chore(deps): update rmcrackan/libation to v13.1.8

clusters/cl01tl/helm/argo-workflows/Chart.lock

@@ -7,6 +7,6 @@ dependencies:
   version: 2.4.20
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.5.1
-digest: sha256:d634e2aba7e8ba644eac9b5cff7f959090a755e69c041c15889e4ba1ba8d04f0
-generated: "2026-02-07T02:27:32.331360382Z"
+  version: 7.5.0
+digest: sha256:156c07cae82be20f03a17b8f2a4a188679830ce1430711da812c4aed626c17b4
+generated: "2026-02-02T23:56:58.434603097Z"

clusters/cl01tl/helm/argo-workflows/Chart.yaml

@@ -25,8 +25,8 @@ dependencies:
     repository: https://argoproj.github.io/argo-helm
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.5.1
+    version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 # renovate: datasource=github-releases depName=argoproj/argo-workflows
-appVersion: v4.0.0
+appVersion: v3.7.9

clusters/cl01tl/helm/argocd/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: argo-cd
   repository: https://argoproj.github.io/argo-helm
-  version: 9.4.1
-digest: sha256:6686031538b67a4b79a89b90de06199758c4718a9b7e0a0e6863a5be8964ed9d
-generated: "2026-02-05T20:06:46.998124019Z"
+  version: 9.4.0
+digest: sha256:9313d45f1c8c22f25b445b10c3befde61bc7d6e3d9c7f49d857c0abf641b1636
+generated: "2026-02-02T23:52:13.741194572Z"

clusters/cl01tl/helm/argocd/Chart.yaml

@@ -15,7 +15,7 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: argo-cd
-    version: 9.4.1
+    version: 9.4.0
     repository: https://argoproj.github.io/argo-helm
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
 # renovate: datasource=github-releases depName=argoproj/argo-cd

clusters/cl01tl/helm/authentik/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 2025.12.3
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.3.0
+  version: 2.2.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.5.1
+  version: 7.5.0
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.4
-digest: sha256:0ddd9eef110b22a07e2d7baee3b9ae4bd6ce6dafc89b72a38cfc254594a629d0
-generated: "2026-02-07T02:27:46.31096754Z"
+  version: 1.0.2
+digest: sha256:b0b8ed80dc7dcabb07c445ed8269e58c8b35188f755bea743bad9e86998fa336
+generated: "2026-02-03T03:41:17.375019694Z"

clusters/cl01tl/helm/authentik/Chart.yaml

@@ -25,13 +25,13 @@ dependencies:
     repository: https://charts.goauthentik.io/
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.3.0
+    version: 2.2.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.5.1
+    version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
-    version: 1.0.4
+    version: 1.0.2
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/authentik.png
 # renovate: datasource=github-releases depName=goauthentik/authentik

clusters/cl01tl/helm/bazarr/values.yaml

@@ -15,7 +15,7 @@ bazarr:
         main:
           image:
             repository: ghcr.io/linuxserver/bazarr
-            tag: 1.5.5@sha256:d40ee61030a9afafddfdd58d160281b865bfcad7cb66e920116fd6fd40668cbb
+            tag: 1.5.5@sha256:f01f718d73be5b468da1ba03e6740c5584769df9d3fedef9f4a3c7eaf90c243f
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/blocky/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.6.2
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.4
-digest: sha256:fe577fe52ae34540b1610c598f149eab49e44c640ed717cea5ad8fdf229e37f2
-generated: "2026-02-03T20:35:43.744062575Z"
+  version: 1.0.2
+digest: sha256:ab1e10670350a6014a2a838800f39f6bb869e1def78347c1e5c4ab1624acf33b
+generated: "2026-02-03T00:23:54.901383454Z"

clusters/cl01tl/helm/blocky/Chart.yaml

@@ -18,7 +18,7 @@ dependencies:
     repository: https://bjw-s-labs.github.io/helm-charts/
     version: 4.6.2
   - name: redis-replication
-    version: 1.0.4
+    version: 1.0.2
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/blocky.png
 # renovate: datasource=github-releases depName=0xerr0r/blocky

clusters/cl01tl/helm/blocky/values.yaml

@@ -157,14 +157,13 @@ blocky:
               sonarr                          IN      CNAME   traefik-cl01tl
               sonarr-4k                       IN      CNAME   traefik-cl01tl
               sonarr-anime                    IN      CNAME   traefik-cl01tl
-              spotisub                        IN      CNAME   traefik-cl01tl
               stalwart                        IN      CNAME   traefik-cl01tl
               tdarr                           IN      CNAME   traefik-cl01tl
               tubearchivist                   IN      CNAME   traefik-cl01tl
               vault                           IN      CNAME   traefik-cl01tl
               whodb                           IN      CNAME   traefik-cl01tl
               yamtrack                        IN      CNAME   traefik-cl01tl
-              yubal                           IN      CNAME   traefik-cl01tl
+              yubal-playlist                  IN      CNAME   traefik-cl01tl
 
           blocking:
             denylists:

clusters/cl01tl/helm/cilium/Chart.lock

@@ -3,4 +3,4 @@ dependencies:
   repository: https://helm.cilium.io/
   version: 1.18.6
 digest: sha256:8ea328ac238524b5b423e6289f5e25d05ef64e6aa19cfd5de238f1d5dd533e9b
-generated: "2026-02-05T12:00:20.15778-06:00"
+generated: "2026-01-14T11:02:31.272963463Z"

clusters/cl01tl/helm/cilium/Chart.yaml

@@ -19,4 +19,4 @@ dependencies:
     repository: https://helm.cilium.io/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/cilium.png
 # renovate: datasource=github-releases depName=cilium/cilium
-appVersion: 1.19.0
+appVersion: 1.18.6

clusters/cl01tl/helm/cilium/templates/cilium-bgp-advertisement.yaml

@@ -1,4 +1,4 @@
-# apiVersion: cilium.io/v2
+# apiVersion: cilium.io/v2alpha1
 # kind: CiliumBGPAdvertisement
 # metadata:
 #   name: cilium-bgp-advertisements

clusters/cl01tl/helm/cilium/templates/cilium-bgp-cluster-config.yaml

@@ -1,4 +1,4 @@
-# apiVersion: cilium.io/v2
+# apiVersion: cilium.io/v2alpha1
 # kind: CiliumBGPClusterConfig
 # metadata:
 #   name: cilium-bgp

clusters/cl01tl/helm/cilium/templates/cilium-bgp-peer-config.yaml

@@ -1,4 +1,4 @@
-# apiVersion: cilium.io/v2
+# apiVersion: cilium.io/v2alpha1
 # kind: CiliumBGPPeerConfig
 # metadata:
 #   name: cilium-peer

clusters/cl01tl/helm/cilium/templates/cilium-l2-announcement-policy.yaml

@@ -1,16 +1,17 @@
 # apiVersion: "cilium.io/v2alpha1"
 # kind: CiliumL2AnnouncementPolicy
 # metadata:
-#   name: node-gateway-l2-policy
+#   name: general-l2-policy
 #   namespace: {{ .Release.Namespace }}
 #   labels:
-#     app.kubernetes.io/name: node-gateway-l2-policy
+#     app.kubernetes.io/name: general-l2-policy
 #     app.kubernetes.io/instance: {{ .Release.Name }}
 #     app.kubernetes.io/part-of: {{ .Release.Name }}
 # spec:
 #   nodeSelector:
-#     matchLabels:
-#       kubernetes.io/hostname: talos-ix7-xku
+#     matchExpressions:
+#       - key: kubernetes.io/hostname
+#         operator: Exists
 #   interfaces:
 #     - end0
 #     - enp6s0

clusters/cl01tl/helm/cilium/templates/cilium-load-balancer-ip-pool.yaml

@@ -1,4 +1,4 @@
-apiVersion: cilium.io/v2
+apiVersion: "cilium.io/v2alpha1"
 kind: CiliumLoadBalancerIPPool
 metadata:
   name: default-ip-pool
@@ -15,7 +15,7 @@ spec:
       stop: "10.232.2.23"
 
 ---
-apiVersion: cilium.io/v2
+apiVersion: "cilium.io/v2alpha1"
 kind: CiliumLoadBalancerIPPool
 metadata:
   name: bgp-ip-pool

clusters/cl01tl/helm/cilium/templates/gateway.yaml

@@ -4,22 +4,25 @@
 #   name: cilium-tls-gateway
 #   namespace: {{ .Release.Namespace }}
 #   labels:
-#     app.kubernetes.io/name: cilium-tls-gateway
+#     app.kubernetes.io/name: tls-gateway
 #     app.kubernetes.io/instance: {{ .Release.Name }}
 #     app.kubernetes.io/part-of: {{ .Release.Name }}
 #   annotations:
 #     cert-manager.io/cluster-issuer: letsencrypt-issuer
-#     io.cilium/lb-ipam-ips: "10.232.1.23"
 # spec:
-#   addresses:
-#     - type: IPAddress
-#       value: 10.232.1.23
 #   gatewayClassName: cilium
 #   listeners:
 #     - allowedRoutes:
 #         namespaces:
 #           from: All
 #       hostname: '*.alexlebens.net'
+#       name: http
+#       port: 80
+#       protocol: HTTP
+#     - allowedRoutes:
+#         namespaces:
+#           from: All
+#       hostname: '*.alexlebens.net'
 #       name: https
 #       port: 443
 #       protocol: HTTPS
@@ -30,17 +33,3 @@
 #             name: https-gateway-cert
 #             namespace: kube-system
 #         mode: Terminate
-#     - allowedRoutes:
-#         namespaces:
-#           from: All
-#       hostname: 'alexlebens.net'
-#       name: https-domain
-#       port: 443
-#       protocol: HTTPS
-#       tls:
-#         certificateRefs:
-#           - group: ''
-#             kind: Secret
-#             name: https-gateway-cert
-#             namespace: kube-system
-#         mode: Terminate

clusters/cl01tl/helm/cilium/values.yaml

@@ -35,8 +35,6 @@ cilium:
       enabled: true
     routerIDAllocation:
       mode: "default"
-  bpf:
-    hostLegacyRouting: true
   devices: end0 enp6s0
   enableK8sEndpointSlice: true
   ciliumEndpointSlice:

clusters/cl01tl/helm/cloudnative-pg/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: cloudnative-pg
   repository: https://cloudnative-pg.io/charts/
-  version: 0.27.1
+  version: 0.27.0
 - name: plugin-barman-cloud
   repository: https://cloudnative-pg.io/charts/
-  version: 0.5.0
-digest: sha256:e7089ffd089cae87529e28f0e71302b9fc4a869b389cbb6628f1c559644a3a10
-generated: "2026-02-05T19:36:19.473447121Z"
+  version: 0.4.0
+digest: sha256:5e2a32fa5ed8b180ae5e556d65c67eeb3dcf38e2974b0d668eff4ee3c83258ce
+generated: "2025-12-30T21:01:48.755246408Z"

clusters/cl01tl/helm/cloudnative-pg/Chart.yaml

@@ -16,11 +16,11 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: cloudnative-pg
-    version: 0.27.1
+    version: 0.27.0
     repository: https://cloudnative-pg.io/charts/
   - name: plugin-barman-cloud
-    version: 0.5.0
+    version: 0.4.0
     repository: https://cloudnative-pg.io/charts/
 icon: https://avatars.githubusercontent.com/u/100373852?s=200&v=4
 # renovate: datasource=github-releases depName=cloudnative-pg/cloudnative-pg
-appVersion: 1.28.1
+appVersion: 1.28.0

clusters/cl01tl/helm/code-server/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.3.0
+  version: 2.2.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:a170a0695881a7eed9bc2b0fc8b7f7bce18919e9bea0c5342a35e5a1a5ffa406
-generated: "2026-02-07T00:36:52.387080745Z"
+digest: sha256:185da5d4998267b90e6d2ece537b9550d800d1cca0217cac808a88f63f9fec29
+generated: "2026-02-03T03:41:32.224062229Z"

clusters/cl01tl/helm/code-server/Chart.yaml

@@ -22,7 +22,7 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.3.0
+    version: 2.2.2
   - name: volsync-target
     alias: volsync-target-config
     version: 0.7.0

clusters/cl01tl/helm/code-server/values.yaml

@@ -9,7 +9,7 @@ code-server:
         main:
           image:
             repository: ghcr.io/linuxserver/code-server
-            tag: 4.108.2@sha256:280ce0bfa4ab49fa5d252e4e2cbffd0dc5f461902e17fa2734d4f493460f84b0
+            tag: 4.108.2@sha256:a59301fe97af3d9bf9150ce53e5c7b12486f2803eea0446a38f8d545ac877c9a
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/directus/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.3.0
+  version: 2.2.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.5.1
+  version: 7.5.0
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.4
-digest: sha256:ff9c3684242fa6ce85051e3ab15cd482ad721dbb589853545e8db184644e47b8
-generated: "2026-02-07T02:27:57.805810517Z"
+  version: 1.0.2
+digest: sha256:3ac3d20d801f61a20f709cb1dcaadf7d50fc7bea5ea8d129a44ff68a1a75d9f9
+generated: "2026-02-03T03:41:46.123281909Z"

clusters/cl01tl/helm/directus/Chart.yaml

@@ -23,14 +23,14 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.3.0
+    version: 2.2.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.5.1
+    version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
-    version: 1.0.4
+    version: 1.0.2
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/directus.png
 # renovate: datasource=github-releases depName=directus/directus
-appVersion: 11.15.1
+appVersion: 11.14.1

clusters/cl01tl/helm/directus/values.yaml

@@ -9,7 +9,7 @@ directus:
         main:
           image:
             repository: directus/directus
-            tag: 11.15.1
+            tag: 11.14.1
             pullPolicy: IfNotPresent
           env:
             - name: PUBLIC_URL

clusters/cl01tl/helm/element-web/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 1.4.29
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.3.0
-digest: sha256:8596c403427f8ba2f257ed45bb2604c4de0da72dfb03d44d1b0e96f6576c3920
-generated: "2026-02-07T00:37:18.77202934Z"
+  version: 2.2.2
+digest: sha256:a27e895a7c19b296ca63888511d865b9623020824a1ea9c39dafa5433e9e83f4
+generated: "2026-02-03T03:42:00.780507134Z"

clusters/cl01tl/helm/element-web/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     repository: https://ananace.gitlab.io/charts
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.3.0
+    version: 2.2.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/element.png
 # renovate: datasource=github-releases depName=element-hq/element-web
 appVersion: v1.12.9

clusters/cl01tl/helm/external-secrets/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: external-secrets
   repository: https://charts.external-secrets.io
-  version: 2.0.0
-digest: sha256:3833a9f099d80f50e8a7c9874138b9eba42c18fe5f5f5dc605031f7c44bd3971
-generated: "2026-02-06T15:40:39.917039721Z"
+  version: 1.3.1
+digest: sha256:3b10d4cfe0d38cba02fa79a0d7aed6611faeb68408f4ebb05099280a5f585883
+generated: "2026-01-23T20:01:34.461022413Z"

clusters/cl01tl/helm/external-secrets/Chart.yaml

@@ -12,8 +12,8 @@ sources:
   - https://github.com/external-secrets/external-secrets/tree/main/deploy/charts/external-secrets
 dependencies:
   - name: external-secrets
-    version: 2.0.0
+    version: 1.3.1
     repository: https://charts.external-secrets.io
 icon: https://avatars.githubusercontent.com/u/68335991?s=48&v=4
 # renovate: datasource=github-releases depName=external-secrets/external-secrets
-appVersion: v2.0.0
+appVersion: v1.3.1

clusters/cl01tl/helm/freshrss/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.3.0
+  version: 2.2.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.5.1
+  version: 7.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:d3129463df789e53981fc7e57b5574d6eba00a44f4b9f906efacf563d70b36f3
-generated: "2026-02-07T02:28:08.830228688Z"
+digest: sha256:85e8205ab05be520984cb7c08109aedd9020229b2e7ef22da7b82534cd5d8242
+generated: "2026-02-03T03:42:15.595589094Z"

clusters/cl01tl/helm/freshrss/Chart.yaml

@@ -23,10 +23,10 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.3.0
+    version: 2.2.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.5.1
+    version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data

clusters/cl01tl/helm/freshrss/values.yaml

@@ -88,7 +88,7 @@ freshrss:
             - name: PUID
               value: "568"
             - name: TZ
-              value: America/Chicago
+              value: US/Central
             - name: FRESHRSS_ENV
               value: production
             - name: CRON_MIN
@@ -201,7 +201,7 @@ postgres-18-cluster:
   backup:
     objectStore:
       - name: garage-local
-        index: 2
+        index: 1
         destinationBucket: postgres-backups
         externalSecretCredentialPath: /garage/home-infra/postgres-backups
         isWALArchiver: true

clusters/cl01tl/helm/gatus/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 1.4.5
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.5.1
+  version: 7.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:e170966054efa7ed147520c17421e32ab2c951d5b8ab9d3625e019373114d64a
-generated: "2026-02-07T02:28:21.222846345Z"
+digest: sha256:869bee8ae57a4c920ae6495a5fc90feabcbee12647cc7b9beb8b368823ffdbf1
+generated: "2026-01-23T00:36:25.773527504Z"

clusters/cl01tl/helm/gatus/Chart.yaml

@@ -22,7 +22,7 @@ dependencies:
     version: 1.4.5
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.5.1
+    version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data

clusters/cl01tl/helm/gatus/values.yaml

@@ -310,11 +310,8 @@ gatus:
       - name: lidarr
         url: https://lidarr.alexlebens.net
         <<: *defaults
-      - name: spotisub
-        url: https://spotisub.alexlebens.net
-        <<: *defaults
-      - name: yubal
-        url: https://yubal.alexlebens.net
+      - name: yubal-playlist
+        url: https://yubal-playlist.alexlebens.net
         <<: *defaults
       - name: slskd
         url: https://slskd.alexlebens.net
@@ -369,6 +366,10 @@ gatus:
         url: https://auth.alexlebens.dev
         <<: *defaults
         group: external
+      - name: public homepage
+        url: https://home.alexlebens.dev
+        <<: *defaults
+        group: external
 postgres-18-cluster:
   mode: recovery
   recovery:

clusters/cl01tl/helm/gitea/Chart.lock

@@ -10,18 +10,18 @@ dependencies:
   version: 0.25.1
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.3.0
+  version: 2.2.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.5.1
+  version: 7.5.0
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.4
+  version: 1.0.2
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.4
+  version: 1.0.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:0b376cdddc09bf3346d7c9789452a0bfe6af630faf3b005e75426f5a3635ef1f
-generated: "2026-02-07T02:28:33.614969361Z"
+digest: sha256:8712a9b694dbf13c2092886525bb72eeaff2998ea8e560cd86c4ae6e058baa55
+generated: "2026-02-03T18:05:25.841402746Z"

clusters/cl01tl/helm/gitea/Chart.yaml

@@ -36,18 +36,18 @@ dependencies:
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.3.0
+    version: 2.2.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.5.1
+    version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     alias: redis-replication-gitea
-    version: 1.0.4
+    version: 1.0.2
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     alias: redis-replication-renovate
-    version: 1.0.4
+    version: 1.0.2
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-storage

clusters/cl01tl/helm/grafana-operator/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 5.21.4
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.5.1
+  version: 7.5.0
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.4
+  version: 1.0.2
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.4
-digest: sha256:5775ad67f466afd5e7bf986826e5385b4127c65bf81ed885df4690ffb8bd2876
-generated: "2026-02-07T02:28:49.454143056Z"
+  version: 1.0.2
+digest: sha256:a7a3239061f26f5c0e26a4b293ab5d00f18e56601f5c23ae502dd502804d964f
+generated: "2026-02-03T00:24:53.179103964Z"

clusters/cl01tl/helm/grafana-operator/Chart.yaml

@@ -21,15 +21,15 @@ dependencies:
     repository: https://grafana.github.io/helm-charts
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.5.1
+    version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     alias: redis-replication-unified-alerting
-    version: 1.0.4
+    version: 1.0.2
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     alias: redis-replication-remote-cache
-    version: 1.0.4
+    version: 1.0.2
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/grafana.png
 # renovate: datasource=github-releases depName=grafana/grafana-operator

clusters/cl01tl/helm/harbor/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 1.18.2
 - name: postgres-cluster
   repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
-  version: 7.5.1
+  version: 7.5.0
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.4
-digest: sha256:5786e414b8b1b61468c0ec283c8e0038944fb383a766d8181564c9301df76ef3
-generated: "2026-02-07T02:29:36.127187941Z"
+  version: 1.0.2
+digest: sha256:b5f3e7f50dbbded48c041b171bfb8ba4de23ea990209798f32c13aaccadf685d
+generated: "2026-02-03T00:25:16.778012644Z"

clusters/cl01tl/helm/harbor/Chart.yaml

@@ -21,10 +21,10 @@ dependencies:
     repository: https://helm.goharbor.io
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.5.1
+    version: 7.5.0
     repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
   - name: redis-replication
-    version: 1.0.4
+    version: 1.0.2
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/harbor.png
 # renovate: datasource=github-releases depName=goharbor/harbor

clusters/cl01tl/helm/harbor/values.yaml

@@ -105,7 +105,7 @@ postgres-18-cluster:
   backup:
     objectStore:
       - name: garage-local
-        index: 2
+        index: 1
         destinationBucket: postgres-backups
         externalSecretCredentialPath: /garage/home-infra/postgres-backups
         isWALArchiver: true

clusters/cl01tl/helm/headlamp/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: headlamp
   repository: https://kubernetes-sigs.github.io/headlamp/
-  version: 0.40.0
-digest: sha256:b7f8f176f8c4902130e87660adb39211fd5ca454f89f5a7e9ed577cd4c3a2255
-generated: "2026-02-05T18:23:45.100522813Z"
+  version: 0.39.0
+digest: sha256:870e456773199684c150585c12c2e18b3f0895ee8cc73481a53b23c8e94560b1
+generated: "2025-12-20T00:03:40.10414707Z"

clusters/cl01tl/helm/headlamp/Chart.yaml

@@ -14,8 +14,8 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: headlamp
-    version: 0.40.0
+    version: 0.39.0
     repository: https://kubernetes-sigs.github.io/headlamp/
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/headlamp.png
 # renovate: datasource=github-releases depName=headlamp-k8s/headlamp
-appVersion: v0.40.0
+appVersion: v0.39.0

clusters/cl01tl/helm/home-assistant/Chart.yaml

@@ -25,4 +25,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/home-assistant.png
 # renovate: datasource=github-releases depName=home-assistant/core
-appVersion: 2026.2.1
+appVersion: 2026.1.3

clusters/cl01tl/helm/home-assistant/values.yaml

@@ -9,7 +9,7 @@ home-assistant:
         main:
           image:
             repository: ghcr.io/home-assistant/home-assistant
-            tag: 2026.2.1
+            tag: 2026.1.3
             pullPolicy: IfNotPresent
           env:
             - name: TZ
@@ -21,7 +21,7 @@ home-assistant:
         code-server:
           image:
             repository: ghcr.io/linuxserver/code-server
-            tag: 4.108.2@sha256:280ce0bfa4ab49fa5d252e4e2cbffd0dc5f461902e17fa2734d4f493460f84b0
+            tag: 4.108.2@sha256:a59301fe97af3d9bf9150ce53e5c7b12486f2803eea0446a38f8d545ac877c9a
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/homepage-dev/Chart.lock

@@ -0,0 +1,9 @@
+dependencies:
+- name: app-template
+  repository: https://bjw-s-labs.github.io/helm-charts/
+  version: 4.6.2
+- name: cloudflared
+  repository: oci://harbor.alexlebens.net/helm-charts
+  version: 2.2.2
+digest: sha256:b5120e37e5b4b28a327fa2a3a5c93e93866848c5d36b9b1a8ee7c11ed81663dc
+generated: "2026-02-03T03:42:46.510379398Z"

clusters/cl01tl/helm/homepage-dev/Chart.yaml

@@ -0,0 +1,27 @@
+apiVersion: v2
+name: homepage
+version: 1.0.0
+description: Homepage
+keywords:
+  - homepage
+  - dashboard
+home: https://wiki.alexlebens.dev/s/a5fabd91-3d89-4e2b-9417-06111aedaeaa
+sources:
+  - https://github.com/gethomepage/homepage
+  - https://github.com/cloudflare/cloudflared
+  - https://github.com/gethomepage/homepage/pkgs/container/homepage
+  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
+  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/cloudflared
+maintainers:
+  - name: alexlebens
+dependencies:
+  - name: app-template
+    alias: homepage
+    repository: https://bjw-s-labs.github.io/helm-charts/
+    version: 4.6.2
+  - name: cloudflared
+    repository: oci://harbor.alexlebens.net/helm-charts
+    version: 2.2.2
+icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/homepage.png
+# renovate: datasource=github-releases depName=gethomepage/homepage
+appVersion: v1.9.0

clusters/cl01tl/helm/homepage-dev/values.yaml

@@ -0,0 +1,165 @@
+homepage:
+  global:
+    nameOverride: homepage
+  controllers:
+    main:
+      type: deployment
+      annotations:
+        reloader.stakater.com/auto: "true"
+      strategy: Recreate
+      containers:
+        main:
+          image:
+            repository: ghcr.io/gethomepage/homepage
+            tag: v1.9.0
+            pullPolicy: IfNotPresent
+          env:
+            - name: HOMEPAGE_ALLOWED_HOSTS
+              value: home.alexlebens.dev
+          resources:
+            requests:
+              cpu: 10m
+              memory: 128Mi
+  configMaps:
+    config:
+      enabled: true
+      data:
+        docker.yaml: ""
+        kubernetes.yaml: ""
+        settings.yaml: |
+          favicon: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/logo-new-round.svg
+          headerStyle: clean
+          hideVersion: true
+          color: zinc
+          background:
+            image: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/background.jpg
+            brightness: 50
+          theme: dark
+          disableCollapse: true
+        widgets.yaml: |
+          - logo:
+              icon: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/logo-new-round.png
+          - datetime:
+              text_size: xl
+              format:
+                dateStyle: long
+                timeStyle: short
+                hour12: false
+          - openmeteo:
+              label: St. Paul
+              latitude: 44.954445
+              longitude: -93.091301
+              timezone: America/Chicago
+              units: metric
+              cache: 5
+              format:
+                maximumFractionDigits: 0
+        services.yaml: |
+          - Applications:
+              - Auth:
+                  icon: sh-authentik.webp
+                  description: Authentik
+                  href: https://auth.alexlebens.dev
+                  siteMonitor: https://auth.alexlebens.dev
+                  statusStyle: dot
+              - Gitea:
+                  icon: sh-gitea.webp
+                  description: Gitea
+                  href: https://gitea.alexlebens.dev
+                  siteMonitor: https://gitea.alexlebens.dev
+                  statusStyle: dot
+              - Code:
+                  icon: sh-visual-studio-code.webp
+                  description: VS Code
+                  href: https://codeserver.alexlebens.dev
+                  siteMonitor: https://codeserver.alexlebens.dev
+                  statusStyle: dot
+              - Site:
+                  icon: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/logo-new-round.png
+                  description: Profile Website
+                  href: https://www.alexlebens.dev
+                  siteMonitor: https://www.alexlebens.dev
+                  statusStyle: dot
+              - Content Management:
+                  icon: directus.png
+                  description: Directus
+                  href: https://directus.alexlebens.dev
+                  siteMonitor: https://directus.alexlebens.dev
+                  statusStyle: dot
+              - Social Media Management:
+                  icon: sh-postiz.webp
+                  description: Postiz
+                  href: https://postiz.alexlebens.dev
+                  siteMonitor: https://postiz.alexlebens.dev
+                  statusStyle: dot
+              - Chat:
+                  icon: sh-element.webp
+                  description: Matrix
+                  href: https://chat.alexlebens.dev
+                  siteMonitor: https://chat.alexlebens.dev
+                  statusStyle: dot
+              - Wiki:
+                  icon: sh-outline.webp
+                  description: Outline
+                  href: https://wiki.alexlebens.dev
+                  siteMonitor: https://wiki.alexlebens.dev
+                  statusStyle: dot
+              - Passwords:
+                  icon: sh-vaultwarden-light.webp
+                  description: Vaultwarden
+                  href: https://passwords.alexlebens.dev
+                  siteMonitor: https://passwords.alexlebens.dev
+                  statusStyle: dot
+              - Bookmarks:
+                  icon: sh-karakeep-light.webp
+                  description: Karakeep
+                  href: https://karakeep.alexlebens.dev
+                  siteMonitor: https://karakeep.alexlebens.dev
+                  statusStyle: dot
+              - RSS:
+                  icon: sh-freshrss.webp
+                  description: FreshRSS
+                  href: https://rss.alexlebens.dev
+                  siteMonitor: https://rss.alexlebens.dev
+                  statusStyle: dot
+        bookmarks.yaml: ""
+  service:
+    http:
+      controller: main
+      ports:
+        http:
+          port: 80
+          targetPort: 3000
+          protocol: HTTP
+  persistence:
+    config:
+      enabled: true
+      type: configMap
+      name: homepage-dev
+      advancedMounts:
+        main:
+          main:
+            - path: /app/config/bookmarks.yaml
+              readOnly: true
+              mountPropagation: None
+              subPath: bookmarks.yaml
+            - path: /app/config/docker.yaml
+              readOnly: true
+              mountPropagation: None
+              subPath: docker.yaml
+            - path: /app/config/kubernetes.yaml
+              readOnly: true
+              mountPropagation: None
+              subPath: kubernetes.yaml
+            - path: /app/config/services.yaml
+              readOnly: true
+              mountPropagation: None
+              subPath: services.yaml
+            - path: /app/config/settings.yaml
+              readOnly: true
+              mountPropagation: None
+              subPath: settings.yaml
+            - path: /app/config/widgets.yaml
+              readOnly: true
+              mountPropagation: None
+              subPath: widgets.yaml

clusters/cl01tl/helm/homepage/Chart.yaml

@@ -19,4 +19,4 @@ dependencies:
     version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/homepage.png
 # renovate: datasource=github-releases depName=gethomepage/homepage
-appVersion: v1.10.1
+appVersion: v1.9.0

clusters/cl01tl/helm/homepage/values.yaml

@@ -4,10 +4,9 @@ homepage:
   controllers:
     main:
       type: deployment
-      replicas: 3
-      strategy: RollingUpdate
       annotations:
         reloader.stakater.com/auto: "true"
+      strategy: Recreate
       serviceAccount:
         name: homepage
       pod:
@@ -16,7 +15,7 @@ homepage:
         main:
           image:
             repository: ghcr.io/gethomepage/homepage
-            tag: v1.10.1
+            tag: v1.9.0
             pullPolicy: IfNotPresent
           env:
             - name: HOMEPAGE_ALLOWED_HOSTS
@@ -197,12 +196,6 @@ homepage:
                   href: https://www.alexlebens.dev
                   siteMonitor: https://www.alexlebens.dev
                   statusStyle: dot
-              - Documentation:
-                  icon: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/logo-new-round.png
-                  description: Documentation Wiki
-                  href: https://docs.alexlebens.dev
-                  siteMonitor: https://docs.alexlebens.dev
-                  statusStyle: dot
               - Content Management:
                   icon: directus.png
                   description: Directus
@@ -662,17 +655,11 @@ homepage:
                     url: http://lidarr.lidarr:80
                     key: {{ "{{HOMEPAGE_VAR_LIDARR_KEY}}" }}
                     fields: ["wanted", "queued", "artists"]
-              - Yubal:
+              - Yubal Playlist:
                   icon: sh-yubal.webp
                   description: Replicate Youtube playlist
-                  href: https://yubal.alexlebens.net
-                  siteMonitor: http://yubal.yubal:80
-                  statusStyle: dot
-              - Spotisub:
-                  icon: sh-spotify.webp
-                  description: Replicate Spotify playlist
-                  href: https://spotisub.alexlebens.net
-                  siteMonitor: http://spotisub.spotisub:80
+                  href: https://yubal-playlist.alexlebens.net
+                  siteMonitor: http://yubal-playlist.yubal-playlist:80
                   statusStyle: dot
               - slskd:
                   icon: sh-slskd.webp
@@ -688,6 +675,12 @@ homepage:
                   siteMonitor: http://shelfmark.shelfmark:80
                   statusStyle: dot
           - Other Homes:
+              - Dev:
+                  icon: sh-homepage.webp
+                  description: Public Homepage
+                  href: https://home.alexlebens.dev
+                  siteMonitor: https://home.alexlebens.dev
+                  statusStyle: dot
               - Lebens Home:
                   icon: sh-homepage.webp
                   description: Lebens Homepage

clusters/cl01tl/helm/huntarr/Chart.yaml

@@ -23,4 +23,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/huntarr.png
 # renovate: datasource=github-releases depName=plexguide/huntarr
-appVersion: 9.2.3
+appVersion: 9.1.8

clusters/cl01tl/helm/huntarr/values.yaml

@@ -9,7 +9,7 @@ huntarr:
         main:
           image:
             repository: ghcr.io/plexguide/huntarr
-            tag: 9.2.3
+            tag: 9.1.8
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/immich/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.5.1
+  version: 7.5.0
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.4
+  version: 1.0.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:4c93a50fcb190f191510da0b1ede039fea04055eb5b16890eb40c8c4899a63ec
-generated: "2026-02-07T02:30:26.038265281Z"
+digest: sha256:1d446911f684db329a040313bd3d4e845f30986eae64f8937aa7c379a02cd476
+generated: "2026-02-03T00:25:39.934229319Z"

clusters/cl01tl/helm/immich/Chart.yaml

@@ -20,10 +20,10 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.5.1
+    version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
-    version: 1.0.4
+    version: 1.0.2
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data
@@ -31,4 +31,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/immich.png
 # renovate: datasource=github-releases depName=immich-app/immich
-appVersion: v2.5.5
+appVersion: v2.5.2

clusters/cl01tl/helm/immich/values.yaml

@@ -9,7 +9,7 @@ immich:
         main:
           image:
             repository: ghcr.io/immich-app/immich-server
-            tag: v2.5.5
+            tag: v2.5.2
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/jellystat/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.5.1
+  version: 7.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:13a3c6ea43b01d77aded07becb15a9e57ee3541053a67054b9d832cc29e6e9e3
-generated: "2026-02-07T02:31:01.535664696Z"
+digest: sha256:74690c7f1feeb817a36cb456e7454c45dca9d030e48e2f17b1516117fd14174a
+generated: "2026-01-23T00:38:03.74023713Z"

clusters/cl01tl/helm/jellystat/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.5.1
+    version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data

clusters/cl01tl/helm/jellystat/values.yaml

@@ -9,7 +9,7 @@ jellystat:
         main:
           image:
             repository: cyfershepard/jellystat
-            tag: 1.1.8
+            tag: 1.1.7
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/karakeep/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 0.25.1
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.3.0
+  version: 2.2.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:e1b778c2c97feb493208575bf7eb345ee8013f04c1f939286012ecd44366ccd9
-generated: "2026-02-07T00:38:11.63002027Z"
+digest: sha256:5b1948702805bb46749615b98629185d495a8ff1d9d9e6bc52c972524fb6d2fa
+generated: "2026-02-03T18:06:00.958200599Z"

clusters/cl01tl/helm/karakeep/Chart.yaml

@@ -26,7 +26,7 @@ dependencies:
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.3.0
+    version: 2.2.2
   - name: volsync-target
     alias: volsync-target-data
     version: 0.7.0

clusters/cl01tl/helm/komodo/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.5.1
-digest: sha256:a8c457a1480e3f0f189de780b3f1649877c17bac8c3cf59a9db68fd08363829b
-generated: "2026-02-07T02:31:20.129379883Z"
+  version: 7.5.0
+digest: sha256:00716659773ba228fa472f8db4c0b44e5815ebe9b10416b8f6bbc8c0feef5ac6
+generated: "2026-01-23T00:38:16.85961817Z"

clusters/cl01tl/helm/komodo/Chart.yaml

@@ -23,7 +23,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgresql-17-fdb-cluster
-    version: 7.5.1
+    version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/komodo.png
 # renovate: datasource=github-releases depName=moghtech/komodo

clusters/cl01tl/helm/komodo/templates/external-secret.yaml

@@ -47,33 +47,3 @@ spec:
         key: /authentik/oidc/komodo
         metadataPolicy: None
         property: secret
-
----
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: komodo-postgresql-17-fdb-cluster-ferret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: komodo-postgresql-17-fdb-cluster-ferret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: uri
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/komodo/ferret
-        metadataPolicy: None
-        property: uri
-    - secretKey: password
-      remoteRef:
-        conversionStrategy: Default
-        decodingStrategy: None
-        key: /cl01tl/komodo/ferret
-        metadataPolicy: None
-        property: password

clusters/cl01tl/helm/komodo/values.yaml

@@ -53,11 +53,14 @@ komodo:
             - name: PERIPHERY_SSL_ENABLED
               value: false
             - name: DB_USERNAME
-              value: ferret
+              valueFrom:
+                secretKeyRef:
+                  name: komodo-postgresql-17-fdb-cluster-app
+                  key: user
             - name: DB_PASSWORD
               valueFrom:
                 secretKeyRef:
-                  name: komodo-postgresql-17-fdb-cluster-ferret
+                  name: komodo-postgresql-17-fdb-cluster-app
                   key: password
             - name: KOMODO_DATABASE_URI
               value: mongodb://$(DB_USERNAME):$(DB_PASSWORD)@komodo-ferretdb-2.komodo:27017/komodo
@@ -95,15 +98,11 @@ komodo:
             tag: 2.7.0
             pullPolicy: IfNotPresent
           env:
-            - name: DB_USERNAME
-              value: ferret
-            - name: DB_PASSWORD
+            - name: FERRETDB_POSTGRESQL_URL
               valueFrom:
                 secretKeyRef:
-                  name: komodo-postgresql-17-fdb-cluster-ferret
-                  key: password
-            - name: FERRETDB_POSTGRESQL_URL
-              value: postgresql://$(DB_USERNAME):$(DB_PASSWORD)@komodo-postgresql-17-fdb-cluster-rw.komodo.svc.cluster.local:5432/ferretDB
+                  name: komodo-postgresql-17-fdb-cluster-app
+                  key: uri
           resources:
             requests:
               cpu: 10m
@@ -199,9 +198,9 @@ postgresql-17-fdb-cluster:
       database: ferretDB
       owner: ferret
       postInitApplicationSQL:
-        - CREATE EXTENSION IF NOT EXISTS pg_cron;
-        - CREATE EXTENSION IF NOT EXISTS documentdb CASCADE;
-        - GRANT documentdb_admin_role TO ferret;
+        - create extension if not exists pg_cron;
+        - create extension if not exists documentdb cascade;
+        - grant documentdb_admin_role to ferret;
   recovery:
     method: objectStore
     objectStore:
@@ -209,7 +208,7 @@ postgresql-17-fdb-cluster:
   backup:
     objectStore:
       - name: garage-local
-        index: 2
+        index: 1
         destinationBucket: postgres-backups
         externalSecretCredentialPath: /garage/home-infra/postgres-backups
         isWALArchiver: true

clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock

@@ -7,6 +7,6 @@ dependencies:
   version: 4.6.2
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.4
-digest: sha256:62ceeea1ed2f1f3a838e468665c3f291cb67ac547f3fa37863131f088736a750
-generated: "2026-02-03T20:37:14.907439914Z"
+  version: 1.0.2
+digest: sha256:ab045879b7e5a69c6d35d4d19bd2add83e4201d2fcc1939854d2c9964e3364b3
+generated: "2026-02-03T18:06:21.522633614Z"

clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml

@@ -27,8 +27,8 @@ dependencies:
     repository: https://bjw-s-labs.github.io/helm-charts/
     version: 4.6.2
   - name: redis-replication
-    version: 1.0.4
+    version: 1.0.2
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/prometheus.png
 # renovate: datasource=github-releases depName=prometheus-operator/prometheus-operator
-appVersion: v0.89.0
+appVersion: v0.88.1

clusters/cl01tl/helm/kubelet-serving-cert-approver/Chart.yaml

@@ -20,4 +20,4 @@ dependencies:
     version: 4.6.2
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
 # renovate: datasource=github-releases depName=alex1989hu/kubelet-serving-cert-approver
-appVersion: 0.10.3
+appVersion: 0.10.2

clusters/cl01tl/helm/kubelet-serving-cert-approver/values.yaml

@@ -38,7 +38,7 @@ kubelet-serving-cert-approver:
         main:
           image:
             repository: ghcr.io/alex1989hu/kubelet-serving-cert-approver
-            tag: 0.10.3
+            tag: 0.10.2
             pullPolicy: Always
           args:
             - serve

clusters/cl01tl/helm/lidarr/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.5.1
+  version: 7.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:628ab2c174a9cf9b24f4c9822d325fee3d63548b526f406f6555bbc7cbabf759
-generated: "2026-02-07T02:31:36.916431665Z"
+digest: sha256:3eecce4de28a028bc38d6601b3867ee678a1d28bfc7de778f46982c8064fd281
+generated: "2026-01-23T00:38:33.055103699Z"

clusters/cl01tl/helm/lidarr/Chart.yaml

@@ -24,7 +24,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.5.1
+    version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/lidarr/values.yaml

@@ -15,7 +15,7 @@ lidarr:
         main:
           image:
             repository: ghcr.io/linuxserver/lidarr
-            tag: 3.1.2-nightly@sha256:adc776c4deb0b36909472a8d22ce00306b4a37f0d584407d846efd59060279ac
+            tag: 3.1.2-nightly@sha256:21aec279552ea35deaf86b4fbb68876d9a4f5cf53cefd6b0c667889153c778db
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/loki/Chart.lock

@@ -1,9 +1,9 @@
 dependencies:
 - name: loki
   repository: https://grafana.github.io/helm-charts
-  version: 6.52.0
+  version: 6.51.0
 - name: alloy
   repository: https://grafana.github.io/helm-charts
-  version: 1.6.0
-digest: sha256:097f893b362b3ba6a1498d6df00dc57030c4d1321cf3301268adb9e30d5043ed
-generated: "2026-02-05T22:01:50.699662067Z"
+  version: 1.5.3
+digest: sha256:88c8067aa21d8dd0e994e9ab7ff39eed17bdd993eea853721fd42aedb4bec400
+generated: "2026-02-02T17:28:04.623156-06:00"

clusters/cl01tl/helm/loki/Chart.yaml

@@ -16,11 +16,11 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: loki
-    version: 6.52.0
+    version: 6.51.0
     repository: https://grafana.github.io/helm-charts
   - name: alloy
-    version: 1.6.0
+    version: 1.5.3
     repository: https://grafana.github.io/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/loki.png
 # renovate: datasource=github-releases depName=grafana/loki
-appVersion: 3.6.5
+appVersion: 3.6.4

clusters/cl01tl/helm/matrix-synapse/Chart.lock

@@ -13,19 +13,19 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.3.0
+  version: 2.2.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.3.0
+  version: 2.2.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.5.1
+  version: 7.5.0
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.4
+  version: 1.0.2
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.4
+  version: 1.0.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
@@ -38,5 +38,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:d373bf3fea08bde2c3eea21d421f9d0d385ee141be60229427f281d2fbae4c54
-generated: "2026-02-07T02:31:51.33670708Z"
+digest: sha256:feb194c6ff73ff8be3208bac6eb177c2996f1a08cf39c1f15ed4006e6647cfce
+generated: "2026-02-03T03:43:19.524605833Z"

clusters/cl01tl/helm/matrix-synapse/Chart.yaml

@@ -45,23 +45,23 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     alias: cloudflared-synapse
-    version: 2.3.0
+    version: 2.2.2
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: cloudflared
     alias: cloudflared-hookshot
-    version: 2.3.0
+    version: 2.2.2
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.5.1
+    version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     alias: redis-replication-matrix-synapse
-    version: 1.0.4
+    version: 1.0.2
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
     alias: redis-replication-hookshot
-    version: 1.0.4
+    version: 1.0.2
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-synapse

clusters/cl01tl/helm/navidrome/values.yaml

@@ -9,7 +9,7 @@ navidrome:
         main:
           image:
             repository: deluan/navidrome
-            tag: 0.60.2@sha256:1b3f9556fc4f70cb1c2d3995543e734bdc90c762c9c6ee9a7c5f6a9745efbc3e
+            tag: 0.60.0@sha256:5d0f6ab343397c043c7063db14ae10e4e3980e54ae7388031cbce47e84af6657
             pullPolicy: IfNotPresent
           env:
             - name: ND_MUSICFOLDER
@@ -24,8 +24,6 @@ navidrome:
               value: false
             - name: ND_PROMETHEUS_ENABLED
               value: true
-            - name: ND_AUTOIMPORTPLAYLISTS
-              value: true
           resources:
             limits:
               gpu.intel.com/i915: 1

clusters/cl01tl/helm/ollama/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.5.1
+  version: 7.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:016ca629a1fbe06f6791b663b6b5e99f05184ee5042fabc2e9cb60975032baf8
-generated: "2026-02-07T02:32:11.063809451Z"
+digest: sha256:13774bf9b78af6c71cd86fbdf87613b632ff2c8ebc17ccb2575c16f24c954e9c
+generated: "2026-01-23T00:39:10.677757004Z"

clusters/cl01tl/helm/ollama/Chart.yaml

@@ -23,7 +23,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.5.1
+    version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data
@@ -31,4 +31,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/ollama.png
 # renovate: datasource=github-releases depName=ollama/ollama
-appVersion: 0.15.6
+appVersion: 0.15.4

clusters/cl01tl/helm/ollama/values.yaml

@@ -22,7 +22,7 @@ ollama:
         main:
           image:
             repository: ollama/ollama
-            tag: 0.15.6
+            tag: 0.15.4
             pullPolicy: IfNotPresent
           env:
             - name: OLLAMA_KEEP_ALIVE
@@ -58,7 +58,7 @@ ollama:
         main:
           image:
             repository: ollama/ollama
-            tag: 0.15.6
+            tag: 0.15.4
             pullPolicy: IfNotPresent
           env:
             - name: OLLAMA_KEEP_ALIVE
@@ -94,7 +94,7 @@ ollama:
         main:
           image:
             repository: ollama/ollama
-            tag: 0.15.6
+            tag: 0.15.4
             pullPolicy: IfNotPresent
           env:
             - name: OLLAMA_KEEP_ALIVE

clusters/cl01tl/helm/outline/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.3.0
+  version: 2.2.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.5.1
+  version: 7.5.0
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.4
-digest: sha256:5beab8bbe25bbcafae4cb9a55494212b00f8f52053ec0ee545288a23bc6ea61c
-generated: "2026-02-07T02:32:25.090868738Z"
+  version: 1.0.2
+digest: sha256:91262ebe45463b53f50f8411c7677a14547fdbaca135b4db81d9ef5c1f3601f2
+generated: "2026-02-03T03:43:35.742535808Z"

clusters/cl01tl/helm/outline/Chart.yaml

@@ -24,13 +24,13 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.3.0
+    version: 2.2.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.5.1
+    version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
-    version: 1.0.4
+    version: 1.0.2
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/outline.png
 # renovate: datasource=github-releases depName=outline/outline

clusters/cl01tl/helm/photoview/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.5.1
-digest: sha256:00b4fff6726d8bb1c7d8cd7ad9a1717d91f9d5d8ba1785527e0a49a665c6f76a
-generated: "2026-02-07T02:32:37.367202037Z"
+  version: 7.5.0
+digest: sha256:f5f4f1fc51309a33c574d20b28c9be1d84f68d80dbbbbd7ad4342ed4b8bb2b83
+generated: "2026-01-23T00:39:40.547439678Z"

clusters/cl01tl/helm/photoview/Chart.yaml

@@ -20,7 +20,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.5.1
+    version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/photoview.png
 # renovate: datasource=github-releases depName=photoview/photoview

clusters/cl01tl/helm/postiz/Chart.lock

@@ -4,18 +4,18 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.3.0
+  version: 2.2.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.5.1
+  version: 7.5.0
 - name: redis-replication
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 1.0.4
+  version: 1.0.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:399468e311fa4b9a52681770fcf5f0c247764b99883c847a18c166a1d40726be
-generated: "2026-02-07T02:32:49.436802609Z"
+digest: sha256:5ebb23e5b68ec0ee9332de8865a6c41b4da5871cb59dcc67422020f7c728b874
+generated: "2026-02-03T03:43:50.478871007Z"

clusters/cl01tl/helm/postiz/Chart.yaml

@@ -23,13 +23,13 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.3.0
+    version: 2.2.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.5.1
+    version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: redis-replication
-    version: 1.0.4
+    version: 1.0.2
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config
@@ -41,4 +41,4 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/postiz.png
 # renovate: datasource=github-releases depName=gitroomhq/postiz-app
-appVersion: v2.15.0
+appVersion: v2.14.0

clusters/cl01tl/helm/postiz/values.yaml

@@ -9,7 +9,7 @@ postiz:
         main:
           image:
             repository: ghcr.io/gitroomhq/postiz-app
-            tag: v2.15.0
+            tag: v2.14.0
             pullPolicy: IfNotPresent
           env:
             - name: MAIN_URL

clusters/cl01tl/helm/prometheus-operator-crds/Chart.lock

@@ -1,6 +1,6 @@
 dependencies:
 - name: prometheus-operator-crds
   repository: oci://ghcr.io/prometheus-community/charts
-  version: 27.0.0
-digest: sha256:ab76a45fb53268d4afdad507277c244af11c50344e50a24799182bbd9757258d
-generated: "2026-02-06T14:05:22.069162277Z"
+  version: 26.0.0
+digest: sha256:fb73bc68bbf8ab128ff7fc641413ce3f004677d351038517ed68f5b39eeafb08
+generated: "2026-01-09T20:11:58.398634666Z"

clusters/cl01tl/helm/prometheus-operator-crds/Chart.yaml

@@ -15,8 +15,8 @@ maintainers:
   - name: alexlebens
 dependencies:
   - name: prometheus-operator-crds
-    version: 27.0.0
+    version: 26.0.0
     repository: oci://ghcr.io/prometheus-community/charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/prometheus.png
 # renovate: datasource=github-releases depName=prometheus-operator/prometheus-operator
-appVersion: v0.89.0
+appVersion: v0.88.1

clusters/cl01tl/helm/prowlarr/values.yaml

@@ -20,7 +20,7 @@ prowlarr:
         main:
           image:
             repository: ghcr.io/linuxserver/prowlarr
-            tag: 2.3.0@sha256:5339e9050cfcc0cb5331e9c98610ed9d4ce70ef481a5461ea664a13dda3f1eb0
+            tag: 2.3.0@sha256:d3e9307b320b6772749a2cf8fc2712e9e824c4930b034680ad4d08a9e2f25884
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/qbittorrent/values.yaml

@@ -28,7 +28,7 @@ qbittorrent:
         qbittorrent:
           image:
             repository: ghcr.io/linuxserver/qbittorrent
-            tag: 5.1.4@sha256:dfa75bc534ad4f36262f75b5c1d4c4f0ddd5e7ed5711ebc581c70920cce204ee
+            tag: 5.1.4@sha256:5b09709bb0eff4edb551f5b30029952ab4d67aa0d5ca3526889124173bd78a9c
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/radarr-4k/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.5.1
+  version: 7.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:08a3191f712e52d0509c7371535e5eb77c140a6c0b85192dd9015870a973eca1
-generated: "2026-02-07T02:33:02.701341105Z"
+digest: sha256:3d2c1d105581280c86836b53c6ae63ea62eaedec30015696530e8cae1f40ab0d
+generated: "2026-01-23T00:40:09.301214236Z"

clusters/cl01tl/helm/radarr-4k/Chart.yaml

@@ -27,7 +27,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.5.1
+    version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/radarr-4k/values.yaml

@@ -15,7 +15,7 @@ radarr-4k:
         main:
           image:
             repository: ghcr.io/linuxserver/radarr
-            tag: 6.0.4@sha256:f08dda38e7d12e5a722d9a5cb6e54acaf63c8598fefeefec88effe0c0d0038dd
+            tag: 6.0.4@sha256:ba2693dd704b84eb0b404d40b3902bd3e62a1768dc5ee0d89b1f1d7cd51a66eb
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/radarr-anime/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.5.1
+  version: 7.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:5625dc905a3c7cc850c56cb71ea7bc07bcbb545a73aca1f96c968e7af7831507
-generated: "2026-02-07T02:33:15.765583035Z"
+digest: sha256:c1467d126586c305e521a8a09fa736f9d5e95d6fc56af174b2bc68a471d6ebf8
+generated: "2026-01-23T00:40:21.967614925Z"

clusters/cl01tl/helm/radarr-anime/Chart.yaml

@@ -27,7 +27,7 @@ dependencies:
     version: 4.6.2
   - name: postgres-cluster
     alias: postgres-18-cluster
-    version: 7.5.1
+    version: 7.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/radarr-anime/values.yaml

@@ -13,7 +13,7 @@ radarr-anime:
         main:
           image:
             repository: ghcr.io/linuxserver/radarr
-            tag: 6.0.4@sha256:f08dda38e7d12e5a722d9a5cb6e54acaf63c8598fefeefec88effe0c0d0038dd
+            tag: 6.0.4@sha256:ba2693dd704b84eb0b404d40b3902bd3e62a1768dc5ee0d89b1f1d7cd51a66eb
             pullPolicy: IfNotPresent
           env:
             - name: TZ

clusters/cl01tl/helm/radarr-standup/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 4.6.2
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.5.1
+  version: 7.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.7.0
-digest: sha256:05835a68b6634425649a47b2fa8a5c786579b2d5783fab461d36b986b36a684a
-generated: "2026-02-07T02:33:28.091999824Z"
+digest: sha256:df19907ff395f03290f62f313be5bce6fa63b7152b045b2a0558763dbb53ae23
+generated: "2026-01-23T00:40:35.625888477Z"