Merge pull request 'chore(deps): update harbor.alexlebens.net/images/site-saralebens docker tag to v1.1.0' (#5792) from renovate/unified-site-saralebens into main

Reviewed-on: #5792

.gitea/workflows/render-manifests.yaml

@@ -283,7 +283,7 @@ jobs:
 
               echo ">> Formating rendered template ..."
               local TEMPLATE
-              TEMPLATE=$(helm template "${CHART_NAME}" ./ --namespace "${NAMESPACE}" --include-crds --dry-run=server --api-versions "gateway.networking.k8s.io/v1,monitoring.coreos.com/v1")
+              TEMPLATE=$(helm template "${CHART_NAME}" ./ --namespace "${NAMESPACE}" --include-crds --dry-run=server --api-versions "gateway.networking.k8s.io/v1/HTTPRoute,monitoring.coreos.com/v1,monitoring.coreos.com/v1/ServiceMonitor")
 
               # Format and split rendered template
               echo "${TEMPLATE}" | yq '... comments=""' | yq 'select(. != null)' | yq -s '"'"${OUTPUT_FOLDER}"'" + .kind + "-" + .metadata.name + ".yaml"'

clusters/cl01tl/helm/authentik/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 2026.2.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.4.0
+  version: 2.5.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.11.2
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.5.0
-digest: sha256:86950b83ac8a4da2a89bb826616857fd5eca017c813d8def0eb905025a6e7687
-generated: "2026-04-08T02:23:25.175388081Z"
+  version: 0.6.0
+digest: sha256:6c697902b9c4e997c961b474b55aed3c254d2ef4565f921a1caf023347878718
+generated: "2026-04-10T01:33:14.668094273Z"

clusters/cl01tl/helm/authentik/Chart.yaml

@@ -22,14 +22,14 @@ dependencies:
     repository: https://charts.goauthentik.io/
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.4.0
+    version: 2.5.0
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.11.2
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
-    version: 0.5.0
+    version: 0.6.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/authentik.png
 # renovate: datasource=github-releases depName=goauthentik/authentik

clusters/cl01tl/helm/bazarr/Chart.yaml

@@ -10,7 +10,9 @@ home: https://docs.alexlebens.dev/applications/bazarr/
 sources:
   - https://github.com/morpheus65535/bazarr
   - https://github.com/linuxserver/docker-bazarr
+  - https://github.com/onedr0p/exportarr
   - https://github.com/linuxserver/docker-bazarr/pkgs/container/bazarr
+  - https://github.com/onedr0p/exportarr/pkgs/container/exportarr
   - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
   - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/volsync-target
 maintainers:

clusters/cl01tl/helm/bazarr/templates/external-secret.yaml

@@ -0,0 +1,18 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: bazarr-key-secret
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: bazarr-key-secret
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  data:
+    - secretKey: key
+      remoteRef:
+        key: /cl01tl/bazarr/key
+        property: key

clusters/cl01tl/helm/bazarr/values.yaml

@@ -28,6 +28,25 @@ bazarr:
             requests:
               cpu: 1m
               memory: 250Mi
+        metrics:
+          image:
+            repository: ghcr.io/onedr0p/exportarr
+            tag: v2.3.0@sha256:af535d94061cf97a52e1661945ffba78c03f9443eae7c0da1a80a5a4be56b520
+          args: ["bazarr"]
+          env:
+            - name: URL
+              value: http://localhost:6767
+            - name: PORT
+              value: 9792
+            - name: APIKEY
+              valueFrom:
+                secretKeyRef:
+                  name: bazarr-key-secret
+                  key: key
+            - name: ENABLE_ADDITIONAL_METRICS
+              value: false
+            - name: ENABLE_UNKNOWN_QUEUE_ITEMS
+              value: false
   service:
     main:
       controller: main
@@ -35,6 +54,21 @@ bazarr:
         http:
           port: 80
           targetPort: 6767
+        metrics:
+          port: 9792
+          targetPort: 9792
+  serviceMonitor:
+    main:
+      selector:
+        matchLabels:
+          app.kubernetes.io/name: bazarr
+          app.kubernetes.io/instance: bazarr
+      serviceName: '{{ include "bjw-s.common.lib.chart.names.fullname" $ }}'
+      endpoints:
+        - port: metrics
+          interval: 3m
+          scrapeTimeout: 1m
+          path: /metrics
   route:
     main:
       kind: HTTPRoute

clusters/cl01tl/helm/blocky/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.6.2
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.5.0
-digest: sha256:49b0e666059bad492ebaa4a20119ce5bbd1959a1ee6b22b271a9ca9529122697
-generated: "2026-03-31T18:37:20.549898-05:00"
+  version: 0.6.0
+digest: sha256:58bcab9a78afad1037cb9d5047becb7a836fbfb3543883f24764a1bbb8db7290
+generated: "2026-04-10T01:33:35.406965206Z"

clusters/cl01tl/helm/blocky/Chart.yaml

@@ -20,7 +20,7 @@ dependencies:
     version: 4.6.2
   - name: valkey
     alias: valkey
-    version: 0.5.0
+    version: 0.6.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/blocky.png
 # renovate: datasource=github-releases depName=0xerr0r/blocky

clusters/cl01tl/helm/blocky/values.yaml

@@ -131,7 +131,6 @@ blocky:
               jellystat                       IN      CNAME   traefik-cl01tl
               kiwix                           IN      CNAME   traefik-cl01tl
               komodo                          IN      CNAME   traefik-cl01tl
-              kyoo                            IN      CNAME   traefik-cl01tl
               languagetool                    IN      CNAME   traefik-cl01tl
               lidarr                          IN      CNAME   traefik-cl01tl
               mail                            IN      CNAME   traefik-cl01tl

clusters/cl01tl/helm/dawarich/Chart.lock

@@ -7,6 +7,15 @@ dependencies:
   version: 7.11.2
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.5.0
-digest: sha256:b070640b7006e3ad528193ca784cfbca602994c87afbef4ef4b40a05229cab10
-generated: "2026-04-04T21:01:27.376484-05:00"
+  version: 0.6.0
+- name: volsync-target
+  repository: oci://harbor.alexlebens.net/helm-charts
+  version: 0.8.0
+- name: volsync-target
+  repository: oci://harbor.alexlebens.net/helm-charts
+  version: 0.8.0
+- name: volsync-target
+  repository: oci://harbor.alexlebens.net/helm-charts
+  version: 0.8.0
+digest: sha256:46a4d88528ac64e1f228a8516c0fd00e45c2403bdd713140b82e7ab28506ec74
+generated: "2026-04-10T01:34:00.034582668Z"

clusters/cl01tl/helm/dawarich/Chart.yaml

@@ -12,6 +12,7 @@ sources:
   - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
   - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/postgres-cluster
   - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/valkey
+  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/volsync-target
 maintainers:
   - name: alexlebens
 dependencies:
@@ -25,7 +26,19 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
-    version: 0.5.0
+    version: 0.6.0
+    repository: oci://harbor.alexlebens.net/helm-charts
+  - name: volsync-target
+    alias: volsync-target-storage
+    version: 0.8.0
+    repository: oci://harbor.alexlebens.net/helm-charts
+  - name: volsync-target
+    alias: volsync-target-public
+    version: 0.8.0
+    repository: oci://harbor.alexlebens.net/helm-charts
+  - name: volsync-target
+    alias: volsync-target-watched
+    version: 0.8.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons@main/png/dawarich.png
 # renovate: datasource=github-releases depName=Freika/dawarich

clusters/cl01tl/helm/dawarich/values.yaml

@@ -313,3 +313,36 @@ postgres-18-cluster:
         immediate: true
         schedule: "0 10 14 * * *"
         backupName: garage-local
+volsync-target-storage:
+  pvcTarget: dawarich-storage
+  local:
+    enabled: true
+    schedule: 6 8 * * *
+  remote:
+    enabled: true
+    schedule: 6 9 * * *
+  external:
+    enabled: true
+    schedule: 6 10 * * *
+volsync-target-public:
+  pvcTarget: dawarich-public
+  local:
+    enabled: true
+    schedule: 8 8 * * *
+  remote:
+    enabled: true
+    schedule: 8 9 * * *
+  external:
+    enabled: true
+    schedule: 8 10 * * *
+volsync-target-watched:
+  pvcTarget: dawarich-watched
+  local:
+    enabled: true
+    schedule: 8 8 * * *
+  remote:
+    enabled: true
+    schedule: 8 9 * * *
+  external:
+    enabled: true
+    schedule: 8 10 * * *

clusters/cl01tl/helm/directus/Chart.lock

@@ -7,6 +7,6 @@ dependencies:
   version: 7.11.2
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.5.0
-digest: sha256:5fa84b2d82a160c35e002690e4d299275b8136463da9da789be9ca7c6ff998c4
-generated: "2026-04-04T21:01:37.322862-05:00"
+  version: 0.6.0
+digest: sha256:1ef062c01049dc3150f24b4bf1502a1026beda856ecca88df70b61701eaf659e
+generated: "2026-04-10T01:34:22.131775797Z"

clusters/cl01tl/helm/directus/Chart.yaml

@@ -25,7 +25,7 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
-    version: 0.5.0
+    version: 0.6.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/directus.png
 # renovate: datasource=github-releases depName=directus/directus

clusters/cl01tl/helm/element-web/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 1.4.34
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.4.0
-digest: sha256:376f1201085c5c93972d2286755dd8b530a4a88ad9fdaf4bfb50ec1f11c64df0
-generated: "2026-04-08T17:57:31.040649797Z"
+  version: 2.5.0
+digest: sha256:8640b8a250bdcd9e7561e3d28538ccf4644a7159a035ee0a5fdbcf71dc5b2bbe
+generated: "2026-04-10T01:17:19.932208699Z"

clusters/cl01tl/helm/element-web/Chart.yaml

@@ -19,7 +19,7 @@ dependencies:
     repository: https://ananace.gitlab.io/charts
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.4.0
+    version: 2.5.0
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/element.png
 # renovate: datasource=github-releases depName=element-hq/element-web
 appVersion: v1.12.15

clusters/cl01tl/helm/eraser/values.yaml

@@ -68,8 +68,6 @@ eraser-metrics:
                 http:
 
           exporters:
-            logging:
-              loglevel: debug
             prometheus:
               endpoint: "0.0.0.0:8889"
               send_timestamps: true
@@ -84,7 +82,6 @@ eraser-metrics:
                 receivers:
                   - otlp
                 exporters:
-                  - logging
                   - prometheus
   service:
     main:

clusters/cl01tl/helm/foldergram/templates/persistent-volume-claim.yaml

@@ -1,14 +1,14 @@
 apiVersion: v1
 kind: PersistentVolumeClaim
 metadata:
-  name: foldergram-pictures-nfs-storage
+  name: foldergram-pictures-collections-nfs-storage
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: foldergram-pictures-nfs-storage
+    app.kubernetes.io/name: foldergram-pictures-collections-nfs-storage
     app.kubernetes.io/instance: {{ .Release.Name }}
     app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
-  volumeName: foldergram-pictures-nfs-storage
+  volumeName: foldergram-pictures-collections-nfs-storage
   storageClassName: nfs-client
   accessModes:
     - ReadWriteMany

clusters/cl01tl/helm/foldergram/templates/persistent-volume.yaml

@@ -1,10 +1,10 @@
 apiVersion: v1
 kind: PersistentVolume
 metadata:
-  name: foldergram-pictures-nfs-storage
+  name: foldergram-pictures-collections-nfs-storage
   namespace: {{ .Release.Namespace }}
   labels:
-    app.kubernetes.io/name: foldergram-pictures-nfs-storage
+    app.kubernetes.io/name: foldergram-pictures-collections-nfs-storage
     app.kubernetes.io/instance: {{ .Release.Name }}
     app.kubernetes.io/part-of: {{ .Release.Name }}
 spec:
@@ -15,7 +15,7 @@ spec:
   accessModes:
     - ReadWriteMany
   nfs:
-    path: /volume2/Storage/Pictures
+    path: /volume2/Storage/Pictures/Collections
     server: synologybond.alexlebens.net
   mountOptions:
     - vers=4

clusters/cl01tl/helm/foldergram/values.yaml

@@ -58,18 +58,18 @@ foldergram:
       forceRename: foldergram-data
       storageClass: ceph-block
       accessMode: ReadWriteOnce
-      size: 10Gi
+      size: 40Gi
       advancedMounts:
         main:
           main:
             - path: /app/data
               readOnly: false
     pictures:
-      existingClaim: foldergram-pictures-nfs-storage
+      existingClaim: foldergram-pictures-collections-nfs-storage
       advancedMounts:
         main:
           main:
-            - path: /gallery/pictures
+            - path: /gallery/pictures/collections
               readOnly: true
 volsync-target-data:
   pvcTarget: foldergram-data

clusters/cl01tl/helm/freshrss/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.4.0
+  version: 2.5.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.11.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:f709ef2ce041d934faf75dfa31cc86e536aa62ab31ab82584c9751652561744c
-generated: "2026-04-04T21:02:01.689182-05:00"
+digest: sha256:2a13aac2d207555bf33ee01db493d210e860e660433cd6f5b9b67fadf91f8f74
+generated: "2026-04-10T01:17:32.585138713Z"

clusters/cl01tl/helm/freshrss/Chart.yaml

@@ -22,7 +22,7 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.4.0
+    version: 2.5.0
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.11.2

clusters/cl01tl/helm/gatus/values.yaml

@@ -116,9 +116,6 @@ gatus:
       - name: jellyfin
         url: https://jellyfin.alexlebens.net
         <<: *defaults
-      - name: kyoo
-        url: https://kyoo.alexlebens.net
-        <<: *defaults
       - name: tubearchivist
         url: https://tubearchivist.alexlebens.net
         <<: *defaults
@@ -345,6 +342,14 @@ gatus:
         url: https://www.alexlebens.dev
         <<: *defaults
         group: external
+      - name: docs
+        url: https://docs.alexlebens.dev
+        <<: *defaults
+        group: external
+      - name: saralebens
+        url: https://www.saralebens.com
+        <<: *defaults
+        group: external
       - name: rybbit
         url: https://rybbit.alexlebens.dev
         <<: *defaults

clusters/cl01tl/helm/gitea/Chart.lock

@@ -10,18 +10,18 @@ dependencies:
   version: 0.30.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.4.0
+  version: 2.5.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.11.2
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.5.0
+  version: 0.6.0
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.5.0
+  version: 0.6.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:ae512dab12cc692921a8cf80f8459fa652ae20f393a34c14f25a851410724096
-generated: "2026-04-07T16:50:50.725821375Z"
+digest: sha256:1834a2f731f3dfd1f2c1997ef827c941f63436e3d4766b7713771f6ab147a285
+generated: "2026-04-10T01:34:45.637993565Z"

clusters/cl01tl/helm/gitea/Chart.yaml

@@ -37,18 +37,18 @@ dependencies:
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.4.0
+    version: 2.5.0
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.11.2
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey-gitea
-    version: 0.5.0
+    version: 0.6.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey-renovate
-    version: 0.5.0
+    version: 0.6.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-storage

clusters/cl01tl/helm/gitea/values.yaml

@@ -239,6 +239,11 @@ meilisearch:
       memory: 150Mi
   serviceMonitor:
     enabled: true
+cloudflared:
+  resources:
+    requests:
+      cpu: 100m
+      memory: 30Mi
 postgres-18-cluster:
   mode: recovery
   cluster:

clusters/cl01tl/helm/grafana-operator/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 7.11.2
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.5.0
+  version: 0.6.0
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.5.0
-digest: sha256:6c096d1ce729469f12e66b2d0d0c677990d06643ff49401ee8fa69f5ed738e9c
-generated: "2026-04-04T21:02:18.686653-05:00"
+  version: 0.6.0
+digest: sha256:92931c4ed7e060931fd1aa0e4c3021cc548c1375bdd8a150ed61c858496af72c
+generated: "2026-04-10T01:35:19.405893161Z"

clusters/cl01tl/helm/grafana-operator/Chart.yaml

@@ -24,11 +24,11 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey-unified-alerting
-    version: 0.5.0
+    version: 0.6.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey-remote-cache
-    version: 0.5.0
+    version: 0.6.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/grafana.png
 # renovate: datasource=github-releases depName=grafana/grafana-operator

clusters/cl01tl/helm/grafana-operator/templates/grafana-dashboard.yaml

@@ -244,6 +244,44 @@ spec:
   resyncPeriod: 6h
   url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/service/descheduler.json
 
+---
+apiVersion: grafana.integreatly.org/v1beta1
+kind: GrafanaDashboard
+metadata:
+  name: grafana-dashboard-external-dns
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: grafana-dashboard-external-dns
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  instanceSelector:
+    matchLabels:
+      app: grafana-main
+  contentCacheDuration: 6h
+  folderUID: grafana-folder-service
+  resyncPeriod: 6h
+  url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/service/external-dns.json
+
+---
+apiVersion: grafana.integreatly.org/v1beta1
+kind: GrafanaDashboard
+metadata:
+  name: grafana-dashboard-external-secrets
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: grafana-dashboard-external-secrets
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  instanceSelector:
+    matchLabels:
+      app: grafana-main
+  contentCacheDuration: 6h
+  folderUID: grafana-folder-service
+  resyncPeriod: 6h
+  url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/service/external-secrets.json
+
 ---
 apiVersion: grafana.integreatly.org/v1beta1
 kind: GrafanaDashboard
@@ -567,6 +605,25 @@ spec:
   resyncPeriod: 6h
   url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/platform/vault.json
 
+---
+apiVersion: grafana.integreatly.org/v1beta1
+kind: GrafanaDashboard
+metadata:
+  name: grafana-dashboard-unpackerr
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: grafana-dashboard-unpackerr
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  instanceSelector:
+    matchLabels:
+      app: grafana-main
+  contentCacheDuration: 6h
+  folderUID: grafana-folder-platform
+  resyncPeriod: 6h
+  url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/platform/unpackerr.json
+
 ---
 apiVersion: grafana.integreatly.org/v1beta1
 kind: GrafanaDashboard
@@ -643,6 +700,25 @@ spec:
   resyncPeriod: 6h
   url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/application/jellyfin.json
 
+---
+apiVersion: grafana.integreatly.org/v1beta1
+kind: GrafanaDashboard
+metadata:
+  name: grafana-dashboard-navidrome
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: grafana-dashboard-navidrome
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  instanceSelector:
+    matchLabels:
+      app: grafana-main
+  contentCacheDuration: 6h
+  folderUID: grafana-folder-application
+  resyncPeriod: 6h
+  url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/application/navidrome.json
+
 ---
 apiVersion: grafana.integreatly.org/v1beta1
 kind: GrafanaDashboard
@@ -662,6 +738,25 @@ spec:
   resyncPeriod: 6h
   url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/application/radarr.json
 
+---
+apiVersion: grafana.integreatly.org/v1beta1
+kind: GrafanaDashboard
+metadata:
+  name: grafana-dashboard-servarr
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: grafana-dashboard-servarr
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  instanceSelector:
+    matchLabels:
+      app: grafana-main
+  contentCacheDuration: 6h
+  folderUID: grafana-folder-application
+  resyncPeriod: 6h
+  url: http://gitea-http.gitea:3000/alexlebens/grafana-dashboards/raw/branch/main/dashboards/application/servarr.json
+
 ---
 apiVersion: grafana.integreatly.org/v1beta1
 kind: GrafanaDashboard

clusters/cl01tl/helm/harbor/Chart.lock

@@ -7,6 +7,6 @@ dependencies:
   version: 7.11.2
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.5.0
-digest: sha256:2ef60d6315a21e0d92970570630cc74720643e7e51e0574107249684ddc2fab5
-generated: "2026-04-07T20:36:47.509644-05:00"
+  version: 0.6.0
+digest: sha256:b153dff647b1657cca3e2efc2ad188214496374eed1137f9ecb887184f8a4470
+generated: "2026-04-10T01:35:42.967388076Z"

clusters/cl01tl/helm/harbor/Chart.yaml

@@ -24,7 +24,7 @@ dependencies:
     repository: https://gitea.alexlebens.net/api/packages/alexlebens/helm
   - name: valkey
     alias: valkey
-    version: 0.5.0
+    version: 0.6.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/harbor.png
 # renovate: datasource=github-releases depName=goharbor/harbor

clusters/cl01tl/helm/homepage/values.yaml

@@ -151,12 +151,6 @@ homepage:
                   href: https://jellyfin.alexlebens.net
                   siteMonitor: http://jellyfin.jellyfin:80
                   statusStyle: dot
-              - Movies and TV:
-                  icon: sh-kyoo.webp
-                  description: Kyoo
-                  href: https://kyoo.alexlebens.net
-                  siteMonitor: http://front.kyoo:8901
-                  statusStyle: dot
               - Youtube Archive:
                   icon: sh-tube-archivist-light.webp
                   description: TubeArchivist

clusters/cl01tl/helm/immich/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 7.11.2
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.5.0
+  version: 0.6.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:8b9129d1bbef82d6e0033610da9c25b2b98ce078027d389429cd947c8d22823e
-generated: "2026-04-04T21:02:46.154937-05:00"
+digest: sha256:cc71770c9558038b988a2d7a893fffe6ba64a77e8b0d8c403b1183e48d168cd9
+generated: "2026-04-10T01:36:07.229979615Z"

clusters/cl01tl/helm/immich/Chart.yaml

@@ -25,7 +25,7 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
-    version: 0.5.0
+    version: 0.6.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data

clusters/cl01tl/helm/karakeep/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 0.30.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.4.0
+  version: 2.5.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:6046192bb4ff88692bd0623fd0eb00a33bf83f6066a0b471950db8776e868661
-generated: "2026-03-30T16:14:17.687854336Z"
+digest: sha256:9939407bba4f0ac9d5ed47250490d0a80dc48881cfeb7bc924ece655fa0b5b05
+generated: "2026-04-10T01:17:47.911315172Z"

clusters/cl01tl/helm/karakeep/Chart.yaml

@@ -27,7 +27,7 @@ dependencies:
     repository: https://meilisearch.github.io/meilisearch-kubernetes
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.4.0
+    version: 2.5.0
   - name: volsync-target
     alias: volsync-target-data
     version: 0.8.0

clusters/cl01tl/helm/kube-prometheus-stack/Chart.lock

@@ -10,6 +10,6 @@ dependencies:
   version: 4.6.2
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.5.0
-digest: sha256:d0942cff6346335abc91f9ceb919c5a819543b9b8baed11f83de89486f4e874d
-generated: "2026-04-08T19:03:59.676069331Z"
+  version: 0.6.0
+digest: sha256:53540696af31c47db50fcbfef6b74fe08912acb2591f8b911bb292567af29772
+generated: "2026-04-10T01:36:25.114003661Z"

clusters/cl01tl/helm/kube-prometheus-stack/Chart.yaml

@@ -31,7 +31,7 @@ dependencies:
     version: 4.6.2
   - name: valkey
     alias: valkey
-    version: 0.5.0
+    version: 0.6.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/prometheus.png
 # renovate: datasource=github-releases depName=prometheus-operator/prometheus-operator

clusters/cl01tl/helm/kubelet-serving-cert-approver/values.yaml

@@ -71,3 +71,15 @@ kubelet-serving-cert-approver:
         metrics:
           port: 9090
           targetPort: 9090
+  serviceMonitor:
+    main:
+      selector:
+        matchLabels:
+          app.kubernetes.io/name: kubelet-serving-cert-approver
+          app.kubernetes.io/instance: kubelet-serving-cert-approver
+      serviceName: '{{ include "bjw-s.common.lib.chart.names.fullname" $ }}'
+      endpoints:
+        - port: metrics
+          interval: 30s
+          scrapeTimeout: 15s
+          path: /metrics

clusters/cl01tl/helm/kyoo/Chart.lock

@@ -1,12 +0,0 @@
-dependencies:
-- name: kyoo
-  repository: oci://ghcr.io/zoriya/helm-charts
-  version: 5.0.0
-- name: postgres-cluster
-  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 7.11.2
-- name: volsync-target
-  repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.8.0
-digest: sha256:0a5ba08e137471d788da07502db63f5be535c2843f5bfda74fb873a997846ded
-generated: "2026-04-08T21:04:05.245024-05:00"

clusters/cl01tl/helm/kyoo/Chart.yaml

@@ -1,35 +0,0 @@
-apiVersion: v2
-name: kyoo
-version: 1.0.0
-description: Kyoo
-keywords:
-  - kyoo
-  - media
-home: https://docs.alexlebens.dev/applications/kyoo/
-sources:
-  - https://github.com/zoriya/Kyoo
-  - https://github.com/zoriya/Kyoo/pkgs/container/kyoo_api
-  - https://github.com/zoriya/Kyoo/pkgs/container/kyoo_auth
-  - https://github.com/zoriya/Kyoo/pkgs/container/kyoo_front
-  - https://github.com/zoriya/Kyoo/pkgs/container/kyoo_scanner
-  - https://github.com/zoriya/Kyoo/pkgs/container/kyoo_transcoder
-  - https://github.com/zoriya/Kyoo/tree/master/chart
-  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/postgres-cluster
-  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/volsync-target
-maintainers:
-  - name: alexlebens
-dependencies:
-  - name: kyoo
-    repository: oci://ghcr.io/zoriya/helm-charts
-    version: 5.0.0
-  - name: postgres-cluster
-    alias: postgres-18-cluster
-    version: 7.11.2
-    repository: oci://harbor.alexlebens.net/helm-charts
-  - name: volsync-target
-    alias: volsync-target-metadata
-    version: 0.8.0
-    repository: oci://harbor.alexlebens.net/helm-charts
-icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/kyoo.png
-# renovate: datasource=github-releases depName=zoriya/Kyoo
-appVersion: v5.0.0

clusters/cl01tl/helm/kyoo/templates/external-secret.yaml

@@ -1,54 +0,0 @@
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: kyoo-key-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: kyoo-key-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: rsa-private
-      remoteRef:
-        key: /cl01tl/kyoo/key
-        property: rsa-private
-    - secretKey: scanner-apikey
-      remoteRef:
-        key: /cl01tl/kyoo/key
-        property: scanner
-    - secretKey: tmdb-apikey
-      remoteRef:
-        key: /tmdb/alexlebens
-        property: api-key
-    - secretKey: tvdb-apikey
-      remoteRef:
-        key: /tvdb/alexlebens
-        property: api-key
-
----
-apiVersion: external-secrets.io/v1
-kind: ExternalSecret
-metadata:
-  name: kyoo-oidc-secret
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: kyoo-oidc-secret
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  secretStoreRef:
-    kind: ClusterSecretStore
-    name: vault
-  data:
-    - secretKey: client
-      remoteRef:
-        key: /authentik/oidc/kyoo
-        property: client
-    - secretKey: secret
-      remoteRef:
-        key: /authentik/oidc/kyoo
-        property: secret

clusters/cl01tl/helm/kyoo/templates/http-route.yaml

@@ -1,88 +0,0 @@
-apiVersion: gateway.networking.k8s.io/v1
-kind: HTTPRoute
-metadata:
-  name: kyoo
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: kyoo
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  parentRefs:
-    - group: gateway.networking.k8s.io
-      kind: Gateway
-      name: traefik-gateway
-      namespace: traefik
-  hostnames:
-    - kyoo.alexlebens.net
-  rules:
-    - matches:
-        - path:
-            type: PathPrefix
-            value: /
-      backendRefs:
-        - group: ''
-          kind: Service
-          name: kyoo-front
-          port: 8901
-          weight: 100
-    - matches:
-        - path:
-            type: PathPrefix
-            value: /video
-      backendRefs:
-        - group: ''
-          kind: Service
-          name: kyoo-transcoder
-          port: 7666
-          weight: 100
-    - matches:
-        - path:
-            type: PathPrefix
-            value: /auth/
-      backendRefs:
-        - group: ''
-          kind: Service
-          name: kyoo-auth
-          port: 4568
-          weight: 100
-    - matches:
-        - path:
-            type: PathPrefix
-            value: /.well-known/
-      backendRefs:
-        - group: ''
-          kind: Service
-          name: kyoo-auth
-          port: 4568
-          weight: 100
-    - matches:
-        - path:
-            type: PathPrefix
-            value: /api/
-      backendRefs:
-        - group: ''
-          kind: Service
-          name: kyoo-api
-          port: 3567
-          weight: 100
-    - matches:
-        - path:
-            type: PathPrefix
-            value: /swagger
-      backendRefs:
-        - group: ''
-          kind: Service
-          name: kyoo-api
-          port: 3567
-          weight: 100
-    - matches:
-        - path:
-            type: PathPrefix
-            value: /scanner/
-      backendRefs:
-        - group: ''
-          kind: Service
-          name: kyoo-scanner
-          port: 4389
-          weight: 100

clusters/cl01tl/helm/kyoo/templates/persistent-volume-claim.yaml

@@ -1,131 +0,0 @@
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: kyoo-media-anime-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: kyoo-media-anime-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  volumeName: kyoo-media-anime-nfs-storage
-  storageClassName: nfs-client
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 1Gi
-
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: kyoo-media-anime-movies-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: kyoo-media-anime-movies-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  volumeName: kyoo-media-anime-movies-nfs-storage
-  storageClassName: nfs-client
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 1Gi
-
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: kyoo-media-movies-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: kyoo-media-movies-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  volumeName: kyoo-media-movies-nfs-storage
-  storageClassName: nfs-client
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 1Gi
-
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: kyoo-media-movies-4k-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: kyoo-media-movies-4k-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  volumeName: kyoo-media-movies-4k-nfs-storage
-  storageClassName: nfs-client
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 1Gi
-
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: kyoo-media-standup-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: kyoo-media-standup-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  volumeName: kyoo-media-standup-nfs-storage
-  storageClassName: nfs-client
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 1Gi
-
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: kyoo-media-tvshows-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: kyoo-media-tvshows-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  volumeName: kyoo-media-tvshows-nfs-storage
-  storageClassName: nfs-client
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 1Gi
-
----
-apiVersion: v1
-kind: PersistentVolumeClaim
-metadata:
-  name: kyoo-media-tvshows-4k-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: kyoo-media-tvshows-4k-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  volumeName: kyoo-media-tvshows-4k-nfs-storage
-  storageClassName: nfs-client
-  accessModes:
-    - ReadWriteMany
-  resources:
-    requests:
-      storage: 1Gi

clusters/cl01tl/helm/kyoo/templates/persistent-volume.yaml

@@ -1,173 +0,0 @@
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: kyoo-media-anime-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: kyoo-media-anime-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: nfs-client
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  nfs:
-    path: /volume2/Storage/Anime
-    server: synologybond.alexlebens.net
-  mountOptions:
-    - vers=4
-    - minorversion=1
-    - noac
-
----
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: kyoo-media-anime-movies-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: kyoo-media-anime-movies-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: nfs-client
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  nfs:
-    path: /volume2/Storage/Anime Movies
-    server: synologybond.alexlebens.net
-  mountOptions:
-    - vers=4
-    - minorversion=1
-    - noac
-
----
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: kyoo-media-movies-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: kyoo-media-movies-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: nfs-client
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  nfs:
-    path: /volume2/Storage/Movies
-    server: synologybond.alexlebens.net
-  mountOptions:
-    - vers=4
-    - minorversion=1
-    - noac
-
----
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: kyoo-media-movies-4k-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: kyoo-media-movies-4k-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: nfs-client
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  nfs:
-    path: /volume2/Storage/Movies 4K
-    server: synologybond.alexlebens.net
-  mountOptions:
-    - vers=4
-    - minorversion=1
-    - noac
-
----
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: kyoo-media-standup-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: kyoo-media-standup-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: nfs-client
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  nfs:
-    path: /volume2/Storage/Stand Up
-    server: synologybond.alexlebens.net
-  mountOptions:
-    - vers=4
-    - minorversion=1
-    - noac
-
----
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: kyoo-media-tvshows-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: kyoo-media-tvshows-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: nfs-client
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  nfs:
-    path: /volume2/Storage/TV Shows
-    server: synologybond.alexlebens.net
-  mountOptions:
-    - vers=4
-    - minorversion=1
-    - noac
-
----
-apiVersion: v1
-kind: PersistentVolume
-metadata:
-  name: kyoo-media-tvshows-4k-nfs-storage
-  namespace: {{ .Release.Namespace }}
-  labels:
-    app.kubernetes.io/name: kyoo-media-tvshows-4k-nfs-storage
-    app.kubernetes.io/instance: {{ .Release.Name }}
-    app.kubernetes.io/part-of: {{ .Release.Name }}
-spec:
-  persistentVolumeReclaimPolicy: Retain
-  storageClassName: nfs-client
-  capacity:
-    storage: 1Gi
-  accessModes:
-    - ReadWriteMany
-  nfs:
-    path: /volume2/Storage/TV Shows
-    server: synologybond.alexlebens.net
-  mountOptions:
-    - vers=4
-    - minorversion=1
-    - noac

clusters/cl01tl/helm/kyoo/values.yaml

@@ -1,223 +0,0 @@
-kyoo:
-  global:
-    securityContext:
-      fsGroup: 1000
-      fsGroupChangePolicy: OnRootMismatch
-    postgres:
-      shared:
-        host: kyoo-postgresql-18-cluster-rw
-        port: 5432
-        existingSecret: kyoo-postgresql-18-cluster-app
-        userKey: user
-        passwordKey: password
-      kyoo_api:
-        database: kyoo_api
-        sslmode: disable
-        kyoo_api:
-          userKey: user
-          passwordKey: password
-          existingSecret: kyoo-postgresql-18-cluster-superuser
-      kyoo_auth:
-        database: kyoo_auth
-        sslmode: disable
-      kyoo_scanner:
-        database: kyoo_scanner
-        sslmode: disable
-      kyoo_transcoder:
-        database: kyoo_transcoder
-        sslmode: disable
-  kyoo:
-    address: https://kyoo.alexlebens.net
-    auth:
-      privatekey:
-        existingSecret: kyoo-key-secret
-        privatekeyKey: rsa-private
-      apikeys:
-        scanner:
-          existingSecret: kyoo-key-secret
-          apikeyKey: scanner-apikey
-    transcoderAcceleration: qsv
-    transcoderPreset: fast
-    oidc_providers:
-      - name: Authentik
-        existingSecret: kyoo-oidc-secret
-        clientIdKey: client
-        clientSecretKey: secret
-        logo: https://cdn.jsdelivr.net/gh/selfhst/icons@main/webp/authentik.webp
-        authorizationAddress: https://authentik.alexlebens.net/application/o/authorize/
-        tokenAddress: https://authentik.alexlebens.net/application/o/token/
-        profileAddress: https://authentik.alexlebens.net/application/o/userinfo/
-        scope: "email openid profile"
-        authMethod: ClientSecretBasic
-  media:
-    volumes:
-      - name: kyoo-media-anime-nfs-storage
-        persistentVolumeClaim:
-          claimName: kyoo-media-anime-nfs-storage
-      - name: kyoo-media-anime-movies-nfs-storage
-        persistentVolumeClaim:
-          claimName: kyoo-media-anime-movies-nfs-storage
-      - name: kyoo-media-movies-nfs-storage
-        persistentVolumeClaim:
-          claimName: kyoo-media-movies-nfs-storage
-      - name: kyoo-media-movies-4k-nfs-storage
-        persistentVolumeClaim:
-          claimName: kyoo-media-movies-4k-nfs-storage
-      - name: kyoo-media-standup-nfs-storage
-        persistentVolumeClaim:
-          claimName: kyoo-media-standup-nfs-storage
-      - name: kyoo-media-tvshows-nfs-storage
-        persistentVolumeClaim:
-          claimName: kyoo-media-tvshows-nfs-storage
-      - name: kyoo-media-tvshows-4k-nfs-storage
-        persistentVolumeClaim:
-          claimName: kyoo-media-tvshows-4k-nfs-storage
-    volumeMounts:
-      - mountPath: /media/anime
-        name: kyoo-media-anime-nfs-storage
-        readOnly: true
-      - mountPath: /media/anime-movies
-        name: kyoo-media-anime-movies-nfs-storage
-        readOnly: true
-      - mountPath: /media/movies
-        name: kyoo-media-movies-nfs-storage
-        readOnly: true
-      - mountPath: /media/movies-4k
-        name: kyoo-media-movies-4k-nfs-storage
-        readOnly: true
-      - mountPath: /media/standup
-        name: kyoo-media-standup-nfs-storage
-        readOnly: true
-      - mountPath: /media/tvshows
-        name: kyoo-media-tvshows-nfs-storage
-        readOnly: true
-      - mountPath: /media/tvshows-4k
-        name: kyoo-media-tvshows-4k-nfs-storage
-        readOnly: true
-    baseMountPath: /media
-  contentdatabase:
-    tmdb:
-      apikeyKey: tmdb-apikey
-      existingSecret: kyoo-key-secret
-    tvdb:
-      apikeyKey: tvdb-apikey
-      pinKey: tvdb-apikey
-      existingSecret: kyoo-key-secret
-  api:
-    kyoo_api:
-      resources:
-        requests:
-          cpu: 10m
-          memory: 100Mi
-      image:
-        repository: ghcr.io/zoriya/kyoo_api
-        tag: 5.0.0@sha256:dc0210f235e23ae616b0f5952af7867dcbc52e0354c2683ec3c4190fdcd17744
-    persistence:
-      enabled: true
-      size: 1Gi
-      storageClass: ceph-block
-      accessModes:
-        - ReadWriteOnce
-  auth:
-    kyoo_auth:
-      resources:
-        requests:
-          cpu: 10m
-          memory: 100Mi
-      image:
-        repository: ghcr.io/zoriya/kyoo_auth
-        tag: 5.0.0
-    persistence:
-      enabled: true
-      size: 500Mi
-      storageClass: ceph-block
-      accessModes:
-        - ReadWriteOnce
-  front:
-    kyoo_front:
-      resources:
-        requests:
-          cpu: 10m
-          memory: 100Mi
-      image:
-        repository: ghcr.io/zoriya/kyoo_front
-        tag: 5.0.0@sha256:985f892470b304f13ef1950fb5f7e9ef33ee39b71705c627cb045773e6dfb7b4
-  scanner:
-    kyoo_scanner:
-      resources:
-        requests:
-          cpu: 10m
-          memory: 100Mi
-      image:
-        repository: ghcr.io/zoriya/kyoo_scanner
-        tag: 5.0.0@sha256:fa972f3f1e534264f4de153e30fe9481839754a3e724cc2663524a2b30e82b46
-  transcoder:
-    kyoo_transcoder:
-      resources:
-        limits:
-          gpu.intel.com/i915: 1
-        requests:
-          gpu.intel.com/i915: 1
-          cpu: 1
-          memory: 1Gi
-      image:
-        repository: ghcr.io/zoriya/kyoo_transcoder
-        tag: 5.0.0@sha256:59974794f8a638175408fa20f023ba9598108b54ad8ed9a22ec87a1a211dfc43
-    replicaCount: 1
-    persistence:
-      enabled: true
-      size: 1Gi
-      storageClass: ceph-block
-      accessModes:
-        - ReadWriteOnce
-  ingress:
-    enabled: false
-  traefikproxy:
-    enabled: false
-  postgres:
-    enabled: false
-postgres-18-cluster:
-  mode: recovery
-  cluster:
-    enableSuperuserAccess: true
-  recovery:
-    method: objectStore
-    objectStore:
-      index: 1
-  backup:
-    objectStore:
-      - name: garage-local
-        index: 1
-        destinationBucket: postgres-backups
-        externalSecretCredentialPath: /garage/home-infra/postgres-backups
-        isWALArchiver: true
-    scheduledBackups:
-      - name: live-backup
-        suspend: false
-        immediate: true
-        schedule: "0 5 14 * * *"
-        backupName: garage-local
-  databases:
-    - name: kyoo_api
-      ensure: present
-      owner: app
-    - name: kyoo_auth
-      ensure: present
-      owner: app
-    - name: kyoo_scanner
-      ensure: present
-      owner: app
-    - name: kyoo_transcoder
-      ensure: present
-      owner: app
-volsync-target-metadata:
-  pvcTarget: kyoo-apimetadata
-  local:
-    enabled: true
-    schedule: 26 8 * * *
-  remote:
-    enabled: true
-    schedule: 26 9 * * *
-  external:
-    enabled: true
-    schedule: 26 10 * * *

clusters/cl01tl/helm/matrix-synapse/Chart.lock

@@ -13,19 +13,19 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.4.0
+  version: 2.5.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.4.0
+  version: 2.5.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.11.2
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.5.0
+  version: 0.6.0
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.5.0
+  version: 0.6.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
@@ -38,5 +38,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:937fe4fd8cd564a5f55a0f251a9b412eeeebe797f52d6769b18f6f6a28f6dd64
-generated: "2026-04-08T19:02:45.651984056Z"
+digest: sha256:a3ec2977db9a8d902c8691281e5305f2dfb4501d64591bc67dc2c86e59743133
+generated: "2026-04-10T01:36:45.779720254Z"

clusters/cl01tl/helm/matrix-synapse/Chart.yaml

@@ -42,11 +42,11 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     alias: cloudflared-synapse
-    version: 2.4.0
+    version: 2.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: cloudflared
     alias: cloudflared-hookshot
-    version: 2.4.0
+    version: 2.5.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: postgres-cluster
     alias: postgres-18-cluster
@@ -54,11 +54,11 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey-matrix-synapse
-    version: 0.5.0
+    version: 0.6.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey-hookshot
-    version: 0.5.0
+    version: 0.6.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-synapse

clusters/cl01tl/helm/medialyze/Chart.lock

@@ -2,5 +2,8 @@ dependencies:
 - name: app-template
   repository: https://bjw-s-labs.github.io/helm-charts/
   version: 4.6.2
-digest: sha256:17ac9bc0cc2eac395c630c22ab095e3e34e5d75a34523c3f39629ca1c56ecbc8
-generated: "2026-03-17T17:46:15.885193-05:00"
+- name: volsync-target
+  repository: oci://harbor.alexlebens.net/helm-charts
+  version: 0.8.0
+digest: sha256:213297b2f245e3f98b655a9210bc81cb92f38c9db06e787d6dd89c97f2d6cfa4
+generated: "2026-04-09T19:45:54.699005-05:00"

clusters/cl01tl/helm/medialyze/Chart.yaml

@@ -10,6 +10,7 @@ sources:
   - https://github.com/frederikemmer/MediaLyze
   - https://github.com/frederikemmer/MediaLyze/pkgs/container/medialyze
   - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
+  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/volsync-target
 maintainers:
   - name: alexlebens
 dependencies:
@@ -17,6 +18,10 @@ dependencies:
     alias: medialyze
     repository: https://bjw-s-labs.github.io/helm-charts/
     version: 4.6.2
+  - name: volsync-target
+    alias: volsync-target-data
+    version: 0.8.0
+    repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://raw.githubusercontent.com/frederikemmer/MediaLyze/d8f69c0628bac7c047b90f91a66341648029c273/frontend/public/favicon.svg
 # renovate: datasource=github-releases depName=frederikemmer/MediaLyze
 appVersion: 0.4.1

clusters/cl01tl/helm/outline/Chart.lock

@@ -4,15 +4,15 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.4.0
+  version: 2.5.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.11.2
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.5.0
+  version: 0.6.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:9e8ec16e175ae5aa778a7bd2e785d56dea98d025b7a818fe76d9959680f117b1
-generated: "2026-04-04T20:56:43.600438-05:00"
+digest: sha256:dfed4e1149e3daaad1a36f00ad63a3353895799f0bb0c8f4cfa3e5190f04b062
+generated: "2026-04-10T01:37:10.437687272Z"

clusters/cl01tl/helm/outline/Chart.yaml

@@ -23,14 +23,14 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.4.0
+    version: 2.5.0
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.11.2
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
-    version: 0.5.0
+    version: 0.6.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data

clusters/cl01tl/helm/paperless-ngx/Chart.lock

@@ -7,7 +7,7 @@ dependencies:
   version: 7.11.2
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.5.0
+  version: 0.6.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
@@ -20,5 +20,5 @@ dependencies:
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:ae3aa7bd167e216d79bfbb60770c9bc209a8a689685f6dff6be41d8952ac0f25
-generated: "2026-04-08T17:24:02.420482074Z"
+digest: sha256:d9a1a2c899d5f8cb9cb00d749ea313af889ded789e1d3dadc1df12b7567b9cd1
+generated: "2026-04-10T01:37:28.340143265Z"

clusters/cl01tl/helm/paperless-ngx/Chart.yaml

@@ -28,7 +28,7 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
-    version: 0.5.0
+    version: 0.6.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-data

clusters/cl01tl/helm/postiz/Chart.lock

@@ -7,18 +7,18 @@ dependencies:
   version: 1.0.0
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.4.0
+  version: 2.5.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.11.2
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.5.0
+  version: 0.6.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:dbb86231dcf341e73570b57a10aad6278989e0c50c6f5959a43439a8a9146bb9
-generated: "2026-04-08T19:03:28.347782848Z"
+digest: sha256:baf167465e08bfba842267aeb17c8aacc598342766761ceba7e82839d5952e11
+generated: "2026-04-10T01:37:49.479823098Z"

clusters/cl01tl/helm/postiz/Chart.yaml

@@ -32,14 +32,14 @@ dependencies:
     version: 1.0.0
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.4.0
+    version: 2.5.0
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.11.2
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
-    version: 0.5.0
+    version: 0.6.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/prowlarr/Chart.yaml

@@ -10,7 +10,9 @@ home: https://docs.alexlebens.dev/applications/prowlarr/
 sources:
   - https://github.com/Prowlarr/Prowlarr
   - https://github.com/linuxserver/docker-prowlarr
+  - https://github.com/onedr0p/exportarr
   - https://github.com/linuxserver/docker-prowlarr/pkgs/container/prowlarr
+  - https://github.com/onedr0p/exportarr/pkgs/container/exportarr
   - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
   - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/volsync-target
 maintainers:

clusters/cl01tl/helm/prowlarr/templates/external-secret.yaml

@@ -0,0 +1,18 @@
+apiVersion: external-secrets.io/v1
+kind: ExternalSecret
+metadata:
+  name: prowlarr-key-secret
+  namespace: {{ .Release.Namespace }}
+  labels:
+    app.kubernetes.io/name: prowlarr-key-secret
+    app.kubernetes.io/instance: {{ .Release.Name }}
+    app.kubernetes.io/part-of: {{ .Release.Name }}
+spec:
+  secretStoreRef:
+    kind: ClusterSecretStore
+    name: vault
+  data:
+    - secretKey: key
+      remoteRef:
+        key: /cl01tl/prowlarr/key
+        property: key

clusters/cl01tl/helm/prowlarr/values.yaml

@@ -20,6 +20,27 @@ prowlarr:
             requests:
               cpu: 10m
               memory: 200Mi
+        metrics:
+          image:
+            repository: ghcr.io/onedr0p/exportarr
+            tag: v2.3.0@sha256:af535d94061cf97a52e1661945ffba78c03f9443eae7c0da1a80a5a4be56b520
+          args: ["prowlarr"]
+          env:
+            - name: URL
+              value: http://localhost:9696
+            - name: PORT
+              value: 9792
+            - name: APIKEY
+              valueFrom:
+                secretKeyRef:
+                  name: prowlarr-key-secret
+                  key: key
+            - name: ENABLE_ADDITIONAL_METRICS
+              value: false
+            - name: ENABLE_UNKNOWN_QUEUE_ITEMS
+              value: false
+            - name: PROWLARR__BACKFILL
+              value: true
   service:
     main:
       controller: main
@@ -27,6 +48,21 @@ prowlarr:
         http:
           port: 80
           targetPort: 9696
+        metrics:
+          port: 9792
+          targetPort: 9792
+  serviceMonitor:
+    main:
+      selector:
+        matchLabels:
+          app.kubernetes.io/name: prowlarr
+          app.kubernetes.io/instance: prowlarr
+      serviceName: '{{ include "bjw-s.common.lib.chart.names.fullname" $ }}'
+      endpoints:
+        - port: metrics
+          interval: 1m
+          scrapeTimeout: 30s
+          path: /metrics
   route:
     main:
       kind: HTTPRoute

clusters/cl01tl/helm/rybbit/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.4.0
+  version: 2.5.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.11.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:95bab760e3dc94ba3affe42d2f91bc274ed520865a461cdaac61ba47eab6f39f
-generated: "2026-04-06T17:43:01.938961-05:00"
+digest: sha256:5ded220ac5c6efef7a3c788e4b290fbaf1a55d940e3ef6bbf7e547ad66438b8d
+generated: "2026-04-10T01:18:54.391654304Z"

clusters/cl01tl/helm/rybbit/Chart.yaml

@@ -24,7 +24,7 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.4.0
+    version: 2.5.0
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.11.2

clusters/cl01tl/helm/site-documentation/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.4.0
-digest: sha256:5ec88bea9ba8d9e2452d38648ec03a8247a8445d64278b677233cfd31914a876
-generated: "2026-03-09T22:06:08.514038799Z"
+  version: 2.5.0
+digest: sha256:07260971d1d5532150e8434f25367b78cf7fcf93077ad8c8c3f161f8f524d7bb
+generated: "2026-04-10T01:19:11.015701948Z"

clusters/cl01tl/helm/site-documentation/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.4.0
+    version: 2.5.0
 icon: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/logo-new-round.svg
 # renovate: datasource=gitea-releases registryUrl=https://gitea.alexlebens.dev depName=alexlebens/site-documentation
 appVersion: 0.20.0

clusters/cl01tl/helm/site-documentation/values.yaml

@@ -10,7 +10,7 @@ site-documentation:
         main:
           image:
             repository: harbor.alexlebens.net/images/site-documentation
-            tag: 0.22.0@sha256:3310620f9bad0184d6ba6c786a3826ce53038c03cca345660a7e422276dbd478
+            tag: 0.23.0@sha256:d185fc8513362aab1663016deb2ce43ed6b4e6077685848f500c28d2d2cfd290
           resources:
             requests:
               cpu: 10m

clusters/cl01tl/helm/site-profile/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.4.0
-digest: sha256:275055bd989762de64a6ffdbae107739a3754346aaf61c197fd6592d043de3e0
-generated: "2026-03-09T22:06:19.3714896Z"
+  version: 2.5.0
+digest: sha256:23a1c7250f90275f7a4a4c50c5322a0cf5fa76cf584fbbee55acdc480ccd5e60
+generated: "2026-04-10T01:19:28.071629608Z"

clusters/cl01tl/helm/site-profile/Chart.yaml

@@ -21,7 +21,7 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.4.0
+    version: 2.5.0
 icon: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/logo-new-round.svg
 # renovate: datasource=gitea-releases registryUrl=https://gitea.alexlebens.dev depName=alexlebens/site-profile
 appVersion: 3.16.1

clusters/cl01tl/helm/site-profile/values.yaml

@@ -10,7 +10,7 @@ site-profile:
         main:
           image:
             repository: harbor.alexlebens.net/images/site-profile
-            tag: 3.16.1@sha256:656182fade379a0e8f1e6780c36bb64fe1374afbc8f06894126043105f66d29a
+            tag: 3.17.0@sha256:22c5bebe1148c019cdd50c2da06d9e8679e1b2653762cb3f3febf1aba75c309f
           resources:
             requests:
               cpu: 10m

clusters/cl01tl/helm/site-saralebens/Chart.lock

@@ -0,0 +1,9 @@
+dependencies:
+- name: app-template
+  repository: https://bjw-s-labs.github.io/helm-charts/
+  version: 4.6.2
+- name: cloudflared
+  repository: oci://harbor.alexlebens.net/helm-charts
+  version: 2.5.0
+digest: sha256:434b9afd936a8f82620beb6640c5bdbaeb297ad681e136e059aa2fc72d2d1ad1
+generated: "2026-04-10T02:22:51.818160333Z"

clusters/cl01tl/helm/site-saralebens/Chart.yaml

@@ -0,0 +1,27 @@
+apiVersion: v2
+name: site-saralebens
+version: 1.0.0
+description: Site Sara Lebens
+keywords:
+  - site-saralebens
+  - astro
+home: https://docs.alexlebens.dev/applications/site-saralebens/
+sources:
+  - https://gitea.alexlebens.dev/alexlebens/site-saralebens
+  - https://github.com/withastro/astro
+  - https://harbor.alexlebens.net/harbor/projects/11/repositories/site-saralebens
+  - https://github.com/bjw-s-labs/helm-charts/tree/main/charts/other/app-template
+  - https://gitea.alexlebens.dev/alexlebens/helm-charts/src/branch/main/charts/cloudflared
+maintainers:
+  - name: alexlebens
+dependencies:
+  - name: app-template
+    alias: site-saralebens
+    repository: https://bjw-s-labs.github.io/helm-charts/
+    version: 4.6.2
+  - name: cloudflared
+    repository: oci://harbor.alexlebens.net/helm-charts
+    version: 2.5.0
+icon: https://web-assets-3bfcb5585cbd63dc365d32a3.nyc3.cdn.digitaloceanspaces.com/alexlebens-net/logo-new-round.svg
+# renovate: datasource=gitea-releases registryUrl=https://gitea.alexlebens.dev depName=alexlebens/site-saralebens
+appVersion: 0.20.0

clusters/cl01tl/helm/site-saralebens/values.yaml

@@ -0,0 +1,24 @@
+site-saralebens:
+  global:
+    fullnameOverride: site-saralebens
+  controllers:
+    main:
+      type: deployment
+      replicas: 3
+      strategy: RollingUpdate
+      containers:
+        main:
+          image:
+            repository: harbor.alexlebens.net/images/site-saralebens
+            tag: 1.1.0@sha256:118dd5c65edcc0c77b00bbb6d9c70aab307aa04ba211f3fd74435e9b06c38304
+          resources:
+            requests:
+              cpu: 10m
+              memory: 40Mi
+  service:
+    main:
+      controller: main
+      ports:
+        http:
+          port: 80
+          targetPort: 4321

clusters/cl01tl/helm/stalwart/Chart.lock

@@ -7,9 +7,9 @@ dependencies:
   version: 7.11.2
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.5.0
+  version: 0.6.0
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:c4a92f0283952a59f2e4add1a1b9522d2f9eb0a37dce32aa6104e3087c0b5503
-generated: "2026-04-06T20:21:29.186267-05:00"
+digest: sha256:d7c2cebff885977642306d8f55fe9547ab80d26f360986f873f3106789f50083
+generated: "2026-04-10T01:38:12.691274606Z"

clusters/cl01tl/helm/stalwart/Chart.yaml

@@ -26,7 +26,7 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
-    version: 0.5.0
+    version: 0.6.0
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: volsync-target
     alias: volsync-target-config

clusters/cl01tl/helm/tubearchivist/Chart.lock

@@ -4,6 +4,6 @@ dependencies:
   version: 4.6.2
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.5.0
-digest: sha256:bbceeb6ebc7a358798e706280aa2eaba8b47b018ea0fb736b30ece5419979c4e
-generated: "2026-04-07T19:36:53.116343-05:00"
+  version: 0.6.0
+digest: sha256:2b8f3071852e7025428e57e8460f981fbd9192184ac4afb4cd23ba6b4d90f097
+generated: "2026-04-10T01:38:33.594012137Z"

clusters/cl01tl/helm/tubearchivist/Chart.yaml

@@ -24,7 +24,7 @@ dependencies:
     version: 4.6.2
   - name: valkey
     alias: valkey
-    version: 0.5.0
+    version: 0.6.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/tube-archivist.png
 # renovate: datasource=github-releases depName=tubearchivist/tubearchivist

clusters/cl01tl/helm/unpackerr/values.yaml

@@ -57,6 +57,25 @@ unpackerr:
             requests:
               cpu: 10m
               memory: 10Mi
+  service:
+    main:
+      controller: main
+      ports:
+        metrics:
+          port: 5656
+          targetPort: 5656
+  serviceMonitor:
+    main:
+      selector:
+        matchLabels:
+          app.kubernetes.io/name: unpackerr
+          app.kubernetes.io/instance: unpackerr
+      serviceName: '{{ include "bjw-s.common.lib.chart.names.fullname" $ }}'
+      endpoints:
+        - port: metrics
+          interval: 1m
+          scrapeTimeout: 30s
+          path: /metrics
   persistence:
     storage:
       existingClaim: unpackerr-nfs-storage

clusters/cl01tl/helm/vaultwarden/Chart.lock

@@ -4,12 +4,12 @@ dependencies:
   version: 4.6.2
 - name: cloudflared
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 2.4.0
+  version: 2.5.0
 - name: postgres-cluster
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 7.11.2
 - name: volsync-target
   repository: oci://harbor.alexlebens.net/helm-charts
   version: 0.8.0
-digest: sha256:1b1949361ed77479733f8634a2ac6d74d4d8ba3144339446f5508643a0b57a31
-generated: "2026-04-07T20:19:48.079671-05:00"
+digest: sha256:500156ef088e834da3257faa73575a6e7835c5d8e8ec44b7e3567cdfa09d083f
+generated: "2026-04-10T01:19:44.418982694Z"

clusters/cl01tl/helm/vaultwarden/Chart.yaml

@@ -22,7 +22,7 @@ dependencies:
     version: 4.6.2
   - name: cloudflared
     repository: oci://harbor.alexlebens.net/helm-charts
-    version: 2.4.0
+    version: 2.5.0
   - name: postgres-cluster
     alias: postgres-18-cluster
     version: 7.11.2

clusters/cl01tl/helm/yamtrack/Chart.lock

@@ -7,6 +7,6 @@ dependencies:
   version: 7.11.2
 - name: valkey
   repository: oci://harbor.alexlebens.net/helm-charts
-  version: 0.5.0
-digest: sha256:473de03f0404ca8c53e85ea2a22797a8ba040102c6dca977face60f81f3130e4
-generated: "2026-04-07T20:57:56.63402-05:00"
+  version: 0.6.0
+digest: sha256:499d9f4e23d4d10b156c2a41ff0b08570daaed15294f790fddd5248beebfa9fe
+generated: "2026-04-10T01:38:53.59511716Z"

clusters/cl01tl/helm/yamtrack/Chart.yaml

@@ -25,7 +25,7 @@ dependencies:
     repository: oci://harbor.alexlebens.net/helm-charts
   - name: valkey
     alias: valkey
-    version: 0.5.0
+    version: 0.6.0
     repository: oci://harbor.alexlebens.net/helm-charts
 icon: https://cdn.jsdelivr.net/gh/selfhst/icons/png/yamtrack.png
 # renovate: datasource=github-releases depName=FuzzyGrim/Yamtrack

hosts/ps08rp/blocky/config.yml

@@ -108,7 +108,6 @@ customDNS:
     jellystat                       IN      CNAME   traefik-cl01tl
     kiwix                           IN      CNAME   traefik-cl01tl
     komodo                          IN      CNAME   traefik-cl01tl
-    kyoo                            IN      CNAME   traefik-cl01tl
     languagetool                    IN      CNAME   traefik-cl01tl
     lidarr                          IN      CNAME   traefik-cl01tl
     mail                            IN      CNAME   traefik-cl01tl

hosts/ps09rp/blocky/config.yml

@@ -129,7 +129,6 @@ customDNS:
     jellystat                       IN      CNAME   traefik-cl01tl
     kiwix                           IN      CNAME   traefik-cl01tl
     komodo                          IN      CNAME   traefik-cl01tl
-    kyoo                            IN      CNAME   traefik-cl01tl
     languagetool                    IN      CNAME   traefik-cl01tl
     lidarr                          IN      CNAME   traefik-cl01tl
     mail                            IN      CNAME   traefik-cl01tl

renovate.json

@@ -76,10 +76,10 @@
     {
       "description": "Specific app grouping overrides",
       "matchPackageNames": [
-        "/(^|/|-)(argo-cd|bazarr|cilium|dawarich|element-web|home-assistant|immich|komodo|kyoo|plex|postiz|rook-ceph|roundcube|rybbit|tdarr|traefik)/",
+        "/(^|/|-)(argo-cd|bazarr|cilium|dawarich|element-web|home-assistant|immich|komodo|plex|postiz|rook-ceph|roundcube|rybbit|tdarr|traefik)/",
         "/^rook(-ceph|/rook|/ceph)/"
       ],
-      "groupName": "{{#if packageName}}{{{replace '^.*(argo-cd|bazarr|cilium|dawarich|element-web|home-assistant|immich|komodo|kyoo|plex|postiz|rook-ceph|roundcube|rybbit|tdarr|traefik).*$' '$1' packageName}}}{{else}}{{{replace '^.*(argo-cd|bazarr|cilium|dawarich|element-web|home-assistant|immich|komodo|kyoo|plex|postiz|rook-ceph|roundcube|rybbit|tdarr|traefik).*$' '$1' depName}}}{{/if}}",
+      "groupName": "{{#if packageName}}{{{replace '^.*(argo-cd|bazarr|cilium|dawarich|element-web|home-assistant|immich|komodo|plex|postiz|rook-ceph|roundcube|rybbit|tdarr|traefik).*$' '$1' packageName}}}{{else}}{{{replace '^.*(argo-cd|bazarr|cilium|dawarich|element-web|home-assistant|immich|komodo|plex|postiz|rook-ceph|roundcube|rybbit|tdarr|traefik).*$' '$1' depName}}}{{/if}}",
       "groupSlug": "unified-{{{groupName}}}"
     },
     {