiederhier/ntfy to v2.17.0
All checks were successful
lint-test-helm / lint-helm (pull_request) Successful in 17s
2026-02-09 22:48:55 +00:00
60 changed files with 135 additions and 610 deletions

View File

@@ -4,7 +4,6 @@ argo-cd:
configs:
cm:
admin.enabled: true
accounts.homepage: apiKey
timeout.reconciliation: 100s
timeout.reconciliation.jitter: 60s
url: https://argocd.alexlebens.net
@@ -30,7 +29,6 @@ argo-cd:
rbac:
policy.csv: |
g, ArgoCD Admins, role:admin
g, homepage, role:readonly
controller:
replicas: 1
metrics:

View File

@@ -1,7 +1,7 @@
dependencies:
- name: authentik
repository: https://charts.goauthentik.io/
version: 2025.12.4
version: 2025.12.3
- name: cloudflared
repository: oci://harbor.alexlebens.net/helm-charts
version: 2.3.0
@@ -11,5 +11,5 @@ dependencies:
- name: redis-replication
repository: oci://harbor.alexlebens.net/helm-charts
version: 1.0.4
digest: sha256:6a491f698eefa7ffdf87c8468dc34c0445a854325ad4483a70f543baf20eab4f
generated: "2026-02-12T21:02:34.17798029Z"
digest: sha256:0ddd9eef110b22a07e2d7baee3b9ae4bd6ce6dafc89b72a38cfc254594a629d0
generated: "2026-02-07T02:27:46.31096754Z"

View File

@@ -21,7 +21,7 @@ maintainers:
- name: alexlebens
dependencies:
- name: authentik
version: 2025.12.4
version: 2025.12.3
repository: https://charts.goauthentik.io/
- name: cloudflared
repository: oci://harbor.alexlebens.net/helm-charts

View File

@@ -15,7 +15,7 @@ bazarr:
main:
image:
repository: ghcr.io/linuxserver/bazarr
tag: 1.5.5@sha256:18ff732dffcebd559d15a91845fc3360d49652ea01dccfbfd98b8248ceb86e38
tag: 1.5.5@sha256:d40ee61030a9afafddfdd58d160281b865bfcad7cb66e920116fd6fd40668cbb
pullPolicy: IfNotPresent
env:
- name: TZ

View File

@@ -112,7 +112,6 @@ blocky:
booklore IN CNAME traefik-cl01tl
ceph IN CNAME traefik-cl01tl
code-server IN CNAME traefik-cl01tl
directus IN CNAME traefik-cl01tl
excalidraw IN CNAME traefik-cl01tl
feishin IN CNAME traefik-cl01tl
garage-s3 IN CNAME traefik-cl01tl

View File

@@ -0,0 +1,18 @@
# apiVersion: "cilium.io/v2alpha1"
# kind: CiliumL2AnnouncementPolicy
# metadata:
# name: node-gateway-l2-policy
# namespace: {{ .Release.Namespace }}
# labels:
# app.kubernetes.io/name: node-gateway-l2-policy
# app.kubernetes.io/instance: {{ .Release.Name }}
# app.kubernetes.io/part-of: {{ .Release.Name }}
# spec:
# nodeSelector:
# matchLabels:
# kubernetes.io/hostname: talos-ix7-xku
# interfaces:
# - end0
# - enp6s0
# externalIPs: true
# loadBalancerIPs: true

View File

@@ -11,6 +11,8 @@ spec:
blocks:
- start: "10.232.1.21"
stop: "10.232.1.23"
- start: "10.232.2.21"
stop: "10.232.2.23"
---
apiVersion: cilium.io/v2

View File

@@ -9,6 +9,7 @@
# app.kubernetes.io/part-of: {{ .Release.Name }}
# annotations:
# cert-manager.io/cluster-issuer: letsencrypt-issuer
# io.cilium/lb-ipam-ips: "10.232.1.23"
# spec:
# addresses:
# - type: IPAddress

View File

@@ -38,6 +38,7 @@ cilium:
bpf:
hostLegacyRouting: true
devices: end0 enp6s0
enableK8sEndpointSlice: true
ciliumEndpointSlice:
enabled: true
ingressController:
@@ -46,8 +47,6 @@ cilium:
enabled: true
enableAlpn: true
enableAppProtocol: true
gatewayClass:
create: auto
externalIPs:
enabled: true
socketLB:

View File

@@ -21,6 +21,9 @@ dependencies:
alias: directus
repository: https://bjw-s-labs.github.io/helm-charts/
version: 4.6.2
- name: cloudflared
repository: oci://harbor.alexlebens.net/helm-charts
version: 2.3.0
- name: postgres-cluster
alias: postgres-18-cluster
version: 7.5.1

View File

@@ -13,7 +13,7 @@ directus:
pullPolicy: IfNotPresent
env:
- name: PUBLIC_URL
value: https://directus.alexlebens.net
value: https://directus.alexlebens.dev
- name: WEBSOCKETS_ENABLED
value: true
- name: ADMIN_EMAIL
@@ -125,7 +125,7 @@ directus:
- name: AUTH_AUTHENTIK_SCOPE
value: openid profile email
- name: AUTH_AUTHENTIK_ISSUER_URL
value: https://authentik.alexlebens.net/application/o/directus/.well-known/openid-configuration
value: https://auth.alexlebens.dev/application/o/directus/.well-known/openid-configuration
- name: AUTH_AUTHENTIK_IDENTIFIER_KEY
value: email
- name: AUTH_AUTHENTIK_ALLOW_PUBLIC_REGISTRATION
@@ -168,27 +168,6 @@ directus:
bearerTokenSecret:
name: directus-metric-token
key: metric-token
route:
main:
kind: HTTPRoute
parentRefs:
- group: gateway.networking.k8s.io
kind: Gateway
name: traefik-gateway
namespace: traefik
hostnames:
- directus.alexlebens.net
rules:
- backendRefs:
- group: ''
kind: Service
name: directus
port: 80
weight: 100
matches:
- path:
type: PathPrefix
value: /
postgres-18-cluster:
mode: recovery
recovery:

View File

@@ -24,4 +24,4 @@ dependencies:
version: 2.3.0
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/element.png
# renovate: datasource=github-releases depName=element-hq/element-web
appVersion: v1.12.10
appVersion: v1.12.9

View File

@@ -2,7 +2,7 @@ element-web:
replicaCount: 1
image:
repository: vectorim/element-web
tag: v1.12.10
tag: v1.12.9
pullPolicy: IfNotPresent
defaultServer:
url: https://matrix.alexlebens.dev

View File

@@ -1,12 +1,12 @@
dependencies:
- name: gatus
repository: https://twin.github.io/helm-charts
version: 1.5.0
version: 1.4.5
- name: postgres-cluster
repository: oci://harbor.alexlebens.net/helm-charts
version: 7.5.1
- name: volsync-target
repository: oci://harbor.alexlebens.net/helm-charts
version: 0.7.0
digest: sha256:327091258e0174bea1932e66b0a1a7b54b475365cf23fe776b37ac446ae3c7e9
generated: "2026-02-10T21:50:24.906374-06:00"
digest: sha256:e170966054efa7ed147520c17421e32ab2c951d5b8ab9d3625e019373114d64a
generated: "2026-02-07T02:28:21.222846345Z"

View File

@@ -19,7 +19,7 @@ maintainers:
dependencies:
- name: gatus
repository: https://twin.github.io/helm-charts
version: 1.5.0
version: 1.4.5
- name: postgres-cluster
alias: postgres-18-cluster
version: 7.5.1

View File

@@ -0,0 +1,28 @@
apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
name: gatus
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: gatus
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec:
parentRefs:
- group: gateway.networking.k8s.io
kind: Gateway
name: traefik-gateway
namespace: traefik
hostnames:
- gatus.alexlebens.net
rules:
- matches:
- path:
type: PathPrefix
value: /
backendRefs:
- group: ''
kind: Service
name: gatus
port: 80
weight: 100

View File

@@ -17,18 +17,6 @@ gatus:
portName: http
ingress:
enabled: false
gateway:
apiVersion: gateway.networking.k8s.io/v1
route:
enabled: true
path: /
parentRefs:
- group: gateway.networking.k8s.io
kind: Gateway
name: traefik-gateway
namespace: traefik
hosts:
- gatus.alexlebens.net
env:
NTFY_TOKEN:
valueFrom:
@@ -164,9 +152,6 @@ gatus:
- name: booklore
url: https://booklore.alexlebens.net
<<: *defaults
- name: directus
url: https://directus.alexlebens.net
<<: *defaults
- name: home-assistant
url: https://home-assistant.alexlebens.net
<<: *defaults
@@ -341,8 +326,8 @@ gatus:
url: https://www.alexlebens.dev
<<: *defaults
group: external
- name: rybbit
url: https://rybbit.alexlebens.dev
- name: directus
url: https://directus.alexlebens.dev
<<: *defaults
group: external
- name: postiz

View File

@@ -18,4 +18,4 @@ dependencies:
repository: https://kubernetes-sigs.github.io/headlamp/
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/headlamp.png
# renovate: datasource=github-releases depName=headlamp-k8s/headlamp
appVersion: v0.40.1
appVersion: v0.40.0

View File

@@ -12,41 +12,6 @@ spec:
kind: ClusterSecretStore
name: vault
data:
- secretKey: HOMEPAGE_VAR_GITEA_API_TOKEN
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/gitea/auth/homepage
metadataPolicy: None
property: token
- secretKey: HOMEPAGE_VAR_ARGOCD_API_TOKEN
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/argocd/credentials/homepage
metadataPolicy: None
property: token
- secretKey: HOMEPAGE_VAR_KOMODO_API_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/komodo/homepage
metadataPolicy: None
property: key
- secretKey: HOMEPAGE_VAR_KOMODO_API_SECRET
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/komodo/homepage
metadataPolicy: None
property: secret
- secretKey: HOMEPAGE_VAR_JELLYSTAT_API_KEY
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/jellystat/homepage
metadataPolicy: None
property: key
- secretKey: HOMEPAGE_VAR_SYNOLOGY_USER
remoteRef:
conversionStrategy: Default
@@ -61,13 +26,20 @@ spec:
key: /synology/auth/cl01tl
metadataPolicy: None
property: password
- secretKey: HOMEPAGE_VAR_UNIFI_API_KEY
- secretKey: HOMEPAGE_VAR_UNIFI_USER
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /unifi/auth/cl01tl
metadataPolicy: None
property: api-key
property: user
- secretKey: HOMEPAGE_VAR_UNIFI_PASSWORD
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /unifi/auth/cl01tl
metadataPolicy: None
property: password
- secretKey: HOMEPAGE_VAR_SONARR_KEY
remoteRef:
conversionStrategy: Default

View File

@@ -206,14 +206,8 @@ homepage:
- Content Management:
icon: directus.png
description: Directus
href: https://directus.alexlebens.net
siteMonitor: http://directus.directus:80
statusStyle: dot
- Analytics:
icon: sh-rybbit-light.webp
description: Rybbit
href: https://rybbit.alexlebens.dev
siteMonitor: http://rybbit-client.rybbit:80
href: https://directus.alexlebens.dev
siteMonitor: https://directus.alexlebens.dev
statusStyle: dot
- Social Media Management:
icon: sh-postiz.webp
@@ -307,16 +301,6 @@ homepage:
href: https://gitea.alexlebens.dev
siteMonitor: https://gitea.alexlebens.dev
statusStyle: dot
namespace: gitea
app: gitea
podSelector: >-
app.kubernetes.io/instance in (
gitea
)
widget:
type: gitea
url: http://gitea-http.gitea:3000
key: {{ "{{HOMEPAGE_VAR_GITEA_API_TOKEN}}" }}
- Code (Local):
icon: sh-gitea.webp
description: Gitea
@@ -341,37 +325,19 @@ homepage:
href: https://home-assistant-code-server.alexlebens.net
siteMonitor: http://home-assistant-code-server.home-assistant:8443
statusStyle: dot
- Automation:
- Continuous Deployment:
icon: sh-argo-cd.webp
description: ArgoCD
href: https://argocd.alexlebens.net
siteMonitor: http://argocd-server.argocd:80
statusStyle: dot
namespace: argocd
app: argocd
podSelector: >-
app.kubernetes.io/instance in (
argocd
)
widget:
type: argocd
url: http://argocd-server.argocd:80
key: {{ "{{HOMEPAGE_VAR_ARGOCD_API_TOKEN}}" }}
fields: ["outOfSync", "progressing", "suspended", "degraded"]
- Docker Deployment:
icon: sh-komodo-light.webp
description: Komodo
href: https://komodo.alexlebens.net
siteMonitor: http://komodo-main.komodo:80
statusStyle: dot
widget:
type: komodo
url: http://komodo-main.komodo:80
key: {{ "{{HOMEPAGE_VAR_KOMODO_API_KEY}}" }}
secret: {{ "{{HOMEPAGE_VAR_KOMODO_API_SECRET}}" }}
showStacks: true
fields: ["running", "down", "unhealthy", "unknown"]
- Automation:
- Deployment Workflows:
icon: sh-argo-cd.webp
description: Argo Workflows
@@ -397,36 +363,24 @@ homepage:
href: https://headlamp.alexlebens.net
siteMonitor: http://headlamp.headlamp:80
statusStyle: dot
- Dashboard:
icon: sh-grafana.webp
description: Grafana
href: https://grafana.alexlebens.net
siteMonitor: http://grafana-main-service.grafana-operator:3000/api/health
statusStyle: dot
- Network Monitoring:
icon: sh-cilium.webp
description: Hubble for Cilium
href: https://hubble.alexlebens.net
siteMonitor: http://hubble-ui.kube-system:80
statusStyle: dot
namespace: kube-system
app: cilium-operator
podSelector: >-
app.kubernetes.io/part-of in (
cilium
)
- Dashboard:
icon: sh-grafana.webp
description: Grafana
href: https://grafana.alexlebens.net
siteMonitor: http://grafana-main-service.grafana-operator:3000/api/health
statusStyle: dot
- Metrics:
icon: sh-prometheus.webp
description: Prometheus
href: https://prometheus.alexlebens.net
siteMonitor: http://kube-prometheus-stack-prometheus.kube-prometheus-stack:9090
statusStyle: dot
namespace: kube-prometheus-stack
app: prometheus
podSelector: >-
app.kubernetes.io/instance in (
kube-prometheus-stack
)
widget:
type: prometheus
url: http://kube-prometheus-stack-prometheus.kube-prometheus-stack:9090
@@ -500,11 +454,6 @@ homepage:
href: https://unifi.alexlebens.net
siteMonitor: https://unifi.alexlebens.net
statusStyle: dot
widget:
type: unifi
url: https://unifi.alexlebens.net
key: {{ "{{HOMEPAGE_VAR_UNIFI_API_KEY}}" }}
fields: ["uptime", "wan", "lan_devices", "wlan_devices"]
- Network Attached Storage:
icon: sh-synology-light.webp
description: Synology
@@ -577,9 +526,6 @@ homepage:
href: https://backrest.alexlebens.net
siteMonitor: http://backrest.backrest:80
statusStyle: dot
widget:
type: backrest
url: http://backrest.backrest:80
- Content:
- qUI:
icon: https://raw.githubusercontent.com/autobrr/qui/8487c818886df9abb2b1456f43b54e0ba180a2bd/web/public/icons.svg

View File

@@ -23,4 +23,4 @@ dependencies:
repository: oci://harbor.alexlebens.net/helm-charts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/huntarr.png
# renovate: datasource=github-releases depName=plexguide/huntarr
appVersion: 9.2.4
appVersion: 9.2.3

View File

@@ -9,7 +9,7 @@ huntarr:
main:
image:
repository: ghcr.io/plexguide/huntarr
tag: 9.2.4
tag: 9.2.3
pullPolicy: IfNotPresent
env:
- name: TZ

View File

@@ -31,4 +31,4 @@ dependencies:
repository: oci://harbor.alexlebens.net/helm-charts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/immich.png
# renovate: datasource=github-releases depName=immich-app/immich
appVersion: v2.5.6
appVersion: v2.5.5

View File

@@ -9,7 +9,7 @@ immich:
main:
image:
repository: ghcr.io/immich-app/immich-server
tag: v2.5.6
tag: v2.5.5
pullPolicy: IfNotPresent
env:
- name: TZ

View File

@@ -1,12 +1,12 @@
dependencies:
- name: kube-prometheus-stack
repository: oci://ghcr.io/prometheus-community/charts
version: 81.6.3
version: 81.5.0
- name: app-template
repository: https://bjw-s-labs.github.io/helm-charts/
version: 4.6.2
- name: redis-replication
repository: oci://harbor.alexlebens.net/helm-charts
version: 1.0.4
digest: sha256:81381261982252c9cf795dca982d25b905346f733d40178b37cc434847cd3490
generated: "2026-02-12T21:03:09.101291141Z"
digest: sha256:62ceeea1ed2f1f3a838e468665c3f291cb67ac547f3fa37863131f088736a750
generated: "2026-02-03T20:37:14.907439914Z"

View File

@@ -20,7 +20,7 @@ maintainers:
- name: alexlebens
dependencies:
- name: kube-prometheus-stack
version: 81.6.3
version: 81.5.0
repository: oci://ghcr.io/prometheus-community/charts
- name: app-template
alias: ntfy-alertmanager

View File

@@ -15,7 +15,7 @@ lidarr:
main:
image:
repository: ghcr.io/linuxserver/lidarr
tag: 3.1.2-nightly@sha256:bcad2fdb95a60cf3e634a37ec833a54f8dc5346fe9e8d8963b44ba35bb78c9cd
tag: 3.1.2-nightly@sha256:adc776c4deb0b36909472a8d22ce00306b4a37f0d584407d846efd59060279ac
pullPolicy: IfNotPresent
env:
- name: TZ

View File

@@ -1,9 +1,9 @@
dependencies:
- name: loki
repository: https://grafana.github.io/helm-charts
version: 6.53.0
version: 6.52.0
- name: alloy
repository: https://grafana.github.io/helm-charts
version: 1.6.0
digest: sha256:a65f68b2e68defa63d15cf84317ba45a770b5b9cbb5bebc6fed219cefed99b69
generated: "2026-02-10T19:12:00.80383488Z"
digest: sha256:097f893b362b3ba6a1498d6df00dc57030c4d1321cf3301268adb9e30d5043ed
generated: "2026-02-05T22:01:50.699662067Z"

View File

@@ -16,7 +16,7 @@ maintainers:
- name: alexlebens
dependencies:
- name: loki
version: 6.53.0
version: 6.52.0
repository: https://grafana.github.io/helm-charts
- name: alloy
version: 1.6.0

View File

@@ -81,4 +81,4 @@ dependencies:
repository: oci://harbor.alexlebens.net/helm-charts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/matrix.png
# renovate: datasource=github-releases depName=element-hq/synapse
appVersion: v1.147.1
appVersion: 1.146.0

View File

@@ -9,7 +9,7 @@ navidrome:
main:
image:
repository: deluan/navidrome
tag: 0.60.3@sha256:a5dce8f33304714dd138e870cca0dcab3d937ca236be1a9f2b97da009d1a0048
tag: 0.60.2@sha256:1b3f9556fc4f70cb1c2d3995543e734bdc90c762c9c6ee9a7c5f6a9745efbc3e
pullPolicy: IfNotPresent
env:
- name: ND_MUSICFOLDER

View File

@@ -31,4 +31,4 @@ dependencies:
repository: oci://harbor.alexlebens.net/helm-charts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ollama.png
# renovate: datasource=github-releases depName=ollama/ollama
appVersion: 0.16.0
appVersion: 0.15.6

View File

@@ -22,7 +22,7 @@ ollama:
main:
image:
repository: ollama/ollama
tag: 0.16.0
tag: 0.15.6
pullPolicy: IfNotPresent
env:
- name: OLLAMA_KEEP_ALIVE
@@ -58,7 +58,7 @@ ollama:
main:
image:
repository: ollama/ollama
tag: 0.16.0
tag: 0.15.6
pullPolicy: IfNotPresent
env:
- name: OLLAMA_KEEP_ALIVE
@@ -94,7 +94,7 @@ ollama:
main:
image:
repository: ollama/ollama
tag: 0.16.0
tag: 0.15.6
pullPolicy: IfNotPresent
env:
- name: OLLAMA_KEEP_ALIVE
@@ -117,7 +117,7 @@ ollama:
main:
image:
repository: ghcr.io/open-webui/open-webui
tag: v0.8.0
tag: 0.7.2
pullPolicy: IfNotPresent
env:
- name: ENV

View File

@@ -9,7 +9,7 @@ plex:
main:
image:
repository: ghcr.io/linuxserver/plex
tag: 1.43.0@sha256:bbe0118e39e2c071fc5fe39af3f32072207bf4146d56b6a8901bcb23082df207
tag: 1.43.0@sha256:66c6a46ec3dc244aea20508b49dce4b46291c2fd2dba8851117e675d1c5dd52d
pullPolicy: IfNotPresent
env:
- name: TZ

View File

@@ -41,4 +41,4 @@ dependencies:
repository: oci://harbor.alexlebens.net/helm-charts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/postiz.png
# renovate: datasource=github-releases depName=gitroomhq/postiz-app
appVersion: v2.17.0
appVersion: v2.15.0

View File

@@ -9,7 +9,7 @@ postiz:
main:
image:
repository: ghcr.io/gitroomhq/postiz-app
tag: v2.17.0
tag: v2.15.0
pullPolicy: IfNotPresent
env:
- name: MAIN_URL

View File

@@ -20,7 +20,7 @@ prowlarr:
main:
image:
repository: ghcr.io/linuxserver/prowlarr
tag: 2.3.0@sha256:e74a1e093dcc223d671d4b7061e2b4946f1989a4d3059654ff4e623b731c9134
tag: 2.3.0@sha256:5339e9050cfcc0cb5331e9c98610ed9d4ce70ef481a5461ea664a13dda3f1eb0
pullPolicy: IfNotPresent
env:
- name: TZ

View File

@@ -48,7 +48,7 @@ qbittorrent:
gluetun:
image:
repository: ghcr.io/qdm12/gluetun
tag: v3.41.1@sha256:1a5bf4b4820a879cdf8d93d7ef0d2d963af56670c9ebff8981860b6804ebc8ab
tag: v3.41.0@sha256:6b54856716d0de56e5bb00a77029b0adea57284cf5a466f23aad5979257d3045
pullPolicy: IfNotPresent
lifecycle:
postStart:

View File

@@ -9,7 +9,7 @@ roundcube:
main:
image:
repository: roundcube/roundcubemail
tag: 1.6.13-fpm-alpine
tag: 1.6.12-fpm-alpine
pullPolicy: IfNotPresent
env:
- name: ROUNDCUBEMAIL_DB_TYPE
@@ -85,7 +85,7 @@ roundcube:
backup:
image:
repository: roundcube/roundcubemail
tag: 1.6.13-fpm-alpine
tag: 1.6.12-fpm-alpine
pullPolicy: IfNotPresent
env:
- name: ROUNDCUBEMAIL_DB_TYPE

View File

@@ -1,15 +0,0 @@
dependencies:
- name: app-template
repository: https://bjw-s-labs.github.io/helm-charts/
version: 4.6.2
- name: cloudflared
repository: oci://harbor.alexlebens.net/helm-charts
version: 2.3.0
- name: postgres-cluster
repository: oci://harbor.alexlebens.net/helm-charts
version: 7.6.0
- name: volsync-target
repository: oci://harbor.alexlebens.net/helm-charts
version: 0.7.0
digest: sha256:57e8ad153b6ef3f02c647b5996307869c0ba620b726ae8eafdf13680d7ad4a48
generated: "2026-02-13T12:46:23.518948-06:00"

View File

@@ -1,34 +0,0 @@
apiVersion: v2
name: rybbit
version: 1.0.0
description: Rybbit
keywords:
- rybbit
- analytics
home: https://wiki.alexlebens.dev/s/
sources:
- https://github.com/rybbit-io/rybbit
- https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
- https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/cloudflared
- https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/postgres-cluster
maintainers:
- name: alexlebens
dependencies:
- name: app-template
alias: rybbit
repository: https://bjw-s-labs.github.io/helm-charts/
version: 4.6.2
- name: cloudflared
repository: oci://harbor.alexlebens.net/helm-charts
version: 2.3.0
- name: postgres-cluster
alias: postgres-18-cluster
version: 7.6.0
repository: oci://harbor.alexlebens.net/helm-charts
- name: volsync-target
alias: volsync-target-config
version: 0.7.0
repository: oci://harbor.alexlebens.net/helm-charts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/rybbit.webp
# renovate: datasource=github-releases depName=rybbit-io/rybbit
appVersion: v2.4.0

View File

@@ -1,42 +0,0 @@
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: rybbit-config-secret
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: rybbit-config-secret
app.kubernetes.io/instance: {{ .Release.Name }}
app.kubernetes.io/part-of: {{ .Release.Name }}
spec:
secretStoreRef:
kind: ClusterSecretStore
name: vault
data:
- secretKey: clickhouse-user
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/rybbit/clickhouse
metadataPolicy: None
property: user
- secretKey: clickhouse-password
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/rybbit/clickhouse
metadataPolicy: None
property: password
- secretKey: better-auth-secret
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/rybbit/auth
metadataPolicy: None
property: better-auth-secret
- secretKey: mapbox-token
remoteRef:
conversionStrategy: Default
decodingStrategy: None
key: /cl01tl/rybbit/auth
metadataPolicy: None
property: mapbox-token

View File

@@ -1,312 +0,0 @@
rybbit:
controllers:
backend:
type: deployment
replicas: 1
strategy: Recreate
revisionHistoryLimit: 3
containers:
main:
image:
repository: ghcr.io/rybbit-io/rybbit-backend
tag: v2.4.0
pullPolicy: IfNotPresent
env:
- name: NODE_ENV
value: production
- name: CLICKHOUSE_HOST
value: http://rybbit-clickhouse.rybbit:8123
- name: CLICKHOUSE_DB
value: analytics
- name: CLICKHOUSE_USER
valueFrom:
secretKeyRef:
name: rybbit-config-secret
key: clickhouse-user
- name: CLICKHOUSE_PASSWORD
valueFrom:
secretKeyRef:
name: rybbit-config-secret
key: clickhouse-password
- name: POSTGRES_HOST
valueFrom:
secretKeyRef:
name: rybbit-postgresql-18-cluster-app
key: host
- name: POSTGRES_PORT
valueFrom:
secretKeyRef:
name: rybbit-postgresql-18-cluster-app
key: port
- name: POSTGRES_DB
valueFrom:
secretKeyRef:
name: rybbit-postgresql-18-cluster-app
key: dbname
- name: POSTGRES_USER
valueFrom:
secretKeyRef:
name: rybbit-postgresql-18-cluster-app
key: user
- name: POSTGRES_PASSWORD
valueFrom:
secretKeyRef:
name: rybbit-postgresql-18-cluster-app
key: password
- name: BETTER_AUTH_SECRET
valueFrom:
secretKeyRef:
name: rybbit-config-secret
key: better-auth-secret
- name: BASE_URL
value: https://rybbit.alexlebens.dev
- name: DISABLE_SIGNUP
value: false
- name: DISABLE_TELEMETRY
value: true
- name: MAPBOX_TOKEN
valueFrom:
secretKeyRef:
name: rybbit-config-secret
key: mapbox-token
probes:
liveness:
enabled: true
custom: true
spec:
exec:
command:
- CMD
- wget
- --no-verbose
- --tries=1
- --spider
- http://127.0.0.1:3001/api/health
failureThreshold: 5
initialDelaySeconds: 10
periodSeconds: 30
successThreshold: 1
timeoutSeconds: 5
resources:
requests:
cpu: 10m
memory: 256Mi
client:
type: deployment
replicas: 1
strategy: Recreate
revisionHistoryLimit: 3
containers:
main:
image:
repository: ghcr.io/rybbit-io/rybbit-client
tag: v2.4.0
pullPolicy: IfNotPresent
env:
- name: NODE_ENV
value: production
- name: NEXT_PUBLIC_BACKEND_URL
value: https://rybbit.alexlebens.dev
- name: NEXT_PUBLIC_DISABLE_SIGNUP
value: false
resources:
requests:
cpu: 10m
memory: 256Mi
clickhouse:
type: deployment
replicas: 1
strategy: Recreate
revisionHistoryLimit: 3
containers:
main:
image:
repository: clickhouse/clickhouse-server
tag: 26.1.2
pullPolicy: IfNotPresent
env:
- name: CLICKHOUSE_DB
value: analytics
- name: CLICKHOUSE_USER
valueFrom:
secretKeyRef:
name: rybbit-config-secret
key: clickhouse-user
- name: CLICKHOUSE_PASSWORD
valueFrom:
secretKeyRef:
name: rybbit-config-secret
key: clickhouse-password
probes:
liveness:
enabled: true
custom: true
spec:
exec:
command:
- CMD
- wget
- --no-verbose
- --tries=1
- --spider
- http://localhost:8123/ping
failureThreshold: 5
initialDelaySeconds: 10
periodSeconds: 30
successThreshold: 1
timeoutSeconds: 5
resources:
requests:
cpu: 10m
memory: 256Mi
configMaps:
config:
enabled: true
forceRename: clickhouse-config
data:
network.xml: |
<clickhouse>
<listen_host>0.0.0.0</listen_host>
</clickhouse>
enable_json.xml: |
<clickhouse>
<settings>
<enable_json_type>1</enable_json_type>
</settings>
</clickhouse>
logging_rules.xml: |
<clickhouse>
<logger>
<level>warning</level>
<console>true</console>
</logger>
<query_thread_log remove="remove"/>
<query_log remove="remove"/>
<text_log remove="remove"/>
<trace_log remove="remove"/>
<metric_log remove="remove"/>
<asynchronous_metric_log remove="remove"/>
<session_log remove="remove"/>
<part_log remove="remove"/>
<latency_log remove="remove"/>
<processors_profile_log remove="remove"/>
</clickhouse>
user_logging.xml: |
<clickhouse>
<profiles>
<default>
<log_queries>0</log_queries>
<log_query_threads>0</log_query_threads>
<log_processors_profiles>0</log_processors_profiles>
</default>
</profiles>
</clickhouse>
service:
backend:
controller: backend
ports:
http:
port: 3001
targetPort: 3001
protocol: HTTP
client:
controller: client
ports:
http:
port: 80
targetPort: 3002
protocol: TCP
clickhouse:
controller: clickhouse
ports:
http:
port: 8123
targetPort: 8123
protocol: TCP
persistence:
clickhouse:
forceRename: clickhouse-data
storageClass: ceph-block
accessMode: ReadWriteOnce
size: 10Gi
retain: true
advancedMounts:
clickhouse:
main:
- path: /var/lib/clickhouse
readOnly: false
clickhouse-config:
enabled: true
type: configMap
name: clickhouse-config
advancedMounts:
clickhouse:
main:
- path: /etc/clickhouse-server/config.d/network.xml
readOnly: true
mountPropagation: None
subPath: network.xml
- path: /etc/clickhouse-server/config.d/enable_json.xml
readOnly: true
mountPropagation: None
subPath: enable_json.xml
- path: /etc/clickhouse-server/config.d/logging_rules.xml
readOnly: true
mountPropagation: None
subPath: logging_rules.xml
- path: /etc/clickhouse-server/config.d/user_logging.xml
readOnly: true
mountPropagation: None
subPath: user_logging.xml
postgres-18-cluster:
mode: standalone
recovery:
method: objectStore
objectStore:
index: 1
backup:
objectStore:
- name: garage-local
index: 1
destinationBucket: postgres-backups
externalSecretCredentialPath: /garage/home-infra/postgres-backups
isWALArchiver: true
# - name: garage-remote
# index: 1
# destinationBucket: postgres-backups
# externalSecretCredentialPath: /garage/home-infra/postgres-backups
# retentionPolicy: "90d"
# data:
# compression: bzip2
# - name: external
# index: 1
# endpointURL: https://nyc3.digitaloceanspaces.com
# destinationBucket: postgres-backups-ce540ddf106d186bbddca68a
# externalSecretCredentialPath: /garage/home-infra/postgres-backups
# isWALArchiver: false
scheduledBackups:
- name: live-backup
suspend: true
immediate: true
schedule: "0 0 0 * * *"
backupName: garage-local
# - name: weekly-backup
# suspend: true
# immediate: true
# schedule: "0 0 4 * * SAT"
# backupName: garage-remote
# - name: daily-backup
# suspend: true
# immediate: true
# schedule: "0 0 0 * * *"
# backupName: external
volsync-target-clickhouse-data:
pvcTarget: clickhouse-data
local:
enabled: false
schedule: 38 11 * * *
remote:
enabled: false
external:
enabled: false
schedule: 38 12 * * *

View File

@@ -9,7 +9,7 @@ searxng:
main:
image:
repository: searxng/searxng
tag: latest@sha256:4d3e9dbb1cabe0fb77b831f55350f81fe3eb46ad5e3147c0a8169189fb5380c0
tag: latest@sha256:670bd1076097640fc25221bf92a8af7d344503ce17ba3305abedf28e3634e807
pullPolicy: IfNotPresent
env:
- name: SEARXNG_BASE_URL
@@ -39,7 +39,7 @@ searxng:
main:
image:
repository: searxng/searxng
tag: latest@sha256:4d3e9dbb1cabe0fb77b831f55350f81fe3eb46ad5e3147c0a8169189fb5380c0
tag: latest@sha256:670bd1076097640fc25221bf92a8af7d344503ce17ba3305abedf28e3634e807
pullPolicy: IfNotPresent
env:
- name: SEARXNG_BASE_URL

View File

@@ -11,7 +11,7 @@ site-documentation:
main:
image:
repository: harbor.alexlebens.net/images/site-documentation
tag: 0.1.2
tag: 0.1.0
pullPolicy: IfNotPresent
resources:
requests:

View File

@@ -11,7 +11,7 @@ site-profile:
main:
image:
repository: harbor.alexlebens.net/images/site-profile
tag: 2.7.0
tag: 2.4.0
pullPolicy: IfNotPresent
resources:
requests:

View File

@@ -46,7 +46,7 @@ slskd:
gluetun:
image:
repository: ghcr.io/qdm12/gluetun
tag: v3.41.1@sha256:1a5bf4b4820a879cdf8d93d7ef0d2d963af56670c9ebff8981860b6804ebc8ab
tag: v3.41.0@sha256:6b54856716d0de56e5bb00a77029b0adea57284cf5a466f23aad5979257d3045
pullPolicy: IfNotPresent
lifecycle:
postStart:
@@ -122,7 +122,7 @@ slskd:
main:
image:
repository: mrusse08/soularr
tag: latest@sha256:c02aec4a14b5ee228af21aaf7c94c181f45db8298057f1919688faa9c56c4387
tag: latest@sha256:c1cfc6425c1cc141f5f99744611eeb1af32c85258df5e2a4974d7dbf6db76840
pullPolicy: IfNotPresent
env:
- name: TZ

View File

@@ -19,4 +19,4 @@ dependencies:
repository: https://piraeus.io/helm-charts/
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
# renovate: datasource=github-releases depName=kubernetes-csi/external-snapshotter
appVersion: v8.5.0
appVersion: v8.4.0

View File

@@ -6,7 +6,7 @@ snapshot-controller:
leaderElectionNamespace: snapshot-controller
image:
repository: registry.k8s.io/sig-storage/snapshot-controller
tag: v8.5.0
tag: v8.4.0
resources:
requests:
cpu: 50m

View File

@@ -86,7 +86,7 @@ spotisub:
gluetun:
image:
repository: ghcr.io/qdm12/gluetun
tag: v3.41.1@sha256:1a5bf4b4820a879cdf8d93d7ef0d2d963af56670c9ebff8981860b6804ebc8ab
tag: v3.41.0@sha256:6b54856716d0de56e5bb00a77029b0adea57284cf5a466f23aad5979257d3045
pullPolicy: IfNotPresent
lifecycle:
postStart:

View File

@@ -69,7 +69,7 @@ etcd-backup:
s3-prune:
image:
repository: d3fk/s3cmd
tag: latest@sha256:45908a3d51489bb914c040b136f6075bdaca53ff76dd4b37f951a7efe18a7289
tag: latest@sha256:e78ca093c593ff719b11bd42a8e640d0d9dd381bd6a9d579ed8ac8d31319a335
pullPolicy: IfNotPresent
command:
- /bin/sh
@@ -155,7 +155,7 @@ etcd-backup:
s3-prune:
image:
repository: d3fk/s3cmd
tag: latest@sha256:45908a3d51489bb914c040b136f6075bdaca53ff76dd4b37f951a7efe18a7289
tag: latest@sha256:e78ca093c593ff719b11bd42a8e640d0d9dd381bd6a9d579ed8ac8d31319a335
pullPolicy: IfNotPresent
command:
- /bin/sh
@@ -241,7 +241,7 @@ etcd-backup:
s3-prune:
image:
repository: d3fk/s3cmd
tag: latest@sha256:45908a3d51489bb914c040b136f6075bdaca53ff76dd4b37f951a7efe18a7289
tag: latest@sha256:e78ca093c593ff719b11bd42a8e640d0d9dd381bd6a9d579ed8ac8d31319a335
pullPolicy: IfNotPresent
command:
- /bin/sh

View File

@@ -22,4 +22,4 @@ dependencies:
repository: https://traefik.github.io/charts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/webp/traefik.webp
# renovate: datasource=github-releases depName=traefik/traefik
appVersion: v3.6.8
appVersion: v3.6.7

View File

@@ -45,7 +45,7 @@ tubearchivist:
gluetun:
image:
repository: ghcr.io/qdm12/gluetun
tag: v3.41.1@sha256:1a5bf4b4820a879cdf8d93d7ef0d2d963af56670c9ebff8981860b6804ebc8ab
tag: v3.41.0@sha256:6b54856716d0de56e5bb00a77029b0adea57284cf5a466f23aad5979257d3045
pullPolicy: IfNotPresent
lifecycle:
postStart:

View File

@@ -187,7 +187,7 @@ snapshot:
s3-backup-local:
image:
repository: d3fk/s3cmd
tag: latest@sha256:45908a3d51489bb914c040b136f6075bdaca53ff76dd4b37f951a7efe18a7289
tag: latest@sha256:e78ca093c593ff719b11bd42a8e640d0d9dd381bd6a9d579ed8ac8d31319a335
pullPolicy: IfNotPresent
command:
- /bin/sh
@@ -208,7 +208,7 @@ snapshot:
s3-backup-remote:
image:
repository: d3fk/s3cmd
tag: latest@sha256:45908a3d51489bb914c040b136f6075bdaca53ff76dd4b37f951a7efe18a7289
tag: latest@sha256:e78ca093c593ff719b11bd42a8e640d0d9dd381bd6a9d579ed8ac8d31319a335
pullPolicy: IfNotPresent
command:
- /bin/sh
@@ -229,7 +229,7 @@ snapshot:
s3-backup-external:
image:
repository: d3fk/s3cmd
tag: latest@sha256:45908a3d51489bb914c040b136f6075bdaca53ff76dd4b37f951a7efe18a7289
tag: latest@sha256:e78ca093c593ff719b11bd42a8e640d0d9dd381bd6a9d579ed8ac8d31319a335
pullPolicy: IfNotPresent
command:
- /bin/sh

View File

@@ -35,4 +35,4 @@ dependencies:
repository: oci://harbor.alexlebens.net/helm-charts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/vaultwarden.png
# renovate: datasource=github-releases depName=dani-garcia/vaultwarden
appVersion: 1.35.3
appVersion: 1.35.2

View File

@@ -9,7 +9,7 @@ vaultwarden:
main:
image:
repository: vaultwarden/server
tag: 1.35.3
tag: 1.35.2
pullPolicy: IfNotPresent
env:
- name: DOMAIN

View File

@@ -20,4 +20,4 @@ dependencies:
version: 4.6.2
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/whodb.png
# renovate: datasource=github-releases depName=clidey/whodb
appVersion: 0.92.0
appVersion: 0.91.0

View File

@@ -8,7 +8,7 @@ whodb:
main:
image:
repository: clidey/whodb
tag: 0.92.0
tag: 0.91.0
pullPolicy: IfNotPresent
env:
- name: WHODB_OLLAMA_HOST

View File

@@ -87,7 +87,6 @@ customDNS:
booklore IN CNAME traefik-cl01tl
ceph IN CNAME traefik-cl01tl
code-server IN CNAME traefik-cl01tl
directus IN CNAME traefik-cl01tl
excalidraw IN CNAME traefik-cl01tl
feishin IN CNAME traefik-cl01tl
garage-s3 IN CNAME traefik-cl01tl

View File

@@ -108,7 +108,6 @@ customDNS:
booklore IN CNAME traefik-cl01tl
ceph IN CNAME traefik-cl01tl
code-server IN CNAME traefik-cl01tl
directus IN CNAME traefik-cl01tl
excalidraw IN CNAME traefik-cl01tl
feishin IN CNAME traefik-cl01tl
garage-s3 IN CNAME traefik-cl01tl