alexlebens/infrastructure
1
0
Fork 0
Code Issues 1 Pull Requests 5 Actions Activity

Compare commits

base: alexlebens:renovate/unified-shelfmark
Branches Tags
alexlebens:main alexlebens:renovate/unified-unpoller alexlebens:renovate/unified-shelfmark alexlebens:renovate/unified-gitea alexlebens:renovate/unified-opentelemetry-collector alexlebens:renovate/unified-cilium alexlebens:manifests
..
compare: alexlebens:9eddd3ca6638a5b88cb021bc1d7c43e72899db36
Branches Tags
alexlebens:renovate/unified-unpoller alexlebens:renovate/unified-shelfmark alexlebens:renovate/unified-gitea alexlebens:renovate/unified-opentelemetry-collector alexlebens:renovate/unified-cilium alexlebens:manifests alexlebens:main

1 Commits
renovate/u ... 9eddd3ca66

Author SHA1 Message Date
Alex Lebens
9eddd3ca66 feat: update runner, switch images
Some checks failed
lint-test-helm / lint-helm (pull_request) Failing after 1s
Details
lint-test-helm / validate-kubeconform (pull_request) Has been skipped
Details
2026-04-27 11:33:04 -05:00
316 changed files with 1847 additions and 2106 deletions
Expand all files Collapse all files

2
.gitea/workflows/lint-test-docker.yaml
View File

@@ -18,7 +18,7 @@ env:
jobs:
lint-docker-compose:
runs-on: ubuntu-js
runs-on: ubuntu-latest-slim
steps:
- name: Checkout
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6

4
.gitea/workflows/lint-test-helm.yaml
View File

@@ -21,7 +21,7 @@ env:
jobs:
lint-helm:
runs-on: ubuntu-js
runs-on: ubuntu-latest-slim
outputs:
chart-dir: ${{ steps.check-dir-changes.outputs.chart-dir }}
chart-dir-csv: ${{ steps.check-dir-changes.outputs.chart-dir-csv }}
@@ -231,7 +231,7 @@ jobs:
validate-kubeconform:
needs: lint-helm
runs-on: ubuntu-js
runs-on: ubuntu-latest-slim
if: |
needs.lint-helm.result == 'success' &&
needs.lint-helm.outputs.changes-detected == 'true' &&

2
.gitea/workflows/render-manifests.yaml
View File

@@ -24,7 +24,7 @@ env:
jobs:
render-manifests:
runs-on: ubuntu-js
runs-on: ubuntu-latest-slim
if: >-
github.event_name == 'schedule' ||
github.event_name == 'workflow_dispatch' ||

4
.gitea/workflows/renovate.yaml
View File

@@ -12,8 +12,8 @@ on:
jobs:
renovate:
runs-on: ubuntu-js
container: ghcr.io/renovatebot/renovate:43.176.2@sha256:bf5338a52deabc861e73948fc9d7d437d8af14b1e1fb05b9e6ec02d397ed6065
runs-on: ubuntu-latest-slim
container: ghcr.io/renovatebot/renovate:43.141.6@sha256:077a2aada1c508923e4e36b68f7efe3ec013a797da8aed352afd98fb0e1b4c60
steps:
- name: Checkout
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6

8
clusters/cl01tl/helm/actual/Chart.lock
View File

@@ -1,9 +1,9 @@
dependencies:
- name: app-template
repository: https://bjw-s-labs.github.io/helm-charts/
version: 5.0.0
version: 4.6.2
- name: volsync-target
repository: oci://harbor.alexlebens.net/helm-charts
version: 2.0.0
digest: sha256:9468b3406ab0d91bf44a1a940eca8648782f3519d0c683d21b33e16c258c9175
generated: "2026-05-07T21:23:05.56246-05:00"
version: 1.0.0
digest: sha256:ee1ff98af82f76ddf0b672abf9f4973ae41faff3cd61d81849f496c089cfdbd3
generated: "2026-04-26T14:57:34.863614-05:00"

6
clusters/cl01tl/helm/actual/Chart.yaml
View File

@@ -17,11 +17,11 @@ dependencies:
- name: app-template
alias: actual
repository: https://bjw-s-labs.github.io/helm-charts/
version: 5.0.0
version: 4.6.2
- name: volsync-target
alias: volsync-target-data
version: 2.0.0
version: 1.0.0
repository: oci://harbor.alexlebens.net/helm-charts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/actual-budget.png
# renovate: datasource=github-releases depName=actualbudget/actual
appVersion: 26.5.2
appVersion: 26.4.0

6
clusters/cl01tl/helm/actual/values.yaml
View File

@@ -8,7 +8,7 @@ actual:
main:
image:
repository: ghcr.io/actualbudget/actual
tag: 26.5.2@sha256:1aeeb3985db55556e716dec25e08f6ce09308c2571b65cddbc6746ee6d5e0d45
tag: 26.4.0@sha256:b0e732e2c41b3dc468a71548e88ef76d3f0c157fc43d15fa05d14ec1c5747e1e
env:
- name: ACTUAL_PORT
value: 5006
@@ -75,7 +75,7 @@ volsync-target-data:
schedule: 0 8 * * *
remote:
enabled: true
schedule: 0 10 * * 0
schedule: 0 9 * * *
external:
enabled: true
schedule: 0 9 * * 0
schedule: 0 10 * * *

6
clusters/cl01tl/helm/argocd/Chart.lock
View File

@@ -1,6 +1,6 @@
dependencies:
- name: argo-cd
repository: https://argoproj.github.io/argo-helm
version: 9.5.13
digest: sha256:4b54dedfc74732ff96b509ae0454e8e7df9466c7ede3c67bab9afbae6a2a0a21
generated: "2026-05-08T20:45:26.802180802Z"
version: 9.5.4
digest: sha256:3d21f3de99812af73615ef0e75f835d41d49b81a840107194b44e06057d7311f
generated: "2026-04-24T18:07:49.106452954Z"

4
clusters/cl01tl/helm/argocd/Chart.yaml
View File

@@ -13,8 +13,8 @@ maintainers:
- name: alexlebens
dependencies:
- name: argo-cd
version: 9.5.13
version: 9.5.4
repository: https://argoproj.github.io/argo-helm
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/argo-cd.png
# renovate: datasource=github-releases depName=argoproj/argo-cd
appVersion: v3.4.1
appVersion: v3.3.8

108
clusters/cl01tl/helm/argocd/templates/prometheus-rule.yaml
View File

@@ -1,108 +0,0 @@
apiVersion: monitoring.coreos.com/v1
kind: PrometheusRule
metadata:
name: haproxy
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: haproxy
{{- include "custom.labels" . | nindent 4 }}
spec:
groups:
- name: EmbeddedExporter
rules:
- alert: HAProxyHighHTTP4xxErrorRateBackend
expr: ((sum by (proxy) (rate(haproxy_server_http_responses_total{code="4xx"}[1m])) / sum by (proxy) (rate(haproxy_server_http_responses_total[1m]))) * 100) > 5 and sum by (proxy) (rate(haproxy_server_http_responses_total[1m])) > 0
for: 1m
labels:
severity: critical
annotations:
summary: HAProxy high HTTP 4xx error rate backend (instance {{ `{{ $labels.instance }}` }})
description: "Too many HTTP requests with status 4xx (> 5%) on backend {{ `{{ $labels.proxy }}` }}\n VALUE = {{ `{{ $value }}` }}\n LABELS = {{ `{{ $labels }}` }}"
- alert: HAProxyHighHTTP5xxErrorRateBackend
expr: ((sum by (proxy) (rate(haproxy_server_http_responses_total{code="5xx"}[1m])) / sum by (proxy) (rate(haproxy_server_http_responses_total[1m]))) * 100) > 5 and sum by (proxy) (rate(haproxy_server_http_responses_total[1m])) > 0
for: 1m
labels:
severity: critical
annotations:
summary: HAProxy high HTTP 5xx error rate backend (instance {{ `{{ $labels.instance }}` }})
description: "Too many HTTP requests with status 5xx (> 5%) on backend {{ `{{ $labels.proxy }}` }}\n VALUE = {{ `{{ $value }}` }}\n LABELS = {{ `{{ $labels }}` }}"
- alert: HAProxyHighHTTP4xxErrorRateServer
expr: ((sum by (server) (rate(haproxy_server_http_responses_total{code="4xx"}[1m])) / sum by (server) (rate(haproxy_server_http_responses_total[1m]))) * 100) > 5 and sum by (server) (rate(haproxy_server_http_responses_total[1m])) > 0
for: 1m
labels:
severity: critical
annotations:
summary: HAProxy high HTTP 4xx error rate server (instance {{ `{{ $labels.instance }}` }})
description: "Too many HTTP requests with status 4xx (> 5%) on server {{ `{{ $labels.server }}` }}\n VALUE = {{ `{{ $value }}` }}\n LABELS = {{ `{{ $labels }}` }}"
- alert: HAProxyHighHTTP5xxErrorRateServer
expr: ((sum by (server) (rate(haproxy_server_http_responses_total{code="5xx"}[1m])) / sum by (server) (rate(haproxy_server_http_responses_total[1m]))) * 100) > 5 and sum by (server) (rate(haproxy_server_http_responses_total[1m])) > 0
for: 1m
labels:
severity: critical
annotations:
summary: HAProxy high HTTP 5xx error rate server (instance {{ `{{ $labels.instance }}` }})
description: "Too many HTTP requests with status 5xx (> 5%) on server {{ `{{ $labels.server }}` }}\n VALUE = {{ `{{ $value }}` }}\n LABELS = {{ `{{ $labels }}` }}"
- alert: HAProxyServerResponseErrors
expr: (sum by (server) (rate(haproxy_server_response_errors_total[1m])) / sum by (server) (rate(haproxy_server_http_responses_total[1m]))) * 100 > 5 and sum by (server) (rate(haproxy_server_http_responses_total[1m])) > 0
for: 1m
labels:
severity: critical
annotations:
summary: HAProxy server response errors (instance {{ `{{ $labels.instance }}` }})
description: "Too many response errors to {{ `{{ $labels.server }}` }} server (> 5%).\n VALUE = {{ `{{ $value }}` }}\n LABELS = {{ `{{ $labels }}` }}"
- alert: HAProxyBackendConnectionErrors
expr: (sum by (proxy) (rate(haproxy_backend_connection_errors_total[1m]))) > 100
for: 1m
labels:
severity: critical
annotations:
summary: HAProxy backend connection errors (instance {{ `{{ $labels.instance }}` }})
description: "Too many connection errors to {{ `{{ $labels.proxy }}` }} backend (> 100 req/s). Request throughput may be too high.\n VALUE = {{ `{{ $value }}` }}\n LABELS = {{ `{{ $labels }}` }}"
- alert: HAProxyServerConnectionErrors
expr: (sum by (proxy) (rate(haproxy_server_connection_errors_total[1m]))) > 100
for: 0m
labels:
severity: critical
annotations:
summary: HAProxy server connection errors (instance {{ `{{ $labels.instance }}` }})
description: "Too many connection errors to {{ `{{ $labels.proxy }}` }} (> 100 req/s). Request throughput may be too high.\n VALUE = {{ `{{ $value }}` }}\n LABELS = {{ `{{ $labels }}` }}"
- alert: HAProxyBackendMaxActiveSession>80%
expr: (haproxy_backend_current_sessions / haproxy_backend_limit_sessions * 100) > 80 and haproxy_backend_limit_sessions > 0
for: 2m
labels:
severity: warning
annotations:
summary: HAProxy backend max active session > 80% (instance {{ `{{ $labels.instance }}` }})
description: "Session limit from backend {{ `{{ $labels.proxy }}` }} reached 80% of limit - {{ `{{ $value | printf \"%.2f\"}}` }}%\n VALUE = {{ `{{ $value }}` }}\n LABELS = {{ `{{ $labels }}` }}"
- alert: HAProxyPendingRequests
expr: sum by (proxy) (haproxy_backend_current_queue) > 0
for: 2m
labels:
severity: warning
annotations:
summary: HAProxy pending requests (instance {{ `{{ $labels.instance }}` }})
description: "Some HAProxy requests are pending on {{ `{{ $labels.proxy }}` }} - {{ `{{ $value | printf \"%.2f\"}}` }}\n VALUE = {{ `{{ $value }}` }}\n LABELS = {{ `{{ $labels }}` }}"
- alert: HAProxyRetryHigh
expr: sum by (proxy) (rate(haproxy_backend_retry_warnings_total[1m])) > 10
for: 2m
labels:
severity: warning
annotations:
summary: HAProxy retry high (instance {{ `{{ $labels.instance }}` }})
description: "High rate of retry on {{ `{{ $labels.proxy }}` }} - {{ `{{ $value | printf \"%.2f\"}}` }}\n VALUE = {{ `{{ $value }}` }}\n LABELS = {{ `{{ $labels }}` }}"
- alert: HAProxyFrontendSecurityBlockedRequests
expr: sum by (proxy) (rate(haproxy_frontend_denied_connections_total[2m])) > 10
for: 2m
labels:
severity: warning
annotations:
summary: HAProxy frontend security blocked requests (instance {{ `{{ $labels.instance }}` }})
description: "HAProxy is blocking requests for security reason\n VALUE = {{ `{{ $value }}` }}\n LABELS = {{ `{{ $labels }}` }}"
- alert: HAProxyServerHealthcheckFailure
expr: increase(haproxy_server_check_failures_total[1m]) > 2
for: 0m
labels:
severity: warning
annotations:
summary: HAProxy server healthcheck failure (instance {{ `{{ $labels.instance }}` }})
description: "Some server healthcheck are failing on {{ `{{ $labels.server }}` }} ({{ `{{ $value }}` }} in the last 1m)\n VALUE = {{ `{{ $value }}` }}\n LABELS = {{ `{{ $labels }}` }}"

4
clusters/cl01tl/helm/argocd/values.yaml
View File

@@ -91,7 +91,7 @@ argo-cd:
enabled: true
image:
repository: redis
tag: 8.6.3-alpine@sha256:69f2c586c8a7e9cce4ae1ee9bbaf60bc4bb5f4bb3880e4ed022b1fd758a7cab9
tag: 8.6.2-alpine@sha256:81b6f81d6a6c5b9019231a2e8eb10085e3a139a34f833dcc965a8a959b040b72
persistentVolume:
enabled: true
redis:
@@ -103,7 +103,7 @@ argo-cd:
enabled: true
image:
repository: haproxy
tag: 3.3.9-alpine@sha256:9d05c0d68ede409faf4855a8f40d7bfc54833a83bfd02d9344d09b5d27f79155
tag: 3.3.6-alpine@sha256:4f97a2cb7f02fd08402259e74a65ef12fcfa3dff1ef78fddecb5228a17b7f4ad
resources:
requests:
cpu: 5m

10
clusters/cl01tl/helm/audiobookshelf/Chart.lock
View File

@@ -1,12 +1,12 @@
dependencies:
- name: app-template
repository: https://bjw-s-labs.github.io/helm-charts/
version: 5.0.0
version: 4.6.2
- name: volsync-target
repository: oci://harbor.alexlebens.net/helm-charts
version: 2.0.0
version: 1.0.0
- name: volsync-target
repository: oci://harbor.alexlebens.net/helm-charts
version: 2.0.0
digest: sha256:57c3cc8da25c1dfc8684c5f20f804ce4642abee25cb317097ce6bd17f8bb0504
generated: "2026-05-07T21:23:15.021738-05:00"
version: 1.0.0
digest: sha256:c6af4b1dd96410281d53ff8f63235bc79bd9a1d493d6da097d9e4ff088e09538
generated: "2026-04-26T14:57:40.219612-05:00"

8
clusters/cl01tl/helm/audiobookshelf/Chart.yaml
View File

@@ -21,15 +21,15 @@ dependencies:
- name: app-template
alias: audiobookshelf
repository: https://bjw-s-labs.github.io/helm-charts/
version: 5.0.0
version: 4.6.2
- name: volsync-target
alias: volsync-target-config
version: 2.0.0
version: 1.0.0
repository: oci://harbor.alexlebens.net/helm-charts
- name: volsync-target
alias: volsync-target-metadata
version: 2.0.0
version: 1.0.0
repository: oci://harbor.alexlebens.net/helm-charts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/audiobookshelf.png
# renovate: datasource=github-releases depName=advplyr/audiobookshelf
appVersion: 2.34.0
appVersion: 2.33.2

16
clusters/cl01tl/helm/audiobookshelf/values.yaml
View File

@@ -12,7 +12,7 @@ audiobookshelf:
main:
image:
repository: ghcr.io/advplyr/audiobookshelf
tag: 2.34.0@sha256:4143292c530f6ac6700afd13360c04f477e4f1a81c1c97c4224b1c7e4330c5c4
tag: 2.33.2@sha256:a44ed89b3e845faa1f7d353f2cc89b2fcd8011737dd14075fa963cf9468da3a5
env:
- name: TZ
value: America/Chicago
@@ -23,7 +23,7 @@ audiobookshelf:
apprise-api:
image:
repository: ghcr.io/caronc/apprise
tag: v1.4.1@sha256:25e0577915c2f06233ae1dce077f05c0fc9ba4f0ea89de5aee18a32b2ee9a75c
tag: v1.4.0@sha256:9d97a6b9b42cf6afdf3b5466dbed2a59cd42a4bb777ec6aa57b5f2ee623569eb
env:
- name: TZ
value: America/Chicago
@@ -129,21 +129,21 @@ volsync-target-config:
pvcTarget: audiobookshelf-config
local:
enabled: true
schedule: 5 8 * * *
schedule: 2 8 * * *
remote:
enabled: true
schedule: 5 10 * * 0
schedule: 2 9 * * *
external:
enabled: true
schedule: 5 9 * * 0
schedule: 2 10 * * *
volsync-target-metadata:
pvcTarget: audiobookshelf-metadata
local:
enabled: true
schedule: 10 8 * * *
schedule: 4 8 * * *
remote:
enabled: true
schedule: 10 10 * * 0
schedule: 4 9 * * *
external:
enabled: true
schedule: 10 9 * * 0
schedule: 4 10 * * *

8
clusters/cl01tl/helm/authentik/Chart.lock
View File

@@ -4,12 +4,12 @@ dependencies:
version: 2026.2.2
- name: cloudflared
repository: oci://harbor.alexlebens.net/helm-charts
version: 3.2.2
version: 2.6.0
- name: postgres-cluster
repository: oci://harbor.alexlebens.net/helm-charts
version: 7.12.1
- name: valkey
repository: oci://harbor.alexlebens.net/helm-charts
version: 0.8.0
digest: sha256:340c981f2958295a952b124bc2f14f6d655901dd3e32f90dc9cefe1685195cff
generated: "2026-05-08T22:56:30.727245582Z"
version: 0.6.1
digest: sha256:d1dbca83e5b63a58a9bf9f2903d1b45bbadca3e8599541367bc61ef2ce938cdb
generated: "2026-04-24T21:50:21.398658595Z"

4
clusters/cl01tl/helm/authentik/Chart.yaml
View File

@@ -22,14 +22,14 @@ dependencies:
repository: https://charts.goauthentik.io/
- name: cloudflared
repository: oci://harbor.alexlebens.net/helm-charts
version: 3.2.2
version: 2.6.0
- name: postgres-cluster
alias: postgres-18-cluster
version: 7.12.1
repository: oci://harbor.alexlebens.net/helm-charts
- name: valkey
alias: valkey
version: 0.8.0
version: 0.6.1
repository: oci://harbor.alexlebens.net/helm-charts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/authentik.png
# renovate: datasource=github-releases depName=goauthentik/authentik

10
clusters/cl01tl/helm/backrest/Chart.lock
View File

@@ -1,12 +1,12 @@
dependencies:
- name: app-template
repository: https://bjw-s-labs.github.io/helm-charts/
version: 5.0.0
version: 4.6.2
- name: volsync-target
repository: oci://harbor.alexlebens.net/helm-charts
version: 2.0.0
version: 1.0.0
- name: volsync-target
repository: oci://harbor.alexlebens.net/helm-charts
version: 2.0.0
digest: sha256:440dd48f7cb11c3f84c4543fd51dedeea511b29a96571cefdf3d42ddb988554f
generated: "2026-05-08T20:52:47.164685-05:00"
version: 1.0.0
digest: sha256:4c3010c4ef30f7baaad7564d1fda9bdfe18184fab0e3f47a8a1f4c74e340e557
generated: "2026-04-24T22:50:23.056323614Z"

8
clusters/cl01tl/helm/backrest/Chart.yaml
View File

@@ -17,15 +17,15 @@ dependencies:
- name: app-template
alias: backrest
repository: https://bjw-s-labs.github.io/helm-charts/
version: 5.0.0
version: 4.6.2
- name: volsync-target
alias: volsync-target-config
version: 2.0.0
version: 1.0.0
repository: oci://harbor.alexlebens.net/helm-charts
- name: volsync-target
alias: volsync-target-data
version: 2.0.0
version: 1.0.0
repository: oci://harbor.alexlebens.net/helm-charts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/backrest.png
# renovate: datasource=github-releases depName=garethgeorge/backrest
appVersion: v1.13.0
appVersion: v1.12.1

14
clusters/cl01tl/helm/backrest/values.yaml
View File

@@ -8,7 +8,7 @@ backrest:
main:
image:
repository: ghcr.io/garethgeorge/backrest
tag: v1.13.0@sha256:9c9966b5c285ec791a6b06cb4545fa0247424d05442e12f9558b4322d9f8a15f
tag: v1.12.1@sha256:f4d34bd6fa985d13bdb6c01c5d8727e07708899afa9567d800808357d77b9fb0
env:
- name: TZ
value: America/Chicago
@@ -115,21 +115,21 @@ volsync-target-data:
pvcTarget: backrest-data
local:
enabled: true
schedule: 15 8 * * *
schedule: 6 8 * * *
remote:
enabled: true
schedule: 15 10 * * 0
schedule: 6 9 * * *
external:
enabled: true
schedule: 15 9 * * 0
schedule: 6 10 * * *
volsync-target-config:
pvcTarget: backrest-config
local:
enabled: true
schedule: 20 8 * * *
schedule: 8 8 * * *
remote:
enabled: true
schedule: 20 10 * * 0
schedule: 8 9 * * *
external:
enabled: true
schedule: 20 9 * * 0
schedule: 8 10 * * *

8
clusters/cl01tl/helm/bazarr/Chart.lock
View File

@@ -1,9 +1,9 @@
dependencies:
- name: app-template
repository: https://bjw-s-labs.github.io/helm-charts/
version: 5.0.0
version: 4.6.2
- name: volsync-target
repository: oci://harbor.alexlebens.net/helm-charts
version: 2.0.0
digest: sha256:a792d16034f5d4f2a94833480ba8700366c9b64d50443934e15033c349a28e81
generated: "2026-05-08T20:52:50.463541-05:00"
version: 1.0.0
digest: sha256:ee94a588fa517303597c8a6159befdbac00b651afc5c1d7c779b3cb28d3ba8c6
generated: "2026-04-24T22:50:33.529825344Z"

4
clusters/cl01tl/helm/bazarr/Chart.yaml
View File

@@ -21,10 +21,10 @@ dependencies:
- name: app-template
alias: bazarr
repository: https://bjw-s-labs.github.io/helm-charts/
version: 5.0.0
version: 4.6.2
- name: volsync-target
alias: volsync-target-config
version: 2.0.0
version: 1.0.0
repository: oci://harbor.alexlebens.net/helm-charts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/bazarr.png
# renovate: datasource=github-releases depName=linuxserver/docker-bazarr

6
clusters/cl01tl/helm/bazarr/values.yaml
View File

@@ -112,10 +112,10 @@ volsync-target-config:
fsGroupChangePolicy: OnRootMismatch
local:
enabled: true
schedule: 25 8 * * *
schedule: 10 8 * * *
remote:
enabled: true
schedule: 25 10 * * 0
schedule: 10 9 * * *
external:
enabled: true
schedule: 25 9 * * 0
schedule: 10 10 * * *

8
clusters/cl01tl/helm/blocky/Chart.lock
View File

@@ -1,9 +1,9 @@
dependencies:
- name: app-template
repository: https://bjw-s-labs.github.io/helm-charts/
version: 5.0.0
version: 4.6.2
- name: valkey
repository: oci://harbor.alexlebens.net/helm-charts
version: 0.8.0
digest: sha256:c1b8be978ecda2e495eb0a65c62f1794edd1de5c47e288abb8b53b65be4353ac
generated: "2026-05-08T02:30:25.905416473Z"
version: 0.6.1
digest: sha256:6ed3a7587906fbda581d0091ff2c29a1816b8b0b8ae40add9885e6a68b2b82ae
generated: "2026-04-13T20:32:34.844998902Z"

4
clusters/cl01tl/helm/blocky/Chart.yaml
View File

@@ -17,10 +17,10 @@ dependencies:
- name: app-template
alias: blocky
repository: https://bjw-s-labs.github.io/helm-charts/
version: 5.0.0
version: 4.6.2
- name: valkey
alias: valkey
version: 0.8.0
version: 0.6.1
repository: oci://harbor.alexlebens.net/helm-charts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/blocky.png
# renovate: datasource=github-releases depName=0xerr0r/blocky

3
clusters/cl01tl/helm/blocky/values.yaml
View File

@@ -134,7 +134,7 @@ blocky:
komodo IN CNAME traefik-cl01tl
languagetool IN CNAME traefik-cl01tl
lidarr IN CNAME traefik-cl01tl
loki IN CNAME traefik-cl01tl
mail IN CNAME traefik-cl01tl
medialyze IN CNAME traefik-cl01tl
music-grabber IN CNAME traefik-cl01tl
navidrome IN CNAME traefik-cl01tl
@@ -162,6 +162,7 @@ blocky:
sonarr-4k IN CNAME traefik-cl01tl
sonarr-anime IN CNAME traefik-cl01tl
sparkyfitness IN CNAME traefik-cl01tl
stalwart IN CNAME traefik-cl01tl
tdarr IN CNAME traefik-cl01tl
tubearchivist IN CNAME traefik-cl01tl
vault IN CNAME traefik-cl01tl

44
clusters/cl01tl/helm/cert-manager/templates/prometheus-rule.yaml
View File

@@ -1,44 +0,0 @@
apiVersion: monitoring.coreos.com/v1
kind: PrometheusRule
metadata:
name: cert-manager
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: cert-manager
{{- include "custom.labels" . | nindent 4 }}
spec:
groups:
- name: EmbeddedExporter
rules:
- alert: Cert-ManagerAbsent
expr: absent(up{job="cert-manager"})
for: 10m
labels:
severity: critical
annotations:
summary: Cert-Manager absent (instance {{ `{{ $labels.instance }}` }})
description: "Cert-Manager has disappeared from Prometheus service discovery. New certificates will not be able to be minted, and existing ones can't be renewed until cert-manager is back.\n VALUE = {{ `{{ $value }}` }}\n LABELS = {{ `{{ $labels }}` }}"
- alert: Cert-ManagerCertificateExpiringSoon
expr: avg by (exported_namespace, namespace, name) (certmanager_certificate_expiration_timestamp_seconds - time()) < (21 * 24 * 3600)
for: 1h
labels:
severity: warning
annotations:
summary: Cert-Manager certificate expiring soon (instance {{ `{{ $labels.instance }}` }})
description: "The certificate {{ `{{ $labels.name }}` }} is expiring in less than 21 days.\n VALUE = {{ `{{ $value }}` }}\n LABELS = {{ `{{ $labels }}` }}"
- alert: Cert-ManagerCertificateNotReady
expr: max by (name, exported_namespace, namespace, condition) (certmanager_certificate_ready_status{condition!="True"} == 1)
for: 10m
labels:
severity: critical
annotations:
summary: Cert-Manager certificate not ready (instance {{ `{{ $labels.instance }}` }})
description: "The certificate {{ `{{ $labels.name }}` }} in namespace {{ `{{ $labels.exported_namespace }}` }} is not ready to serve traffic.\n VALUE = {{ `{{ $value }}` }}\n LABELS = {{ `{{ $labels }}` }}"
- alert: Cert-ManagerHittingACMERateLimits
expr: sum by (host) (rate(certmanager_acme_client_request_count{status="429"}[5m])) > 0
for: 5m
labels:
severity: critical
annotations:
summary: Cert-Manager hitting ACME rate limits (instance {{ `{{ $labels.instance }}` }})
description: "Cert-Manager is being rate-limited by the ACME provider. Certificate issuance and renewal may be blocked for up to a week.\n VALUE = {{ `{{ $value }}` }}\n LABELS = {{ `{{ $labels }}` }}"

6
clusters/cl01tl/helm/cilium/Chart.lock
View File

@@ -1,6 +1,6 @@
dependencies:
- name: cilium
repository: https://helm.cilium.io/
version: 1.18.9
digest: sha256:f7d127bed9b2c9154f25ffdc36ef7477ac8c8b12aeb92c5f4c20be5abd49ec11
generated: "2026-05-10T19:25:36.71023-05:00"
version: 1.18.6
digest: sha256:8ea328ac238524b5b423e6289f5e25d05ef64e6aa19cfd5de238f1d5dd533e9b
generated: "2026-02-05T12:00:20.15778-06:00"

4
clusters/cl01tl/helm/cilium/Chart.yaml
View File

@@ -14,8 +14,8 @@ maintainers:
- name: alexlebens
dependencies:
- name: cilium
version: 1.18.9
version: 1.18.6
repository: https://helm.cilium.io/
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/cilium.png
# renovate: datasource=github-releases depName=cilium/cilium
appVersion: 1.18.9
appVersion: 1.18.6

15
clusters/cl01tl/helm/cilium/templates/cilium-load-balancer-ip-pool.yaml
View File

@@ -10,3 +10,18 @@ spec:
blocks:
- start: "10.232.1.21"
stop: "10.232.1.23"
---
apiVersion: cilium.io/v2
kind: CiliumLoadBalancerIPPool
metadata:
name: bgp-ip-pool
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: bgp-ip-pool
{{- include "custom.labels" . | nindent 4 }}
spec:
blocks:
- start: "10.232.2.100"
stop: "10.232.2.200"
disabled: true

10
clusters/cl01tl/helm/cilium/values.yaml
View File

@@ -25,14 +25,20 @@ cilium:
- NET_ADMIN
- SYS_ADMIN
- SYS_RESOURCE
bgpControlPlane:
enabled: false
bpf:
hostLegacyRouting: true
masquerade: false
devices: end0 enp6s0
ciliumEndpointSlice:
enabled: true
gatewayAPI:
enabled: false
enabled: true
enableAppProtocol: true
enableAlpn: true
secretsNamespace:
create: false
name: kube-system
socketLB:
enabled: true
hostNamespaceOnly: true

8
clusters/cl01tl/helm/cloudnative-pg/Chart.lock
View File

@@ -7,9 +7,9 @@ dependencies:
version: 0.6.0
- name: rclone-bucket
repository: oci://harbor.alexlebens.net/helm-charts
version: 0.11.3
version: 0.4.3
- name: rclone-bucket
repository: oci://harbor.alexlebens.net/helm-charts
version: 0.11.3
digest: sha256:3f9cc2b51d4f30e63162b06d886415b78e37945946f8e6db642b1e94f9a917a0
generated: "2026-05-09T02:54:37.702578041Z"
version: 0.4.3
digest: sha256:75d7078b7009082521a1bb8b49141e20b442343dabe7f76f5e7a16a352cfe205
generated: "2026-04-26T15:36:31.678086-05:00"

6
clusters/cl01tl/helm/cloudnative-pg/Chart.yaml
View File

@@ -26,11 +26,11 @@ dependencies:
- name: rclone-bucket
alias: rclone-postgres-backups-remote
repository: oci://harbor.alexlebens.net/helm-charts
version: 0.11.3
version: 0.4.3
- name: rclone-bucket
alias: rclone-postgres-backups-external
repository: oci://harbor.alexlebens.net/helm-charts
version: 0.11.3
version: 0.4.3
icon: https://raw.githubusercontent.com/cloudnative-pg/cloudnative-pg.github.io/refs/heads/main/assets/images/hero_image.png
# renovate: datasource=github-releases depName=cloudnative-pg/cloudnative-pg
appVersion: 1.29.1
appVersion: 1.29.0

15
clusters/cl01tl/helm/cloudnative-pg/values.yaml
View File

@@ -18,7 +18,7 @@ rclone-postgres-backups-remote:
nameOverride: postgres-backups-remote-rclone
cronJob:
suspend: false
schedule: 30 6 * * 1
schedule: 0 1 * * *
rclone:
source:
bucketName: postgres-backups
@@ -44,13 +44,14 @@ rclone-postgres-backups-remote:
rclone-postgres-backups-external:
nameOverride: postgres-backups-external-rclone
cronJob:
suspend: false
schedule: 0 6 * * 1
suspend: true
schedule: 20 1 * * *
rclone:
source:
bucketName: postgres-backups
bucketName: openbao-backups
destination:
bucketName: postgres-backups-775957147abfbc73
bucketName: postgres-backups-ecc1010276b61716
providerType: DigitalOcean
prune:
enabled: true
ageToPrune: 45d
@@ -65,10 +66,10 @@ rclone-postgres-backups-external:
path: /garage/config
destination:
credentials:
path: /backblaze/home-infra/postgres-backups
path: /digital-ocean/home-infra/postgres-backups
keyIdProperty: AWS_ACCESS_KEY_ID
secretKeyProperty: AWS_SECRET_ACCESS_KEY
regionProperty: AWS_REGION
config:
path: /backblaze/config
path: /digital-ocean/config
endpointProperty: ENDPOINT

1
clusters/cl01tl/helm/coredns/Chart.yaml
View File

@@ -8,7 +8,6 @@ keywords:
home: https://docs.alexlebens.dev/applications/coredns/
sources:
- https://github.com/coredns/coredns
- https://explore.ggcr.dev/?repo=registry.k8s.io%2Fcoredns%2Fcoredns
- https://github.com/coredns/helm
maintainers:
- name: alexlebens

4
clusters/cl01tl/helm/coredns/values.yaml
View File

@@ -1,7 +1,7 @@
coredns:
image:
repository: coredns/coredns
tag: 1.14.3@sha256:b21d26b915e10acb5bc78715c1e8b6047ab2675389b2bcc18b3a6499d90e74c0
repository: registry.k8s.io/coredns/coredns
tag: v1.14.2@sha256:e7e6440cfd1e919280958f5b5a6ab2b184d385bba774c12ad2a9e1e4183f90d9
replicaCount: 3
resources:
limits:

14
clusters/cl01tl/helm/dawarich/Chart.lock
View File

@@ -1,21 +1,21 @@
dependencies:
- name: app-template
repository: https://bjw-s-labs.github.io/helm-charts/
version: 5.0.0
version: 4.6.2
- name: postgres-cluster
repository: oci://harbor.alexlebens.net/helm-charts
version: 7.12.1
- name: valkey
repository: oci://harbor.alexlebens.net/helm-charts
version: 0.8.0
version: 0.6.1
- name: volsync-target
repository: oci://harbor.alexlebens.net/helm-charts
version: 2.0.0
version: 1.0.0
- name: volsync-target
repository: oci://harbor.alexlebens.net/helm-charts
version: 2.0.0
version: 1.0.0
- name: volsync-target
repository: oci://harbor.alexlebens.net/helm-charts
version: 2.0.0
digest: sha256:0d0edd3f24d5ae14aa81d31cea6ea065527e4220644235d479b7b079ac5484d8
generated: "2026-05-08T20:53:11.730706-05:00"
version: 1.0.0
digest: sha256:675bca89787669fd5b23eb2d4b49a44acee2556044982bb634f678a39cec7db4
generated: "2026-04-24T22:50:43.987901153Z"

12
clusters/cl01tl/helm/dawarich/Chart.yaml
View File

@@ -19,27 +19,27 @@ dependencies:
- name: app-template
alias: dawarich
repository: https://bjw-s-labs.github.io/helm-charts/
version: 5.0.0
version: 4.6.2
- name: postgres-cluster
alias: postgres-18-cluster
version: 7.12.1
repository: oci://harbor.alexlebens.net/helm-charts
- name: valkey
alias: valkey
version: 0.8.0
version: 0.6.1
repository: oci://harbor.alexlebens.net/helm-charts
- name: volsync-target
alias: volsync-target-storage
version: 2.0.0
version: 1.0.0
repository: oci://harbor.alexlebens.net/helm-charts
- name: volsync-target
alias: volsync-target-public
version: 2.0.0
version: 1.0.0
repository: oci://harbor.alexlebens.net/helm-charts
- name: volsync-target
alias: volsync-target-watched
version: 2.0.0
version: 1.0.0
repository: oci://harbor.alexlebens.net/helm-charts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/dawarich.png
# renovate: datasource=github-releases depName=Freika/dawarich
appVersion: 1.7.7
appVersion: 1.6.1

35
clusters/cl01tl/helm/dawarich/templates/external-secret.yaml
View File

@@ -15,18 +15,6 @@ spec:
remoteRef:
key: /cl01tl/dawarich/key
property: key
- secretKey: otp-primary-key
remoteRef:
key: /cl01tl/dawarich/key
property: otp-primary-key
- secretKey: otp-deterministic-key
remoteRef:
key: /cl01tl/dawarich/key
property: otp-deterministic-key
- secretKey: otp-derivation-salt
remoteRef:
key: /cl01tl/dawarich/key
property: otp-derivation-salt
---
apiVersion: external-secrets.io/v1
@@ -50,26 +38,3 @@ spec:
remoteRef:
key: /cl01tl/authentik/oidc/dawarich
property: secret
---
apiVersion: external-secrets.io/v1
kind: ExternalSecret
metadata:
name: dawarich-metrics-credentials
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: dawarich-metrics-credentials
{{- include "custom.labels" . | nindent 4 }}
spec:
secretStoreRef:
kind: ClusterSecretStore
name: openbao
data:
- secretKey: user
remoteRef:
key: /cl01tl/dawarich/metrics
property: user
- secretKey: password
remoteRef:
key: /cl01tl/dawarich/metrics
property: password

85
clusters/cl01tl/helm/dawarich/values.yaml
View File

@@ -8,7 +8,7 @@ dawarich:
main:
image:
repository: freikin/dawarich
tag: 1.7.7@sha256:f7eea22def731ef98f0644b191c477917790bb0e5449b0014bac2f349ce178a7
tag: 1.6.1@sha256:a884f69f19ce0f66992f3872d24544d1e587e133b8a003e072711aafc1e02429
command:
- "web-entrypoint.sh"
args:
@@ -78,36 +78,11 @@ dawarich:
value: 0.0.0.0
- name: PROMETHEUS_EXPORTER_PORT
value: 9394
- name: METRICS_USERNAME
valueFrom:
secretKeyRef:
name: dawarich-metrics-credentials
key: user
- name: METRICS_PASSWORD
valueFrom:
secretKeyRef:
name: dawarich-metrics-credentials
key: password
- name: SECRET_KEY_BASE
valueFrom:
secretKeyRef:
name: dawarich-key
key: key
- name: OTP_ENCRYPTION_PRIMARY_KEY
valueFrom:
secretKeyRef:
name: dawarich-key
key: otp-primary-key
- name: OTP_ENCRYPTION_DETERMINISTIC_KEY
valueFrom:
secretKeyRef:
name: dawarich-key
key: otp-deterministic-key
- name: OTP_ENCRYPTION_KEY_DERIVATION_SALT
valueFrom:
secretKeyRef:
name: dawarich-key
key: otp-derivation-salt
- name: RAILS_LOG_TO_STDOUT
value: true
- name: SELF_HOSTED
@@ -136,7 +111,7 @@ dawarich:
sidekiq:
image:
repository: freikin/dawarich
tag: 1.7.7@sha256:f7eea22def731ef98f0644b191c477917790bb0e5449b0014bac2f349ce178a7
tag: 1.6.1@sha256:a884f69f19ce0f66992f3872d24544d1e587e133b8a003e072711aafc1e02429
command:
- "sidekiq-entrypoint.sh"
args:
@@ -186,12 +161,12 @@ dawarich:
- name: OIDC_CLIENT_ID
valueFrom:
secretKeyRef:
name: dawarich-oidc-authentik
name: dawarich-oidc-secret
key: client
- name: OIDC_CLIENT_SECRET
valueFrom:
secretKeyRef:
name: dawarich-oidc-authentik
name: dawarich-oidc-secret
key: secret
- name: OIDC_PROVIDER_NAME
value: Authentik
@@ -203,36 +178,11 @@ dawarich:
value: 0.0.0.0
- name: PROMETHEUS_EXPORTER_PORT
value: 9394
- name: METRICS_USERNAME
valueFrom:
secretKeyRef:
name: dawarich-metrics-credentials
key: user
- name: METRICS_PASSWORD
valueFrom:
secretKeyRef:
name: dawarich-metrics-credentials
key: password
- name: SECRET_KEY_BASE
valueFrom:
secretKeyRef:
name: dawarich-key
name: dawarich-key-secret
key: key
- name: OTP_ENCRYPTION_PRIMARY_KEY
valueFrom:
secretKeyRef:
name: dawarich-key
key: otp-primary-key
- name: OTP_ENCRYPTION_DETERMINISTIC_KEY
valueFrom:
secretKeyRef:
name: dawarich-key
key: otp-deterministic-key
- name: OTP_ENCRYPTION_KEY_DERIVATION_SALT
valueFrom:
secretKeyRef:
name: dawarich-key
key: otp-derivation-salt
- name: RAILS_LOG_TO_STDOUT
value: true
- name: SELF_HOSTED
@@ -276,13 +226,6 @@ dawarich:
interval: 30s
scrapeTimeout: 15s
path: /metrics
basicAuth:
password:
name: dawarich-metrics-credentials
key: password
username:
name: dawarich-metrics-credentials
key: user
route:
main:
kind: HTTPRoute
@@ -374,32 +317,32 @@ volsync-target-storage:
pvcTarget: dawarich-storage
local:
enabled: true
schedule: 30 8 * * *
schedule: 6 8 * * *
remote:
enabled: true
schedule: 30 10 * * 0
schedule: 6 9 * * *
external:
enabled: true
schedule: 30 9 * * 0
schedule: 6 10 * * *
volsync-target-public:
pvcTarget: dawarich-public
local:
enabled: true
schedule: 35 8 * * *
schedule: 8 8 * * *
remote:
enabled: true
schedule: 35 10 * * 0
schedule: 8 9 * * *
external:
enabled: true
schedule: 35 9 * * 0
schedule: 8 10 * * *
volsync-target-watched:
pvcTarget: dawarich-watched
local:
enabled: true
schedule: 40 8 * * *
schedule: 8 8 * * *
remote:
enabled: true
schedule: 40 10 * * 0
schedule: 8 9 * * *
external:
enabled: true
schedule: 40 9 * * 0
schedule: 8 10 * * *

2
clusters/cl01tl/helm/democratic-csi-synology-iscsi/values.yaml
View File

@@ -47,8 +47,6 @@ democratic-csi:
fsType: ext4
node:
hostPID: true
rbac:
enabled: true
driver:
extraEnv:
- name: ISCSIADM_HOST_STRATEGY

14
clusters/cl01tl/helm/descheduler/values.yaml
View File

@@ -10,7 +10,7 @@ descheduler:
requests:
cpu: 10m
memory: 50Mi
deschedulingInterval: 2m
deschedulingInterval: 5m
replicas: 3
leaderElection:
enabled: true
@@ -51,13 +51,13 @@ descheduler:
- name: LowNodeUtilization
args:
thresholds:
cpu: 30
memory: 30
pods: 30
cpu: 20
memory: 20
pods: 20
targetThresholds:
cpu: 45
memory: 45
pods: 45
cpu: 50
memory: 50
pods: 60
plugins:
balance:
enabled:

13
clusters/cl01tl/helm/directus/Chart.lock
View File

@@ -1,18 +1,15 @@
dependencies:
- name: app-template
repository: https://bjw-s-labs.github.io/helm-charts/
version: 5.0.0
version: 4.6.2
- name: postgres-cluster
repository: oci://harbor.alexlebens.net/helm-charts
version: 7.12.1
- name: valkey
repository: oci://harbor.alexlebens.net/helm-charts
version: 0.8.0
version: 0.6.1
- name: rclone-bucket
repository: oci://harbor.alexlebens.net/helm-charts
version: 0.11.3
- name: rclone-bucket
repository: oci://harbor.alexlebens.net/helm-charts
version: 0.11.3
digest: sha256:6051301e1205014989b92b460b771fb45418199a52f575fc3bd984796e7c7a82
generated: "2026-05-09T02:54:59.609475776Z"
version: 0.4.3
digest: sha256:df3b79c6b8868d749d98d232741fef4a26b73894bce3bf4588581340c15fc3da
generated: "2026-04-26T21:06:27.85398357Z"

12
clusters/cl01tl/helm/directus/Chart.yaml
View File

@@ -19,23 +19,19 @@ dependencies:
- name: app-template
alias: directus
repository: https://bjw-s-labs.github.io/helm-charts/
version: 5.0.0
version: 4.6.2
- name: postgres-cluster
alias: postgres-18-cluster
version: 7.12.1
repository: oci://harbor.alexlebens.net/helm-charts
- name: valkey
alias: valkey
version: 0.8.0
version: 0.6.1
repository: oci://harbor.alexlebens.net/helm-charts
- name: rclone-bucket
alias: rclone-directus-assets-remote
repository: oci://harbor.alexlebens.net/helm-charts
version: 0.11.3
- name: rclone-bucket
alias: rclone-directus-assets-external
repository: oci://harbor.alexlebens.net/helm-charts
version: 0.11.3
version: 0.4.3
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/directus.png
# renovate: datasource=github-releases depName=directus/directus
appVersion: 11.17.4
appVersion: 11.17.3

32
clusters/cl01tl/helm/directus/values.yaml
View File

@@ -8,7 +8,7 @@ directus:
main:
image:
repository: ghcr.io/directus/directus
tag: 11.17.4@sha256:eb326f679ae847c0a776f93b972761dc2ebe84980e0b9d274a6bc31cd62809f7
tag: 11.17.3@sha256:ae6ab737fd04077d295bbefa545cc4aefccc206e3d0120c83812f9b482a8c9a5
env:
- name: PUBLIC_URL
value: https://directus.alexlebens.net
@@ -210,11 +210,14 @@ valkey:
aclUsers:
default:
permissions: "~* &* +@all"
# No option to configure metrics when auth is enabled
# https://github.com/valkey-io/valkey-helm/issues/135
metrics:
enabled: false
rclone-directus-assets-remote:
nameOverride: directus-assets-remote-rclone
cronJob:
suspend: false
schedule: 30 6 * * 2
schedule: 0 0 * * *
rclone:
source:
bucketName: directus-assets
@@ -232,26 +235,3 @@ rclone-directus-assets-remote:
path: /garage/home-infra/directus-assets
config:
path: /garage/config
rclone-directus-assets-external:
nameOverride: directus-assets-external-rclone
cronJob:
suspend: false
schedule: 0 6 * * 2
rclone:
source:
bucketName: directus-assets
destination:
bucketName: directus-assets-37363a16b71dc59b
secret:
externalSecret:
source:
credentials:
path: /garage/home-infra/directus-assets
config:
path: /garage/config
destination:
credentials:
path: /backblaze/home-infra/directus-assets
config:
path: /backblaze/config
endpointProperty: ENDPOINT

6
clusters/cl01tl/helm/elastic-operator/Chart.lock
View File

@@ -1,6 +1,6 @@
dependencies:
- name: eck-operator
repository: https://helm.elastic.co
version: 3.4.0
digest: sha256:b4787630154471f65ceeb12f65fa24616eab9470e61e089b8e656e42f05f74f1
generated: "2026-05-06T19:10:32.416627028Z"
version: 3.3.2
digest: sha256:ac7a849a6d8244ef56c11f18438c4c76133f92d245228c5a1c8369d42562c177
generated: "2026-04-01T21:30:02.975920565Z"

4
clusters/cl01tl/helm/elastic-operator/Chart.yaml
View File

@@ -14,8 +14,8 @@ maintainers:
- name: alexlebens
dependencies:
- name: eck-operator
version: 3.4.0
version: 3.3.2
repository: https://helm.elastic.co
icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/elastic.png
# renovate: datasource=github-releases depName=elastic/cloud-on-k8s
appVersion: v3.4.0
appVersion: v3.3.2

1
clusters/cl01tl/helm/elastic-operator/values.yaml
View File

@@ -1,5 +1,6 @@
eck-operator:
managedNamespaces:
- stalwart
- tubearchivist
installCRDs: true
replicaCount: 2

8
clusters/cl01tl/helm/element-web/Chart.lock
View File

@@ -1,9 +1,9 @@
dependencies:
- name: element-web
repository: https://ananace.gitlab.io/charts
version: 1.4.36
version: 1.4.34
- name: cloudflared
repository: oci://harbor.alexlebens.net/helm-charts
version: 3.2.2
digest: sha256:a30fa9f1c69652d0ea4c2e12cba7a21df544e60c20d25c88e66f6f3de3e1ab83
generated: "2026-05-08T22:56:45.533196593Z"
version: 2.6.0
digest: sha256:e988be9f997351a8f658bf5151ec4fb04ae7d877389c9bf01b7331e1a58005ef
generated: "2026-04-24T21:06:15.882448748Z"

6
clusters/cl01tl/helm/element-web/Chart.yaml
View File

@@ -15,11 +15,11 @@ maintainers:
- name: alexlebens
dependencies:
- name: element-web
version: 1.4.36
version: 1.4.34
repository: https://ananace.gitlab.io/charts
- name: cloudflared
repository: oci://harbor.alexlebens.net/helm-charts
version: 3.2.2
version: 2.6.0
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/element.png
# renovate: datasource=github-releases depName=element-hq/element-web
appVersion: v1.12.17
appVersion: v1.12.15

2
clusters/cl01tl/helm/element-web/values.yaml
View File

@@ -2,7 +2,7 @@ element-web:
replicaCount: 1
image:
repository: ghcr.io/element-hq/element-web
tag: v1.12.18@sha256:c21772a1eabeededa19be591343f548995e458ec34ba8f27425ae923c10af82e
tag: v1.12.15@sha256:c7fa40b5ba3891f8af3ce63da0818f457c1802a9ee4d2f5e46a9df36a2388eed
defaultServer:
url: https://matrix.alexlebens.dev
name: alexlebens.dev

6
clusters/cl01tl/helm/eraser/Chart.lock
View File

@@ -4,6 +4,6 @@ dependencies:
version: 1.4.1
- name: app-template
repository: https://bjw-s-labs.github.io/helm-charts/
version: 5.0.0
digest: sha256:b510fa700aade3c4ff5d8cacd8099c6f52d958aff97d436d4fe63abde2200439
generated: "2026-05-07T20:44:14.408868308Z"
version: 4.6.2
digest: sha256:8414813d3d9d195b16ef7ebf814f7095a16413f4b0e579fcb37738000624f68c
generated: "2026-04-08T21:39:05.689756-05:00"

2
clusters/cl01tl/helm/eraser/Chart.yaml
View File

@@ -21,7 +21,7 @@ dependencies:
- name: app-template
alias: eraser-metrics
repository: https://bjw-s-labs.github.io/helm-charts/
version: 5.0.0
version: 4.6.2
icon: https://raw.githubusercontent.com/eraser-dev/eraser/refs/heads/main/images/eraser-logo-color-1c.png
# renovate: datasource=github-releases depName=eraser-dev/eraser
appVersion: v1.4.1

7
clusters/cl01tl/helm/eraser/values.yaml
View File

@@ -44,13 +44,11 @@ eraser-metrics:
type: deployment
replicas: 1
strategy: Recreate
serviceAccount:
name: eraser-metrics
containers:
main:
image:
repository: ghcr.io/open-telemetry/opentelemetry-collector-releases/opentelemetry-collector
tag: 0.151.0@sha256:49a12827519134ed72881a64247ea43fbf4bdac50cfa41ceb495fc1c684451e2
tag: 0.150.1@sha256:618f7867e49fdb173d9b46d535b01f82254b0b14beac6ab1f6f2eb8cf62c5d42
command:
- /otelcol
- --config=/conf/otel-collector-config.yaml
@@ -85,9 +83,6 @@ eraser-metrics:
- otlp
exporters:
- prometheus
serviceAccount:
eraser:
enabled: true
service:
main:
controller: main

6
clusters/cl01tl/helm/excalidraw/Chart.lock
View File

@@ -1,6 +1,6 @@
dependencies:
- name: app-template
repository: https://bjw-s-labs.github.io/helm-charts/
version: 5.0.0
digest: sha256:297d4f45c64ccbaac66c103774e97bacde3f249cab40afef06c0c1106b62ab79
generated: "2026-05-07T20:44:26.213030206Z"
version: 4.6.2
digest: sha256:e05d84dd266b8b456a8bc7f9a2bb3ab01f4ac926efd1a58cf405b0cdab343d3f
generated: "2026-01-17T18:27:08.062835-06:00"

2
clusters/cl01tl/helm/excalidraw/Chart.yaml
View File

@@ -16,7 +16,7 @@ dependencies:
- name: app-template
alias: excalidraw
repository: https://bjw-s-labs.github.io/helm-charts/
version: 5.0.0
version: 4.6.2
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/excalidraw.png
# renovate: datasource=github-releases depName=excalidraw/excalidraw
appVersion: v0.18.1

2
clusters/cl01tl/helm/excalidraw/values.yaml
View File

@@ -8,7 +8,7 @@ excalidraw:
main:
image:
repository: excalidraw/excalidraw
tag: latest@sha256:f7ee194addd607bf831d2af0f0a34463dd4225e426cf35199ef0b12a803398e9
tag: latest@sha256:20ffa04668e19616bb0c1b3632849e5cd96e0bc7a1336b73d9d072667f2c2854
env:
- name: NODE_ENV
value: production

6
clusters/cl01tl/helm/external-dns/Chart.lock
View File

@@ -1,6 +1,6 @@
dependencies:
- name: external-dns
repository: https://kubernetes-sigs.github.io/external-dns/
version: 1.21.1
digest: sha256:c0fc34e2a1fd5a100043c2e22130a3a7910019b655c5e69a50424562f4322f5d
generated: "2026-05-01T02:29:38.018973854Z"
version: 1.20.0
digest: sha256:0da4dec408239ea48de1d95fa8ad7701c4fdc0efe67baa8743507c75e62e2a47
generated: "2026-01-03T23:04:25.142170083Z"

2
clusters/cl01tl/helm/external-dns/Chart.yaml
View File

@@ -16,7 +16,7 @@ maintainers:
dependencies:
- name: external-dns
alias: external-dns-unifi
version: 1.21.1
version: 1.20.0
repository: https://kubernetes-sigs.github.io/external-dns/
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
# renovate: datasource=github-releases depName=kubernetes-sigs/external-dns

6
clusters/cl01tl/helm/external-secrets/Chart.lock
View File

@@ -1,6 +1,6 @@
dependencies:
- name: external-secrets
repository: https://charts.external-secrets.io
version: 2.4.1
digest: sha256:f862e1236cdbd9ddea5692ae63f7a05a4dc1f3d60bcae33015237cc0a630c224
generated: "2026-04-28T18:30:17.998349684Z"
version: 2.4.0
digest: sha256:a31b4ba5b5ec296036576c8d7d26f8b42061eec7142817f9ca0c256a457a2ea1
generated: "2026-04-24T19:03:31.856576444Z"

4
clusters/cl01tl/helm/external-secrets/Chart.yaml
View File

@@ -14,8 +14,8 @@ sources:
dependencies:
- name: external-secrets
alias: external-secrets
version: 2.4.1
version: 2.4.0
repository: https://charts.external-secrets.io
icon: https://raw.githubusercontent.com/external-secrets/external-secrets/refs/heads/main/assets/eso-logo-large.png
# renovate: datasource=github-releases depName=external-secrets/external-secrets
appVersion: v2.4.1
appVersion: v2.4.0

6
clusters/cl01tl/helm/external-secrets/values.yaml
View File

@@ -2,7 +2,7 @@ external-secrets:
replicaCount: 3
image:
repository: ghcr.io/external-secrets/external-secrets
tag: v2.4.1@sha256:9440a40b394791a5e93f3f7e1b33399ecbdc0e38273de1d69ed83fe12936fc09
tag: v2.4.0@sha256:d2b74514f63f5b55360d08351f1fe5af3b1db794a81fa10389abe2ff2999c566
installCRDs: true
crds:
createClusterExternalSecret: true
@@ -29,7 +29,7 @@ external-secrets:
webhook:
image:
repository: ghcr.io/external-secrets/external-secrets
tag: v2.4.1@sha256:9440a40b394791a5e93f3f7e1b33399ecbdc0e38273de1d69ed83fe12936fc09
tag: v2.4.0@sha256:d2b74514f63f5b55360d08351f1fe5af3b1db794a81fa10389abe2ff2999c566
resources:
requests:
cpu: 1m
@@ -37,7 +37,7 @@ external-secrets:
certController:
image:
repository: ghcr.io/external-secrets/external-secrets
tag: v2.4.1@sha256:9440a40b394791a5e93f3f7e1b33399ecbdc0e38273de1d69ed83fe12936fc09
tag: v2.4.0@sha256:d2b74514f63f5b55360d08351f1fe5af3b1db794a81fa10389abe2ff2999c566
resources:
requests:
cpu: 1m

10
clusters/cl01tl/helm/foldergram/Chart.lock
View File

@@ -1,12 +1,12 @@
dependencies:
- name: app-template
repository: https://bjw-s-labs.github.io/helm-charts/
version: 5.0.0
version: 4.6.2
- name: cloudflared
repository: oci://harbor.alexlebens.net/helm-charts
version: 3.2.2
version: 2.6.0
- name: volsync-target
repository: oci://harbor.alexlebens.net/helm-charts
version: 2.0.0
digest: sha256:2ad0cb505a0ad6dcfcc34aa7ac3bf675669983caa71dfee3f3a0868dfd5917c8
generated: "2026-05-08T20:53:44.939991-05:00"
version: 1.0.0
digest: sha256:c42d896ab065b1278e0ae9f297e15ba2165fec99148003bf67f56aa641cf406a
generated: "2026-04-24T22:50:55.336683873Z"

6
clusters/cl01tl/helm/foldergram/Chart.yaml
View File

@@ -18,13 +18,13 @@ dependencies:
- name: app-template
alias: foldergram
repository: https://bjw-s-labs.github.io/helm-charts/
version: 5.0.0
version: 4.6.2
- name: cloudflared
repository: oci://harbor.alexlebens.net/helm-charts
version: 3.2.2
version: 2.6.0
- name: volsync-target
alias: volsync-target-db
version: 2.0.0
version: 1.0.0
repository: oci://harbor.alexlebens.net/helm-charts
icon: https://raw.githubusercontent.com/foldergram/foldergram/refs/heads/main/client/public/icon-512.png
# renovate: datasource=github-releases depName=foldergram/foldergram

6
clusters/cl01tl/helm/foldergram/values.yaml
View File

@@ -87,10 +87,10 @@ volsync-target-db:
pvcTarget: foldergram-db
local:
enabled: true
schedule: 0 8 * * *
schedule: 46 11 * * *
remote:
enabled: true
schedule: 0 10 * * 1
schedule: 46 12 * * *
external:
enabled: true
schedule: 0 9 * * 1
schedule: 46 13 * * *

10
clusters/cl01tl/helm/freshrss/Chart.lock
View File

@@ -1,15 +1,15 @@
dependencies:
- name: app-template
repository: https://bjw-s-labs.github.io/helm-charts/
version: 5.0.0
version: 4.6.2
- name: cloudflared
repository: oci://harbor.alexlebens.net/helm-charts
version: 3.2.2
version: 2.6.0
- name: postgres-cluster
repository: oci://harbor.alexlebens.net/helm-charts
version: 7.12.1
- name: volsync-target
repository: oci://harbor.alexlebens.net/helm-charts
version: 2.0.0
digest: sha256:1ad2ebba1ab013fb1eb7301517787ffd7841ed3e5b464da65283917bb9f18d94
generated: "2026-05-08T20:53:48.242974-05:00"
version: 1.0.0
digest: sha256:ad75160abdeec46eb8cbcfa25ce69cc99c0ec5e73142560df3ef5b1490a2a3f3
generated: "2026-04-24T22:51:06.194383563Z"

8
clusters/cl01tl/helm/freshrss/Chart.yaml
View File

@@ -19,18 +19,18 @@ dependencies:
- name: app-template
alias: freshrss
repository: https://bjw-s-labs.github.io/helm-charts/
version: 5.0.0
version: 4.6.2
- name: cloudflared
repository: oci://harbor.alexlebens.net/helm-charts
version: 3.2.2
version: 2.6.0
- name: postgres-cluster
alias: postgres-18-cluster
version: 7.12.1
repository: oci://harbor.alexlebens.net/helm-charts
- name: volsync-target
alias: volsync-target-data
version: 2.0.0
version: 1.0.0
repository: oci://harbor.alexlebens.net/helm-charts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/freshrss.png
# renovate: datasource=github-releases depName=FreshRSS/FreshRSS
appVersion: 1.29.0
appVersion: 1.28.1

8
clusters/cl01tl/helm/freshrss/values.yaml
View File

@@ -8,7 +8,7 @@ freshrss:
main:
image:
repository: freshrss/freshrss
tag: 1.29.0@sha256:cca8988d05cd449e1c6c69405971b1e6fc2c2116ceeb45c9fa3fc33837997a75
tag: 1.28.1@sha256:9100f649f5c946f589f54cdb9be7a65996528f48f691ef90eb262a0e06e5a522
env:
- name: PGID
value: "568"
@@ -126,10 +126,10 @@ volsync-target-data:
fsGroupChangePolicy: OnRootMismatch
local:
enabled: true
schedule: 5 8 * * *
schedule: 18 8 * * *
remote:
enabled: true
schedule: 5 10 * * 1
schedule: 18 9 * * *
external:
enabled: true
schedule: 5 9 * * 1
schedule: 18 10 * * *

6
clusters/cl01tl/helm/garage/Chart.lock
View File

@@ -1,6 +1,6 @@
dependencies:
- name: app-template
repository: https://bjw-s-labs.github.io/helm-charts/
version: 5.0.0
digest: sha256:925129100b32d9daf71142dc3fc42914cc26d40581a523c574c81ec79e2a0fc6
generated: "2026-05-07T20:44:57.951189479Z"
version: 4.6.2
digest: sha256:86536c14fa61870a64540b77f65afae8f4308e41a66eefae7fe85b83bf0df30e
generated: "2026-01-16T18:46:33.321938614Z"

2
clusters/cl01tl/helm/garage/Chart.yaml
View File

@@ -18,7 +18,7 @@ dependencies:
- name: app-template
alias: garage
repository: https://bjw-s-labs.github.io/helm-charts/
version: 5.0.0
version: 4.6.2
icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/garage.png
# renovate: datasource=docker depName=dxflrs/garage
appVersion: v2.3.0

6
clusters/cl01tl/helm/gatus/Chart.lock
View File

@@ -7,6 +7,6 @@ dependencies:
version: 7.12.1
- name: volsync-target
repository: oci://harbor.alexlebens.net/helm-charts
version: 2.0.0
digest: sha256:25d95b64934fb0fe59914f82b752de38979929342c0a8dad1be77e4a1b2ed93f
generated: "2026-05-08T20:53:54.376296-05:00"
version: 1.0.0
digest: sha256:a1e4ca6f575989ad15501f31842b7b0a505cc7b2fc21d61587b8ae9ad7d39ffc
generated: "2026-04-24T22:51:17.210954901Z"

2
clusters/cl01tl/helm/gatus/Chart.yaml
View File

@@ -24,7 +24,7 @@ dependencies:
repository: oci://harbor.alexlebens.net/helm-charts
- name: volsync-target
alias: volsync-target-data
version: 2.0.0
version: 1.0.0
repository: oci://harbor.alexlebens.net/helm-charts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/gatus.png
# renovate: datasource=github-releases depName=TwiN/gatus

12
clusters/cl01tl/helm/gatus/values.yaml
View File

@@ -212,6 +212,12 @@ gatus:
- name: authentik
url: https://authentik.alexlebens.net
<<: *defaults
- name: roundcube
url: https://mail.alexlebens.net
<<: *defaults
- name: stalwart
url: https://stalwart.alexlebens.net
<<: *defaults
- name: ntfy
url: https://ntfy.alexlebens.net
<<: *defaults
@@ -412,10 +418,10 @@ volsync-target-data:
pvcTarget: gatus
local:
enabled: true
schedule: 15 8 * * *
schedule: 20 8 * * *
remote:
enabled: true
schedule: 15 10 * * 1
schedule: 20 9 * * *
external:
enabled: true
schedule: 15 9 * * 1
schedule: 20 10 * * *

6
clusters/cl01tl/helm/generic-device-plugin/Chart.lock
View File

@@ -1,6 +1,6 @@
dependencies:
- name: generic-device-plugin
repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
version: 0.21.2
digest: sha256:711b3c3b3433e0358609b98a2fedad17fea5ecb34d07c18a61393756b03f2cb5
generated: "2026-05-08T22:23:52.971515743Z"
version: 0.20.31
digest: sha256:2e073f735a5ff699844eb67715ab20d403261b3e9c035ebdc4292cee9666b4f4
generated: "2026-04-15T01:16:30.361061773Z"

2
clusters/cl01tl/helm/generic-device-plugin/Chart.yaml
View File

@@ -14,6 +14,6 @@ maintainers:
dependencies:
- name: generic-device-plugin
repository: https://gitea.alexlebens.dev/api/packages/alexlebens/helm
version: 0.21.2
version: 0.20.31
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kubernetes.png
appVersion: 1.0.0

12
clusters/cl01tl/helm/gitea/Chart.lock
View File

@@ -10,18 +10,18 @@ dependencies:
version: 0.32.0
- name: cloudflared
repository: oci://harbor.alexlebens.net/helm-charts
version: 3.2.2
version: 2.6.0
- name: postgres-cluster
repository: oci://harbor.alexlebens.net/helm-charts
version: 7.12.1
- name: valkey
repository: oci://harbor.alexlebens.net/helm-charts
version: 0.8.0
version: 0.6.1
- name: valkey
repository: oci://harbor.alexlebens.net/helm-charts
version: 0.8.0
version: 0.6.1
- name: volsync-target
repository: oci://harbor.alexlebens.net/helm-charts
version: 2.0.0
digest: sha256:9041a1e7404b01fa42825616a239d886aebcd753528b8b2868ef125e042c9dde
generated: "2026-05-08T20:54:01.685912-05:00"
version: 1.0.0
digest: sha256:a90e8908ef9f5349f444e53474692af302999b0ddcfa6d68f24ede9ef55d97e5
generated: "2026-04-24T22:51:28.783181948Z"

8
clusters/cl01tl/helm/gitea/Chart.yaml
View File

@@ -37,22 +37,22 @@ dependencies:
repository: https://meilisearch.github.io/meilisearch-kubernetes
- name: cloudflared
repository: oci://harbor.alexlebens.net/helm-charts
version: 3.2.2
version: 2.6.0
- name: postgres-cluster
alias: postgres-18-cluster
version: 7.12.1
repository: oci://harbor.alexlebens.net/helm-charts
- name: valkey
alias: valkey-gitea
version: 0.8.0
version: 0.6.1
repository: oci://harbor.alexlebens.net/helm-charts
- name: valkey
alias: valkey-renovate
version: 0.8.0
version: 0.6.1
repository: oci://harbor.alexlebens.net/helm-charts
- name: volsync-target
alias: volsync-target-storage
version: 2.0.0
version: 1.0.0
repository: oci://harbor.alexlebens.net/helm-charts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/gitea.png
# renovate: datasource=github-releases depName=go-gitea/gitea

28
clusters/cl01tl/helm/gitea/templates/prometheus-rule.yaml
View File

@@ -1,28 +0,0 @@
apiVersion: monitoring.coreos.com/v1
kind: PrometheusRule
metadata:
name: meilisearch
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: meilisearch
{{- include "custom.labels" . | nindent 4 }}
spec:
groups:
- name: EmbeddedExporter
rules:
- alert: MeilisearchIndexIsEmpty
expr: meilisearch_index_docs_count == 0
for: 0m
labels:
severity: warning
annotations:
summary: Meilisearch index is empty (instance {{ `{{ $labels.instance }}` }})
description: "Meilisearch index {{ `{{ $labels.index }}` }} has zero documents\n VALUE = {{ `{{ $value }}` }}\n LABELS = {{ `{{ $labels }}` }}"
- alert: MeilisearchHttpResponseTime
expr: meilisearch_http_response_time_seconds > 0.5
for: 0m
labels:
severity: warning
annotations:
summary: Meilisearch http response time (instance {{ `{{ $labels.instance }}` }})
description: "Meilisearch http response time is too high\n VALUE = {{ `{{ $value }}` }}\n LABELS = {{ `{{ $labels }}` }}"

8
clusters/cl01tl/helm/gitea/values.yaml
View File

@@ -194,7 +194,7 @@ gitea-actions:
registry: docker.io
repository: gitea/act_runner
# renovate: datasource=docker depName=gitea/act_runner
tag: 0.6.1@sha256:b5c35d6bdbb9bb25e531230bfc7cc663cb751406cbec90a2a891b85fea54de86
tag: 0.5.0@sha256:9946000491cf19c3ed487c23e5da4f0c287010d791f495796c756e41e7a79cbe
extraVolumeMounts:
- name: workspace-vol
mountPath: /workspace
@@ -212,7 +212,7 @@ gitea-actions:
registry: docker.io
repository: docker
# renovate: datasource=docker depName=docker
tag: 29.4.3-dind@sha256:685b91dca8eab7de1dce1c303dbb7a763e4082d6a60db10968adf3295fbd2495
tag: 29.4.1-dind@sha256:c77e5d7912f9b137cc67051fdc2991d8f5ae22c55ddf532bb836dcb693a04940
extraVolumeMounts:
- name: docker-vol
mountPath: /var/lib/docker
@@ -280,10 +280,10 @@ valkey-gitea:
cpu: 20m
memory: 1Gi
dataStorage:
requestedSize: 20Gi
requestedSize: 10Gi
replica:
persistence:
size: 20Gi
size: 10Gi
valkey-renovate:
valkey:
nameOverride: valkey-renovate

8
clusters/cl01tl/helm/grafana-operator/Chart.lock
View File

@@ -7,9 +7,9 @@ dependencies:
version: 7.12.1
- name: valkey
repository: oci://harbor.alexlebens.net/helm-charts
version: 0.8.0
version: 0.6.1
- name: valkey
repository: oci://harbor.alexlebens.net/helm-charts
version: 0.8.0
digest: sha256:a8553690c0fa8cbb9b6707388c3bcc11f2f38314d6512b1b9b2467f862cca4d9
generated: "2026-05-08T02:31:18.145858152Z"
version: 0.6.1
digest: sha256:fffa0806096edeb2b6a6ceead50427544ef3880a3d135afb4a9c7570d05b2042
generated: "2026-04-24T21:52:27.743114014Z"

4
clusters/cl01tl/helm/grafana-operator/Chart.yaml
View File

@@ -24,11 +24,11 @@ dependencies:
repository: oci://harbor.alexlebens.net/helm-charts
- name: valkey
alias: valkey-unified-alerting
version: 0.8.0
version: 0.6.1
repository: oci://harbor.alexlebens.net/helm-charts
- name: valkey
alias: valkey-remote-cache
version: 0.8.0
version: 0.6.1
repository: oci://harbor.alexlebens.net/helm-charts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/grafana.png
# renovate: datasource=github-releases depName=grafana/grafana-operator

54
clusters/cl01tl/helm/grafana-operator/templates/grafana-dashboard.yaml
View File

@@ -195,24 +195,6 @@ spec:
resyncPeriod: 6h
url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/service/cert-manager.json
---
apiVersion: grafana.integreatly.org/v1beta1
kind: GrafanaDashboard
metadata:
name: grafana-dashboard-cloudflare-tunnels
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: grafana-dashboard-cloudflare-tunnels
{{- include "custom.labels" . | nindent 4 }}
spec:
instanceSelector:
matchLabels:
app: grafana-main
contentCacheDuration: 6h
folderUID: grafana-folder-service
resyncPeriod: 6h
url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/service/cloudflare-tunnels.json
---
apiVersion: grafana.integreatly.org/v1beta1
kind: GrafanaDashboard
@@ -429,6 +411,24 @@ spec:
resyncPeriod: 6h
url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/service/unpoller.json
---
apiVersion: grafana.integreatly.org/v1beta1
kind: GrafanaDashboard
metadata:
name: grafana-dashboard-version-checker-internal
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: grafana-dashboard-version-checker-internal
{{- include "custom.labels" . | nindent 4 }}
spec:
instanceSelector:
matchLabels:
app: grafana-main
contentCacheDuration: 6h
folderUID: grafana-folder-service
resyncPeriod: 6h
url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/service/version-checker-internal.json
---
apiVersion: grafana.integreatly.org/v1beta1
kind: GrafanaDashboard
@@ -573,24 +573,6 @@ spec:
resyncPeriod: 6h
url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/platform/qbittorrent.json
---
apiVersion: grafana.integreatly.org/v1beta1
kind: GrafanaDashboard
metadata:
name: grafana-dashboard-rclone
namespace: {{ .Release.Namespace }}
labels:
app.kubernetes.io/name: grafana-dashboard-rclone
{{- include "custom.labels" . | nindent 4 }}
spec:
instanceSelector:
matchLabels:
app: grafana-main
contentCacheDuration: 6h
folderUID: grafana-folder-platform
resyncPeriod: 6h
url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/platform/rclone.json
---
apiVersion: grafana.integreatly.org/v1beta1
kind: GrafanaDashboard

8
clusters/cl01tl/helm/grimmory/Chart.lock
View File

@@ -1,12 +1,12 @@
dependencies:
- name: app-template
repository: https://bjw-s-labs.github.io/helm-charts/
version: 5.0.0
version: 4.6.2
- name: mariadb-cluster
repository: https://helm.mariadb.com/mariadb-operator
version: 26.3.0
- name: volsync-target
repository: oci://harbor.alexlebens.net/helm-charts
version: 2.0.0
digest: sha256:27ac7e85baa400d8bf3ae2d7fa84bef1cb4f240043b34b6b6316d8fe4bf88851
generated: "2026-05-08T20:54:16.639097-05:00"
version: 1.0.0
digest: sha256:d09beb99121c26ff41807ad0e04c8603e4b4a898b4da9dabae111b6a117533bd
generated: "2026-04-24T22:51:44.025287784Z"

6
clusters/cl01tl/helm/grimmory/Chart.yaml
View File

@@ -18,14 +18,14 @@ dependencies:
- name: app-template
alias: grimmory
repository: https://bjw-s-labs.github.io/helm-charts/
version: 5.0.0
version: 4.6.2
- name: mariadb-cluster
version: 26.3.0
repository: https://helm.mariadb.com/mariadb-operator
- name: volsync-target
alias: volsync-target-config
version: 2.0.0
version: 1.0.0
repository: oci://harbor.alexlebens.net/helm-charts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/grimmory.png
# renovate: datasource=github-releases depName=grimmory-tools/grimmory
appVersion: v3.0.3
appVersion: v3.0.2

8
clusters/cl01tl/helm/grimmory/templates/external-secret.yaml
View File

@@ -32,12 +32,12 @@ spec:
data:
- secretKey: access
remoteRef:
key: /backblaze/home-infra/mariadb-backups
property: ACCESS_KEY_ID
key: /digital-ocean/home-infra/mariadb-backups
property: AWS_ACCESS_KEY_ID
- secretKey: secret
remoteRef:
key: /backblaze/home-infra/mariadb-backups
property: ACCESS_SECRET_KEY
key: /digital-ocean/home-infra/mariadb-backups
property: AWS_SECRET_ACCESS_KEY
---
apiVersion: external-secrets.io/v1

16
clusters/cl01tl/helm/grimmory/values.yaml
View File

@@ -12,7 +12,7 @@ grimmory:
main:
image:
repository: ghcr.io/grimmory-tools/grimmory
tag: v3.0.3@sha256:a903a2b44c308bd1738b6f7cdb5a2e5a2a1ae23a092f30eb68581e2be1af50cd
tag: v3.0.2@sha256:4557a78321add7d70bef7c0b89c2617c8c023246ae39698bc2cbe636f8c97f9b
env:
- name: TZ
value: America/Chicago
@@ -151,7 +151,7 @@ mariadb-cluster:
physicalBackups:
- name: backup-external
schedule:
cron: "0 0 * * 6"
cron: "0 0 * * 0"
suspend: false
immediate: true
compression: gzip
@@ -159,10 +159,10 @@ mariadb-cluster:
successfulJobsHistoryLimit: 1
storage:
s3:
bucket: mariadb-backups-6e3b78870f7af040
bucket: mariadb-backups-b230a2f5aecf080a4b372c08
prefix: cl01tl/grimmory
endpoint: s3.us-east-005.backblazeb2.com
region: us-east-005
endpoint: nyc3.digitaloceanspaces.com
region: us-east-1
accessKeyIdSecretKeyRef:
name: grimmory-mariadb-cluster-backup-secret-external
key: access
@@ -220,10 +220,10 @@ volsync-target-config:
fsGroupChangePolicy: OnRootMismatch
local:
enabled: true
schedule: 20 8 * * *
schedule: 12 8 * * *
remote:
enabled: true
schedule: 20 10 * * 1
schedule: 12 9 * * *
external:
enabled: true
schedule: 20 9 * * 1
schedule: 12 10 * * *

8
clusters/cl01tl/helm/harbor/Chart.lock
View File

@@ -1,12 +1,12 @@
dependencies:
- name: harbor
repository: https://helm.goharbor.io
version: 1.19.0
version: 1.18.3
- name: postgres-cluster
repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
version: 7.12.1
- name: valkey
repository: oci://harbor.alexlebens.net/helm-charts
version: 0.8.0
digest: sha256:4ef3c0544281466cf714f5c6410309d4e090463d7f9a5750cd954c520abb0a40
generated: "2026-05-08T02:31:31.873945824Z"
version: 0.6.1
digest: sha256:b1f69102ef2b48dc219b41a6f92ab26d3fda803877948b3288a3c5ebc8e69d86
generated: "2026-04-24T21:52:56.225496919Z"

6
clusters/cl01tl/helm/harbor/Chart.yaml
View File

@@ -16,7 +16,7 @@ maintainers:
- name: alexlebens
dependencies:
- name: harbor
version: 1.19.0
version: 1.18.3
repository: https://helm.goharbor.io
- name: postgres-cluster
alias: postgres-18-cluster
@@ -24,8 +24,8 @@ dependencies:
repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
- name: valkey
alias: valkey
version: 0.8.0
version: 0.6.1
repository: oci://harbor.alexlebens.net/helm-charts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/harbor.png
# renovate: datasource=github-releases depName=goharbor/harbor
appVersion: v2.15.1
appVersion: v2.15.0

14
clusters/cl01tl/helm/harbor/values.yaml
View File

@@ -37,12 +37,12 @@ harbor:
portal:
image:
repository: ghcr.io/goharbor/harbor-portal
tag: v2.15.1@sha256:ac55161c57a8351807adf8f8def264bdd52667c371d0436beefebdac4341c9e2
tag: v2.15.0@sha256:541d5fa95bf77240d46a438f86245cdfd6afa6dd7fdd0cf4dd4c905af6a980b1
replicas: 2
core:
image:
repository: ghcr.io/goharbor/harbor-core
tag: v2.15.1@sha256:887a85b8ea98b76bfc9f715f1a0785bb99f9a1034241513902dd6e95be922a83
tag: v2.15.0@sha256:32a13f6693a278261e9c9cb7eb606c5e2aa021308ae44fdc73225755048500a8
replicas: 2
existingSecret: harbor-secret
secretName: harbor-secret
@@ -50,7 +50,7 @@ harbor:
jobservice:
image:
repository: ghcr.io/goharbor/harbor-jobservice
tag: v2.15.1@sha256:0de4fd2ce3a02d3e6591b439e4674ea085885ddf43652b44004cc67eb19dba12
tag: v2.15.0@sha256:a22c7cccba4673b26ffb96f5c37971d85d879dd837bc82448e01c0170b68cf28
replicas: 2
jobLoggers:
- stdout
@@ -59,11 +59,11 @@ harbor:
registry:
image:
repository: goharbor/registry-photon
tag: v2.15.1@sha256:ebf0325c2661729dbb317cbf839608eb8b15cfa158911a94976f2c21563c466e
tag: v2.15.0@sha256:beb49fd16cf0906c04a2bf51a22f7210289e7cc2ae43a733e2a0364380aceae6
controller:
image:
repository: ghcr.io/goharbor/harbor-registryctl
tag: v2.15.1@sha256:554147a956989175f63f8d41573d716c6ddf6052acd1749c88c0f99ce6ee2bff
tag: v2.15.0@sha256:463172f71d3a1e8d4f9e3b4e687a447f41fbc3126316d8c150dba04a903bbc47
existingSecret: harbor-secret
relativeurls: true
credentials:
@@ -74,7 +74,7 @@ harbor:
enabled: true
image:
repository: ghcr.io/goharbor/trivy-adapter-photon
tag: v2.15.1@sha256:f0c52bed36c083ec4fded26cefab01e4cd58c9354c261cb3156c69f57bb50131
tag: v2.15.0@sha256:6fd6de9cfbbb04cb1d94722cfa01cf71b8994d3f9e7891d3b03a89a7536480ba
database:
type: external
external:
@@ -90,7 +90,7 @@ harbor:
exporter:
image:
repository: ghcr.io/goharbor/harbor-exporter
tag: v2.15.1@sha256:372275b6b6abeb571fa7bd5de458e3d75f1a1636503b3c0abe02938f2b285d75
tag: v2.15.0@sha256:ad065e4e1a0ee900a0bb1a03d57028ed4b51dc04933f5c1cb5c4aee301a72ddb
replicas: 2
postgres-18-cluster:
mode: recovery

6
clusters/cl01tl/helm/headlamp/Chart.lock
View File

@@ -1,6 +1,6 @@
dependencies:
- name: headlamp
repository: https://kubernetes-sigs.github.io/headlamp/
version: 0.42.0
digest: sha256:09efb4cfe9ef92337074c8ae52a564bf902be41f9fcd742dde34b3fe4b4331fa
generated: "2026-05-07T20:38:18.198513024Z"
version: 0.41.0
digest: sha256:b1cbc64b393c6c9e1c460510adab528cee8336735659040b9c517976e5c6f15d
generated: "2026-03-26T15:07:50.703213905Z"

4
clusters/cl01tl/helm/headlamp/Chart.yaml
View File

@@ -13,8 +13,8 @@ maintainers:
- name: alexlebens
dependencies:
- name: headlamp
version: 0.42.0
version: 0.41.0
repository: https://kubernetes-sigs.github.io/headlamp/
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/headlamp.png
# renovate: datasource=github-releases depName=headlamp-k8s/headlamp
appVersion: vv0.42.0
appVersion: v0.41.0

2
clusters/cl01tl/helm/headlamp/values.yaml
View File

@@ -3,7 +3,7 @@ headlamp:
image:
registry: ghcr.io
repository: headlamp-k8s/headlamp
tag: v0.42.0@sha256:c9754bae1d799220da0547e51ceee234f6e66ebadc138518ca73e33ecd331e59
tag: v0.41.0@sha256:89c6c65810bfde61796483c93c70d659104355593792bf55cab680d685da8eeb
config:
oidc:
secret:

8
clusters/cl01tl/helm/home-assistant/Chart.lock
View File

@@ -1,9 +1,9 @@
dependencies:
- name: app-template
repository: https://bjw-s-labs.github.io/helm-charts/
version: 5.0.0
version: 4.6.2
- name: volsync-target
repository: oci://harbor.alexlebens.net/helm-charts
version: 2.0.0
digest: sha256:89add90994b0d2fe2f54bd69d273fd3091f72171876f0e8c9d5921424a75eeb9
generated: "2026-05-08T20:54:29.67904-05:00"
version: 1.0.0
digest: sha256:481ed6b5635e7005687c80bdb4d18e500b45b9a7c58f15b19bd2de77c96ddbd4
generated: "2026-04-24T22:51:56.321419086Z"

6
clusters/cl01tl/helm/home-assistant/Chart.yaml
View File

@@ -17,11 +17,11 @@ dependencies:
- name: app-template
alias: home-assistant
repository: https://bjw-s-labs.github.io/helm-charts/
version: 5.0.0
version: 4.6.2
- name: volsync-target
alias: volsync-target-config
version: 2.0.0
version: 1.0.0
repository: oci://harbor.alexlebens.net/helm-charts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/home-assistant.png
# renovate: datasource=github-releases depName=home-assistant/core
appVersion: 2026.5.1
appVersion: 2026.4.4

10
clusters/cl01tl/helm/home-assistant/values.yaml
View File

@@ -12,7 +12,7 @@ home-assistant:
main:
image:
repository: ghcr.io/home-assistant/home-assistant
tag: 2026.5.1@sha256:d4fbec16196d5c8bedf32647f0ca7165f654d92a2e81f35a373508d3226cb867
tag: 2026.4.4@sha256:c1e5f0147f4cb51ccb05bb30b62a1269cc1bd48a6274792d3b38a77ab274dfd2
env:
- name: TZ
value: America/Chicago
@@ -23,7 +23,7 @@ home-assistant:
code-server:
image:
repository: ghcr.io/linuxserver/code-server
tag: 4.118.0-ls336@sha256:6e542034343228a692e0b24f12cbcc8ade3650ec1e2c9e195bc291f2bf024e3c
tag: 4.117.0-ls334@sha256:1f384394d473c43ab6a39b2227ba3aa9c95af648ce3a67e1b4da1969c16c7c0d
env:
- name: TZ
value: America/Chicago
@@ -121,10 +121,10 @@ volsync-target-config:
fsGroupChangePolicy: OnRootMismatch
local:
enabled: true
schedule: 25 8 * * *
schedule: 22 8 * * *
remote:
enabled: true
schedule: 25 10 * * 1
schedule: 22 9 * * *
external:
enabled: true
schedule: 25 9 * * 1
schedule: 22 10 * * *

6
clusters/cl01tl/helm/homepage/Chart.lock
View File

@@ -1,6 +1,6 @@
dependencies:
- name: app-template
repository: https://bjw-s-labs.github.io/helm-charts/
version: 5.0.0
digest: sha256:81785552a943df54d09164776a170a007573e38ab96b00872bb22030079076e9
generated: "2026-05-07T20:45:33.699577658Z"
version: 4.6.2
digest: sha256:1f6cc724b7c88b5209d893b4b3c914e4064a5450e9bb6ca89ef5642199020f2b
generated: "2026-01-16T18:47:06.186790637Z"

4
clusters/cl01tl/helm/homepage/Chart.yaml
View File

@@ -16,7 +16,7 @@ dependencies:
- name: app-template
alias: homepage
repository: https://bjw-s-labs.github.io/helm-charts/
version: 5.0.0
version: 4.6.2
icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/homepage.png
# renovate: datasource=github-releases depName=gethomepage/homepage
appVersion: v1.13.0
appVersion: v1.12.3

35
clusters/cl01tl/helm/homepage/values.yaml
View File

@@ -8,13 +8,15 @@ homepage:
strategy: Recreate
annotations:
reloader.stakater.com/auto: "true"
serviceAccount:
name: homepage
pod:
automountServiceAccountToken: true
containers:
main:
image:
repository: ghcr.io/gethomepage/homepage
tag: v1.13.1@sha256:d8d784e5090111b6e4c56dfd90e272d2953a2094e87349f647165df0fa6c4401
tag: v1.12.3@sha256:cc84f2f5eb3c7734353701ccbaa24ed02dacb0d119114e50e4251e2005f3990a
env:
- name: HOMEPAGE_ALLOWED_HOSTS
value: home.alexlebens.net
@@ -25,6 +27,10 @@ homepage:
requests:
cpu: 1m
memory: 128Mi
serviceAccount:
homepage:
enabled: true
staticToken: true
configMaps:
config:
enabled: true
@@ -481,6 +487,24 @@ homepage:
href: https://authentik.alexlebens.net
siteMonitor: http://authentik-server.authentik:80
statusStyle: dot
- Email Client:
icon: sh-roundcube.webp
description: Roundcube
href: https://mail.alexlebens.net
siteMonitor: http://roundcube.roundcube:80
statusStyle: dot
- Email Server:
icon: sh-stalwart.webp
description: Stalwart
href: https://stalwart.alexlebens.net
siteMonitor: http://stalwart.stalwart:80
statusStyle: dot
namespace: stalwart
app: stalwart
podSelector: >-
app.kubernetes.io/instance in (
stalwart
)
- Notifications:
icon: sh-ntfy.webp
description: ntfy
@@ -879,9 +903,9 @@ homepage:
- Github:
- abbr: GH
href: https://github.com/alexlebens
- Backblaze:
- abbr: BB
href: https://secure.backblaze.com
- Digital Ocean:
- abbr: DO
href: https://www.digitalocean.com/
- Cloudflare:
- abbr: CF
href: https://dash.cloudflare.com/b76e303258b84076ee01fd0f515c0768
@@ -891,6 +915,9 @@ homepage:
- ProtonVPN:
- abbr: PV
href: https://account.protonvpn.com/
- AirVPN:
- abbr: AV
href: https://airvpn.org/
- Unifi:
- abbr: UF
href: https://unifi.ui.com/

8
clusters/cl01tl/helm/houndarr/Chart.lock
View File

@@ -1,9 +1,9 @@
dependencies:
- name: app-template
repository: https://bjw-s-labs.github.io/helm-charts/
version: 5.0.0
version: 4.6.2
- name: volsync-target
repository: oci://harbor.alexlebens.net/helm-charts
version: 2.0.0
digest: sha256:9041fccd2b6c8370f137ee36fc304054966b82a675fea5dd78b0c58d8e36d739
generated: "2026-05-08T21:41:40.774422-05:00"
version: 1.0.0
digest: sha256:e8d72b23589fc6a8bb05021f7697529b4715d9b25a408dfb9fcb4809ae2f72c2
generated: "2026-04-24T22:52:07.350582175Z"

6
clusters/cl01tl/helm/houndarr/Chart.yaml
View File

@@ -18,11 +18,11 @@ dependencies:
- name: app-template
alias: houndarr
repository: https://bjw-s-labs.github.io/helm-charts/
version: 5.0.0
version: 4.6.2
- name: volsync-target
alias: volsync-target-data
version: 2.0.0
version: 1.0.0
repository: oci://harbor.alexlebens.net/helm-charts
icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/houndarr.png
# renovate: datasource=github-releases depName=av1155/houndarr
appVersion: v1.11.0
appVersion: v1.9.0

8
clusters/cl01tl/helm/houndarr/values.yaml
View File

@@ -8,7 +8,7 @@ houndarr:
main:
image:
repository: ghcr.io/av1155/houndarr
tag: v1.11.0@sha256:9ca1b3206fac52db23da8e58e1dc973743e0626846fc7600530d5ef413453c19
tag: v1.9.0@sha256:2a9c9e0de43412f683f00cce6f5d0f3e059b27e50350434ae4029ade720e85a0
env:
- name: TZ
value: America/Chicago
@@ -69,10 +69,10 @@ volsync-target-data:
fsGroupChangePolicy: OnRootMismatch
local:
enabled: true
schedule: 30 8 * * *
schedule: 40 11 * * *
remote:
enabled: true
schedule: 30 10 * * 1
schedule: 40 12 * * *
external:
enabled: true
schedule: 30 9 * * 1
schedule: 40 14 * * *

Some files were not shown because too many files have changed in this diff Show More